last executing test programs: 15.056121872s ago: executing program 0 (id=93): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000100)) 13.839888653s ago: executing program 0 (id=97): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x6, 0x804441) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getcwd(&(0x7f0000000680)=""/37, 0x25) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e074ddfa0cef507f00"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) getpeername$inet(r1, &(0x7f0000000440)={0x2, 0x0, @multicast2}, &(0x7f0000000480)=0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000a80), 0x0}, 0x20) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c040000", @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf258900000008000300", @ANYRES32=r7, @ANYRES16=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0xff, 0xff, 0xe8}) fcntl$getown(r1, 0x9) sendmsg$nl_generic(r5, &(0x7f0000000740)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000001980)={0x20c, 0x23, 0x100, 0x70bd2c, 0x25dfdbfc, {0xb}, [@nested={0x110, 0xed, 0x0, 0x1, [@typed={0xc, 0x51, 0x0, 0x0, @u64=0x7fffffff}, @nested={0x4, 0x119}, @nested={0x4, 0xf1}, @generic="299c35b68076bb819fa643e77014f0e8d123cdc0bf1ef494f2f55086b11c26eade102d4f586a7503aea293033452741629799230cbe8255d86d9e8366d3cb19d4a7cb0bdd52ac6a433e558944eb3f63738f99545a0813f6f9f99d50f4e9ab05d0e4bf979faeddd86afe576a5c9e65e4f491d09d398dc77a32173748193b7b29b474607a92c62d2c71ff928e364d7b8d58ef126df28d3f2acfb6f86241c72a89178c8c3a55ce46c1d4da84f867381b2850e3edb7b299d90237ef5c877bd19f244cb8aa83138afd855e6d45557d87e813ce249b3e8b32048aa5fe978f5e9378782973224e438dc91b117e46d9a52afe6d72a19c54c", @nested={0x4, 0xfb}]}, @typed={0xe8, 0x101, 0x0, 0x0, @binary="f8dbe1d16383a5781a55fbc9f3127a518ddede6a64f3a882925a51609e3f2d727d42c4045c8aee390348986708cb65613d455a71c513818f04fc530955a54f35185da677c5b9c42b4dc278e985813020605d9df91ca9ec3fb1238a892c010e56c549ecb7f2c7d956023910469988c54cd9979a937a79c9724c68a086f8cfc9a361fcb736ee75004728d53523b02a55622088d8ffc089408a081fd312affd1b334b01f28ae787947bf77a2b59aee8a191e629ffc7362fb7417ac9228c5f0834e010eb3f0830cc4a878b5e89fbec5b14635beb86bb2bf9ac335c879fcd6d00915963abffad"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004805}, 0x20000040) r10 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3e40}, [@IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x60}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x20000094) copy_file_range(r10, &(0x7f0000000040)=0x2, r10, &(0x7f0000000080)=0x1e0, 0xff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r9, 0x14, 0x1, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r2, r9, 0x2a, 0x2000, r5, @value=r9, @void, @void, @void, r11}, 0x20) close_range(r9, r0, 0x2) 13.010978096s ago: executing program 0 (id=101): sched_rr_get_interval(0x0, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) (async) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) (async) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000000000000000000b33db81512e95fb8ec918874308a2200"/43], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) (async) close(r6) r7 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r7) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) quotactl_fd$Q_SYNC(r8, 0xffffffff80000100, 0x0, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7e}]}, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) 13.004307465s ago: executing program 4 (id=102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="1200009c00dd218239652dd730544d4fee6c37ff4dd1b28da5af381bf98b5146dbbcc64de816558c3fbe45eac78c29"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r7, 0x0, 0x2, 0x4}}, 0x20) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) 11.080507021s ago: executing program 4 (id=105): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000001300)='7', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001340)={0xf, {"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", 0x1000}}, 0x1006) accept$alg(r3, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000080)={r1, 0x8000000, 0x100000007, 0xffffffffffffff3a}) close_range(r4, 0xffffffffffffffff, 0x0) 10.833157171s ago: executing program 0 (id=106): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000280)={0x0, 0x2}) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x4000080) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400003, 0x5}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 10.127975269s ago: executing program 1 (id=107): socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) syz_open_dev$sndpcmc(0x0, 0x1, 0x101000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0xacfda59dfb3e524b}, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r6, 0x5609, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) capset(0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 9.559623146s ago: executing program 0 (id=108): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x4, 0xbc, 0x0, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x1, 0x7, 0x38, 0x20, 0x7}, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="050f181fcb05f4f8714107c3c008000000000000000f00010a100302"]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0xfc) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) close(r1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3f) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000240)="94", 0x1) vmsplice(r6, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x0) tee(r4, r7, 0x8f5, 0x100000000000000) sendmsg$nl_route(r3, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f00000002c0)) 8.720010202s ago: executing program 0 (id=111): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x19, 0x0, "15262cb9bd0f008fe8e5a23738755785c73a185ea0f10e5d5c6727192d4c1996b96dfcdfb4338244dac867da2abac7a2e51807018a4a210ca919ca35293af0f6e3f736988ba70342a70302980b2fffbc"}, 0xd8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) mmap$KVM_VCPU(&(0x7f0000213000/0x2000)=nil, 0x930, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000040)=0x6, 0x4) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010062, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e0035"], 0x2c}}, 0x60040050) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002abd7000fcdbdf25090002005c797a30001f000008004100727865001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 8.396242596s ago: executing program 2 (id=112): socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x2, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x20, 0x0, 0x3, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x2, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x20, 0x0, 0x3, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) socket$netlink(0x10, 0x3, 0x4) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xf, 0x7}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xf, 0x7}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x4, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x4, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.327144987s ago: executing program 3 (id=113): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_getattr(r1, &(0x7f00000002c0)={0x38}, 0x38, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) creat(&(0x7f00000005c0)='./file0\x00', 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) brk(0x101) 8.033655985s ago: executing program 1 (id=114): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) 7.513681494s ago: executing program 1 (id=115): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x7, 0x0, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x2, 0x6, 0x2, 0x9220000000000000, 0x3, 0x1, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r4, 0x20000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x81) getsockopt$llc_int(r6, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f00000003c0)=0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) 6.376065655s ago: executing program 2 (id=116): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x801180, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x41, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000500095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000010095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x48) 6.086072664s ago: executing program 4 (id=117): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') socket$nl_generic(0x10, 0x3, 0x10) pread64(r0, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000a9b8f1f2"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x15, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=ANY=[], 0x38, 0x20000800}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001540)={&(0x7f0000001480)="38d7032ab0c216141a687a4e99908858cd5ee982b85485f2895e158e05ad33a2ae7233baae6d776da17cc855d403d2fff3c4e1c9bdd559205816afd17e462c0b14d7f11abe31fcdf54f01dd87bf2f36c4d0db1e9160bb7456311b3a8cf1689c07c2d067d5bd26bb15c718f011033e857cb75f486e15cd2a0dfda80539e1229f44987a52205", 0x85}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000040)='}i', 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = open(0x0, 0x0, 0x0) mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r7, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x60, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read$alg(r1, &(0x7f0000000000)=""/46, 0x2e) 5.935113917s ago: executing program 4 (id=118): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0xc00) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r5}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x408581, 0x0) 5.7841848s ago: executing program 2 (id=119): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xfffffff6, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 5.675256861s ago: executing program 1 (id=120): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000100)) listen(r7, 0x50000000) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 5.178546502s ago: executing program 3 (id=121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x18) io_setup(0x1, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000040)='dax\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r8, 0x20, &(0x7f0000000300)={&(0x7f0000000580)=""/167, 0xa7, 0x0, &(0x7f0000000240)=""/113, 0x71}}, 0x10) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r9, 0x0, 0x0, 0x5) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) 4.142331168s ago: executing program 3 (id=122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x5, 0x2800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000500), 0x66) (fail_nth: 3) 3.500184387s ago: executing program 3 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000000000000900000003000300f488"], 0x1c}}, 0x0) 3.369566735s ago: executing program 3 (id=124): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x6020400) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x2020000) close(0x3) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r5, 0x0, 0x0, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) sysfs$3(0x3) memfd_secret(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_connect(0x0, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009040000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.1793236s ago: executing program 4 (id=125): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000140)={0x1000000, 0x0, 0x0, 0xdef0, 0xee24, 