last executing test programs: 47m16.705976611s ago: executing program 3 (id=1095): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$dupfd(r3, 0x0, r3) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0xfffffffffffffff3, 0x80000) r4 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x3, @loopback, 0x80000001}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="86aa308890bf47f199b3fcc8d975081b658bb883d4a984b31a7370c5629a03dcd2e50c1491f1a67ba5430b56f95118ad7318d7bd90c9faeda896bb30ae56a7d0a6e49bf3775a378d69a81e1efa9c94c3a278c16ce6f7291929e1500d6e8ff1c8791646e60764ec4b42f462e187a1df63dc943c80ce0f643cdd7910d976d238dce9617833f388b05a734b68294ef5", 0x8e}], 0x1}}], 0x2, 0x4001c00) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={0x50b01, 0x0, 0x70c7b76a03d67062}, 0x18) mkdirat(r6, &(0x7f0000000380)='./file0\x00', 0xe) 47m15.605365623s ago: executing program 3 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 47m14.478481976s ago: executing program 3 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_io_uring_setup(0x31c7, 0x0, &(0x7f00000012c0), &(0x7f00000005c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) getxattr(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40004840) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0xbd, 0x4) iopl(0x3) mlockall(0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 47m13.239203304s ago: executing program 3 (id=1106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000009c0)="0000fc00607bef8eb2bafd0e6083d21ef8b1c6e9ed7ad8f2dd5889e21bd50ef4ae3fdaf23bae3824f4022d14adcb8e43b7fdefe2bb594551881d793d650d0b404ec21499a841e08e2137ddff0c58efc9", 0x50, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 47m12.05274229s ago: executing program 3 (id=1109): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0xb0100) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x45c11, 0x1000, 0x8000003, 0xbc}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) getsockname$l2tp(r5, 0x0, &(0x7f0000000040)) r6 = dup(0xffffffffffffffff) userfaultfd(0x80001) setsockopt(r6, 0x1, 0x20, 0x0, 0x0) 47m9.874942109s ago: executing program 3 (id=1116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0x200, 0xd0, 0x200, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, [0x0, 0xffffffff], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x6b}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [0x0, 0xffffffff], 'sit0\x00', 'dvmrp0\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x8, 0xf7}}, @common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x7, 0x7f, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x97, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r4 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x5) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x4, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x403, 0x5, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x8000, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x10000, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x8000, 0x100000001, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7ff, 0x1, 0x0, 0x4, 0x0, 0x1, 0x8000000, 0x9, 0x0, 0x0, 0x2, 0x20001, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10]}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x3920e, 0xffffffffffffffff, 0x5, 0x1, 0x9000000, 0x6}) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000640)) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x3, 0x9, 0x2, 0x8a56}) 47m8.163963764s ago: executing program 32 (id=1116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0x200, 0xd0, 0x200, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, [0x0, 0xffffffff], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x6b}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [0x0, 0xffffffff], 'sit0\x00', 'dvmrp0\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x8, 0xf7}}, @common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x7, 0x7f, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x97, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r4 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x5) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x4, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x403, 0x5, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x6, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x8000, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x10000, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x8000, 0x100000001, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7ff, 0x1, 0x0, 0x4, 0x0, 0x1, 0x8000000, 0x9, 0x0, 0x0, 0x2, 0x20001, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10]}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x3920e, 0xffffffffffffffff, 0x5, 0x1, 0x9000000, 0x6}) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000640)) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x3, 0x9, 0x2, 0x8a56}) 18m32.741894375s ago: executing program 5 (id=6098): socket(0x200000100000011, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRES64=r0]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)) 18m32.358370851s ago: executing program 5 (id=6102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 18m32.357191778s ago: executing program 5 (id=6103): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x2, 0x1a, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'f'}, @sadb_x_sec_ctx={0xf, 0x18, 0x2, 0x11, 0x6c, "e45a6927de470f48b98cb616f766e2bf25e109700bc58c625ea2192f4a606f8d2e5f932dd03a69c02606a807f0c560aecc8385aa4a7111039c0d1b72484029784b68874abecb18c08e421a5eea0726a6e1c11f1f0bc87c3cadc39039b4f8f1c18ca87cd2c06e6175f85b5b9b"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0xd0}, 0x1, 0x7}, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f00000001c0)={0x1}) lseek(r2, 0x81, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 18m32.200530253s ago: executing program 5 (id=6104): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 18m32.123167883s ago: executing program 5 (id=6105): io_setup(0x4, &(0x7f0000000040)=0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000008c0)="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", 0x390}], 0x1}}], 0x2, 0x4048884) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @private1, 0x1}, 0x1c) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) socket(0x2, 0x80805, 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) munlockall() io_destroy(r0) 18m32.007639933s ago: executing program 5 (id=6106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {}, {0x0, 0x1, 0xfffffffffffffffe}}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0xf000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="36abf5eb0d32", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 18m31.787010877s ago: executing program 33 (id=6106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {}, {0x0, 0x1, 0xfffffffffffffffe}}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0xf000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="36abf5eb0d32", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 3m4.848552299s ago: executing program 6 (id=9945): getresuid(0x0, &(0x7f0000003240), &(0x7f0000005700)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xd, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_delete(0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r3 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r3, 0x28, 0x3c, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7fec}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m59.779096095s ago: executing program 6 (id=9960): r0 = socket(0x10, 0x6, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_pidfd_open(0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x250, 0x1a8, 0xfeffffff, 0x0, 0xa8, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0xa0, 0xd8, 0x0, {0x0, 0x7}, [@common=@ah={{0x30}, {[0x0, 0x4]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x0, 0x0, 0xffffffff, 0xf0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x5}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0xff000000], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 2m58.564530075s ago: executing program 6 (id=9962): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0]) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x1ff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 2m56.941081066s ago: executing program 6 (id=9966): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x100, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x1, 0x7fffffff, 0x0, 0xf7, 0xb, 0x80000000000000, 0x800, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) mount$9p_xen(0x0, 0x0, &(0x7f0000000180), 0x244404, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1000, 0x10, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x428000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) 2m56.195408452s ago: executing program 4 (id=9968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x100000000000000, &(0x7f0000000140)="cca9"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f000000000006"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) sendmsg$nl_route_sched(r7, 0x0, 0x880) 2m54.780393078s ago: executing program 4 (id=9970): syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r1, 0x402c542b, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300fb, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x830200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 2m54.718042604s ago: executing program 6 (id=9971): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{r0}, 0x0, &(0x7f0000001200)='%pI4 \x00'}, 0x20) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001500000087f9c4e235266e2313c9ca3c704374b44dab28f72986896276c8741d50ad1f9100449d75082778b110f0a6daf5d03a7c8163d45a292051cca6e7c603af1903a0448a64388a255d9fa13b0840dd28a72c7a2ade59a4f2a0db20d95f12bec2df898a1e97369e77bb0e9c04a9600139009b6226"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"/16], &(0x7f00000012c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m53.998331158s ago: executing program 6 (id=9975): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ifreq(r6, 0x8922, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_flags=0x1}) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2m51.248782872s ago: executing program 4 (id=9976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001) r2 = fanotify_init(0x4, 0x80000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) listen(r3, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x41) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r5 = socket(0x22, 0x2, 0x1) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg$kcm(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) fanotify_mark(r2, 0x641, 0x1019, 0xffffffffffffffff, 0x0) fanotify_mark(r2, 0x1, 0x8001023, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) 2m49.943059347s ago: executing program 4 (id=9981): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0x4, &(0x7f0000000180)={0x5, 0x8000000000000001}, &(0x7f00000001c0)) r4 = epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@newsa={0x114, 0x16, 0x1, 0x2000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@lifetime_val={0x24, 0x9, {0x1, 0x9, 0x7fff, 0x8000}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@access_user}, {@msize={'msize', 0x3d, 0x7ff}}, {@cachetag={'cachetag', 0x3d, '/proc/stat\x00'}}, {@cachetag={'cachetag', 0x3d, '9\x9e\x9f'}}, {@access_any}, {@cache_none}, {@nodevmap}, {@cache_none}]}}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000340)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x4, 0x0, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7e}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m48.071113789s ago: executing program 4 (id=9984): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0xf, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x0, 0x0]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0xffffffff, 0x0]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8020}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x600, 0x1, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 2m46.454327812s ago: executing program 4 (id=9988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff02000000000000", @ANYBLOB], 0x50) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000ffff000000002401000000000000004305000f100000000100000000000040080022eb00000000200000000200000000000000000000000800655800"/122], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(r5, 0x400, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x44040200) socket$rds(0x15, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) 2m37.758956397s ago: executing program 34 (id=9975): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ifreq(r6, 0x8922, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_flags=0x1}) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2m30.33541735s ago: executing program 35 (id=9988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff02000000000000", @ANYBLOB], 0x50) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000ffff000000002401000000000000004305000f100000000100000000000040080022eb00000000200000000200000000000000000000000800655800"/122], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(r5, 0x400, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x44040200) socket$rds(0x15, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) 1m22.91406699s ago: executing program 1 (id=10159): socket$inet_smc(0x2b, 0x1, 0x0) r0 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000440)="629438ee43fecc8a3d2330785427f9824aa6bb4142dba59c03d06daa2047c1943585c66fa7828babd101dae941eb49b4e3748dbe57b8a95ef1807cfc7b0a6739e9e0b2a62f731e7a2edf1b63a8e366a76fd6a8e0b9974fb4068a340b82b2eee2d5c7bdf2c14ade30e1e1d05ecc73a14e0f0f259550276739a3a8a017c34b3f2f5b2236e9f5f2040e89abd34fb05f818cb6f8fdcc15ada603f0", 0x99, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0xe9083, 0x0) 1m19.256803093s ago: executing program 1 (id=10167): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0f01d166b9800000c00f326635004000000f300f0f7000a7f4660f3a0b4100cd00e6f20f9125f20f38f13bf20f2a88e3003e0f01c8", 0x35}], 0x1, 0x46, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x4, 0x10, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x2, 0x5, 0x0, 0xfffffffffffffdfc}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x33, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x8, 0x0, 0x401, 0x1, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x3, 0x2, 0xffffffffffffffff, 0x7ffffeff], 0x80a0000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m18.84658279s ago: executing program 1 (id=10170): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x200, 0x100, 0x80, 0x4, 0x20, 0x6, 0x7}, &(0x7f0000000580)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r1, 0x5, 0x3, 0x5}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3ff}}, 0x10) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x2d, 0x0, 0x90) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x19c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xa0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmmsg$inet6(r7, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404000c) 1m17.24601061s ago: executing program 1 (id=10171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfeffff, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 1m16.243394447s ago: executing program 1 (id=10176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(r1, 0x390a, 0x5059, 0x1, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0xfdba7000) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0xffffffffffffffb7, 0x0, 0xfffffffffffffe6c, 0x0, r8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_ext_remove_space\x00', r1, 0x0, 0x3}, 0x18) 1m15.006134443s ago: executing program 1 (id=10179): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz1\x00', {}, 0xffffffff, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x78, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x6a040000) 58.417027904s ago: executing program 36 (id=10179): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz1\x00', {}, 0xffffffff, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x78, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x6a040000) 18.509900332s ago: executing program 9 (id=10284): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'local'}}}]}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000880)=""/214, 0xd6}], 0x1, 0x6c, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$vcsu(0x0, 0x8, 0x101) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) 16.896508693s ago: executing program 2 (id=10286): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4, 0x0, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/143, 0x8f}], 0x1, &(0x7f0000000340)=""/21, 0x15}, 0xe}, {{&(0x7f00000003c0)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000700)=""/125, 0x7d}, {&(0x7f0000000880)=""/236, 0xec}], 0x5}, 0x2}], 0x2, 0x1, &(0x7f0000001480)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) close(r4) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400, 0x40) 14.449056372s ago: executing program 2 (id=10291): r0 = socket(0x10, 0x803, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04226307"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f0000000380)=""/160, &(0x7f0000000440), &(0x7f0000000780), 0x7, r5}, 0x38) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r1, &(0x7f0000005100), 0x0, 0x0, 0x0) r6 = socket(0x1e, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r11, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x5c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8001, 0x2e}}}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x3, 0x4, 0x0, {0x4, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x4, 0x3}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}]}, 0x5c}}, 0x8000) close(r6) poll(&(0x7f0000000000)=[{r7, 0x2000}, {r6, 0x8644}, {r4, 0x4000}, {r6, 0x404}, {r7, 0x70}, {r4, 0x80a8}, {r1, 0x9101}], 0x7, 0x7f) 14.357527579s ago: executing program 9 (id=10292): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_STAT(0x0, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x280000c, 0x713f2679ee1b1b94, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0x15) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/crash_elfcorehdr_size', 0x270000, 0x100) close_range(r5, r5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) write$qrtrtun(r0, &(0x7f0000000300)="0b8393b6167aa5d73dad0a66a7c9277d481343d806b77c2ca991d28a336cca04457118d40ecc80b9e740666d460730b94c5c0f5ade0536edc69b7b01a28dac44547b236e712cfeef6b66091959ab54409799dc141471577771cafeb2", 0x5c) write$qrtrtun(r0, &(0x7f0000000780)="9d8dfa5e53b6183d874f9e93a18dd009a09582ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315424fa0a1622da79faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d479ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c720f36d957944b3b979cfaef6a51a7aff0560787261522243b2911ca55d24db82e20b7a9544529", 0xd7) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000380)={0x0, 