last executing test programs: 5m16.938038227s ago: executing program 1 (id=2994): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x40) keyctl$chown(0x4, r4, 0x0, 0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m16.020625656s ago: executing program 1 (id=2997): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df", 0x69}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915de1a58a32d021d", 0xd3}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d96224c8fd12762ad7f2a635040cde08fb0cdfb05e646af483235ca7dab9", 0xe6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d023ea8f11964db8d", 0xc}, {&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e7760112d01b2746540dc8a0e9087bde26b530a321fd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee", 0x70}, {&(0x7f0000001a80)="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", 0x381}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m15.929719811s ago: executing program 1 (id=2998): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='dctcp-reno\x00', 0xb) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x40008000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x467, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xce22, 0x0, @empty}, 0x1c) listen(r3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) syz_open_dev$MSR(&(0x7f0000000040), 0xbd41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m14.350703693s ago: executing program 1 (id=3001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0f738514", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25000000000800020001000000"], 0x1c}}, 0x90) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r0}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0xb4ed6000) ftruncate(r3, 0xc254) getpid() r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x63, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) 5m13.924354099s ago: executing program 1 (id=3003): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="3b52d9a87a20e5cab5d556082ce98b3abe5b83d5cf86ecaad6b0ce1807b637550f34a3d88dbeebf1f2af64b10d78bc69d665510972dcb54f78db000200000000000049dfe437046bdb3470c70dee0303ffdd3ad01f5503c1744584333518c54d5d55cc1878424331cd04ee50b8", 0x6d, 0x2400c054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f00000002c0)="49b2c157e6f0a48161a433266d3d03ea7a59e1fbf3efe6035a63ec84047c31a837331f", 0x23, 0x6000c000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5m12.670593409s ago: executing program 1 (id=3007): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='dctcp-reno\x00', 0xb) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x40008000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x467, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xce22, 0x0, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) syz_open_dev$MSR(&(0x7f0000000040), 0xbd41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m11.90482489s ago: executing program 32 (id=3007): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='dctcp-reno\x00', 0xb) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x40008000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x467, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xce22, 0x0, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) syz_open_dev$MSR(&(0x7f0000000040), 0xbd41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m43.569479218s ago: executing program 0 (id=3588): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$key(0xf, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea111f000005000000", 0x29}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1m41.872057904s ago: executing program 0 (id=3592): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) dup(0xffffffffffffffff) mount$cgroup(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="d4cacf1c070346d7623c9371d79f34cc7b31613997c88495a53f49a068937644221dcf7591f53b02cb548124d2656f2ee186a6c691422993f304667eed1b2f46ccaa14faa62e0dd829543323464e752a7bb160371a43ec8924f45d306d7bc337521815796adfb2f481242e37118dc7466ab485271817c6a1697cc24af0cd8b8cb6257db5b0706b7a8c2dea6c3f1b9103588abca433e95bb9ad811e", 0x9b}, {0x0}, {&(0x7f0000000180)}, {&(0x7f00000004c0)="a45b848f196843f7f23a747f9869c8ad7bd3a60c93e30201a0009afe82526c9e91d666e47861adeae968f056f345bc0f307e5781b107e3f035ba4ccf09514315a9701c07a9f1e45df0f3a2e7c341c1eb24d929d3a0da475355d81c0a9633e9984edd424458fc9f24cab14023d6ca027c47697094477477a6db87246d033079b5c9ac71e3ad425bb305d1a1617764f9a827bda68fadb61b7d23baa865beeefcedc5e4295c9843b76202203550bfb76815ce90150fe43684b2b00f782113b4dc72b3dc56f3c777d91dc71bc3646f", 0xcd}, {&(0x7f00000005c0)}], 0x5, 0x0, 0xe0, 0x40801}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000700)={0x3aca, 0x4, 0x204, 0x3, 0x1, 0x40002, 0x4, 0x2, r5}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) accept4(r1, 0x0, &(0x7f00000002c0), 0xc0c00) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) 