0xfffffffe}) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xffe0, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xfffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r6, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r7}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r6, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r8, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) 2.03996317s ago: executing program 2 (id=126): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x1d, 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000200)="d93db731205681d52d10713337237ab8f409e9d0286ac4f933a70765062bd617b586b1232882b4bd1d68", 0xf000}, {0x0, 0xffffffc0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c1400003e000701feffffff00000000047c000008004280040008002814018024141d"], 0x144c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r6 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r6, 0x0, 0xa) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={[&(0x7f0000000540)='[\x00', &(0x7f0000000580)='\x00', 0x0]}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$alg(0x26, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x321206, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r4, r5, 0x0) 1.482219329s ago: executing program 1 (id=127): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9d}}, './file0\x00'}) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) poll(&(0x7f0000000100)=[{r1, 0x6}, {r2, 0x2326}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r2) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1b) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x140f, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r8 = socket$netlink(0x10, 0x3, 0x13) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340)=0x1, 0x4) write$hidraw(r2, &(0x7f0000000380)="d682c8063ada552aaea7", 0xa) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) ptrace$getregs(0xc, r9, 0x7fff, &(0x7f0000000440)=""/28) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_delrule={0x2c, 0x21, 0x800, 0x70bd27, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}, @FRA_DST={0x8, 0x1, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000490}, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000580)=@gcm_256={{0x304}, "fd484f5c4d43cfb1", "1210bb0e447c8e76b5f6016bba5180c6918dd7368656d2b22d5c85a662c50b59", "8a2ef3a0", "559bb19626722047"}, 0x38) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000005c0)={'lo\x00', @random="dfbd067b4128"}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x204, r10, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xffff}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1000}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x827}, {0xc, 0x90, 0x454}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0xe}}]}, 0x204}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sched_setscheduler(r9, 0x9296d1f5d0a7272d, &(0x7f0000000940)=0xfffff952) write$P9_RLINK(r2, &(0x7f0000000980)={0x7, 0x47, 0x2}, 0x7) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1c0, 0x14, 0x400, 0x70bd29, 0x25dfdbfe, {0x28, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "0c7a059cabb21e20ae8aa178cc81bd31c19583871fc62371018830b9d972d29b24c4afd42e15faf9a830487d998fe91423ee013681b69cb2820c67a440a43d8dccbae719b0907810916d5cef5264d9180c898245c44dd45706d90bb080155a2cd1d4a736787fb1e1dfe7ca9e3175a3968ac9540289ed16a4441de603c402b3cd5fab871aa7b3e7e3b52d5ff8c055e74feabc28a8379674c4027988db8625187e60fdfa3eea258613ba3f74c4bd9cb672189f499054966611934152124593333e23"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "9b4efd1bbfaa5dd5e2069189c66180068a65469123c3f7d96d5faf6745e3b637432a95be5eb049900e9bcf74e398cabeb72997f3b3ef29bf6bbc5d4e09176c6cd19aace39a3174ded68e8f7298ed902add5915fee0b3566f886256c59b00906b453a8fea05b44c421873811ecb10a10b2dfb29c0d52ddfa06954f70b0875b0949f773082f82f69497da2d94a84f10f7329dd319e529bcecb6391ee658631ed49da2e4398fd36ae20da5d560f9874e3beb839295591ac5470985a7599a55ce71d9a0d23899780523f0515a00f825574a6fcaf32c270dd1f642882d23333ae"}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000c40), {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'ip6_vti0\x00', 'veth0_to_bond\x00', {}, {}, 0x2b, 0xd5, 0x0, 0x14}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private0, @empty, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000], 'bridge_slave_0\x00', 'gre0\x00', {0xff}, {0xff}, 0x87, 0x63, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r7) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, r11, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) rt_sigqueueinfo(r9, 0x1d, &(0x7f00000010c0)={0x3d, 0x4, 0x8000}) 533.541921ms ago: executing program 2 (id=128): preadv(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0xe6) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xb3, 0xfffffffb, 0x59, @empty, @loopback, 0x1, 0x8, 0x300000, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x9, 0x9, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x27}, 0x7, 0x700, 0x36, 0x200}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032abd7000fbdbdf250300000008000100", @ANYRES32=r2, @ANYBLOB="3c0002803800010024000100616374697665706f720000000012000000003f9882e4000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x8005}, 0x8000) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000010c0)={0xc, {"a2e3ad21ed0d52f91b5d380987f70e06d038e7ff7fc6e5539b356d298b089b0708374b090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af1079c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b75d63c3c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe603000000e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0ab00800000269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) mount$overlay(0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8915, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @loopback}}) r10 = socket$inet(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000111009078e0000002000000021400010000000000064e592a750ab36273f4012e34751776e80f3b17a519dda8e0f92d81d873de926f6ff24f969e8945c584f0004b697b9263d61edecade0ed49b2c817d4b6bf4b56642406a85e2cfde3869240005ed834126dcbb19984d45cad619e10dc697cbe5246d3569b08fb52e6bc4"], 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x401, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 251.892977ms ago: executing program 1 (id=129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000380)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r5}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) unlinkat(r7, &(0x7f00000002c0)='./file0\x00', 0x200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r7, &(0x7f0000000a80)="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", &(0x7f0000000140)=""/44}, 0x20) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x500000000000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe800000000000000000000000000008000000000000000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = socket(0xa, 0x3, 0x2) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x1, 0xb, @loopback, 0xd9b}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x2, 0x4004804) 217.250424ms ago: executing program 3 (id=130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0xa0c0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x40, 0xa2, 0x1}, 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0xa1, 0x7}, &(0x7f0000000240)=0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 133.41201ms ago: executing program 2 (id=131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x85902) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000001900)=""/110, 0x6e}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000}}], 0x3, 0x0, 0x0) 0s ago: executing program 4 (id=132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="1200009c00dd218239652dd730544d4fee6c37ff4dd1b28da5af381bf98b5146dbbcc64de816558c3fbe45eac78c29"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 58.279549][ T30] audit: type=1400 audit(1754211593.551:62): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.283284][ T5829] cgroup: Unknown subsys name 'net' [ 58.302340][ T30] audit: type=1400 audit(1754211593.561:63): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.329662][ T30] audit: type=1400 audit(1754211593.581:64): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.493042][ T5829] cgroup: Unknown subsys name 'cpuset' [ 58.500728][ T5829] cgroup: Unknown subsys name 'rlimit' [ 58.708007][ T30] audit: type=1400 audit(1754211593.981:65): avc: denied { setattr } for pid=5829 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.740523][ T30] audit: type=1400 audit(1754211593.981:66): avc: denied { create } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.767268][ T30] audit: type=1400 audit(1754211593.981:67): avc: denied { write } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.787837][ T30] audit: type=1400 audit(1754211593.981:68): avc: denied { read } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.809341][ T30] audit: type=1400 audit(1754211593.991:69): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.817588][ T5831] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.834410][ T30] audit: type=1400 audit(1754211593.991:70): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.866979][ T30] audit: type=1400 audit(1754211594.031:71): avc: denied { read } for pid=5511 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.728185][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.973372][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.978179][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.988128][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.993298][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.995631][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.010141][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.018624][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.018793][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.026426][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.041631][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.051668][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.053247][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.059158][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.066950][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.080860][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.088705][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.088985][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.097875][ T5167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.105750][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.110943][ T5167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.124861][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.132072][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.139811][ T5167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.148384][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.158837][ T5167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.535730][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 62.649362][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 62.703808][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 62.715035][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 62.789310][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.797420][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.804824][ T5840] bridge_slave_0: entered allmulticast mode [ 62.812162][ T5840] bridge_slave_0: entered promiscuous mode [ 62.819738][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 62.830034][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.837125][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.844413][ T5840] bridge_slave_1: entered allmulticast mode [ 62.851755][ T5840] bridge_slave_1: entered promiscuous mode [ 62.945176][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.963209][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.970687][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.977782][ T5839] bridge_slave_0: entered allmulticast mode [ 62.985094][ T5839] bridge_slave_0: entered promiscuous mode [ 63.005013][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.028029][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.036261][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.043404][ T5839] bridge_slave_1: entered allmulticast mode [ 63.050034][ T5839] bridge_slave_1: entered promiscuous mode [ 63.074485][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.081687][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.088777][ T5847] bridge_slave_0: entered allmulticast mode [ 63.095624][ T5847] bridge_slave_0: entered promiscuous mode [ 63.113996][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.121298][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.128485][ T5844] bridge_slave_0: entered allmulticast mode [ 63.135880][ T5844] bridge_slave_0: entered promiscuous mode [ 63.143692][ T5840] team0: Port device team_slave_0 added [ 63.149521][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.157815][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.165186][ T5844] bridge_slave_1: entered allmulticast mode [ 63.171935][ T5844] bridge_slave_1: entered promiscuous mode [ 63.178299][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.185690][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.192915][ T5847] bridge_slave_1: entered allmulticast mode [ 63.199481][ T5847] bridge_slave_1: entered promiscuous mode [ 63.229728][ T5840] team0: Port device team_slave_1 added [ 63.253092][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.262604][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.269702][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.277834][ T5854] bridge_slave_0: entered allmulticast mode [ 63.284709][ T5854] bridge_slave_0: entered promiscuous mode [ 63.292642][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.299715][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.307068][ T5854] bridge_slave_1: entered allmulticast mode [ 63.314005][ T5854] bridge_slave_1: entered promiscuous mode [ 63.344603][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.379592][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.390967][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.402774][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.428091][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.435121][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.461426][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.474552][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.502851][ T5839] team0: Port device team_slave_0 added [ 63.511885][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.521745][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.528674][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.555025][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.578546][ T5847] team0: Port device team_slave_0 added [ 63.585428][ T5839] team0: Port device team_slave_1 added [ 63.593659][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.624672][ T5847] team0: Port device team_slave_1 added [ 63.674228][ T5844] team0: Port device team_slave_0 added [ 63.696478][ T5854] team0: Port device team_slave_0 added [ 63.706109][ T5840] hsr_slave_0: entered promiscuous mode [ 63.712316][ T5840] hsr_slave_1: entered promiscuous mode [ 63.720165][ T5844] team0: Port device team_slave_1 added [ 63.735580][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.742688][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.768610][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.779818][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.786931][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.813380][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.825597][ T5854] team0: Port device team_slave_1 added [ 63.848191][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.855519][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.881559][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.892962][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.899894][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.926306][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.954468][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.961654][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.987603][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.009022][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.016017][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.042303][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.054449][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.061457][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.087597][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.103964][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.110967][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.137422][ T51] Bluetooth: hci0: command tx timeout [ 64.142871][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.203133][ T5852] Bluetooth: hci3: command tx timeout [ 64.203138][ T5846] Bluetooth: hci2: command tx timeout [ 64.203387][ T5167] Bluetooth: hci1: command tx timeout [ 64.208804][ T51] Bluetooth: hci4: command tx timeout [ 64.229871][ T5847] hsr_slave_0: entered promiscuous mode [ 64.236998][ T5847] hsr_slave_1: entered promiscuous mode [ 64.243064][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 64.248850][ T5847] Cannot create hsr debugfs directory [ 64.296933][ T5839] hsr_slave_0: entered promiscuous mode [ 64.303353][ T5839] hsr_slave_1: entered promiscuous mode [ 64.309202][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 64.315162][ T5839] Cannot create hsr debugfs directory [ 64.346320][ T5854] hsr_slave_0: entered promiscuous mode [ 64.352544][ T5854] hsr_slave_1: entered promiscuous mode [ 64.358357][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 64.364389][ T5854] Cannot create hsr debugfs directory [ 64.394057][ T5844] hsr_slave_0: entered promiscuous mode [ 64.400142][ T5844] hsr_slave_1: entered promiscuous mode [ 64.406555][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 64.412506][ T5844] Cannot create hsr debugfs directory [ 64.723208][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.744175][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.754354][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.765043][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.816228][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.826375][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.846865][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.864387][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.910026][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.923773][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.935376][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.970365][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.043826][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.054523][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.064489][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.074320][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.085198][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.136102][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.181348][ T4545] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.188468][ T4545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.213285][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.220395][ T4545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.244628][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.257359][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.276559][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.300724][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.319657][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.377382][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.404315][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.419020][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.432062][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.444604][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.451727][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.484673][ T4545] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.491813][ T4545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.499946][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 65.499962][ T30] audit: type=1400 audit(1754211600.771:86): avc: denied { sys_module } for pid=5840 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.529070][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.536187][ T4545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.574242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.581355][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.598058][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.638007][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.645150][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.703148][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.710248][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.762368][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.814207][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.826389][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.844941][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.905379][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.912524][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.928133][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.935279][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.049518][ T5840] veth0_vlan: entered promiscuous mode [ 66.099626][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.114306][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.125930][ T5840] veth1_vlan: entered promiscuous mode [ 66.185619][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.202319][ T51] Bluetooth: hci0: command tx timeout [ 66.214536][ T5840] veth0_macvtap: entered promiscuous mode [ 66.241715][ T5840] veth1_macvtap: entered promiscuous mode [ 66.264009][ T5854] veth0_vlan: entered promiscuous mode [ 66.280773][ T51] Bluetooth: hci4: command tx timeout [ 66.283300][ T5167] Bluetooth: hci3: command tx timeout [ 66.286203][ T5852] Bluetooth: hci1: command tx timeout [ 66.295684][ T5846] Bluetooth: hci2: command tx timeout [ 66.316799][ T5854] veth1_vlan: entered promiscuous mode [ 66.337403][ T5844] veth0_vlan: entered promiscuous mode [ 66.386315][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.397205][ T5844] veth1_vlan: entered promiscuous mode [ 66.406079][ T5854] veth0_macvtap: entered promiscuous mode [ 66.430955][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.444699][ T5854] veth1_macvtap: entered