0x0, r6}) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"af0014920c989bde943127351c7e048fe805d44569c987d51286ac5e80b0961cfe3629729c82e28c53b31e3ecbb8722bff9c0906027d5cb6fbd929cb4b5e657cc88a443809e6a720828c27b6519e7c18904d67528373733934aa5240afd60544d489e1ec3779ac45095c12c6c5f13c086306dfbbd31926b74150ff2c87db2be1d995e9b3a16fb7360de12618b05d94c291acfcdab84c919de60133f54a0a18d2517c1d0de417ae39fec1c9fa306573205051a9880da1f213b9a27c22b72d42d92b7b260b41bcc1868a0404936774ea5209f02929ec3eef4298818ddb708de6c0e1fda05436037d7d4042d2de3adebc8a62f58ec6ccb4160435c4393ba913250b56ec2fce544a01a5a3ce4363fd497fb256910f31e9416f5b719d64f931bd6d71b54787841b3e49e01fe6ac9598ddb5ef1aeb3d1cabb75845d46806a494b6cf89ec9c8203b92dd0dadc5a3c02545cd005b5f26b7d2b848cb684cb58245d591472d5109e7fbe1175656d729fdd689af57802b33d7d53d427aa57eb0af7a63d9f73be83cd9c12bd06463083b4cc853aad416e9faf484fa069d3b7599b6fc6d94152811403201b91da2547ff6721b0ea237c37464b47b3b4f37384e50ba5773a63356991a5abef659e089cc95e5c3b6d8428115efcf9e89e2743b167d7b9824392d868c159fd1264bea8b9b8b26769d15a27df3af350e2a6e9e37b35c153bf980e8ad15de3b0f3add5f98eb2cbc03eeb2b04e6fb032991d7a88b14c7d2cf2959fc4ed27c4c93c13f5760d0803f10afb91effb45967b4793c58e4bc2e4348c93b4e59f1544a01e89530f6056cda3f972050ae79d9297af71cce0d82c764db2422967f05c9847715c66321e8ab0075a361e8fd78a956074945e687ec1ad01f8dfeb7f3ae2c25daff35617a5d752ad5b019689f10c789d0196f73011f5a4e002aebb676ccb2d8b92ff6c1eb60de10ed0d42f2d19fe96786938eca0fd09a3f16f7b52ef806183282c05ff9fccf96abd096b442c73c494c78c4161ce0599bf6e637664f5dbefa129e69a0d53525d77f871716052385649c1249a402a4a9ecadfd7182a4aba3fc48d76890dfe8a5442ff1b833b95fdb7ae5f052e5c18e9b0ad482ed80c4567f0d0645e6525e3390195b3a4314ab063ffca639d2b181efe15d5bb09e967900fd55ad9db7f6ba99268e0d7e2785c5b14f801b16b6fe9966bb3fa88352bc2ca79aa9a77ec5f9c271dcc62b6124a4d5ed1014fa6eb98521d4be4ca4323311d39e44002e71469326056d98af69fd42eed1dfec48d191587b35e2641abe8c80a2553b92cb43feea49505b5b5ca35dfaf06c693730033ebcad45b6b8026d4722b5c7e13d69269808f438816f77a7b1ed2d31ab44968657e70a51e8d98e520e3628014a09e55f36ca5c4c630d687b20e5a7bdfd6d43613fd3738c8ec1464561586987388885b7a424c949a3110e5de795ffdcf1ef43fb8b5b0364cdb0e9a62c1c6922f08125d456f0ee5d58fa670ff071a8d5b57c06efe30d960f9a67d3dd7dd6ec13c799f9b89d90593ba794c5c582f8bd583af0a59043a1da36cee8e2cc173610960e33300ec48cf7281887ffe66e7ec113a29ed339556d84d638ae9554bb20f2a7695da8bcad10e5f155fe5d54eb511087f7abb4a8ae9e78e233b1e079a44c9cdf2529ed3166c24f80a2bda3b2dfdd2e1c2f650cc35fccf8cb17c03681c6f379f535eeaf46caa1dd95f0b72ea6cf301f2d713844b36c7e90e052528f04a668e1dc5ed11e95bbb86268c712af3f6c77d538c9d3dafeceaacc7ba6b20d9266d75c7470d627725700bfd36a9faf5488532a0871a00e18466f3499e3e3270513168d05f52472045b8558d3fb7880805b6fe3a56b3df9eaea72d147f94ee09e763fcf66d0c71b708fb842bbe619eeeaf483fa717864ab435ca03503285591364727a3615582c80d2023897f7bfdda9b00d095ec11f42482f3851a9232ed09ec6733d54020a9e3b98cb3a014f094e9d968672632a30f967a6d2f00c64fb0aefbeb64510edca5496c9f69379f71412f08fe6afeeb604040a42f00290bc04a40f66f0b84c9c6d7e4d1bc213ed49142215b259be08a0a305c68cbec769ce195ea62b7a2ce632da0a98b469284fd7802bb8c47943ac1c8a7a2b0ee36ed45cde2d13cc00ecc11ca9516d9e917fa28d703566b8d5743c5aba0da662f0446768c6d0df6773d1b0c46dac6a6213aa7b5095a8bd9f34048394a8baac9ec65d740ad8acb8eb683702eaf509c30b547bf355561ca00841efdccd413295a430344d17d2d5f4f435d0a33fafe1b4f6826e9d91436b379cc46039551997e54692487562f65a406b769f2856d37c87a73e2e3738c9afdfa5e0f088bbd2799c7c722c23a7cc37266af557beecb9cc8340bc76ba85a147530f3a9bd8cfe82358c0d799f0687540d463e0f010d1e914f043027284292bf31af75301e27689910393e41f877832797dd7c184249e7b2ec0a79b0decb9a3eead5b3c82ac60fe1485829bf75b8af597b5fd9e47460ebb6d809733eb790027094b019ef2bfb76d75876a5e1e312e80e841c5e074c78b35be6a4070c99372dbb13dc27966a8d448b8e3225b11af907985f3142d41da70a682166814fce9e535cca37058bbb3a02894f6ada82c266e763f431d7e1926da2fc86805b02d6af712c82e7a36e667bd3091661be9cc0cdbd3b3cc690594cf8bac39dd9dac1f883cfb0e500759b0e5dc36721b3ed452addc26d39733a2d76d852d897298009dea9546bae66e9aac7f35277e025d440ca93fdec4bbd58970a130fc79056af96f81b0461ef0e16d4fb12014313438a4bb95b2f9cac98e24a713ed14b539ceddf55e90b6c000044a24be6597e2c5a397a772d7c493ad53a05d6076b584ee7c1615ee7f9de627ac9d7d0d4a12b5a080a9c4977da436704bc9eb9f1d25ba91498e4b575550a69aab83e9157a910c4b2907ea97bcc171dcb7ff6fa982dee16d5c5aaaf93fcc225a6c67c96e54ead190f9c6f949b8025988a46d29c86cf18623882d5aa996a3ece81881ba63e0e7d62b585a179631c7e22f924be7aad5699af389c6651c92848153007d9929683648c8a3fb102a50d9a3e9c83e6cabeae5f97d7faad7a803f8c6dbd9237fa4bec7b33db2cc4db5cd7b3baf1c4f4ddc1f16ec6484cbd1adecab06617045b2d5bac8d1bf97a37ed2780a967a678095a6849cabd87256dbe46f52c960ba8ead52e666a131abfb019d2ac7dd2b055bf91168322b23821a522d241f27a2e7ef892d589a0e55b606167e53b0725a089cae5ef65f02f8a2f32dedb370bf2dc34dac5218be294e755915b399cece7e5c3fa887909961a3d626e4a43bab7edd193a9bc0a7a764640943a635fec7722ff8b3add819b26b78c4e54ff970c15d6b27971cd135d288f081a66e792a8ee5b2d89d5945a99f4216ac21fd9a61e305b4a908f4cbe38e5ccd5eab65f5962877a570524809dffa4ca0ed90d505601d7d244273f20cc47feca7259bd1362e334be459e25a59d4873fc8ede03744c88599a5e5f2a6fb0ca08d085e40c8bd71a0777f7715153e71f4a67f6bb73bbbcd766a9dd4287671dcf6b7daacc4f4b81b32ea0d0381fc32807fe9393249e596d3d5ae4bc5a1cb3e48d63478679eb381fbe8cafd2c6890ba29c1af695f2597c6b472a163b7584dde7327933b9d5e88e0d77e3a3d526a619966dde7f82c7ab7a67a59ded2c880ee0e2f736f054b7d99cc68df48c28d76ab12762c85d07a1f3215d3d4ef2ebd65b0f7eacf62ec12997ccdada731992513263a06e063c27eccfdb3c9d1199136c1a2c3d6b5ea6b2e96c9aa6be3bfbda408b2779ad4eba91809a495c1b872e40d49b0acf4b19b4677e6ea8d07b9a621816c4c5f0e5aa364d4803567da0b2b646604563b31aaa298130576690cbab52bf1ddad7c64a7a416ceb36d6b3202f377ed003e8d74cabd4a6a7be18c95716022cc30c45157d6743785746cf8b0e21ec3208336ab0a43ad9c058fffa3021f84ca8b037dea55254ab944493ca03d025a4b42df3e5b830b81471cddf81fd14aed18e45cfed27b1ef015827942f833a0eee4cc0fcd57f0180f83f32e17d27e4784e42eb1a256404aa6e12f9daabddb907230b20693f3bc74723be6808d95c6463ef7bb6bc4a756fdc805ef4077303e5cd504e6c1754ee8303ee92b94808782984f75c0df49436d3859c092133b0545dac0d8f84fc95a1f0f38e4ecbe3f935d33e86b97bb11ca6f502a602bc7e05b4e6514ddc8ae4d8231874b350b32f96ff6cfbe03f1bf5a0fda73c15eca00afe85c026f5e34e699910ab16502b224b8f383a9a863ca351a1e87c17baadb3f7141aa1295a2a6be4d88d1347da9c356ba9b3bfcc678b58add1b224a0c9b7c3cc4c828abc56acd320e8a8ad22da90a0cf6ae40a471c150581da040297aed0e4889c5963bd8c1415acecbd932f9acda87315e3b2dade276b8324dc7d95141cdd8c4fba82c834a95f9efeb2c74c31e7fd32f96a6a68d9e9942c0bdc55bedd1617e47420877b9f640094a37ceea39656468215ebe789a277f585adc1cc0285b53e33afae1616b0806aeed78b6cc4da54e3bdfa3d49ead4e4fa3623f86a4dfa3042ed403684c62a5d148a30c99c24c3cf9a8858e02800e49e0eed84472a559c9f208f6c3310050e4c5948320b5b4eeefe583bb0bcc0bc01356e76e3465f66a7d0c56ca7abc069db5bd7ad20ec01307f391b5bc890b5034271ee31d5bd374a9422a08ce949667512c8d0bb60eb5d4d22fa0e2a5d172edc7b7386abe63222ef8fc5c676828a1441c5ed19ed5827b0d73d568efc51f46f65ea4f205ac26924d6a7f11477fe23049e0de65bd534c81756556c1cd8bc70b3ce71e4e13d44500773e0767bc735c98f0e1d06dc79e43b946a2faaf698e188cf5909e433edbc546beffcbdea76064ff9d5d56273ca05af42c541b896bc5a942665599c9a8f52db36dbd6d42e8f9bb3446df5f44e3971eb408d0c63381b4aa5997441e01a5eff9fa51d82b7d60d8c3ead784e50b562db074b19e855e8290896b808611c40ed7e0691f758103208900d69cd4c86310318d339eeb473b4bea27be94622560cf35416eea7333bb72110afe202dfcc55c755ed32ea9b4851378b554546b52ebd71b90828733ac3040daf1e3d23bfcadd20bb9248731ab11155aebd259b7e693ebad5d43e6a85f14ea317f31eca905634f9e8d5b1ff73dc5dbd2bbeef6c2965932c885969e00e1939685b472c097b4504c9e6f273e1038045e5ac4010ac232288b77de7d3433a143292f145465b6d1f9020aa4f8405bda4310059b82ad8fd41e698a7824456e11f44e577dc5d5a0eb93b98421a2867c3d40627f9061c1d5689205915c7a91da42348ad3bd12038d84175bddaee423b73c93aebf873c850ef44d66324a80ad0cf268998d71fac6988cb0b1879ebcb6c4c3bce2c45daf73db246bc55fb8221341ef760f5f5264113a437e03cbcf03bb276cdc4100138afc6a1eeb9d90e7f43ce8abbd8be6b9c5b54920f76f07d1557167292feb4c970da3f582d40c0661af8f043e01db8016e2600f655175fa7d705bda3a14d1733ccf6603b7f8709b71f2046211468460791330234fa21f417e6a68cdb1d4496808923a87d02f0ebfb09e102a7c9f7c870c082d6993d10e0de2dbe119ac811848661ab30ab8d7a528acf262bf7d21c2f235e5638be58171b61bed99ac3fef801562aabcf3feff77fe9498d09de3e9c3cf18914392433030595aa31d9c79abc29350a2a2a1d0c2f311246", 0x1000}}, 0x1006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56e41, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0x7, 0xffff}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 14.289502694s ago: executing program 8 (id=10293): pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\n\x00\x00\x00\a\x00\x00'], 0x50) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000300)={0x6, 0x6, {0x53, @struct={0x1, 0x6}, 0x0, 0x8000000000000000, 0x2, 0x8, 0x280000000000000, 0xfffffffffffffff7, 0x41a, @struct={0xfffffff9, 0x2}, 0x7, 0xca7, [0x3ff, 0x5, 0x0, 0x7, 0x2, 0x6]}, {0xcb, @struct={0x8, 0x100}, 0x0, 0x4, 0x59b, 0xffff, 0x6, 0x0, 0xa1, @usage=0xff, 0xfffffff8, 0x4, [0x6, 0x8001, 0x4, 0x10001, 0x9, 0x8]}, {0x2, @usage=0xf, 0x0, 0x6, 0x1, 0x81, 0x5, 0xaf3a, 0x8, @usage=0x43, 0xfff, 0x5, [0x3b07, 0x0, 0xfffffffffffffff8, 0x3, 0x4624, 0x3]}, {0x1, 0xca, 0x7fffffffffffffff}}) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000240)=0x3) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, r5}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r6, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) 12.632616594s ago: executing program 8 (id=10295): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) syz_open_dev$ptys(0xc, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001f80), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) setrlimit(0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x5}}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2204c851, &(0x7f00000001c0)={0xa, 0x8009, 0x0, @loopback, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='L', @ANYRES16=0x0, @ANYBLOB="020028353838cbd42c96bd5000ffdbdf251e00", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000400ffffffff08000400000000000800", @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x240000b1}, 0x4001) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f0000002240)=""/149, &(0x7f0000000200)=0x95) socket(0x2a, 0x6, 0x0) 11.891153217s ago: executing program 7 (id=10297): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r1, 0x40081271, 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r2, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}, 0x2a}], 0x1, 0x10020, 0x0) bind$l2tp(r2, &(0x7f00000000c0), 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(r3, 0xc0384707, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000800)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x4, 0x0, 0x50}, 0x10, 0x157a5, r3, 0x0, &(0x7f00000009c0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x19, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0xfffffffa, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xb, 0xfffffff8, 0x5}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r7, &(0x7f00000000c0)=""/177, 0xb1) read(r7, 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000340)={'virt_wifi0\x00', 0x400}) 11.862869062s ago: executing program 9 (id=10298): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04360702aaaaaaaaaa10206b161c2a858d646e9ec73e7435dcc42a1ae4959a94240fbe34d60f79f99da9b5b3ed61b20a24e9c5fe00dbef2755435cc99803a232167e23b23acec30d47ff17ab6363fe258aad975704ee6cb40fca6104fcd729c100be03f4fafe804eb9c863318e1bcab1e5d589ee755fa1c2"], 0xa) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) open(0x0, 0xa942, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x19, 0x1f, 0x200, 0x0}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0x796c) 11.647214606s ago: executing program 2 (id=10299): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x8, 0x80000) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) 10.443600504s ago: executing program 8 (id=10300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x2c, &(0x7f0000000340), 0x6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000400)={0x980902, 0x4003, @value}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) symlinkat(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x6) pselect6(0x40, &(0x7f0000000340)={0x9, 0x4, 0x7, 0x1, 0x200, 0x8, 0xb, 0x8001}, &(0x7f0000000380)={0x5, 0xd1b7, 0xfffffffffffff801, 0x2, 0x7fffffff, 0x8, 0x3, 0x4}, &(0x7f00000003c0)={0x0, 0x1, 0x2118, 0x7e, 0x4, 0x4, 0x0, 0x1}, 0x0, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x200480c0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x2000) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) 10.168327289s ago: executing program 0 (id=10301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x16, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xf5, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r4, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000d00)={[&(0x7f00000002c0)='(N,\x04\xca\xf3\xbf\x95\x92\xd9\x86\x1e\xa9\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\x02\x06']}) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff8}, 0x1c, 0x0}}, {{&(0x7f00000006c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000700)}, {&(0x7f0000000780)}, {&(0x7f0000000880)="b4b1c175d627a1118a2e2785d7a5e198b8095bcab650ca151ece8b5de91ac74cb6ebf07e0953e8103a7efd91b11772b1d217729d0947244d1e70b994c7c0930db66a6c99acbde131737b3d87383d0e43f403c8", 0x53}, {&(0x7f0000000900)="fd2f866c8bf5c4ec8700d2326fca530d227e1b609f3d4b73c4", 0x19}, {&(0x7f0000000940)="24723f83af63f5cc0a26dc8f61b7df11e088e54c6b9e76a853376575f36846266cac17fdbf65f8baf281969552347e157e747c8cb04d8b681b370fecb2c82a8c905a39213424e9af0579960a6ae9dcbdf0ec5cdcced40b8dae89d58ba051d4b7181fe95fcd52631f2ab6dc3808c65e26a998d54a1d2d722b1d8bb02b33b5943b5f093676a1348d3aa84b0be8e03010185654cb0be7832a2f2d01afa2d222aef671a04794b91b5ec0d3ab59ccdfd07ca63885750f363a7e725f3692e3623eaac06b6305170ee6b6f644", 0xc9}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bcdd17e803fa9edeb8f119e5438964aeecc7b2e2acdb0cd4480f53a6380457bcaf94016e2020f277ee5a5e4631aec05515ae1443fee9840b3b82826499d9fabacf33f6dd96d03c86209cdceea6907033693bc33901205a7fe3b9bdf332ae921d6160ff08d2005f8049c4fa", 0x6b}], 0x7}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, 0x0}}], 0x3, 0x805) iopl(0x3) newfstatat(0xffffffffffffff9c, &(0x7f0000005f00)='.\x00', &(0x7f0000005f40), 0x1000) r5 = getpid() wait4(r5, 0x0, 0x40000000, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xc99, 0x101001) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x10, 0x1014, 0x0, 0x6, 0x0, 0x3, 0xdd2fcb245114ab72}}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0), 0x0) 10.08314995s ago: executing program 7 (id=10302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000104010800000000646a83225c00000000820000060600064000030000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x54) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x2, 0x27}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r8, 0x0, 0x9, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0xffffffffffffffff, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0xc048aeca, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0x5000, 0xffff1000, 0x3}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606000000000000007fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc557aa5509defcb77c236e43b579c0000e5c8d8f8fa71ad876b96069f2e4352c8aa716e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0531d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f486e379601514219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fc0987c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b0700b1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1df5dcf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d5cbefd0b3406af2b3816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b90165a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7ba0ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) r10 = gettid() r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r11, 0x10c, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="04010000160001002bbd7000fddbdf25ffffffff000000000000000000000000fe88000000000000000000000000a4014e2300004e2300000a00804087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x44002}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) 9.177501036s ago: executing program 8 (id=10303): r0 = socket$kcm(0x2d, 0x5, 0x0) iopl(0x3) lchown(0x0, 0x0, 0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000007080)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000006e40), 0x0, 0x80000040, &(0x7f00000070c0)={r1, r2+60000000}) socket$kcm(0x29, 0x7, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000040)=0x8002, 0x4) sigaltstack(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) getpgid(0xffffffffffffffff) clock_gettime(0x6, &(0x7f0000000080)) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000002c0)={0x1, "52ff465780c668cf81c451293aabc90f4b3c3a82dcafbdd39d9be64f46dff5df"}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r7}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x161082, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r11, 0x4008ae8a, &(0x7f0000000940)=ANY=[@ANYBLOB="0000000076ad7df795018b4d70000000000000"]) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 8.311139284s ago: executing program 7 (id=10304): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000140)=0x1) pread64(r4, &(0x7f0000002180)=""/4101, 0x1005, 0x1) 8.127372133s ago: executing program 9 (id=10305): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r1, 0x40081271, 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r2, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}, 0x2a}], 0x1, 0x10020, 0x0) bind$l2tp(r2, &(0x7f00000000c0), 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(r3, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0xffffffff, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x15, &(0x7f0000000880)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000800)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x4, 0x0, 0x50}, 0x10, 0x157a5, r3, 0x0, &(0x7f00000009c0)=[r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x19, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xb, 0xfffffff8, 0x5}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r7, &(0x7f00000000c0)=""/177, 0xb1) read(r7, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000340)={'virt_wifi0\x00', 0x400}) 7.660464355s ago: executing program 2 (id=10306): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x11000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)={r2, r3+10000000}) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x4000011) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x80) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r8, @ANYBLOB=',wfjno', @ANYRESHEX=r8, @ANYBLOB=',\x00']) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x4000, 0x0, 0x0, 0x50313134}}) 7.620066525s ago: executing program 0 (id=10307): madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000003c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200000000000001000000000800170065204e220800"], 0x2c}}, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) statx(r5, &(0x7f0000001340)='./file0\x00', 0x3f40a3fb478fa02c, 0x40, 0x0) write$UHID_CREATE2(r5, &(0x7f00000004c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x65, 0x3, 0x2, 0x101, 0xfffffffd, 0x6, "d04f0a81d6f5ec2339ce855d5f9dd869aa992c3a7df2800f12963032c01dd7593cb41d33c318e9365f3e6c70611db78f0c65aaaf6b0e57d1c08a42ad2df8e7cfcb6e306e171674f67060d5339d366bb406310745c2631994dacad88e99099d5a0c2c10ddbe"}}, 0x17d) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045519, &(0x7f0000000480)=0x1) 6.629753285s ago: executing program 7 (id=10308): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x0, 0x2e, 0x0, 0x0, 0x5, 0x10000, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x67) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close(0x4) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB="08001f0005"], 0x70}}, 0x0) 6.461874667s ago: executing program 0 (id=10309): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[], 0x28}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = creat(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) close(r2) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, &(0x7f0000000240), 0x0, 0x4, 0x90, &(0x7f0000000180)=""/144, 0x0, 0x52, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 6.453076884s ago: executing program 8 (id=10310): syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000880)="ef648929676a3110000000000000000016000000", 0x14) socket(0x1f, 0x2, 0x9e) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000040)={0x7, 0x2, 0x7, 0x4d942c23, 0x4, 0x3}) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) 6.061103129s ago: executing program 9 (id=10311): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, &(0x7f0000000300)={0x7, 0x0, 0x1, {0x0, 0x4001, 0x0, 0x4}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd49", 0x1e}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 4.1341547s ago: executing program 2 (id=10312): r0 = fanotify_init(0x4, 0x101000) fanotify_mark(r0, 0x400, 0x1008, 0xffffffffffffffff, 0x0) fanotify_mark(r0, 0x1, 0x8001023, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r1, &(0x7f0000003680)=[{{&(0x7f0000000000)=@llc={0x1a, 0x207, 0x6, 0x10, 0xa, 0xf1, @broadcast}, 0x80, 0x0}}], 0x1, 0x8041) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0xb6c01) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xc, 0x7cb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000280)={0x1f, @fixed}, 