last executing test programs: 14m11.264218772s ago: executing program 2 (id=370): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x4008004) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="48000000a2fbcd4efb249de57238a5f922dc5214d24bc293b34e40a24dbc44bc64efa83f52665c328d908c036e00e482d6283483d05c281bb3f639328fb7ee3a5c261f880cae458063849894b3b7abd1497d09140380636a2de60b3a3e2cd064b943a625a61669d53515ed902fc4", @ANYRES16=r3, @ANYBLOB="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"/277, @ANYRES32, @ANYBLOB="08000a00040000000500050000000000"], 0x48}, 0x1, 0x0, 0x0, 0x48040}, 0x40408d4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x2}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x81, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080c0) 14m10.893593205s ago: executing program 2 (id=375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0}, 0xe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) 14m10.27644377s ago: executing program 2 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000c40)='\x00\x00\x1a\x00\x00\x00z\x9b\xb2\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x99\xe5\x8f\xe2\xb6\xdc\n\xf5kWnr\x92G\xbd\b\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xc3_M\xbe\x19\xea#\xffWj\xdc\xd4\xb1\xcc\\\xa8N\x8c)[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xbfF}\xbd\x1c\xff\xff\xff\xff\xff\xff\xb5v*R?\xa0Y$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xe8\xd6\xae1\xc3\x9e\xec`\xf2\xd1BM\x10\xc6\xb4F\n\x10q\xde\v\xec\xa2\x92x\xe9\xf5\x1f\xc9hj\xc0\xe5\xce\xd1v\bez\"\xb1\xd3 \xbc\x9b\xe8\x86u\x0e\v\x17\x85\xb8\xdb2\x92\x00\x00\x00\x00\x00\x00\x00\x00\x80\x9c99\n|\xc1,\xd3\xedI\x11\xf9\xa6wN\xa3\xc9M\xe6\x92\xaf\xb2I\x16}\xae\xe8\xa8\xd7\xad\\\x84\v\fB\xe2d\x90\xdd\x90\x1e\x8c\xe4\xc70\x93\xc7\x8b\xec/a8\x95a\x8c?)\xa2\xf6~\xa7\xc3\xfc\x19\xa8\x98\x1f\x8d\x13\x00e;g]\x1c\x1d\xb0\xa0\x96\xac\x9f3\xe8\xa7R\x92\xe6\n\xdda\x86\xa8\x13\xf1\xccQa\xef\x94u\xed\x0fvq=|\xb0\xc2I/\\}\xf4\xb7\xda\xdds\xf3\xf9\f\xff\xcc\xf3\xa8\x02\xa9/\xfd\xcfn\x00\x84wa[,\xd8\xda\xd4h\xdd\xc4\x80\xb9_\x7f\xa1\x90H\x824Y\x89E', 0x7) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 14m9.992696804s ago: executing program 2 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x5434, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) link(&(0x7f00000001c0)='./bus\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1127057, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) 14m9.613289025s ago: executing program 2 (id=386): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a183000000000000000005"], 0x78}}, 0x0) 14m8.52324382s ago: executing program 2 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 14m8.302408116s ago: executing program 32 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 5m58.829745078s ago: executing program 3 (id=2686): ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x20, &(0x7f0000000980)=ANY=[@ANYBLOB="18120000", @ANYBLOB="99adfe9d3b15f6dc79a1cc77b212b682d09bc43457e5897be3444ffba152a94e28591bbe34bd4f6f372e1d316e9b145a3f909283b05dfdec37fa4b35ca351ce24b43d2dd5c64bd3f663c7ac00dfdb7d0c41917205577dba331a925e6be882054523fb0a2d5cd72ed7fb8ac6b9a3c8aa494da929b50fd52f3c5247e2d681aee6f3d0ef41185ad47a3e25fc1e75aed33c7a13207a2e99a217c2200f76f1afe1bc1e49b49c2e5c0c5e0dabfbad6691c2bca6e2c7dda8bc9c070bf5cd7ef591b9dff42", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000081e7607900f9ffffff840000e2a4000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x58}, @cswp={0x58, 0x114, 0x7, {{0x0, 0xf5e}, 0x0, 0x0, 0xb, 0x3, 0x5, 0x8000000000002, 0x32, 0x9}}], 0x70}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_emit_ethernet(0x105, &(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x8000}, 0x24000804) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000b708000000000000dbaaf8fff1000300b508000000000000830c000000000000bfa10000ce0000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x25, 0x0, 0x0) semop(0x0, &(0x7f0000000240)=[{0x3, 0xd5db}, {0x0, 0xb6, 0x800}], 0x2) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 5m58.241860969s ago: executing program 3 (id=2687): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f0000000300)=[{0x1, 0x3ff, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = syz_io_uring_setup(0xbc3, &(0x7f0000000100)={0x0, 0x1065, 0x20000, 0x1, 0x1a7}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000001500)="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", 0x1c1}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x3, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3e85}) 5m57.905804236s ago: executing program 3 (id=2690): ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x20, &(0x7f0000000980)=ANY=[@ANYBLOB="18120000", @ANYBLOB="99adfe9d3b15f6dc79a1cc77b212b682d09bc43457e5897be3444ffba152a94e28591bbe34bd4f6f372e1d316e9b145a3f909283b05dfdec37fa4b35ca351ce24b43d2dd5c64bd3f663c7ac00dfdb7d0c41917205577dba331a925e6be882054523fb0a2d5cd72ed7fb8ac6b9a3c8aa494da929b50fd52f3c5247e2d681aee6f3d0ef41185ad47a3e25fc1e75aed33c7a13207a2e99a217c2200f76f1afe1bc1e49b49c2e5c0c5e0dabfbad6691c2bca6e2c7dda8bc9c070bf5cd7ef591b9dff42", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000081e7607900f9ffffff840000e2a4000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x58}, @cswp={0x58, 0x114, 0x7, {{0x0, 0xf5e}, 0x0, 0x0, 0xb, 0x3, 0x5, 0x8000000000002, 0x32, 0x9}}], 0x70}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_emit_ethernet(0x105, &(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x8000}, 0x24000804) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000b708000000000000dbaaf8fff1000300b508000000000000830c000000000000bfa10000ce0000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x25, 0x0, 0x0) semop(0x0, &(0x7f0000000240)=[{0x3, 0xd5db}, {0x0, 0xb6, 0x800}], 0x2) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 5m56.410282174s ago: executing program 3 (id=2693): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chroot(&(0x7f0000000d00)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}]}}]}, 0x138}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x8, 0x0, &(0x7f0000000000)) pwritev(r7, &(0x7f00000005c0)=[{&(0x7f0000000440)="a9fe1e61a0", 0x5}], 0x1, 0xfffffffc, 0x87) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000000)) 5m55.82614157s ago: executing program 3 (id=2698): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5m55.451236495s ago: executing program 3 (id=2700): r0 = userfaultfd(0x801) (async) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async) syz_usb_disconnect(r1) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000800)={{&(0x7f00004e7000/0x2000)=nil, 0x2000}, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmsg$rds(r5, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x90}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) poll(&(0x7f0000002480)=[{r6, 0x400}], 0x1, 0x3ff) (async) write$FUSE_NOTIFY_RESEND(r6, &(0x7f00000046c0)={0x14}, 0x14) (async) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) (async) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) 5m54.762415591s ago: executing program 33 (id=2700): r0 = userfaultfd(0x801) (async) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async) syz_usb_disconnect(r1) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000800)={{&(0x7f00004e7000/0x2000)=nil, 0x2000}, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmsg$rds(r5, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x90}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) poll(&(0x7f0000002480)=[{r6, 0x400}], 0x1, 0x3ff) (async) write$FUSE_NOTIFY_RESEND(r6, &(0x7f00000046c0)={0x14}, 0x14) (async) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) (async) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) 5m36.519153716s ago: executing program 6 (id=2753): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r5, @ANYBLOB=',wfdno', @ANYRESHEX=r6, @ANYBLOB=',cache=fscach']) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x910a0300, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000600)="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") recvmmsg(r7, &(0x7f0000004e00)=[{{&(0x7f0000000440)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000f00)=""/228, 0xf2}, 0x23b}, {{&(0x7f0000001000)=@sco={0x1f, @none}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001080)=""/13, 0xd}, {&(0x7f00000010c0)=""/119, 0x77}, {0x0}, {&(0x7f0000001240)=""/188, 0xbc}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/84, 0x54}], 0x6, &(0x7f00000023c0)=""/74, 0x4a}, 0x5}, {{&(0x7f0000002440)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000024c0)=""/79, 0x4f}, {&(0x7f0000002540)=""/40, 0x28}, {&(0x7f0000003580)=""/88, 0x58}, {&(0x7f0000003600)=""/160, 0xa0}], 0x4}, 0x5}, {{&(0x7f0000003700)=@qipcrtr, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003880)=""/219, 0xdb}, {0x0}, {&(0x7f0000004900)=""/242, 0xf2}, {&(0x7f0000003780)=""/235, 0xeb}, {&(0x7f0000004b00)=""/149, 0x95}], 0x5, &(0x7f0000004c00)=""/65, 0x41}, 0xfffffff7}, {{&(0x7f0000004c80)=@qipcrtr, 0x80, &(0x7f0000004d80)=[{&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000004d40)=""/26, 0x1a}], 0x2, &(0x7f0000000280)=""/8, 0x64}, 0x5}], 0x5, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = shmget$private(0x0, 0x1000, 0x8, &(0x7f000014f000/0x1000)=nil) r9 = shmat(r8, &(0x7f0000fff000/0x1000)=nil, 0x400c) shmdt(r9) shmdt(r9) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 5m33.272308683s ago: executing program 6 (id=2768): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) io_uring_setup(0x64e5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x21, 0x0) (fail_nth: 5) 5m32.196399912s ago: executing program 6 (id=2771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000004c0)={0xfffffff7, 0x2, 0x5, 0x0, 0x18, "fe99010021ca0f00000004b1d000"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0xa, 0xfffffffc) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700400001000000", 0x18) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r5, 0xd7aeb000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_newneigh={0x1c, 0x1c, 0x100, 0x70bd2a, 0x25dfdbff, {0x1c, 0x0, 0x0, r4, 0x8, 0xc, 0x4}}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000100390400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002000128008000100677265001400028006000f00ff070000060011004e230000"], 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000000f700200d0501320000000000010902240001000060b1090400000103000100092101010801220300f400bd656884e1bf039d20e7ae95c2b041aab93e196b533e4ceaf7aeecfcf8e30dd8bbe329d46e3b4a803a1ebab5fd9c56592d4dff7a80b2a1236728540635eb988aff55de61651a453f17f4df2f58e61f6de32a03738927b04f3662ae5d679f68eb7f2664aad9"], 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00febf453bd4203da805cbf34276d6870064fd238b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m28.882138143s ago: executing program 6 (id=2782): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x28000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x800, 0x4100, 0x9, 0x7, 0x52b, 0x8, 0x0, 0x0, 0x20, 0x5}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 5m28.536011346s ago: executing program 6 (id=2783): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x7, 0xa, 0xe8ac, 0x2, 0x1, 0xfffffffd, 0x0, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x200099, 0xb4, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x7fffffff, 0x2, 0x0, 0xfffffff8]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x191840, 0x6, 0x24}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xffff}, {0x10, 0x2}, {0xa, 0x9}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004083b}, 0x0) 5m28.073588274s ago: executing program 6 (id=2785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) nanosleep(&(0x7f0000000300), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280340001800a0001006c696d6974000000240002800c00024000000000000010000c000140000000000000000108000440000000010c000180080001006475700008000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x410}, 0x0) unshare(0x2c020400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m27.726014973s ago: executing program 34 (id=2785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) nanosleep(&(0x7f0000000300), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280340001800a0001006c696d6974000000240002800c00024000000000000010000c000140000000000000000108000440000000010c000180080001006475700008000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x410}, 0x0) unshare(0x2c020400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m42.870378264s ago: executing program 4 (id=3292): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000004, 0xffffffffffffffff, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x100000004, 0xffffffffffffffff, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010", @ANYRES32=0x0, @ANYBLOB="03000000010000001800128008000100677265000c000280080006000a"], 0x38}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010", @ANYRES32=0x0, @ANYBLOB="03000000010000001800128008000100677265000c000280080006000a"], 0x38}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) (async) fchdir(r4) socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$ethtool(0x0, r4) (async) syz_genetlink_get_family_id$ethtool(0x0, r4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x3cad6cc7aa7fed97) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x1f859fca2d326c95, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0, 0xa4}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) 2m41.795753532s ago: executing program 4 (id=3296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$kcm(0x29, 0x2, 0x0) close(r6) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x814) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf253f00000013000300", @ANYRES32=r2, @ANYBLOB="04005e80"], 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x0) 2m40.982496417s ago: executing program 4 (id=3298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) openat$ttynull(0xffffffffffffff9c, 0x0, 0x600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x85, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="020702"], 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000900)=0x15) writev(r6, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)=0xffff, 0x8, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfd, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0xb}, {0x2, 0x800000000008}, 0x4, 0x400000, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40) 2m37.524256215s ago: executing program 4 (id=3305): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000380)='./file0\x00', r1, 0x0, 0x40) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) recvmsg$inet_nvme(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/101, 0x65}], 0x1, &(0x7f0000000340)=""/25, 0x19}, 0x120) mount$9p_virtio(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xa856673a8662fdb6, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) ioctl$UI_DEV_CREATE(r2, 0x5501) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) 2m37.326071004s ago: executing program 4 (id=3307): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x37, 0x9d, 0x62}, 0x2c) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) geteuid() ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x2, 0x49, {}, {0xb289d58468e4db09, 0xc, 0x1, 0xff, 0x9, 0x3, "80322142"}, 0x6, 0x1, {0x0}, 0x7}) r2 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) close(r4) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3005, 0x8, 0xa, 0x0, 0x5, 0x1993012db91ab52e}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x20, 0x29, "fafc00"}, 0x0, 0x1, {0x0}}) 2m35.546819711s ago: executing program 4 (id=3313): socket$netlink(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800020100c0"]) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a6c9cf16808a10c66ff77d961c139c821b0c51a6ec3f30210c3c8e7e9ad06b82a2e7037e60edafadd8b6499e80d5c6701cae69be25679cfb80590a6d90aaa8833fa2047a01c2d0fe8ab46276565a7cae6"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r6 = fsopen(&(0x7f00000005c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) 2m35.118512456s ago: executing program 35 (id=3313): socket$netlink(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800020100c0"]) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a6c9cf16808a10c66ff77d961c139c821b0c51a6ec3f30210c3c8e7e9ad06b82a2e7037e60edafadd8b6499e80d5c6701cae69be25679cfb80590a6d90aaa8833fa2047a01c2d0fe8ab46276565a7cae6"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r6 = fsopen(&(0x7f00000005c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) 10.887358187s ago: executing program 1 (id=3803): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610406000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050402000000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe7, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) 9.03032687s ago: executing program 1 (id=3809): r0 = msgget$private(0x0, 0x123) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x800) msgsnd(r0, &(0x7f0000001180)={0x3, "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"}, 0x3f9, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) 8.029556237s ago: executing program 1 (id=3811): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7.850030485s ago: executing program 1 (id=3812): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffd7b}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000300)={0x3ff, 0x3, 0x8, 0x4, 0x5, 0x1b, 0x43, "d6ffdc1e06695e358e53e698e21429e50916bb6c", "3daeb258cc37a691135764fa43031f0d00"}) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) link(0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000048c0)=[{{0x0, 0x41, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.726284341s ago: executing program 8 (id=3814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff9d, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x2}) syz_open_dev$evdev(0x0, 0x1, 0x8c2b01) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) 6.759546584s ago: executing program 8 (id=3815): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'veth0_virt_wifi\x00', @broadcast}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 6.650085268s ago: executing program 7 (id=3816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001104000000002e"], 0x0, 0x37}, 0x20) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0xfd9f548592bf94e1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x24050) r3 