promiscuous mode [ 66.468470][ T72] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.488254][ T72] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.499477][ T72] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.535905][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.543400][ T72] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.611843][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.629983][ T5844] veth0_macvtap: entered promiscuous mode [ 66.665917][ T5844] veth1_macvtap: entered promiscuous mode [ 66.676918][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.706316][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.710623][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.716462][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.735711][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.751169][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.765433][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.776033][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.796276][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.809314][ T5847] veth0_vlan: entered promiscuous mode [ 66.837464][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.837640][ T2118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.852090][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.864021][ T2118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.875056][ T5847] veth1_vlan: entered promiscuous mode [ 66.887620][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.907976][ T5839] veth0_vlan: entered promiscuous mode [ 66.926497][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.936774][ T30] audit: type=1400 audit(1754211602.201:87): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.npOXhp/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.963337][ T30] audit: type=1400 audit(1754211602.201:88): avc: denied { mount } for pid=5840 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.985553][ T30] audit: type=1400 audit(1754211602.201:89): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.npOXhp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.011497][ T30] audit: type=1400 audit(1754211602.201:90): avc: denied { mount } for pid=5840 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.034486][ T30] audit: type=1400 audit(1754211602.211:91): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.npOXhp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.068217][ T30] audit: type=1400 audit(1754211602.211:92): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.npOXhp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.071455][ T5839] veth1_vlan: entered promiscuous mode [ 67.104054][ T30] audit: type=1400 audit(1754211602.211:93): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.124698][ T30] audit: type=1400 audit(1754211602.241:94): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.125959][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.148021][ T30] audit: type=1400 audit(1754211602.241:95): avc: denied { mount } for pid=5840 comm="syz-executor" name="/" dev="gadgetfs" ino=5988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.216951][ T2118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.238221][ T5847] veth0_macvtap: entered promiscuous mode [ 67.247144][ T2118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.270536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.621825][ T5847] veth1_macvtap: entered promiscuous mode [ 67.645052][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.666371][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.669313][ T2118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.687446][ T2118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.719545][ T5839] veth0_macvtap: entered promiscuous mode [ 67.798207][ T5839] veth1_macvtap: entered promiscuous mode [ 67.816573][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.824212][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.845950][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.856005][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.916860][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.933281][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.970432][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.017842][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.049096][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.098567][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.107705][ T9] IPVS: starting estimator thread 0... [ 68.132234][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.153664][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.175805][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.194983][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.210339][ T5971] IPVS: using max 56 ests per chain, 134400 per kthread [ 68.276281][ T5974] Zero length message leads to an empty skb [ 68.282382][ T5167] Bluetooth: hci0: command tx timeout [ 68.360590][ T5167] Bluetooth: hci1: command tx timeout [ 68.366127][ T5167] Bluetooth: hci4: command tx timeout [ 68.371673][ T5846] Bluetooth: hci3: command tx timeout [ 68.377598][ T5167] Bluetooth: hci2: command tx timeout [ 68.682776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.691821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.798138][ T5976] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 68.826585][ T2118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.851591][ T2118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.911719][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.936460][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.348905][ T2118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.650539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.658925][ T2118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.667633][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.678218][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.685917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.346121][ T6004] FAULT_INJECTION: forcing a failure. [ 70.346121][ T6004] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.377072][ T5852] Bluetooth: hci0: command tx timeout [ 70.386800][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.440983][ T5852] Bluetooth: hci2: command tx timeout [ 70.441293][ T5167] Bluetooth: hci3: command tx timeout [ 70.446477][ T5852] Bluetooth: hci4: command tx timeout [ 70.451937][ T5846] Bluetooth: hci1: command tx timeout [ 70.463167][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.1.13 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) [ 70.463193][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.463202][ T6004] Call Trace: [ 70.463208][ T6004] [ 70.463214][ T6004] dump_stack_lvl+0x16c/0x1f0 [ 70.463244][ T6004] should_fail_ex+0x512/0x640 [ 70.463276][ T6004] _copy_to_user+0x32/0xd0 [ 70.463296][ T6004] drm_ioctl+0x5eb/0xc30 [ 70.463317][ T6004] ? __pfx_drm_mode_addfb_ioctl+0x10/0x10 [ 70.463341][ T6004] ? __pfx_drm_ioctl+0x10/0x10 [ 70.463368][ T6004] ? selinux_file_ioctl+0x180/0x270 [ 70.463389][ T6004] ? selinux_file_ioctl+0xb4/0x270 [ 70.463409][ T6004] ? __pfx_drm_ioctl+0x10/0x10 [ 70.463426][ T6004] __x64_sys_ioctl+0x18b/0x210 [ 70.463454][ T6004] do_syscall_64+0xcd/0x4c0 [ 70.463482][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.463499][ T6004] RIP: 0033:0x7fcf6c58eb69 [ 70.463513][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.463528][ T6004] RSP: 002b:00007fcf6d419038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.463544][ T6004] RAX: ffffffffffffffda RBX: 00007fcf6c7b5fa0 RCX: 00007fcf6c58eb69 [ 70.463555][ T6004] RDX: 0000200000000000 RSI: 00000000c01c64ae RDI: 0000000000000003 [ 70.463565][ T6004] RBP: 00007fcf6d419090 R08: 0000000000000000 R09: 0000000000000000 [ 70.463575][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.463584][ T6004] R13: 0000000000000000 R14: 00007fcf6c7b5fa0 R15: 00007ffeafe398a8 [ 70.463607][ T6004] [ 70.635712][ T10] usb 3-1: device descriptor read/64, error -71 [ 70.733286][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 70.733301][ T30] audit: type=1400 audit(1754211606.011:149): avc: denied { read write } for pid=6013 comm="syz.4.16" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.935714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.955705][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.992555][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.110696][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.300483][ T30] audit: type=1400 audit(1754211606.041:150): avc: denied { open } for pid=6013 comm="syz.4.16" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 71.300531][ T30] audit: type=1400 audit(1754211606.171:151): avc: denied { create } for pid=6013 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.300565][ T30] audit: type=1400 audit(1754211606.291:152): avc: denied { create } for pid=6013 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.300600][ T30] audit: type=1400 audit(1754211606.491:153): avc: denied { ioctl } for pid=6013 comm="syz.4.16" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 71.321244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.327507][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'. [ 71.340296][ T10] usb 3-1: device descriptor read/64, error -71 [ 71.425460][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.550356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 71.560574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.603745][ T5962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 71.633745][ T30] audit: type=1400 audit(1754211606.901:154): avc: denied { shutdown } for pid=5996 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.640837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.663270][ T30] audit: type=1400 audit(1754211606.901:155): avc: denied { read } for pid=5996 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.691687][ T6018] 9pnet_fd: Insufficient options for proto=fd [ 71.696652][ T30] audit: type=1400 audit(1754211606.971:156): avc: denied { create } for pid=6013 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.041058][ T5962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 72.110283][ T30] audit: type=1400 audit(1754211607.361:157): avc: denied { create } for pid=6011 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.207240][ T30] audit: type=1400 audit(1754211607.371:158): avc: denied { write } for pid=6011 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.344495][ T10] usb usb3-port1: attempt power cycle [ 72.902486][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.937931][ T10] usb 3-1: device descriptor read/8, error -71 [ 73.136663][ T6037] ======================================================= [ 73.136663][ T6037] WARNING: The mand mount option has been deprecated and [ 73.136663][ T6037] and is ignored by this kernel. Remove the mand [ 73.136663][ T6037] option from the mount to silence this warning. [ 73.136663][ T6037] ======================================================= [ 73.171519][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.287294][ T6039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6039 comm=syz.1.21 [ 74.150445][ T24] IPVS: starting estimator thread 0... [ 74.368713][ T6049] IPVS: using max 37 ests per chain, 88800 per kthread [ 74.752409][ T6066] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 