1m40.653608137s ago: executing program 0 (id=3596): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x608000, 0x54) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100)) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000140)={0x0, 0x3, 0x16, "def623561ff1a0d14dcb4e808524bb3fc7fbfea04b7ce8f0be0c7a047c6055173485b04586e225688505e464893b01918da01a076616f761567b3e1a", 0x13, "8541aaa4632ff20b72884acfd26462b355bfad67751e0bd2a3c34bcc660caa92e699d8eeff5787d11ca2ae9412cd95abebd7d0356005029510b6ec26", 0x30}) r2 = syz_usb_connect$uac1(0x1, 0xd8, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x14, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x18}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x4, 0x10, 0xd, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x4, 0x1, [0x9], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0xf7, 0x1002}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xfc, 0x2, 0x0, 0x7f, "534cc91c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x0, "b3", "630fff"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x64, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xb, 0x3, 0xd, 0xb, "b39fa0", "3ae5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x50, 0x3, 0x7, 0x1, {0x7, 0x25, 0x1, 0x83, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0x2, 0x3, "4ff4"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x3, 0x40, 0x10, "e4d4be5e4a8b26b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xf7, 0x0, {0x7, 0x25, 0x1, 0x80, 0x40, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x81, 0x1, 0x2, 0x10, 0x1}, 0x27, &(0x7f0000000340)={0x5, 0xf, 0x27, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xc6, 0x2, 0x0, 0xf00f, 0x54, [0xc0, 0xcf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0xe, 0x6, 0x8, 0x3d}, @ptm_cap={0x3}]}, 0xa, [{0x69, &(0x7f0000000380)=@string={0x69, 0x3, "89bdb65d06912096bcc4e08d031c8b83542bf50e6fec3286bb3df0249c2f18af2ab8725081e3acee2a1056c772b72817730e7ab712abd4dea56459912bf8ef0dba78b6e45bc94814c4b5bbd2eb462c9043c966bc9537bc0d461bbc329bbcd4ac6aaaa81d691c6a"}}, {0xf, &(0x7f0000000400)=@string={0xf, 0x3, "20ef2fc29aebad4fd21bb86d62"}}, {0x54, &(0x7f0000000440)=@string={0x54, 0x3, "9301cb8424299dc6e4dce029b103a17d7f095f59d8450282f0daf00914405151b05e928a1be9aacb349e52d2dc0eb59bcf8ba87dbe6f4518985d931aff994413d561fe93cfdc8400811e6998e00d3d343c27"}}, {0x1b, &(0x7f00000004c0)=@string={0x1b, 0x3, "1b9b14b26d8d1304138c1d4186e3d134aa1b8792bcb3e39604"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x240a}}, {0xd1, &(0x7f00000005c0)=@string={0xd1, 0x3, "5e56926036f10260e76678704dc87ea2df4d60d87fb84ef3376498f65e7d562996b349b6d58fee95949b7d6edd909bb6c3529492ec69f67a1eeb71280b0d6fe2e38bc537348cbb5f401523f50b502831b090216ae935365dda211d818377586c0548cf64125334df0167ad42cfd2778d7e46927427af346f91f8276e83702dde8b734f573ff78c751cf6327a6c9851e6edb05a6224b48a79504d2d106bb89514ab1741e393098ef6bfc5c8738bdd7863c7595f9b39cb256e9c1faee7049de399df471bf7a8b836be12175b6467b0fd"}}, {0x98, &(0x7f00000006c0)=@string={0x98, 0x3, "49161c47e2bb823356835437dd44046f97c119c8ba2a5ad3c95d3642cebadaa3b0d77c6037be639bcb4c9fdc744f29a11af67822e4b5ee5ae7a1d8c1ff99c56b5907ec531a37dcc1de1dfdedd640574c4d2ea7d135423325d94a838e703e7cad112e0cf185dff589b7cc219441c262ff0244ef3301d60c7fb4d36d3b355fe09137472704cd56673c021ea04517be3a4ed7c8f0c657f3"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x0, 0x10, 0x9b, {0x9b, 0x23, "3ca9ff05c4a892e15dbc087d35f52855f6fe82c90f52a36154c15a8b0c979040f4a82811477f7dd38d1502e9e356ffc2a5eee0a89f29414b0405e084a626994c10310408b9a3e88facb5d52007f3cca633caf46ac9c470a4213d8f1288fab2c8f440c4820ffbf8270b6d85d4d4035e97371c49721ab2f3b9c43f9a241b0e95d559d5c34d7b0c1bb20a9b7251661b2b85f10d98e7328fd6b5ff"}}, &(0x7f0000000940)={0x0, 0x3, 0x91, @string={0x91, 0x3, "39c09268a1f05a890abcb217eafe125a246eb392c867e943593ec35537386568c514530fb1582db59fae39c28c8d3057ca4768d75c6d0c1bd3afaeb95177067e5f9a8bf240c8294988ec33cfd88aca9d4325641f13cd9016e4fdbc8c8c447b65af2998381149536117d402e32a822e0323c5e3d03beb6ebb23b0cdcfe5138aa5d80be1bb36b756cbb1e37678b766db"}}, &(0x7f0000000a00)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "ab9786603cc2050a7453f3fcd40842b2"}, @generic={0x4, 0x10, 0x1, "a3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x6, 0x8000}, @ssp_cap={0xc, 0x10, 0xa, 0xf3, 0x0, 0x400, 0x0, 0x8}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf4, 0x1, 0x6, 0x5, "7ab7d2b8", "4ab40acc"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x0, 0x6, 0x1, 0x3, 0xfff3, 0x200}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000b00)={0x20, 0x11, 0x78, "bf88d48ded5e11d48dd82d0ccc19710af153e52e00899e08a1f24fc87df95ff74c48b47d64bfc9f4adf588b774847cb06d4275614c2630e165d7c70ad5eda6454a3f5545e7f7ca8c9af6a3c344e627e3d27fdaa1bcf9bc4d83b881c6da38ec72f37edf5b98084bb37ad606214d877b1feddb030dd5d0eed9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x400, 