last executing test programs: 26m16.155894183s ago: executing program 1 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x5, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x5c}}, 0x0) 26m15.694608861s ago: executing program 1 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffff7, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x6c}}, 0x8000) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}, [0x80000000, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x4, 0x1, 0xfffffffffffffffc, 0x0, 0x9]}, &(0x7f0000000080)=0x100) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x3a46, @loopback, 0x8, 0x1}, 0x20) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x64) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b042) write$hidraw(r5, &(0x7f0000000bc0), 0xffffffae) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x612980, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10001, 0x0) 26m14.552320901s ago: executing program 1 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="1ef10ffd66e65d", @ANYBLOB="050000000000000000002e00000008000300", @ANYRESDEC=r1, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000010"], 0x44}}, 0x0) 26m14.443448782s ago: executing program 1 (id=1446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="300100f42000010000000000fcdbdf810a008010000000030700010014000200fc020000000000000000000000000001"], 0x30}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000002440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000080) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) memfd_create(0x0, 0x4755b785af7e393d) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) syz_usb_connect(0x4, 0x5fb, &(0x7f0000002ec0)=ANY=[@ANYBLOB="12010000ebce062099040a10beb2010203010902e90502000000000904510200fff64d060b2406000000000000057505240007000d240f010000000000000f000108241c07000404000524060001052400d7c30d240f0100080000000208000506241a740018f02413067cfafad4d1e04689a3934219b41d153c0c555351f45ee791b0fe87a7a045eed852e06e07703a54bafdd5fcf7f4ac857311e32c71c67e4f2d5fe3d5886b846f0d2ab7e4b071961f8db85d56e25ba83aee90dc241222cdfedaec49069bbc34aa618800856d03c15622134ea81b1e22ba49cf5d02da423a74c1681856b95caddcaa80c11af54eebf1413e4e2752e17b603b2f62c687b047b1c78cdd02c51dead3ba9b77cde7eed65c549b61fa784cff109da2e87fb3ef84705ac932a65fca816404e1d981509c8296e8b99dc5401083ba74d152b99aa3072d5c9d5b7e5e7813d6dbf5b3b60a3868ec71b66c690b090482060cfa34bd27092108000b0122990709050000000408010509050d100800040b0891317ea3099b7f5ded6d0559902b25355a59ae7fffa5bfa8c765ff4b74e9d5889253c000f70e95605c6b439c54d7f031442d8f22d48600f322d96501a6b815bce38ad2c4a4f03d21732e7699d9a704d2fa90a138a17a78f47eb14c4393f8e7275ea15153a867910a2009f59a8af3ea3b0aaa84a205b1b5e8d6fef000f41b0f687bb0eb9cdd5926f5b735f3d564939b0c9b09050502000406050375065b2b4d0cbe4f39a90bd359e2356d6f84d99f1bab5966684b2344b1c09c50d757d5a73a3ace9e22cd156c352aae5b48753f5ee043db8f79cc46365fb11e4d9ca83f40ee64f13e325d1dec6da9e7f11aba2c99fb985cd951d905ba5ad4b9e2f42b7e057a32c20fbde0b2a634b373ce619ad00a7807250102020d000905000420000b80090725010306070007250103a2070009050e0108000e0810f30d6cca5e2f956150a3f3e6e7f89eb7ce75973af9cdd4aed98743a2260f6001b70a4097abf7e7f7948fd46e647586877f1ed693d84351e1fc6e119210174273ebda1964368b56b77b960a6aa212e5681967a3cd24f6dc6f98e27fbb19082bba0f66cb14b0500b3c7e5538e842d526eec57477d744a64c4b052f13a9dbae77defd9895eec9c61aa915e85878a0a10def49c34550d37fc36efaa0cf543b64eedd4d7e626b8f493051bddefb680ad45ceac64b772607ee574fc3dd1cf1c9cb66fd710768eca8a26578d2faa2bd009f1d47654dfc5884144c3c7c47d54102b5f8fd1ced8d56d4cde89bb5f5f1b297e4de9976545c6422df195a355869c3c543be75ceae6615e99bd60e7f74e869f6d35b69509e56ea2ee6d02203493c717b49f0e2a4d29eda7b5eb28e8b11ed53e89abda0ae1deb69f3670a71104aa22e2d2a7f813ad404195dd9350c37a5d9117b3706da8806b0d6e573bb090506032000020208d90f2673d8f4cf0da1aa22e22f8fd852c05a8bf203853e377002a158bebbc2e54ce0f807abfc6728a609a397e4b5c3de8e3edef1c97ca03ab1670da48fc3267d3f345f0bd77265fe055416018ac6ef759e4702f717e5d4f626250dc286e3a180408f70c25e701c3f9c4ced7863f3a0b02c860601dced667160d56da25421ebbd1cbdc1b1adbfe1d1477edc3a400025cab2cd793259aac32da2fb1fbffcb299a0b0ce020c445510b232981d985ba45ac0321bc8f8a568776f06c6cd237e7ca2d1399c6f6b74ae7a7d9c0c2aa70744fb08a34df345dcda669b3b260fb3c2f920bd9defdf8db2ece4146275fdf4a46a2aea6217543e017938def2218af1959baf09050c10400000a30509050518e604070981a804dc16c148905d8e0ed32eeeba4d915a2be8e16ec8fc9af3d17e27e4dcbdc024b28a931eec51bb8ec5299e566246491a797ff741a04311181b768bddbe0f691f43f400fe67929eccbc8f621922f84de88e0e4af3893859a86f25f4350bc851e377580397d6d82aa35f34ae3323482b03221342dd527b7c8bb7e9183843b73991c3d7898cef6fa34e243d43109f41c27e672e4b96a2ee86ea488c04e88b11343fa8f4e0424f036b0725018183060009050800000206090609050b100800fe03060725018007000009058000400006100909050c0020000da908"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0xcb0a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x700001, 0x0) write$cgroup_type(r5, &(0x7f0000000100), 0x8) 26m13.823479825s ago: executing program 1 (id=1452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000000)={0x7, {{0xa, 0x4e22, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x0, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) syz_emit_ethernet(0x36, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 26m13.513140941s ago: executing program 1 (id=1453): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000040)='afs\x00', 0x0) 26m13.430242496s ago: executing program 32 (id=1453): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000040)='afs\x00', 0x0) 14m37.944028286s ago: executing program 4 (id=4089): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x1, &(0x7f0000000040)=[{0x200, 0xbe, 0x3, 0xa9}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffffa, r4, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xfdf, 0x20000) r5 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 14m36.933383043s ago: executing program 4 (id=4096): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x6) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f000077f000/0x3000)=nil}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) 14m35.697176236s ago: executing program 4 (id=4101): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x12) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)) mmap$dsp(&(0x7f00009da000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = getpid() syz_pidfd_open(r5, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 14m34.395685216s ago: executing program 4 (id=4105): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="ad36fc441f511851c692372f4712c4dfe7258a338c96ca84e2e8cb94035380b0ea218c5ec488e446ff083bf416851ede3fc8d11622421f19aeb97becd86b02d39d0b6af8a71f7df4633d1917fb5152f62ea38cdd0967320beaa2180626887ffda567b603114e4041d4d04e959c9b8aa137301d17641c540152b83f7a0f43b5f77b6218b62c61bfcb981ca40b32093c589dba83e1cb8ae13778eeaa7a8e9ee571ffd4edbcd22ec2e06c240f3e94d811765832eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async, rerun: 64) io_uring_setup(0x0, 0x0) (async, rerun: 64) syz_open_dev$vim2m(0x0, 0x10001, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) (async, rerun: 32) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x4040004, 0x0, 0x0) (async, rerun: 32) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$pvfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x200840, &(0x7f0000000440)=ANY=[@ANYBLOB="73636865645f737769746368002c2321202c2d2f7d2c2c626c6b696f2e6266712e696f5f776169745f74696d655f726563757273697665002c7d262c2c5b3a8a2c6f626a5f747970653d73636865645f737769746368002c61707072616973652c61707072616973655f747970653d696d617369672c7569643e", @ANYRESDEC=r6, @ANYBLOB="2c636f6e7465e1743d73797361646d5f752c736d61636b6673726f6f743d002c00"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) unshare(0x2040400) (async) r9 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r9, 0x0, 0x0) (async) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x8243, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) 14m34.141223619s ago: executing program 4 (id=4107): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000080)="fc") openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000007c0)={0x0, 0x989680}, 0x0) 14m33.727345077s ago: executing program 4 (id=4108): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (async) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x880) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x200000000000010e, &(0x7f0000000200)=ANY=[@ANYBLOB="150000000000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000440)={0xffffffffffffffff, 0x8, 0x7f, 0xfb6, @vifc_lcl_ifindex, @loopback}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) writev(r6, &(0x7f0000000b00)=[{&(0x7f0000000940)='\n', 0xfdef}], 0x1) (async) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000700)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0xa8, 0x0, 0xa8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6gre0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private, @rand_addr=0x64010102, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x81, 0xe, [0x19, 0x2a, 0x28, 0x10, 0x32, 0xd, 0x17, 0xf, 0x25, 0x2c, 0x9, 0x37, 0x32, 0x36, 0x22, 0x4], 0x0, 0xa, 0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000002c0)={0xfffffff8, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 14m17.476136016s ago: executing program 33 (id=4108): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (async) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x880) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x200000000000010e, &(0x7f0000000200)=ANY=[@ANYBLOB="150000000000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000440)={0xffffffffffffffff, 0x8, 0x7f, 0xfb6, @vifc_lcl_ifindex, @loopback}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) writev(r6, &(0x7f0000000b00)=[{&(0x7f0000000940)='\n', 0xfdef}], 0x1) (async) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000700)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0xa8, 0x0, 0xa8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6gre0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private, @rand_addr=0x64010102, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x81, 0xe, [0x19, 0x2a, 0x28, 0x10, 0x32, 0xd, 0x17, 0xf, 0x25, 0x2c, 0x9, 0x37, 0x32, 0x36, 0x22, 0x4], 0x0, 0xa, 0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000002c0)={0xfffffff8, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 12.031683856s ago: executing program 6 (id=6595): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f0000000040)) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x600000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r13, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3, 0x800000000004}, 0x0) 10.36639149s ago: executing program 5 (id=6601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) timerfd_create(0x9, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 10.02474448s ago: executing program 5 (id=6603): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/18, @ANYRES32, @ANYBLOB="05000046e5000300"/30], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000000)="dc308f0c47a6a7d9a5c338f668ec599c83387f42e71aeff8a5cae99108c8a15fad79f7a79cd3b0d021afbde566a07dcd2ee2732d2d045e5ed535c346ac0b", &(0x7f00000000c0)=""/123, 0x0, &(0x7f0000000240)="cc58cd7b945966d39b5758ead9df90892631411c8682dc925072c9b6af1689e01ab490d7f1c0b66170d57a73d3355196f5f038f23b9515e19025cc3c764a5f8ac7649d8a0017e49836789e1444339175f0a220ef2a3acb8a1e8c3ccbf2391011f3d8c3cfab1b19593fa088f481866c7491a8d8ecc0aed7a0909a4ed6eb961f8461e05eb5d8fff9f9973bbf845a", 0xb, r0}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r2, 0x2, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8e19, 0x45a, {{0x1b, 0x4, 0x1, 0x1a, 0x6c, 0x66, 0x0, 0xff, 0x2f, 0x0, @local, @empty, {[@lsrr={0x83, 0xb, 0xdb, [@empty, @private=0xa010100]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xc7, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@rand_addr=0x64010100, 0xed0f}, {@empty, 0x6a}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2}]}, @noop, @generic={0x7, 0x8, "82ffa6dc6746"}, @timestamp={0x44, 0x14, 0xff, 0x0, 0x1, [0x4, 0xff, 0x5, 0x10001]}]}}}}}) connect$packet(r3, &(0x7f0000000480)={0x11, 0x3, r4, 0x1, 0xc, 0x6, @broadcast}, 0x14) socket(0x28, 0x4d17853ec8a2f122, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000d00000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0x117, &(0x7f0000000340)={0x0, 0x15104, 0x80, 0xfffffffc, 0xc5}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000540)='./file0\x00', 0x2, 0x800, 0x1}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000de18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000900008500000043000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000000500)={0x81, r3}) 9.784970459s ago: executing program 2 (id=6604): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0xc020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3, 0x0, 0x401}, 0x18) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000480)="a1a37b91be7ddb15e481057ac6442f88991afe1c595cfca143a0321a820897df31dc39b3dbac4d42583b16dbd7b9b8d105f5f30304ce0bd456277e77c96ec8fc8166823c646ece3d433def802d56887b340af227b949f8b5b91dec788c7a9f6f5b325359cd068435e496d639ce571d721db043490ebfd2e25df0db8d3b1522c86e8a4fed8e3e1f88db7b78039e6a5d4e9b05e8324ed2ead16f94577465e488df9d31afd370c988d9d400458fafa065897c5fdb2652bbad4ccd5d8b1d4ec94c4855e1191049cd43d08b4acb1c042b", 0xce, 0x2) getpgrp(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r6, 0x27e2, 0x0, 0x0, 0x0, 0x0) 8.53545566s ago: executing program 2 (id=6606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4850}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000a000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r5) 8.24481112s ago: executing program 5 (id=6607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000540)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000480)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket(0xa, 0x2, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r6, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x29, 0x12, 0x0, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) 8.241819654s ago: executing program 6 (id=6608): r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x80, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x1) 8.193131085s ago: executing program 0 (id=6609): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x6, 0x8, 0x1, 'queue0\x00', 0x3}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x80c1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000040c0)={0x200000, 0x200000, 0x1000, 0x200000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x4b45, 0x2) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, 0x0) 8.156940036s ago: executing program 6 (id=6610): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0xff, 0x4, 0xfff8, 0x200, 0x5, 0x0, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000140)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0xf6}, [@NDA_LLADDR={0xa, 0x2, @random="df58e5774b4e"}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@getnexthop={0x44, 0x6a, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0xfffffffffffffd55, 0x5, r3}, @NHA_OIF={0x8, 0x5, r4}, @NHA_OIF={0x8, 0x5, r8}, @NHA_GROUPS={0x4}]}, 0x44}}, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x201, 0x4800003e, r0, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r9, 0x61, 0x40001002, r10, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0) 7.57945738s ago: executing program 0 (id=6611): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, 0x154, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000004b40)=ANY=[@ANYBLOB="0d000000000000000a004e230000004b00000000000000000000000000000001020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000050000000a004e2300000020ff01000000000000000000000000000100100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001ff02000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000007ff01000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000f4fe88000000000000000000000000000187090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000008fe8000000000000000000000000000aa018000"/782], 0x310) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 7.577102899s ago: executing program 3 (id=6612): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, 0x154, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000004b40)=ANY=[@ANYBLOB="0d000000000000000a004e230000004b00000000000000000000000000000001020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000050000000a004e2300000020ff01000000000000000000000000000100100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001ff02000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000007ff01000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000f4fe88000000000000000000000000000187090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000008fe8000000000000000000000000000aa018000"/782], 0x310) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 7.480430068s ago: executing program 6 (id=6613): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xce, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d", 0x21}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0xe1, 0x0, 0x0, 0x3, "8000"}, 0x0, 0x2, {}, 0x20800}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000000c0)="d6d264f653c4c24438d85cb9932cde891451b5d72afa8dd38498028e0ac822d6e1cd898feb54e8782a5333b318cda8166c05146315", 0x35, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r8, 0x1) 7.289421139s ago: executing program 2 (id=6614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16f158bfc1000000040000000100800000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000040)={0x80000000, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) setgid(0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) close_range(r4, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.851176004s ago: executing program 3 (id=6615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4850}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000a000000000008000500", @ANYRES32=r8], 0x44}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r6) 3.731408703s ago: executing program 0 (id=6616): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xa0, "c8f91cb8eb277da27098990e74161236950728eb94ceaa3593dfd127b4b3ad1f29ba31795d8f6079c973d0a41310b3dc81770f4a81fe9f14efdd58869ac95c63eb999f709561fd8d64c0e785da932c073c3a4be479e3458a593e43dacb9605712a63f68ea06614f95dcef19750e3c45e83d335b7ddeccacd79e11e819162033151c9ed42a29e3a893d69aa335132877da5fa1b16f41e3c96b4650fc597eee4e5"}, &(0x7f0000000040)=0xa8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e20, 0xfffffff9, @local, 0x8}}, 0x9}, 0x90) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000080)=0xf, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x60800) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x40, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x104) mkdir(0x0, 0x100) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES8=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x28008801, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) 3.720786181s ago: executing program 6 (id=6617): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000) read$char_usb(r1, &(0x7f00000001c0)=""/188, 0xbc) read$char_usb(r1, &(0x7f0000000100)=""/74, 0x4a) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) finit_module(0xffffffffffffffff, 0x0, 0xa83b83cabb6cb3f) syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x11, 0x2c, {0x2c, 0x24, "4396eebb7a9d5d990b7fb8670b698c90fc7f8247476a0c72c9de71e8acff0e759ac7d7b7b695140be3ab"}}, &(0x7f0000000040)={0x0, 0x3, 0x63, @string={0x63, 0x3, "13dc6da1663bb500a66541168a9d033d320b5826e30aceec60937271dc3f1f59780ef0905b133e15e5fbe108b8c29218526327d38ab1728f2dfd27a825dfa63e564051a256f0131a89c07f6599ae09cc7986c789dbc7ca4e0047c64a99aafc29f4"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x20, 0xf, 0xe6, "90c9fe7188a898fd1f6d690a03de445f14f7c9d2995349ec3009c692e5318a3a4569bd03e8c671d7bc4ce082813e9c5c4968d07258104470ed6377b4bf798d9233fa9f85af800258a547dfb05c2bbf3212751d9654d88a9d4d0ba470a3a792881e2a4759217cf6ad2851a685d3e1bcf50c8d4ede24fd7213e4bbe8caa1f1eace3232ad427b2132454a4554368ea6086bd7976e9d8121750b7d90a2e189048f073a237bc30de23e0717b490c50233906b032896a94c35d2d7387a9a157d37ad1f4c1b106d1421bc2112c6a891412eac96466e5c7b641fce489810fa44d870f01fa515b7490c1a"}, 0xfffffffffffffffd, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x0, 0xfb, {0xf9, "7dff16c72ce6846791a7bb75ffcafae049afa50fd4e22325621db1a4f5ff310d28a0e9824e717c9f4fecc9c689a5a6043267a1a5c3212c551edaae7f641aad28b9924c8721224122cd7b3066d69f649fd6a6ff580c52209fa5fc52b32504e9c89550de7546802fe053a210067d3aef3136d236611d0d701f5102990863b548b07af45221cddcd061f7e7c687d1fb4c1f9571bdfc1428fbf3b898fde292b400bbd2efdf639ffe7ba7af817c097be541965d973a09ef7d4c57fde02fcdfbf2fcadd02a2c68a3b418afc21e2163964f01e4876b2c9807af6f35d1861acde44217abdd1890ef5c68262e8590870329daaca5bc0823521bd5635ca3"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0xf9}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2c, 0x23, 0xb7, 0x40, 0x1bc7, 0x1040, 0xb5b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x12, 0xc7, 0x1c}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r3 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x6, 0x3b}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0x1, 0x2c}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x8f, 0xe, 0x9d, 0x8, 0x2}, 0x26, &(0x7f0000000640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x58, "57766f24e8fb5b589e6066f7a3c2865f"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x2, 0x4}, @ptm_cap={0x3}]}, 0x6, [{0x45, &(0x7f0000000680)=@string={0x45, 0x3, "dd6a5547f1021f8c5b8e3266902a0a1b942a1d9c270bb7b3754a592094b122a1b26c82bb1f2d0b95b24413598a45c82753f3ff847daa1a877fa3bb7cff07287b6dfa9a"}}, {0x7a, &(0x7f0000000700)=@string={0x7a, 0x3, "0bf8d7a65cd48d0f83702f0bdda250da718b0565c66dc0f38cfae7e19c9f2e66f3fe01a5daf0e78a5598f506112583630c0d609ca480d3d406efb603bff4b2bfec93a079b90786bce7507e37dd8b4145fa61e53d39df3a5cbd65fd969c61573f50bcbd52af8a28f88ae3ef8813242e94f1e1814e9cae2fac"}}, {0xae, &(0x7f0000000780)=@string={0xae, 0x3, "94634ce440c6b444b905fe3bd4c7669872df3fa488cd1b5bef60d6206123bb5bbd207d7b59ed7e4c3acde4e095d7f76597665ae3b8df2e89eb56092003ab1c5a9576e78da8338a1c474b19852eb2d5521bcfc2fe6babf000f062a452060e4dc21b7ebac0b86f4739398333af9d4962edfec59a124d2c10db4d6279c3147e50d32f51789d173450cde8e4a2bc412a2f19bc0a7f8089f08043d3f4dc3d7eb842b525ab8793f11d681ef5b6c928"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44b}}, {0x85, &(0x7f0000000880)=@string={0x85, 0x3, "99ba0ac92d0cbdedb23be8ac9ca5c8e34bc652c18ff3291a10d19c00b695a76efc4529d0f6b2be705818a35109dd7f2f4eba3ddc704a227df66f5b9656be0ed1991c491b6c9727dd96b03c9b851097dfd63cf507e0aae3e11e3d3caea87d5f07ba68f39e8f68e82863e97cdaeddfc03f1761ebc169fb16bbda0e78befc3f2c100cb385"}}, {0xe7, &(0x7f0000000940)=@string={0xe7, 0x3, "803122540a86b137329fdb36f47501125f7c9100425f0986885aa108f960debe1e4bf44ebb20f3f043219af8cabea428686578ba1a92eedea8b4caa0d799e92a5360d0c2cba78e490a04e004c760f6058e6c7abe5706b0fcad3f297a199142f39aac7f770bbf290bdb1823e6d3fdfef8d2a9d5dedd31623a083c7689b2a7d86bdb863d3b9795ab5eba57ac13940ef53311e1b2c06657b62c4786074251c8b86e9615ab7884313da1a046a3a2fe5d05352e9f63f646a2e44e0b34b380ab9d63d61c64d70cfbc4bdb20cd33ef63902f6edbfd29cc1611fe91ca54072e075dab4b1d29721fd31"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000bc0)={0x14, &(0x7f0000000ac0)={0x0, 0xd, 0x9c, {0x9c, 0xd, "d92124549bcbfbc5b97bb870abd9153b8fe9cd5e620f4eb9660b6fba3578391ba218b4ed77e42321d971bcd026648f444a4c3c9f5b0df89cb28584e4662efac47cbd5e7c8a59a1de054c24c035db970d48cc2600046dbc797e024ac56728268a4629388dcb5bd081f9b1abc60f343f945830385b70c5321671a66ffe9b46cdbd95b6cc181349775004061f6cf05d97f11ba95075af0ce55776b5"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000000e80)={0x34, &(0x7f0000000c00)={0x0, 0x12, 0xaf, "12dff4ce609854ef27f484f999c62f688203b1c69120897696da9a84ee715589a1cd35d66c7453a93674c57e919cdc40abc4cdd04bc7dd082445c0e4a0fbbb495d06e7cc686c92336f6903cec2a33322b3c608d66638d20318aee4bca8514aecd0e49b6128db62310c151d43afeb14070297240d29051679cfa77597fcbbac56bb89d0fa7854a9f4578f0703f8aff97fcfe1ef4c04b5303eeb75e0c4166e00be530eba04931f493df354b799df5a9c"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000d40)={0x20, 0x0, 0x8e, {0x8c, "d0eeda5dbce5046e82405ce2e07642ac096f3ec51cb3d24055d1a3f135bd9abdbabb3abe00b651c5e3d1ed9fb96a7fda86834c769ad074f04d48f610aad685003fe38e7bb3fc6bcffa5b6c1260762c200ce8c2dca20e8a126e816ae81ea5183e3a27ab0f8ddfb4075c7495d36c2dc34f32ba04083d12e2fd05500fe0a104ced773d556238827f8da71161a78"}}, &(0x7f0000000e00)={0x20, 0x1, 0x1, 0xfa}, &(0x7f0000000e40)={0x20, 0x0, 0x1, 0x4}}) r4 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x9, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x2, 0x1b, &(0x7f0000000000)=ANY=[], 0x0) 3.660858372s ago: executing program 5 (id=6618): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/18, @ANYRES32, @ANYBLOB="05000046e5000300"/30], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000000)="dc308f0c47a6a7d9a5c338f668ec599c83387f42e71aeff8a5cae99108c8a15fad79f7a79cd3b0d021afbde566a07dcd2ee2732d2d045e5ed535c346ac0b", &(0x7f00000000c0)=""/123, 0x0, &(0x7f0000000240)="cc58cd7b945966d39b5758ead9df90892631411c8682dc925072c9b6af1689e01ab490d7f1c0b66170d57a73d3355196f5f038f23b9515e19025cc3c764a5f8ac7649d8a0017e49836789e1444339175f0a220ef2a3acb8a1e8c3ccbf2391011f3d8c3cfab1b19593fa088f481866c7491a8d8ecc0aed7a0909a4ed6eb961f8461e05eb5d8fff9f9973bbf845a", 0xb, r0}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r2, 0x2, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x8e19, 0x45a, {{0x1b, 0x4, 0x1, 0x1a, 0x6c, 0x66, 0x0, 0xff, 0x2f, 0x0, @local, @empty, {[@lsrr={0x83, 0xb, 0xdb, [@empty, @private=0xa010100]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xc7, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@rand_addr=0x64010100, 0xed0f}, {@empty, 0x6a}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2}]}, @noop, @generic={0x7, 0x8, "82ffa6dc6746"}, @timestamp={0x44, 0x14, 0xff, 0x0, 0x1, [0x4, 0xff, 0x5, 0x10001]}]}}}}}) connect$packet(r3, &(0x7f0000000480)={0x11, 0x3, r4, 0x1, 0xc, 0x6, @broadcast}, 0x14) socket(0x28, 0x4d17853ec8a2f122, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000d00000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0x117, &(0x7f0000000340)={0x0, 0x15104, 0x80, 0xfffffffc, 0xc5}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000540)='./file0\x00', 0x2, 0x800, 0x1}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000de18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000900008500000043000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000000500)={0x81, r3}) 3.645648929s ago: executing program 2 (id=6619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x40}], 0x1, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@hyper}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x48, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000300)={&(0x7f0000000bc0)={{@host, 0xec}, {@local, 0x4}, 0x400, "3b84a44b3574c38e74907f8da6cc8fa48e3f718262884ddde6833337876160ee4a3a309f695b7cd3b66e2fad1646036e38768f7a09a4396caa957db941eb4a91506346264899d6ccbcfe61512d35cdcdf47816fc9be6503532c2131b42f4c1ab41534bbab876ea7d3b01c1460756ee7c16df11140a384e84741dbf46272bb8f2d3a0cf851a9354de6379c903192a7430cbb7e3aaa5446ee93f31b7b3cfae940f49918ef23efa46ba97d6d33242f2fca233d65de2d0873e5c76a271542a6fae03d97e37bfef851c7293cd1cf873eec6fd3b4c5f7fb924f85930682f0b3a810f6d463685d788bc8a6ba0df43e7c0c1780baaa86b53e3c677c59ad310afb3515ee62617d244daf6c7d0aadba86242d616526db41fedf59f4f24748a013b3a06ec776802090d8b7bd15197b473bbc375c3567f1eb87220feae9c47f0c97b0f7f4d39222b5ceed718a97734380fe884f99992622736bdf5b1f51090a535d72ebdd911d32a55bc5c6ce52182890765594900924f58eeb53979f0a161e0c19371db7523b96060f45141957e2e34809cb18bea6683cef8c2c44507cfe8a5174939551fe486ae3095ed27b9ab3dc9bad32382dc88e18f506ce778d26550209aa0d428325f45e02c08621096efd84e41e3e94947b1971312f781cac3ddda389926cbf14f60992cc924f543ec973d313b56c563b48ab29cef68fbdc7bc6904894570eb2c78ee5aa34a5bf0213f715e41370192f1481d128a809ba32ea5875bef5b2783cb2ea30a1966a78ad151ae518b819ab22f37809761e3d273b4cada6323d812ab9efd35c8df6b66561d43687b3bfda68007716df85a6825834130d3e1131a0708becd41607736b32b83f69a00f33dba3bd62675144acb745aa4acca4b6c08ec6b9384acc80f85810b54da60f908dd7d97449ae9948da6a998bad3f13acedc188fc1c3bc9c9f5405b9b11c3cd4af6457f0722135c9dabcb7c3e5ceb6e50e4fdc8e42e1ddb2d4908e2d2f60d661167a2f7c2a4493f56f43741b1950b0c9794690fa13c1b5267992d8ad5a82657a43bb2503f211b177dd76f69642d2cc9f5e50a055a72fd1b418f2d624196129c637bd64a0b55fa64428d042cfe5f8a9986383edfc833ed0009e7978ed6a47d2691b669a13e39ee378f20508f700645821424f29bbb8f3aae8e4ea7f9b1a7ec8cea19fd42a2c49a7bc7e1d97ddc276e099863732bc6e69d2eb1ca80791f04bee9e773737687de5a8936f4680b82ddb4f4a14b6de19035cb6a5b52383316fbe181177184048910b86985f21856bf529497d80c9c5627ae6cd9f537b2824202e278239572ba218e7f62ff87eaf251aba269022224035819f53db1590838615fde7575b53e46c9767d76c9e28282d27358ed28a5d87d6ce65daa9f4b4678d62fc33f8d3446f4f908bfea4b295e7292a490cc6eed75086f23a8"}, 0x418, 0x5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) unshare(0x62040200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) 1.519618267s ago: executing program 3 (id=6620): r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x80, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x1) 1.427054864s ago: executing program 2 (id=6621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1801056949135b5d06330000000000557225e3bc7e28e6b2c101"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x3c, 0x66, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xffff, 0xfff1}, {0x1, 0xfff1}}, [{0x8, 0xb, 0xd0}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x103}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000556000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000e00)=[{{&(0x7f0000000340)=@in6, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/43, 0x2b}, {&(0x7f0000000ec0)=""/17, 0x11}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/81, 0x51}], 0x5, &(0x7f0000000640)=""/118, 0x76}, 0x5}, {{&(0x7f0000000f00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/53, 0x35}, {&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000000900)=""/143, 0x8f}, {&(0x7f00000009c0)=""/11, 0xb}], 0x5, &(0x7f0000000a80)=""/70, 0x46}, 0x200}, {{&(0x7f0000000b00)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/23, 0x17}, {&(0x7f0000000bc0)=""/64, 0x40}, {&(0x7f0000000c00)=""/166, 0xa6}], 0x3, &(0x7f0000000d00)=""/193, 0xc1}, 0x2}], 0x3, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0xc}) 1.376950131s ago: executing program 0 (id=6622): open(0x0, 0x113402, 0x0) mknod(0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x4000000000000045, r2, 0xcccccccc}) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)}], 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000040), &(0x7f0000000600)=[r3], &(0x7f0000000340)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x55, 0x867}, 0x10) r8 = syz_open_dev$dri(&(0x7f0000000100), 0xd21, 0xe002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000380)={r10, 0x0, 0x9, 0x800001, 0x1, [0x0], [0x9, 0x0, 0x0, 0x8], [0x5, 0x0, 0x100, 0xd], [0x1000000000000, 0x0, 0xfffffffffffffffd, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000080)={r11}) 1.363758981s ago: executing program 3 (id=6623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) fdatasync(r1) 1.266643793s ago: executing program 5 (id=6624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000000)={0x0, 0x400, 0x1c0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x3, &(0x7f0000000000)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x2a) ptrace(0x4207, r2) r3 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x74ad, 0x10, &(0x7f0000000040)) getsockname$packet(r3, 0x0, &(0x7f0000000200)) 980.318265ms ago: executing program 3 (id=6625): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1f0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) getsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002400)=""/102367, 0xecc0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 656.906899ms ago: executing program 5 (id=6626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20000014) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3b13) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x4, &(0x7f0000000080)=[{0x8, 0x25, 0x40, 0x6}, {0x0, 0x30, 0x2, 0x80}, {0x4, 0x8, 0x1, 0x1}, {0x4934, 0x37, 0x7a, 0x5}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030300000000000104000000000000080001000100f666195dac17df7bf90fb31dc6f065c8a800"/55], 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="57000200010301010000001f9d00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 375.324007ms ago: executing program 0 (id=6627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0xfeff, 0x0, 0x4004}, 0x0) 275.761075ms ago: executing program 2 (id=6628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x4000, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x1220}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 96.981775ms ago: executing program 0 (id=6629): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16f158bfc1000000040000000100800000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000040)={0x80000000, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) setgid(0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) close_range(r4, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 29.011635ms ago: executing program 3 (id=6630): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, 0x154, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000004b40)=ANY=[@ANYBLOB="0d000000000000000a004e230000004b00000000000000000000000000000001020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000050000000a004e2300000020ff01000000000000000000000000000100100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001ff02000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000007ff01000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000f4fe88000000000000000000000000000187090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000008fe8000000000000000000000000000aa018000"/782], 0x310) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 0s ago: executing program 6 (id=6631): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4850}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000a000000000008000500", @ANYRES32=r8], 0x44}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r6) kernel console output (not intermixed with test programs): context=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1845.284032][T28561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1845.300062][T28561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.325331][T28561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1845.473919][T28561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1845.519645][T28561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1846.178778][T28561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.304667][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1846.889817][T28561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.004511][T28561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.013784][T28561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.416470][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1847.542546][ T29] audit: type=1400 audit(1737100834.183:9754): avc: denied { ioctl } for pid=28696 comm="syz.3.6075" path="socket:[114499]" dev="sockfs" ino=114499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1847.934057][T28702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6073'. [ 1848.170859][T23795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.193464][T23795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.318537][T23796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.356861][T23796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.414083][ T29] audit: type=1400 audit(1737100834.988:9755): avc: denied { mounton } for pid=28561 comm="syz-executor" path="/root/syzkaller.7xJjyf/syz-tmp" dev="sda1" ino=1974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1848.499599][ T29] audit: type=1400 audit(1737100834.997:9756): avc: denied { mount } for pid=28561 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1848.528304][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1848.594188][ T29] audit: type=1400 audit(1737100835.034:9757): avc: denied { mount } for pid=28561 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1848.635172][ T29] audit: type=1400 audit(1737100835.044:9758): avc: denied { mounton } for pid=28561 comm="syz-executor" path="/root/syzkaller.7xJjyf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1848.723406][ T29] audit: type=1400 audit(1737100835.044:9759): avc: denied { mounton } for pid=28561 comm="syz-executor" path="/root/syzkaller.7xJjyf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=115507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1848.817265][T23223] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1848.838386][T26406] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1849.012498][T28719] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1849.139697][T26406] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.150036][T26406] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1849.162241][T23223] usb 7-1: config 0 has no interfaces? [ 1849.168132][T23223] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1849.177494][T26406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1849.189584][T23223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.198624][T26406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1849.209887][T26406] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1849.223547][T23223] usb 7-1: config 0 descriptor?? [ 1849.242159][T26406] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1849.252026][T26406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1849.261252][T26406] usb 3-1: Product: syz [ 1849.265771][T26406] usb 3-1: Manufacturer: syz [ 1849.270871][T26406] usb 3-1: SerialNumber: syz [ 1849.283436][T26406] usb 3-1: config 0 descriptor?? [ 1849.484234][T28706] usb 7-1: USB disconnect, device number 72 [ 