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x5}, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x36) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x3) 6.366202748s ago: executing program 5 (id=3817): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1015c2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x2cd1d, 0x4000}, &(0x7f0000000380), &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000"], 0x48) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) io_uring_enter(r3, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000280)={&(0x7f00000024c0)=""/180, 0xb4}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c9042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, 0x0, 0x0, &(0x7f00000003c0)="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", 0xf80, 0x100}) 5.770065415s ago: executing program 0 (id=3819): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x679, @mcast1, 0x4}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x24, 0x0, &(0x7f0000000100)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 5.753357726s ago: executing program 8 (id=3820): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x0, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$kcm(0x21, 0x2, 0x2) 5.54999581s ago: executing program 7 (id=3821): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x100001, 0x5}}, 0x10) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1008, 0x40, 0x7f, 0x1, 0x1, 0x0, '\x00', r1, r4, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x2b, 0x20, 0x0, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}]}, 0x1c}}, 0x8000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r9, &(0x7f0000002740)={0x2020}, 0x2020) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r5, 0x35, 0x1, 0xc, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r5, r8, 0x12, 0x0, r8, @void, @value=r8, @void, @void, r10}, 0x20) 4.730040483s ago: executing program 0 (id=3822): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000001b40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="578d2abd7000fbdfdf250200000014000180080003007f00000106000100020000003f62fe04cdacc4827678fc7b3576958586cf6a5e3148128cf2831ad9111a2ed9d1c58f62143e080000000000000095990c8c5b3136e622d8ed8822c4f8013f40c0d1a1968a2768e08ebd3ddba3b0ac4ed0a612c8f0b175faa23bef34d4d22d9249521da32105ec723e3750b0fa165935725556552d10e6c3a7ec89cee4b177e0306281b1079332f5d01e12c4f4f1548492ba44dc3d030b836e180008a1d807d7217e1106b82feca36e10b60a000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="09000000e70014000000d97bfbf788a83baa88a8008100000000990000000000", 0x20, 0x200000c4, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) sendmmsg$inet(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="81f77985092312671c3163c844476ee367875f939b564be402ac17f59708fd60211c822fe7b507ea4c8c1710d33e8367261e5bbc66d25f65a5c94669887bebb52bdd90a34d", 0x45}, {&(0x7f0000000140)="433b3cba3717cfcf88b0cc7c968c45434dafd88eba7aa9444072065ba316550182db100b6ad4d495b42964997f0cfc478cb9c6580d7f17beb1043fe2c935bbc27330ba792f2444e039b33f2c7eede5b5078f171d269606546ec6b0258b8ae25f8127746df505d3d4a49e0c7247aac92d15ce9d65c53cb69d441d4663e6ff752430f8f77e394b355cfafa116e382a2637d9fdab347b64fbdb1912a87bf8ac4d9999f210b40b3b0bca46a305afa4c417605352ab6d49463e8cf8280a5f440779731ad89e6640de69316549297bf28fb5d6ba", 0xd1}], 0x2}}, {{&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001580)=[{&(0x7f00000002c0)="c196a40ae99c203575fb6cefe5b43927b100ef3085c9bfd1d6f23c75690d0e32b083469c876b6e765f02732de93f79908491490871f9379d6c780a366b7ed76cc9c0a43d53fc69a284381c6c5e3626ba9c6eab9c657b9c1f038a65dd264bc8858e346ac4e072ed1b75dcb5", 0x6b}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)}, {&(0x7f0000001380)="baaabf4d57c29724c24b4376ae6aed4744fcdedfe84d94180ac53f14c142df220cc1c54751acbf53e8d312cde9b2e82fdf57", 0x32}, {&(0x7f00000013c0)="73c6c81172a677dd009a76e1ce99ce7aacd62cf26db366047c2b67a7dac049b25bf6c8a0ea3d8b80fcb2ecffff7795a970ec4cc693c9bcaf3659b99b49a4d54ff49b23e9e8b38711a20a249199a0aef5d730ad66bf5ab7b8ff55df86c37868a22f634e57ae3a23ae4de307d0f41faea918ff7764e630303db22a26489c4e0d59c867f56b83be7e3cbac51c30a4475cbdc9a61ece04288f0cd0dfb43c282002001f322523155e95d466952b059d1ed2af07d1689b2c2c3e0a65307ef935710e3575f555ee9f069921ea82ec662ca0bbcc5697f749e13e885e939e28abab55ca8441174cc5777c45f9004177584c2c1016b5f8c0f929104f93", 0xf8}, {&(0x7f00000014c0)="a94ceabcf30873524076647ccf96b42b1f7a00f7b3d9150c4cc7e29e66c152d068db8390ebaac7e4c07ecd4770468c2aa6cd099e4f15e5e7e41856ca7d95f3c3cb9284809e04a9288fe2e2146e3645381e30c6d24521960a67f7574bf81a854c9717bcf4069558f7938c0433f81c06681ecfcac2ba5b8cc0186397a48f37bc", 0x7f}, {&(0x7f0000001540)="70f18e492c559834ae3dcb26", 0xc}], 0x7, &(0x7f0000001600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @loopback}}}], 0x38}}, {{&(0x7f0000001640)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001680)="5f6bef8743e4b476aa83414a15557921dca8693839be215a10b1b4d645249edccc411e585e1a", 0x26}, {&(0x7f00000016c0)="6d1672a88189e7cad1343eea27e32f89358acc5ac1f539cb0e57cb93cf58c1fd59390e1dade0e5fc18e133a7d6d2e136c5e2a4d4223a53d1dd4f5ed58bb08414b7ee02295d", 0x45}, {&(0x7f0000001740)="312b22557e6ec2c191bc9bb84a607b285cbc604cfc51ebdae00924b90c5e8ab08ea475ec6c879f56a9d913ee0fa10428f789aa4599cafaf39407e4963cda66ba27c3c822c76276459a9384935700de49cd52eb8785de2e70d81061ecd76db1213972ad99ca6cb2e1f5bca942c844db96947d5840d007bca61f0a1fbd325ba5aa465e0340e9148759b958df2438651f0053d667bdb13dd821a0e8e15d32815a", 0x9f}, {&(0x7f0000001800)="a96a7621f1716bcf2288", 0xa}, {&(0x7f0000001840)="59cb", 0x2}, {&(0x7f0000001880)="99c1cb31b2cb5318b0c2ba5b31d9f45f0a5ddc1d076a669c7e0f065c8fa4a13b6c73270d66ad70ae7b361f37e09da9f19c1e6d6f2ae44cc1ce572b69", 0x3c}, {&(0x7f00000018c0)="31c3926f50162d199873e4aef700d657410310c0f9731a2663a204127d38f5087f5228d209659b0f28d8f9e69989f1c36183dfe4cafd65c1371a0b89f6d4304bac2fd0f34c514ca0c1671bc51eb2e07e7fdd83d9cf3bb145669dae9e123112c5884cc3bea75186029f74439a2aa96d47c66b793afe5dbbdd7558ce344d091f1cb5e061e3959fa8fb56aad1", 0x8b}], 0x7, &(0x7f0000001a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x48}}], 0x3, 0x2000c801) 4.658544437s ago: executing program 8 (id=3823): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0d"], 0xc8}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0xf5}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) unshare(0x40020000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) 4.599196823s ago: executing program 7 (id=3824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 3.635015981s ago: executing program 0 (id=3825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001104000000002e"], 0x0, 0x37}, 0x20) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0xfd9f548592bf94e1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x24050) r3 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x5}, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x36) socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x3) 3.514378473s ago: executing program 8 (id=3826): socket$netlink(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800020100c0"]) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a6c9cf16808a10c66ff77d961c139c821b0c51a6ec3f30210c3c8e7e9ad06b82a2e7037e60edafadd8b6499e80d5c6701cae69be25679cfb80590a6d90aaa8833fa2047a01c2d0fe8ab46276565a7cae6"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r5 = fsopen(&(0x7f00000005c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 3.478777627s ago: executing program 5 (id=3827): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000bfa1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000466080000000000ff9500000000000000c60a0200000000001801000020207825000000000000000007010000f8ffffffb702000008000000b50a00000100000085000000b40000009500000000000000f449d34553b6cd933712a05d0c"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001370274902796e79e0e8b68f578bc93e0813a5ca0862be0be8f47c15589488024a13abb0f2995bf19618d7f3afd402dc6435fe8a07bb83514b70200678bf279d3343f376df14ebbf2638999bd3b02482da832836abfd8fe5b91c82dacd12636615d5e86e781761fe06d09b8c4b847f4c1debb9427747702853a8a343b89084cc008831fba81ec3d01fd41ce20c85357ff944ef0e77268c91e8921bd412ee154a53518d75f1cbf09ce8589f1a3bd260c3a1165437cd0dd7ed327d35afa75b21d9d7901c016a4c8ec69bf30ec5bcaf8d248961aaab9a12ef69101434050dbd55b60100e2bda31cb79ab63f99201dcb3352e1b2ae8892d871212db92d182d4d4061c2cd2d745607515b8291f096e53c54da0a937ff80de0990ee0a061103a303be4d0e5ae73d5d375e5cf7"], 0x6f4}}, 0x4000000) 3.017723857s ago: executing program 7 (id=3828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) syz_open_procfs(0x0, &(0x7f0000000740)='net/sctp\x00') 2.981090672s ago: executing program 5 (id=3829): socket$inet_sctp(0x2, 0x5, 0x84) r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x8) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syslog(0x3, &(0x7f0000000080)=""/179, 0xb3) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x9) mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x31) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r3, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) sendmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x88000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000001200)=""/46, 0x2e) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.980435644s ago: executing program 1 (id=3830): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000000000064e6dcf2605a8e6f0500000085000000110000187f00000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18060000000000fffffffffffffffe0018120000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="119ed2658231d78617cbd07d905910b39aba02a11ce1ed967fe09626b8a622ad929df78d9c0e913f0ca0fc6fa13c957735b806bf1760677c9945e6209d81ee713a22e36883c062e38f4c24a5f36830a4d106394e3e438175dca15303aa178a4811861d08c39856968ff6d03efd10d876cb1cf6c96a5368f756c9e828201cf28428e00a089cec051c845ff63c651aeb6ccdc7b987f7dc3b9aacb85bdac5fb904c0162efef660c047a60deea", 0xab, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x53, 0x32, 0x32, 0x31, 0x63, 0x62, 0x39, 0x35, 0x7, 0x63, 0x38, 0x32, 0x34, 0x39, 0x39]}, &(0x7f0000000600)={0x0, "d1cca1368b8049b762a1679c04f1a640c3bfc8c21f427d03ca60e57678acca68d73622f631363d5d61f8c22ab147a6069dd1962b6e091e886110ebcaba124f95", 0x16}, 0x48, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 2.910566057s ago: executing program 7 (id=3831): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001104000000002e"], 0x0, 0x37}, 0x20) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0xfd9f548592bf94e1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x24050) r3 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x5}, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x36) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x3) 1.858192443s ago: executing program 1 (id=3832): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x37, 0x9d, 0x62}, 0x2c) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) geteuid() ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x2, 0x49, {}, {0xb289d58468e4db09, 0xc, 0x1, 0xff, 0x9, 0x3, "80322142"}, 0x6, 0x1, {0x0}, 0x7}) r2 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3005, 0x8, 0xa, 0x0, 0x5, 0x1993012db91ab52e}}) 1.593970504s ago: executing program 0 (id=3833): socket$nl_rdma(0x10, 0x3, 0x14) r0 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x29, 0x1, 0x0, 0x50}, 0x40000, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x5}, {0x202}, {}, 0x9, 0x1ff}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x91c7ae8a06be95f9], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x7f}, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x0, 0x7}, {0x3, 0x1}, 0x6201, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x338) 1.189899011s ago: executing program 5 (id=3834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, 0x0) getpgrp(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x80001, 0x0, 0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={0x0, 0xffffffffffffffbf, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x1, 0x0, 0x7, [0x0], [0x0, 0x0, 0xc, 0x1], [0x46b6], [0x4, 0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8}) shmctl$IPC_RMID(0x0, 0xffffffffffffff7f) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000200)={r7, 0x0, 0xfffffefb, 0xfffffffe, 0x1, [], [0x800, 0x0, 0x20, 0xfffffffe], [0x1, 0x0, 0x0, 0x77], [0x10001, 0xa54, 0xd1, 0x3]}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000006f40)={r9, r10, 0x25, 0x8, @val=@iter={0x0}}, 0x20) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x58, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x5, 0x1, 0x1, 0x0, 0x200}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x64, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_PRIV_DATA_LEN={0x0, 0x5, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x0, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x0, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r11, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0xa3a}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}, 0x4000000) r12 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0x2000000001]}, 0x8, 0x0) syz_io_uring_setup(0x306b, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x0, 0xd0}, &(0x7f0000000100)=0x0, &(0x7f00000010c0)=0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) signalfd4(r12, &(0x7f0000000140), 0x8, 0x0) 1.090324072s ago: executing program 7 (id=3835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCSETSF(r0, 0x5404, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0xa, 0xfffffffc) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700400001000000", 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r4, 0xd7aeb000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_newneigh={0x1c, 0x1c, 0x100, 0x70bd2a, 0x25dfdbff, {0x1c, 0x0, 0x0, 0x0, 0x8, 0xc, 0x4}}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000100390400"/20, @ANYRES32, @ANYBLOB="00000000000000002000128008000100677265001400028006000f00ff070000060011004e230000"], 0x40}}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x8, 0xfffffff9, 0x8, 0x800, 0x5, "0b80144341778049f7c5ffffef00"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000000f700200d0501320000000000010902240001000060b1090400000103000100092101010801220300f400bd656884e1bf039d20e7ae95c2b041aab93e196b533e4ceaf7aeecfcf8e30dd8bbe329d46e3b4a803a1ebab5fd9c56592d4dff7a80b2a1236728540635eb988aff55de61651a453f17f4df2f58e61f6de32a03738927b04f3662ae5d679f68eb7f2664aad9"], 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00febf453bd4203da805cbf34276d6870064fd238b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.018052065s ago: executing program 0 (id=3836): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@getlink={0x70, 0x12, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xc000, 0x10000}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}, @IFLA_MASTER={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x83f7}, @IFLA_LINK={0x8}, @IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe}, @IFLA_PORT_PROFILE={0xa, 0x2, 'wlan1\x00'}]}, @IFLA_LINK_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 229.437741ms ago: executing program 0 (id=3837): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) connect$pppoe(r0, &(0x7f00000003c0)={0x18, 0x0, {0x4, @random="e9e165625ac2", 'wlan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) fstat(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x20000000, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000040)="7d24bf899d19d82793ab3a29a5a62db527a4c3d85cf8227c8a96d6937e7c791b6269adb694fbd3af6bce31eb4ddee895d9f358ef29593b61bce1cf64d10deab810169e87b8050a7b45d5b6b21f381a606194920364a34615cc47e3133cbac2d6a959a5db7a0d9d7335a86249b86b653da37719d47c50476e9885d3") syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[], 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x1abd800, 0x0, 0x0, 0xfffffffd}) iopl(0x2) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffbd) 203.417508ms ago: executing program 5 (id=3838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r2, 0x0, 0x3, 0x1}}, 0x20) 69.717518ms ago: executing program 5 (id=3839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 0s ago: executing program 8 (id=3840): socket$can_j1939(0x1d, 0x2, 0x7) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x1, 0x3}, 0x18, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240", @ANYRES32=r1], 0xdc}}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x3) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 17864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 788.889073][T17864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 788.915206][T17866] [U] [ 788.918122][T17866] [U] [ 788.920829][T17866] [U] [ 788.923509][T17866] [U] [ 788.926358][T17866] [U] [ 788.929024][T17866] [U] [ 788.931687][T17866] [U] [ 788.934349][T17866] [U] [ 788.938695][T17866] [U] [ 788.941371][T17866] [U] [ 788.944028][T17866] [U] [ 788.946686][T17866] [U] [ 788.949695][T17866] [U] [ 788.949732][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 788.952374][T17866] [U] [ 788.961854][T17866] [U] [ 788.964515][T17866] [U] [ 788.979738][T12374] Bluetooth: hci2: command tx timeout [ 789.105110][T17864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.251666][ T5966] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 789.402079][T17866] [U] [ 789.404796][T17866] [U] [ 789.407486][T17866] [U] [ 789.410179][T17866] [U] [ 789.418625][T17866] [U] [ 789.421339][T17866] [U] [ 789.424036][T17866] [U] [ 789.426723][T17866] [U] [ 789.436699][T17864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.448463][T17866] [U] [ 789.451167][T17866] [U] [ 789.453841][T17866] [U] [ 789.456502][T17866] [U] [ 789.459842][ T5966] usb 1-1: Using ep0 maxpacket: 8 [ 789.495861][T17866] [U] [ 789.498567][T17866] [U] [ 789.501265][T17866] [U] [ 789.503963][T17866] [U] [ 789.506805][T17866] [U] [ 789.509487][T17866] [U] [ 789.512167][T17866] [U] [ 789.514841][T17866] [U] [ 789.517664][T17866] [U] [ 789.520338][T17866] [U] [ 789.522999][T17866] [U] [ 789.525657][T17866] [U] [ 789.528486][T17866] [U] [ 789.531161][T17866] [U] [ 789.533822][T17866] [U] [ 789.536481][T17866] [U] [ 789.539293][T17866] [U] [ 789.541972][T17866] [U] [ 789.544635][T17866] [U] [ 789.547296][T17866] [U] [ 789.550830][T17866] [U] [ 789.553511][T17866] [U] [ 789.556173][T17866] [U] [ 789.558834][T17866] [U] [ 789.561792][T17866] [U] [ 789.564487][T17866] [U] [ 789.567158][T17866] [U] [ 789.569839][T17866] [U] [ 