0x65) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="03c9003cdba953e7ca38a158c9e326d52e05bac9f306ad278a61807cc99e8e88"], 0x40) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r9, 0xc01464a6, &(0x7f0000000180)={r10}) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r11, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_BT_VOICE(r5, 0x112, 0x13, 0x0, 0x2) 4.032062043s ago: executing program 0 (id=10313): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0) syz_io_uring_setup(0x6aa2, &(0x7f0000000080)={0x0, 0x40009c0f, 0x20, 0x0, 0x9}, &(0x7f0000000000), &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001e40)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x33}, 0x4000a100) syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) memfd_secret(0x0) 3.935448887s ago: executing program 7 (id=10314): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$setsig(0x4203, 0xffffffffffffffff, 0xff, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) epoll_create1(0x80000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x117) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001140)=@req={0x6f, 0x10001, 0x5, 0x8}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) readv(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') accept4$unix(r7, 0x0, &(0x7f0000000180), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}}, 0x0) 3.815742876s ago: executing program 9 (id=10315): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = io_uring_setup(0x73e5, &(0x7f0000000240)={0x0, 0xc0a9, 0x2, 0x0, 0x31c}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x100010, r3, 0x0) waitid(0x2, r2, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x40080) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x200, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x7, 0x1}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000380)={0x1, 0x3, 0x10001, 0x3, '\x00', '\x00', '\x00', 0x7, 0x101, 0x2, 0x6, "2d4ba4c0e5abc798c6313d400a5d85a2"}) 3.813009344s ago: executing program 8 (id=10316): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4a) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') unshare(0x2000400) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x2183, 0x0) fadvise64(r6, 0x3, 0x100, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000380)='cgroup.max.depth\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0xfffffffffffffffe}) 1.319027086s ago: executing program 7 (id=10317): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) shmctl$IPC_RMID(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10004, 0x800}, [@IFLA_WEIGHT={0x8, 0xf, 0x6}]}, 0x28}, 0x1, 0xffffffea, 0x0, 0x4041041}, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1b30}}) ioctl(r3, 0x8b1a, &(0x7f0000000040)) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x6, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00'], 0x5}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0xa00}]) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) 1.223997062s ago: executing program 0 (id=10318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0x24, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003"], 0x6c}}, 0x0) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x27b, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x50) lsm_get_self_attr(0x67, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 75.792225ms ago: executing program 2 (id=10319): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000500)=0x9, 0x4) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000008000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058", @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2300, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 0s ago: executing program 0 (id=10320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb0}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0xf4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xd}, @IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa14f}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x14, 0x1a, '$\\@#&$$b}%,\\)^-\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xf}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "800400", 0x38, 0x3a, 0x0, @empty, @local, {[@hopopts={0x16}], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @mcast1, @private2}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x20000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d440012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c0001400000000000000001140023800a00010071756f7461000000040002800800034000000114"], 0xd0}}, 0x20050800) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x2, 0x0, 0x0, {}, {0x0, 0x2}, {0x4000000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800100, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r9, 0xc}, 0x8) syz_open_dev$vim2m(0x0, 0x10001ff, 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000007c3e31e40000000074e7861c7a2e9579398587c27b050000000000000000000000000000000000b265e965e4a460c3ce0e5ed0ae156785f02ac4b7ca1703183f982f25721b49e8cabf510b73c394cbbd9b42085951b296df511e159428917dbde151b4c591658cfa438f3294d274"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1088278a}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000840)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000880)={r9, @in6={{0xa, 0x4e20, 0x15e00, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0xfffffffc, 0x0, 0x3, 0xfffffff7, 0x0, 0x1549, 0x2}, 0x9c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) kernel console output (not intermixed with test programs): permissive=1 [ 3145.592663][T10153] ptrace attach of "./syz-executor exec"[30127] was attempted by "./syz-executor exec"[10153] [ 3149.298744][T10183] hfs: unable to load iocharset "io#harset" [ 3150.543701][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 3150.543719][ T30] audit: type=1400 audit(2000000136.493:9172): avc: denied { execmem } for pid=10191 comm="syz.1.9854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3150.836452][ T30] audit: type=1400 audit(2000000136.755:9173): avc: denied { create } for pid=10191 comm="syz.1.9854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3150.989200][ T30] audit: type=1400 audit(2000000136.764:9174): avc: denied { write } for pid=10191 comm="syz.1.9854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3151.098721][ T30] audit: type=1400 audit(2000000136.783:9175): avc: denied { map_create } for pid=10189 comm="syz.6.9855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3151.160597][ T30] audit: type=1400 audit(2000000136.792:9176): avc: denied { prog_load } for pid=10189 comm="syz.6.9855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3151.216246][ T30] audit: type=1400 audit(2000000136.792:9177): avc: denied { bpf } for pid=10189 comm="syz.6.9855" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3151.278742][ T30] audit: type=1400 audit(2000000136.802:9178): avc: denied { prog_load } for pid=10189 comm="syz.6.9855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3151.471485][ T30] audit: type=1400 audit(2000000136.811:9179): avc: denied { bpf } for pid=10189 comm="syz.6.9855" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3151.493482][ T30] audit: type=1400 audit(2000000136.811:9180): avc: denied { perfmon } for pid=10189 comm="syz.6.9855" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3151.514586][ T30] audit: type=1400 audit(2000000136.830:9181): avc: denied { mounton } for pid=10191 comm="syz.1.9854" path="/" dev="tmpfs" ino=11527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3151.729516][T10211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3152.526479][T10213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3153.661388][T10227] new mount options do not match the existing superblock, will be ignored [ 3154.775192][T10230] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 3156.122360][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 3156.122391][ T30] audit: type=1400 audit(2000000141.750:9301): avc: denied { create } for pid=10243 comm="syz.6.9867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3156.394798][T10240] orangefs_mount: mount request failed with -4 [ 3156.466389][ T30] audit: type=1400 audit(2000000141.778:9302): avc: denied { map } for pid=10243 comm="syz.6.9867" path="socket:[124299]" dev="sockfs" ino=124299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 3156.527080][ T30] audit: type=1400 audit(2000000142.115:9303): avc: denied { create } for pid=10248 comm="syz.0.9868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3156.620863][ T30] audit: type=1400 audit(2000000142.115:9304): avc: denied { prog_load } for pid=10248 comm="syz.0.9868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3156.640074][ T30] audit: type=1400 audit(2000000142.115:9305): avc: denied { bpf } for pid=10248 comm="syz.0.9868" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3156.664262][ T30] audit: type=1400 audit(2000000142.115:9306): avc: denied { perfmon } for pid=10248 comm="syz.0.9868" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3157.174461][ T30] audit: type=1400 audit(2000000142.115:9307): avc: denied { perfmon } for pid=10248 comm="syz.0.9868" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3157.278883][ T30] audit: type=1400 audit(2000000142.115:9308): avc: denied { perfmon } for pid=10248 comm="syz.0.9868" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3157.311589][ T30] audit: type=1400 audit(2000000142.115:9309): avc: denied { perfmon } for pid=10248 comm="syz.0.9868" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3157.399822][ T30] audit: type=1400 audit(2000000142.180:9310): avc: denied { perfmon } for pid=10248 comm="syz.0.9868" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3159.127983][T10283] /dev/nullb0: Can't lookup blockdev [ 3161.753475][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 3161.753490][ T30] audit: type=1400 audit(2000000147.129:9454): avc: denied { ioctl } for pid=10305 comm="syz.6.9885" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3162.480718][ T30] audit: type=1400 audit(2000000147.213:9455): avc: denied { create } for pid=10310 comm="syz.0.9887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3162.578748][ T30] audit: type=1400 audit(2000000147.222:9456): avc: denied { create } for pid=10310 comm="syz.0.9887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3162.627728][ T30] audit: type=1400 audit(2000000147.231:9457): avc: denied { create } for pid=10314 comm="syz.1.9886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3162.697494][ T30] audit: type=1400 audit(2000000147.241:9458): avc: denied { ioctl } for pid=10314 comm="syz.1.9886" path="socket:[124387]" dev="sockfs" ino=124387 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3162.760464][ T30] audit: type=1400 audit(2000000147.241:9459): avc: denied { ioctl } for pid=10310 comm="syz.0.9887" path="socket:[124385]" dev="sockfs" ino=124385 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3162.816399][ T30] audit: type=1400 audit(2000000147.241:9460): avc: denied { create } for pid=10307 comm="syz.4.9884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3162.884170][ T30] audit: type=1400 audit(2000000147.250:9461): avc: denied { execmem } for pid=10307 comm="syz.4.9884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3162.949273][ T30] audit: type=1400 audit(2000000147.250:9462): avc: denied { create } for pid=10314 comm="syz.1.9886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3162.993447][ T30] audit: type=1400 audit(2000000147.250:9463): avc: denied { write } for pid=10314 comm="syz.1.9886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3163.055165][T10325] netlink: 'syz.2.9888': attribute type 16 has an invalid length. [ 3163.063145][T10325] netlink: 'syz.2.9888': attribute type 17 has an invalid length. [ 3164.485563][T10336] Unknown options in mask 5 [ 3165.376886][T10354] netlink: 'syz.6.9897': attribute type 21 has an invalid length. [ 3165.385245][T10354] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9897'. [ 3165.419233][T10354] netlink: 'syz.6.9897': attribute type 5 has an invalid length. [ 3165.430732][T10354] netlink: 'syz.6.9897': attribute type 6 has an invalid length. [ 3165.439231][T10354] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9897'. [ 3165.876173][T10362] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9894'. [ 3166.472067][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9900'. [ 3167.478548][ T30] kauditd_printk_skb: 230 callbacks suppressed [ 3167.478562][ T30] audit: type=1400 audit(2000000152.133:9694): avc: denied { create } for pid=10374 comm="syz.4.9903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3167.507743][ T30] audit: type=1400 audit(2000000152.161:9695): avc: denied { create } for pid=10374 comm="syz.4.9903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3167.577862][ T30] audit: type=1400 audit(2000000152.479:9696): avc: denied { read write open } for pid=30127 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3167.622539][ T30] audit: type=1400 audit(2000000152.479:9697): avc: denied { ioctl } for pid=30127 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3167.681634][ T30] audit: type=1400 audit(2000000152.647:9698): avc: denied { create } for pid=10379 comm="syz.6.9904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3167.724082][ T30] audit: type=1400 audit(2000000152.647:9699): avc: denied { create } for pid=10379 comm="syz.6.9904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3167.768714][ T30] audit: type=1400 audit(2000000152.657:9700): avc: denied { write } for pid=10379 comm="syz.6.9904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3167.807738][ T30] audit: type=1400 audit(2000000152.657:9701): avc: denied { read } for pid=10379 comm="syz.6.9904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3167.854999][ T30] audit: type=1400 audit(2000000152.657:9702): avc: denied { read } for pid=10379 comm="syz.6.9904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3167.898359][ T30] audit: type=1400 audit(2000000152.675:9703): avc: denied { write } for pid=10379 comm="syz.6.9904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3172.984495][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 3172.984510][ T30] audit: type=1400 audit(2000000157.512:9838): avc: denied { execmem } for pid=10419 comm="syz.0.9914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3173.626673][ T30] audit: type=1400 audit(2000000157.633:9839): avc: denied { create } for pid=10419 comm="syz.0.9914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3173.686599][ T30] audit: type=1400 audit(2000000157.633:9840): avc: denied { write } for pid=10419 comm="syz.0.9914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3173.785585][ T30] audit: type=1400 audit(2000000158.381:9841): avc: denied { create } for pid=10426 comm="syz.2.9915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3173.815174][ T30] audit: type=1400 audit(2000000158.381:9842): avc: denied { map_create } for pid=10429 comm="syz.1.9916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3173.851078][ T30] audit: type=1400 audit(2000000158.381:9843): avc: denied { prog_load } for pid=10429 comm="syz.1.9916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3173.870911][T10431] netlink: 'syz.1.9916': attribute type 21 has an invalid length. [ 3173.878849][T10431] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9916'. [ 3173.887916][T10431] netlink: 'syz.1.9916': attribute type 5 has an invalid length. [ 3173.895614][T10431] netlink: 'syz.1.9916': attribute type 6 has an invalid length. [ 3173.903373][T10431] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9916'. [ 3173.919215][ T30] audit: type=1400 audit(2000000158.381:9844): avc: denied { bpf } for pid=10429 comm="syz.1.9916" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3173.943660][ T30] audit: type=1400 audit(2000000158.409:9845): avc: denied { perfmon } for pid=10429 comm="syz.1.9916" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3173.968984][ T30] audit: type=1400 audit(2000000158.409:9846): avc: denied { create } for pid=10426 comm="syz.2.9915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3173.992043][ T30] audit: type=1400 audit(2000000158.409:9847): avc: denied { write } for pid=10426 comm="syz.2.9915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3177.453906][T10454] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 3177.462746][T10454] overlayfs: failed to set xattr on upper [ 3177.478218][T10472] ceph: No mds server is up or the cluster is laggy [ 3177.494652][T19111] libceph: connect (1)[c::]:6789 error -101 [ 3177.513650][T10454] overlayfs: ...falling back to redirect_dir=nofollow. [ 3177.521446][T19111] libceph: mon0 (1)[c::]:6789 connect error [ 3177.527593][T10454] overlayfs: ...falling back to index=off. [ 3177.535240][T10454] overlayfs: ...falling back to uuid=null. [ 3177.543229][T10454] overlayfs: failed to clone lowerpath [ 3178.451590][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 3178.451606][ T30] audit: type=1400 audit(2000000162.740:9981): avc: denied { read write } for pid=30127 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3178.543925][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9932'. [ 3178.631304][ T30] audit: type=1400 audit(2000000162.740:9982): avc: denied { read write open } for pid=30127 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3178.660318][ T30] audit: type=1400 audit(2000000162.750:9983): avc: denied { ioctl } for pid=30127 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3178.749691][ T30] audit: type=1400 audit(2000000162.825:9984): avc: denied { create } for pid=10483 comm="syz.6.9932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3178.830741][ T30] audit: type=1400 audit(2000000162.825:9985): avc: denied { create } for pid=10475 comm="syz.0.9928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3178.876108][ T30] audit: type=1400 audit(2000000162.825:9986): avc: denied { connect } for pid=10475 comm="syz.0.9928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3178.898288][ T30] audit: type=1400 audit(2000000162.825:9987): avc: denied { bind } for pid=10475 comm="syz.0.9928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3178.927962][T10495] netlink: 'syz.4.9935': attribute type 33 has an invalid length. [ 3178.935885][T10495] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9935'. [ 3178.969186][ T30] audit: type=1400 audit(2000000162.825:9988): avc: denied { create } for pid=10475 comm="syz.0.9928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3179.023740][ T30] audit: type=1400 audit(2000000162.825:9989): avc: denied { connect } for pid=10475 comm="syz.0.9928" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3179.085189][ T30] audit: type=1400 audit(2000000162.825:9990): avc: denied { write } for pid=10475 comm="syz.0.9928" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3179.492549][T10504] fuse: Unknown parameter 'grou00000000000000000000' [ 3181.839698][ T6560] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 3182.072609][ T6560] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3182.107345][ T6560] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3182.161364][ T6560] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3182.196417][ T6560] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3182.891518][T12364] libceph: connect (1)[c::]:6789 error -13 [ 3182.897535][T12364] libceph: mon0 (1)[c::]:6789 connect error [ 3182.928764][ T6560] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3183.013341][ T6560] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3183.135113][T10544] ceph: No mds server is up or the cluster is laggy [ 3183.645746][T10553] batadv_slave_0: entered promiscuous mode [ 3183.683466][ T6560] usb 7-1: USB disconnect, device number 27 [ 3183.695571][T10532] delete_channel: no stack [ 3183.821565][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 3183.821580][ T30] audit: type=1400 audit(2000000167.773:10199): avc: denied { prog_load } for pid=10558 comm="syz.1.9955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3183.957538][ T30] audit: type=1400 audit(2000000167.792:10200): avc: denied { bpf } for pid=10558 comm="syz.1.9955" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3183.978213][ C0] vkms_vblank_simulate: vblank timer overrun [ 3183.989001][ T30] audit: type=1400 audit(2000000167.792:10201): avc: denied { perfmon } for pid=10558 comm="syz.1.9955" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3184.014064][ T30] audit: type=1400 audit(2000000167.810:10202): avc: denied { execmem } for pid=10558 comm="syz.1.9955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3184.035238][ T30] audit: type=1400 audit(2000000167.894:10203): avc: denied { create } for pid=10560 comm="syz.4.9953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3184.479621][ T30] audit: type=1400 audit(2000000167.951:10204): avc: denied { create } for pid=10560 comm="syz.4.9953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3184.503196][ T30] audit: type=1400 audit(2000000167.951:10205): avc: denied { setopt } for pid=10560 comm="syz.4.9953" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3184.561612][ T30] audit: type=1400 audit(2000000167.951:10206): avc: denied { setopt } for pid=10560 comm="syz.4.9953" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3184.653182][ T30] audit: type=1400 audit(2000000168.035:10207): avc: denied { create } for pid=10558 comm="syz.1.9955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3184.672803][ C0] vkms_vblank_simulate: vblank timer overrun [ 3184.890060][ T30] audit: type=1400 audit(2000000168.044:10208): avc: denied { bind } for pid=10558 comm="syz.1.9955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3187.347897][T10597] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.9962'. [ 3188.980517][T10611] xt_TPROXY: Can be used only with -p tcp or -p udp [ 3189.252863][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 3189.252879][ T30] audit: type=1400 audit(2000000172.852:10349): avc: denied { sys_module } for pid=10603 comm="syz.1.9964" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3189.335629][ T30] audit: type=1400 audit(2000000172.852:10350): avc: denied { module_request } for pid=10603 comm="syz.1.9964" kmod="wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3189.504572][ T30] audit: type=1400 audit(2000000172.983:10351): avc: denied { execmem } for pid=10614 comm="syz.4.9968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3189.635224][T10619] siw: device registration error -23 [ 3189.680421][ T30] audit: type=1400 audit(2000000173.179:10352): avc: denied { create } for pid=10614 comm="syz.4.9968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3190.030752][ T30] audit: type=1400 audit(2000000173.189:10353): avc: denied { setopt } for pid=10614 comm="syz.4.9968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3190.064209][ T30] audit: type=1400 audit(2000000173.198:10354): avc: denied { create } for pid=10614 comm="syz.4.9968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3190.092534][ T30] audit: type=1400 audit(2000000173.198:10355): avc: denied { write } for pid=10614 comm="syz.4.9968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3190.696542][ T30] audit: type=1400 audit(2000000173.488:10356): avc: denied { execmem } for pid=10613 comm="syz.0.9967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3190.723860][ T30] audit: type=1400 audit(2000000173.713:10357): avc: denied { prog_load } for pid=10613 comm="syz.0.9967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3190.779904][ T30] audit: type=1400 audit(2000000173.722:10358): avc: denied { bpf } for pid=10613 comm="syz.0.9967" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3191.368747][T10625] overlayfs: failed to clone upperpath [ 3193.953446][T10647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3193.957327][T10650] net_ratelimit: 15 callbacks suppressed [ 3193.957340][T10650] batadv_slave_0: mtu less than device minimum [ 3194.605551][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 3194.605564][ T30] audit: type=1400 audit(2000000177.856:10487): avc: denied { read } for pid=10654 comm="syz.4.9976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 3194.670640][ T30] audit: type=1400 audit(2000000177.856:10488): avc: denied { create } for pid=10656 comm="syz.2.9978" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3194.703382][ T30] audit: type=1400 audit(2000000177.856:10489): avc: denied { ioctl } for pid=10656 comm="syz.2.9978" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=125158 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3194.852516][ T30] audit: type=1400 audit(2000000177.856:10490): avc: denied { ioctl } for pid=10656 comm="syz.2.9978" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=125158 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3194.887556][ T30] audit: type=1400 audit(2000000177.856:10491): avc: denied { prog_load } for pid=10656 comm="syz.2.9978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3194.907653][ T30] audit: type=1400 audit(2000000177.856:10492): avc: denied { bpf } for pid=10656 comm="syz.2.9978" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3194.931807][ T30] audit: type=1400 audit(2000000177.856:10493): avc: denied { perfmon } for pid=10656 comm="syz.2.9978" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3194.953173][ T30] audit: type=1400 audit(2000000177.856:10494): avc: denied { perfmon } for pid=10656 comm="syz.2.9978" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3195.225960][T10662] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3195.232528][T10662] audit: audit_lost=789 audit_rate_limit=0 audit_backlog_limit=64 [ 3196.908686][T10680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9981'. [ 3198.011846][T10691] netlink: 11 bytes leftover after parsing attributes in process `syz.4.9984'. [ 3200.145536][ T30] kauditd_printk_skb: 1276 callbacks suppressed [ 3200.145553][ T30] audit: type=1400 audit(2000000182.590:10660): avc: denied { prog_load } for pid=10703 comm="syz.0.9987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3200.192666][ T30] audit: type=1400 audit(2000000182.590:10661): avc: denied { bpf } for pid=10703 comm="syz.0.9987" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3200.219165][ T30] audit: type=1400 audit(2000000182.608:10662): avc: denied { perfmon } for pid=10703 comm="syz.0.9987" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3200.244352][T10706] lo speed is unknown, defaulting to 1000 [ 3200.245568][ T30] audit: type=1400 audit(2000000182.655:10663): avc: denied { map_create } for pid=10700 comm="syz.4.9988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3200.251204][T10706] lo speed is unknown, defaulting to 1000 [ 3200.412073][ T30] audit: type=1400 audit(2000000182.655:10664): avc: denied { bpf } for pid=10700 comm="syz.4.9988" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3200.439254][ T30] audit: type=1400 audit(2000000182.664:10665): avc: denied { map_read map_write } for pid=10700 comm="syz.4.9988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3200.849114][ T30] audit: type=1400 audit(2000000182.674:10666): avc: denied { prog_load } for pid=10700 comm="syz.4.9988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3200.896833][ T30] audit: type=1400 audit(2000000182.683:10667): avc: denied { bpf } for pid=10700 comm="syz.4.9988" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3200.923938][ T30] audit: type=1400 audit(2000000182.692:10668): avc: denied { prog_load } for pid=10700 comm="syz.4.9988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3201.386253][ T30] audit: type=1400 audit(2000000182.692:10669): avc: denied { bpf } for pid=10700 comm="syz.4.9988" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3203.302355][T10737] overlayfs: failed to clone upperpath [ 3203.723771][T10738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3204.439278][T10743] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9996'. [ 3205.554896][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 3205.554911][ T30] audit: type=1400 audit(2000000187.959:10806): avc: denied { execmem } for pid=10756 comm="syz.1.9999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3205.813098][ T30] audit: type=1400 audit(2000000188.258:10807): avc: denied { map } for pid=10756 comm="syz.1.9999" path="socket:[126035]" dev="sockfs" ino=126035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 3206.142416][ T30] audit: type=1400 audit(2000000188.642:10808): avc: denied { prog_load } for pid=10760 comm="syz.2.10000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3206.165186][ T30] audit: type=1400 audit(2000000188.651:10809): avc: denied { bpf } for pid=10760 comm="syz.2.10000" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3206.192454][ T30] audit: type=1400 audit(2000000188.651:10810): avc: denied { perfmon } for pid=10760 comm="syz.2.10000" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3206.223135][ T30] audit: type=1400 audit(2000000188.651:10811): avc: denied { perfmon } for pid=10760 comm="syz.2.10000" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3206.245917][ T30] audit: type=1400 audit(2000000188.651:10812): avc: denied { perfmon } for pid=10760 comm="syz.2.10000" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3206.271659][ T30] audit: type=1400 audit(2000000188.651:10813): avc: denied { perfmon } for pid=10760 comm="syz.2.10000" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3206.375344][ T30] audit: type=1400 audit(2000000188.651:10814): avc: denied { perfmon } for pid=10760 comm="syz.2.10000" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3206.399326][ T30] audit: type=1400 audit(2000000188.651:10815): avc: denied { bpf } for pid=10760 comm="syz.2.10000" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3206.422506][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10000'. [ 3209.123099][T23450] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3209.135984][T23450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3209.144432][T23450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3209.152197][T23450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3209.159912][T23450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3210.368210][T10786] lo speed is unknown, defaulting to 1000 [ 3210.376685][T10786] lo speed is unknown, defaulting to 1000 [ 3210.914210][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 3210.916392][ T30] audit: type=1400 audit(2000000193.113:10941): avc: denied { write } for pid=10800 comm="syz.0.10009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3210.993078][ T30] audit: type=1400 audit(2000000193.113:10942): avc: denied { write } for pid=10800 comm="syz.0.10009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3211.035164][ T30] audit: type=1400 audit(2000000193.150:10943): avc: denied { create } for pid=10800 comm="syz.0.10009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3211.065916][ T30] audit: type=1400 audit(2000000193.150:10944): avc: denied { write } for pid=10800 comm="syz.0.10009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3211.094013][ T30] audit: type=1400 audit(2000000193.150:10945): avc: denied { module_request } for pid=10800 comm="syz.0.10009" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3211.126018][T10786] chnl_net:caif_netlink_parms(): no params data found [ 3211.156266][ T30] audit: type=1400 audit(2000000193.216:10946): avc: denied { execmem } for pid=10800 comm="syz.0.10009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3211.200358][ T30] audit: type=1400 audit(2000000193.216:10947): avc: denied { create } for pid=10800 comm="syz.0.10009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3211.224477][ T30] audit: type=1400 audit(2000000193.281:10948): avc: denied { read } for pid=10800 comm="syz.0.10009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3211.306352][T10786] bridge0: port 1(bridge_slave_0) entered blocking state [ 3211.332958][T10786] bridge0: port 1(bridge_slave_0) entered disabled state [ 3211.346275][T10786] bridge_slave_0: entered allmulticast mode [ 3211.355278][T10786] bridge_slave_0: entered promiscuous mode [ 3211.370590][T10786] bridge0: port 2(bridge_slave_1) entered blocking state [ 3211.381426][T10786] bridge0: port 2(bridge_slave_1) entered disabled state [ 3211.388684][ T30] audit: type=1400 audit(2000000193.552:10949): avc: denied { create } for pid=10808 comm="syz.2.10010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3211.413335][T10786] bridge_slave_1: entered allmulticast mode [ 3211.422995][T10786] bridge_slave_1: entered promiscuous mode [ 3211.447126][ T30] audit: type=1400 audit(2000000193.552:10950): avc: denied { create } for pid=10817 comm="syz.0.10011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3211.528524][T10786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3211.549564][T10786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3211.607094][T10786] team0: Port device team_slave_0 added [ 3211.621064][T10786] team0: Port device team_slave_1 added [ 3211.677918][T10786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3211.684947][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3211.737899][T10786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3211.762386][T10786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3211.778256][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3211.811691][T10786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3211.891434][T10786] hsr_slave_0: entered promiscuous mode [ 3211.898313][T10786] hsr_slave_1: entered promiscuous mode [ 3211.913377][T10786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3211.921793][T10786] Cannot create hsr debugfs directory [ 3212.181069][T10786] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3212.196677][T10786] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3212.210362][T10786] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3212.226864][T10786] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3212.341776][T23450] Bluetooth: hci5: command tx timeout [ 3212.430102][T10786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3212.515899][T10786] 8021q: adding VLAN 0 to HW filter on device team0 [ 3212.533886][T30622] bridge0: port 1(bridge_slave_0) entered blocking state [ 3212.540977][T30622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3212.555760][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 3212.562860][ T7045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3213.450641][T10831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3213.733353][T10786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3214.563846][T23450] Bluetooth: hci5: command tx timeout [ 3215.729822][T10852] netlink: 'syz.1.10020': attribute type 12 has an invalid length. [ 3215.738135][T10852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10020'. [ 3216.418034][T10856] overlay: ./file0 is not a directory [ 3216.637788][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 3216.637817][ T30] audit: type=1400 audit(2000000198.164:11080): avc: denied { prog_load } for pid=10851 comm="syz.0.10018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3216.753250][ T30] audit: type=1400 audit(2000000198.173:11081): avc: denied { bpf } for pid=10851 comm="syz.0.10018" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3216.774417][ T30] audit: type=1400 audit(2000000198.258:11082): avc: denied { mounton } for pid=10851 comm="syz.0.10018" path="/1929/bus" dev="tmpfs" ino=10619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3216.787359][T23450] Bluetooth: hci5: command tx timeout [ 3216.797465][ T30] audit: type=1400 audit(2000000198.370:11083): avc: denied { mounton } for pid=10851 comm="syz.0.10018" path="/1929/file0" dev="tmpfs" ino=10618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3216.847475][T32277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3216.858669][T32277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3216.867146][T32277] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3216.869821][ T30] audit: type=1400 audit(2000000198.061:11079): avc: denied { module_request } for pid=10786 comm="syz-executor" kmod="netdevsim7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3216.874924][T32277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3216.905734][T32277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3216.969406][ T30] audit: type=1400 audit(2000000198.650:11084): avc: denied { create } for pid=10860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3217.124703][T10860] lo speed is unknown, defaulting to 1000 [ 3217.153178][ T30] audit: type=1400 audit(2000000198.650:11085): avc: denied { read write } for pid=10860 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 3217.166354][T10860] lo speed is unknown, defaulting to 1000 [ 3217.178950][ T30] audit: type=1400 audit(2000000198.650:11086): avc: denied { read write open } for pid=10860 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 3217.207796][ T30] audit: type=1400 audit(2000000198.678:11087): avc: denied { ioctl } for pid=10860 comm="syz-executor" path="socket:[125680]" dev="sockfs" ino=125680 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3217.234447][ T30] audit: type=1400 audit(2000000198.725:11088): avc: denied { ioctl } for pid=10860 comm="syz-executor" path="socket:[125680]" dev="sockfs" ino=125680 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3217.920552][T10786] veth0_vlan: entered promiscuous mode [ 3217.950092][T10786] veth1_vlan: entered promiscuous mode [ 3218.080487][T10786] veth0_macvtap: entered promiscuous mode [ 3218.133809][T10786] veth1_macvtap: entered promiscuous mode [ 3218.181767][T10786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3218.204031][T10786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3218.252273][T10860] chnl_net:caif_netlink_parms(): no params data found [ 3218.293856][T10786] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3218.327023][T10786] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3218.335732][T10786] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3218.356172][T10786] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3218.546393][T10860] bridge0: port 1(bridge_slave_0) entered blocking state [ 3218.553810][T10860] bridge0: port 1(bridge_slave_0) entered disabled state [ 3218.560945][T10860] bridge_slave_0: entered allmulticast mode [ 3218.569406][T10860] bridge_slave_0: entered promiscuous mode [ 3219.012801][T32277] Bluetooth: hci5: command tx timeout [ 3219.070688][T10860] bridge0: port 2(bridge_slave_1) entered blocking state [ 3219.080133][T10860] bridge0: port 2(bridge_slave_1) entered disabled state [ 3219.092239][T10860] bridge_slave_1: entered allmulticast mode [ 3219.098523][T32277] Bluetooth: hci6: command tx timeout [ 3219.108433][T10860] bridge_slave_1: entered promiscuous mode [ 3219.721278][T10860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3219.773198][T10860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3220.126386][T10860] team0: Port device team_slave_0 added [ 3220.664898][T10860] team0: Port device team_slave_1 added [ 3220.728930][ T7066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3220.731074][T10860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3220.749448][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3220.749545][ T7066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3220.796614][T10860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3220.840891][T10860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3220.861331][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3220.895558][T10860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3220.998651][ T7066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3221.004631][T10860] hsr_slave_0: entered promiscuous mode [ 3221.018651][ T7066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3222.015146][T23450] Bluetooth: hci6: command tx timeout [ 3222.053468][ T30] kauditd_printk_skb: 2231 callbacks suppressed [ 3222.053484][ T30] audit: type=1400 audit(2000000202.560:11268): avc: denied { execmem } for pid=10897 comm="syz.0.10028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3222.095795][T10860] hsr_slave_1: entered promiscuous mode [ 3222.103334][T10860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3222.110892][T10860] Cannot