1849.516262][T26406] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1849.547481][T26406] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1849.640115][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1849.957335][T28726] Cannot find set identified by id 0 to match [ 1850.335616][T26406] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1850.343971][T26406] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1850.414223][T26406] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1850.538540][T26406] usb 3-1: USB disconnect, device number 62 [ 1850.752208][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1851.691458][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1851.691474][ T29] audit: type=1400 audit(1737100838.065:9767): avc: denied { write } for pid=28742 comm="syz.3.6086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1851.817317][ T29] audit: type=1400 audit(1737100838.065:9768): avc: denied { create } for pid=28742 comm="syz.3.6086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1851.863756][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1851.913635][T28748] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1852.093208][ T29] audit: type=1400 audit(1737100838.093:9769): avc: denied { connect } for pid=28742 comm="syz.3.6086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1852.256074][ T29] audit: type=1400 audit(1737100838.103:9770): avc: denied { write } for pid=28742 comm="syz.3.6086" path="socket:[114683]" dev="sockfs" ino=114683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1852.304409][ T29] audit: type=1400 audit(1737100838.215:9771): avc: denied { getopt } for pid=28745 comm="syz.0.6087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1852.831214][ T29] audit: type=1400 audit(1737100838.215:9772): avc: denied { create } for pid=28745 comm="syz.0.6087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1852.975804][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1853.200151][ T29] audit: type=1400 audit(1737100838.215:9773): avc: denied { ioctl } for pid=28745 comm="syz.0.6087" path="socket:[115722]" dev="sockfs" ino=115722 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1854.087410][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1854.097350][T28765] syz.5.6093: attempt to access beyond end of device [ 1854.097350][T28765] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1854.110473][T28765] syz.5.6093: attempt to access beyond end of device [ 1854.110473][T28765] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1854.124146][T28765] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1854.133743][T28765] syz.5.6093: attempt to access beyond end of device [ 1854.133743][T28765] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1854.146621][T28765] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1854.156590][T28765] syz.5.6093: attempt to access beyond end of device [ 1854.156590][T28765] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1854.169459][T28765] syz.5.6093: attempt to access beyond end of device [ 1854.169459][T28765] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1854.182375][T28765] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1854.192054][T28765] syz.5.6093: attempt to access beyond end of device [ 1854.192054][T28765] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1854.205313][T28765] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1854.215081][T28765] syz.5.6093: attempt to access beyond end of device [ 1854.215081][T28765] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1854.228205][T28765] syz.5.6093: attempt to access beyond end of device [ 1854.228205][T28765] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1854.241817][T28765] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1854.251396][T28765] syz.5.6093: attempt to access beyond end of device [ 1854.251396][T28765] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1854.264865][T28765] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1854.274540][T28765] syz.5.6093: attempt to access beyond end of device [ 1854.274540][T28765] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1854.287408][T28765] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1854.297086][T28765] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1854.306545][T28765] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1854.842780][T28774] vxcan1 speed is unknown, defaulting to 1000 [ 1855.199241][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1856.223821][T28773] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1856.234074][T28773] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1856.244183][T28773] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1856.253770][T28773] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1856.263533][T28773] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1856.273205][T28773] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1856.283003][T28773] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1856.292672][T28773] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1856.302275][T28773] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1856.311053][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1856.963914][T28796] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1857.359972][T18192] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1857.423023][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1857.594934][T18192] usb 6-1: Using ep0 maxpacket: 16 [ 1857.884285][T18192] usb 6-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 1857.906761][T18192] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1857.916270][T18192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1857.924305][T18192] usb 6-1: SerialNumber: syz [ 1857.938671][T18192] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1857.952287][T18192] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 1858.003545][T18192] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 1858.143371][ T29] audit: type=1400 audit(1737100844.098:9774): avc: denied { audit_read } for pid=28804 comm="syz.6.6102" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1858.206879][T18192] usb 6-1: USB disconnect, device number 3 [ 1858.257649][ T29] audit: type=1400 audit(1737100844.098:9775): avc: denied { accept } for pid=28804 comm="syz.6.6102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1858.535014][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1858.722831][ T29] audit: type=1400 audit(1737100844.641:9776): avc: denied { create } for pid=28797 comm="syz.3.6100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1858.819649][ T29] audit: type=1400 audit(1737100844.669:9777): avc: denied { bind } for pid=28797 comm="syz.3.6100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1858.957084][ T29] audit: type=1400 audit(1737100844.669:9778): avc: denied { name_bind } for pid=28797 comm="syz.3.6100" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1859.056195][ T29] audit: type=1400 audit(1737100844.669:9779): avc: denied { node_bind } for pid=28797 comm="syz.3.6100" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 1859.219075][ T29] audit: type=1400 audit(1737100844.669:9780): avc: denied { listen } for pid=28797 comm="syz.3.6100" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1859.369824][ T29] audit: type=1400 audit(1737100844.669:9781): avc: denied { connect } for pid=28797 comm="syz.3.6100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1859.646715][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1859.712310][ T29] audit: type=1400 audit(1737100844.669:9782): avc: denied { name_connect } for pid=28797 comm="syz.3.6100" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1860.423928][ T29] audit: type=1400 audit(1737100844.678:9783): avc: denied { setopt } for pid=28797 comm="syz.3.6100" laddr=::1 lport=60284 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1860.735156][T28834] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1860.758390][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1860.762962][T28839] overlayfs: failed to resolve './file0': -2 [ 1861.539596][T28844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6111'. [ 1861.570468][T28844] veth0_to_team: entered promiscuous mode [ 1861.581212][T28844] veth0_to_team: entered allmulticast mode [ 1861.717234][T28848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6112'. [ 1861.726808][T28848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6112'. [ 1861.736381][T28848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6112'. [ 1861.807877][T28849] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1861.870205][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1861.943670][T28848] input: syz0 as /devices/virtual/input/input111 [ 1862.245134][T26406] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1862.982044][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1863.008028][T26406] usb 3-1: Using ep0 maxpacket: 16 [ 1863.014854][T26406] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1863.026760][T26406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1863.039650][T26406] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1863.354288][T26406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.362709][T26406] usb 3-1: Product: syz [ 1863.367015][T26406] usb 3-1: Manufacturer: syz [ 1863.371635][T26406] usb 3-1: SerialNumber: syz [ 1863.380024][T26406] usb 3-1: config 0 descriptor?? [ 1863.412949][T26406] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1863.433274][T26406] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1864.060975][T26406] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1864.082928][T26406] em28xx 3-1:0.0: Config register raw data: 0xfa [ 1864.093835][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1864.194139][T26406] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 1864.200363][T26406] em28xx 3-1:0.0: No AC97 audio processor [ 1864.215242][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1864.215259][ T29] audit: type=1400 audit(1737100849.786:9789): avc: denied { read } for pid=28870 comm="syz.0.6117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1864.244909][T28874] pim6reg: entered allmulticast mode [ 1864.757445][T26406] usb 3-1: USB disconnect, device number 63 [ 1864.854807][ T29] audit: type=1400 audit(1737100850.384:9790): avc: denied { nlmsg_read } for pid=28881 comm="syz.6.6121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1865.188236][T28888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6123'. [ 1865.205650][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1866.130114][ T29] audit: type=1400 audit(1737100851.413:9791): avc: denied { connect } for pid=28894 comm="syz.2.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1866.149955][ C1] vkms_vblank_simulate: vblank timer overrun [ 1866.317522][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1867.305263][T28918] XFS (nullb0): Invalid superblock magic number [ 1867.429294][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1867.439928][ T29] audit: type=1400 audit(1737100852.770:9792): avc: denied { create } for pid=28928 comm="syz.2.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1867.696978][ T29] audit: type=1400 audit(1737100852.779:9793): avc: denied { ioctl } for pid=28928 comm="syz.2.6130" path="socket:[116811]" dev="sockfs" ino=116811 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1867.848599][T28935] overlayfs: failed to resolve './file0': -2 [ 1868.291563][ T29] audit: type=1400 audit(1737100852.807:9794): avc: denied { create } for pid=28896 comm="syz.6.6125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1868.360624][ T29] audit: type=1400 audit(1737100852.807:9795): avc: denied { write } for pid=28896 comm="syz.6.6125" path="socket:[116819]" dev="sockfs" ino=116819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1868.541204][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1869.612604][ T29] audit: type=1400 audit(1737100854.678:9796): avc: denied { write } for pid=28916 comm="syz.5.6129" path="socket:[116174]" dev="sockfs" ino=116174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1869.652942][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1869.767267][ T29] audit: type=1400 audit(1737100854.968:9797): avc: denied { sqpoll } for pid=28916 comm="syz.5.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1869.831798][T28961] loop9: detected capacity change from 0 to 7 [ 1869.846972][T28961] Dev loop9: unable to read RDB block 7 [ 1869.863162][T28961] loop9: unable to read partition table [ 1869.865907][T28962] bio_check_eod: 14 callbacks suppressed [ 1869.865922][T28962] syz.3.6136: attempt to access beyond end of device [ 1869.865922][T28962] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1869.916648][T28961] loop9: partition table beyond EOD, truncated [ 1869.931309][T28961] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 1869.954685][T28962] hfsplus: unable to find HFS+ superblock [ 1870.764774][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1871.876583][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1871.927227][T28973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6140'. [ 1871.929322][ T29] audit: type=1400 audit(1737100856.988:9798): avc: denied { bind } for pid=28971 comm="syz.5.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1872.988441][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1872.989057][ T29] audit: type=1400 audit(1737100857.933:9799): avc: denied { getopt } for pid=28984 comm="syz.6.6144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1873.576611][ T29] audit: type=1400 audit(1737100858.541:9800): avc: denied { block_suspend } for pid=28991 comm="syz.3.6147" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1874.100322][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1875.112929][T29019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6151'. [ 1875.212085][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1875.384560][T29025] vxcan1 speed is unknown, defaulting to 1000 [ 1876.323907][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1876.848203][T29034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6156'. [ 1877.045348][T29038] openvswitch: netlink: Actions may not be safe on all matching packets [ 1877.435750][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1877.671003][ T5815] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1877.919689][ T5815] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1877.931421][ T5815] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1877.941790][ T5815] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1877.951442][T12980] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1877.962405][T12980] Bluetooth: hci2: Injecting HCI hardware error event [ 1877.973495][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.973601][T19740] Bluetooth: hci2: hardware error 0x00 [ 1877.986086][T29047] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1878.224819][ T5815] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1878.547532][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1879.659361][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1880.218328][T19740] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1880.226840][T29066] input: syz1 as /devices/virtual/input/input112 [ 1880.771158][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1881.440608][T29079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6168'. [ 1881.883012][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1882.521484][ T5815] usb 4-1: USB disconnect, device number 64 [ 1882.994811][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1884.106695][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1884.147639][ T29] audit: type=1400 audit(1737100868.419:9801): avc: denied { read write } for pid=29118 comm="syz.2.6177" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1884.230963][ T29] audit: type=1400 audit(1737100868.419:9802): avc: denied { open } for pid=29118 comm="syz.2.6177" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1884.335719][ T29] audit: type=1400 audit(1737100868.597:9803): avc: denied { ioctl } for pid=29118 comm="syz.2.6177" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1885.218465][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1885.609144][T29151] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6186'. [ 1885.627059][T29151] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6186'. [ 1885.644330][T29151] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6186'. [ 1885.705252][T29151] input: syz0 as /devices/virtual/input/input113 [ 1885.902949][ T5815] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1886.148661][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 1886.171534][ T5815] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1886.209183][ T5815] usb 3-1: config 0 has no interface number 0 [ 1886.223812][ T5815] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1886.246543][ T5815] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1886.261199][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.272207][ T5815] usb 3-1: Product: syz [ 1886.277128][ T5815] usb 3-1: Manufacturer: syz [ 1886.282021][ T5815] usb 3-1: SerialNumber: syz [ 1886.290088][ T5815] usb 3-1: config 0 descriptor?? [ 1886.297301][ T5815] smsc75xx v1.0.0 [ 1886.330307][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1887.300604][ T29] audit: type=1400 audit(1737100871.375:9804): avc: denied { connect } for pid=29162 comm="syz.0.