75.211253][ T976] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.693853][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.741364][ T976] usb 1-1: config 0 has no interfaces? [ 75.768387][ T976] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.791566][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.806632][ T976] usb 1-1: config 0 descriptor?? [ 75.894838][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 75.894854][ T30] audit: type=1400 audit(1754211611.171:180): avc: denied { read } for pid=6081 comm="syz.2.33" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.070612][ T30] audit: type=1400 audit(1754211611.171:181): avc: denied { open } for pid=6081 comm="syz.2.33" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.096804][ T30] audit: type=1400 audit(1754211611.251:182): avc: denied { ioctl } for pid=6081 comm="syz.2.33" path="/dev/usbmon2" dev="devtmpfs" ino=722 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.340456][ T30] audit: type=1400 audit(1754211611.321:183): avc: denied { write } for pid=6054 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.361569][ T30] audit: type=1400 audit(1754211611.451:184): avc: denied { create } for pid=6081 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.381251][ T30] audit: type=1400 audit(1754211611.451:185): avc: denied { setopt } for pid=6081 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.401643][ T30] audit: type=1400 audit(1754211611.561:186): avc: denied { read write } for pid=6085 comm="syz.1.34" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.517774][ T30] audit: type=1400 audit(1754211611.561:187): avc: denied { open } for pid=6085 comm="syz.1.34" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.540841][ T30] audit: type=1400 audit(1754211611.561:188): avc: denied { ioctl } for pid=6085 comm="syz.1.34" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.565392][ T30] audit: type=1400 audit(1754211612.741:189): avc: denied { create } for pid=6090 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.740304][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 78.442027][ T6106] netlink: 136 bytes leftover after parsing attributes in process `syz.4.38'. [ 78.604023][ T5920] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 78.758699][ T6118] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 78.765492][ T6118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.773820][ T6118] vhci_hcd vhci_hcd.0: Device attached [ 79.411722][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 79.429672][ T5881] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 79.443201][ T976] usb 1-1: string descriptor 0 read error: -71 [ 79.600232][ T6120] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 79.615656][ T6119] vhci_hcd: connection closed [ 79.728608][ T79] vhci_hcd: stop threads [ 79.787479][ T79] vhci_hcd: release socket [ 79.831568][ T79] vhci_hcd: disconnect device [ 80.007288][ T976] usb 1-1: USB disconnect, device number 2 [ 80.145758][ T24] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 80.386933][ T24] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 80.513196][ T24] usb 3-1: config 2 has no interface number 0 [ 80.519332][ T24] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 80.534268][ T6066] delete_channel: no stack [ 80.548343][ T24] usb 3-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 28514, setting to 64 [ 80.560619][ T5893] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 80.673042][ T6138] lo speed is unknown, defaulting to 1000 [ 80.687262][ T6138] lo speed is unknown, defaulting to 1000 [ 81.012750][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 81.012763][ T30] audit: type=1400 audit(1754211615.931:197): avc: denied { ioctl } for pid=6131 comm="syz.4.46" path="socket:[7705]" dev="sockfs" ino=7705 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.057773][ T6138] lo speed is unknown, defaulting to 1000 [ 81.088660][ T24] usb 3-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.107383][ T30] audit: type=1400 audit(1754211615.941:198): avc: denied { create } for pid=6131 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.127879][ T30] audit: type=1400 audit(1754211615.941:199): avc: denied { write } for pid=6131 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.155244][ T5893] usb 2-1: device descriptor read/64, error -71 [ 81.181474][ T976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.200859][ T918] cfg80211: failed to load regulatory.db [ 81.234624][ T6138] infiniband sz1: set active [ 81.239458][ T6138] infiniband sz1: added lo [ 81.267127][ T5920] lo speed is unknown, defaulting to 1000 [ 81.289594][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 81.320836][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.330967][ T24] usb 3-1: Product: syz [ 81.334040][ T6138] RDS/IB: sz1: added [ 81.339468][ T6138] smc: adding ib device sz1 with port count 1 [ 81.345836][ T6138] smc: ib device sz1 port 1 has pnetid [ 81.353697][ T6138] lo speed is unknown, defaulting to 1000 [ 81.384264][ T5920] lo speed is unknown, defaulting to 1000 [ 81.453114][ T6138] lo speed is unknown, defaulting to 1000 [ 81.537667][ T6138] lo speed is unknown, defaulting to 1000 [ 81.623489][ T6138] lo speed is unknown, defaulting to 1000 [ 81.707075][ T6138] lo speed is unknown, defaulting to 1000 [ 81.819509][ T30] audit: type=1400 audit(1754211617.091:200): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.920269][ T5893] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 81.935087][ T24] usb 3-1: Manufacturer: syz [ 81.945999][ T30] audit: type=1400 audit(1754211617.121:201): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 81.965965][ T24] usb 3-1: SerialNumber: syz [ 82.058575][ T24] usb 3-1: can't set config #2, error -71 [ 82.555842][ T24] usb 3-1: USB disconnect, device number 6 [ 82.558056][ T30] audit: type=1400 audit(1754211617.831:202): avc: denied { getopt } for pid=6157 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.580295][ T5893] usb 2-1: device descriptor read/64, error -71 [ 82.603010][ T30] audit: type=1400 audit(1754211617.861:203): avc: denied { shutdown } for pid=6157 comm="syz.3.52" lport=42486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.635681][ T30] audit: type=1400 audit(1754211617.911:204): avc: denied { read } for pid=6157 comm="syz.3.52" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 82.663622][ T30] audit: type=1400 audit(1754211617.911:205): avc: denied { open } for pid=6157 comm="syz.3.52" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 82.688917][ T30] audit: type=1400 audit(1754211617.911:206): avc: denied { ioctl } for pid=6157 comm="syz.3.52" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 82.714299][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.740691][ T5893] usb usb2-port1: attempt power cycle [ 83.083320][ T6102] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.273364][ T6174] 9pnet_fd: Insufficient options for proto=fd [ 84.210397][ T5893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.443923][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.455131][ T5893] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 84.466310][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.489399][ T5893] usb 1-1: config 0 descriptor?? [ 84.504021][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 84.530293][ T5921] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.590397][ T5881] vhci_hcd: vhci_device speed not set [ 84.660288][ T5920] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 84.681338][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 84.690014][ T5921] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 84.698837][ T5921] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 84.717635][ T5921] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 84.729896][ T5921] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 84.745160][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.764235][ T5921] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 84.796598][ T5921] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 84.810416][ T5921] usb 4-1: Product: syz [ 84.814583][ T5921] usb 4-1: Manufacturer: syz [ 84.819271][ T5921] usb 4-1: SerialNumber: syz [ 84.827487][ T5921] usb 4-1: config 0 descriptor?? [ 84.856650][ T5921] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.882939][ T5920] usb 3-1: config 0 has no interfaces? [ 84.888427][ T5920] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 84.906007][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.928546][ T5920] usb 3-1: config 0 descriptor?? [ 84.933031][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00 [ 84.943070][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.952334][ T5893] pwc: recv_control_msg error -32 req 02 val 2700 [ 84.959351][ T5921] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.972270][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.147328][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.150366][ T918] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.164221][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.176181][ T6194] netlink: 136 bytes leftover after parsing attributes in process `syz.2.64'. [ 85.187991][ T5920] usb 3-1: USB disconnect, device number 7 [ 85.220411][ T5893] pwc: recv_control_msg error -32 req 04 val 1000 [ 85.240932][ T5893] pwc: recv_control_msg error -71 req 04 val 1300 [ 85.260602][ T5893] pwc: recv_control_msg error -71 req 04 val 1400 [ 85.270581][ T5893] pwc: recv_control_msg error -71 req 02 val 2000 [ 85.307473][ T5893] pwc: recv_control_msg error -71 req 02 val 2100 [ 85.320624][ T5893] pwc: recv_control_msg error -71 req 04 val 1500 [ 85.347723][ T5893] pwc: recv_control_msg error -71 req 02 val 2500 [ 85.367861][ T5893] pwc: recv_control_msg error -71 req 02 val 2400 [ 85.382471][ T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.393765][ T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.403786][ T5893] pwc: recv_control_msg error -71 req 02 val 2600 [ 85.410837][ T5893] pwc: recv_control_msg error -71 req 02 val 2900 [ 85.417331][ T918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.430920][ T918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.440895][ T5893] pwc: recv_control_msg error -71 req 02 val 2800 [ 85.449295][ T5893] pwc: recv_control_msg error -71 req 04 val 1100 [ 85.456431][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.459152][ T5920] usb 4-1: USB disconnect, device number 2 [ 85.464672][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 85.465046][ T5893] pwc: recv_control_msg error -71 req 04 val 1200 [ 85.486652][ T918] usb 5-1: config 0 descriptor?? [ 85.515858][ T5893] pwc: Registered as video103. [ 85.517555][ T5920] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 85.540896][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 85.579872][ T5893] usb 1-1: USB disconnect, device number 3 [ 85.661614][ T6192] ldusb: No device or device unplugged -19 [ 85.701277][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.752505][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.079014][ T918] usbhid 5-1:0.0: can't add hid device: -71 [ 86.110637][ T918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 86.187010][ T918] usb 5-1: USB disconnect, device number 2 [ 86.223999][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 