789.573432][T17866] [U] [ 789.576124][T17866] [U] [ 789.578802][T17866] [U] [ 789.581476][T17866] [U] [ 789.587093][T17864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.599267][T17864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.620634][ T5966] usb 1-1: unable to get BOS descriptor or descriptor too short [ 789.632670][T17864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.633472][ T5966] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 789.664672][T17864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.676999][T17866] [U] [ 789.679704][T17866] [U] [ 789.682394][T17866] [U] [ 789.685082][T17866] [U] [ 789.689591][T17864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.697222][ T5966] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.720195][T17864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.730651][T17866] [U] [ 789.733351][T17866] [U] [ 789.736043][T17866] [U] [ 789.738734][T17866] [U] [ 789.766595][ T5966] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 789.777651][ T5966] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 789.802602][T17866] [U] [ 789.805313][T17866] [U] [ 789.808004][T17866] [U] [ 789.810675][T17866] [U] [ 789.837146][T17866] [U] [ 789.839851][T17866] [U] [ 789.842542][T17866] [U] [ 789.845214][T17866] [U] [ 789.861848][T17866] [U] [ 789.864559][T17866] [U] [ 789.867244][T17866] [U] [ 789.869935][T17866] [U] [ 789.901666][ T5966] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.911094][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.919076][ T5966] usb 1-1: Product: 㐉 [ 789.932876][T17866] [U] [ 789.935580][T17866] [U] [ 789.938274][T17866] [U] [ 789.940945][T17866] [U] [ 789.950515][T17866] [U] [ 789.953220][T17866] [U] [ 789.955916][T17866] [U] [ 789.958606][T17866] [U] [ 789.962405][T17866] [U] [ 789.965107][T17866] [U] [ 789.967796][T17866] [U] [ 789.970489][T17866] [U] [ 789.979763][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 789.987000][ T5966] usb 1-1: Manufacturer: ᳳ [ 790.005500][T17866] [U] [ 790.008210][T17866] [U] [ 790.010902][T17866] [U] [ 790.013590][T17866] [U] [ 790.016508][T17866] [U] [ 790.019200][T17866] [U] [ 790.021872][T17866] [U] [ 790.024531][T17866] [U] [ 790.043689][ T5966] usb 1-1: SerialNumber: 윴順썊ð᳀鍎뎬诂㎂㩰札뻊햺‟ᤙϹ䂥띓咻뀡쒉ዡ北퇗辀ຠᐱጹ鍡 [ 790.159695][T17866] [U] [ 790.162395][T17866] [U] [ 790.165065][T17866] [U] [ 790.167738][T17866] [U] [ 790.205981][T17866] [U] [ 790.208673][T17866] [U] [ 790.211345][T17866] [U] [ 790.214015][T17866] [U] [ 790.247024][T17866] [U] [ 790.249718][T17866] [U] [ 790.252383][T17866] [U] [ 790.255042][T17866] [U] [ 790.269517][T17866] [U] [ 790.272201][T17866] [U] [ 790.274860][T17866] [U] [ 790.277517][T17866] [U] [ 790.283862][T17866] [U] [ 790.286563][T17866] [U] [ 790.289235][T17866] [U] [ 790.291894][T17866] [U] [ 790.294885][T17867] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 790.322713][T17866] [U] [ 790.325406][T17866] [U] [ 790.328079][T17866] [U] [ 790.330752][T17866] [U] [ 790.395796][T17866] [U] [ 790.398490][T17866] [U] [ 790.401161][T17866] [U] [ 790.404594][T17866] [U] [ 790.549224][ T30] audit: type=1400 audit(1753460660.387:3199): avc: denied { ioctl } for pid=17860 comm="syz.0.3300" path="socket:[56135]" dev="sockfs" ino=56135 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 791.022338][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 791.029503][T12374] Bluetooth: hci2: command tx timeout [ 791.506695][T17886] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 791.513361][T17886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 791.556206][T17886] vhci_hcd vhci_hcd.0: Device attached [ 791.610772][T17886] input: syz1 as /devices/virtual/input/input62 [ 791.647938][ T5966] usb 1-1: 0:2 : does not exist [ 791.675913][ T13] hsr_slave_0: left promiscuous mode [ 791.701352][ T5966] usb 1-1: USB disconnect, device number 77 [ 791.707924][ T13] hsr_slave_1: left promiscuous mode [ 791.726393][T17887] vhci_hcd: connection closed [ 791.728284][ T2973] vhci_hcd: stop threads [ 791.757284][ T2973] vhci_hcd: release socket [ 791.771703][ T2973] vhci_hcd: disconnect device [ 791.787702][ T13] veth1_macvtap: left promiscuous mode [ 791.804735][T17696] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 791.816442][ T13] veth0_macvtap: left promiscuous mode [ 791.822039][T17696] usb 35-1: enqueue for inactive port 0 [ 791.828249][ T13] veth1_vlan: left promiscuous mode [ 791.835710][ T13] veth0_vlan: left promiscuous mode [ 791.901519][T17696] vhci_hcd: vhci_device speed not set [ 792.059961][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 793.099722][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 793.144892][ T5966] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 793.423540][ T5966] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 793.436678][ T5966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.447501][ T5966] usb 8-1: config 0 descriptor?? [ 793.504829][T17906] mkiss: ax0: crc mode is auto. [ 793.520373][T17780] team0: Port device team_slave_0 added [ 793.542828][T17780] team0: Port device team_slave_1 added [ 793.607073][T17780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.619493][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.666181][T17780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.678412][T17780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.698937][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.764777][T17780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.007920][T17780] hsr_slave_0: entered promiscuous mode [ 794.035551][T17780] hsr_slave_1: entered promiscuous mode [ 794.051219][T17780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 794.058954][T17780] Cannot create hsr debugfs directory [ 794.093353][ T13] IPVS: stop unused estimator thread 0... [ 794.139932][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 794.290720][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.359709][T17690] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 794.375491][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.400125][T17127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 794.416259][T17127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 794.424498][T17127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 794.434012][T17127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 794.441806][T17127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 794.477438][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.545869][T17690] usb 1-1: Using ep0 maxpacket: 16 [ 794.548082][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.571560][T17690] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 794.593901][T17690] usb 1-1: config 0 has no interface number 0 [ 794.619405][T17690] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 794.660098][T17690] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 794.693203][T17690] usb 1-1: config 0 interface 41 has no altsetting 0 [ 794.718786][T17690] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 794.758143][T17690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.783152][T17690] usb 1-1: Product: syz [ 794.790717][T17690] usb 1-1: Manufacturer: syz [ 794.875286][T17903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.884161][ T13] bridge_slave_1: left allmulticast mode [ 794.891334][ T13] bridge_slave_1: left promiscuous mode [ 794.897038][T17903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.918848][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.931587][ T13] bridge_slave_0: left allmulticast mode [ 794.939795][ T13] bridge_slave_0: left promiscuous mode [ 794.945479][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.959842][T17690] usb 1-1: SerialNumber: syz [ 794.968301][T17690] usb 1-1: config 0 descriptor?? [ 794.973561][ T5966] pegasus 8-1:0.0: can't reset MAC [ 794.984457][ T5966] pegasus 8-1:0.0: probe with driver pegasus failed with error -5 [ 794.992804][T17921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 795.003015][ T5966] usb 8-1: USB disconnect, device number 21 [ 795.009437][T17921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 795.179684][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 795.255597][T17921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 795.383613][T17921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 795.700160][T14238] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 795.727370][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.738699][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.744870][ T30] audit: type=1400 audit(1753460665.587:3200): avc: denied { write } for pid=17936 comm="syz.1.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 795.781571][ T13] bond0 (unregistering): Released all slaves [ 795.787761][ T30] audit: type=1400 audit(1753460665.587:3201): avc: denied { read } for pid=17936 comm="syz.1.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 795.812683][T17690] Error reading MAC address [ 795.869858][T14238] usb 8-1: Using ep0 maxpacket: 16 [ 795.870444][T17921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 795.876458][T14238] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 795.895641][T17921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 795.915537][T14238] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 796.001400][T17922] lo speed is unknown, defaulting to 1000 [ 796.003236][T14238] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 796.042775][T14238] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.044483][T17780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 796.050864][T14238] usb 8-1: Product: syz [ 796.062332][T14238] usb 8-1: Manufacturer: syz [ 796.066932][T14238] usb 8-1: SerialNumber: syz [ 796.106225][T14238] usb 8-1: config 0 descriptor?? [ 796.135885][T17780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 796.142490][T14238] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 796.163637][T14238] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 796.177438][T17780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 796.219749][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 796.273111][T17780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 796.459858][T17127] Bluetooth: hci1: command tx timeout [ 796.465422][T17780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.486350][T17780] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.505298][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.512419][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.531520][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.538649][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.559728][ T1206] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 796.688139][T17780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 796.715587][T17690] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 796.734199][ T1206] usb 2-1: Using ep0 maxpacket: 32 [ 796.753737][T14238] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 796.761522][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.784175][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.794332][T14238] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 796.806427][ T1206] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 796.815550][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.835351][T17690] usb 1-1: USB disconnect, device number 78 [ 796.840744][ T1206] usb 2-1: config 0 descriptor?? [ 796.884534][ T1206] hub 2-1:0.0: USB hub found [ 797.130977][ T1206] hub 2-1:0.0: 9 ports detected [ 797.166050][ T1206] hub 2-1:0.0: insufficient power available to use all downstream ports [ 797.260293][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 797.504053][T17957] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 797.528202][T17780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.849864][T17963] loop6: detected capacity change from 0 to 7 [ 797.870645][T17963] Dev loop6: unable to read RDB block 7 [ 797.876334][T17963] loop6: AHDI p1 p2 p3 [ 797.880587][T17963] loop6: partition table partially beyond EOD, truncated [ 797.888904][T17963] loop6: p1 start 1601398130 is beyond EOD, truncated [ 797.895765][T17963] loop6: p2 start 1702059890 is beyond EOD, truncated [ 797.976446][T14238] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 798.309715][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 798.476466][T17922] chnl_net:caif_netlink_parms(): no params data found [ 798.497843][ T13] hsr_slave_0: left promiscuous mode [ 798.503824][ T13] hsr_slave_1: left promiscuous mode [ 798.510077][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.517469][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.524653][T14238] em28xx 8-1:0.0: No AC97 audio processor [ 798.548811][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.549811][T17127] Bluetooth: hci1: command tx timeout [ 798.578726][T14238] usb 8-1: USB disconnect, device number 22 [ 798.585673][T14238] em28xx 8-1:0.0: Disconnecting em28xx [ 798.596176][T14238] em28xx 8-1:0.0: Freeing device [ 798.606879][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.627925][ T1206] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 799.339706][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 799.950574][T14238] usb 2-1: USB disconnect, device number 68 [ 800.143971][T17127] Bluetooth: hci5: command 0x0406 tx timeout [ 800.379728][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 800.619776][ T5155] Bluetooth: hci1: command tx timeout [ 800.992369][ T13] veth1_macvtap: left promiscuous mode [ 800.999777][ T13] veth0_macvtap: left promiscuous mode [ 801.248840][ T13] team0 (unregistering): Port device team_slave_1 removed [ 801.285682][ T13] team0 (unregistering): Port device team_slave_0 removed [ 801.423493][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 801.586696][T17969] team0: Unable to change to the same mode the team is in [ 801.614027][T17981] batman_adv: batadv0: Adding interface: ipvlan2 [ 801.631695][T17981] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.659335][T17981] batman_adv: batadv0: Interface activated: ipvlan2 [ 802.129402][T17922] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.141625][T17922] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.148764][T17922] bridge_slave_0: entered allmulticast mode [ 802.156565][T17922] bridge_slave_0: entered promiscuous mode [ 802.171325][T17922] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.178621][T17922] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.192269][T17922] bridge_slave_1: entered allmulticast mode [ 802.211427][T17922] bridge_slave_1: entered promiscuous mode [ 802.248097][T17922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.265233][T17922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.299940][T17127] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 802.388940][T17922] team0: Port device team_slave_0 added [ 802.401185][T17922] team0: Port device team_slave_1 added [ 802.419937][ T30] audit: type=1800 audit(1753460672.257:3202): pid=17996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3328" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 802.459939][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 802.673852][ T2949] Bluetooth: hci3: Frame reassembly failed (-84) [ 802.712923][T17127] Bluetooth: hci1: command tx timeout [ 802.770586][T17922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.798938][ T30] audit: type=1400 audit(1753460672.637:3203): avc: denied { read } for pid=17998 comm="syz.0.3330" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 802.800710][T17922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.821207][ T30] audit: type=1400 audit(1753460672.637:3204): avc: denied { open } for pid=17998 comm="syz.0.3330" path="/77/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 802.875533][T17922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.893065][T17922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.900138][T17922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.927881][T17922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.943155][T17780] veth0_vlan: entered promiscuous mode [ 802.957110][T17780] veth1_vlan: entered promiscuous mode [ 802.987156][T17922] hsr_slave_0: entered promiscuous mode [ 802.996942][T17922] hsr_slave_1: entered promiscuous mode [ 803.006709][T17922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.025106][T17922] Cannot create hsr debugfs directory [ 803.132159][T17780] veth0_macvtap: entered promiscuous mode [ 803.168957][T17780] veth1_macvtap: entered promiscuous mode [ 803.223508][T17780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.239597][T17780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.271558][T17780] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.281147][T17780] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.289869][T17780] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.302739][T17780] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.377904][T17922] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 803.405471][T17922] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 803.425426][T17922] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 803.453254][T17922] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 803.486860][T18011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=18011 comm=syz.0.3333 [ 803.509706][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 803.646770][T15581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.656124][T15581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.733687][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.758171][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.775366][T17922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.852021][T17922] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.863906][ T30] audit: type=1800 audit(1753460673.707:3205): pid=18019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3334" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 803.898599][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.905745][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.919911][T14238] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 803.955952][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.957989][ T5966] IPVS: starting estimator thread 0... [ 803.963083][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.985285][T18024] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 