last executing test programs: 27.318844428s ago: executing program 3 (id=4): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x3, 0x4, 0x4, 0xfffffff8}, 0x48) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x15f49, 0xb}, 0x30, 0x2) landlock_restrict_self(r3, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101200, 0x8) bind$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x165842, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) pwritev2(r5, 0x0, 0x0, 0x7a00, 0x0, 0x20) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000c80)={r6, 0xa1, "df86816cf383d252a97216f3b7453239bc3a4a74d2f9c5299da854e21a5832db6f818483ba5c762b28c0e1d672ea80b6994074284ad56dcaec4a94b2f2b9d1966c8494c2ea222b969f7ac862d7c49fd3268cb1abbecb8caa83386865f660b8afa1a07b96b882f5415b13209db5d274b2e1389ae31eb795ae5ac7c62fc042e658540353a55ca01ed11d93c48f410a3658a47ef921b84d5d921efb0d68cce7f38ffa"}, &(0x7f0000000000)=0xa9) 25.839618348s ago: executing program 3 (id=6): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 22.48174864s ago: executing program 4 (id=8): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES32], 0x0, 0x0, 0x0}, 0x0) 22.102270944s ago: executing program 3 (id=9): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r6, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x3a, 0x43, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x101001, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x0) close(r7) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) r9 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x2000, 0x2, 0x154}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r13, &(0x7f0000000180)={0x0, 0x20fb87, 0x2, 0xfffffffe, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x5a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88fe, 0x8, 0x3, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xffe9, 0x823, 0x0, 0x0}}, 0x0) 22.011927963s ago: executing program 1 (id=10): syz_emit_ethernet(0x7e3, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x7ad, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 19.507324022s ago: executing program 2 (id=12): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x92, 0x30882) dup2(r0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101004, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) close(r1) 19.278574298s ago: executing program 1 (id=13): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 18.407683785s ago: executing program 2 (id=14): socket(0x2, 0xa, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)='l', 0xfffd, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17.579301727s ago: executing program 4 (id=16): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x11a5e4c1fd51c0b5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x2f, 0xf2, 0x4, 0x7fa, 0x2, @empty, @mcast2, 0x20, 0x7800, 0x2, 0x8001}}) write(r1, &(0x7f00000002c0), 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x6, 0x1f, 0xfff, 0x1, 0x5]}, &(0x7f00000003c0)=0x54) read$dsp(r7, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r5, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x80c000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) 17.220735852s ago: executing program 2 (id=17): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x3f, 0x743}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1,0x400000,0x4', 0xe) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100004095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8000002) 15.928586828s ago: executing program 1 (id=18): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000001900), &(0x7f0000000140)=0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x166}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000002540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000001280), 0x4) socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r0, 0x0, 0x80) syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x80000) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x4000041) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r6 = getpid() syz_pidfd_open(r6, 0x0) 15.561608837s ago: executing program 2 (id=19): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x11a5e4c1fd51c0b5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x2f, 0xf2, 0x4, 0x7fa, 0x2, @empty, @mcast2, 0x20, 0x7800, 0x2, 0x8001}}) write(r1, &(0x7f00000002c0), 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f00000001c0)='syz1\x00') syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x6, 0x1f, 0xfff, 0x1, 0x5]}, &(0x7f00000003c0)=0x54) read$dsp(r8, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r5, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', 0x0, 0x80c000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) 13.151190818s ago: executing program 4 (id=22): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82080}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x188, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x4}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfffe}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='westwood', 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1210, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10a0, 0x10c0, 0x0, {0x390, 0x8f00}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1270) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x2b, 0x80003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000400)='v2\x00ul\x00\x00\x7f\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfcn\x85o\a\x00\x00\x00\x00\x00\x00\x00\xaa?4\xafq^\x00\x00\x00\x00\x00\x00\x00\xffDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9e\xf1\xe4:\xe2\x05\x00\x00\x00\x00\x00\x00\x00%\x95xX$\x84gRUo\xcd\x83\x95\xc3\xe4I\xc44)%\xb8\x9b\xcbF<\xfb#<\xe2d\xbd\xbd\x9eR\x84M\xa8\v}rQ\xc9\x9f\x9e1]\x9a\xe6\xbe\xc2\xcfc\x04\x17\"\x1a\x00o\x17\xdf\xf1\xa2`}0\x9a\xe8\xf0x\x15\x84`3\xf9\x813\x94\xecj\xd1\xa4\x03\xe6Q\xa9\xcf\xdf\x9a=\xfe\x06\xf2\xb9n|N2\xec\v\x14P\xb1\x8fh9\xa0,\xca!\xc1`\xce\x80\xf8Y)\xd6u\xb9 \x88\x7f\xad+\xc1\xc6\xb0D\x90\xff2\xadc-\x06\xdf<:-\xadA\bTH\xecg\x13\"\xa6\x94q\x83\x19\xd3\x12\x9dbI(\xf6+B\x12Ud\x83\ndv\x8f\xe0H\xba\xf1F\xa2\xbb\x11\xc2M\x92(\xf1%I\a\x9eRu\xe4\xc7L\x93\xa8\xa9\x12\x9c\xe2{]\xff\xff\xff\xffg\x9c\x13\x89\xdd\x1e\xc8\x83\xcf\xc7\xd9\xa4)o\x1aj\x8e\b>c\x9f\x8e\xf3H\xcc\xe0\xc1z\xbd\xae2\x9a\xb7\xd4}f\x9c\x0fA\xcd\xa3\xd5\xbb\xc2-r\xb2M\x15!3f=\xc4\x9f~\xbc[:\v[FT\xec$\xd5\x1c\x99^\x80\x1a\xb5zv\xa9\xed\x1f\xe5\xec\x9f\xdd\xf1\x8f\xe4C\xee\xeb\xaa^\xaf\x86\r>\xde\xa6L\xb3D\xd8v\\\x9f\xfb\xb2\r\xc8\'\x9aAa\xca\xd5\x91\xd9\xe2\x1b\x9d~ \x98\xee\xcf\xb7\xc0n\x9d>q6\xe6\xc6\x025\xef\xbajN\x8f\xd1a\xc6\t\xe4\xb4\x95\xda\xc9\xe6X\xeba\xfb\xce9\xeedZ\xcb\xff4s\x91\xf8\x90rYR\xec%\xd3\x03@\\\xda\xd7,\x035\xb6\xac\xb9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 12.780746872s ago: executing program 1 (id=23): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000001900), &(0x7f0000000140)=0x80) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r3, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000002540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000001280), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r0, 