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1887.442298][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1887.643724][ T5815] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1887.875936][ T5815] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1887.916017][ T5815] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1887.947883][ T5815] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1887.986829][ T5815] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1888.007288][ T5815] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1888.036057][ T5815] usb 3-1: USB disconnect, device number 64 [ 1888.553983][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1888.821683][T29190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6196'. [ 1888.851394][T29190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6196'. [ 1888.895882][T29192] input: syz0 as /devices/virtual/input/input114 [ 1888.902389][T29190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6196'. [ 1889.057779][T29196] vxcan1 speed is unknown, defaulting to 1000 [ 1889.581127][T18192] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1889.665749][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1889.839529][T18192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.968516][T18192] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1890.024938][T18192] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1890.036626][T18192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.090660][T18192] usb 6-1: Product: syz [ 1890.100887][T18192] usb 6-1: Manufacturer: syz [ 1890.120934][T18192] usb 6-1: SerialNumber: syz [ 1890.139701][T18192] usb 6-1: config 0 descriptor?? [ 1890.694562][T29205] vxcan1 speed is unknown, defaulting to 1000 [ 1890.777584][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1891.305819][ T29] audit: type=1400 audit(1737100875.051:9805): avc: denied { open } for pid=29184 comm="syz.5.6194" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1891.585983][ T29] audit: type=1400 audit(1737100875.098:9806): avc: denied { ioctl } for pid=29184 comm="syz.5.6194" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x4b40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1891.611176][ C0] vkms_vblank_simulate: vblank timer overrun [ 1891.622506][T18192] usb 6-1: USB disconnect, device number 4 [ 1891.889408][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1891.889859][T19740] Bluetooth: hci0: unexpected event 0x30 length: 17 > 3 [ 1893.001243][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1894.123699][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1894.265531][T29223] vxcan1 speed is unknown, defaulting to 1000 [ 1895.054266][T19740] Bluetooth: hci0: command 0x0405 tx timeout [ 1895.235636][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1895.871967][T29232] vxcan1 speed is unknown, defaulting to 1000 [ 1896.283364][T18192] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1896.336699][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1896.664853][T18192] usb 6-1: Using ep0 maxpacket: 32 [ 1897.324381][T18192] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1897.397362][T18192] usb 6-1: config 0 has no interface number 0 [ 1897.448543][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1897.609095][T18192] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1898.025986][ T29] audit: type=1400 audit(1737100881.243:9807): avc: denied { getopt } for pid=29239 comm="syz.3.6208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1898.560447][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1899.294181][T18192] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1899.303288][T18192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.321564][T18192] usb 6-1: Product: syz [ 1899.665067][T18192] usb 6-1: Manufacturer: syz [ 1899.669752][T18192] usb 6-1: SerialNumber: syz [ 1899.674501][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1899.693949][T18192] usb 6-1: config 0 descriptor?? [ 1899.865379][T18192] smsc75xx v1.0.0 [ 1900.784058][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1901.895831][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1902.007531][ T29] audit: type=1400 audit(1737100885.134:9808): avc: denied { read write } for pid=29266 comm="syz.0.6213" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1902.122305][T29242] team0 (unregistering): Port device team_slave_0 removed [ 1902.146663][T29242] team0 (unregistering): Port device team_slave_1 removed [ 1902.173624][ T29] audit: type=1400 audit(1737100885.134:9809): avc: denied { open } for pid=29266 comm="syz.0.6213" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1902.216715][T29271] vxcan1 speed is unknown, defaulting to 1000 [ 1902.574326][T18192] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1903.007638][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1903.062418][T18192] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1903.077779][T18192] usb 6-1: USB disconnect, device number 5 [ 1903.942980][ T5815] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1904.102297][T29293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6220'. [ 1904.113008][T29293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6220'. [ 1904.119660][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1904.124277][T29293] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6220'. [ 1904.165835][ T5815] usb 7-1: Using ep0 maxpacket: 32 [ 1904.175589][ T5815] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1904.186199][ T5815] usb 7-1: config 0 has no interface number 0 [ 1904.194969][ T5815] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1904.204949][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.213313][ T5815] usb 7-1: Product: syz [ 1904.218807][ T5815] usb 7-1: Manufacturer: syz [ 1904.223404][ T5815] usb 7-1: SerialNumber: syz [ 1904.238615][ T5815] usb 7-1: config 0 descriptor?? [ 1904.294381][T29293] input: syz0 as /devices/virtual/input/input115 [ 1905.105290][T29300] vxcan1 speed is unknown, defaulting to 1000 [ 1905.231312][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1905.341710][ T5815] radio-si470x 7-1:0.35: DeviceID=0x2512 ChipID=0x8a07 [ 1905.355326][ T5815] radio-si470x 7-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 7. [ 1905.493056][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1905.552387][T29283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1905.561322][T29283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1905.869749][T29307] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1906.147281][ T5815] radio-si470x 7-1:0.35: si470x_get_report: usb_control_msg returned -110 [ 1906.343134][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1906.379875][ T5815] radio-si470x 7-1:0.35: si470x_get_scratch: si470x_get_report returned -110 [ 1906.631929][T21483] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1906.826408][T21483] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.864697][ T5815] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 1907.070511][ T5815] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 1907.283574][ T5815] usb 7-1: USB disconnect, device number 73 [ 1907.386622][T21483] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1907.454925][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1907.504200][T21483] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1907.558643][T21483] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1907.647700][T21483] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1907.663659][T21483] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1907.680718][T21483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1907.700297][T21483] usb 6-1: Product: syz [ 1907.709236][T21483] usb 6-1: Manufacturer: syz [ 1907.718680][T21483] usb 6-1: SerialNumber: syz [ 1907.744796][T21483] usb 6-1: config 0 descriptor?? [ 1907.867201][T29321] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6227'. [ 1908.061438][T21483] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1908.107397][T21483] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1908.577395][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1908.668712][T21483] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1908.684343][T21483] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1908.704676][T21483] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1908.725702][T21483] usb 6-1: USB disconnect, device number 6 [ 1908.948120][T29330] x_tables: duplicate underflow at hook 1 [ 1909.005776][ T29] audit: type=1400 audit(1737100891.635:9810): avc: denied { ioctl } for pid=29324 comm="syz.0.6229" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=118091 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1909.412022][T29323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1909.588983][T29336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6232'. [ 1909.609513][T29336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6232'. [ 1909.629887][T29336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6232'. [ 1909.678595][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1909.997286][T29336] input: syz0 as /devices/virtual/input/input116 [ 1910.330871][T29349] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1910.790413][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1910.980719][T29346] syz.5.6234: attempt to access beyond end of device [ 1910.980719][T29346] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1911.034765][T29346] syz.5.6234: attempt to access beyond end of device [ 1911.034765][T29346] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1911.133735][T29346] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1911.289216][T29346] syz.5.6234: attempt to access beyond end of device [ 1911.289216][T29346] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1911.302142][T29346] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1911.312203][T29346] syz.5.6234: attempt to access beyond end of device [ 1911.312203][T29346] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1911.325446][T29346] syz.5.6234: attempt to access beyond end of device [ 1911.325446][T29346] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1911.339593][T29346] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1911.902216][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1912.373169][T29346] syz.5.6234: attempt to access beyond end of device [ 1912.373169][T29346] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1912.412357][T29359] loop9: detected capacity change from 0 to 7 [ 1912.446330][T29346] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1912.469161][T29359] Dev loop9: unable to read RDB block 7 [ 1912.478980][T29346] syz.5.6234: attempt to access beyond end of device [ 1912.478980][T29346] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1912.486030][T29359] loop9: unable to read partition table [ 1912.502494][ T29] audit: type=1400 audit(1737100894.947:9811): avc: denied { getopt } for pid=29360 comm="syz.2.6238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1912.504523][T29346] syz.5.6234: attempt to access beyond end of device [ 1912.504523][T29346] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1912.536585][T29346] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1912.548197][T29346] syz.5.6234: attempt to access beyond end of device [ 1912.548197][T29346] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1912.549177][T29359] loop9: partition table beyond EOD, truncated [ 1912.569138][T29346] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1912.589028][T29359] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 1912.609476][T29346] syz.5.6234: attempt to access beyond end of device [ 1912.609476][T29346] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1912.624660][T29346] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1912.800727][T29183] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1913.006824][T29346] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1913.016663][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1913.024352][T29346] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1913.208482][T29183] usb 3-1: Using ep0 maxpacket: 16 [ 1913.232280][T29183] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1913.444470][T29372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6240'. [ 1913.464632][ T29] audit: type=1400 audit(1737100895.845:9812): avc: denied { create } for pid=29368 comm="syz.3.6240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1913.489954][T29183] usb 3-1: can't read configurations, error -61 [ 1913.604837][T29370] syz.3.6240 (29370): drop_caches: 2 [ 1913.611876][T29370] syz.3.6240 (29370): drop_caches: 2 [ 1913.774043][T29183] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1913.944259][T29183] usb 3-1: Using ep0 maxpacket: 16 [ 1913.962715][T29183] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1913.971191][T29183] usb 3-1: can't read configurations, error -61 [ 1913.978943][T29183] usb usb3-port1: attempt power cycle [ 1914.122406][T29382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6242'. [ 1914.131414][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1914.161481][T29382] netlink: 'syz.0.6242': attribute type 1 has an invalid length. [ 1914.169271][T29382] netlink: 'syz.0.6242': attribute type 2 has an invalid length. [ 1914.801144][ T29] audit: type=1400 audit(1737100896.462:9813): avc: denied { bind } for pid=29381 comm="syz.0.6242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1914.824442][ T29] audit: type=1400 audit(1737100896.518:9814): avc: denied { ioctl } for pid=29381 comm="syz.0.6242" path="socket:[117467]" dev="sockfs" ino=117467 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1914.877910][ T29] audit: type=1400 audit(1737100896.518:9815): avc: denied { read } for pid=29381 comm="syz.0.6242" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1914.913317][ T29] audit: type=1400 audit(1737100896.518:9816): avc: denied { open } for pid=29381 comm="syz.0.6242" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1915.138657][ T29] audit: type=1400 audit(1737100897.238:9817): avc: denied { connect } for pid=29388 comm="syz.0.6245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1915.204019][T29183] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1915.237770][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1915.249493][T29183] usb 3-1: Using ep0 maxpacket: 16 [ 1915.256575][T29183] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1915.264577][T29183] usb 3-1: can't read configurations, error -61 [ 1915.298587][ T29] audit: type=1400 audit(1737100897.557:9818): avc: denied { write } for pid=29388 comm="syz.0.6245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1915.462516][T29183] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1915.470199][T26406] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1915.495674][T29183] usb 3-1: Using ep0 maxpacket: 16 [ 1915.503640][T29183] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1915.511498][T29183] usb 3-1: can't read configurations, error -61 [ 1915.518413][T29183] usb usb3-port1: unable to enumerate USB device [ 1916.349710][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1916.911351][T29414] sctp: [Deprecated]: syz.2.6253 (pid 29414) Use of int in max_burst socket option. [ 1916.911351][T29414] Use struct sctp_assoc_value instead [ 1917.482673][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1917.622197][T29424] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1917.839710][T29430] FAULT_INJECTION: forcing a failure. [ 1917.839710][T29430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1917.853556][T29430] CPU: 0 UID: 0 PID: 29430 Comm: syz.6.6257 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 1917.864330][T29430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1917.874365][T29430] Call Trace: [ 1917.877637][T29430] [ 1917.880554][T29430] dump_stack_lvl+0x16c/0x1f0 [ 1917.885218][T29430] should_fail_ex+0x497/0x5b0 [ 1917.889894][T29430] _copy_to_user+0x32/0xd0 [ 1917.894286][T29430] simple_read_from_buffer+0xd0/0x160 [ 1917.899647][T29430] proc_fail_nth_read+0x198/0x270 [ 1917.904652][T29430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1917.910176][T29430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1917.915732][T29430] vfs_read+0x1df/0xbe0 [ 1917.919900][T29430] ? __fget_files+0x1fc/0x3a0 [ 1917.924580][T29430] ? __pfx___mutex_lock+0x10/0x10 [ 1917.929627][T29430] ? __pfx_vfs_read+0x10/0x10 [ 1917.934332][T29430] ? __fget_files+0x206/0x3a0 [ 1917.939033][T29430] ksys_read+0x12b/0x250 [ 1917.943376][T29430] ? __pfx_ksys_read+0x10/0x10 [ 1917.948163][T29430] do_syscall_64+0xcd/0x250 [ 1917.952694][T29430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.958612][T29430] RIP: 0033:0x7f111078473c [ 1917.963038][T29430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1917.982667][T29430] RSP: 002b:00007f1111636030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1917.991108][T29430] RAX: ffffffffffffffda RBX: 00007f1110976080 RCX: 00007f111078473c [ 1917.999095][T29430] RDX: 000000000000000f RSI: 00007f11116360a0 RDI: 0000000000000005 [ 1918.007078][T29430] RBP: 00007f1111636090 R08: 0000000000000000 R09: 0000000000000000 [ 1918.015058][T29430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1918.023039][T29430] R13: 0000000000000000 R14: 00007f1110976080 R15: 00007ffcd3297508 [ 1918.031035][T29430] [ 1918.573171][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1919.668268][T29443] loop9: detected capacity change from 0 to 7 [ 1919.685010][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1919.863941][T29443] Dev loop9: unable to read RDB block 7 [ 1919.874044][T29443] loop9: unable to read partition table [ 1919.898752][T29443] loop9: partition table beyond EOD, truncated [ 1920.484370][T29443] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 1920.796806][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1921.910029][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1921.940927][T29466] overlayfs: failed to resolve './file0': -2 [ 1922.021261][ T29] audit: type=1400 audit(1737100903.768:9819): avc: denied { watch watch_reads } for pid=29459 comm="syz.5.6264" path="/162/bus" dev="tmpfs" ino=895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1922.569592][ T29] audit: type=1400 audit(1737100904.357:9820): avc: denied { connect } for pid=29478 comm="syz.6.6269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1922.663029][ T29] audit: type=1400 audit(1737100904.450:9821): avc: denied { read } for pid=29478 comm="syz.6.6269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1922.689264][T29482] team_slave_0: entered promiscuous mode [ 1922.750290][ T29] audit: type=1400 audit(1737100904.469:9822): avc: denied { write } for pid=29478 comm="syz.6.6269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1922.750910][T29482] team_slave_0: entered allmulticast mode [ 1922.843891][T18192] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1923.020479][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1923.170127][T18192] usb 3-1: Using ep0 maxpacket: 16 [ 1923.176838][T18192] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1923.193464][T18192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1923.219780][T18192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1923.231658][T18192] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1923.251176][T18192] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1923.260576][T18192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.271553][T18192] usb 3-1: config 0 descriptor?? [ 1923.287906][T29477] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1923.297526][T18192] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input117 [ 1923.313261][T29489] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1924.132303][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1924.586833][T29500] loop9: detected capacity change from 0 to 7 [ 1924.612781][T29500] Dev loop9: unable to read RDB block 7 [ 1924.623071][T29500] loop9: unable to read partition table [ 1924.638620][T29500] loop9: partition table beyond EOD, truncated [ 1924.653182][T29500] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 1924.667238][T29507] input: syz1 as /devices/virtual/input/input118 [ 1925.055836][T21483] usb 3-1: USB disconnect, device number 69 [ 1925.166954][ T29] audit: type=1400 audit(1737100906.789:9823): avc: denied { create } for pid=29509 comm="syz.3.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1925.244564][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1925.422358][T29516] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 1925.485803][ T29] audit: type=1400 audit(1737100906.789:9824): avc: denied { connect } for pid=29509 comm="syz.3.