804.079879][T18026] IPVS: using max 43 ests per chain, 103200 per kthread [ 804.213762][T14238] usb 1-1: config 0 has an invalid descriptor of length 244, skipping remainder of the config [ 804.228385][T14238] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 804.242085][T14238] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 804.549717][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 804.701165][T17127] Bluetooth: hci3: command 0x1003 tx timeout [ 804.707618][T12374] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 804.733623][T14238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.766207][T14238] usb 1-1: config 0 descriptor?? [ 804.788578][T14238] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 805.059375][T18042] bridge_slave_0: left allmulticast mode [ 805.065119][T18042] bridge_slave_0: left promiscuous mode [ 805.071430][T18042] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.161501][T18042] bridge_slave_1: left allmulticast mode [ 805.167155][T18042] bridge_slave_1: left promiscuous mode [ 805.194910][T18042] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.301364][T18042] bond0: (slave bond_slave_0): Releasing backup interface [ 805.361919][T18042] bond0: (slave bond_slave_1): Releasing backup interface [ 805.445375][T18042] team0: Port device team_slave_0 removed [ 805.502056][T18042] team0: Port device team_slave_1 removed [ 805.510648][T18042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.518212][T18042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.544129][T18042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.551996][T18042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.579677][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 805.758600][T18048] random: crng reseeded on system resumption [ 806.096039][ T30] audit: type=1400 audit(1753460675.597:3206): avc: denied { append } for pid=18045 comm="syz.1.3338" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 806.448668][T18043] team0: Mode changed to "loadbalance" [ 806.525526][T17693] usb 1-1: USB disconnect, device number 79 [ 806.619708][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 807.066342][T17922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.242209][T18054] syzkaller0: entered promiscuous mode [ 807.280246][T18054] syzkaller0: entered allmulticast mode [ 807.659756][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 808.609709][ T1206] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 808.699713][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 808.769830][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 808.779089][ T1206] usb 6-1: config 4 has an invalid interface number: 9 but max is 0 [ 808.798238][ T1206] usb 6-1: config 4 has no interface number 0 [ 808.811555][ T1206] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 808.889875][T18064] netlink: 'syz.7.3336': attribute type 1 has an invalid length. [ 809.139693][ T1206] usb 6-1: config 4 interface 9 has no altsetting 0 [ 809.152242][ T1206] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 809.161388][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.169399][ T1206] usb 6-1: Product: syz [ 809.173643][ T1206] usb 6-1: Manufacturer: syz [ 809.178249][ T1206] usb 6-1: SerialNumber: syz [ 809.186381][T18063] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 809.198180][ T1206] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 809.742081][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 809.949544][ T2973] usb 6-1: Failed to submit usb control message: -71 [ 809.949875][ T1206] usb 6-1: USB disconnect, device number 73 [ 809.979743][ T2973] usb 6-1: unable to send the bmi data to the device: -71 [ 809.986924][ T2973] usb 6-1: unable to get target info from device [ 809.995125][ T2973] usb 6-1: could not get target info (-71) [ 810.001552][ T2973] usb 6-1: could not probe fw (-71) [ 810.342538][T18069] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3342'. [ 810.570368][T18088] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 810.589491][T17922] veth0_vlan: entered promiscuous mode [ 810.615938][T17922] veth1_vlan: entered promiscuous mode [ 810.664774][T18090] tipc: Started in network mode [ 810.674520][T18090] tipc: Node identity d296908bf4f2, cluster identity 4711 [ 810.682593][T18090] tipc: Enabled bearer , priority 0 [ 810.697616][T18090] syzkaller0: entered promiscuous mode [ 810.729807][T18090] syzkaller0: entered allmulticast mode [ 810.779817][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 811.020786][T17922] veth0_macvtap: entered promiscuous mode [ 811.038414][T17922] veth1_macvtap: entered promiscuous mode [ 811.232471][T17922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.251390][T18094] tipc: Resetting bearer [ 811.265884][T18089] tipc: Resetting bearer [ 811.296447][T18089] tipc: Disabling bearer [ 811.418390][T17922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.420165][T18101] 9pnet_fd: Insufficient options for proto=fd [ 811.430668][T17922] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.441728][T17922] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.464711][T17922] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.569372][T17922] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.721423][T15581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.743557][T15581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.819702][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 811.844775][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.875258][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.125322][T18108] /dev/nullb0: Can't lookup blockdev [ 812.697842][ T30] audit: type=1800 audit(1753460682.497:3207): pid=18117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3353" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 812.757655][T18104] lo speed is unknown, defaulting to 1000 [ 812.859780][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 813.029368][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3354'. [ 813.733910][T18130] syzkaller0: entered promiscuous mode [ 813.739372][T18130] syzkaller0: entered allmulticast mode [ 813.899683][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 814.026136][ T30] audit: type=1400 audit(1753460683.867:3208): avc: denied { connect } for pid=18122 comm="syz.1.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 814.384388][T18138] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 814.939726][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 815.979676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 816.212018][T12374] Bluetooth: hci0: command 0x0406 tx timeout [ 816.985359][T18159] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 817.019727][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 817.517137][T18173] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 817.704127][T18177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3370'. [ 818.059681][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 818.446538][T18173] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 818.448720][T18175] batadv_slave_1: entered promiscuous mode [ 818.854225][T18190] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3374'. [ 819.100715][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 819.101368][T18200] netlink: 'syz.0.3376': attribute type 2 has an invalid length. [ 819.874235][T18198] 9pnet_fd: Insufficient options for proto=fd [ 820.139777][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 820.638816][T18220] tmpfs: Bad value for 'mpol' [ 820.681585][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3382'. [ 820.723136][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3382'. [ 820.755480][T18221] syzkaller0: entered promiscuous mode [ 820.761616][T18221] syzkaller0: entered allmulticast mode [ 821.076857][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'. [ 821.189808][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 822.219833][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 822.842817][T18244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.852710][ T30] audit: type=1400 audit(1753460692.687:3209): avc: denied { getopt } for pid=18242 comm="syz.8.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 822.994245][T18253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=18253 comm=syz.5.3392 [ 823.230602][T17696] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 823.269770][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 823.329167][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3393'. [ 823.342343][T18258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3393'. [ 823.359738][ T5966] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 823.399306][ T30] audit: type=1400 audit(1753460693.237:3210): avc: denied { read } for pid=18259 comm="syz.1.3394" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 823.425675][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'. [ 823.480962][T17696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.541897][T17696] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 823.554467][T17693] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 823.564478][T17696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 823.575943][ T5966] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 823.588945][T17696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 823.598934][ T5966] usb 8-1: can't read configurations, error -61 [ 823.606050][T17696] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 823.620681][T17696] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 823.630888][T17696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 823.638983][T17696] usb 1-1: Product: syz [ 823.643290][T17696] usb 1-1: Manufacturer: syz [ 823.647889][T17696] usb 1-1: SerialNumber: syz [ 823.657714][T17696] usb 1-1: config 0 descriptor?? [ 823.729721][ T5966] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 823.738830][T17693] usb 6-1: config 0 has an invalid descriptor of length 244, skipping remainder of the config [ 823.749237][T17693] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.762948][T17693] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 823.772069][T17693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.784311][T17693] usb 6-1: config 0 descriptor?? [ 823.794920][T17693] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 823.866024][T17696] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 823.873206][T17696] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 823.901426][ T5966] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 823.909047][ T5966] usb 8-1: can't read configurations, error -61 [ 823.915773][ T5966] usb usb8-port1: attempt power cycle [ 824.073465][T17696] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 824.081148][T17696] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 824.094253][T17696] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 824.299793][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 824.322329][T17696] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 824.379741][ T5966] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 824.415589][ T5966] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 824.443921][ T5966] usb 8-1: can't read configurations, error -61 [ 824.789760][ T5966] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 824.833250][ T5966] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 824.841122][ T5966] usb 8-1: can't read configurations, error -61 [ 824.850092][ T5966] usb usb8-port1: unable to enumerate USB device [ 825.058341][T17696] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 825.077912][T17696] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 825.096299][T17696] usb 1-1: USB disconnect, device number 80 [ 825.339792][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 825.398535][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3397'. [ 825.686221][T18277] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=18277 comm=syz.8.3398 [ 825.790998][T18282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.903052][T18287] FAULT_INJECTION: forcing a failure. [ 825.903052][T18287] name failslab, interval 1, probability 0, space 0, times 0 [ 825.916939][T18287] CPU: 0 UID: 0 PID: 18287 Comm: syz.1.3401 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 825.916964][T18287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 825.916975][T18287] Call Trace: [ 825.916981][T18287] [ 825.916988][T18287] dump_stack_lvl+0x16c/0x1f0 [ 825.917021][T18287] should_fail_ex+0x512/0x640 [ 825.917048][T18287] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 825.917079][T18287] should_failslab+0xc2/0x120 [ 825.917097][T18287] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 825.917122][T18287] ? trace_sched_exit_tp+0xde/0x130 [ 825.917146][T18287] ? __alloc_skb+0x2b2/0x380 [ 825.917177][T18287] __alloc_skb+0x2b2/0x380 [ 825.917203][T18287] ? __pfx___alloc_skb+0x10/0x10 [ 825.917227][T18287] ? __lock_acquire+0x622/0x1c90 [ 825.917254][T18287] alloc_skb_with_frags+0xe0/0x860 [ 825.917281][T18287] sock_alloc_send_pskb+0x7fb/0x990 [ 825.917316][T18287] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 825.917351][T18287] ? __local_bh_enable_ip+0xa4/0x120 [ 825.917377][T18287] j1939_sk_sendmsg+0x6bc/0x13d0 [ 825.917420][T18287] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 825.917439][T18287] ? __might_fault+0x13b/0x190 [ 825.917472][T18287] ____sys_sendmsg+0xa98/0xc70 [ 825.917495][T18287] ? copy_msghdr_from_user+0x10a/0x160 [ 825.917512][T18287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.917545][T18287] ___sys_sendmsg+0x134/0x1d0 [ 825.917564][T18287] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.917607][T18287] ? __pfx___might_resched+0x10/0x10 [ 825.917636][T18287] ? __sys_sendmmsg+0x229/0x420 [ 825.917656][T18287] __sys_sendmmsg+0x200/0x420 [ 825.917677][T18287] ? __pfx___sys_sendmmsg+0x10/0x10 [ 825.917703][T18287] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 825.917733][T18287] ? fput+0x70/0xf0 [ 825.917752][T18287] ? ksys_write+0x1ac/0x250 [ 825.917777][T18287] ? __pfx_ksys_write+0x10/0x10 [ 825.917808][T18287] __x64_sys_sendmmsg+0x9c/0x100 [ 825.917824][T18287] ? lockdep_hardirqs_on+0x7c/0x110 [ 825.917851][T18287] do_syscall_64+0xcd/0x4c0 [ 825.917870][T18287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.917887][T18287] RIP: 0033:0x7fe477d8e9a9 [ 825.917902][T18287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.917919][T18287] RSP: 002b:00007fe475bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 825.917936][T18287] RAX: ffffffffffffffda RBX: 00007fe477fb6080 RCX: 00007fe477d8e9a9 [ 825.917948][T18287] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000006 [ 825.917960][T18287] RBP: 00007fe475bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 825.917970][T18287] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 825.917981][T18287] R13: 0000000000000000 R14: 00007fe477fb6080 R15: 00007ffdac856318 [ 825.918005][T18287] [ 826.329267][T17693] usb 6-1: USB disconnect, device number 74 [ 826.379764][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 826.421278][ T30] audit: type=1400 audit(1753460695.687:3211): avc: denied { map } for pid=18285 comm="syz.1.3401" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 826.991518][T18300] overlayfs: missing 'workdir' [ 827.419792][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 827.894459][T18310] SELinux: syz.8.3400 (18310) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 827.984631][T18309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=18309 comm=syz.5.3406 [ 828.409725][T17696] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 828.459709][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 828.601531][T17696] usb 6-1: config 0 has an invalid descriptor of length 244, skipping remainder of the config [ 828.620075][T17696] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 828.633119][T17696] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 828.642617][T17696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.654400][T17696] usb 6-1: config 0 descriptor?? [ 828.688041][T17696] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 828.951699][T18325] overlayfs: missing 'lowerdir' [ 829.087607][ T30] audit: type=1400 audit(1753460698.927:3212): avc: denied { bind } for pid=18332 comm="syz.7.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 829.127541][ T30] audit: type=1400 audit(1753460698.927:3213): avc: denied { listen } for pid=18332 comm="syz.7.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 829.168674][ T30] audit: type=1400 audit(1753460698.927:3214): avc: denied { accept } for pid=18332 comm="syz.7.