0x1}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000cc0)={0x40, 0x9, 0x1}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "aeb9"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x7e}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "77cd"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x24}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x84}}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000001080)={{r1}, 0xa, &(0x7f0000001000)=[0x1, 0x200, 0x2f601fd, 0x3ff, 0x3, 0x6, 0x5, 0x9, 0x5, 0x4], 0x3a, 0xa}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001100)={{0x1, 0x1, 0x18, r1, {0x0, 0x4247}}, './file0\x00'}) connect$pppoe(r3, &(0x7f0000001140)={0x18, 0x0, {0x3, @broadcast, 'bond_slave_1\x00'}}, 0x1e) mincore(&(0x7f0000ff7000/0x9000)=nil, 0x9000, &(0x7f0000001180)=""/81) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000001200)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2000, 0x4}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001240)='/proc/asound/card3/oss_mixer\x00', 0x2008c1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000001280)={0x18, 0x0, {0x0, @remote, 'bond0\x00'}}) r4 = syz_usb_connect$cdc_ncm(0x4, 0x7d, &(0x7f00000012c0)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x8, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4e7559bd"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x8000, 0x101, 0x3c}, {0x6, 0x24, 0x1a, 0x6, 0xc}, [@acm={0x4, 0x24, 0x2, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xa9, 0x28, 0xfa}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x8f, 0x4a}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0xe, 0xf6}}}}}}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x11, 0x7, 0x9, 0x9, 0x40, 0x3a}, 0x2c, &(0x7f0000001380)={0x5, 0xf, 0x2c, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x6, 0xf000, 0x3, [0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "5e0b3713b98a0663ce3091382042f850"}]}, 0x4, [{0x8f, &(0x7f00000013c0)=@string={0x8f, 0x3, "fafef9542a750282d76cfa11b4ba3db78893f8ecf69b56df860d0d7345166c62d6a18ef10663c164f8766044db4c881a3b229f69d8ae86a8d2bbf1f29c77151bf06a9edbc43dc0471d47aed342ffc5b3456973230fe4097a6b56307e4d8ba38d8f91724e0ba71c9bada712c5303e31e4b66eec4da4e4cbc57217070b4ca5c4af4d0a0601408ade1994d39b4560"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0xc0c}}, {0x8a, &(0x7f00000014c0)=@string={0x8a, 0x3, "5627a0bfd17376597ba8c79477a8637af53c866bedce27da2d636ee1b7b07283e6c22cbe8564cdea25e976e9b688f8fc5a25b6ca06d5f3f85da046d2828c4492338fb5f32ed7a3b453b207660d7600a22897b0ce89f4e259c645a50c22bf223f860904dac231a4baf4c59fe13cfd2f161d1b8f404362aa65e276c99b8e54b00ab435934950636cf3"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x3046}}]}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001640), 0x100800, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000001700)={0x4, 0x98, 0x8001, r3, 0x0, &(0x7f00000016c0)={0x980929, 0x200, '\x00', @string=&(0x7f0000001680)=0x40}}) r6 = syz_open_dev$audion(&(0x7f0000001740), 0xfffffffffffffffc, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000017c0)={0x0, 0x800, 0x80, r5, 0x0, &(0x7f0000001780)={0x990afd, 0x1, '\x00', @value64=0x10001}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000001880)={0x9c0000, 0x50, 0x2, r6, 0x0, &(0x7f0000001840)={0x9d0903, 0x7, '\x00', @p_u16=&(0x7f0000001800)=0x1}}) getpeername$packet(r5, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) sendmsg$nl_route(r1, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)=@ipv6_newaddr={0x20, 0x14, 0x20, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x18, 0xfd, r8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x80) syz_usb_control_io(r4, &(0x7f0000001bc0)={0x2c, &(0x7f0000001a40)={0x20, 0x5, 0x66, {0x66, 0x5, "e620992456fd43a5f40de31d8f5e736df666b15340c182cbf761235003655fed724fb610daea2f627b831f82e61f9cb70141c21cd5e3db59e7485ef2d70aaf8ab3b23a9ed1c65ab2f8951975108bbda98c7d4a779b71b645bcff79f4f2b606e3abefc439"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000001b00)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x9, 0xf00, 0x7, [0x0, 0x180, 0xc0, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0xe, 0x9, 0x9, 0x1}]}}, &(0x7f0000001b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x0, 0x81, "03eeb11d", "17a340f1"}}, &(0x7f0000001b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x6, 0x1f, 0x0, 0x6aec, 0x4}}}, &(0x7f0000002000)={0x84, &(0x7f0000001c00)={0x0, 0x17, 0x22, "04fd213ec54a841647863bed6ee9e03bd071fb228420eb4d800704cf32cce3a4a184"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001c80)={0x0, 0x8, 0x1}, &(0x7f0000001cc0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001d00)={0x20, 0x0, 0x4, {0x100, 0x41}}, &(0x7f0000001d40)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001d80)={0x40, 0x9, 0x1}, &(0x7f0000001dc0)={0x40, 0xb, 0x2, "e476"}, &(0x7f0000001e00)={0x40, 0xf, 0x2, 