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1925.511356][T18192] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1925.599820][ T29] audit: type=1400 audit(1737100906.798:9825): avc: denied { setopt } for pid=29509 comm="syz.3.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1925.779481][T18192] usb 4-1: Using ep0 maxpacket: 8 [ 1925.795020][T18192] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1925.858134][T18192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.289047][T18192] usb 4-1: Product: syz [ 1926.355946][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1926.612829][T18192] usb 4-1: Manufacturer: syz [ 1926.617478][T18192] usb 4-1: SerialNumber: syz [ 1926.658154][T18192] usb 4-1: config 0 descriptor?? [ 1926.750634][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6283'. [ 1927.438326][T18192] usb read operation failed. (-71) [ 1927.443813][T18192] usb write operation failed. (-71) [ 1927.450304][T18192] usb write operation failed. (-71) [ 1927.455787][T18192] usb write operation failed. (-71) [ 1927.461092][T18192] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1927.468438][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1927.480182][T18192] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1927.489927][T18192] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1928.272778][T29552] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1928.579648][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1928.666583][T29566] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1929.243773][T29183] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1929.410942][T29583] vxcan1 speed is unknown, defaulting to 1000 [ 1929.691403][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1929.889318][T29183] usb 7-1: Using ep0 maxpacket: 16 [ 1929.912232][T29183] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1929.988794][T29183] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1930.004974][T29183] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1930.016756][T29183] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1930.029779][T29183] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1930.041946][T29183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.053705][T29183] usb 7-1: config 0 descriptor?? [ 1930.070758][T29572] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1930.116355][T29588] loop9: detected capacity change from 0 to 7 [ 1930.118250][T29183] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input119 [ 1930.137620][T29588] Dev loop9: unable to read RDB block 7 [ 1930.152365][T29588] loop9: unable to read partition table [ 1930.158309][T29588] loop9: partition table beyond EOD, truncated [ 1930.214892][T29588] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 1930.803333][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1931.325232][ T29] audit: type=1400 audit(1737100912.551:9826): avc: denied { ioctl } for pid=29598 comm="syz.2.6296" path="socket:[119335]" dev="sockfs" ino=119335 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1931.357343][ T29] audit: type=1400 audit(1737100912.551:9827): avc: denied { getopt } for pid=29598 comm="syz.2.6296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1931.377610][ T29] audit: type=1400 audit(1737100912.551:9828): avc: denied { accept } for pid=29598 comm="syz.2.6296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1931.683568][ T29] audit: type=1400 audit(1737100912.888:9829): avc: denied { unmount } for pid=23772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1931.814467][T12340] usb 7-1: USB disconnect, device number 74 [ 1931.867848][ T29] audit: type=1400 audit(1737100913.065:9830): avc: denied { create } for pid=29603 comm="syz.0.6298" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1931.915079][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1931.919234][ T29] audit: type=1400 audit(1737100913.094:9831): avc: denied { write } for pid=29603 comm="syz.0.6298" name="file0" dev="tmpfs" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1931.945353][ T29] audit: type=1400 audit(1737100913.094:9832): avc: denied { open } for pid=29603 comm="syz.0.6298" path="/295/file0" dev="tmpfs" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1932.469980][T29617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6302'. [ 1932.604180][T29624] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1933.027246][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1933.707793][ T29] audit: type=1400 audit(1737100914.777:9833): avc: denied { ioctl } for pid=29637 comm="syz.6.6307" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1933.733259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1933.739854][ T29] audit: type=1400 audit(1737100914.777:9834): avc: denied { set_context_mgr } for pid=29637 comm="syz.6.6307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1933.762129][ T29] audit: type=1400 audit(1737100914.815:9835): avc: denied { map } for pid=29637 comm="syz.6.6307" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1933.786015][ C0] vkms_vblank_simulate: vblank timer overrun [ 1934.138704][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1934.548269][ T5815] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1934.726909][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 1934.792865][ T5815] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 1934.829777][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.848127][ T5815] usb 3-1: Product: syz [ 1934.852394][ T5815] usb 3-1: Manufacturer: syz [ 1934.861170][ T5815] usb 3-1: SerialNumber: syz [ 1934.871124][ T5815] usb 3-1: config 0 descriptor?? [ 1934.888356][ T5815] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 1935.176113][T29183] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1935.250557][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1935.430477][T29659] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6308'. [ 1935.717263][T28706] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1936.148718][T28706] usb 7-1: Using ep0 maxpacket: 16 [ 1936.156072][T28706] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1936.169602][T29183] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1936.170289][T28706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1936.362356][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1936.748010][T29669] vxcan1 speed is unknown, defaulting to 1000 [ 1937.184214][T29183] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1937.185088][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1937.185100][ T29] audit: type=1400 audit(1737100917.163:9841): avc: denied { read } for pid=29664 comm="syz.3.6315" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1937.225761][T29183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1937.225792][T29183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1937.225814][T29183] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1937.230413][T29183] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1937.418812][T21483] usb 3-1: USB disconnect, device number 70 [ 1937.425161][T28706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1937.449095][T29183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1937.457310][T29183] usb 6-1: Product: syz [ 1937.461612][T29183] usb 6-1: Manufacturer: syz [ 1937.467215][T29183] usb 6-1: SerialNumber: syz [ 1937.473813][ T29] audit: type=1400 audit(1737100917.172:9842): avc: denied { open } for pid=29664 comm="syz.3.6315" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1937.497785][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1937.507461][T29183] usb 6-1: config 0 descriptor?? [ 1937.516521][T28706] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1937.528955][ T29] audit: type=1400 audit(1737100917.181:9843): avc: denied { ioctl } for pid=29664 comm="syz.3.6315" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1937.536321][T29674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6316'. [ 1937.568722][T28706] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1937.571311][ T29] audit: type=1400 audit(1737100917.181:9844): avc: denied { connect } for pid=29664 comm="syz.3.6315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1937.578756][T29675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6317'. [ 1937.607525][T28706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.608369][T29674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6316'. [ 1937.617278][T28706] usb 7-1: config 0 descriptor?? [ 1937.630215][T29674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6316'. [ 1937.645055][T29675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.654364][T29675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.744369][T29655] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1937.760665][T29183] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1937.888948][T29183] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1937.907599][T28706] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input121 [ 1938.085794][T29674] input: syz0 as /devices/virtual/input/input122 [ 1938.460017][T29183] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1938.521943][T29183] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1938.530770][T29183] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1938.572987][ T25] usb 7-1: USB disconnect, device number 75 [ 1938.585984][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1938.606713][T29183] usb 6-1: USB disconnect, device number 7 [ 1938.710527][T29686] Cannot find add_set index 2 as target [ 1938.737057][T29686] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1938.853521][T29690] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1939.697831][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1940.348113][ T29] audit: type=1400 audit(1737100920.979:9845): avc: denied { create } for pid=29711 comm="syz.2.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1940.809873][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1941.001662][ T29] audit: type=1400 audit(1737100921.484:9846): avc: denied { ioctl } for pid=29711 comm="syz.2.6328" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1941.396756][T29726] bio_check_eod: 2 callbacks suppressed [ 1941.396773][T29726] syz.3.6330: attempt to access beyond end of device [ 1941.396773][T29726] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1941.405955][ T29] audit: type=1400 audit(1737100921.512:9847): avc: denied { write } for pid=29711 comm="syz.2.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1941.416054][T29726] syz.3.6330: attempt to access beyond end of device [ 1941.416054][T29726] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1941.448639][T29726] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1941.458269][T29726] syz.3.6330: attempt to access beyond end of device [ 1941.458269][T29726] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1941.471305][T29726] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1941.481537][T29726] syz.3.6330: attempt to access beyond end of device [ 1941.481537][T29726] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1941.494533][T29726] syz.3.6330: attempt to access beyond end of device [ 1941.494533][T29726] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1941.508194][T29726] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1941.517832][T29726] syz.3.6330: attempt to access beyond end of device [ 1941.517832][T29726] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1941.530878][T29726] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1941.540963][T29726] syz.3.6330: attempt to access beyond end of device [ 1941.540963][T29726] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1941.553933][T29726] syz.3.6330: attempt to access beyond end of device [ 1941.553933][T29726] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1941.566983][T29726] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1941.576855][T29726] syz.3.6330: attempt to access beyond end of device [ 1941.576855][T29726] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1941.590096][T29726] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1941.599823][T29726] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1941.600307][ T29] audit: type=1400 audit(1737100922.073:9848): avc: denied { write } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1941.647133][ T29] audit: type=1400 audit(1737100922.073:9849): avc: denied { remove_name } for pid=5170 comm="syslogd" name="messages" dev="tmpfs" ino=21 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1941.680384][ T29] audit: type=1400 audit(1737100922.073:9850): avc: denied { rename } for pid=5170 comm="syslogd" name="messages" dev="tmpfs" ino=21 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1941.791739][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1941.921587][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1943.033517][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1944.145254][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1944.224239][T29753] 9pnet_fd: Insufficient options for proto=fd [ 1944.305792][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1944.305816][ T29] audit: type=1400 audit(1737100924.692:9854): avc: denied { ioctl } for pid=29755 comm="syz.0.6337" path="socket:[120162]" dev="sockfs" ino=120162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1944.423286][ T29] audit: type=1400 audit(1737100924.692:9855): avc: denied { setopt } for pid=29755 comm="syz.0.6337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1944.543207][ T29] audit: type=1400 audit(1737100924.730:9856): avc: denied { ioctl } for pid=29755 comm="syz.0.6337" path="/dev/sg0" dev="devtmpfs" ino=737 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1944.567082][T29774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6340'. [ 1944.643125][T29773] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1944.764110][ T29] audit: type=1400 audit(1737100924.739:9857): avc: denied { map } for pid=29762 comm="syz.6.6339" path="socket:[120173]" dev="sockfs" ino=120173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1944.787430][ C1] vkms_vblank_simulate: vblank timer overrun [ 1944.967874][T29782] vxcan1 speed is unknown, defaulting to 1000 [ 1945.256922][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1945.559787][T29807] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6343'. [ 1945.937625][T29813] loop9: detected capacity change from 0 to 7 [ 1945.984547][T29813] Dev loop9: unable to read RDB block 7 [ 1946.004815][T29813] loop9: unable to read partition table [ 1946.048501][T29813] loop9: partition table beyond EOD, truncated [ 1946.072128][T29813] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 1946.368815][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1946.764369][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1946.885982][T29835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6349'. [ 1946.936822][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1947.390077][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1947.415572][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1947.454954][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1947.480576][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1947.517628][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1947.557844][ T8] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1947.587028][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.624723][ T8] usb 6-1: config 0 descriptor?? [ 1947.631129][T29828] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1947.649526][ T8] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input123 [ 1948.509657][T29864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6355'. [ 1948.592468][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1948.742751][ T29] audit: type=1400 audit(1737100928.836:9858): avc: denied { unmount } for pid=28561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1948.821359][T29878] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1948.897316][T29886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6359'. [ 1949.073527][T29183] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1949.264009][T29894] syz.0.6361: attempt to access beyond end of device [ 1949.264009][T29894] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1949.284615][ T5897] usb 6-1: USB disconnect, device number 9 [ 1949.303248][T29894] syz.0.6361: attempt to access beyond end of device [ 1949.303248][T29894] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1949.325848][T29894] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1949.346332][T29894] syz.0.6361: attempt to access beyond end of device [ 1949.346332][T29894] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1949.361105][T29894] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1949.379021][T29183] usb 7-1: Using ep0 maxpacket: 32 [ 1949.478737][T29183] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1949.487548][T29183] usb 7-1: config 0 has no interface number 0 [ 1949.493834][T29183] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1949.502493][T29183] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1949.511544][T29183] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.704224][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1950.082271][T29183] usb 7-1: Product: syz [ 1950.106263][T29183] usb 7-1: Manufacturer: syz [ 1950.111225][T29183] usb 7-1: SerialNumber: syz [ 1950.123634][T29183] usb 7-1: config 0 descriptor?? [ 1950.138665][T29183] smsc75xx v1.0.0 [ 1950.171296][T29894] syz.0.6361: attempt to access beyond end of device [ 1950.171296][T29894] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1950.207029][T29894] syz.0.6361: attempt to access beyond end of device [ 1950.207029][T29894] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1950.233517][T29894] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1950.313708][T29894] syz.0.6361: attempt to access beyond end of device [ 1950.313708][T29894] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1950.337934][T29894] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1950.500116][T29894] syz.0.6361: attempt to access beyond end of device [ 1950.500116][T29894] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1950.816080][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1951.056131][T29894] syz.0.6361: attempt to access beyond end of device [ 1951.056131][T29894] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1951.092955][T29894] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1951.107512][T29894] syz.0.6361: attempt to access beyond end of device [ 1951.107512][T29894] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1951.120924][T29894] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1951.132846][T29894] syz.0.6361: attempt to access beyond end of device [ 1951.132846][T29894] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1951.273854][T29894] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1951.284395][T29894] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1951.384335][T29894] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1951.565309][T29928] fuse: Unknown parameter 'çroup_id' [ 