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 829.259701][T18326] lo speed is unknown, defaulting to 1000 [ 829.383417][T18340] overlayfs: missing 'lowerdir' [ 829.393157][T18339] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 829.443284][T18323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 829.499689][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 830.044624][ T30] audit: type=1800 audit(1753460699.887:3215): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3413" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 830.096901][T18348] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3414'. [ 830.539694][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 830.873791][T18359] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 830.878186][T18357] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input65 [ 831.579704][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 831.634175][T14238] usb 6-1: USB disconnect, device number 75 [ 831.940179][T18368] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3420'. [ 832.619671][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 833.380169][T18381] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 833.659727][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 834.164308][T18389] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 834.678684][T18392] syzkaller0: entered promiscuous mode [ 834.699670][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 834.719957][T18392] syzkaller0: entered allmulticast mode [ 834.778672][T18411] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 835.740122][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 836.121665][T18427] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 836.561375][T18431] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 836.789663][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 837.281807][ T30] audit: type=1800 audit(1753460707.117:3216): pid=18438 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3440" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 837.819692][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 838.859688][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 838.936903][T18419] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3433'. [ 839.283205][T18460] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3446'. [ 839.899702][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 840.939671][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 841.979705][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 842.112862][T18494] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3454'. [ 842.122726][ T30] audit: type=1800 audit(1753460711.967:3217): pid=18485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3452" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 842.149951][T18494] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3454'. [ 842.158955][T18494] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3454'. [ 842.229208][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3455'. [ 842.398274][T18498] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3454'. [ 842.587974][T18505] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3456'. [ 843.019686][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 844.059835][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 844.778089][T18532] bridge0: port 1(gretap0) entered blocking state [ 845.099677][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 845.798908][T18532] bridge0: port 1(gretap0) entered disabled state [ 845.818818][T18532] gretap0: entered allmulticast mode [ 845.837758][T18532] gretap0: entered promiscuous mode [ 845.877636][T18532] bridge0: port 1(gretap0) entered blocking state [ 845.884146][T18532] bridge0: port 1(gretap0) entered forwarding state [ 846.139709][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 846.926605][T18534] team0: Unable to change to the same mode the team is in [ 846.990387][T18550] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 847.001878][T18536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.179731][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 848.219696][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 848.518498][T18579] fuse: Bad value for 'fd' [ 849.010714][T18589] : entered promiscuous mode [ 849.132504][T18593] ptrace attach of "./syz-executor exec"[18594] was attempted by "./syz-executor exec"[18593] [ 849.259677][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 849.742732][ T1206] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 849.964970][T18603] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 850.032480][ T1206] usb 1-1: Using ep0 maxpacket: 32 [ 850.048123][ T1206] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 850.140313][ T1206] usb 1-1: config 0 has no interface number 0 [ 850.256261][ T1206] usb 1-1: config 0 interface 12 has no altsetting 0 [ 850.299718][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 850.384378][ T1206] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 850.597063][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.636220][ T1206] usb 1-1: Product: syz [ 850.645381][ T1206] usb 1-1: Manufacturer: syz [ 850.650423][ T1206] usb 1-1: SerialNumber: syz [ 850.657873][ T1206] usb 1-1: config 0 descriptor?? [ 850.867727][T18619] ubi31: attaching mtd0 [ 851.090145][T18619] ubi31: scanning is finished [ 851.095734][T18619] ubi31: empty MTD device detected [ 851.189771][T18619] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 851.221131][T18619] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 851.268285][T12374] Bluetooth: hci4: command 0x0406 tx timeout [ 851.288832][T18619] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 851.339697][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 851.397669][T18619] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 851.515902][T18631] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3480'. [ 851.524931][ T30] audit: type=1400 audit(1753460721.357:3218): avc: denied { ioctl } for pid=18595 comm="syz.0.3480" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 851.525092][T18619] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 851.831909][T18630] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 851.838943][T18619] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 851.839047][T18619] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3230968588 [ 851.839145][T18619] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 851.850607][T18625] ubi31: background thread "ubi_bgt31d" started, PID 18625 [ 852.054970][ T1206] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 852.209810][ T1206] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 852.218273][ T1206] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 852.255129][ T1206] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 852.295809][ T1206] usb 1-1: USB disconnect, device number 81 [ 852.379735][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 853.355341][T18655] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 853.419667][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 853.454589][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3496'. [ 853.556243][T18615] lo speed is unknown, defaulting to 1000 [ 854.459681][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 854.859685][ T30] audit: type=1400 audit(1753460724.697:3219): avc: denied { read } for pid=18672 comm="syz.8.3501" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 854.865715][T18675] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 854.902388][T18676] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 854.949986][T17693] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 855.141146][T17693] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 855.151630][T17693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.175938][T17693] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 855.192553][T17693] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 855.213068][T17693] usb 6-1: Manufacturer: syz [ 855.252968][T17693] usb 6-1: config 0 descriptor?? [ 855.323987][T17693] rc_core: IR keymap rc-hauppauge not found [ 855.331034][T17693] Registered IR keymap rc-empty [ 855.346670][T17693] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 855.382909][ T30] audit: type=1800 audit(1753460725.217:3220): pid=18678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3503" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 855.386028][T17693] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input68 [ 855.499668][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 855.905138][T18682] rc rc0: two consecutive events of type space [ 856.112152][ T30] audit: type=1400 audit(1753460725.947:3221): avc: denied { nlmsg_read } for pid=18670 comm="syz.5.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 856.136699][T18693] netlink: 'syz.8.3506': attribute type 2 has an invalid length. [ 856.275836][T14238] usb 6-1: USB disconnect, device number 76 [ 856.539682][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 856.551341][T18694] 9pnet_fd: Insufficient options for proto=fd [ 856.867763][T18702] team0: Unable to change to the same mode the team is in [ 857.579676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 858.010448][ T30] audit: type=1400 audit(1753460727.837:3222): avc: denied { listen } for pid=18703 comm="syz.1.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 858.619709][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 859.514081][ T30] audit: type=1800 audit(1753460729.337:3223): pid=18710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3511" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 859.659669][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 859.909639][T18730] netlink: 'syz.1.3518': attribute type 2 has an invalid length. [ 859.967635][ T30] audit: type=1400 audit(1753460729.807:3224): avc: denied { setopt } for pid=18732 comm="syz.1.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 860.499321][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3523'. [ 860.699266][ T1206] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 860.707067][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 860.913354][ T1206] usb 8-1: Using ep0 maxpacket: 16 [ 860.925645][ T1206] usb 8-1: config 0 has an invalid interface number: 131 but max is 0 [ 860.938430][ T1206] usb 8-1: config 0 has an invalid descriptor of length 156, skipping remainder of the config [ 860.969226][ T1206] usb 8-1: config 0 has no interface number 0 [ 860.990465][ T1206] usb 8-1: config 0 interface 131 has no altsetting 0 [ 861.009583][ T1206] usb 8-1: New USB device found, idVendor=0040, idProduct=0000, bcdDevice= 0.00 [ 861.033422][ T1206] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 861.244746][T17696] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 861.379662][T18754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.404555][ T1206] usb 8-1: SerialNumber: syz [ 861.490636][ T1206] usb 8-1: config 0 descriptor?? [ 861.521016][T17696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.559782][T17696] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 861.581997][T17696] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 861.592145][T17696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.652119][T17696] usb 2-1: config 0 descriptor?? [ 861.709261][ T1206] usb 8-1: USB disconnect, device number 27 [ 861.739663][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 862.119004][T17696] kovaplus 0003:1E7D:2D50.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 862.136658][ T30] audit: type=1400 audit(1753460731.977:3225): avc: denied { setopt } for pid=18765 comm="syz.0.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 862.425186][T18769] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 862.446493][T18769] team0: Device macvtap1 is already an upper device of the team interface [ 862.726050][T18753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.741033][T18753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.780032][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 863.001227][T18777] netlink: 'syz.5.3531': attribute type 2 has an invalid length. [ 863.289392][ T30] audit: type=1400 audit(1753460733.127:3226): avc: denied { create } for pid=18778 comm="syz.7.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 863.791013][ T30] audit: type=1400 audit(1753460733.147:3227): avc: denied { sys_admin } for pid=18778 comm="syz.7.3532" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 863.819751][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 863.959739][ T30] audit: type=1326 audit(1753460733.247:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18779 comm="syz.8.3533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ca4f8e9a9 code=0x0 [ 864.207959][T18802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=18802 comm=syz.8.3539 [ 864.390336][T17696] kovaplus 0003:1E7D:2D50.000F: couldn't init struct kovaplus_device [ 864.419781][T14237] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 864.521332][T17696] kovaplus 0003:1E7D:2D50.000F: couldn't install mouse [ 864.584760][T17696] kovaplus 0003:1E7D:2D50.000F: probe with driver kovaplus failed with error -71 [ 864.618012][T17696] usb 2-1: USB disconnect, device number 69 [ 864.666296][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3540'. [ 864.666596][T18808] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 864.739872][T14237] usb 6-1: device descriptor read/64, error -71 [ 864.859702][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 865.000863][T14237] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 865.179922][T14237] usb 6-1: device descriptor read/64, error -71 [ 865.290122][T14237] usb usb6-port1: attempt power cycle [ 865.423107][T18821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=18821 comm=syz.1.3544 [ 865.629857][T14237] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 865.674616][T14237] usb 6-1: device descriptor read/8, error -71 [ 865.899678][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 865.988853][ T30] audit: type=1400 audit(1753460735.827:3229): avc: denied { bind } for pid=18828 comm="syz.7.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 866.008469][T14237] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 866.024002][ T30] audit: type=1400 audit(1753460735.867:3230): avc: denied { listen } for pid=18828 comm="syz.7.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 866.045247][T14237] usb 6-1: device descriptor read/8, error -71 [ 866.049740][ T30] audit: type=1400 audit(1753460735.867:3231): avc: denied { accept } for pid=18828 comm="syz.7.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 866.149788][ T5890] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 866.159907][T14237] usb usb6-port1: unable to enumerate USB device [ 866.239905][ T5966] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 866.303062][ T5890] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 866.312222][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.328162][ T5890] usb 1-1: config 0 descriptor?? [ 866.411163][ T5966] usb 2-1: config 0 has an invalid descriptor of length 244, skipping remainder of the config [ 866.422249][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 866.435304][ T5966] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 866.444526][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.461034][ T5966] usb 2-1: config 0 descriptor?? [ 866.471601][ T5966] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 866.939685][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 867.979660][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 868.471427][T18841] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 868.479839][ T1206] usb 2-1: USB disconnect, device number 70 [ 868.552455][ T30] audit: type=1326 audit(1753460738.397:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.5.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 868.898110][ T30] audit: type=1326 audit(1753460738.397:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.5.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 868.959365][ T30] audit: type=1326 audit(1753460738.397:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.5.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 868.987178][ T30] audit: type=1326 audit(1753460738.397:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.5.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 869.012240][ T1206] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 869.020142][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 869.029048][ T30] audit: type=1326 audit(1753460738.397:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.5.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 869.113615][ T5890] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 869.115777][T17693] IPVS: starting estimator thread 0... [ 869.134085][T18849] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 869.146800][ T5890] asix 1-1:0.0: probe with driver asix failed with error -71 [ 869.157897][ T30] audit: type=1326 audit(1753460738.397:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.5.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 869.199775][ T1206] usb 2-1: Using ep0 maxpacket: 32 [ 869.210345][ T5890] usb 1-1: USB disconnect, device number 82 [ 869.219850][ T1206] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 869.227855][ T1206] usb 2-1: config 0 has no interface number 0 [ 869.237747][ T1206] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 869.252923][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.262238][ T1206] usb 2-1: Product: syz [ 869.265904][T18851] IPVS: using max 44 ests per chain, 105600 per kthread [ 869.266492][ T1206] usb 2-1: Manufacturer: syz [ 869.274496][ T30] audit: type=1326 audit(1753460738.397:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.5.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 869.301799][ T30] audit: type=1326 audit(1753460738.397:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.5.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 869.309739][ T1206] usb 2-1: SerialNumber: syz [ 869.346016][ T1206] usb 2-1: config 0 descriptor?? [ 869.490565][ T1206] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 869.571679][ T1206] usb 2-1: selecting invalid altsetting 1 [ 869.602235][ T1206] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 869.700303][ T1206] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 869.700775][T18857] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.3556'. [ 869.717708][ T1206] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 869.720575][T18843] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 869.728419][ T1206] usb 2-1: media controller created [ 869.755132][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 869.976377][ T1206] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 870.059661][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 870.142660][ T1206] zl10353_read_register: readreg error (reg=127, ret==-71) [ 870.146946][ T30] audit: type=1326 audit(1753460738.397:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.5.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 870.199711][ T1206] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 870.225997][ T30] audit: type=1326 audit(1753460738.397:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.5.