86.224014][ T30] audit: type=1400 audit(1754211621.501:225): avc: denied { write } for pid=6208 comm="syz.1.68" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.271449][ T6209] usb usb7: usbfs: process 6209 (syz.1.68) did not claim interface 0 before use [ 86.522501][ T5962] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.588449][ T30] audit: type=1400 audit(1754211621.861:226): avc: denied { read write } for pid=6219 comm="syz.2.71" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.612660][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.145525][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 87.150838][ T30] audit: type=1400 audit(1754211621.861:227): avc: denied { open } for pid=6219 comm="syz.2.71" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.187675][ T5962] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.195634][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.230723][ T5962] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 87.259658][ T5962] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 87.282432][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.309328][ T5962] usb 1-1: Product: syz [ 87.314246][ T30] audit: type=1400 audit(1754211622.531:228): avc: denied { create } for pid=6230 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.383158][ T5962] usb 1-1: Manufacturer: syz [ 87.390819][ T5962] usb 1-1: SerialNumber: syz [ 88.114645][ T30] audit: type=1400 audit(1754211622.531:229): avc: denied { bind } for pid=6230 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.134673][ T30] audit: type=1400 audit(1754211622.531:230): avc: denied { listen } for pid=6230 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.206157][ T30] audit: type=1400 audit(1754211622.531:231): avc: denied { connect } for pid=6230 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.225573][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.285388][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 88.350115][ T5962] usb 1-1: Limiting number of CPorts to U8_MAX [ 88.358910][ T5962] usb 1-1: Not enough endpoints found in device, aborting! [ 88.466887][ T6242] lo speed is unknown, defaulting to 1000 [ 88.718908][ T5962] usb 1-1: USB disconnect, device number 4 [ 88.841611][ T72] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.114423][ T5920] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.340255][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 89.826716][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.846004][ T5920] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 89.945943][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.980379][ T5920] usb 5-1: Product: syz [ 89.986794][ T5920] usb 5-1: Manufacturer: syz [ 90.018021][ T5920] usb 5-1: SerialNumber: syz [ 90.082591][ T5920] usb 5-1: config 0 descriptor?? [ 90.164898][ T30] audit: type=1400 audit(1754211625.441:232): avc: denied { mount } for pid=6256 comm="syz.0.80" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.311939][ T30] audit: type=1400 audit(1754211625.591:233): avc: denied { write } for pid=6256 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.401157][ T6266] FAULT_INJECTION: forcing a failure. [ 90.401157][ T6266] name failslab, interval 1, probability 0, space 0, times 1 [ 90.414047][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: syz.1.81 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) [ 90.414071][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.414081][ T6266] Call Trace: [ 90.414087][ T6266] [ 90.414094][ T6266] dump_stack_lvl+0x16c/0x1f0 [ 90.414124][ T6266] should_fail_ex+0x512/0x640 [ 90.414149][ T6266] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 90.414176][ T6266] should_failslab+0xc2/0x120 [ 90.414196][ T6266] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 90.414215][ T6266] ? __alloc_skb+0x2b2/0x380 [ 90.414242][ T6266] __alloc_skb+0x2b2/0x380 [ 90.414264][ T6266] ? __pfx___alloc_skb+0x10/0x10 [ 90.414287][ T6266] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 90.414318][ T6266] netlink_alloc_large_skb+0x69/0x130 [ 90.414345][ T6266] netlink_sendmsg+0x6a1/0xdd0 [ 90.414375][ T6266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.414408][ T6266] ____sys_sendmsg+0xa95/0xc70 [ 90.414427][ T6266] ? copy_msghdr_from_user+0x10a/0x160 [ 90.414450][ T6266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.414480][ T6266] ___sys_sendmsg+0x134/0x1d0 [ 90.414505][ T6266] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.414558][ T6266] __sys_sendmsg+0x16d/0x220 [ 90.414583][ T6266] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.414624][ T6266] do_syscall_64+0xcd/0x4c0 [ 90.414650][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.414668][ T6266] RIP: 0033:0x7fcf6c58eb69 [ 90.414682][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.414697][ T6266] RSP: 002b:00007fcf6d3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.414714][ T6266] RAX: ffffffffffffffda RBX: 00007fcf6c7b6160 RCX: 00007fcf6c58eb69 [ 90.414725][ T6266] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 90.414735][ T6266] RBP: 00007fcf6d3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.414746][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.414766][ T6266] R13: 0000000000000000 R14: 00007fcf6c7b6160 R15: 00007ffeafe398a8 [ 90.414792][ T6266] [ 90.623844][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.877464][ T5920] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 90.894527][ T30] audit: type=1400 audit(1754211626.171:234): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.574787][ T30] audit: type=1400 audit(1754211626.831:235): avc: denied { ioctl } for pid=6271 comm="syz.3.84" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 93.013343][ T2118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 93.025138][ T30] audit: type=1400 audit(1754211626.971:236): avc: denied { write } for pid=6271 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.158822][ T5920] usb 5-1: USB disconnect, device number 3 [ 93.178843][ T30] audit: type=1400 audit(1754211628.451:237): avc: denied { connect } for pid=6278 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.255164][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.87'. [ 93.309037][ T6283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.316792][ T30] audit: type=1400 audit(1754211628.451:238): avc: denied { write } for pid=6278 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.369999][ T30] audit: type=1400 audit(1754211628.581:239): avc: denied { append } for pid=6282 comm="syz.0.82" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.393067][ T976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 93.507762][ T6289] netlink: 56 bytes leftover after parsing attributes in process `syz.0.89'. [ 93.594430][ T6295] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.627969][ T30] audit: type=1400 audit(1754211628.901:240): avc: denied { ioctl } for pid=6290 comm="syz.4.90" path="socket:[9232]" dev="sockfs" ino=9232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.985141][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 94.593458][ T6304] process 'syz.0.92' launched './file0' with NULL argv: empty string added [ 94.602278][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.618989][ T30] audit: type=1400 audit(1754211629.871:241): avc: denied { execute } for pid=6303 comm="syz.0.92" name="file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.640776][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.000608][ T30] audit: type=1400 audit(1754211629.931:242): avc: denied { execute_no_trans } for pid=6303 comm="syz.0.92" path="/13/file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.023589][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.048683][ T30] audit: type=1400 audit(1754211629.961:243): avc: denied { connect } for pid=6278 comm="syz.1.86" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.350680][ T6310] netlink: 22 bytes leftover after parsing attributes in process `syz.1.94'. [ 95.379114][ T30] audit: type=1400 audit(1754211630.651:244): avc: denied { ioctl } for pid=6307 comm="syz.0.93" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.404937][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.984913][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 96.984931][ T30] audit: type=1400 audit(1754211631.891:255): avc: denied { mount } for pid=6320 comm="syz.3.98" name="/" dev="hugetlbfs" ino=8125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.034413][ T30] audit: type=1400 audit(1754211632.301:256): avc: denied { getopt } for pid=6326 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.114502][ T30] audit: type=1400 audit(1754211632.301:257): avc: denied { ioctl } for pid=6326 comm="syz.0.97" path="socket:[8129]" dev="sockfs" ino=8129 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.140410][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 97.440083][ T30] audit: type=1400 audit(1754211632.451:258): avc: denied { read open } for pid=6333 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.503890][ T24] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.643897][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.776905][ T24] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 97.811865][ T5962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 97.829307][ T30] audit: type=1400 audit(1754211632.451:259): avc: denied { getattr } for pid=6333 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.854544][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.884638][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.936808][ T24] usb 3-1: config 0 descriptor?? [ 97.995119][ T30] audit: type=1400 audit(1754211632.641:260): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 98.032376][ T30] audit: type=1400 audit(1754211633.201:261): avc: denied { cmd } for pid=6350 comm="syz.1.104" path="socket:[8152]" dev="sockfs" ino=8152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.054902][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.331415][ T2118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.350429][ T30] audit: type=1400 audit(1754211634.571:262): avc: denied { write } for pid=6346 comm="syz.3.103" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.420277][ T24] corsair-psu 0003:1B1C:1C1E.0001: unknown main item tag 0x0 [ 99.444348][ T24] corsair-psu 0003:1B1C:1C1E.0001: unknown main item tag 0x0 [ 99.594894][ T24] corsair-psu 0003:1B1C:1C1E.0001: unknown main item tag 0x0 [ 100.396451][ T6102] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 100.418368][ T24] corsair-psu 0003:1B1C:1C1E.0001: unknown main item tag 0x0 [ 100.593293][ T24] corsair-psu 0003:1B1C:1C1E.0001: collection stack underflow [ 100.610497][ T24] corsair-psu 0003:1B1C:1C1E.0001: item 0 0 0 12 parsing failed [ 100.620849][ T24] corsair-psu 0003:1B1C:1C1E.0001: probe with driver corsair-psu failed with error -22 [ 100.822304][ T24] usb 3-1: USB disconnect, device number 8 [ 100.861432][ T30] audit: type=1400 audit(1754211636.141:263): avc: denied { create } for pid=6368 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.965282][ T30] audit: type=1400 audit(1754211636.201:264): avc: denied { add_name } for pid=6329 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.090280][ T5920] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.270907][ T5920] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 