1951.927868][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1951.956393][T29183] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1951.968498][T29183] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1951.988866][T29183] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1952.011789][T29183] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1952.048173][T29183] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1952.084029][T29183] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1952.106624][T29183] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1952.160966][T29183] usb 7-1: USB disconnect, device number 76 [ 1952.601541][ T29] audit: type=1400 audit(1737100932.428:9859): avc: denied { bind } for pid=29945 comm="syz.3.6370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1952.610686][T29947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29947 comm=syz.3.6370 [ 1953.039731][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1953.339283][T29183] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1953.730225][T29971] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1953.829074][T29183] usb 3-1: device descriptor read/64, error -71 [ 1953.928900][T29973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6369'. [ 1954.132439][T29183] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1954.151526][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1954.347028][T29183] usb 3-1: device descriptor read/64, error -71 [ 1954.761001][T29183] usb usb3-port1: attempt power cycle [ 1954.985164][ T29] audit: type=1400 audit(1737100934.683:9860): avc: denied { ioctl } for pid=29986 comm="syz.5.6378" path="/186/file0" dev="tmpfs" ino=1028 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1955.089510][ T29] audit: type=1400 audit(1737100934.785:9861): avc: denied { getopt } for pid=29988 comm="syz.3.6379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1955.137797][T29183] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1955.168251][T29183] usb 3-1: device descriptor read/8, error -71 [ 1955.185034][T29994] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6380'. [ 1955.263462][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1955.268871][ T29] audit: type=1400 audit(1737100934.954:9862): avc: denied { bind } for pid=29998 comm="syz.3.6381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1955.315529][ T29] audit: type=1400 audit(1737100934.954:9863): avc: denied { listen } for pid=29998 comm="syz.3.6381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1955.335039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1955.452988][ T29] audit: type=1400 audit(1737100934.954:9864): avc: denied { append } for pid=29998 comm="syz.3.6381" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1955.487958][T29183] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1955.532668][T29183] usb 3-1: device descriptor read/8, error -71 [ 1955.679078][T26406] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1955.697719][ T29] audit: type=1400 audit(1737100935.234:9865): avc: denied { read } for pid=29998 comm="syz.3.6381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1955.851675][T26406] usb 6-1: Using ep0 maxpacket: 32 [ 1956.078808][T26406] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1956.101832][T26406] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1956.115568][T26406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.164442][T29183] usb usb3-port1: unable to enumerate USB device [ 1956.182818][T26406] usb 6-1: Product: syz [ 1956.197889][T26406] usb 6-1: Manufacturer: syz [ 1956.204905][T26406] usb 6-1: SerialNumber: syz [ 1956.231669][T26406] usb 6-1: config 0 descriptor?? [ 1956.243849][T26406] usb 6-1: no audio or video endpoints found [ 1956.375247][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1956.453436][T30018] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1956.907850][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6380'. [ 1957.487168][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1957.797581][T30028] vxcan1 speed is unknown, defaulting to 1000 [ 1958.491759][T12340] usb 6-1: USB disconnect, device number 10 [ 1958.514233][T30053] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6387'. [ 1958.598823][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1958.709088][T30060] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1959.011773][T30066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6389'. [ 1959.629044][T30068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6388'. [ 1959.684442][T30068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6388'. [ 1959.705503][T30064] overlayfs: disabling nfs_export due to verity=on [ 1959.710664][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1959.745731][T30068] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6388'. [ 1959.807820][T30068] input: syz0 as /devices/virtual/input/input124 [ 1960.424069][T30084] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1960.822466][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1961.196630][ T29] audit: type=1400 audit(1737100940.388:9866): avc: denied { ioctl } for pid=30080 comm="syz.3.6393" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1961.934305][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1962.234690][ T29] audit: type=1400 audit(1737100941.474:9867): avc: denied { bind } for pid=30087 comm="syz.3.6395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1962.522641][ T29] audit: type=1400 audit(1737100941.483:9868): avc: denied { listen } for pid=30087 comm="syz.3.6395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1962.629709][ T29] audit: type=1326 audit(1737100941.764:9869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30087 comm="syz.3.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ddb85d29 code=0x7ffc0000 [ 1962.738920][ T29] audit: type=1326 audit(1737100941.764:9870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30087 comm="syz.3.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ddb85d29 code=0x7ffc0000 [ 1962.787960][T30093] bond0: entered promiscuous mode [ 1962.822807][T30093] bond_slave_0: entered promiscuous mode [ 1962.844018][T30093] bond_slave_1: entered promiscuous mode [ 1962.871830][T30093] bond0: entered allmulticast mode [ 1962.900686][T30093] bond_slave_0: entered allmulticast mode [ 1962.937447][T30093] bond_slave_1: entered allmulticast mode [ 1963.046117][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1963.739526][T30107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6394'. [ 1963.773011][T30107] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6394'. [ 1964.157969][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1964.907362][T30124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6405'. [ 1965.269933][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1965.378308][ T29] audit: type=1400 audit(1737100944.411:9871): avc: denied { ioctl } for pid=30130 comm="syz.6.6407" path="socket:[121870]" dev="sockfs" ino=121870 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1966.381853][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1966.528878][T30150] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1967.249468][ T29] audit: type=1400 audit(1737100946.160:9872): avc: denied { setopt } for pid=30163 comm="syz.3.6415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1967.277065][ T29] audit: type=1400 audit(1737100946.179:9873): avc: denied { lock } for pid=30163 comm="syz.3.6415" path="socket:[121920]" dev="sockfs" ino=121920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1967.366195][ T29] audit: type=1400 audit(1737100946.253:9874): avc: denied { accept } for pid=30163 comm="syz.3.6415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 1967.431522][ T29] audit: type=1326 audit(1737100946.319:9875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.0.6414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8cb85d29 code=0x7fc00000 [ 1967.493473][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1967.633158][ T29] audit: type=1400 audit(1737100946.497:9876): avc: denied { ioctl } for pid=30166 comm="syz.0.6417" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1968.006613][T19740] Bluetooth: hci4: command 0x0406 tx timeout [ 1968.315738][ T29] audit: type=1400 audit(1737100947.151:9877): avc: denied { getopt } for pid=30188 comm="syz.0.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1968.318077][T30189] x_tables: duplicate underflow at hook 2 [ 1968.605690][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1968.794005][ T5897] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1969.717076][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1969.999290][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 1970.007912][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1970.031161][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1970.040441][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.048912][ T5897] usb 3-1: Product: syz [ 1970.828899][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1971.082717][ T5897] usb 3-1: Manufacturer: syz [ 1971.096572][ T5897] usb 3-1: SerialNumber: syz [ 1971.177491][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1971.654840][ T5897] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1971.801341][ T5897] usb 3-1: USB disconnect, device number 75 [ 1971.940741][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1972.070818][T28706] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1972.240061][T28706] usb 7-1: Using ep0 maxpacket: 32 [ 1972.579172][T28706] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1972.610417][T28706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.648341][T29059] udevd[29059]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1972.648937][T28706] usb 7-1: config 0 descriptor?? [ 1972.834174][T28706] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1973.052547][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1973.462528][T30293] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1973.609023][T28706] gspca_nw80x: reg_r err -110 [ 1973.630568][T28706] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 1973.669791][T28706] usb 7-1: USB disconnect, device number 77 [ 1974.164341][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1974.709715][T28706] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1975.276183][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1975.383206][T28706] usb 6-1: Using ep0 maxpacket: 8 [ 1975.487246][T28706] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1975.498450][T28706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.508328][T28706] usb 6-1: Product: syz [ 1975.512751][T28706] usb 6-1: Manufacturer: syz [ 1975.517372][T28706] usb 6-1: SerialNumber: syz [ 1975.524415][T28706] usb 6-1: config 0 descriptor?? [ 1975.626569][T30324] FAULT_INJECTION: forcing a failure. [ 1975.626569][T30324] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.640742][T30324] CPU: 1 UID: 0 PID: 30324 Comm: syz.6.6439 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 1975.651524][T30324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1975.661570][T30324] Call Trace: [ 1975.664852][T30324] [ 1975.667778][T30324] dump_stack_lvl+0x16c/0x1f0 [ 1975.672472][T30324] should_fail_ex+0x497/0x5b0 [ 1975.677162][T30324] ? fs_reclaim_acquire+0xae/0x150 [ 1975.682263][T30324] should_failslab+0xc2/0x120 [ 1975.686945][T30324] __kmalloc_noprof+0xcb/0x510 [ 1975.691725][T30324] ? __get_fs_type+0x21/0x170 [ 1975.696426][T30324] tomoyo_encode2+0x100/0x3e0 [ 1975.701109][T30324] tomoyo_encode+0x29/0x50 [ 1975.705524][T30324] tomoyo_mount_acl+0x314/0x880 [ 1975.710386][T30324] ? hlock_class+0x4e/0x130 [ 1975.714902][T30324] ? __lock_acquire+0x15a9/0x3c40 [ 1975.719941][T30324] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1975.725310][T30324] ? __pfx___lock_acquire+0x10/0x10 [ 1975.730513][T30324] ? stack_trace_save+0x95/0xd0 [ 1975.735376][T30324] ? __pfx_lock_release+0x10/0x10 [ 1975.740414][T30324] ? trace_lock_acquire+0x14e/0x1f0 [ 1975.745614][T30324] ? tomoyo_mount_permission+0x149/0x420 [ 1975.751243][T30324] ? lock_acquire+0x2f/0xb0 [ 1975.755746][T30324] ? tomoyo_mount_permission+0x149/0x420 [ 1975.761376][T30324] tomoyo_mount_permission+0x16e/0x420 [ 1975.766817][T30324] ? tomoyo_mount_permission+0x149/0x420 [ 1975.772440][T30324] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1975.778428][T30324] ? get_current_fs_domain+0x184/0x1f0 [ 1975.783907][T30324] security_sb_mount+0x9b/0x260 [ 1975.788794][T30324] path_mount+0x129/0x1f10 [ 1975.793216][T30324] ? kmem_cache_free+0x152/0x4c0 [ 1975.798153][T30324] ? __pfx_path_mount+0x10/0x10 [ 1975.802999][T30324] ? putname+0x13c/0x180 [ 1975.807242][T30324] __x64_sys_mount+0x294/0x320 [ 1975.812006][T30324] ? __pfx___x64_sys_mount+0x10/0x10 [ 1975.817306][T30324] do_syscall_64+0xcd/0x250 [ 1975.821824][T30324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.827730][T30324] RIP: 0033:0x7f1110785d29 [ 1975.832131][T30324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1975.851749][T30324] RSP: 002b:00007f1111657038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1975.860174][T30324] RAX: ffffffffffffffda RBX: 00007f1110975fa0 RCX: 00007f1110785d29 [ 1975.868152][T30324] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 1975.876139][T30324] RBP: 00007f1111657090 R08: 0000000020000400 R09: 0000000000000000 [ 1975.884126][T30324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1975.892107][T30324] R13: 0000000000000000 R14: 00007f1110975fa0 R15: 00007ffcd3297508 [ 1975.900108][T30324] [ 1975.913982][T28706] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1975.981849][ T5815] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1976.229173][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1976.249558][ T5815] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1976.258638][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.388125][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1976.390121][T30336] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1976.404483][T30336] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1977.134383][T28706] usb write operation failed. (-71) [ 1977.177149][T28706] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1977.211881][T28706] dvbdev: DVB: registering new adapter (Terratec H7) [ 1977.219684][ T5815] usb 3-1: config 0 descriptor?? [ 1977.236812][T28706] usb 6-1: media controller created [ 1977.241938][ T5815] pwc: Askey VC010 type 2 USB webcam detected. [ 1977.258870][T28706] usb read operation failed. (-71) [ 1977.282973][T28706] usb write operation failed. (-71) [ 1977.306274][T28706] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1977.337261][T28706] usb 6-1: USB disconnect, device number 11 [ 1977.360592][T29059] udevd[29059]: setting mode of /dev/bus/usb/006/011 to 020664 failed: No such file or directory [ 1977.397173][T29059] udevd[29059]: setting owner of /dev/bus/usb/006/011 to uid=0, gid=0 failed: No such file or directory [ 1977.499844][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1977.514422][T30347] xt_socket: unknown flags 0x50 [ 1977.916254][ T5815] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1978.045938][ T5815] pwc: recv_control_msg error -32 req 02 val 2700 [ 1978.053702][ T5815] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1978.072637][ T5815] pwc: recv_control_msg error -32 req 04 val 1000 [ 1978.135996][ T5815] pwc: recv_control_msg error -32 req 04 val 1300 [ 1978.157758][ T5815] pwc: recv_control_msg error -32 req 04 val 1400 [ 1978.175768][ T5815] pwc: recv_control_msg error -32 req 02 val 2000 [ 1978.191993][ T5815] pwc: recv_control_msg error -32 req 02 val 2100 [ 1978.222151][ T5815] pwc: recv_control_msg error -32 req 04 val 1500 [ 1978.251675][ T5815] pwc: recv_control_msg error -32 req 02 val 2500 [ 1978.318078][ T5815] pwc: recv_control_msg error -32 req 02 val 2400 [ 1978.611621][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1978.688587][ T5815] pwc: recv_control_msg error -71 req 02 val 2900 [ 1978.812499][ T5815] pwc: recv_control_msg error -71 req 02 val 2800 [ 1978.901194][ T5815] pwc: recv_control_msg error -71 req 04 val 1100 [ 1978.911465][ T5815] pwc: recv_control_msg error -71 req 04 val 1200 [ 1978.937565][ T5815] pwc: Registered as video103. [ 1978.957838][ T5815] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input126 [ 1978.998627][ T5815] usb 3-1: USB disconnect, device number 76 [ 1979.499826][T30395] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1979.723481][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1979.901864][ T29] audit: type=1400 audit(1737100957.983:9878): avc: denied { mount } for pid=30394 comm="syz.6.6450" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1980.835294][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1981.227259][T30422] FAULT_INJECTION: forcing a failure. [ 1981.227259][T30422] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.359096][T30422] CPU: 0 UID: 0 PID: 30422 Comm: syz.2.6454 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 1981.369906][T30422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1981.379965][T30422] Call Trace: [ 1981.383231][T30422] [ 1981.386149][T30422] dump_stack_lvl+0x16c/0x1f0 [ 1981.390820][T30422] should_fail_ex+0x497/0x5b0 [ 1981.395509][T30422] ? fs_reclaim_acquire+0xae/0x150 [ 1981.400607][T30422] should_failslab+0xc2/0x120 [ 1981.405274][T30422] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1981.411069][T30422] ? __alloc_skb+0x2b1/0x380 [ 1981.415657][T30422] __alloc_skb+0x2b1/0x380 [ 1981.420066][T30422] ? __pfx___alloc_skb+0x10/0x10 [ 1981.424997][T30422] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1981.430970][T30422] netlink_alloc_large_skb+0x69/0x130 [ 1981.436334][T30422] netlink_sendmsg+0x689/0xd70 [ 1981.441091][T30422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1981.446374][T30422] ____sys_sendmsg+0xaaf/0xc90 [ 1981.451130][T30422] ? copy_msghdr_from_user+0x10b/0x160 [ 1981.456574][T30422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1981.461856][T30422] ___sys_sendmsg+0x135/0x1e0 [ 1981.466530][T30422] ? __pfx____sys_sendmsg+0x10/0x10 [ 1981.471724][T30422] ? __pfx_lock_release+0x10/0x10 [ 1981.476735][T30422] ? trace_lock_acquire+0x14e/0x1f0 [ 1981.481928][T30422] ? __fget_files+0x206/0x3a0 [ 1981.486598][T30422] __sys_sendmsg+0x16e/0x220 [ 1981.491176][T30422] ? __pfx___sys_sendmsg+0x10/0x10 [ 1981.496283][T30422] do_syscall_64+0xcd/0x250 [ 1981.500783][T30422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1981.506667][T30422] RIP: 0033:0x7fe277185d29 [ 1981.511068][T30422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1981.530663][T30422] RSP: 002b:00007fe277efc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1981.539060][T30422] RAX: ffffffffffffffda RBX: 00007fe277375fa0 RCX: 00007fe277185d29 [ 1981.547016][T30422] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1981.554970][T30422] RBP: 00007fe277efc090 R08: 0000000000000000 R09: 0000000000000000 [ 1981.562928][T30422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1981.570881][T30422] R13: 0000000000000000 R14: 00007fe277375fa0 R15: 00007ffc3a5b8278 [ 1981.578846][T30422] [ 1981.581951][ C0] vkms_vblank_simulate: vblank timer overrun [ 1981.836350][T30430] xt_TCPMSS: Only works on TCP SYN packets [ 1981.846297][T30430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56884 sclass=netlink_route_socket pid=30430 comm=syz.5.6455 [ 1981.947114][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1982.734989][T30448] overlayfs: overlapping lowerdir path [ 1982.775861][T30449] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1982.872294][T30448] overlayfs: failed to resolve './file1': -2 [ 1982.928746][ T29] audit: type=1400 audit(1737100960.790:9879): avc: denied { remount } for pid=30441 comm="syz.0.6458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1983.058915][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1983.348322][ T29] audit: type=1400 audit(1737100961.182:9880): avc: denied { unmount } for pid=21382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1983.423405][T30461] bpf: Bad value for 'uid' [ 1983.558534][T30463] vxcan1 speed is unknown, defaulting to 1000 [ 1984.170858][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1985.282579][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1985.348189][ T29] audit: type=1400 audit(1737100963.091:9881): avc: denied { write } for pid=30498 comm="syz.0.6467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1985.673641][ T29] audit: type=1400 audit(1737100963.296:9882): avc: denied { read } for pid=30498 comm="syz.0.6467" path="socket:[121695]" dev="sockfs" ino=121695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1986.394559][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1987.351738][ T29] audit: type=1400 audit(1737100964.961:9883): avc: denied { write } for pid=30515 comm="syz.3.6471" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1987.396497][T30517] trusted_key: encrypted_key: master key parameter is missing [ 1987.431053][T30517] sg_write: process 472 (syz.3.6471) changed security contexts after opening file descriptor, this is not allowed. [ 1987.506231][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1987.619036][ T29] audit: type=1400 audit(1737100965.214:9884): avc: denied { write } for pid=30515 comm="syz.3.