create hsr debugfs directory [ 3222.245888][ T30] audit: type=1400 audit(2000000202.579:11269): avc: denied { prog_load } for pid=10899 comm="syz.1.10029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3222.298220][ T30] audit: type=1400 audit(2000000202.579:11270): avc: denied { bpf } for pid=10899 comm="syz.1.10029" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3222.359421][ T30] audit: type=1400 audit(2000000202.579:11271): avc: denied { perfmon } for pid=10899 comm="syz.1.10029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3222.428047][ T30] audit: type=1400 audit(2000000202.579:11272): avc: denied { perfmon } for pid=10899 comm="syz.1.10029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3222.458258][ T30] audit: type=1400 audit(2000000202.588:11273): avc: denied { perfmon } for pid=10899 comm="syz.1.10029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3222.646090][ T30] audit: type=1400 audit(2000000202.588:11274): avc: denied { perfmon } for pid=10899 comm="syz.1.10029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3222.995907][ T30] audit: type=1400 audit(2000000202.588:11275): avc: denied { perfmon } for pid=10899 comm="syz.1.10029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3223.019485][ T30] audit: type=1400 audit(2000000202.588:11276): avc: denied { bpf } for pid=10899 comm="syz.1.10029" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3223.043981][ T30] audit: type=1400 audit(2000000202.588:11277): avc: denied { bpf } for pid=10899 comm="syz.1.10029" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3223.572194][T10921] delete_channel: no stack [ 3224.070799][T10921] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10033'. [ 3224.151796][T10920] delete_channel: no stack [ 3224.244364][T32277] Bluetooth: hci6: command tx timeout [ 3224.356682][T10860] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3224.411967][T10860] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3224.458564][T10860] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3224.500536][T10860] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3224.896261][T10933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3225.247792][T10860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3225.307433][T10860] 8021q: adding VLAN 0 to HW filter on device team0 [ 3225.385248][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state [ 3225.392426][ T7064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3225.441398][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state [ 3225.448581][ T7064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3226.009243][T10937] overlayfs: failed to clone upperpath [ 3226.661453][T10940] orangefs_mount: mount request failed with -4 [ 3226.773635][T32277] Bluetooth: hci6: command tx timeout [ 3227.437347][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 3227.437362][ T30] audit: type=1400 audit(2000000208.547:11519): avc: denied { prog_load } for pid=10955 comm="syz.7.10043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3227.652119][ T30] audit: type=1400 audit(2000000208.575:11520): avc: denied { bpf } for pid=10955 comm="syz.7.10043" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3227.714289][ T30] audit: type=1400 audit(2000000208.612:11521): avc: denied { perfmon } for pid=10955 comm="syz.7.10043" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3227.763339][T10956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3227.770041][T10956] audit: audit_lost=1844 audit_rate_limit=0 audit_backlog_limit=64 [ 3227.778126][T10956] audit: backlog limit exceeded [ 3227.783490][T10956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3227.790009][T10956] audit: audit_lost=1845 audit_rate_limit=0 audit_backlog_limit=64 [ 3227.797124][T10960] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3227.797892][T10956] audit: backlog limit exceeded [ 3228.007147][T10860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3228.892390][T10976] overlayfs: failed to clone upperpath [ 3229.653120][T10860] veth0_vlan: entered promiscuous mode [ 3229.675165][T10860] veth1_vlan: entered promiscuous mode [ 3229.772665][T10860] veth0_macvtap: entered promiscuous mode [ 3229.798538][T10860] veth1_macvtap: entered promiscuous mode [ 3229.847174][T10860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3229.865689][T10860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3230.009433][T10860] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3230.022787][T10860] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3230.031549][T10860] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3230.534417][T10860] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3230.766261][ T7050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3230.793635][ T7050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3231.096708][T10995] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10051'. [ 3231.200980][ T7064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3231.221021][ T7064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3231.301256][T10990] delete_channel: no stack [ 3231.306003][T10990] delete_channel: no stack [ 3232.877404][ T30] kauditd_printk_skb: 1224 callbacks suppressed [ 3232.884063][ T30] audit: type=1400 audit(2000000213.654:11778): avc: denied { execmem } for pid=11008 comm="syz.1.10057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3233.408264][ T30] audit: type=1400 audit(2000000213.860:11779): avc: denied { accept } for pid=11005 comm="syz.8.10019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3233.454573][ T30] audit: type=1400 audit(2000000213.869:11780): avc: denied { accept } for pid=11005 comm="syz.8.10019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3233.479120][ T30] audit: type=1400 audit(2000000213.879:11781): avc: denied { accept } for pid=11005 comm="syz.8.10019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3233.505505][ T30] audit: type=1400 audit(2000000213.879:11782): avc: denied { accept } for pid=11005 comm="syz.8.10019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3233.531122][ T30] audit: type=1400 audit(2000000213.888:11783): avc: denied { accept } for pid=11005 comm="syz.8.10019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3233.556943][ T30] audit: type=1400 audit(2000000213.888:11784): avc: denied { accept } for pid=11005 comm="syz.8.10019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3233.588489][ T30] audit: type=1400 audit(2000000213.897:11785): avc: denied { accept } for pid=11005 comm="syz.8.10019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3233.617436][ T30] audit: type=1400 audit(2000000213.897:11786): avc: denied { accept } for pid=11005 comm="syz.8.10019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3233.718030][T11012] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3234.469269][T11019] tmpfs: Bad value for 'mpol' [ 3234.656816][T11033] hugetlbfs: Unknown parameter 'nrGs' [ 3235.313333][T11037] netlink: 'syz.0.10060': attribute type 12 has an invalid length. [ 3235.321434][T11037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10060'. [ 3236.001511][T11043] random: crng reseeded on system resumption [ 3236.853836][T10989] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 3237.222423][T10989] usb 9-1: config 0 has an invalid interface number: 189 but max is 0 [ 3237.253463][T10989] usb 9-1: config 0 has no interface number 0 [ 3237.411825][T10989] usb 9-1: New USB device found, idVendor=0c45, idProduct=6007, bcdDevice=87.db [ 3237.424300][T10989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3237.442454][T10989] usb 9-1: Product: syz [ 3237.446751][T10989] usb 9-1: Manufacturer: syz [ 3237.451384][T10989] usb 9-1: SerialNumber: syz [ 3237.470806][T10989] usb 9-1: config 0 descriptor?? [ 3237.499937][T10989] gspca_main: sonixb-2.14.0 probing 0c45:6007 [ 3237.574331][T11054] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3238.445550][T10989] sonixb 9-1:0.189: Error reading register 00: -32 [ 3238.490438][ T30] kauditd_printk_skb: 428 callbacks suppressed [ 3238.490454][ T30] audit: type=1400 audit(2000000218.911:12186): avc: denied { execmem } for pid=11060 comm="syz.1.10068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3238.667111][ T30] audit: type=1400 audit(2000000219.033:12187): avc: denied { create } for pid=11064 comm="syz.0.10070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3239.132713][ T30] audit: type=1400 audit(2000000219.033:12188): avc: denied { write } for pid=11064 comm="syz.0.10070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3239.372681][ T30] audit: type=1400 audit(2000000219.033:12189): avc: denied { read } for pid=11064 comm="syz.0.10070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3239.396154][ T30] audit: type=1400 audit(2000000219.033:12190): avc: denied { read } for pid=11064 comm="syz.0.10070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3239.418666][ T30] audit: type=1400 audit(2000000219.051:12191): avc: denied { read write } for pid=10786 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3240.593526][ T30] audit: type=1400 audit(2000000219.051:12192): avc: denied { read write open } for pid=10786 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3242.040488][ T30] audit: type=1400 audit(2000000219.051:12193): avc: denied { ioctl } for pid=10786 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3242.066491][ T30] audit: type=1400 audit(2000000219.051:12194): avc: denied { prog_load } for pid=11064 comm="syz.0.10070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3242.086802][ T30] audit: type=1400 audit(2000000219.051:12195): avc: denied { bpf } for pid=11064 comm="syz.0.10070" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3242.146246][T10550] usb 9-1: USB disconnect, device number 2 [ 3243.064960][T11091] xt_addrtype: ipv6 does not support BROADCAST matching [ 3243.918922][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 3243.918937][ T30] audit: type=1400 audit(2000000223.981:12328): avc: denied { prog_load } for pid=11096 comm="syz.7.10079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3243.989738][ T30] audit: type=1400 audit(2000000223.981:12329): avc: denied { bpf } for pid=11096 comm="syz.7.10079" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3244.016397][ T30] audit: type=1400 audit(2000000224.018:12330): avc: denied { create } for pid=11096 comm="syz.7.10079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3244.038378][ T30] audit: type=1400 audit(2000000224.028:12331): avc: denied { read append } for pid=11094 comm="syz.8.10077" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3244.805178][ T30] audit: type=1400 audit(2000000224.028:12332): avc: denied { read open } for pid=11094 comm="syz.8.10077" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3245.146708][T11100] loop2: detected capacity change from 0 to 7 [ 3245.282254][T11100] Dev loop2: unable to read RDB block 7 [ 3245.287920][ T30] audit: type=1400 audit(2000000224.028:12333): avc: denied { read } for pid=11094 comm="syz.8.10077" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3245.312199][ T30] audit: type=1400 audit(2000000224.028:12334): avc: denied { read open } for pid=11094 comm="syz.8.10077" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3245.339905][ T30] audit: type=1400 audit(2000000224.037:12335): avc: denied { prog_load } for pid=11094 comm="syz.8.10077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3245.381392][ T30] audit: type=1400 audit(2000000224.037:12336): avc: denied { bpf } for pid=11094 comm="syz.8.10077" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3245.575841][ T30] audit: type=1400 audit(2000000224.037:12337): avc: denied { bpf } for pid=11099 comm="syz.0.10080" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3245.801634][T11100] loop2: AHDI p1 p2 [ 3245.805562][T11100] loop2: partition table partially beyond EOD, truncated [ 3245.823062][T11100] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 3245.987452][T11111] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 3245.994084][T11111] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3246.064701][T11111] vhci_hcd vhci_hcd.0: Device attached [ 3246.555972][T11116] vhci_hcd: connection closed [ 3246.556234][ T7062] vhci_hcd: stop threads [ 3246.593964][ T7062] vhci_hcd: release socket [ 3246.610328][ T7062] vhci_hcd: disconnect device [ 3249.274984][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 3249.274998][ T30] audit: type=1400 audit(2000000228.995:12438): avc: denied { create } for pid=11141 comm="syz.7.10088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3251.284913][ T30] audit: type=1400 audit(2000000229.023:12439): avc: denied { setopt } for pid=11141 comm="syz.7.10088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3251.660330][ T30] audit: type=1400 audit(2000000229.032:12440): avc: denied { create } for pid=11141 comm="syz.7.10088" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3251.828610][ T30] audit: type=1400 audit(2000000229.032:12441): avc: denied { ioctl } for pid=11141 comm="syz.7.10088" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=127751 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3251.863704][ T30] audit: type=1400 audit(2000000229.032:12442): avc: denied { allowed } for pid=11141 comm="syz.7.10088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3251.890174][ T30] audit: type=1400 audit(2000000229.042:12443): avc: denied { sqpoll } for pid=11141 comm="syz.7.10088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3251.953214][ T30] audit: type=1400 audit(2000000229.042:12444): avc: denied { create } for pid=11141 comm="syz.7.10088" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3252.026712][ T30] audit: type=1400 audit(2000000229.060:12445): avc: denied { read } for pid=11143 comm="syz.8.10087" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3252.063332][ T30] audit: type=1400 audit(2000000229.060:12446): avc: denied { read open } for pid=11143 comm="syz.8.10087" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3252.090858][ T30] audit: type=1400 audit(2000000229.060:12447): avc: denied { ioctl } for pid=11143 comm="syz.8.10087" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3254.624631][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 3254.624642][ T30] audit: type=1400 audit(2000000233.999:12596): avc: denied { create } for pid=11170 comm="syz.2.10093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3254.771470][T11181] overlayfs: failed to clone lowerpath [ 3254.790748][ T30] audit: type=1400 audit(2000000234.065:12597): avc: denied { read write } for pid=10860 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3254.828831][T11181] overlayfs: failed to clone lowerpath [ 3254.849982][ T30] audit: type=1400 audit(2000000234.065:12598): avc: denied { read write open } for pid=10860 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3254.906969][T11184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10093'. [ 3254.935069][ T30] audit: type=1400 audit(2000000234.065:12599): avc: denied { ioctl } for pid=10860 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3254.965362][T11171] tmpfs: Bad value for 'mpol' [ 3254.995959][ T30] audit: type=1400 audit(2000000234.130:12600): avc: denied { mounton } for pid=11179 comm="syz.1.10096" path="/2176/file0" dev="tmpfs" ino=11855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3255.232629][ T30] audit: type=1400 audit(2000000234.186:12601): avc: denied { map_create } for pid=11179 comm="syz.1.10096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3256.193908][ T30] audit: type=1400 audit(2000000234.186:12602): avc: denied { mounton } for pid=11179 comm="syz.1.10096" path="/2176/file0" dev="tmpfs" ino=11855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3256.256307][ T30] audit: type=1400 audit(2000000234.196:12603): avc: denied { mount } for pid=11179 comm="syz.1.10096" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 3256.346089][ T30] audit: type=1400 audit(2000000234.196:12604): avc: denied { mounton } for pid=11179 comm="syz.1.10096" path="/2176/file0" dev="tmpfs" ino=11855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3256.455486][ T30] audit: type=1400 audit(2000000234.205:12605): avc: denied { remount } for pid=11179 comm="syz.1.10096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3259.624171][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10107'. [ 3259.635302][T11230] veth1_macvtap: left promiscuous mode [ 3259.687591][T11230] veth0_vlan: entered allmulticast mode [ 3260.510359][ T30] kauditd_printk_skb: 162 callbacks suppressed [ 3260.510375][ T30] audit: type=1400 audit(2000000238.527:12753): avc: denied { execmem } for pid=11225 comm="syz.0.10108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3260.556614][ T30] audit: type=1400 audit(2000000238.639:12754): avc: denied { create } for pid=11224 comm="syz.7.10107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3260.580308][ T30] audit: type=1400 audit(2000000238.639:12755): avc: denied { read } for pid=11224 comm="syz.7.10107" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3260.606875][ T30] audit: type=1400 audit(2000000238.639:12756): avc: denied { read open } for pid=11224 comm="syz.7.10107" path="/dev/cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3260.662826][ T30] audit: type=1400 audit(2000000238.648:12757): avc: denied { ioctl } for pid=11224 comm="syz.7.10107" path="/dev/cec0" dev="devtmpfs" ino=948 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3260.688083][ T30] audit: type=1400 audit(2000000238.648:12758): avc: denied { ioctl } for pid=11224 comm="syz.7.10107" path="/dev/cec0" dev="devtmpfs" ino=948 ioctlcmd=0x6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3260.712768][ T30] audit: type=1400 audit(2000000238.648:12759): avc: denied { prog_load } for pid=11224 comm="syz.7.10107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3260.735421][ T30] audit: type=1400 audit(2000000238.648:12760): avc: denied { bpf } for pid=11224 comm="syz.7.10107" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3260.806033][ T30] audit: type=1400 audit(2000000238.657:12761): avc: denied { read write } for pid=11224 comm="syz.7.10107" name="video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3260.858175][ T30] audit: type=1400 audit(2000000238.657:12762): avc: denied { read write open } for pid=11224 comm="syz.7.10107" path="/dev/video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3263.448045][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10114'. [ 3264.494615][T11269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3264.604856][T11265] netlink: 'syz.8.10117': attribute type 12 has an invalid length. [ 3264.613318][T11265] netlink: 132 bytes leftover after parsing attributes in process `syz.8.10117'. [ 3265.422921][T11276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3265.873898][ T30] kauditd_printk_skb: 488 callbacks suppressed [ 3265.873931][ T30] audit: type=1400 audit(2000000244.522:13251): avc: denied { ioctl } for pid=11280 comm="syz.7.10122" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 3266.128664][ T30] audit: type=1400 audit(2000000244.522:13252): avc: denied { ioctl } for pid=11280 comm="syz.7.10122" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 3266.326967][ T30] audit: type=1400 audit(2000000244.560:13253): avc: denied { read } for pid=11283 comm="syz.8.10123" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3266.493026][ T30] audit: type=1400 audit(2000000244.560:13254): avc: denied { read open } for pid=11283 comm="syz.8.10123" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3266.533842][T11292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3266.568418][ T30] audit: type=1400 audit(2000000244.934:13255): avc: denied { write } for pid=11277 comm="syz.2.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3266.590126][ T30] audit: type=1400 audit(2000000244.934:13256): avc: denied { write } for pid=11277 comm="syz.2.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3266.880020][ T30] audit: type=1400 audit(2000000245.084:13257): avc: denied { create } for pid=11277 comm="syz.2.