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 870.646967][ T1206] usb 2-1: USB disconnect, device number 71 [ 870.666293][T18865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.828781][T18878] 9pnet_fd: Insufficient options for proto=fd [ 871.099677][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 872.149657][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 872.212414][T18894] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 873.079788][ T5890] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 873.179676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 873.454794][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.477127][ T5890] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 873.487813][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.505991][ T5890] usb 2-1: Product: syz [ 873.513219][ T5890] usb 2-1: Manufacturer: syz [ 873.522224][ T5890] usb 2-1: SerialNumber: syz [ 873.538874][ T5890] usb 2-1: config 0 descriptor?? [ 873.561963][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 873.561977][ T30] audit: type=1800 audit(1753460743.397:3258): pid=18913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3570" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 873.563164][ T5890] ims_pcu 2-1:0.0: Zero length descriptor [ 873.596708][ T5890] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 873.917942][T14238] usb 2-1: USB disconnect, device number 72 [ 874.219652][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 874.273111][ T30] audit: type=1400 audit(1753460744.107:3259): avc: denied { append } for pid=18927 comm="syz.7.3576" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 874.446312][ T30] audit: type=1400 audit(1753460744.107:3260): avc: denied { ioctl } for pid=18927 comm="syz.7.3576" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 874.543189][T18939] syz2: rxe_newlink: already configured on veth0_to_bond [ 874.670118][ T30] audit: type=1326 audit(1753460744.507:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.7.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759858e9a9 code=0x7ffc0000 [ 874.764929][ T30] audit: type=1326 audit(1753460744.507:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.7.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759858e9a9 code=0x7ffc0000 [ 874.801804][ T30] audit: type=1326 audit(1753460744.507:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.7.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f759858e9a9 code=0x7ffc0000 [ 874.934365][ T30] audit: type=1326 audit(1753460744.507:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.7.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759858e9a9 code=0x7ffc0000 [ 875.259667][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 875.489568][ T30] audit: type=1326 audit(1753460744.507:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.7.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759858e9a9 code=0x7ffc0000 [ 875.519656][ T30] audit: type=1326 audit(1753460744.507:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.7.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f759858e9a9 code=0x7ffc0000 [ 875.646129][ T30] audit: type=1326 audit(1753460744.507:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18938 comm="syz.7.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759858e9a9 code=0x7ffc0000 [ 876.299649][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 877.327489][T18971] syzkaller0: entered promiscuous mode [ 877.333537][T18971] syzkaller0: entered allmulticast mode [ 877.339930][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 878.379971][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 878.946301][T12374] Bluetooth: hci1: command 0x0405 tx timeout [ 879.165419][T19001] /dev/nullb0: Can't lookup blockdev [ 879.419712][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 880.459653][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 881.107291][T19011] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 881.499688][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 882.134347][T19022] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 882.293338][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 882.293354][ T30] audit: type=1326 audit(1753460752.137:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 882.399760][ T30] audit: type=1326 audit(1753460752.137:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 882.434433][ T30] audit: type=1326 audit(1753460752.137:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 882.459301][ T30] audit: type=1326 audit(1753460752.137:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 882.515115][ T30] audit: type=1326 audit(1753460752.137:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 882.539670][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 882.628812][ T30] audit: type=1326 audit(1753460752.137:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 882.681836][ T30] audit: type=1326 audit(1753460752.137:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 882.712875][ T30] audit: type=1326 audit(1753460752.137:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 882.759168][ T30] audit: type=1326 audit(1753460752.137:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 882.783223][ T30] audit: type=1326 audit(1753460752.137:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.1.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 883.565013][T18980] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3590'. [ 883.579778][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 883.606287][T19031] FAULT_INJECTION: forcing a failure. [ 883.606287][T19031] name failslab, interval 1, probability 0, space 0, times 0 [ 883.749772][T19031] CPU: 0 UID: 0 PID: 19031 Comm: syz.0.3603 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 883.749796][T19031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 883.749807][T19031] Call Trace: [ 883.749813][T19031] [ 883.749820][T19031] dump_stack_lvl+0x16c/0x1f0 [ 883.749852][T19031] should_fail_ex+0x512/0x640 [ 883.749879][T19031] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 883.749905][T19031] should_failslab+0xc2/0x120 [ 883.749923][T19031] __kmalloc_cache_noprof+0x6a/0x3e0 [ 883.749947][T19031] ? shrinker_alloc+0xf5/0xbf0 [ 883.749977][T19031] shrinker_alloc+0xf5/0xbf0 [ 883.750005][T19031] ? mark_held_locks+0x49/0x80 [ 883.750032][T19031] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 883.750062][T19031] ? __pfx_shrinker_alloc+0x10/0x10 [ 883.750093][T19031] ? lockdep_init_map_type+0x5c/0x280 [ 883.750110][T19031] ? __raw_spin_lock_init+0x3a/0x110 [ 883.750129][T19031] ? __init_rwsem+0x12d/0x1b0 [ 883.750156][T19031] alloc_super+0x7c8/0xbd0 [ 883.750184][T19031] ? __pfx_super_s_dev_test+0x10/0x10 [ 883.750205][T19031] sget_fc+0x116/0xc20 [ 883.750230][T19031] ? __pfx_super_s_dev_set+0x10/0x10 [ 883.750254][T19031] get_tree_bdev_flags+0x1ba/0x620 [ 883.750276][T19031] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 883.750299][T19031] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 883.750325][T19031] ? cap_capable+0xb3/0x250 [ 883.750353][T19031] cramfs_get_tree+0x40/0x50 [ 883.750372][T19031] vfs_get_tree+0x8b/0x340 [ 883.750393][T19031] path_mount+0x1414/0x2020 [ 883.750414][T19031] ? kmem_cache_free+0x2d1/0x4d0 [ 883.750438][T19031] ? __pfx_path_mount+0x10/0x10 [ 883.750460][T19031] ? putname+0x154/0x1a0 [ 883.750482][T19031] __x64_sys_mount+0x28d/0x310 [ 883.750502][T19031] ? __pfx___x64_sys_mount+0x10/0x10 [ 883.750529][T19031] do_syscall_64+0xcd/0x4c0 [ 883.750549][T19031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.750566][T19031] RIP: 0033:0x7f1079d8e9a9 [ 883.750581][T19031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.750597][T19031] RSP: 002b:00007f107ab67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 883.750613][T19031] RAX: ffffffffffffffda RBX: 00007f1079fb5fa0 RCX: 00007f1079d8e9a9 [ 883.750625][T19031] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000140 [ 883.750636][T19031] RBP: 00007f107ab67090 R08: 0000000000000000 R09: 0000000000000000 [ 883.750646][T19031] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000002 [ 883.750656][T19031] R13: 0000000000000000 R14: 00007f1079fb5fa0 R15: 00007ffdcc2fba68 [ 883.750680][T19031] [ 884.057404][T19044] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 884.468989][T19056] netlink: 'syz.1.3608': attribute type 2 has an invalid length. [ 884.619651][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 885.029980][ T1206] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 885.248226][T19067] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3613'. [ 885.659724][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 885.735691][ T1206] usb 2-1: device descriptor read/64, error -71 [ 885.764446][T19073] netlink: 'syz.0.3615': attribute type 4 has an invalid length. [ 886.054840][ T1206] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 886.285147][T19074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.302234][ T1206] usb 2-1: device descriptor read/64, error -71 [ 886.420079][ T1206] usb usb2-port1: attempt power cycle [ 886.496159][T19078] syzkaller0: entered promiscuous mode [ 886.509036][T19078] syzkaller0: entered allmulticast mode [ 886.701538][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 886.789901][ T1206] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 886.822223][ T1206] usb 2-1: device descriptor read/8, error -71 [ 887.061156][ T1206] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 887.102556][ T1206] usb 2-1: device descriptor read/8, error -71 [ 887.219744][ T5966] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 887.303243][ T1206] usb usb2-port1: unable to enumerate USB device [ 887.739675][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 887.778962][ T5966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.833919][ T5966] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 887.859118][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.859213][T19095] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 887.867607][ T5966] usb 1-1: Product: syz [ 887.878722][ T5966] usb 1-1: Manufacturer: syz [ 887.888318][ T5966] usb 1-1: SerialNumber: syz [ 887.919801][ T5966] usb 1-1: config 0 descriptor?? [ 887.927844][ T5966] ims_pcu 1-1:0.0: Zero length descriptor [ 887.944057][ T5966] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 888.177091][ T1206] usb 1-1: USB disconnect, device number 83 [ 888.779657][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 889.009183][T19109] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 889.702178][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3628'. [ 889.819686][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 890.670002][T19131] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 890.787126][T19120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.839031][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 890.839043][ T30] audit: type=1326 audit(1753460760.677:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19130 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 890.859654][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 890.913466][ T30] audit: type=1326 audit(1753460760.707:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19130 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 890.938864][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3628'. [ 891.020165][ T30] audit: type=1326 audit(1753460760.707:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19130 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 891.046571][ T30] audit: type=1326 audit(1753460760.707:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19130 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 891.083092][ T30] audit: type=1326 audit(1753460760.707:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19130 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 891.112225][ T30] audit: type=1326 audit(1753460760.707:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19130 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 891.229826][ T30] audit: type=1326 audit(1753460760.707:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19130 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 891.253647][ T30] audit: type=1326 audit(1753460760.707:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19130 comm="syz.1.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe477d8e9a9 code=0x7ffc0000 [ 891.899692][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 892.078401][T19145] IPv6: addrconf: prefix option has invalid lifetime [ 892.626142][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3637'. [ 892.906672][T14237] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 892.939653][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 893.171189][T19157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.249674][T10775] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 893.271178][T14237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.338406][T14237] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 893.352617][T14237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.361550][T14237] usb 2-1: Product: syz [ 893.365912][T14237] usb 2-1: Manufacturer: syz [ 893.822239][T14237] usb 2-1: SerialNumber: syz [ 893.829440][T14237] usb 2-1: config 0 descriptor?? [ 893.841874][T14237] ims_pcu 2-1:0.0: Zero length descriptor [ 893.847680][T14237] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 893.900203][T10775] usb 1-1: no configurations [ 893.904802][T10775] usb 1-1: can't read configurations, error -22 [ 893.979821][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 894.039996][T10775] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 894.058288][T17693] usb 2-1: USB disconnect, device number 77 [ 894.223932][T10775] usb 1-1: no configurations [ 894.240611][T10775] usb 1-1: can't read configurations, error -22 [ 894.330792][T10775] usb usb1-port1: attempt power cycle [ 894.700445][T10775] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 894.788210][T10775] usb 1-1: no configurations [ 894.962189][T10775] usb 1-1: can't read configurations, error -22 [ 895.019668][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 895.237498][T19183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=19183 comm=syz.1.3645 [ 895.434179][T10775] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 895.460825][T10775] usb 1-1: no configurations [ 895.469087][T10775] usb 1-1: can't read configurations, error -22 [ 895.521634][T10775] usb usb1-port1: unable to enumerate USB device [ 895.652976][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3646'. [ 896.059672][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 897.099673][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 898.139666][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 898.164105][T19225] FAULT_INJECTION: forcing a failure. [ 898.164105][T19225] name failslab, interval 1, probability 0, space 0, times 0 [ 898.176731][T19225] CPU: 0 UID: 0 PID: 19225 Comm: syz.8.3654 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 898.176756][T19225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 898.176767][T19225] Call Trace: [ 898.176773][T19225] [ 898.176781][T19225] dump_stack_lvl+0x16c/0x1f0 [ 898.176815][T19225] should_fail_ex+0x512/0x640 [ 898.176841][T19225] ? fs_reclaim_acquire+0xae/0x150 [ 898.176866][T19225] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 898.176884][T19225] should_failslab+0xc2/0x120 [ 898.176902][T19225] __kmalloc_noprof+0xd2/0x510 [ 898.176943][T19225] tomoyo_realpath_from_path+0xc2/0x6e0 [ 898.176964][T19225] ? tomoyo_profile+0x47/0x60 [ 898.176987][T19225] tomoyo_path_number_perm+0x245/0x580 [ 898.177011][T19225] ? tomoyo_path_number_perm+0x237/0x580 [ 898.177044][T19225] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 898.177071][T19225] ? find_held_lock+0x2b/0x80 [ 898.177117][T19225] ? find_held_lock+0x2b/0x80 [ 898.177138][T19225] ? hook_file_ioctl_common+0x145/0x410 [ 898.177166][T19225] ? __fget_files+0x20e/0x3c0 [ 898.177188][T19225] security_file_ioctl+0x9b/0x240 [ 898.177207][T19225] __x64_sys_ioctl+0xb7/0x210 [ 898.177234][T19225] do_syscall_64+0xcd/0x4c0 [ 898.177254][T19225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.177272][T19225] RIP: 0033:0x7f9ca4f8e9a9 [ 898.177287][T19225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.177304][T19225] RSP: 002b:00007f9ca2dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.177321][T19225] RAX: ffffffffffffffda RBX: 00007f9ca51b6160 RCX: 00007f9ca4f8e9a9 [ 898.177333][T19225] RDX: 0000200000000240 RSI: 0000000000003b86 RDI: 0000000000000005 [ 898.177343][T19225] RBP: 00007f9ca2dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 898.177354][T19225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.177364][T19225] R13: 0000000000000000 R14: 00007f9ca51b6160 R15: 00007ffd4cf809b8 [ 898.177389][T19225] [ 898.177396][T19225] ERROR: Out of memory at tomoyo_realpath_from_path. [ 898.859731][T14237] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 899.019747][T14237] usb 2-1: Using ep0 maxpacket: 32 [ 899.030814][T14237] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.049730][T14237] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 899.063040][T14237] usb 2-1: config 0 interface 0 has no altsetting 0 [ 899.069890][T14237] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 899.079676][T14237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.099756][T14237] usb 2-1: config 0 descriptor?? [ 899.179652][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 899.509762][T14237] usbhid 2-1:0.0: can't add hid device: -71 [ 899.960563][T14237] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 900.003461][T14237] usb 2-1: USB disconnect, device number 78 [ 900.219677][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 901.001672][T19248] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3661'. [ 901.094735][T19249] overlayfs: failed to resolve './file0': -2 [ 901.259660][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 901.522033][T19252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.621355][T19260] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 902.299669][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 902.345764][T19272] sctp: [Deprecated]: syz.7.3668 (pid 19272) Use of int in max_burst socket option deprecated. [ 902.345764][T19272] Use struct sctp_assoc_value instead [ 902.418723][T19276] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 902.470930][T19276] CIFS mount error: No usable UNC path provided in device string! [ 902.470930][T19276] [ 902.500801][T19276] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 902.882673][T14237] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 902.921671][ T30] audit: type=1326 audit(1753460772.767:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.5.