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1988.618096][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1989.729915][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1990.031454][T30559] ebt_among: src integrity fail: 300 [ 1990.601217][T30567] vxcan1 speed is unknown, defaulting to 1000 [ 1990.841700][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1991.004407][T30563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6480'. [ 1991.015177][T30563] xt_connbytes: Forcing CT accounting to be enabled [ 1991.021855][T30563] Cannot find add_set index 0 as target [ 1991.118977][ T29] audit: type=1400 audit(1737100968.404:9885): avc: denied { connect } for pid=30562 comm="syz.2.6480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1991.656120][ T29] audit: type=1326 audit(1737100968.759:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ddb85d29 code=0x7ffc0000 [ 1991.880363][ T29] audit: type=1326 audit(1737100968.759:9887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ddb85d29 code=0x7ffc0000 [ 1991.909588][ T29] audit: type=1326 audit(1737100968.759:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe4ddb85d29 code=0x7ffc0000 [ 1991.953591][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1992.175460][ T29] audit: type=1326 audit(1737100968.759:9889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ddb85d29 code=0x7ffc0000 [ 1993.014405][ T29] audit: type=1326 audit(1737100968.759:9890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30594 comm="syz.3.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ddb85d29 code=0x7ffc0000 [ 1993.065617][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1993.070575][ T5897] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1993.097858][T28706] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1993.205647][T18192] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1993.341735][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 1993.348699][ T5897] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1993.357503][ T5897] usb 7-1: config 0 has no interface number 0 [ 1993.365578][ T5897] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1993.371992][T28706] usb 3-1: device descriptor read/64, error -71 [ 1993.374833][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.389579][ T5897] usb 7-1: Product: syz [ 1993.394280][ T5897] usb 7-1: Manufacturer: syz [ 1993.399202][ T5897] usb 7-1: SerialNumber: syz [ 1993.422952][T18192] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1993.436595][ T5897] usb 7-1: config 0 descriptor?? [ 1993.540631][T18192] usb 4-1: USB disconnect, device number 66 [ 1993.802499][T28706] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1994.059860][ T5897] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1994.177165][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1994.387373][T28706] usb 3-1: device descriptor read/64, error -71 [ 1994.483063][ T5897] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1994.494739][ T5897] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1995.026867][T28706] usb usb3-port1: attempt power cycle [ 1995.289180][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1995.530650][T28706] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1995.607582][T30611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.682794][T30611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.711027][T28706] usb 3-1: device descriptor read/8, error -71 [ 1996.400802][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1996.524634][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1996.524864][T18192] usb 7-1: USB disconnect, device number 78 [ 1996.712965][T18192] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1996.740936][T18192] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1996.755971][T18192] quatech2 7-1:0.51: device disconnected [ 1997.512662][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1997.528799][T30709] vxcan1 speed is unknown, defaulting to 1000 [ 1998.624477][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1998.944076][T30740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6504'. [ 1998.957640][ T29] audit: type=1400 audit(1737100975.821:9891): avc: denied { map } for pid=30737 comm="syz.2.6501" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1999.020935][T30740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6504'. [ 1999.033926][T30745] input: syz0 as /devices/virtual/input/input129 [ 1999.040770][T30740] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6504'. [ 1999.068307][ T29] audit: type=1400 audit(1737100975.868:9892): avc: denied { setopt } for pid=30743 comm="syz.3.6505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1999.178162][ T29] audit: type=1400 audit(1737100975.868:9893): avc: denied { write } for pid=30743 comm="syz.3.6505" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1999.574037][ T29] audit: type=1400 audit(1737100975.868:9894): avc: denied { open } for pid=30743 comm="syz.3.6505" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1999.736346][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2000.043440][T30770] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2000.848102][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2001.959999][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2002.363478][T30775] vxcan1 speed is unknown, defaulting to 1000 [ 2003.071942][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2003.125577][T29183] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 2003.447865][T29183] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.183590][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2004.190580][T29183] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2004.438964][T29183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2004.480176][T29183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2004.512573][T29183] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2004.602532][T29183] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2004.648968][T29183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2004.723816][T29183] usb 6-1: Product: syz [ 2004.767774][T29183] usb 6-1: Manufacturer: syz [ 2005.059514][ T29] audit: type=1326 audit(1737100981.518:9895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.6.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1110785d29 code=0x7fc00000 [ 2005.071709][T30846] syz.6.6517 (30846): drop_caches: 2 [ 2005.093824][T30846] syz.6.6517 (30846): drop_caches: 2 [ 2005.121733][T29183] usb 6-1: SerialNumber: syz [ 2005.168387][T29183] usb 6-1: config 0 descriptor?? [ 2005.199428][ T29] audit: type=1326 audit(1737100981.518:9896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.6.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1110785d29 code=0x7fc00000 [ 2005.260048][T30849] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6519'. [ 2005.295409][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2005.327565][ T29] audit: type=1326 audit(1737100981.518:9897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.6.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1110785d29 code=0x7fc00000 [ 2005.485543][T29183] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2005.492854][T29183] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2005.543479][ T29] audit: type=1326 audit(1737100981.518:9898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.6.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1110785d29 code=0x7fc00000 [ 2005.594971][ T29] audit: type=1326 audit(1737100981.518:9899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.6.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1110785d29 code=0x7fc00000 [ 2006.182962][T30862] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2006.407226][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2006.581976][T29183] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 2006.599899][T29183] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 2006.608729][T29183] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 2006.628645][ T29] audit: type=1326 audit(1737100981.518:9900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.6.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1110785d29 code=0x7fc00000 [ 2006.760769][T29183] usb 6-1: USB disconnect, device number 12 [ 2006.778043][ T29] audit: type=1326 audit(1737100981.518:9901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.6.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1110785d29 code=0x7fc00000 [ 2006.823689][ T29] audit: type=1326 audit(1737100981.518:9902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.6.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1110785d29 code=0x7fc00000 [ 2007.519043][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2007.549215][ T29] audit: type=1326 audit(1737100981.518:9903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.6.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1110785d29 code=0x7fc00000 [ 2007.580853][ T29] audit: type=1326 audit(1737100981.518:9904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30836 comm="syz.6.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1110785d29 code=0x7fc00000 [ 2008.630886][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2009.630433][T30918] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2009.742706][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2009.785935][T12340] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2010.318958][T30924] vxcan1 speed is unknown, defaulting to 1000 [ 2010.854580][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2010.886900][T12340] usb 4-1: Using ep0 maxpacket: 16 [ 2010.896868][T12340] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 2010.913898][T12340] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.927858][T12340] usb 4-1: config 0 has no interface number 0 [ 2010.936816][T12340] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 2010.948987][T12340] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 2010.961391][T12340] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2010.972780][T12340] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2010.986670][T12340] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 2010.996842][T12340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.013631][T12340] usb 4-1: config 0 descriptor?? [ 2011.056019][T30909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2011.084612][T12340] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2011.132506][T18192] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 2011.420449][T12340] usb 4-1: USB disconnect, device number 67 [ 2011.479970][T29057] udevd[29057]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2011.562124][T18192] usb 7-1: config index 0 descriptor too short (expected 63506, got 18) [ 2011.700291][T18192] usb 7-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 2011.715262][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 2011.715279][ T29] audit: type=1400 audit(1737100987.748:9966): avc: denied { ioctl } for pid=30965 comm="syz.0.6537" path="socket:[123268]" dev="sockfs" ino=123268 ioctlcmd=0x8b22 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2011.966517][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2012.319373][T18192] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.328531][T18192] usb 7-1: Product: syz [ 2012.415598][T18192] usb 7-1: Manufacturer: syz [ 2012.434163][T18192] usb 7-1: SerialNumber: syz [ 2012.832568][ T29] audit: type=1400 audit(1737100988.805:9967): avc: denied { read } for pid=31001 comm="syz.3.6540" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2012.858370][ T29] audit: type=1400 audit(1737100988.824:9968): avc: denied { open } for pid=31001 comm="syz.3.6540" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2012.944909][T31003] input: syz0 as /devices/virtual/input/input130 [ 2013.052370][T18192] usb 7-1: palm_os_4_probe - error -110 getting connection info [ 2013.068150][T18192] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 2013.078205][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2013.134307][T30996] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6539'. [ 2013.361273][T18192] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2013.455532][T18192] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2013.469556][ T29] audit: type=1400 audit(1737100989.385:9969): avc: denied { setopt } for pid=30995 comm="syz.5.6539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2013.533001][T31012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6542'. [ 2013.543268][T31012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6542'. [ 2013.569960][T31012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6542'. [ 2013.595246][T31012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6542'. [ 2014.189973][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2014.588056][T29183] usb 7-1: USB disconnect, device number 79 [ 2014.601872][T29183] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2014.633990][T29183] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2014.661333][T29183] visor 7-1:1.0: device disconnected [ 2015.179327][T31067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2015.301823][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2016.205944][T31092] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6554'. [ 2016.239377][T31095] vxcan1 speed is unknown, defaulting to 1000 [ 2016.319802][T31096] vxcan1 speed is unknown, defaulting to 1000 [ 2016.413643][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2016.840429][T31094] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2017.473448][T31156] FAULT_INJECTION: forcing a failure. [ 2017.473448][T31156] name failslab, interval 1, probability 0, space 0, times 0 [ 2017.525495][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2017.555911][T31156] CPU: 0 UID: 0 PID: 31156 Comm: syz.0.6557 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 2017.566723][T31156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2017.576797][T31156] Call Trace: [ 2017.580085][T31156] [ 2017.583016][T31156] dump_stack_lvl+0x16c/0x1f0 [ 2017.587714][T31156] should_fail_ex+0x497/0x5b0 [ 2017.592419][T31156] ? fs_reclaim_acquire+0xae/0x150 [ 2017.597548][T31156] should_failslab+0xc2/0x120 [ 2017.602251][T31156] __kmalloc_noprof+0xcb/0x510 [ 2017.607033][T31156] ? d_absolute_path+0x137/0x1b0 [ 2017.611985][T31156] ? rcu_is_watching+0x12/0xc0 [ 2017.616764][T31156] tomoyo_encode2+0x100/0x3e0 [ 2017.621458][T31156] tomoyo_encode+0x29/0x50 [ 2017.625874][T31156] tomoyo_realpath_from_path+0x19d/0x720 [ 2017.631501][T31156] tomoyo_path_number_perm+0x248/0x590 [ 2017.636967][T31156] ? tomoyo_path_number_perm+0x235/0x590 [ 2017.642593][T31156] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2017.648563][T31156] ? __pfx_lock_release+0x10/0x10 [ 2017.653567][T31156] ? trace_lock_acquire+0x14e/0x1f0 [ 2017.658760][T31156] ? lock_acquire+0x2f/0xb0 [ 2017.663245][T31156] ? __fget_files+0x40/0x3a0 [ 2017.667814][T31156] ? __fget_files+0x206/0x3a0 [ 2017.672467][T31156] security_file_ioctl+0x9b/0x240 [ 2017.677475][T31156] __x64_sys_ioctl+0xb7/0x200 [ 2017.682143][T31156] do_syscall_64+0xcd/0x250 [ 2017.686645][T31156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.692517][T31156] RIP: 0033:0x7f9c8cb85d29 [ 2017.696923][T31156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2017.716513][T31156] RSP: 002b:00007f9c8d911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2017.724902][T31156] RAX: ffffffffffffffda RBX: 00007f9c8cd75fa0 RCX: 00007f9c8cb85d29 [ 2017.732849][T31156] RDX: 0000000020000000 RSI: 0000000080047455 RDI: 0000000000000004 [ 2017.740794][T31156] RBP: 00007f9c8d911090 R08: 0000000000000000 R09: 0000000000000000 [ 2017.748742][T31156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2017.756686][T31156] R13: 0000000000000000 R14: 00007f9c8cd75fa0 R15: 00007fff8675e0d8 [ 2017.764647][T31156] [ 2017.815532][T31156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2018.119469][T29183] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 2018.285792][T29183] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2018.293367][T29183] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 2018.304710][T29183] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2018.316751][T29183] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2018.328352][T29183] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2018.340937][T29183] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2018.348461][T29183] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 2018.359991][T29183] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2018.371932][T29183] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2018.385212][T29183] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2018.398712][T29183] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2018.407563][T29183] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 