101.304970][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.320425][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.333340][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.341552][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.351594][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.362605][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.374679][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.383823][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.424433][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.461702][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.472763][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.500359][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.565092][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.574252][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.597815][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.613332][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.622499][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.633897][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.644407][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.653557][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.667476][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.678717][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.687855][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.706979][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.821803][ T5920] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 101.905213][ T5920] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 101.924424][ T5920] usb 5-1: Product: syz [ 101.939986][ T5920] usb 5-1: Manufacturer: syz [ 101.945136][ T5920] usb 5-1: SerialNumber: syz [ 101.992069][ T5920] usb 5-1: config 0 descriptor?? [ 102.044565][ T5920] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 102.279858][ T6403] tipc: Started in network mode [ 102.285057][ T6403] tipc: Node identity ac14140f, cluster identity 4711 [ 102.296971][ T6403] tipc: New replicast peer: 255.255.255.255 [ 102.306329][ T6403] tipc: Enabled bearer , priority 10 [ 102.388240][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 102.394384][ T30] audit: type=1400 audit(1754211637.511:270): avc: denied { nlmsg_write } for pid=6392 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.791317][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 102.792692][ T976] usb 5-1: USB disconnect, device number 4 [ 102.794940][ T976] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 102.852814][ T30] audit: type=1400 audit(1754211638.131:271): avc: denied { ioctl } for pid=6411 comm="syz.1.115" path="socket:[10335]" dev="sockfs" ino=10335 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.961295][ T30] audit: type=1400 audit(1754211638.221:272): avc: denied { open } for pid=6385 comm="syz.0.111" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.089891][ T6398] wg1 speed is unknown, defaulting to 1000 [ 103.106882][ T6398] wg1 speed is unknown, defaulting to 1000 [ 103.125004][ T6398] wg1 speed is unknown, defaulting to 1000 [ 103.341805][ T5920] tipc: Node number set to 2886997007 [ 103.507718][ T30] audit: type=1400 audit(1754211638.767:273): avc: denied { create } for pid=6411 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.996062][ T6398] infiniband \yz0: set active [ 104.001607][ T976] wg1 speed is unknown, defaulting to 1000 [ 104.023782][ T6398] infiniband \yz0: added wg1 [ 104.126521][ T30] audit: type=1400 audit(1754211639.397:274): avc: denied { read write } for pid=6420 comm="syz.2.116" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 104.189096][ T6398] RDS/IB: \yz0: added [ 104.197208][ T6398] smc: adding ib device \yz0 with port count 1 [ 104.205855][ T6431] sock: sock_set_timeout: `syz.4.117' (pid 6431) tries to set negative timeout [ 104.243108][ T6398] smc: ib device \yz0 port 1 has pnetid [ 104.267962][ T30] audit: type=1400 audit(1754211639.427:275): avc: denied { open } for pid=6420 comm="syz.2.116" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 104.294523][ T5881] wg1 speed is unknown, defaulting to 1000 [ 104.308356][ T6398] wg1 speed is unknown, defaulting to 1000 [ 104.447784][ T30] audit: type=1400 audit(1754211639.477:276): avc: denied { create } for pid=6430 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.498514][ T30] audit: type=1400 audit(1754211639.487:277): avc: denied { setopt } for pid=6430 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.561751][ T30] audit: type=1400 audit(1754211639.487:278): avc: denied { read } for pid=6430 comm="syz.4.117" path="socket:[9462]" dev="sockfs" ino=9462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.842244][ T6398] wg1 speed is unknown, defaulting to 1000 [ 104.871611][ T72] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 105.128812][ T6446] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6446 comm=syz.3.121 [ 105.429575][ T30] audit: type=1400 audit(1754211640.697:279): avc: denied { bind } for pid=6445 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.057653][ T6398] wg1 speed is unknown, defaulting to 1000 [ 106.201028][ T2118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.304979][ T6453] FAULT_INJECTION: forcing a failure. [ 106.304979][ T6453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.318366][ T6453] CPU: 0 UID: 0 PID: 6453 Comm: syz.3.122 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) [ 106.318390][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.318399][ T6453] Call Trace: [ 106.318405][ T6453] [ 106.318412][ T6453] dump_stack_lvl+0x16c/0x1f0 [ 106.318442][ T6453] should_fail_ex+0x512/0x640 [ 106.318472][ T6453] _copy_to_user+0x32/0xd0 [ 106.318493][ T6453] simple_read_from_buffer+0xcb/0x170 [ 106.318524][ T6453] proc_fail_nth_read+0x197/0x240 [ 106.318546][ T6453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.318568][ T6453] ? rw_verify_area+0xcf/0x6c0 [ 106.318593][ T6453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.318613][ T6453] vfs_read+0x1e4/0xc60 [ 106.318633][ T6453] ? __pfx___mutex_lock+0x10/0x10 [ 106.318659][ T6453] ? __pfx_vfs_read+0x10/0x10 [ 106.318683][ T6453] ? __fget_files+0x20e/0x3c0 [ 106.318700][ T6453] ? rcu_watching_snap_stopped_since+0xc0/0x110 [ 106.318732][ T6453] ksys_read+0x12a/0x250 [ 106.318754][ T6453] ? __pfx_ksys_read+0x10/0x10 [ 106.318779][ T6453] do_syscall_64+0xcd/0x4c0 [ 106.318806][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.318824][ T6453] RIP: 0033:0x7fa8f718d57c [ 106.318839][ T6453] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.318855][ T6453] RSP: 002b:00007fa8f4fb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.318872][ T6453] RAX: ffffffffffffffda RBX: 00007fa8f73b6160 RCX: 00007fa8f718d57c [ 106.318884][ T6453] RDX: 000000000000000f RSI: 00007fa8f4fb40a0 RDI: 0000000000000009 [ 106.318894][ T6453] RBP: 00007fa8f4fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 106.318904][ T6453] R10: 0000000000000066 R11: 0000000000000246 R12: 0000000000000001 [ 106.318914][ T6453] R13: 0000000000000000 R14: 00007fa8f73b6160 R15: 00007ffeb32fad98 [ 106.318937][ T6453] [ 108.080251][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 108.080267][ T30] audit: type=1400 audit(1754211642.597:283): avc: denied { create } for pid=6456 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 108.131077][ T6398] wg1 speed is unknown, defaulting to 1000 [ 108.250689][ T30] audit: type=1400 audit(1754211642.607:284): avc: denied { connect } for pid=6456 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 108.335920][ T6465] syz.4.125: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 108.362561][ T30] audit: type=1400 audit(1754211643.607:285): avc: denied { setopt } for pid=6458 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.385237][ T6465] CPU: 0 UID: 0 PID: 6465 Comm: syz.4.125 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) [ 108.385265][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.385275][ T6465] Call Trace: [ 108.385280][ T6465] [ 108.385285][ T6465] dump_stack_lvl+0x16c/0x1f0 [ 108.385305][ T6465] warn_alloc+0x248/0x3a0 [ 108.385319][ T6465] ? __pfx_warn_alloc+0x10/0x10 [ 108.385328][ T6465] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 108.385345][ T6465] ? stack_depot_save_flags+0x3e0/0xa40 [ 108.385365][ T6465] ? kasan_save_stack+0x42/0x60 [ 108.385375][ T6465] ? kasan_save_stack+0x33/0x60 [ 108.385384][ T6465] ? kasan_save_track+0x14/0x30 [ 108.385394][ T6465] ? xskq_create+0x52/0x1d0 [ 108.385407][ T6465] ? xsk_setsockopt+0x74e/0x9a0 [ 108.385418][ T6465] ? do_sock_setsockopt+0xf3/0x1d0 [ 108.385437][ T6465] ? xskq_create+0xfb/0x1d0 [ 108.385450][ T6465] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 108.385471][ T6465] ? xskq_create+0xfb/0x1d0 [ 108.385487][ T6465] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.385507][ T6465] ? xskq_create+0xfb/0x1d0 [ 108.385519][ T6465] vmalloc_user_noprof+0x9e/0xe0 [ 108.385534][ T6465] ? xskq_create+0xfb/0x1d0 [ 108.385547][ T6465] xskq_create+0xfb/0x1d0 [ 108.385561][ T6465] xsk_setsockopt+0x74e/0x9a0 [ 108.385574][ T6465] ? __pfx_xsk_setsockopt+0x10/0x10 [ 108.385586][ T6465] ? find_held_lock+0x2b/0x80 [ 108.385601][ T6465] ? selinux_socket_setsockopt+0x6a/0x80 [ 108.385614][ T6465] ? __pfx_xsk_setsockopt+0x10/0x10 [ 108.385627][ T6465] do_sock_setsockopt+0xf3/0x1d0 [ 108.385645][ T6465] __sys_setsockopt+0x1a0/0x230 [ 108.385668][ T6465] __x64_sys_setsockopt+0xbd/0x160 [ 108.385689][ T6465] ? do_syscall_64+0x91/0x4c0 [ 108.385705][ T6465] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.385720][ T6465] do_syscall_64+0xcd/0x4c0 [ 108.385736][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.385747][ T6465] RIP: 0033:0x7fce6db8eb69 [ 108.385757][ T6465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.385767][ T6465] RSP: 002b:00007fce6ea09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.385778][ T6465] RAX: ffffffffffffffda RBX: 00007fce6ddb6080 RCX: 00007fce6db8eb69 [ 108.385786][ T6465] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 108.385792][ T6465] RBP: 00007fce6dc11df1 R08: 0000000000000004 R09: 0000000000000000 [ 108.385798][ T6465] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.385804][ T6465] R13: 0000000000000000 R14: 00007fce6ddb6080 R15: 00007ffc57e0e2c8 [ 108.385817][ T6465] [ 108.387107][ T6465] Mem-Info: [ 108.650418][ T976] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.661249][ T6465] active_anon:11196 inactive_anon:0 isolated_anon:0 [ 108.661249][ T6465] active_file:1928 inactive_file:40554 isolated_file:0 [ 108.661249][ T6465] unevictable:770 dirty:540 writeback:0 [ 108.661249][ T6465] slab_reclaimable:11665 slab_unreclaimable:104576 [ 108.661249][ T6465] mapped:31416 shmem:2393 pagetables:1192 [ 108.661249][ T6465] sec_pagetables:0 bounce:0 [ 108.661249][ T6465] kernel_misc_reclaimable:0 [ 108.661249][ T6465] free:1305315 free_pcp:17925 free_cma:0 [ 108.734900][ T6465] Node 0 active_anon:45152kB inactive_anon:0kB active_file:7656kB inactive_file:162012kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:125908kB dirty:2160kB writeback:0kB shmem:8336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12324kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.790706][ T976] usb 4-1: device descriptor read/64, error -71 [ 108.801582][ T6465] Node 1 active_anon:32kB inactive_anon:0kB