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3267.229700][ T30] audit: type=1400 audit(2000000245.084:13258): avc: denied { write } for pid=11277 comm="syz.2.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3267.395080][ T30] audit: type=1400 audit(2000000245.084:13259): avc: denied { read } for pid=11277 comm="syz.2.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3267.479938][ T30] audit: type=1400 audit(2000000245.084:13260): avc: denied { read } for pid=11277 comm="syz.2.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3267.795256][T11305] nfs: Unknown parameter '' [ 3271.300558][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 3271.300574][ T30] audit: type=1400 audit(2000000249.602:13410): avc: denied { sys_module } for pid=11330 comm="syz.0.10134" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3271.630158][ T30] audit: type=1400 audit(2000000249.630:13411): avc: denied { module_request } for pid=11330 comm="syz.0.10134" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3271.995514][ T30] audit: type=1400 audit(2000000249.714:13412): avc: denied { prog_load } for pid=11348 comm="syz.7.10136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3271.995541][ T30] audit: type=1400 audit(2000000249.714:13413): avc: denied { bpf } for pid=11348 comm="syz.7.10136" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3271.995561][ T30] audit: type=1400 audit(2000000249.723:13414): avc: denied { perfmon } for pid=11348 comm="syz.7.10136" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3271.995581][ T30] audit: type=1400 audit(2000000249.733:13415): avc: denied { read } for pid=11348 comm="syz.7.10136" dev="nsfs" ino=4026534163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3271.995601][ T30] audit: type=1400 audit(2000000249.733:13416): avc: denied { read open } for pid=11348 comm="syz.7.10136" path="net:[4026534163]" dev="nsfs" ino=4026534163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3271.995622][ T30] audit: type=1400 audit(2000000249.733:13417): avc: denied { create } for pid=11348 comm="syz.7.10136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3271.995642][ T30] audit: type=1400 audit(2000000249.751:13418): avc: denied { map_create } for pid=11348 comm="syz.7.10136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3271.995662][ T30] audit: type=1400 audit(2000000249.751:13419): avc: denied { map_read map_write } for pid=11348 comm="syz.7.10136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3272.183024][ C1] vkms_vblank_simulate: vblank timer overrun [ 3272.212877][ C1] vkms_vblank_simulate: vblank timer overrun [ 3272.743336][T11360] serio: Serial port ttyS3 [ 3274.568148][T11373] lo speed is unknown, defaulting to 1000 [ 3274.574918][T11373] lo speed is unknown, defaulting to 1000 [ 3275.215736][T11375] binder: BINDER_SET_CONTEXT_MGR already set [ 3275.222028][T11375] binder: 11374:11375 ioctl 4018620d 200000000040 returned -16 [ 3275.461632][T11381] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10143'. [ 3276.655651][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 3276.655666][ T30] audit: type=1400 audit(2000000254.597:13568): avc: denied { connect } for pid=11391 comm="syz.1.10146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3276.739284][T11384] orangefs_mount: mount request failed with -4 [ 3276.739330][ T30] audit: type=1400 audit(2000000254.615:13569): avc: denied { name_connect } for pid=11391 comm="syz.1.10146" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 3276.868576][ T30] audit: type=1400 audit(2000000254.634:13570): avc: denied { setopt } for pid=11391 comm="syz.1.10146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3276.908599][ T30] audit: type=1400 audit(2000000254.774:13571): avc: denied { unmount } for pid=10786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 3276.949530][ T30] audit: type=1400 audit(2000000254.831:13572): avc: denied { read write } for pid=10786 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3277.004276][ T30] audit: type=1400 audit(2000000254.831:13573): avc: denied { read write open } for pid=10786 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3277.081820][ T30] audit: type=1400 audit(2000000254.831:13574): avc: denied { ioctl } for pid=10786 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3277.264557][T11401] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 3277.973383][ T30] audit: type=1400 audit(2000000254.961:13575): avc: denied { prog_load } for pid=11395 comm="syz.1.10148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3278.055371][T11403] veth0_vlan: entered allmulticast mode [ 3278.132630][T11402] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3278.250622][T11398] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3278.286378][T11406] lo speed is unknown, defaulting to 1000 [ 3278.293393][T11406] lo speed is unknown, defaulting to 1000 [ 3279.538112][T11425] loop6: detected capacity change from 0 to 524287999 [ 3280.068856][T11425] loop6: unable to read partition table [ 3280.074586][T11425] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 3282.032229][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 3282.032245][ T30] audit: type=1400 audit(2000000259.629:13752): avc: denied { read } for pid=11433 comm="syz.7.10157" dev="nsfs" ino=4026534163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3282.400377][ T30] audit: type=1400 audit(2000000259.629:13753): avc: denied { read open } for pid=11433 comm="syz.7.10157" path="net:[4026534163]" dev="nsfs" ino=4026534163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3282.439969][ T30] audit: type=1400 audit(2000000259.629:13754): avc: denied { create } for pid=11433 comm="syz.7.10157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3282.598687][ T30] audit: type=1400 audit(2000000259.629:13755): avc: denied { connect } for pid=11433 comm="syz.7.10157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3282.673546][ T30] audit: type=1400 audit(2000000259.723:13756): avc: denied { bind } for pid=11433 comm="syz.7.10157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3282.707427][ T30] audit: type=1400 audit(2000000259.835:13757): avc: denied { connect } for pid=11433 comm="syz.7.10157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 3282.801146][ T30] audit: type=1400 audit(2000000260.190:13758): avc: denied { read write } for pid=10786 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3282.882560][ T30] audit: type=1400 audit(2000000260.190:13759): avc: denied { read write open } for pid=10786 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3283.422818][ T30] audit: type=1400 audit(2000000260.190:13760): avc: denied { ioctl } for pid=10786 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3283.449211][ T30] audit: type=1400 audit(2000000260.228:13761): avc: denied { execmem } for pid=11444 comm="syz.0.10158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3284.542528][T23450] Bluetooth: hci6: command 0x0405 tx timeout [ 3285.928456][T11468] could not allocate digest TFM handle cbcmac-aes-neon [ 3286.478395][T11472] bridge0: port 2(bridge_slave_1) entered disabled state [ 3286.487811][T11472] bridge0: port 1(bridge_slave_0) entered disabled state [ 3287.462562][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 3287.462578][ T30] audit: type=1400 audit(2000000264.634:13897): avc: denied { execmem } for pid=11486 comm="syz.7.10168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3288.323867][ T30] audit: type=1400 audit(2000000264.764:13898): avc: denied { create } for pid=11483 comm="syz.0.10169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3288.389666][ T30] audit: type=1400 audit(2000000264.989:13899): avc: denied { create } for pid=11486 comm="syz.7.10168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3288.418690][ T30] audit: type=1400 audit(2000000264.998:13900): avc: denied { mounton } for pid=11486 comm="syz.7.10168" path="/29/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3288.441347][ C0] vkms_vblank_simulate: vblank timer overrun [ 3288.484548][ T30] audit: type=1400 audit(2000000264.998:13901): avc: denied { mounton } for pid=11486 comm="syz.7.10168" path="/29/bus" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3288.522815][ T30] audit: type=1400 audit(2000000265.017:13902): avc: denied { unlink } for pid=11486 comm="syz.7.10168" name="#95" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3288.640319][ T30] audit: type=1400 audit(2000000265.045:13903): avc: denied { mount } for pid=11486 comm="syz.7.10168" name="/" dev="overlay" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3288.753801][ T30] audit: type=1400 audit(2000000265.101:13904): avc: denied { create } for pid=11486 comm="syz.7.10168" name="#99" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3288.827306][ T30] audit: type=1400 audit(2000000265.111:13905): avc: denied { link } for pid=11486 comm="syz.7.10168" name="#99" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3289.173427][ T30] audit: type=1400 audit(2000000265.111:13906): avc: denied { unlink } for pid=11486 comm="syz.7.10168" name="#9a" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3289.250351][T11499] autofs: Unknown parameter '0x0000000000000000' [ 3289.883634][T11511] syz.8.10174: attempt to access beyond end of device [ 3289.883634][T11511] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3292.888556][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 3292.888568][ T30] audit: type=1400 audit(2000000269.788:14099): avc: denied { map_create } for pid=11527 comm="syz.0.10181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3293.019879][ T30] audit: type=1400 audit(2000000269.788:14100): avc: denied { map_read map_write } for pid=11527 comm="syz.0.10181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3293.029203][T11535] vivid-001: disconnect [ 3293.071123][ T30] audit: type=1400 audit(2000000269.853:14101): avc: denied { prog_load } for pid=11527 comm="syz.0.10181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3293.107343][ T30] audit: type=1400 audit(2000000269.853:14102): avc: denied { bpf } for pid=11527 comm="syz.0.10181" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3293.172490][ T30] audit: type=1400 audit(2000000269.853:14103): avc: denied { perfmon } for pid=11527 comm="syz.0.10181" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3293.354448][T11536] lo speed is unknown, defaulting to 1000 [ 3293.360930][T11536] lo speed is unknown, defaulting to 1000 [ 3293.411712][ T30] audit: type=1400 audit(2000000269.853:14104): avc: denied { perfmon } for pid=11527 comm="syz.0.10181" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3293.513843][ T30] audit: type=1400 audit(2000000269.853:14105): avc: denied { perfmon } for pid=11527 comm="syz.0.10181" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3293.652675][T11529] vivid-001: reconnect [ 3293.690189][ T30] audit: type=1400 audit(2000000269.853:14106): avc: denied { perfmon } for pid=11527 comm="syz.0.10181" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3293.721207][T11539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3293.742362][T11539] audit: audit_lost=2186 audit_rate_limit=0 audit_backlog_limit=64 [ 3294.400879][T11547] Mount JFS Failure: -22 [ 3294.405500][T11547] jfs_mount failed w/return code = -22 [ 3294.542251][T11548] netlink: 'syz.2.10185': attribute type 7 has an invalid length. [ 3296.373609][T11563] overlayfs: failed to clone lowerpath [ 3296.418704][T11563] overlayfs: failed to clone upperpath [ 3297.267276][T11568] netlink: zone id is out of range [ 3297.273023][T11568] netlink: zone id is out of range [ 3297.282132][T11568] netlink: zone id is out of range [ 3297.288321][T11568] netlink: zone id is out of range [ 3297.295239][T11568] netlink: zone id is out of range [ 3297.302059][T11568] netlink: zone id is out of range [ 3297.307670][T11568] netlink: zone id is out of range [ 3297.312908][T11568] netlink: zone id is out of range [ 3297.318518][T11568] netlink: zone id is out of range [ 3297.333669][T11568] netlink: zone id is out of range [ 3297.660755][T10550] IPVS: starting estimator thread 0... [ 3297.845774][T11576] IPVS: using max 51 ests per chain, 122400 per kthread [ 3298.164346][T10550] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 3298.364506][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 3298.364537][ T30] audit: type=1400 audit(2000000274.848:14287): avc: denied { create } for pid=11581 comm="syz.0.10193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3298.411863][ T30] audit: type=1400 audit(2000000274.848:14288): avc: denied { write } for pid=11581 comm="syz.0.10193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3298.454623][ T30] audit: type=1400 audit(2000000274.857:14289): avc: denied { read } for pid=11581 comm="syz.0.10193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3298.577283][ T30] audit: type=1400 audit(2000000275.110:14290): avc: denied { ioctl } for pid=11570 comm="syz.8.10191" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3298.602406][ C0] vkms_vblank_simulate: vblank timer overrun [ 3298.646003][T10550] usb 9-1: Using ep0 maxpacket: 32 [ 3298.655233][ T30] audit: type=1400 audit(2000000275.185:14291): avc: denied { ioctl } for pid=11570 comm="syz.8.10191" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3298.685601][T10550] usb 9-1: config 64 has an invalid interface number: 4 but max is 0 [ 3298.693763][T10550] usb 9-1: config 64 has no interface number 0 [ 3298.708030][T10550] usb 9-1: config 64 interface 4 has no altsetting 0 [ 3298.722976][ T30] audit: type=1400 audit(2000000275.185:14292): avc: denied { ioctl } for pid=11570 comm="syz.8.10191" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3298.759958][T10550] usb 9-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 3298.770944][T10550] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3298.779213][ T30] audit: type=1400 audit(2000000275.213:14293): avc: denied { ioctl } for pid=11570 comm="syz.8.10191" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3298.804675][T10550] usb 9-1: Product: syz [ 3298.810663][T10550] usb 9-1: Manufacturer: syz [ 3298.815285][T10550] usb 9-1: SerialNumber: syz [ 3298.825485][ T30] audit: type=1400 audit(2000000275.213:14294): avc: denied { ioctl } for pid=11570 comm="syz.8.10191" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3298.850584][ C0] vkms_vblank_simulate: vblank timer overrun [ 3298.859511][ T30] audit: type=1400 audit(2000000275.213:14295): avc: denied { ioctl } for pid=11570 comm="syz.8.10191" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3298.884601][ C0] vkms_vblank_simulate: vblank timer overrun [ 3298.901990][ T30] audit: type=1400 audit(2000000275.222:14296): avc: denied { ioctl } for pid=11570 comm="syz.8.10191" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3299.720365][T10550] qmi_wwan 9-1:64.4: probe with driver qmi_wwan failed with error -22 [ 3299.751220][T10550] usb 9-1: USB disconnect, device number 3 [ 3301.348254][T11611] overlayfs: failed to clone upperpath [ 3302.688972][T11620] tipc: Enabling of bearer rejected, already enabled [ 3303.606454][T11630] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 3303.883804][ T30] kauditd_printk_skb: 254 callbacks suppressed [ 3303.883843][ T30] audit: type=1400 audit(2000000280.049:14551): avc: denied { read write } for pid=11621 comm="syz.7.10204" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3304.061913][ T30] audit: type=1400 audit(2000000280.058:14552): avc: denied { read write open } for pid=11621 comm="syz.7.10204" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3304.116644][ T30] audit: type=1400 audit(2000000280.227:14553): avc: denied { ioctl } for pid=11621 comm="syz.7.10204" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3304.143724][ T30] audit: type=1400 audit(2000000280.227:14554): avc: denied { ioctl } for pid=11621 comm="syz.7.10204" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3304.174129][ T30] audit: type=1400 audit(2000000280.245:14555): avc: denied { bpf } for pid=11632 comm="syz.0.10206" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3304.197578][T11627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3304.247234][ T30] audit: type=1400 audit(2000000280.245:14556): avc: denied { read } for pid=11621 comm="syz.7.10204" dev="nsfs" ino=4026534163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3304.322421][ T30] audit: type=1400 audit(2000000280.245:14557): avc: denied { read open } for pid=11621 comm="syz.7.10204" path="net:[4026534163]" dev="nsfs" ino=4026534163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3304.474174][ T30] audit: type=1400 audit(2000000280.245:14558): avc: denied { create } for pid=11621 comm="syz.7.10204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3304.493835][ C0] vkms_vblank_simulate: vblank timer overrun [ 3304.507296][T11637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10208'. [ 3304.518008][ T30] audit: type=1400 audit(2000000280.273:14559): avc: denied { create } for pid=11632 comm="syz.0.10206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3304.547494][ T30] audit: type=1400 audit(2000000280.273:14560): avc: denied { listen } for pid=11632 comm="syz.0.10206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3305.713997][T11637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11637 comm=syz.0.10208 [ 3308.721462][T11668] syz.8.10214: attempt to access beyond end of device [ 3308.721462][T11668] loop17: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3308.735121][T11668] FAT-fs (loop17): unable to read boot sector [ 3309.844341][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 3309.844359][ T30] audit: type=1400 audit(2000000284.932:14717): avc: denied { execmem } for pid=11665 comm="syz.7.10213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3310.544112][ T30] audit: type=1400 audit(2000000285.091:14718): avc: denied { map_create } for pid=11663 comm="syz.0.10215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3310.546838][T23450] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3310.576123][ T30] audit: type=1400 audit(2000000285.250:14719): avc: denied { prog_load } for pid=11663 comm="syz.0.10215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3310.581714][T23450] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3310.595568][ T30] audit: type=1400 audit(2000000285.250:14720): avc: denied { bpf } for pid=11663 comm="syz.0.10215" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3310.595611][ T30] audit: type=1400 audit(2000000285.278:14721): avc: denied { prog_load } for pid=11663 comm="syz.0.10215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3310.595647][ T30] audit: type=1400 audit(2000000285.278:14722): avc: denied { bpf } for pid=11663 comm="syz.0.10215" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3310.595685][ T30] audit: type=1400 audit(2000000285.278:14723): avc: denied { perfmon } for pid=11663 comm="syz.0.10215" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3310.595727][ T30] audit: type=1400 audit(2000000285.315:14724): avc: denied { prog_load } for pid=11663 comm="syz.0.10215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3310.595762][ T30] audit: type=1400 audit(2000000285.315:14725): avc: denied { bpf } for pid=11663 comm="syz.0.10215" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3310.627930][T23450] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3310.741683][T23450] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3310.749232][T23450] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3310.755143][ T30] audit: type=1400 audit(2000000285.315:14726): avc: denied { create } for pid=11663 comm="syz.0.10215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3310.833995][T11679] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20004 [ 3311.574562][T11684] overlayfs: failed to resolve './file0': -2 [ 3311.936360][T11676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3312.880673][T11692] netlink: 'syz.7.10219': attribute type 2 has an invalid length. [ 3312.927441][T11692] þ: entered promiscuous mode [ 3313.003127][T23450] Bluetooth: hci7: command tx timeout [ 3313.611233][T11673] lo speed is unknown, defaulting to 1000 [ 3313.619611][T11673] lo speed