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 902.997565][T19285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 903.349647][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 903.358055][T19289] xt_hashlimit: max too large, truncated to 1048576 [ 903.366126][T19289] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 903.394596][ T30] audit: type=1326 audit(1753460772.767:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.5.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 903.418387][ T30] audit: type=1326 audit(1753460772.767:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.5.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 903.443630][ T30] audit: type=1326 audit(1753460772.767:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.5.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 903.467313][ T30] audit: type=1326 audit(1753460772.767:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.5.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 903.492494][T14237] usb 8-1: unable to get BOS descriptor or descriptor too short [ 903.503087][T14237] usb 8-1: config 7 has an invalid interface descriptor of length 8, skipping [ 903.515127][ T30] audit: type=1326 audit(1753460772.767:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.5.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 903.561017][T14237] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 903.613419][T14237] usb 8-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 903.688662][T19296] Cannot find add_set index 0 as target [ 903.719558][T19296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 904.251021][ T30] audit: type=1326 audit(1753460772.767:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.5.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 904.274888][ T30] audit: type=1326 audit(1753460772.767:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.5.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 904.298955][ T30] audit: type=1326 audit(1753460772.797:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.5.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f214c78d310 code=0x7ffc0000 [ 904.323205][ T30] audit: type=1326 audit(1753460772.797:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19280 comm="syz.5.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214c78e9a9 code=0x7ffc0000 [ 904.348207][T14237] usb 8-1: string descriptor 0 read error: -22 [ 904.369788][T14237] usb 8-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 904.381129][T14237] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.389685][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 904.998780][ T1206] usb 8-1: USB disconnect, device number 28 [ 905.285891][T19312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=19312 comm=syz.1.3681 [ 905.419668][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 905.659681][T17693] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 905.809670][T17693] usb 6-1: Using ep0 maxpacket: 16 [ 905.831331][T17693] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 905.841884][T17693] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 905.858050][T17693] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 905.869721][T17693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.878693][T17693] usb 6-1: Product: syz [ 905.882990][T17693] usb 6-1: Manufacturer: syz [ 905.887580][T17693] usb 6-1: SerialNumber: syz [ 905.913202][T17693] usb 6-1: config 0 descriptor?? [ 905.929736][T14237] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 906.215432][T19323] ptrace attach of "./syz-executor exec"[19327] was attempted by "./syz-executor exec"[19323] [ 906.261284][T19320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.322904][T19331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19331 comm=syz.8.3689 [ 906.446444][T14237] usb 2-1: config 0 has an invalid descriptor of length 244, skipping remainder of the config [ 906.459939][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 906.467879][T14237] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 906.480859][T14237] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 906.961767][T14237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.989470][T14237] usb 2-1: config 0 descriptor?? [ 907.015917][ T1206] usb 6-1: USB disconnect, device number 81 [ 907.337538][T14237] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 907.499741][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 907.582428][T12374] Bluetooth: hci2: command 0x0406 tx timeout [ 907.834583][T19353] lo speed is unknown, defaulting to 1000 [ 908.172724][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 908.172746][ T30] audit: type=1400 audit(1753460777.957:3371): avc: denied { create } for pid=19355 comm="syz.7.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 908.539741][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 909.579647][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 909.603258][T17693] usb 2-1: USB disconnect, device number 79 [ 909.606759][ T30] audit: type=1400 audit(1753460779.427:3372): avc: denied { unmount } for pid=17922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 909.639659][ T1206] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 909.710599][ T30] audit: type=1400 audit(1753460779.527:3373): avc: denied { read write } for pid=19355 comm="syz.7.3696" dev="sockfs" ino=66184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 909.812228][ T30] audit: type=1400 audit(1753460779.537:3374): avc: denied { read write } for pid=19355 comm="syz.7.3696" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 909.840564][ T30] audit: type=1400 audit(1753460779.537:3375): avc: denied { open } for pid=19355 comm="syz.7.3696" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 909.909426][ T30] audit: type=1400 audit(1753460779.537:3376): avc: denied { allowed } for pid=19355 comm="syz.7.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 909.969791][ T1206] usb 6-1: unable to get BOS descriptor or descriptor too short [ 909.979128][ T1206] usb 6-1: config 7 has an invalid interface descriptor of length 8, skipping [ 910.003100][ T1206] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 910.016871][T19364] ptrace attach of "./syz-executor exec"[19365] was attempted by "./syz-executor exec"[19364] [ 910.037398][ T30] audit: type=1400 audit(1753460779.537:3377): avc: denied { create } for pid=19355 comm="syz.7.3696" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 910.085393][T19367] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 910.087023][ T1206] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 910.229254][T19371] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 910.534743][ T30] audit: type=1400 audit(1753460779.537:3378): avc: denied { map } for pid=19355 comm="syz.7.3696" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 910.591955][ T1206] usb 6-1: string descriptor 0 read error: -71 [ 910.599018][ T1206] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 910.608123][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.620166][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 910.649402][ T30] audit: type=1400 audit(1753460779.537:3379): avc: denied { read write } for pid=19355 comm="syz.7.3696" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 910.904320][ T30] audit: type=1400 audit(1753460779.687:3380): avc: denied { read append } for pid=19359 comm="syz.8.3697" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 910.928354][T19376] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 911.012469][ T1206] usb 6-1: can't set config #7, error -71 [ 911.027671][ T1206] usb 6-1: USB disconnect, device number 82 [ 911.071532][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3704'. [ 911.184668][T19383] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 911.205480][T19383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 911.495955][T19399] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 911.527991][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3703'. [ 911.659793][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 911.670395][T19403] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3707'. [ 912.181121][T19411] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 912.195951][T19383] tipc: Enabling of bearer rejected, failed to enable media [ 913.159658][ T5890] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 913.310633][ T5890] usb 8-1: Invalid ep0 maxpacket: 64 [ 913.424671][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 913.424685][ T30] audit: type=1400 audit(1753460783.267:3414): avc: denied { create } for pid=19427 comm="syz.5.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 913.959933][ T30] audit: type=1400 audit(1753460783.507:3415): avc: denied { map_read map_write } for pid=19425 comm="syz.0.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 914.327562][ T30] audit: type=1400 audit(1753460783.517:3416): avc: denied { create } for pid=19425 comm="syz.0.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 914.339698][ T5890] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 914.349632][ T30] audit: type=1400 audit(1753460783.517:3417): avc: denied { bind } for pid=19425 comm="syz.0.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 914.398862][ T30] audit: type=1400 audit(1753460783.517:3418): avc: denied { write } for pid=19425 comm="syz.0.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 914.496830][T19439] block nbd5: NBD_DISCONNECT [ 914.505016][T19439] block nbd5: Send disconnect failed -22 [ 914.660430][T19427] block nbd5: Disconnected due to user request. [ 914.666862][T19427] block nbd5: shutting down sockets [ 914.776816][ T30] audit: type=1400 audit(1753460784.347:3419): avc: denied { write } for pid=19427 comm="syz.5.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 914.779668][ C1] net_ratelimit: 3 callbacks suppressed [ 914.779681][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 914.919684][ T5890] usb 8-1: Invalid ep0 maxpacket: 64 [ 914.926148][ T5890] usb usb8-port1: attempt power cycle [ 915.289930][ T5890] usb 8-1: new low-speed USB device number 31 using dummy_hcd [ 915.418018][ T5890] usb 8-1: Invalid ep0 maxpacket: 64 [ 915.425728][ T30] audit: type=1400 audit(1753460785.177:3420): avc: denied { accept } for pid=19447 comm="syz.5.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 915.547127][ T30] audit: type=1400 audit(1753460785.177:3421): avc: denied { write } for pid=19447 comm="syz.5.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 915.691300][ T5890] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 915.691386][ T30] audit: type=1400 audit(1753460785.177:3422): avc: denied { read } for pid=19447 comm="syz.5.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 915.719045][ T30] audit: type=1400 audit(1753460785.237:3423): avc: denied { create } for pid=19447 comm="syz.5.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 915.733012][ T5890] usb 8-1: Invalid ep0 maxpacket: 64 [ 915.764511][ T5890] usb usb8-port1: unable to enumerate USB device [ 915.772219][T19455] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 915.819643][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 915.885560][T19455] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 916.149805][ T5890] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 916.504400][ T5890] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 916.523860][ T5890] usb 6-1: config 0 has no interface number 0 [ 916.678220][ T5890] usb 6-1: New USB device found, idVendor=0b63, idProduct=653a, bcdDevice=c5.a3 [ 916.758500][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.835782][ T5890] usb 6-1: Product: syz [ 916.859663][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 916.883724][ T5890] usb 6-1: Manufacturer: syz [ 916.910849][ T5890] usb 6-1: SerialNumber: syz [ 916.993154][ T5890] usb 6-1: config 0 descriptor?? [ 917.025222][T19475] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.033376][T19475] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.043633][T19475] bridge0: entered allmulticast mode [ 917.127335][T19475] bridge_slave_1: left allmulticast mode [ 917.133425][T19475] bridge_slave_1: left promiscuous mode [ 917.140542][T19475] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.157919][T19475] bridge_slave_0: left allmulticast mode [ 917.164729][T19475] bridge_slave_0: left promiscuous mode [ 917.175062][T19475] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.205939][T19474] netlink: 'syz.1.3727': attribute type 2 has an invalid length. [ 917.251306][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 917.258622][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 917.266353][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 917.273695][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 917.281078][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 917.289425][ T5890] pl2303 6-1:0.32: required endpoints missing [ 917.302612][ T5890] usb 6-1: USB disconnect, device number 83 [ 917.899656][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 918.474134][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 918.474148][ T30] audit: type=1400 audit(1753460788.317:3438): avc: denied { setopt } for pid=19479 comm="syz.7.3729" laddr=::ffff:172.20.20.20 lport=20001 faddr=::ffff:172.20.20.20 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 918.545860][T19492] netlink: 'syz.5.3731': attribute type 2 has an invalid length. [ 918.655171][T19497] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 918.778098][ T30] audit: type=1400 audit(1753460788.617:3439): avc: denied { execute } for pid=19503 comm="syz.5.3735" path="/dev/nullb0" dev="devtmpfs" ino=3602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 918.908396][ T30] audit: type=1800 audit(1753460788.617:3440): pid=19504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3735" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 918.939661][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 919.109734][ T30] audit: type=1800 audit(1753460788.937:3441): pid=19507 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3734" name="nullb0" dev="devtmpfs" ino=3602 res=0 errno=0 [ 919.139671][T14238] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 919.293208][T14238] usb 6-1: unable to get BOS descriptor or descriptor too short [ 919.306479][T14238] usb 6-1: config 7 has an invalid interface descriptor of length 8, skipping [ 919.326521][T14238] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 919.339733][T14238] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 919.359841][T14238] usb 6-1: string descriptor 0 read error: -22 [ 919.370504][T14238] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 919.453499][T14238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.472601][T17127] Bluetooth: hci1: Malformed LE Event: 0x02 [ 919.479280][ T30] audit: type=1400 audit(1753460789.317:3442): avc: denied { write } for pid=19510 comm="syz.8.3737" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 919.979657][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 920.031401][ T30] audit: type=1400 audit(1753460789.427:3443): avc: denied { open } for pid=19510 comm="syz.8.3737" path="/dev/ptyr5" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 920.104596][ T30] audit: type=1400 audit(1753460789.657:3444): avc: denied { ioctl } for pid=19510 comm="syz.8.3737" path="/dev/ttyr5" dev="devtmpfs" ino=396 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 920.140615][T19515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=19515 comm=syz.0.3738 [ 920.159795][ T30] audit: type=1400 audit(1753460789.867:3445): avc: denied { create } for pid=19514 comm="syz.0.3738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 920.179968][ T30] audit: type=1400 audit(1753460789.917:3446): avc: denied { create } for pid=19514 comm="syz.0.3738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 920.199842][ T30] audit: type=1400 audit(1753460789.977:3447): avc: denied { map } for pid=19514 comm="syz.0.3738" path="socket:[67730]" dev="sockfs" ino=67730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 920.321504][ T5890] usb 6-1: USB disconnect, device number 84 [ 920.533436][T19528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=19528 comm=syz.1.3743 [ 921.019664][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 921.141955][ T1206] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 921.553214][ T1206] usb 1-1: config 0 has an invalid descriptor of length 244, skipping remainder of the config [ 921.889780][ T1206] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 921.966168][ T1206] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 921.975388][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.986549][ T1206] usb 1-1: config 0 descriptor?? [ 922.059641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 922.117265][ T1206] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 922.239753][ T5890] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 922.431061][ T5890] usb 2-1: config 0 has an invalid descriptor of length 244, skipping remainder of the config [ 922.449671][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 922.490395][ T5890] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 922.500244][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.519479][ T5890] usb 2-1: config 0 descriptor?? [ 922.537782][ T5890] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 922.658355][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3748'. [ 922.719699][T19552] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 923.099655][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 923.377736][T19549] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 923.436179][T14238] usb 1-1: USB disconnect, device number 88 [ 923.806165][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3751'. [ 923.887055][ T5966] usb 2-1: USB disconnect, device number 80 [ 924.082628][T19570] netlink: 'syz.1.3754': attribute type 2 has an invalid length. [ 924.149639][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 924.771080][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 924.771093][ T30] audit: type=1400 audit(1753460794.337:3459): avc: denied { ioctl } for pid=19576 comm="syz.8.3756" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=68676 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 924.814510][T19578] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3756'. [ 924.988878][T19581] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3756'. [ 925.179657][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 925.362235][ T30] audit: type=1400 audit(1753460794.827:3460): avc: denied { wake_alarm } for pid=19576 comm="syz.8.3756" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 925.452605][ T30] audit: type=1400 audit(1753460794.847:3461): avc: denied { create } for pid=19576 comm="syz.8.