active_file:56kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.838902][ T6398] wg1 speed is unknown, defaulting to 1000 [ 108.850249][ T6465] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.850896][ T30] audit: type=1400 audit(1754211644.127:286): avc: denied { create } for pid=6468 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 108.890402][ T6465] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 109.020279][ T30] audit: type=1400 audit(1754211644.187:287): avc: denied { setopt } for pid=6468 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.030358][ T976] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.072147][ T6465] Node 0 DMA32 free:1316376kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52352kB inactive_anon:0kB active_file:7656kB inactive_file:160652kB unevictable:1544kB writepending:2160kB present:3129332kB managed:2539460kB mlocked:8kB bounce:0kB free_pcp:43612kB local_pcp:22996kB free_cma:0kB [ 109.104494][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.206816][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 109.533381][ T30] audit: type=1400 audit(1754211644.297:288): avc: denied { getopt } for pid=6468 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.554104][ T30] audit: type=1326 audit(1754211644.547:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.2.126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda8938eb69 code=0x0 [ 109.577460][ T6465] lowmem_reserve[]: 0 0 1 1 1 [ 109.598866][ T6465] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1360kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 109.645083][ T6465] lowmem_reserve[]: 0 0 0 0 0 [ 109.651275][ T6465] Node 1 Normal free:3889988kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:56kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19592kB local_pcp:8008kB free_cma:0kB [ 109.685000][ T6465] lowmem_reserve[]: 0 0 0 0 0 [ 109.689922][ T6465] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.717495][ T6465] Node 0 DMA32: 204*4kB (UME) 371*8kB (UME) 197*16kB (UM) 152*32kB (UM) 36*64kB (UME) 64*128kB (UME) 24*256kB (UME) 18*512kB (UME) 11*1024kB (UM) 3*2048kB (UM) 311*4096kB (M) = 1328920kB [ 109.736989][ T6465] Node 0 Normal: 2*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 109.751459][ T976] usb 4-1: device descriptor read/64, error -71 [ 109.759647][ T6465] Node 1 Normal: 173*4kB (UME) 52*8kB (UME) 29*16kB (UME) 61*32kB (UME) 24*64kB (UE) 7*128kB (UE) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3889988kB [ 109.788208][ T6465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.797972][ T6465] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.807751][ T6465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.819574][ T6465] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.829085][ T6465] 43863 total pagecache pages [ 109.833932][ T6465] 10 pages in swap cache [ 109.838224][ T6465] Free swap = 118960kB [ 109.842759][ T6465] Total swap = 124996kB [ 109.846970][ T6465] 2097051 pages RAM [ 109.852335][ T6465] 0 pages HighMem/MovableOnly [ 109.857354][ T6465] 430208 pages reserved [ 109.861620][ T6465] 0 pages cma reserved [ 109.912096][ T6477] warning: `syz.2.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.981556][ T976] usb usb4-port1: attempt power cycle [ 110.481291][ T6488] page: refcount:515 mapcount:0 mapping:ffff888144adcc40 index:0x500000000000 pfn:0x67e00 [ 110.491604][ T6488] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 110.500112][ T6488] aops:hugetlbfs_aops ino:26c4 dentry name(?):"anon_hugepage" [ 110.507570][ T6488] flags: 0xfff000000000c1(locked|waiters|head|node=0|zone=1|lastcpupid=0x7ff) [ 110.516397][ T6488] page_type: f4(hugetlb) [ 110.520617][ T6488] raw: 00fff000000000c1 ffffea0001e70008 ffffc9000c797d68 ffff888144adcc40 [ 110.529179][ T6488] raw: 0000500000000000 0000000000000000 00000203f4000000 0000000000000000 [ 110.537741][ T6488] head: 00fff000000000c1 ffffea0001e70008 ffffc9000c797d68 ffff888144adcc40 [ 110.546390][ T6488] head: 0000500000000000 0000000000000000 00000203f4000000 0000000000000000 [ 110.555035][ T6488] head: 00fff00000000009 ffffea00019f8001 0000000000000000 0000000000000000 [ 110.563681][ T6488] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 110.572323][ T6488] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 110.579578][ T6488] page_owner tracks the page as allocated [ 110.585500][ T6488] page last allocated via order 9, migratetype Movable, gfp_mask 0x346cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 17154927483, free_ts 16051273755 [ 110.606585][ T6488] post_alloc_hook+0x1c0/0x230 [ 110.611345][ T6488] get_page_from_freelist+0x132b/0x38e0 [ 110.616868][ T6488] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 110.622736][ T6488] alloc_pool_huge_folio+0x285/0x440 [ 110.628006][ T6488] set_max_huge_pages+0x457/0xdc0 [ 110.633013][ T6488] hugetlb_sysctl_handler_common+0x27d/0x340 [ 110.638972][ T6488] proc_sys_call_handler+0x440/0x570 [ 110.644247][ T6488] __kernel_write_iter+0x317/0xa90 [ 110.649334][ T6488] kernel_write+0x1f4/0x6c0 [ 110.653811][ T6488] process_sysctl_arg+0x22b/0x5f0 [ 110.658814][ T6488] parse_args+0x5a6/0x8e0 [ 110.663128][ T6488] do_sysctl_args+0xc7/0x150 [ 110.667706][ T6488] kernel_init+0x84/0x2b0 [ 110.672017][ T6488] ret_from_fork+0x5d7/0x6f0 [ 110.676582][ T6488] ret_from_fork_asm+0x1a/0x30 [ 110.681327][ T6488] page last free pid 1 tgid 1 stack trace: [ 110.687105][ T6488] __free_frozen_pages+0x7d5/0x10f0 [ 110.692294][ T6488] free_contig_range+0x183/0x4b0 [ 110.697216][ T6488] destroy_args+0x7f6/0xa60 [ 110.701710][ T6488] debug_vm_pgtable+0x1a32/0x3640 [ 110.706717][ T6488] do_one_initcall+0x120/0x6e0 [ 110.711475][ T6488] kernel_init_freeable+0x5c2/0x900 [ 110.716657][ T6488] kernel_init+0x1c/0x2b0 [ 110.720964][ T6488] ret_from_fork+0x5d7/0x6f0 [ 110.725529][ T6488] ret_from_fork_asm+0x1a/0x30 [ 110.730364][ T6488] ------------[ cut here ]------------ [ 110.735789][ T6488] kernel BUG at mm/filemap.c:154! [ 110.740802][ T6488] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 110.747191][ T6488] CPU: 1 UID: 0 PID: 6488 Comm: syz.1.129 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) [ 110.758715][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.768833][ T6488] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 110.774982][ T6488] Code: 27 2b c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 5a 26 c9 ff 85 ed 7e 17 e8 11 2b c9 ff 48 c7 c6 00 1a b9 8b 48 89 df e8 e2 cd 11 00 90 <0f> 0b e8 fa 2a c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 110.794571][ T6488] RSP: 0018:ffffc9000c757310 EFLAGS: 00010046 [ 110.800623][ T6488] RAX: 0000000000080000 RBX: ffffea00019f8000 RCX: ffffc90010df4000 [ 110.808579][ T6488] RDX: 0000000000080000 RSI: ffffffff81f25d7e RDI: ffff88801f7fccc4 [ 110.816526][ T6488] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 110.824474][ T6488] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888144adcc40 [ 110.832421][ T6488] R13: ffffea00019f8030 R14: 0000000000000360 R15: ffffea00019f8000 [ 110.840368][ T6488] FS: 00007fcf6d3b66c0(0000) GS:ffff8881247c8000(0000) knlGS:0000000000000000 [ 110.849289][ T6488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.855850][ T6488] CR2: 000020000015ec40 CR3: 000000006347e000 CR4: 00000000003526f0 [ 110.863803][ T6488] Call Trace: [ 110.867058][ T6488] [ 110.869969][ T6488] filemap_remove_folio+0xf1/0x250 [ 110.875061][ T6488] remove_inode_hugepages+0x74a/0xed0 [ 110.880415][ T6488] ? mark_held_locks+0x49/0x80 [ 110.885173][ T6488] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 110.890963][ T6488] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 110.897555][ T6488] ? __print_lock_name+0xc1/0xe0 [ 110.902475][ T6488] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 110.908354][ T6488] ? up_write+0x1b2/0x520 [ 110.912660][ T6488] hugetlbfs_fallocate+0xf3f/0x12e0 [ 110.917836][ T6488] ? trace_sched_exit_tp+0x81/0x120 [ 110.923018][ T6488] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 110.928628][ T6488] ? mark_lock+0x32d/0x610 [ 110.933033][ T6488] ? lock_acquire+0x62/0x350 [ 110.937605][ T6488] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 110.943214][ T6488] ? vfs_fallocate+0x5b1/0x10e0 [ 110.948043][ T6488] vfs_fallocate+0x5b1/0x10e0 [ 110.952708][ T6488] ? __pfx_vfs_fallocate+0x10/0x10 [ 110.957800][ T6488] ? madvise_vma_behavior+0x2881/0x2c50 [ 110.963343][ T6488] madvise_vma_behavior+0x2839/0x2c50 [ 110.968711][ T6488] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 110.974504][ T6488] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 110.980205][ T6488] ? __pfx_mas_prev+0x10/0x10 [ 110.984876][ T6488] ? find_vma_prev+0xda/0x160 [ 110.989534][ T6488] ? __pfx_find_vma_prev+0x10/0x10 [ 110.994631][ T6488] madvise_walk_vmas+0x31f/0x9c0 [ 110.999552][ T6488] ? irqentry_exit+0x3b/0x90 [ 111.004126][ T6488] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 111.009565][ T6488] ? preempt_schedule_thunk+0x16/0x30 [ 111.014919][ T6488] madvise_do_behavior+0x1e2/0x530 [ 111.020014][ T6488] ? preempt_schedule_thunk+0x16/0x30 [ 111.025366][ T6488] ? __pfx_madvise_do_behavior+0x10/0x10 [ 111.030979][ T6488] ? down_read+0x2c4/0x480 [ 111.035376][ T6488] do_madvise+0x176/0x240 [ 111.039683][ T6488] ? __pfx_do_madvise+0x10/0x10 [ 111.044520][ T6488] __x64_sys_madvise+0xa9/0x110 [ 111.049350][ T6488] do_syscall_64+0xcd/0x4c0 [ 111.053836][ T6488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.059709][ T6488] RIP: 0033:0x7fcf6c58eb69 [ 111.064102][ T6488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.083687][ T6488] RSP: 002b:00007fcf6d3b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 111.092077][ T6488] RAX: ffffffffffffffda RBX: 00007fcf6c7b6240 RCX: 00007fcf6c58eb69 [ 111.100027][ T6488] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 111.107972][ T6488] RBP: 00007fcf6c611df1 R08: 0000000000000000 R09: 0000000000000000 [ 111.115919][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.123864][ T6488] R13: 0000000000000000 R14: 00007fcf6c7b6240 R15: 00007ffeafe398a8 [ 111.131830][ T6488] [ 111.134828][ T6488] Modules linked in: [ 111.138699][ T6488] ---[ end trace 0000000000000000 ]--- [ 111.144124][ T6488] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 111.150267][ T6488] Code: 27 2b c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 5a 26 c9 ff 85 ed 7e 17 e8 11 2b c9 ff 48 c7 c6 00 1a b9 8b 48 89 df e8 e2 cd 11 00 90 <0f> 0b e8 fa 2a c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 111.169863][ T6488] RSP: 0018:ffffc9000c757310 EFLAGS: 00010046 [ 111.175904][ T6488] RAX: 0000000000080000 RBX: ffffea00019f8000 RCX: ffffc90010df4000 [ 111.183852][ T6488] RDX: 0000000000080000 RSI: ffffffff81f25d7e RDI: ffff88801f7fccc4 [ 111.191799][ T6488] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 111.199744][ T6488] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888144adcc40 [ 111.207692][ T6488] R13: ffffea00019f8030 R14: 0000000000000360 R15: ffffea00019f8000 [ 111.215640][ T6488] FS: 00007fcf6d3b66c0(0000) GS:ffff8881247c8000(0000) knlGS:0000000000000000 [ 111.224546][ T6488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.231107][ T6488] CR2: 000020000015ec40 CR3: 000000006347e000 CR4: 00000000003526f0 [ 111.239059][ T6488] Kernel panic - not syncing: Fatal exception [ 111.245290][ T6488] Kernel Offset: disabled [ 111.249597][ T6488] Rebooting in 86400 seconds..