is unknown, defaulting to 1000 [ 3315.239616][T11673] chnl_net:caif_netlink_parms(): no params data found [ 3315.263684][T23450] Bluetooth: hci7: command tx timeout [ 3315.319493][T11717] hugetlbfs: Unknown parameter 'nrGs' [ 3315.325023][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 3315.325036][ T30] audit: type=1400 audit(2000000290.769:14863): avc: denied { mounton } for pid=11715 comm="syz.8.10226" path="/31/file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3315.862267][ T30] audit: type=1400 audit(2000000290.769:14864): avc: denied { mount } for pid=11715 comm="syz.8.10226" name="/" dev="hugetlbfs" ino=130313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 3316.081020][ T30] audit: type=1400 audit(2000000290.769:14865): avc: denied { remount } for pid=11715 comm="syz.8.10226" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 3316.242259][ T30] audit: type=1400 audit(2000000290.787:14866): avc: denied { read } for pid=11715 comm="syz.8.10226" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3316.305596][ T30] audit: type=1400 audit(2000000290.787:14867): avc: denied { read open } for pid=11715 comm="syz.8.10226" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3316.342369][ T30] audit: type=1400 audit(2000000290.890:14868): avc: denied { create } for pid=11712 comm="syz.7.10225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3316.372849][ T30] audit: type=1400 audit(2000000291.190:14869): avc: denied { create } for pid=11712 comm="syz.7.10225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3316.896933][ T30] audit: type=1400 audit(2000000291.283:14870): avc: denied { read } for pid=11715 comm="syz.8.10226" dev="nsfs" ino=4026534389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3316.952922][T10550] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 3316.956673][ T30] audit: type=1400 audit(2000000291.283:14871): avc: denied { read open } for pid=11715 comm="syz.8.10226" path="net:[4026534389]" dev="nsfs" ino=4026534389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3316.993145][ T30] audit: type=1400 audit(2000000291.283:14872): avc: denied { create } for pid=11715 comm="syz.8.10226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 3316.995446][T11673] bridge0: port 1(bridge_slave_0) entered blocking state [ 3317.030982][T11673] bridge0: port 1(bridge_slave_0) entered disabled state [ 3317.040645][T11673] bridge_slave_0: entered allmulticast mode [ 3317.054145][T11673] bridge_slave_0: entered promiscuous mode [ 3317.176701][T11673] bridge0: port 2(bridge_slave_1) entered blocking state [ 3317.188008][T11673] bridge0: port 2(bridge_slave_1) entered disabled state [ 3317.198207][T10550] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 3317.720287][T23450] Bluetooth: hci7: command tx timeout [ 3317.730470][T11673] bridge_slave_1: entered allmulticast mode [ 3317.737798][T11673] bridge_slave_1: entered promiscuous mode [ 3317.752136][T10550] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3317.783542][T10550] usb 9-1: config 0 has no interface number 0 [ 3317.813712][T10550] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3317.829499][T11673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3317.849634][T10550] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3317.871517][T11673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3317.883500][T10550] usb 9-1: Product: syz [ 3317.901953][T10550] usb 9-1: Manufacturer: syz [ 3317.954807][T10550] usb 9-1: SerialNumber: syz [ 3318.056545][T11673] team0: Port device team_slave_0 added [ 3318.078093][T10550] usb 9-1: config 0 descriptor?? [ 3318.224453][T10550] hub 9-1:0.31: bad descriptor, ignoring hub [ 3318.227705][T11673] team0: Port device team_slave_1 added [ 3318.254290][T10550] hub 9-1:0.31: probe with driver hub failed with error -5 [ 3318.725705][T10550] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 3318.732121][T10550] uvcvideo 9-1:0.31: Entity type for entity Output 6 was not initialized! [ 3318.765766][T10550] usb 9-1: Failed to create links for entity 6 [ 3318.770235][T11673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3318.782492][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3318.786466][T10550] usb 9-1: Failed to register entities (-22). [ 3318.814096][T11673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3318.837859][T11673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3318.845174][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3318.882481][T11673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3318.936396][T10550] usb 9-1: USB disconnect, device number 4 [ 3319.373406][T11673] hsr_slave_0: entered promiscuous mode [ 3319.407204][T11673] hsr_slave_1: entered promiscuous mode [ 3319.413065][T11673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3319.424681][T11673] Cannot create hsr debugfs directory [ 3319.494145][T11749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3319.570666][T11753] overlayfs: failed to clone upperpath [ 3320.432807][ T8851] Bluetooth: hci7: command tx timeout [ 3320.676849][T11762] input: syz0 as /devices/virtual/input/input31 [ 3320.688650][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 3320.688686][ T30] audit: type=1400 audit(2000000003.460:15021): avc: denied { read write } for pid=11756 comm="syz.7.10236" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3321.083644][ T30] audit: type=1400 audit(2000000003.470:15022): avc: denied { read write open } for pid=11756 comm="syz.7.10236" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3321.418200][ T30] audit: type=1400 audit(2000000003.489:15023): avc: denied { ioctl } for pid=11756 comm="syz.7.10236" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3321.796429][ T30] audit: type=1400 audit(2000000003.498:15024): avc: denied { ioctl } for pid=11756 comm="syz.7.10236" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3322.100704][ T30] audit: type=1400 audit(2000000003.601:15025): avc: denied { ioctl } for pid=11756 comm="syz.7.10236" path="socket:[129821]" dev="sockfs" ino=129821 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3322.426496][T11673] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3322.439251][ T30] audit: type=1400 audit(2000000003.760:15026): avc: denied { create } for pid=11754 comm="syz.8.10235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3322.653148][ T30] audit: type=1400 audit(2000000003.769:15027): avc: denied { bind } for pid=11754 comm="syz.8.10235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3322.796384][ T30] audit: type=1400 audit(2000000003.769:15028): avc: denied { name_bind } for pid=11754 comm="syz.8.10235" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 3322.851595][T11673] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3322.929899][T11673] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3322.977665][ T30] audit: type=1400 audit(2000000003.769:15029): avc: denied { node_bind } for pid=11754 comm="syz.8.10235" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 3323.020900][T11673] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3323.204895][T11768] overlayfs: failed to clone upperpath [ 3323.346138][T11777] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3324.757779][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10240'. [ 3325.211072][T11673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3325.330282][T11673] 8021q: adding VLAN 0 to HW filter on device team0 [ 3325.363398][T11286] bridge0: port 1(bridge_slave_0) entered blocking state [ 3325.370537][T11286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3325.441852][T11286] bridge0: port 2(bridge_slave_1) entered blocking state [ 3325.449025][T11286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3326.254563][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 3326.254578][ T30] audit: type=1400 audit(2000000008.717:15179): avc: denied { module_request } for pid=11789 comm="syz.8.10242" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3326.359353][ T30] audit: type=1400 audit(2000000008.774:15180): avc: denied { mounton } for pid=11789 comm="syz.8.10242" path="/34/file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3326.486418][ T30] audit: type=1400 audit(2000000008.774:15181): avc: denied { mount } for pid=11789 comm="syz.8.10242" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3326.546496][ T30] audit: type=1400 audit(2000000008.933:15182): avc: denied { create } for pid=11801 comm="syz.2.10241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3326.716584][ T30] audit: type=1400 audit(2000000009.064:15183): avc: denied { module_request } for pid=11673 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3326.775034][ T30] audit: type=1400 audit(2000000009.129:15184): avc: denied { unmount } for pid=10860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3326.819466][ T30] audit: type=1400 audit(2000000009.148:15185): avc: denied { read write } for pid=10860 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3326.860983][ T30] audit: type=1400 audit(2000000009.148:15186): avc: denied { read write open } for pid=10860 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3326.916134][ T30] audit: type=1400 audit(2000000009.185:15187): avc: denied { ioctl } for pid=10860 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3326.970406][ T30] audit: type=1400 audit(2000000009.288:15188): avc: denied { sys_module } for pid=11673 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3327.357144][T11814] siw: device registration error -23 [ 3328.552372][T11822] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 3328.644784][T11821] ptrace attach of "./syz-executor exec"[10860] was attempted by "./syz-executor exec"[11821] [ 3328.832933][T11673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3329.219717][T11831] netlink: 80 bytes leftover after parsing attributes in process `syz.8.10251'. [ 3329.352896][T11832] overlayfs: missing 'lowerdir' [ 3329.516995][T11835] netlink: 'syz.2.10249': attribute type 2 has an invalid length. [ 3329.529878][T11835] þ: entered promiscuous mode [ 3330.552012][T11841] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 3331.444004][T11854] set match dimension is over the limit! [ 3332.098765][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 3332.098779][ T30] audit: type=1400 audit(2000000014.190:15324): avc: denied { create } for pid=11849 comm="syz.8.10256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 3332.249300][ T30] audit: type=1400 audit(2000000014.218:15325): avc: denied { read write } for pid=11849 comm="syz.8.10256" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3332.268728][T11673] veth0_vlan: entered promiscuous mode [ 3332.306472][T11673] veth1_vlan: entered promiscuous mode [ 3332.311782][ T30] audit: type=1400 audit(2000000014.218:15326): avc: denied { read write open } for pid=11849 comm="syz.8.10256" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3332.349650][ T30] audit: type=1400 audit(2000000014.218:15327): avc: denied { mounton } for pid=11849 comm="syz.8.10256" path="/39/file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3332.380214][ T30] audit: type=1400 audit(2000000014.218:15328): avc: denied { mount } for pid=11849 comm="syz.8.10256" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 3332.421433][ T30] audit: type=1400 audit(2000000014.283:15329): avc: denied { read write } for pid=11849 comm="syz.8.10256" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3332.506957][ T30] audit: type=1400 audit(2000000014.283:15330): avc: denied { read write open } for pid=11849 comm="syz.8.10256" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3332.545384][ T30] audit: type=1400 audit(2000000014.451:15331): avc: denied { prog_load } for pid=11848 comm="syz.7.10254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3332.598962][T11673] veth0_macvtap: entered promiscuous mode [ 3332.637259][ T30] audit: type=1400 audit(2000000014.451:15332): avc: denied { bpf } for pid=11848 comm="syz.7.10254" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3332.648459][T11673] veth1_macvtap: entered promiscuous mode [ 3332.768811][ T30] audit: type=1400 audit(2000000014.451:15333): avc: denied { create } for pid=11858 comm="syz.0.10258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3332.840703][T11673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3332.906821][T11673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3332.986338][T11673] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3333.016700][T11673] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3333.089242][T11860] orangefs_mount: mount request failed with -4 [ 3333.154600][T11673] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3333.163324][T11673] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3334.583124][T11286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3334.588722][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10262'. [ 3335.230033][T11286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3335.318146][ T7057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3335.336242][ T7057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3337.859007][ T30] kauditd_printk_skb: 2296 callbacks suppressed [ 3337.859026][ T30] audit: type=1400 audit(2000000019.362:15584): avc: denied { bpf } for pid=11896 comm="syz.9.10212" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3337.971085][ T30] audit: type=1400 audit(2000000019.362:15585): avc: denied { bpf } for pid=11896 comm="syz.9.10212" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3338.100563][ T30] audit: type=1400 audit(2000000019.362:15586): avc: denied { prog_run } for pid=11896 comm="syz.9.10212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3338.123239][ T30] audit: type=1400 audit(2000000019.727:15587): avc: denied { module_request } for pid=11896 comm="syz.9.10212" kmod="net-pf-2-proto-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3338.151670][ T30] audit: type=1400 audit(2000000019.765:15588): avc: denied { read write } for pid=10860 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3338.230850][ T30] audit: type=1400 audit(2000000019.783:15589): avc: denied { read write open } for pid=10860 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3338.447892][ T30] audit: type=1400 audit(2000000019.783:15590): avc: denied { ioctl } for pid=10860 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3338.487247][ T30] audit: type=1400 audit(2000000019.867:15591): avc: denied { read write } for pid=11673 comm="syz-executor" name="loop9" dev="devtmpfs" ino=3292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3339.225177][ T30] audit: type=1400 audit(2000000019.867:15592): avc: denied { read write open } for pid=11673 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=3292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3339.251072][ T30] audit: type=1400 audit(2000000019.877:15593): avc: denied { ioctl } for pid=11673 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=3292 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3343.424441][ T30] kauditd_printk_skb: 179 callbacks suppressed [ 3343.424453][ T30] audit: type=1400 audit(2000000024.778:15773): avc: denied { map_create } for pid=11937 comm="syz.9.10274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3343.531492][ T30] audit: type=1400 audit(2000000024.881:15774): avc: denied { create } for pid=11944 comm="syz.8.10276" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3343.619232][ T30] audit: type=1400 audit(2000000024.881:15775): avc: denied { ioctl } for pid=11944 comm="syz.8.10276" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=131348 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3343.779957][ T30] audit: type=1400 audit(2000000024.881:15776): avc: denied { ioctl } for pid=11944 comm="syz.8.10276" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=131348 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3344.155298][ T30] audit: type=1400 audit(2000000024.919:15777): avc: denied { map_create } for pid=11944 comm="syz.8.10276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3344.546913][ T30] audit: type=1400 audit(2000000025.012:15778): avc: denied { create } for pid=11944 comm="syz.8.10276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3344.621293][ T30] audit: type=1400 audit(2000000025.012:15779): avc: denied { bind } for pid=11944 comm="syz.8.10276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3344.668523][ T30] audit: type=1400 audit(2000000025.021:15780): avc: denied { name_bind } for pid=11944 comm="syz.8.10276" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 3344.726526][ T30] audit: type=1400 audit(2000000025.021:15781): avc: denied { node_bind } for pid=11944 comm="syz.8.10276" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 3344.783097][ T30] audit: type=1400 audit(2000000025.031:15782): avc: denied { connect } for pid=11944 comm="syz.8.10276" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3345.137924][T11959] Can't find ip_set type hash:net,por [ 3345.711052][T11951] overlayfs: missing 'lowerdir' [ 3345.759003][ T8851] Bluetooth: hci5: command 0x0406 tx timeout [ 3346.568151][T11960] blkio.reset_stats is deprecated [ 3348.777007][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 3348.777022][ T30] audit: type=1400 audit(2000000029.792:15927): avc: denied { map_create } for pid=11984 comm="syz.7.10285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3349.165022][ T30] audit: type=1400 audit(2000000029.829:15928): avc: denied { write } for pid=11984 comm="syz.7.10285" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3349.199988][T11995] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3349.206788][T11995] audit: audit_lost=2902 audit_rate_limit=0 audit_backlog_limit=64 [ 3349.217560][T11995] audit: backlog limit exceeded [ 3349.227721][T11995] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3349.236085][T11995] audit: audit_lost=2903 audit_rate_limit=0 audit_backlog_limit=64 [ 3349.247207][T11995] audit: backlog limit exceeded [ 3349.252552][T11995] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3349.261728][T11995] audit: audit_lost=2904 audit_rate_limit=0 audit_backlog_limit=64 [ 3349.949799][T11989] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 3351.510035][T12020] SELinux: syz.8.10293 (12020) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 3351.709638][T12020] bpf: Bad value for 'uid' [ 3352.793940][T12025] lo speed is unknown, defaulting to 1000 [ 3352.800447][T12025] lo speed is unknown, defaulting to 1000 [ 3353.404253][T12035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12035 comm=syz.2.10291 [ 3353.550859][T12030] syz.9.10292 (12030): drop_caches: 2 [ 3354.289957][ T30] kauditd_printk_skb: 915 callbacks suppressed [ 3354.289974][ T30] audit: type=1400 audit(2000000004.097:16711): avc: denied { read write } for pid=12037 comm="syz.8.10295" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3354.888636][ T30] audit: type=1400 audit(2000000004.097:16712): avc: denied { read write open } for pid=12037 comm="syz.8.10295" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3354.942338][ T30] audit: type=1400 audit(2000000004.125:16713): avc: denied { create } for pid=12037 comm="syz.8.10295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3354.985388][ T30] audit: type=1400 audit(2000000004.153:16714): avc: denied { create } for pid=12037 comm="syz.8.10295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 3355.100263][ T30] audit: type=1400 audit(2000000004.527:16715): avc: denied { read } for pid=12043 comm="syz.7.10297" dev="nsfs" ino=4026534163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3355.178735][ T30] audit: type=1400 audit(2000000004.527:16716): avc: denied { read open } for pid=12043 comm="syz.7.10297" path="net:[4026534163]" dev="nsfs" ino=4026534163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3355.204779][ T30] audit: type=1400 audit(2000000004.536:16717): avc: denied { create } for pid=12043 comm="syz.7.10297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3355.230302][ T30] audit: type=1400 audit(2000000004.546:16718): avc: denied { read append } for pid=12043 comm="syz.7.10297" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3355.409388][ T30] audit: type=1400 audit(2000000004.555:16719): avc: denied { read append open } for pid=12043 comm="syz.7.10297" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3355.603370][T12054] overlayfs: failed to clone upperpath [ 3355.761825][T12052] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 3355.770629][ T30] audit: type=1400 audit(2000000004.555:16720): avc: denied { ioctl } for pid=12043 comm="syz.7.10297" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3355.891823][T12057] SELinux: policydb table sizes (8,-2145189879) do not match mine (8,9) [ 3355.900520][T12057] SELinux: failed to load policy [ 3356.452521][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10302'. [ 3356.626325][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10302'. [ 3359.666063][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 3359.666093][ T30] audit: type=1400 audit(2000000009.456:16860): avc: denied { name_bind } for pid=12080 comm="syz.7.10308" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 3359.814237][ T30] audit: type=1400 audit(2000000009.456:16861): avc: denied { node_bind } for pid=12080 comm="syz.7.10308" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 3359.835179][ C1] vkms_vblank_simulate: vblank timer overrun [ 3359.847328][ T30] audit: type=1400 audit(2000000009.578:16862): avc: denied { create } for pid=12080 comm="syz.7.10308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3359.874694][ T30] audit: type=1400 audit(2000000009.597:16863): avc: denied { name_bind } for pid=12086 comm="syz.9.10311" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 3359.900478][ T30] audit: type=1400 audit(2000000009.597:16864): avc: denied { node_bind } for pid=12086 comm="syz.9.10311" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 3359.923157][ C1] vkms_vblank_simulate: vblank timer overrun [ 3359.943543][ T30] audit: type=1400 audit(2000000009.597:16865): avc: denied { create } for pid=12084 comm="syz.8.10310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3361.314147][T12082] 9pnet_fd: Insufficient options for proto=fd [ 3361.373199][ T30] audit: type=1400 audit(2000000009.662:16866): avc: denied { map_create } for pid=12081 comm="syz.2.10306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3361.461509][ T30] audit: type=1400 audit(2000000009.718:16867): avc: denied { create } for pid=12088 comm="syz.0.10309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3361.498475][ T30] audit: type=1400 audit(2000000009.765:16868): avc: denied { create } for pid=12081 comm="syz.2.10306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3361.573444][ T30] audit: type=1400 audit(2000000009.765:16869): avc: denied { write } for pid=12081 comm="syz.2.10306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3363.979231][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10315'. [ 3364.023646][T12115] veth2: entered promiscuous mode [ 3364.051768][T12115] veth2: entered allmulticast mode [ 3364.101310][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10316'. [ 3364.263878][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10315'. [ 3364.305680][T12120] blktrace: Concurrent blktraces are not allowed on sg0 [ 3364.896663][T12132] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10318'. [ 3365.486408][ T30] kauditd_printk_skb: 1222 callbacks suppressed [ 3365.486423][ T30] audit: type=1400 audit(2000000014.910:17066): avc: denied { read write } for pid=12104 comm="syz.8.10316" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3365.557666][T12123] overlayfs: missing 'lowerdir' [ 3365.564788][ T30] audit: type=1400 audit(2000000014.938:17067): avc: denied { ioctl open } for pid=12104 comm="syz.8.10316" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3365.593892][ T30] audit: type=1400 audit(2000000014.966:17068): avc: denied { mounton } for pid=12121 comm="syz.7.10317" path="/60/bus" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3365.634182][ T30] audit: type=1400 audit(2000000015.041:17069): avc: denied { read } for pid=12121 comm="syz.7.10317" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3365.657840][ T30] audit: type=1400 audit(2000000015.041:17070): avc: denied { read open } for pid=12121 comm="syz.7.10317" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3365.716653][ T30] audit: type=1400 audit(2000000015.116:17071): avc: denied { create } for pid=12121 comm="syz.7.10317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3365.791452][ T30] audit: type=1400 audit(2000000015.153:17072): avc: denied { prog_load } for pid=12121 comm="syz.7.10317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3365.852618][ T30] audit: type=1400 audit(2000000015.153:17073): avc: denied { bpf } for pid=12121 comm="syz.7.10317" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3365.876362][ T30] audit: type=1400 audit(2000000015.190:17074): avc: denied { create } for pid=12135 comm="syz.0.10320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3365.913549][ T30] audit: type=1400 audit(2000000015.190:17075): avc: denied { write } for pid=12135 comm="syz.0.10320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3366.125693][ T31] INFO: task syz.6.9975:10643 blocked for more than 143 seconds. [ 3366.134107][ T31] Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 [ 3366.145874][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3366.174614][ T31] task:syz.6.9975 state:D stack:25560 pid:10643 tgid:10634 ppid:30127 task_flags:0x400140 flags:0x00004006 [ 3366.193758][ T31] Call Trace: [ 3366.197089][ T31] [ 3366.204174][ T31] __schedule+0x116a/0x5de0 [ 3366.208739][ T31] ? rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 3366.219210][ T31] ? netlink_unicast+0x53d/0x7f0 [ 3366.226384][ T31] ? netlink_sendmsg+0x8d1/0xdd0 [ 3366.234869][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 3366.239906][ T31] ? __lock_acquire+0x622/0x1c90 [ 3366.248656][ T31] ? __pfx___schedule+0x10/0x10 [ 3366.254819][ T31] ? find_held_lock+0x2b/0x80 [ 3366.291018][ T31] ? schedule+0x2d7/0x3a0 [ 3366.321971][ T31] schedule+0xe7/0x3a0 [ 3366.349088][ T31] schedule_timeout+0x257/0x290 [ 3366.406093][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 3366.411507][ T31] ? mark_held_locks+0x49/0x80 [ 3366.466759][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3366.483816][ T31] __wait_for_common+0x2ff/0x4e0 [ 3366.500117][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 3366.512785][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 3366.528585][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 3366.541348][ T31] disable_device+0x16f/0x280 [ 3366.556058][ T31] ? __pfx_disable_device+0x10/0x10 [ 3366.561405][ T31] __ib_unregister_device+0x2b4/0x480 [ 3366.567341][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 3366.577755][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 3366.583542][ T31] nldev_dellink+0x21f/0x320 [ 3366.620926][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 3366.626136][ T31] ? cap_capable+0xb3/0x250 [ 3366.643380][ T31] ? bpf_lsm_capable+0x9/0x10 [ 3366.648092][ T31] ? security_capable+0x7e/0x260 [ 3366.656090][ T31] ? ns_capable+0xd7/0x110 [ 3366.667773][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 3366.675904][ T31] rdma_nl_rcv_msg+0x387/0x6e0 [ 3366.685838][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 3366.691243][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 3366.697665][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 3366.704672][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 3366.709963][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 3366.714890][ T31] netlink_unicast+0x53d/0x7f0 [ 3366.719674][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 3366.725105][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 3366.729887][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3366.735221][ T31] ____sys_sendmsg+0xa95/0xc70 [ 3366.739978][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 3366.746104][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3366.751406][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 3366.756728][ T31] ___sys_sendmsg+0x134/0x1d0 [ 3366.761392][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 3366.766695][ T31] ? __lock_acquire+0x622/0x1c90 [ 3366.771681][ T31] __sys_sendmsg+0x16d/0x220 [ 3366.776276][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 3366.781399][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 3366.786343][ T31] do_syscall_64+0xcd/0x4c0 [ 3366.790872][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3366.796763][ T31] RIP: 0033:0x7f2abfb8e969 [ 3366.801311][ T31] RSP: 002b:00007f2ac0983038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3366.809898][ T31] RAX: ffffffffffffffda RBX: 00007f2abfdb6240 RCX: 00007f2abfb8e969 [ 3366.817874][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 3366.825899][ T31] RBP: 00007f2abfc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3366.833925][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3366.841931][ T31] R13: 0000000000000000 R14: 00007f2abfdb6240 R15: 00007fff18becc58 [ 3366.849903][ T31] [ 3366.853181][ T31] INFO: task syz.4.9988:10706 blocked for more than 144 seconds. [ 3366.862579][ T31] Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 [ 3366.869872][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3366.879658][T12114] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3366.888377][T12114] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3366.895623][ T31] task:syz.4.9988 state:D stack:25448 pid:10706 tgid:10700 ppid:5814 task_flags:0x400140 flags:0x00004006 [ 3366.897231][T12114] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3366.912789][ T31] Call Trace: [ 3366.917649][T12114] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3366.932731][T12114] vxlan0: entered promiscuous mode [ 3366.939058][ T31] [ 3366.942030][ T31] __schedule+0x116a/0x5de0 [ 3366.946979][ T31] ? __lock_acquire+0x622/0x1c90 [ 3366.966233][ T31] ? __pfx___schedule+0x10/0x10 [ 3366.973552][ T31] ? find_held_lock+0x2b/0x80 [ 3366.978241][ T31] ? schedule+0x2d7/0x3a0 [ 3366.983436][ T31] schedule+0xe7/0x3a0 [ 3366.987532][ T31] schedule_preempt_disabled+0x13/0x30 [ 3366.993314][ T31] __mutex_lock+0x6c7/0xb90 [ 3366.997858][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 3367.003274][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3367.008294][ T31] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 3367.014094][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3367.020089][ T31] ? find_held_lock+0x2b/0x80 [ 3367.024900][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 3367.030275][ T31] rdma_dev_change_netns+0x30/0x320 [ 3367.035486][ T31] rdma_dev_exit_net+0x2dd/0x590 [ 3367.040420][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 3367.045983][ T31] ? __pfx___might_resched+0x10/0x10 [ 3367.051264][ T31] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 3367.057089][ T31] ? mutex_is_locked+0x17/0x60 [ 3367.061859][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 3367.067396][ T31] ops_exit_list+0xb0/0x180 [ 3367.071904][ T31] setup_net+0x4e8/0x850 [ 3367.076605][ T31] ? __pfx_setup_net+0x10/0x10 [ 3367.081368][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 3367.086766][ T31] ? __pfx_down_read_killable+0x10/0x10 [ 3367.092318][ T31] ? debug_mutex_init+0x37/0x70 [ 3367.097168][ T31] copy_net_ns+0x2a6/0x5f0 [ 3367.101648][ T31] create_new_namespaces+0x3ea/0xa90 [ 3367.106943][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 3367.112675][ T31] ksys_unshare+0x45b/0xa40 [ 3367.117189][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 3367.122269][ T31] ? xfd_validate_state+0x61/0x180 [ 3367.127391][ T31] __x64_sys_unshare+0x31/0x40 [ 3367.132199][ T31] do_syscall_64+0xcd/0x4c0 [ 3367.136707][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3367.142815][ T31] RIP: 0033:0x7fb8cdb8e969 [ 3367.147210][ T31] RSP: 002b:00007fb8ce9ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 3367.155689][ T31] RAX: ffffffffffffffda RBX: 00007fb8cddb6160 RCX: 00007fb8cdb8e969 [ 3367.163717][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044040200 [ 3367.171675][ T31] RBP: 00007fb8cdc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3367.179716][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3367.188015][ T31] R13: 0000000000000000 R14: 00007fb8cddb6160 R15: 00007ffcf51aa378 [ 3367.196124][ T31] [ 3367.199188][ T31] [ 3367.199188][ T31] Showing all locks held in the system: [ 3367.303426][ T31] 1 lock held by khungtaskd/31: [ 3367.308305][ T31] #0: ffffffff8e3c27c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 3367.315707][T12126] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3367.336147][ T31] 1 lock held by klogd/5175: [ 3367.342926][ T31] 2 locks held by getty/5582: [ 3367.358132][ T31] #0: ffff888032fb50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 3367.385900][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 3367.396042][ T31] 3 locks held by kworker/u8:17/3874: [ 3367.417916][ T31] #0: ffff8881456a5148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 3367.428755][ T31] #1: ffffc9000ca77d10 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 3367.442332][ T31] #2: ffffffff9013b868 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xcf/0x640 [ 3367.453180][ T31] 4 locks held by kworker/u8:47/7045: [ 3367.458537][ T31] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 3367.471465][ T31] #1: ffffc9000fa7fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 3367.481434][ T31] #2: ffffffff901259d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 3367.491285][ T31] #3: ffff8880335e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 3367.502916][ T31] 2 locks held by syz.6.9975/10643: [ 3367.508192][ T31] #0: ffffffff9aec6df8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 3367.518580][ T31] #1: ffff8880335e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 3367.532650][ T31] 2 locks held by syz.4.9988/10706: [ 3367.539667][ T31] #0: ffffffff901259d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 3367.549286][ T31] #1: ffff8880335e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 3367.562034][ T31] 3 locks held by kworker/1:4/10886: [ 3367.567314][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 3367.578278][ T31] #1: ffffc9000c677d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 3367.588114][ T31] #2: ffffffff8e3cdd78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 3367.598168][ T31] 6 locks held by kworker/u8:0/11286: [ 3367.603610][ T31] #0: ffff8880b843a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 3367.613864][ T31] #1: ffffc90003887d10 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 3367.625611][ T31] #2: ffffffff9ae18d08 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x135/0x3a0 [ 3367.636177][ T31] #3: ffffffff9ad718f0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 3367.646572][ T31] #4: ffffffff8e3c27c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 3367.656340][ T31] #5: ffffffff8e3c27c0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x37/0x570 [ 3367.666087][ T31] 2 locks held by syz.1.10179/11536: [ 3367.671363][ T31] #0: ffffffff901259d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 3367.681047][ T31] #1: ffff8880335e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 3367.692652][ T31] 1 lock held by syz.9.10315/12103: [ 3367.697912][ T31] #0: ffffffff9013b868 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 3367.770748][ T31] [ 3367.773105][ T31] ============================================= [ 3367.773105][ T31] [ 3367.814113][ T31] NMI backtrace for cpu 1 [ 3367.814128][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(full) [ 3367.814150][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3367.814160][ T31] Call Trace: [ 3367.814166][ T31] [ 3367.814173][ T31] dump_stack_lvl+0x116/0x1f0 [ 3367.814194][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 3367.814216][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 3367.814240][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3367.814263][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 3367.814288][ T31] watchdog+0xf70/0x12c0 [ 3367.814309][ T31] ? __pfx_watchdog+0x10/0x10 [ 3367.814323][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3367.814350][ T31] ? __kthread_parkme+0x19e/0x250 [ 3367.814373][ T31] ? __pfx_watchdog+0x10/0x10 [ 3367.814388][ T31] kthread+0x3c5/0x780 [ 3367.814412][ T31] ? __pfx_kthread+0x10/0x10 [ 3367.814438][ T31] ? rcu_is_watching+0x12/0xc0 [ 3367.814456][ T31] ? __pfx_kthread+0x10/0x10 [ 3367.814493][ T31] ret_from_fork+0x5d4/0x6f0 [ 3367.814514][ T31] ? __pfx_kthread+0x10/0x10 [ 3367.814538][ T31] ret_from_fork_asm+0x1a/0x30 [ 3367.814570][ T31] [ 3367.814576][ T31] Sending NMI from CPU 1 to CPUs 0: [ 3367.938712][ C0] NMI backtrace for cpu 0 [ 3367.938725][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(full) [ 3367.938742][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3367.938750][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3367.938773][ C0] Code: 66 5a 02 e9 43 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 43 14 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 3367.938787][ C0] RSP: 0018:ffffffff8e007e08 EFLAGS: 000002c6 [ 3367.938799][ C0] RAX: 000000000a846c2f RBX: 0000000000000000 RCX: ffffffff8b75c0d9 [ 3367.938807][ C0] RDX: 0000000000000000 RSI: ffffffff8dbf4484 RDI: ffffffff8bf51500 [ 3367.938816][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed101708663d [ 3367.938824][ C0] R10: ffff8880b84331eb R11: 0000000000000001 R12: 0000000000000000 [ 3367.938833][ C0] R13: ffffffff8e097740 R14: ffffffff90866450 R15: 0000000000000000 [ 3367.938846][ C0] FS: 0000000000000000(0000) GS:ffff88812499f000(0000) knlGS:0000000000000000 [ 3367.938859][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3367.938868][ C0] CR2: 00007f314378fe9c CR3: 00000000363d8000 CR4: 00000000003526f0 [ 3367.938877][ C0] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 3367.938884][ C0] DR3: 1000000100000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3367.938893][ C0] Call Trace: [ 3367.938897][ C0] [ 3367.938902][ C0] default_idle+0x13/0x20 [ 3367.938916][ C0] default_idle_call+0x6d/0xb0 [ 3367.938930][ C0] do_idle+0x391/0x510 [ 3367.938946][ C0] ? __pfx_do_idle+0x10/0x10 [ 3367.938959][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 3367.938977][ C0] cpu_startup_entry+0x4f/0x60 [ 3367.938990][ C0] rest_init+0x16b/0x2b0 [ 3367.939004][ C0] ? acpi_subsystem_init+0x133/0x180 [ 3367.939023][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 3367.939037][ C0] start_kernel+0x3e9/0x4d0 [ 3367.939051][ C0] x86_64_start_reservations+0x18/0x30 [ 3367.939063][ C0] x86_64_start_kernel+0x130/0x190 [ 3367.939076][ C0] common_startup_64+0x13e/0x148 [ 3367.939099][ C0] [ 3368.156939][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3368.163818][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-03645-g3d413f0cfd7e #0 PREEMPT(full) [ 3368.175274][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3368.185326][ T31] Call Trace: [ 3368.188605][ T31] [ 3368.191531][ T31] dump_stack_lvl+0x3d/0x1f0 [ 3368.196124][ T31] panic+0x71c/0x800 [ 3368.200026][ T31] ? __pfx_panic+0x10/0x10 [ 3368.204445][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3368.209823][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3368.215806][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3368.221181][ T31] ? watchdog+0xdda/0x12c0 [ 3368.225592][ T31] ? watchdog+0xdcd/0x12c0 [ 3368.230010][ T31] watchdog+0xdeb/0x12c0 [ 3368.234251][ T31] ? __pfx_watchdog+0x10/0x10 [ 3368.238931][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3368.244135][ T31] ? __kthread_parkme+0x19e/0x250 [ 3368.249158][ T31] ? __pfx_watchdog+0x10/0x10 [ 3368.253826][ T31] kthread+0x3c5/0x780 [ 3368.257903][ T31] ? __pfx_kthread+0x10/0x10 [ 3368.262497][ T31] ? rcu_is_watching+0x12/0xc0 [ 3368.267255][ T31] ? __pfx_kthread+0x10/0x10 [ 3368.271847][ T31] ret_from_fork+0x5d4/0x6f0 [ 3368.276436][ T31] ? __pfx_kthread+0x10/0x10 [ 3368.281030][ T31] ret_from_fork_asm+0x1a/0x30 [ 3368.285802][ T31] [ 3368.289004][ T31] Kernel Offset: disabled [ 3368.293304][ T31] Rebooting in 86400 seconds..