0x0, 0x80) syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x80000) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x4000041) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000003c0)={0x3, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r10 = getpid() syz_pidfd_open(r10, 0x0) mount$binder(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x281004, &(0x7f0000000340)={[{@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x1}}], [{@euid_gt}, {@appraise_type}, {@uid_lt}]}) 10.852055327s ago: executing program 3 (id=24): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES32], 0x0, 0x0, 0x0}, 0x0) 10.842711766s ago: executing program 4 (id=25): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES32], 0x0, 0x0, 0x0}, 0x0) 10.814930543s ago: executing program 0 (id=26): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x2d, @remote, 0x6}]}, &(0x7f00000007c0)=0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0xa, 0x3, 0x87) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@mcast1, 0x8, r4}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@local, 0x18, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008"], 0x5c}}, 0x20000000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) 10.703638293s ago: executing program 2 (id=27): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) preadv(0xffffffffffffffff, &(0x7f0000010440)=[{&(0x7f0000000080)=""/65, 0x41}], 0x1, 0x0, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x7, @loopback, 0x6f67}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x2276, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f0000000040)='./config/nvmet/subsystems/testnqn\x00') ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl(r0, 0x7, &(0x7f00000102c0)="45077e31ef64ebe9545e55932b1a57c062ad5309e69b5f1dab02da4f75e558fe79a3410e2c91e1340ea8eca517a590a0233ae95142893cda0f2212dadbb8a9") ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x8001) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, 0x0) r3 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) 7.597212849s ago: executing program 0 (id=28): syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000"], 0x0) 7.574927233s ago: executing program 3 (id=29): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x11a5e4c1fd51c0b5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x2f, 0xf2, 0x4, 0x7fa, 0x2, @empty, @mcast2, 0x20, 0x7800, 0x2, 0x8001}}) write(r1, &(0x7f00000002c0), 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f00000001c0)='syz1\x00') syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x6, 0x1f, 0xfff, 0x1, 0x5]}, &(0x7f00000003c0)=0x54) read$dsp(r8, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r5, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x80c000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) 6.261198495s ago: executing program 0 (id=30): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82080}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x188, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x4}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfffe}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='westwood', 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1210, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10a0, 0x10c0, 0x0, {0x390, 0x8f00}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1270) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x2b, 0x80003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/177, 0xb1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000400)='v2\x00ul\x00\x00\x7f\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfcn\x85o\a\x00\x00\x00\x00\x00\x00\x00\xaa?4\xafq^\x00\x00\x00\x00\x00\x00\x00\xffDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9e\xf1\xe4:\xe2\x05\x00\x00\x00\x00\x00\x00\x00%\x95xX$\x84gRUo\xcd\x83\x95\xc3\xe4I\xc44)%\xb8\x9b\xcbF<\xfb#<\xe2d\xbd\xbd\x9eR\x84M\xa8\v}rQ\xc9\x9f\x9e1]\x9a\xe6\xbe\xc2\xcfc\x04\x17\"\x1a\x00o\x17\xdf\xf1\xa2`}0\x9a\xe8\xf0x\x15\x84`3\xf9\x813\x94\xecj\xd1\xa4\x03\xe6Q\xa9\xcf\xdf\x9a=\xfe\x06\xf2\xb9n|N2\xec\v\x14P\xb1\x8fh9\xa0,\xca!\xc1`\xce\x80\xf8Y)\xd6u\xb9 \x88\x7f\xad+\xc1\xc6\xb0D\x90\xff2\xadc-\x06\xdf<:-\xadA\bTH\xecg\x13\"\xa6\x94q\x83\x19\xd3\x12\x9dbI(\xf6+B\x12Ud\x83\ndv\x8f\xe0H\xba\xf1F\xa2\xbb\x11\xc2M\x92(\xf1%I\a\x9eRu\xe4\xc7L\x93\xa8\xa9\x12\x9c\xe2{]\xff\xff\xff\xffg\x9c\x13\x89\xdd\x1e\xc8\x83\xcf\xc7\xd9\xa4)o\x1aj\x8e\b>c\x9f\x8e\xf3H\xcc\xe0\xc1z\xbd\xae2\x9a\xb7\xd4}f\x9c\x0fA\xcd\xa3\xd5\xbb\xc2-r\xb2M\x15!3f=\xc4\x9f~\xbc[:\v[FT\xec$\xd5\x1c\x99^\x80\x1a\xb5zv\xa9\xed\x1f\xe5\xec\x9f\xdd\xf1\x8f\xe4C\xee\xeb\xaa^\xaf\x86\r>\xde\xa6L\xb3D\xd8v\\\x9f\xfb\xb2\r\xc8\'\x9aAa\xca\xd5\x91\xd9\xe2\x1b\x9d~ \x98\xee\xcf\xb7\xc0n\x9d>q6\xe6\xc6\x025\xef\xbajN\x8f\xd1a\xc6\t\xe4\xb4\x95\xda\xc9\xe6X\xeba\xfb\xce9\xeedZ\xcb\xff4s\x91\xf8\x90rYR\xec%\xd3\x03@\\\xda\xd7,\x035\xb6\xac\xb9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6.034902053s ago: executing program 2 (id=31): ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r2, &(0x7f0000000440)="fff7ffffffff00000000000188", 0xd) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd03, &(0x7f0000000100)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f7261696400") ioctl(r6, 0xc138fd09, &(0x7f0000000300)="040000003200000000000000880100003801000001000000000000000000000000000000000000000000000000000000746573745f7261696400"/318) ioctl(r6, 0xc138fd0c, &(0x7f0000000500)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f7261696400") syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000200)=r6, 0x1) r7 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r7, &(0x7f00000002c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x41) syz_usb_control_io$hid(r5, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000240)={0x0, 0xc7, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002200)=ANY=[@ANYBLOB="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"/544, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0f00940073797a6b616c6c657230000008008d00", @ANYRES32=r1, @ANYBLOB], 0x13ac}, 0x1, 0x0, 0x0, 0x4040050}, 0x50) 5.986444168s ago: executing program 4 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_getvlan={0x38, 0x72, 0xb01, 0x70bd2b, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}}, 0x4040) 3.616365915s ago: executing program 0 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x33) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) epoll_create1(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/210, 0xd2}], 0x1, 0x60, 0x2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='00:03\n', 0x6) openat(r7, &(0x7f0000000480)='bind\x00', 0x1, 0x0) 3.613747316s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x33) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) epoll_create1(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/210, 0xd2}], 0x1, 0x60, 0x2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='00:03\n', 0x6) openat(r7, &(0x7f0000000480)='bind\x00', 0x1, 0x0) 3.385591312s ago: executing program 3 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES32], 0x0, 0x0, 0x0}, 0x0) 2.289740806s ago: executing program 0 (id=36): syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000020200000900010073797a30000000000900020073797a300000000008000a40000000010800054000000004080003400000002060000000060a01060000000000000000020000000900010073797a30000000000900020073797a300000000034000480300001800b00010064796e7365740000200002800900010073797a30000000000800034000000000080004"], 0x118}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, r5, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) 2.274050887s ago: executing program 1 (id=37): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="400a2e000000c4b333209d5ba44d2cdf5603cadbfeebc688397db29a42d1ddbd66b94e294b4b58ff7b023cc83b30b268c3b5f50b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) syz_io_uring_setup(0x6289, &(0x7f0000000040)={0x0, 0xa06d, 0x4, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000108), &(0x7f0000000110)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000010c0)={0x1f, 0x0, @any, 0x3, 0x3}, 0xe) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x0, 0x500, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800c}, 0x8000) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, 0x0, 0x24044000) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 2.244961288s ago: executing program 4 (id=38): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82080}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x188, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x4}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfffe}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='westwood', 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1210, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10a0, 0x10c0, 0x0, {0x390, 0x8f00}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1270) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x2b, 0x80003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/177, 0xb1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000400)='v2\x00ul\x00\x00\x7f\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfcn\x85o\a\x00\x00\x00\x00\x00\x00\x00\xaa?4\xafq^\x00\x00\x00\x00\x00\x00\x00\xffDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9e\xf1\xe4:\xe2\x05\x00\x00\x00\x00\x00\x00\x00%\x95xX$\x84gRUo\xcd\x83\x95\xc3\xe4I\xc44)%\xb8\x9b\xcbF<\xfb#<\xe2d\xbd\xbd\x9eR\x84M\xa8\v}rQ\xc9\x9f\x9e1]\x9a\xe6\xbe\xc2\xcfc\x04\x17\"\x1a\x00o\x17\xdf\xf1\xa2`}0\x9a\xe8\xf0x\x15\x84`3\xf9\x813\x94\xecj\xd1\xa4\x03\xe6Q\xa9\xcf\xdf\x9a=\xfe\x06\xf2\xb9n|N2\xec\v\x14P\xb1\x8fh9\xa0,\xca!\xc1`\xce\x80\xf8Y)\xd6u\xb9 \x88\x7f\xad+\xc1\xc6\xb0D\x90\xff2\xadc-\x06\xdf<:-\xadA\bTH\xecg\x13\"\xa6\x94q\x83\x19\xd3\x12\x9dbI(\xf6+B\x12Ud\x83\ndv\x8f\xe0H\xba\xf1F\xa2\xbb\x11\xc2M\x92(\xf1%I\a\x9eRu\xe4\xc7L\x93\xa8\xa9\x12\x9c\xe2{]\xff\xff\xff\xffg\x9c\x13\x89\xdd\x1e\xc8\x83\xcf\xc7\xd9\xa4)o\x1aj\x8e\b>c\x9f\x8e\xf3H\xcc\xe0\xc1z\xbd\xae2\x9a\xb7\xd4}f\x9c\x0fA\xcd\xa3\xd5\xbb\xc2-r\xb2M\x15!3f=\xc4\x9f~\xbc[:\v[FT\xec$\xd5\x1c\x99^\x80\x1a\xb5zv\xa9\xed\x1f\xe5\xec\x9f\xdd\xf1\x8f\xe4C\xee\xeb\xaa^\xaf\x86\r>\xde\xa6L\xb3D\xd8v\\\x9f\xfb\xb2\r\xc8\'\x9aAa\xca\xd5\x91\xd9\xe2\x1b\x9d~ \x98\xee\xcf\xb7\xc0n\x9d>q6\xe6\xc6\x025\xef\xbajN\x8f\xd1a\xc6\t\xe4\xb4\x95\xda\xc9\xe6X\xeba\xfb\xce9\xeedZ\xcb\xff4s\x91\xf8\x90rYR\xec%\xd3\x03@\\\xda\xd7,\x035\xb6\xac\xb9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 0s ago: executing program 0 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x33) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) epoll_create1(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/210, 0xd2}], 0x1, 0x60, 0x2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='00:03\n', 0x6) openat(r7, &(0x7f0000000480)='bind\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): [ 47.040953][ T31] audit: type=1400 audit(1790266331.963:111): avc: denied { write } for pid=5450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.097118][ T31] audit: type=1400 audit(1790266332.013:112): avc: denied { write } for pid=5461 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.272971][ T31] audit: type=1400 audit(1790266332.193:113): avc: denied { write } for pid=5464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.327861][ T31] audit: type=1400 audit(1790266332.243:114): avc: denied { write } for pid=5475 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.488395][ T31] audit: type=1400 audit(1790266332.403:115): avc: denied { write } for pid=5478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.552034][ T31] audit: type=1400 audit(1790266332.473:116): avc: denied { write } for pid=5489 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.731522][ T31] audit: type=1400 audit(1790266332.653:117): avc: denied { write } for pid=5492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.797236][ T31] audit: type=1400 audit(1790266332.713:118): avc: denied { write } for pid=5503 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.955217][ T31] audit: type=1400 audit(1790266332.873:119): avc: denied { write } for pid=5506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.013499][ T31] audit: type=1400 audit(1790266332.933:120): avc: denied { write } for pid=5517 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 51.192536][ T5567] cgroup: Unknown subsys name 'net' [ 51.312417][ T5567] cgroup: Unknown subsys name 'cpuset' [ 51.314536][ T5567] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.505736][ T5588] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.440760][ T5567] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.948928][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 54.948947][ T31] audit: type=1400 audit(1790266339.863:142): avc: denied { execmem } for pid=5590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.789914][ T31] audit: type=1400 audit(1790266340.703:143): avc: denied { create } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.789963][ T31] audit: type=1400 audit(1790266340.703:144): avc: denied { read write } for pid=5595 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.789999][ T31] audit: type=1400 audit(1790266340.703:145): avc: denied { open } for pid=5595 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.805895][ T31] audit: type=1400 audit(1790266340.723:146): avc: denied { ioctl } for pid=5595 comm="syz-executor" path="socket:[4638]" dev="sockfs" ino=4638 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.839345][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.900413][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.907435][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.907735][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.908982][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.909678][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.910669][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.911720][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.912155][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.913491][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.914191][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.914703][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.915134][ T4917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.915407][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.923219][ T31] audit: type=1400 audit(1790266340.843:147): avc: denied { read } for pid=5599 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.924297][ T31] audit: type=1400 audit(1790266340.843:148): avc: denied { open } for pid=5599 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.931774][ T31] audit: type=1400 audit(1790266340.853:149): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.944521][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.945426][ T4917] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.945892][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.946254][ T4917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.948825][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.950384][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.951805][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.958924][ T31] audit: type=1400 audit(1790266340.873:150): avc: denied { module_request } for pid=5599 comm="syz-executor" kmod="netdev-nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.965463][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.986476][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.990939][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.991385][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.124832][ T31] audit: type=1400 audit(1790266341.043:151): avc: denied { sys_module } for pid=5599 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.314732][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.314888][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.315125][ T5595] bridge_slave_0: entered allmulticast mode [ 57.316838][ T5595] bridge_slave_0: entered promiscuous mode [ 57.319250][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.319328][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.319440][ T5595] bridge_slave_1: entered allmulticast mode [ 57.320951][ T5595] bridge_slave_1: entered promiscuous mode [ 57.356885][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.356955][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.357052][ T5606] bridge_slave_0: entered allmulticast mode [ 57.360001][ T5606] bridge_slave_0: entered promiscuous mode [ 57.403704][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.403768][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.403850][ T5606] bridge_slave_1: entered allmulticast mode [ 57.404856][ T5606] bridge_slave_1: entered promiscuous mode [ 57.433368][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.477320][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.499885][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.523670][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.523740][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.523818][ T5599] bridge_slave_0: entered allmulticast mode [ 57.524866][ T5599] bridge_slave_0: entered promiscuous mode [ 57.527031][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.527096][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.527371][ T5599] bridge_slave_1: entered allmulticast mode [ 57.528607][ T5599] bridge_slave_1: entered promiscuous mode [ 57.531652][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.581979][ T5595] team0: Port device team_slave_0 added [ 57.602962][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.603059][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.603115][ T5596] bridge_slave_0: entered allmulticast mode [ 57.603792][ T5596] bridge_slave_0: entered promiscuous mode [ 57.607065][ T5595] team0: Port device team_slave_1 added [ 57.642224][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.642271][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.642427][ T5596] bridge_slave_1: entered allmulticast mode [ 57.643114][ T5596] bridge_slave_1: entered promiscuous mode [ 57.667162][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.668646][ T5606] team0: Port device team_slave_0 added [ 57.672017][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.700517][ T5606] team0: Port device team_slave_1 added [ 57.719098][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.719109][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.719122][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.751353][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.753849][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.754286][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.754296][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.754313][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.784944][ T5599] team0: Port device team_slave_0 added [ 57.797971][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.797986][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.798003][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.809000][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.809069][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.809154][ T5598] bridge_slave_0: entered allmulticast mode [ 57.811648][ T5598] bridge_slave_0: entered promiscuous mode [ 57.813548][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.813637][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.813913][ T5598] bridge_slave_1: entered allmulticast mode [ 57.815104][ T5598] bridge_slave_1: entered promiscuous mode [ 57.817932][ T5599] team0: Port device team_slave_1 added [ 57.844476][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.844492][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.844510][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.863732][ T5596] team0: Port device team_slave_0 added [ 57.866510][ T5596] team0: Port device team_slave_1 added [ 57.923346][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.923360][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.923377][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.940352][ T5595] hsr_slave_0: entered promiscuous mode [ 57.941053][ T5595] hsr_slave_1: entered promiscuous mode [ 57.953751][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.954176][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.954185][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.954202][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.965162][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.965175][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.965192][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.968637][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.968649][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.968666][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.972204][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.004036][ T5605] Bluetooth: hci3: command tx timeout [ 58.008817][ T5606] hsr_slave_0: entered promiscuous mode [ 58.010104][ T5606] hsr_slave_1: entered promiscuous mode [ 58.012336][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 58.012408][ T5606] Cannot create hsr debugfs directory [ 58.023197][ T5605] Bluetooth: hci2: command tx timeout [ 58.023289][ T5605] Bluetooth: hci1: command tx timeout [ 58.023348][ T5605] Bluetooth: hci4: command tx timeout [ 58.023402][ T5605] Bluetooth: hci0: command tx timeout [ 58.288634][ T5596] hsr_slave_0: entered promiscuous mode [ 58.289083][ T5596] hsr_slave_1: entered promiscuous mode [ 58.289392][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 58.289407][ T5596] Cannot create hsr debugfs directory [ 58.291551][ T5598] team0: Port device team_slave_0 added [ 58.293746][ T5598] team0: Port device team_slave_1 added [ 58.339632][ T5599] hsr_slave_0: entered promiscuous mode [ 58.340428][ T5599] hsr_slave_1: entered promiscuous mode [ 58.340866][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 58.340880][ T5599] Cannot create hsr debugfs directory [ 58.381563][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.381578][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.381590][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.406629][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.406643][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.406662][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.531879][ T5598] hsr_slave_0: entered promiscuous mode [ 58.532313][ T5598] hsr_slave_1: entered promiscuous mode [ 58.532599][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 58.532614][ T5598] Cannot create hsr debugfs directory [ 58.725090][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.729206][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.754765][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.757949][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.768766][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.778404][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.779085][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.783124][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.825564][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.828959][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.829550][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.853101][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.853731][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.855968][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.856509][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.861815][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.960794][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.965341][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.965942][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.969070][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.990910][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.000660][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.005403][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.015639][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.036188][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.036304][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.038434][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.041622][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.074627][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.074694][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.126701][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.129482][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.149231][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.154005][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.154617][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.159097][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.180466][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.183587][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.202651][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.291641][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.295783][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.298787][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.299427][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.307653][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.325881][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.325957][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.339442][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.347823][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.348437][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.367010][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.385332][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.385401][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.423345][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.483364][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.514649][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.517736][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.517817][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.546309][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.546389][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.568573][ T5596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.586707][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.613751][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.613833][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.653309][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.653812][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.765106][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.825117][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.857501][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.857585][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.877434][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.877518][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.080648][ T5603] Bluetooth: hci0: command tx timeout [ 60.080678][ T5603] Bluetooth: hci4: command tx timeout [ 60.080696][ T5603] Bluetooth: hci1: command tx timeout [ 60.080714][ T5603] Bluetooth: hci2: command tx timeout [ 60.080732][ T5603] Bluetooth: hci3: command tx timeout [ 60.172477][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.314954][ T5595] veth0_vlan: entered promiscuous mode [ 60.336276][ T5595] veth1_vlan: entered promiscuous mode [ 60.426473][ T5595] veth0_macvtap: entered promiscuous mode [ 60.438443][ T5595] veth1_macvtap: entered promiscuous mode [ 60.454407][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.479710][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.516220][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.554151][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.625898][ T5596] veth0_vlan: entered promiscuous mode [ 60.705201][ T5596] veth1_vlan: entered promiscuous mode [ 60.721535][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.722478][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.761009][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.761061][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.823977][ T1362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.823996][ T1362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.863317][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.904894][ T5596] veth0_macvtap: entered promiscuous mode [ 60.923809][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.934557][ T5596] veth1_macvtap: entered promiscuous mode [ 60.939049][ T1295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.939068][ T1295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.973653][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 60.973668][ T31] audit: type=1400 audit(1790266345.893:153): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.cda9n8/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 60.975344][ T31] audit: type=1400 audit(1790266345.893:154): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.976175][ T31] audit: type=1400 audit(1790266345.893:155): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.cda9n8/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.977814][ T31] audit: type=1400 audit(1790266345.893:156): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.005805][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.035827][ T31] audit: type=1400 audit(1790266345.953:157): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.cda9n8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.037407][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.054066][ T31] audit: type=1400 audit(1790266345.973:158): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.cda9n8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 61.092249][ T31] audit: type=1400 audit(1790266346.013:159): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.094556][ T5606] veth0_vlan: entered promiscuous mode [ 61.109977][ T1295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.110217][ T1295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.110245][ T1295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.110277][ T1295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.117010][ T31] audit: type=1400 audit(1790266346.033:160): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 61.125100][ T31] audit: type=1400 audit(1790266346.043:161): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="gadgetfs" ino=7029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 61.146950][ T31] audit: type=1400 audit(1790266346.063:162): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.189735][ T5598] veth0_vlan: entered promiscuous mode [ 61.193690][ T5606] veth1_vlan: entered promiscuous mode [ 61.204373][ T5599] veth0_vlan: entered promiscuous mode [ 61.263249][ T5595] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.289158][ T5598] veth1_vlan: entered promiscuous mode [ 61.316845][ T5599] veth1_vlan: entered promiscuous mode [ 61.394794][ T5606] veth0_macvtap: entered promiscuous mode [ 61.416760][ T5599] veth0_macvtap: entered promiscuous mode [ 61.418044][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.418061][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.435312][ T5606] veth1_macvtap: entered promiscuous mode [ 61.455275][ T5599] veth1_macvtap: entered promiscuous mode [ 61.484516][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.484536][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.504338][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.512736][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.525859][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.529616][ T5598] veth0_macvtap: entered promiscuous mode [ 61.536317][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.565077][ T5598] veth1_macvtap: entered promiscuous mode [ 61.655840][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.679752][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.737678][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.737693][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.890469][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.914490][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.916094][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.160381][ T5605] Bluetooth: hci3: command tx timeout [ 62.161138][ T5605] Bluetooth: hci2: command tx timeout [ 62.161254][ T5605] Bluetooth: hci1: command tx timeout [ 62.161319][ T5605] Bluetooth: hci4: command tx timeout [ 62.161652][ T5605] Bluetooth: hci0: command tx timeout [ 62.301888][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302197][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302350][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302529][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302707][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302800][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.303128][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.303868][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.304357][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.519845][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.519893][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.209398][ T1362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.209516][ T1362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.197673][ T1362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.197696][ T1362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.250816][ T5605] Bluetooth: hci3: command tx timeout [ 64.250901][ T5605] Bluetooth: hci2: command tx timeout [ 64.251002][ T5605] Bluetooth: hci1: command tx timeout [ 64.251404][ T5605] Bluetooth: hci0: command tx timeout [ 64.251849][ T5605] Bluetooth: hci4: command tx timeout [ 64.958240][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.958259][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.146228][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.146247][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.174115][ T5805] mmap: syz.4.5 (5805) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.441896][ T5800] syz.3.6 (5800): drop_caches: 2 [ 65.932869][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.932926][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.836893][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 66.836938][ T31] audit: type=1400 audit(1790266351.753:198): avc: denied { create } for pid=5819 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.577661][ T31] audit: type=1400 audit(1790266352.493:199): avc: denied { create } for pid=5831 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.578979][ T31] audit: type=1400 audit(1790266352.493:200): avc: denied { write } for pid=5831 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.579356][ T31] audit: type=1400 audit(1790266352.493:201): avc: denied { nlmsg_write } for pid=5831 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.634393][ T31] audit: type=1400 audit(1790266352.503:202): avc: denied { write } for pid=5831 comm="syz.4.8" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.671049][ T31] audit: type=1400 audit(1790266352.583:203): avc: denied { create } for pid=5829 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.671095][ T31] audit: type=1400 audit(1790266352.583:204): avc: denied { read write } for pid=5831 comm="syz.4.8" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.671131][ T31] audit: type=1400 audit(1790266352.583:205): avc: denied { open } for pid=5831 comm="syz.4.8" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.671166][ T31] audit: type=1400 audit(1790266352.583:206): avc: denied { ioctl } for pid=5831 comm="syz.4.8" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.671212][ T31] audit: type=1400 audit(1790266352.593:207): avc: denied { write } for pid=5829 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.681576][ T5840] can0: slcan on ttyS3. [ 67.945397][ T5837] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.990940][ T5840] can0 (unregistered): slcan off ttyS3. [ 68.125330][ T5843] Cannot find add_set index 0 as target [ 69.210241][ T4929] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.405790][ T4929] usb 5-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 69.466220][ T4929] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.469003][ T4929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.146679][ T4929] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 70.215770][ T4929] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 70.217361][ T4929] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 70.217388][ T4929] usb 5-1: media controller created [ 71.237437][ T4929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.255120][ T5855] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 71.266769][ T4929] usb 5-1: selecting invalid altsetting 1 [ 71.266787][ T4929] set interface failed [ 71.267067][ T4929] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 71.267083][ T4929] error writing reg: 0xff, val: 0x00 [ 71.350336][ T4929] dvb_usb_mxl111sf 5-1:1.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 71.357160][ T4929] usb 5-1: USB disconnect, device number 2 [ 71.903749][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 71.903770][ T31] audit: type=1400 audit(1790266356.823:232): avc: denied { ioctl } for pid=5851 comm="syz.0.15" path="socket:[9299]" dev="sockfs" ino=9299 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.122346][ T31] audit: type=1400 audit(1790266357.043:233): avc: denied { prog_run } for pid=5861 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.569186][ T5850] syz.1.13 (5850): drop_caches: 2 [ 73.110810][ T31] audit: type=1400 audit(1790266358.023:234): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.842633][ T31] audit: type=1400 audit(1790266358.763:235): avc: denied { read } for pid=5873 comm="syz.0.20" name="sg0" dev="devtmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.847741][ T31] audit: type=1400 audit(1790266358.763:236): avc: denied { ioctl } for pid=5873 comm="syz.0.20" path="/dev/sg0" dev="devtmpfs" ino=863 ioctlcmd=0x2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.907120][ T31] audit: type=1400 audit(1790266358.823:237): avc: denied { mount } for pid=5873 comm="syz.0.20" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.937157][ T31] audit: type=1400 audit(1790266358.853:238): avc: denied { search } for pid=5873 comm="syz.0.20" name="/" dev="configfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.938481][ T31] audit: type=1400 audit(1790266358.853:239): avc: denied { search } for pid=5873 comm="syz.0.20" name="nvmet" dev="configfs" ino=3570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.939242][ T31] audit: type=1400 audit(1790266358.853:240): avc: denied { search } for pid=5873 comm="syz.0.20" name="subsystems" dev="configfs" ino=3571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.968744][ T31] audit: type=1400 audit(1790266358.883:241): avc: denied { write search } for pid=5873 comm="syz.0.20" name="subsystems" dev="configfs" ino=3571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.486018][ T1607] cfg80211: failed to load regulatory.db [ 77.015911][ T5886] F2FS-fs: Conflicting test_dummy_encryption options [ 80.020065][ T1607] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.600308][ T1607] usb 5-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 80.729113][ T1607] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.729196][ T1607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.186217][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 81.186240][ T31] audit: type=1400 audit(1790266366.103:253): avc: denied { write } for pid=5902 comm="syz.2.27" name="subsystems" dev="configfs" ino=3571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.228086][ T31] audit: type=1400 audit(1790266366.143:254): avc: denied { write } for pid=5902 comm="syz.2.27" name="subsystems" dev="configfs" ino=3571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.291101][ T1607] usb 5-1: can't set config #1, error -71 [ 82.460644][ T1607] usb 5-1: USB disconnect, device number 3 [ 85.114464][ T31] audit: type=1400 audit(1790266370.033:255): avc: denied { ioctl } for pid=5915 comm="syz.2.31" path="socket:[8845]" dev="sockfs" ino=8845 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.247904][ T5916] tipc: Started in network mode [ 85.247930][ T5916] tipc: Node identity a6b800e4127a, cluster identity 4711 [ 85.248093][ T5916] tipc: Enabled bearer , priority 10 [ 85.248118][ T31] audit: type=1400 audit(1790266370.163:256): avc: denied { mount } for pid=5918 comm="syz.0.33" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.673499][ T5713] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.230808][ T5713] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 86.238520][ T31] audit: type=1400 audit(1790266371.153:257): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.272298][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.272361][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.272441][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.323243][ T31] audit: type=1400 audit(1790266371.243:258): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.453407][ T5713] usb 3-1: config 0 descriptor?? [ 86.488262][ T5600] tipc: Node number set to 3032613092 [ 86.674115][ T5600] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.848051][ T5600] usb 4-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 86.867898][ T5600] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.868075][ T5600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.105259][ T31] audit: type=1400 audit(1790266372.023:259): avc: denied { mount } for pid=5915 comm="syz.2.31" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 87.197583][ T31] audit: type=1400 audit(1790266372.113:260): avc: denied { read } for pid=5915 comm="syz.2.31" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 87.228484][ T5600] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 87.287441][ T31] audit: type=1400 audit(1790266372.163:261): avc: denied { open } for pid=5915 comm="syz.2.31" path="/6/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 87.347592][ T5931] ======================================================= [ 87.347592][ T5931] WARNING: The mand mount option has been deprecated and [ 87.347592][ T5931] and is ignored by this kernel. Remove the mand [ 87.347592][ T5931] option from the mount to silence this warning. [ 87.347592][ T5931] ======================================================= [ 87.353975][ T5931] overlayfs: missing 'lowerdir' [ 87.424881][ T31] audit: type=1400 audit(1790266372.343:262): avc: denied { ioctl } for pid=5915 comm="syz.2.31" path="/6/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 87.480442][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.483964][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.615458][ T5600] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 87.616549][ T5600] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 87.616684][ T5600] usb 4-1: media controller created [ 87.834574][ T5713] usbhid 3-1:0.0: can't add hid device: -32 [ 87.834878][ T5713] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 88.586001][ T5600] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.803406][ T31] audit: type=1400 audit(1790266373.713:263): avc: denied { append } for pid=5915 comm="syz.2.31" name="i2c-1" dev="devtmpfs" ino=2795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.896572][ T5916] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 88.908675][ T5916] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 88.917089][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: syz.2.31 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.927767][ T5916] Tainted: [L]=SOFTLOCKUP [ 88.932089][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.942134][ T5916] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 88.947518][ T5916] Code: 08 84 d2 0f 85 62 14 00 00 44 8b 0d fd f7 c6 0f 45 85 c9 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 59 14 00 00 48 3b 5b 58 0f 85 88 07 00 00 bf 01 [ 88.967127][ T5916] RSP: 0000:ffffc90004f274b0 EFLAGS: 00010206 [ 88.973193][ T5916] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000001 [ 88.981155][ T5916] RDX: 0000000000000018 RSI: ffffffff8e366d33 RDI: 00000000000000c0 [ 88.989116][ T5916] RBP: ffffc90004f27620 R08: ffffffff88424c25 R09: 0000000000000000 [ 88.997079][ T5916] R10: ffffc90004f27638 R11: 0000000000000001 R12: 0000000000000000 [ 89.005048][ T5916] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 89.013018][ T5916] FS: 00007ff6bbcd96c0(0000) GS:ffff888123b53000(0000) knlGS:0000000000000000 [ 89.021959][ T5916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.028540][ T5916] CR2: 00005627ec788ac8 CR3: 000000002bb91000 CR4: 00000000003526f0 [ 89.036512][ T5916] Call Trace: [ 89.039789][ T5916] [ 89.042710][ T5916] ? dvb_usbv2_generic_write+0x25/0x50 [ 89.048176][ T5916] ? __mutex_lock+0x26c/0x1bd0 [ 89.052944][ T5916] ? mxl111sf_ctrl_msg+0xb8/0x2b0 [ 89.057967][ T5916] ? __pfx___schedule+0x10/0x10 [ 89.062817][ T5916] ? __pfx___mutex_lock+0x10/0x10 [ 89.067843][ T5916] ? __pfx___mutex_lock+0x10/0x10 [ 89.072867][ T5916] ? preempt_schedule_thunk+0x16/0x40 [ 89.078237][ T5916] ? preempt_schedule_common+0x3c/0xb0 [ 89.083700][ T5916] ? dvb_usbv2_generic_write+0x25/0x50 [ 89.089170][ T5916] dvb_usbv2_generic_write+0x25/0x50 [ 89.094460][ T5916] mxl111sf_ctrl_msg+0x179/0x2b0 [ 89.099402][ T5916] mxl111sf_write_reg+0x96/0x130 [ 89.104341][ T5916] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 89.109902][ T5916] mxl111sf_i2c_start+0x6e/0x220 [ 89.114840][ T5916] mxl111sf_i2c_xfer+0x178e/0x3240 [ 89.119954][ T5916] ? cgroup_destroy_locked+0x5d0/0x940 [ 89.125415][ T5916] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 89.130870][ T5916] ? pick_eevdf+0x4f9/0x880 [ 89.135377][ T5916] ? rcu_is_watching+0x13/0xc0 [ 89.140228][ T5916] ? pick_task_fair+0x136/0x1e10 [ 89.145170][ T5916] ? arch_stack_walk+0x30/0xf0 [ 89.149951][ T5916] ? kvm_sched_clock_read+0x11/0x20 [ 89.155164][ T5916] __i2c_transfer+0x5d4/0x1740 [ 89.159931][ T5916] ? __pfx___i2c_transfer+0x10/0x10 [ 89.165126][ T5916] i2c_smbus_xfer_emulated+0x235/0x1110 [ 89.170673][ T5916] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 89.176662][ T5916] ? l2tp_v3_session_get+0xd0/0x830 [ 89.181877][ T5916] ? irqentry_exit+0x24d/0xa10 [ 89.186655][ T5916] __i2c_smbus_xfer+0x612/0x10f0 [ 89.191618][ T5916] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 89.197004][ T5916] ? rt_mutex_slowtrylock+0x93/0x100 [ 89.202307][ T5916] i2c_smbus_xfer+0x17e/0x3c0 [ 89.206989][ T5916] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.212202][ T5916] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 89.217241][ T5916] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 89.222796][ T5916] ? rep_movs_alternative+0x33/0xa0 [ 89.227993][ T5916] i2cdev_ioctl+0x3cf/0x830 [ 89.232493][ T5916] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 89.237514][ T5916] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 89.242530][ T5916] __x64_sys_ioctl+0x18e/0x210 [ 89.247296][ T5916] do_syscall_64+0x123/0x790 [ 89.251888][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.257789][ T5916] RIP: 0033:0x7ff6bad9e159 [ 89.262213][ T5916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.281826][ T5916] RSP: 002b:00007ff6bbcd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.291294][ T5916] RAX: ffffffffffffffda RBX: 00007ff6bb025fa0 RCX: 00007ff6bad9e159 [ 89.299274][ T5916] RDX: 0000200000000240 RSI: 0000000000000720 RDI: 0000000000000009 [ 89.307242][ T5916] RBP: 00007ff6bae3506b R08: 0000000000000000 R09: 0000000000000000 [ 89.315205][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.323170][ T5916] R13: 00007ff6bb026038 R14: 00007ff6bb025fa0 R15: 00007ffdc42e6b78 [ 89.331143][ T5916] [ 89.334151][ T5916] Modules linked in: [ 89.339118][ T5916] ---[ end trace 0000000000000000 ]--- [ 89.378078][ T5600] usb 4-1: selecting invalid altsetting 1 [ 89.378124][ T5600] set interface failed [ 89.482575][ T31] audit: type=1400 audit(1790266374.383:264): avc: denied { read } for pid=4950 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 89.482677][ T31] audit: type=1400 audit(1790266374.383:265): avc: denied { search } for pid=4950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.482743][ T31] audit: type=1400 audit(1790266374.383:266): avc: denied { write search } for pid=4950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.861583][ T5916] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 89.861630][ T5916] Code: 08 84 d2 0f 85 62 14 00 00 44 8b 0d fd f7 c6 0f 45 85 c9 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 59 14 00 00 48 3b 5b 58 0f 85 88 07 00 00 bf 01 [ 89.862244][ T5916] RSP: 0000:ffffc90004f274b0 EFLAGS: 00010206 [ 89.862626][ T5916] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000001 [ 89.862644][ T5916] RDX: 0000000000000018 RSI: ffffffff8e366d33 RDI: 00000000000000c0 [ 89.862661][ T5916] RBP: ffffc90004f27620 R08: ffffffff88424c25 R09: 0000000000000000 [ 89.863172][ T5916] R10: ffffc90004f27638 R11: 0000000000000001 R12: 0000000000000000 [ 89.863190][ T5916] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 89.863207][ T5916] FS: 00007ff6bbcd96c0(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000 [ 89.863698][ T5916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.863715][ T5916] CR2: 00007fff6daa9f38 CR3: 000000002bb91000 CR4: 00000000003526f0 [ 89.863735][ T5916] Kernel panic - not syncing: Fatal exception [ 89.964840][ T5916] Kernel Offset: disabled [ 89.969170][ T5916] Rebooting in 86400 seconds..