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 925.472594][ T30] audit: type=1400 audit(1753460794.847:3462): avc: denied { setopt } for pid=19576 comm="syz.8.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 925.492393][ T30] audit: type=1400 audit(1753460795.197:3463): avc: denied { create } for pid=19562 comm="syz.0.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 926.219646][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 926.665495][ T30] audit: type=1400 audit(1753460795.197:3464): avc: denied { write } for pid=19562 comm="syz.0.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 926.762421][ T30] audit: type=1400 audit(1753460795.647:3465): avc: denied { read } for pid=19588 comm="syz.1.3760" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 926.862911][ T30] audit: type=1400 audit(1753460796.547:3466): avc: denied { read write } for pid=19576 comm="syz.8.3756" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 927.259676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 927.266707][ T30] audit: type=1400 audit(1753460796.547:3467): avc: denied { open } for pid=19576 comm="syz.8.3756" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 927.356086][ T30] audit: type=1400 audit(1753460796.697:3468): avc: denied { setopt } for pid=19595 comm="syz.7.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 927.452392][T19605] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 927.614006][T19608] input: syz1 as /devices/virtual/input/input71 [ 928.299738][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 928.585959][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3769'. [ 929.076012][T19625] netlink: 'syz.1.3771': attribute type 12 has an invalid length. [ 929.339682][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 929.573854][T19635] binder: 19631:19635 ioctl 4018620d 0 returned -22 [ 929.592874][T19635] binder: 19631:19635 ioctl c0306201 0 returned -14 [ 929.613116][T19635] binder: 19631:19635 ioctl c0306201 0 returned -14 [ 929.981582][T19636] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 930.044713][T19640] netlink: 'syz.5.3774': attribute type 21 has an invalid length. [ 930.115586][T19636] batman_adv: batadv0: Removing interface: ipvlan2 [ 930.136491][T19638] team0: Unable to change to the same mode the team is in [ 930.144164][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3774'. [ 930.379672][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 931.116646][T19645] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 931.419655][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 932.267112][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 932.267127][ T30] audit: type=1400 audit(1753460802.107:3482): avc: denied { ioctl } for pid=19657 comm="syz.7.3778" path="socket:[68974]" dev="sockfs" ino=68974 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 932.459663][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 932.509905][T19657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.686811][T19672] binder: 19667:19672 ioctl 4018620d 0 returned -22 [ 932.884733][ T30] audit: type=1400 audit(1753460802.517:3483): avc: denied { write } for pid=19667 comm="syz.8.3782" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 933.123631][T19676] netlink: 'syz.5.3784': attribute type 2 has an invalid length. [ 933.499673][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 933.514896][ T30] audit: type=1400 audit(1753460803.267:3484): avc: denied { bind } for pid=19684 comm="syz.7.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 933.545477][ T30] audit: type=1400 audit(1753460803.267:3485): avc: denied { mount } for pid=19684 comm="syz.7.3786" name="/" dev="autofs" ino=69025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 934.115860][ T30] audit: type=1400 audit(1753460803.277:3486): avc: denied { listen } for pid=19684 comm="syz.7.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 934.189377][ T30] audit: type=1400 audit(1753460803.277:3487): avc: denied { create } for pid=19684 comm="syz.7.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 934.209826][T19678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.352029][ T30] audit: type=1400 audit(1753460804.147:3488): avc: denied { unmount } for pid=15495 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 934.539694][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 934.621220][T19696] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3788'. [ 934.653248][T19696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3788'. [ 935.469747][ T30] audit: type=1400 audit(1753460805.227:3489): avc: denied { ioctl } for pid=19699 comm="syz.5.3791" path="socket:[69182]" dev="sockfs" ino=69182 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 935.579761][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 935.604515][T19708] team0: Unable to change to the same mode the team is in [ 936.590065][ T30] audit: type=1400 audit(1753460805.227:3490): avc: denied { write } for pid=19699 comm="syz.5.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 936.619723][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 937.413686][T19718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.659717][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 938.633600][T19743] team0: Unable to change to the same mode the team is in [ 938.699719][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 939.578521][ T30] audit: type=1400 audit(1753460809.417:3491): avc: denied { connect } for pid=19746 comm="syz.7.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 939.682085][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3804'. [ 939.739790][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 939.809354][ T30] audit: type=1400 audit(1753460809.447:3492): avc: denied { write } for pid=19746 comm="syz.7.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 939.871985][T19757] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 940.779714][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 941.819758][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 942.859637][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 942.910856][T19782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.923626][ T30] audit: type=1400 audit(1753460812.767:3493): avc: denied { bind } for pid=19780 comm="syz.8.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 943.623469][ T30] audit: type=1400 audit(1753460813.327:3494): avc: denied { write } for pid=19768 comm="syz.1.3812" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 943.661126][ T30] audit: type=1400 audit(1753460813.327:3495): avc: denied { open } for pid=19768 comm="syz.1.3812" path="/dev/sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 943.899721][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 944.423110][ T30] audit: type=1400 audit(1753460813.707:3496): avc: denied { bind } for pid=19797 comm="syz.0.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 944.462942][ T30] audit: type=1400 audit(1753460813.707:3497): avc: denied { listen } for pid=19797 comm="syz.0.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 944.567260][ T30] audit: type=1400 audit(1753460813.707:3498): avc: denied { write } for pid=19797 comm="syz.0.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 944.706003][ T30] audit: type=1400 audit(1753460813.787:3499): avc: denied { accept } for pid=19797 comm="syz.0.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 944.739655][ T30] audit: type=1400 audit(1753460814.267:3500): avc: denied { ioctl } for pid=19803 comm="syz.7.3821" path="socket:[68437]" dev="sockfs" ino=68437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 944.939632][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 945.296244][T19818] lo speed is unknown, defaulting to 1000 [ 945.389762][T19815] syz_tun: entered allmulticast mode [ 945.464172][ T30] audit: type=1400 audit(1753460814.297:3501): avc: denied { bind } for pid=19803 comm="syz.7.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 945.497265][ T30] audit: type=1400 audit(1753460814.597:3502): avc: denied { write } for pid=19811 comm="syz.0.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 945.517697][ T30] audit: type=1400 audit(1753460814.677:3503): avc: denied { create } for pid=19812 comm="syz.8.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 945.540270][ T30] audit: type=1400 audit(1753460814.697:3504): avc: denied { mount } for pid=19812 comm="syz.8.3823" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 945.562811][ T30] audit: type=1400 audit(1753460814.777:3505): avc: denied { connect } for pid=19812 comm="syz.8.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 945.566484][T19812] syz_tun: left allmulticast mode [ 945.677864][ T30] audit: type=1400 audit(1753460815.517:3506): avc: denied { unmount } for pid=17922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 945.979654][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 946.160320][T19823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.347138][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3826'. [ 947.019649][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 947.348046][T19838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.556059][T19849] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 947.619606][ T30] audit: type=1400 audit(1753460817.447:3507): avc: denied { write } for pid=19833 comm="syz.5.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 947.790324][T19853] Cannot find del_set index 514 as target [ 948.015002][ T30] audit: type=1400 audit(1753460817.517:3508): avc: denied { create } for pid=19851 comm="syz.0.3833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 948.059699][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 948.532997][T19858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=19858 comm=syz.7.3835 [ 948.562117][T19856] netlink: 'syz.5.3834': attribute type 1 has an invalid length. [ 948.570130][T19856] netlink: 'syz.5.3834': attribute type 2 has an invalid length. [ 948.578116][T19856] netlink: 'syz.5.3834': attribute type 1 has an invalid length. [ 949.099640][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 949.233679][T19864] ------------[ cut here ]------------ [ 949.239145][T19864] WARNING: CPU: 1 PID: 19864 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 949.243832][T19870] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3840'. [ 949.249418][T19864] Modules linked in: [ 949.262490][T19864] CPU: 1 UID: 0 PID: 19864 Comm: syz.0.3837 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 949.274616][T19864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 949.284747][T19864] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 949.291515][T19864] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 949.311509][T19864] RSP: 0018:ffffc9000bc874f8 EFLAGS: 00010246 [ 949.317728][T19864] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 949.325827][T19864] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040dc0 [ 949.333819][T19864] RBP: 0000000200000000 R08: 0000000000000005 R09: 0000000000000000 [ 949.341823][T19864] R10: 0000000040000000 R11: 0000000000000001 R12: 0000000000000015 [ 949.349798][T19864] R13: 1ffff92001790eb4 R14: 0000000200000000 R15: 0000000000000015 [ 949.357753][T19864] FS: 00007f107ab676c0(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 949.366680][T19864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.373263][T19864] CR2: 000000110c2e1911 CR3: 000000003ed95000 CR4: 00000000003526f0 [ 949.381232][T19864] Call Trace: [ 949.384484][T19864] [ 949.387422][T19864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 949.393806][T19864] ? rcu_is_watching+0x12/0xc0 [ 949.398685][T19864] ? trace_kmem_cache_alloc+0x28/0xc0 [ 949.404170][T19864] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 949.409828][T19864] ? hashtab_init+0x1b1/0x290 [ 949.414483][T19864] __alloc_pages_noprof+0xb/0x1b0 [ 949.419494][T19864] ___kmalloc_large_node+0x84/0x1e0 [ 949.424716][T19864] ? hashtab_init+0x1b1/0x290 [ 949.429372][T19864] __kmalloc_large_node_noprof+0x1c/0x70 [ 949.435005][T19864] ? __pfx_ebitmap_read+0x10/0x10 [ 949.440029][T19864] __kmalloc_noprof.cold+0xc/0x61 [ 949.445036][T19864] hashtab_init+0x1b1/0x290 [ 949.449516][T19864] ? __asan_memcpy+0x3c/0x60 [ 949.454127][T19864] policydb_read+0x7b4/0x3220 [ 949.458788][T19864] ? __pfx_policydb_read+0x10/0x10 [ 949.463917][T19864] security_load_policy+0x15c/0x12c0 [ 949.469190][T19864] ? __pfx_security_load_policy+0x10/0x10 [ 949.474909][T19864] ? find_held_lock+0x2b/0x80 [ 949.479563][T19864] ? __might_fault+0xe3/0x190 [ 949.484304][T19864] ? __might_fault+0xe3/0x190 [ 949.489009][T19864] ? __might_fault+0x13b/0x190 [ 949.493839][T19864] sel_write_load+0x332/0x1bd0 [ 949.498623][T19864] ? __lock_acquire+0xb8a/0x1c90 [ 949.503899][T19864] ? __pfx_sel_write_load+0x10/0x10 [ 949.509293][T19864] ? __pfx_sel_write_load+0x10/0x10 [ 949.514552][T19864] vfs_write+0x2a0/0x1150 [ 949.518898][T19864] ? __pfx___mutex_lock+0x10/0x10 [ 949.523914][T19864] ? __pfx_vfs_write+0x10/0x10 [ 949.528664][T19864] ? __fget_files+0x20e/0x3c0 [ 949.533349][T19864] ksys_write+0x12a/0x250 [ 949.537670][T19864] ? __pfx_ksys_write+0x10/0x10 [ 949.542529][T19864] do_syscall_64+0xcd/0x4c0 [ 949.547008][T19864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.552901][T19864] RIP: 0033:0x7f1079d8e9a9 [ 949.557289][T19864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.576900][T19864] RSP: 002b:00007f107ab67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 949.585319][T19864] RAX: ffffffffffffffda RBX: 00007f1079fb5fa0 RCX: 00007f1079d8e9a9 [ 949.593291][T19864] RDX: 000000000000ffbd RSI: 0000200000000000 RDI: 0000000000000006 [ 949.601257][T19864] RBP: 00007f1079e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 949.609342][T19864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.617402][T19864] R13: 0000000000000000 R14: 00007f1079fb5fa0 R15: 00007ffdcc2fba68 [ 949.625391][T19864] [ 949.628387][T19864] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 949.635637][T19864] CPU: 1 UID: 0 PID: 19864 Comm: syz.0.3837 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 949.647668][T19864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 949.657700][T19864] Call Trace: [ 949.660952][T19864] [ 949.663860][T19864] dump_stack_lvl+0x3d/0x1f0 [ 949.668430][T19864] panic+0x71c/0x800 [ 949.672303][T19864] ? __pfx_panic+0x10/0x10 [ 949.676699][T19864] ? show_trace_log_lvl+0x29b/0x3e0 [ 949.681884][T19864] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 949.687930][T19864] check_panic_on_warn+0xab/0xb0 [ 949.692847][T19864] __warn+0xf6/0x3c0 [ 949.696716][T19864] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 949.702761][T19864] report_bug+0x3c3/0x580 [ 949.707070][T19864] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 949.713116][T19864] handle_bug+0x184/0x210 [ 949.717432][T19864] exc_invalid_op+0x17/0x50 [ 949.721917][T19864] asm_exc_invalid_op+0x1a/0x20 [ 949.726739][T19864] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 949.733401][T19864] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 949.752989][T19864] RSP: 0018:ffffc9000bc874f8 EFLAGS: 00010246 [ 949.759028][T19864] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 949.766971][T19864] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040dc0 [ 949.774914][T19864] RBP: 0000000200000000 R08: 0000000000000005 R09: 0000000000000000 [ 949.782860][T19864] R10: 0000000040000000 R11: 0000000000000001 R12: 0000000000000015 [ 949.790804][T19864] R13: 1ffff92001790eb4 R14: 0000000200000000 R15: 0000000000000015 [ 949.798773][T19864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 949.805088][T19864] ? rcu_is_watching+0x12/0xc0 [ 949.809832][T19864] ? trace_kmem_cache_alloc+0x28/0xc0 [ 949.815179][T19864] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 949.820791][T19864] ? hashtab_init+0x1b1/0x290 [ 949.825447][T19864] __alloc_pages_noprof+0xb/0x1b0 [ 949.830449][T19864] ___kmalloc_large_node+0x84/0x1e0 [ 949.835625][T19864] ? hashtab_init+0x1b1/0x290 [ 949.840282][T19864] __kmalloc_large_node_noprof+0x1c/0x70 [ 949.845889][T19864] ? __pfx_ebitmap_read+0x10/0x10 [ 949.850892][T19864] __kmalloc_noprof.cold+0xc/0x61 [ 949.855897][T19864] hashtab_init+0x1b1/0x290 [ 949.860377][T19864] ? __asan_memcpy+0x3c/0x60 [ 949.864945][T19864] policydb_read+0x7b4/0x3220 [ 949.869610][T19864] ? __pfx_policydb_read+0x10/0x10 [ 949.874712][T19864] security_load_policy+0x15c/0x12c0 [ 949.879978][T19864] ? __pfx_security_load_policy+0x10/0x10 [ 949.885672][T19864] ? find_held_lock+0x2b/0x80 [ 949.890327][T19864] ? __might_fault+0xe3/0x190 [ 949.894981][T19864] ? __might_fault+0xe3/0x190 [ 949.899633][T19864] ? __might_fault+0x13b/0x190 [ 949.904381][T19864] sel_write_load+0x332/0x1bd0 [ 949.909128][T19864] ? __lock_acquire+0xb8a/0x1c90 [ 949.914038][T19864] ? __pfx_sel_write_load+0x10/0x10 [ 949.919223][T19864] ? __pfx_sel_write_load+0x10/0x10 [ 949.924398][T19864] vfs_write+0x2a0/0x1150 [ 949.928709][T19864] ? __pfx___mutex_lock+0x10/0x10 [ 949.933709][T19864] ? __pfx_vfs_write+0x10/0x10 [ 949.938456][T19864] ? __fget_files+0x20e/0x3c0 [ 949.943110][T19864] ksys_write+0x12a/0x250 [ 949.947417][T19864] ? __pfx_ksys_write+0x10/0x10 [ 949.952250][T19864] do_syscall_64+0xcd/0x4c0 [ 949.956729][T19864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.962594][T19864] RIP: 0033:0x7f1079d8e9a9 [ 949.966983][T19864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.986565][T19864] RSP: 002b:00007f107ab67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 949.994952][T19864] RAX: ffffffffffffffda RBX: 00007f1079fb5fa0 RCX: 00007f1079d8e9a9 [ 950.002897][T19864] RDX: 000000000000ffbd RSI: 0000200000000000 RDI: 0000000000000006 [ 950.010846][T19864] RBP: 00007f1079e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 950.018791][T19864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.026738][T19864] R13: 0000000000000000 R14: 00007f1079fb5fa0 R15: 00007ffdcc2fba68 [ 950.034692][T19864] [ 950.037875][T19864] Kernel Offset: disabled [ 950.042185][T19864] Rebooting in 86400 seconds..