2018.418872][T29183] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2018.432084][T29183] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2018.443805][T29183] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2018.462087][T29183] usb 6-1: string descriptor 0 read error: -22 [ 2018.469405][T29183] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2018.478649][T29183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.505843][T29183] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2018.637279][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2018.794668][T12340] usb 6-1: USB disconnect, device number 13 [ 2019.749154][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2020.860919][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2021.427891][T31219] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6567'. [ 2021.942753][T31241] syz.2.6571 (31241): drop_caches: 2 [ 2021.959710][T31241] syz.2.6571 (31241): drop_caches: 2 [ 2021.972891][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2023.084774][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2024.196426][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2024.710053][T31276] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2025.308217][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2026.217225][ T29] audit: type=1400 audit(1737101001.292:9970): avc: denied { setopt } for pid=31284 comm="syz.0.6581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2026.420064][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2026.490895][T31297] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6582'. [ 2026.762869][T31302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6585'. [ 2026.773987][ T29] audit: type=1400 audit(1737101001.844:9971): avc: denied { ioctl } for pid=31300 comm="syz.5.6585" path="socket:[124381]" dev="sockfs" ino=124381 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2027.531904][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2027.859819][T31312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6589'. [ 2027.870298][T31312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6589'. [ 2027.879487][T31312] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6589'. [ 2027.954211][T31312] input: syz0 as /devices/virtual/input/input131 [ 2028.643791][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2028.752208][T31333] input: syz1 as /devices/virtual/input/input132 [ 2029.755518][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2030.512530][ T29] audit: type=1400 audit(1737101005.333:9972): avc: denied { name_bind } for pid=31362 comm="syz.2.6597" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2030.533838][T21483] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 2030.771105][T21483] usb 7-1: Using ep0 maxpacket: 16 [ 2030.778128][T21483] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2030.785046][T31371] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2030.790283][T21483] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2030.822998][T21483] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.867411][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2031.353175][T21483] usb 7-1: Product: syz [ 2031.357395][T21483] usb 7-1: Manufacturer: syz [ 2031.362350][T21483] usb 7-1: SerialNumber: syz [ 2031.371414][T21483] usb 7-1: config 0 descriptor?? [ 2031.392138][T21483] hub 7-1:0.0: bad descriptor, ignoring hub [ 2031.398708][ T29] audit: type=1400 audit(1737101006.156:9973): avc: denied { wake_alarm } for pid=31373 comm="syz.5.6601" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2031.431346][T21483] hub 7-1:0.0: probe with driver hub failed with error -5 [ 2031.450644][T31378] x_tables: duplicate underflow at hook 3 [ 2031.452260][T21483] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input134 [ 2031.979165][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2033.091022][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2033.327446][T31421] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2033.652645][T31429] binder: 31423:31429 ioctl c018620c 20000140 returned -1 [ 2033.752495][T31429] bond_slave_1: invalid flags given to default FDB implementation [ 2033.978278][T12340] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2034.202788][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2035.112004][T12340] usb 6-1: Using ep0 maxpacket: 8 [ 2035.314820][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2036.162195][T12340] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2036.200727][T12340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.426459][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2037.262552][T12340] usb 6-1: Product: syz [ 2037.299209][T12340] usb 6-1: Manufacturer: syz [ 2037.538293][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2037.589320][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.720543][T12340] usb 6-1: SerialNumber: syz [ 2037.726819][T12340] usb 6-1: config 0 descriptor?? [ 2037.747301][T12340] usb 6-1: can't set config #0, error -71 [ 2037.763772][T12340] usb 6-1: USB disconnect, device number 14 [ 2038.650105][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2039.475523][ T29] audit: type=1400 audit(1737101013.724:9974): avc: denied { setopt } for pid=31462 comm="syz.0.6616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2039.497478][ T5173] usb 7-1: reset high-speed USB device number 80 using dummy_hcd [ 2039.761922][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2039.777919][T31480] vxcan1 speed is unknown, defaulting to 1000 [ 2039.780643][ T5173] usb 7-1: device reset changed ep0 maxpacket size! [ 2039.935630][ T5897] usb 7-1: USB disconnect, device number 80 [ 2040.599556][ T5897] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 2040.739642][ T29] audit: type=1400 audit(1737101014.902:9975): avc: denied { setopt } for pid=31511 comm="syz.0.6622" lport=53494 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2040.790876][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 2040.829817][ T5897] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2040.873855][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2041.076512][ T5897] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2041.086101][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2041.096262][ T5897] usb 7-1: Product: syz [ 2041.102260][ T5897] usb 7-1: Manufacturer: syz [ 2041.106876][ T5897] usb 7-1: SerialNumber: syz [ 2041.147736][ T5897] usb 7-1: config 0 descriptor?? [ 2041.164015][T31463] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2041.402185][T31554] (unnamed net_device) (uninitialized): up delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 2041.465712][T21483] usb 7-1: USB disconnect, device number 81 [ 2153.841322][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2153.848292][ C1] rcu: 0-...!: (1 GPs behind) idle=fa1c/1/0x4000000000000000 softirq=177792/177799 fqs=1 [ 2153.860113][ C1] rcu: (detected by 1, t=10506 jiffies, g=154821, q=1784 ncpus=2) [ 2153.868014][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2153.868039][ C0] NMI backtrace for cpu 0 [ 2153.868049][ C0] CPU: 0 UID: 0 PID: 5170 Comm: syslogd Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 2153.868065][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2153.868073][ C0] RIP: 0010:rcu_is_watching+0x24/0xc0 [ 2153.868097][ C0] Code: 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 9b 29 84 7e e8 ce 70 aa 09 48 c7 c3 68 7f 03 00 83 f8 07 89 c5 0f 87 82 00 00 00 <48> 8d 3c ed e0 7c a7 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 [ 2153.868110][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00000097 [ 2153.868122][ C0] RAX: 0000000000000000 RBX: 0000000000037f68 RCX: ffffffff8175ee9c [ 2153.868131][ C0] RDX: fffffbfff20be933 RSI: ffffffff8bd1eea0 RDI: ffffffff8bd1eee0 [ 2153.868141][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20be932 [ 2153.868149][ C0] R10: ffffffff905f4997 R11: 0000000000000003 R12: 0000000000000000 [ 2153.868158][ C0] R13: 000000000003d90c R14: 0000000000000001 R15: 0000000000000000 [ 2153.868167][ C0] FS: 00007fba9d681500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2153.868183][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2153.868193][ C0] CR2: 000000110c3c35e9 CR3: 0000000035156000 CR4: 00000000003526f0 [ 2153.868202][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2153.868211][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2153.868219][ C0] Call Trace: [ 2153.868225][ C0] [ 2153.868233][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2153.868250][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2153.868264][ C0] ? nmi_handle+0x1ac/0x5d0 [ 2153.868279][ C0] ? rcu_is_watching+0x24/0xc0 [ 2153.868296][ C0] ? default_do_nmi+0x6a/0x160 [ 2153.868311][ C0] ? exc_nmi+0x170/0x1e0 [ 2153.868324][ C0] ? end_repeat_nmi+0xf/0x53 [ 2153.868345][ C0] ? trace_lock_acquire+0x3c/0x1f0 [ 2153.868365][ C0] ? rcu_is_watching+0x24/0xc0 [ 2153.868382][ C0] ? rcu_is_watching+0x24/0xc0 [ 2153.868400][ C0] ? rcu_is_watching+0x24/0xc0 [ 2153.868417][ C0] [ 2153.868422][ C0] [ 2153.868427][ C0] trace_lock_acquire+0x14e/0x1f0 [ 2153.868444][ C0] ? debug_object_activate+0x149/0x4a0 [ 2153.868460][ C0] ? debug_object_deactivate+0x13b/0x370 [ 2153.868475][ C0] lock_acquire+0x2f/0xb0 [ 2153.868488][ C0] ? debug_object_deactivate+0x13b/0x370 [ 2153.868504][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 2153.868520][ C0] ? debug_object_deactivate+0x13b/0x370 [ 2153.868534][ C0] debug_object_deactivate+0x13b/0x370 [ 2153.868549][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 2153.868565][ C0] ? __pfx_advance_sched+0x10/0x10 [ 2153.868580][ C0] ? timerqueue_add+0x1c2/0x330 [ 2153.868595][ C0] ? __pfx_advance_sched+0x10/0x10 [ 2153.868608][ C0] __hrtimer_run_queues+0x47c/0xae0 [ 2153.868629][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2153.868646][ C0] ? read_tsc+0x9/0x20 [ 2153.868667][ C0] hrtimer_interrupt+0x392/0x8e0 [ 2153.868688][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2153.868705][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2153.868722][ C0] [ 2153.868727][ C0] [ 2153.868731][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2153.868750][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 [ 2153.868773][ C0] Code: cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 54 b4 69 7e <65> 8b 05 55 b4 69 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 [ 2153.868784][ C0] RSP: 0018:ffffc90004fefb18 EFLAGS: 00000246 [ 2153.868797][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81db164c [ 2153.868805][ C0] RDX: ffff888040e72440 RSI: 0000000000000000 RDI: 0000000000000005 [ 2153.868814][ C0] RBP: ffff88801b7044f0 R08: 0000000000000005 R09: 0000000000000000 [ 2153.868823][ C0] R10: 0000000000000000 R11: 0000000000000003 R12: 1ffff920009fdf67 [ 2153.868832][ C0] R13: ffffc90004fefc60 R14: 0000000000000001 R15: ffff88801b7042d0 [ 2153.868844][ C0] ? shmem_write_begin+0x16c/0x300 [ 2153.868859][ C0] shmem_write_begin+0x1b7/0x300 [ 2153.868872][ C0] ? __pfx_fault_in_readable+0x10/0x10 [ 2153.868885][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 2153.868897][ C0] ? inode_set_ctime_current+0x2a7/0x900 [ 2153.868918][ C0] generic_perform_write+0x2ba/0x920 [ 2153.868941][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 2153.868959][ C0] ? __mark_inode_dirty+0x2a5/0xe50 [ 2153.868978][ C0] ? generic_update_time+0xcf/0xf0 [ 2153.868994][ C0] ? mnt_put_write_access_file+0x45/0xf0 [ 2153.869009][ C0] shmem_file_write_iter+0x10e/0x140 [ 2153.869025][ C0] vfs_write+0x5ae/0x1150 [ 2153.869039][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 2153.869056][ C0] ? __pfx_vfs_write+0x10/0x10 [ 2153.869071][ C0] ? rcu_is_watching+0x12/0xc0 [ 2153.869092][ C0] ksys_write+0x12b/0x250 [ 2153.869105][ C0] ? __pfx_ksys_write+0x10/0x10 [ 2153.869121][ C0] do_syscall_64+0xcd/0x250 [ 2153.869140][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2153.869158][ C0] RIP: 0033:0x7fba9d7d5bf2 [ 2153.869170][ C0] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 2153.869181][ C0] RSP: 002b:00007fffe3368478 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2153.869194][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fba9d7d5bf2 [ 2153.869203][ C0] RDX: 00000000000000af RSI: 000055e9946e6600 RDI: 0000000000000003 [ 2153.869212][ C0] RBP: 000055e9946e6600 R08: 0000000000000001 R09: 0000000000000000 [ 2153.869220][ C0] R10: 00007fba9d9743a3 R11: 0000000000000246 R12: 00000000000000af [ 2153.869229][ C0] R13: 00007fba9d681480 R14: 0000000000000004 R15: 000055e9946e6410 [ 2153.869243][ C0] [ 2153.870034][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g154821 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2154.436402][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2154.446368][ C1] rcu: RCU grace-period kthread stack dump: [ 2154.452246][ C1] task:rcu_preempt state:R running task stack:27488 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2154.463998][ C1] Call Trace: [ 2154.467279][ C1] [ 2154.470212][ C1] __schedule+0xe58/0x5ad0 [ 2154.474638][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2154.479850][ C1] ? __pfx___schedule+0x10/0x10 [ 2154.484706][ C1] ? schedule+0x298/0x350 [ 2154.489037][ C1] ? __pfx_lock_release+0x10/0x10 [ 2154.494071][ C1] ? lock_acquire+0x2f/0xb0 [ 2154.498574][ C1] ? schedule+0x1fd/0x350 [ 2154.502908][ C1] schedule+0xe7/0x350 [ 2154.506980][ C1] schedule_timeout+0x124/0x280 [ 2154.511829][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2154.517201][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2154.522496][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2154.528301][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 2154.533764][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2154.538531][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2154.543816][ C1] ? rcu_gp_init+0xc82/0x1630 [ 2154.548496][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2154.553700][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2154.559509][ C1] rcu_gp_kthread+0x271/0x380 [ 2154.564188][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2154.569389][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2154.574594][ C1] ? __kthread_parkme+0x148/0x220 [ 2154.579625][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2154.584826][ C1] kthread+0x2c1/0x3a0 [ 2154.588901][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2154.594100][ C1] ? __pfx_kthread+0x10/0x10 [ 2154.598693][ C1] ret_from_fork+0x45/0x80 [ 2154.603116][ C1] ? __pfx_kthread+0x10/0x10 [ 2154.607709][ C1] ret_from_fork_asm+0x1a/0x30 [ 2154.612489][ C1] [ 2154.615505][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2154.621819][ C1] CPU: 1 UID: 0 PID: 23798 Comm: kworker/u8:19 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 2154.632834][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2154.642885][ C1] Workqueue: events_unbound toggle_allocation_gate [ 2154.649392][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 2154.655547][ C1] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 54 b4 69 7e 65 8b 05 55 b4 69 7e a9 00 01 ff 00 <48> 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 [ 2154.675154][ C1] RSP: 0018:ffffc9000e31f990 EFLAGS: 00000246 [ 2154.681221][ C1] RAX: 0000000000000001 RBX: ffff8880b86469c0 RCX: ffffffff818e191c [ 2154.689188][ C1] RDX: ffff8880461a2440 RSI: 0000000000000000 RDI: 0000000000000005 [ 2154.697158][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2154.705130][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d39 [ 2154.713098][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 2154.721071][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2154.730000][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2154.736582][ C1] CR2: 00007fe4ddd77bac CR3: 000000000df7e000 CR4: 00000000003526f0 [ 2154.744551][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2154.752518][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2154.760485][ C1] Call Trace: [ 2154.763761][ C1] [ 2154.766607][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 2154.772947][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 2154.778151][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 2154.783621][ C1] ? timekeeping_advance+0x72e/0xa90 [ 2154.788908][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2154.794547][ C1] ? __asan_memcpy+0x3c/0x60 [ 2154.799145][ C1] ? rcu_is_watching+0x12/0xc0 [ 2154.803918][ C1] ? update_process_times+0x178/0x2d0 [ 2154.809291][ C1] ? __pfx_update_process_times+0x10/0x10 [ 2154.815014][ C1] ? update_wall_time+0x1c/0x40 [ 2154.819869][ C1] ? tick_nohz_handler+0x376/0x530 [ 2154.824988][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2154.830449][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 2154.835832][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2154.841554][ C1] ? read_tsc+0x9/0x20 [ 2154.845638][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 2154.850777][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2154.856957][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2154.862776][ C1] [ 2154.865703][ C1] [ 2154.868631][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2154.874795][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 2154.880872][ C1] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 2154.886425][ C1] smp_call_function_many_cond+0x456/0x1300 [ 2154.892327][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 2154.897357][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 2154.902382][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 2154.907507][ C1] text_poke_bp_batch+0x22b/0x760 [ 2154.912539][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 2154.918089][ C1] ? __jump_label_patch+0x1db/0x400 [ 2154.923295][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 2154.929547][ C1] text_poke_finish+0x30/0x40 [ 2154.934225][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 2154.940207][ C1] jump_label_update+0x1d7/0x400 [ 2154.945152][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 2154.951055][ C1] static_key_enable+0x1a/0x20 [ 2154.955822][ C1] toggle_allocation_gate+0xfc/0x260 [ 2154.961110][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2154.967003][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 2154.972211][ C1] ? process_one_work+0x921/0x1ba0 [ 2154.977322][ C1] ? lock_acquire+0x2f/0xb0 [ 2154.981827][ C1] ? process_one_work+0x921/0x1ba0 [ 2154.986942][ C1] process_one_work+0x9c5/0x1ba0 [ 2154.991888][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 2154.998044][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2155.003413][ C1] ? rcu_is_watching+0x12/0xc0 [ 2155.008190][ C1] ? assign_work+0x1a0/0x250 [ 2155.012783][ C1] worker_thread+0x6c8/0xf00 [ 2155.017385][ C1] ? __kthread_parkme+0x148/0x220 [ 2155.022417][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2155.027533][ C1] kthread+0x2c1/0x3a0 [ 2155.031603][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2155.036821][ C1] ? __pfx_kthread+0x10/0x10 [ 2155.041415][ C1] ret_from_fork+0x45/0x80 [ 2155.045830][ C1] ? __pfx_kthread+0x10/0x10 [ 2155.050422][ C1] ret_from_fork_asm+0x1a/0x30 [ 2155.055202][ C1]