0x7e04}, &(0x7f0000001e40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001e80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001ec0)={0x40, 0x19, 0x2, "518a"}, &(0x7f0000001f00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001f40)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001f80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001fc0)={0x40, 0x21, 0x1, 0xe}}) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000020c0)=0x10800) syz_usb_connect$cdc_ecm(0x3, 0x76, &(0x7f0000002100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xef, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x8, 0x30, 0xfa, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "ba295172"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffeff, 0x5, 0x0, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x7, 0x1, 0x0, 0x76ea, 0xe}, @obex={0x5, 0x24, 0x15, 0x676}, @mbim_extended={0x8, 0x24, 0x1c, 0xc, 0xb7, 0xdf}, @country_functional={0xc, 0x24, 0x7, 0xc0, 0xff, [0x99, 0x87a4, 0x8]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x9a, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x80, 0x1}}}}}]}}]}}, &(0x7f0000002400)={0xa, &(0x7f0000002180)={0xa, 0x6, 0x201, 0x40, 0x0, 0x5e, 0x40}, 0x5, &(0x7f00000021c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x418}}, {0xc6, &(0x7f00000022c0)=@string={0xc6, 0x3, "40dbc9df4269f9544cfee4db51f6cf2ade79ab8ecb138b5810670128d17693c469d97359e066e8622064756c5c73cf9d4f176db7a84f2515db4246d10776a5eebff439ffc5f2dfac9055a0ac0576cb23fb59dbc4f635566bd61669257c4ebd02548d64a660cd7874007e224fcc2402a110e1ff80a1397f51cda861b5a6daf89d384261bf5160f277171827ccbf8907ab068b5b119a5915e0c471286f43620400dbe7760d6036829e05e9e8a1c792a08d14d78b80bd47834e2832ba84ac101e3177a38d68"}}, {0x40, &(0x7f00000023c0)=@string={0x40, 0x3, "1313bae01ae5c283f66dfa8d00e8d58e6aba40f9c9d57f04efce45b8b31060c033fc66ec7421e92d682cb94323898834d4073e7d76dfd02b6892b2752edc"}}]}) pivot_root(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='./file0\x00') ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) socket(0x3, 0x80000, 0x44) 1m36.800957731s ago: executing program 0 (id=3609): syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x2a440) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000340)={0x4, 0x0, 0xfffffff7, 0x5, 0xfffffffffffffdfe}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101040, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2ea5410e99c6f0f9, &(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYRESHEX=r1, @ANYRES32=r3, @ANYRESDEC=r1, @ANYRES8=r5]) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x1, 0x29, 0x0, 0x0) 1m34.770352281s ago: executing program 0 (id=3617): gettid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x10, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b5950000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa14"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1m33.876351223s ago: executing program 0 (id=3618): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e24, 0x3, 'rr\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e23, 0x10000, 0x1000, 0x80012d5a, 0x12d5c}}, 0x44) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) (fail_nth: 5) 1m33.597285781s ago: executing program 33 (id=3618): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e24, 0x3, 'rr\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e23, 0x10000, 0x1000, 0x80012d5a, 0x12d5c}}, 0x44) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) (fail_nth: 5) 15.11896432s ago: executing program 4 (id=3844): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073795a31000000000900010073797a3000000000080005400000001708000640ffffff0008000340000000383c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000010000380"], 0xd0}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280080001"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) unshare(0x20000400) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000369d17f8f516"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x79}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000240)={0x0, 0x0, 0x0, r6}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) unshare(0x6c000c80) 13.384819573s ago: executing program 3 (id=3850): syz_io_uring_setup(0x11c7, &(0x7f0000000400)={0x0, 0x5683, 0x80}, &(0x7f0000000080), &(0x7f00000005c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x4a55, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200002}, &(0x7f0000000480), &(0x7f00000000c0)) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x20000, 0x2, 0x0, 0x0, r0}, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xf0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x3}, {0xc, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc0, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x7, 0x8, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0xa, 0x9, 0x0, 0x74, 0x9, 0x5, 0xf, 0xb, 0x8, 0xd, 0xd, 0xf, 0x0, 0x8, 0x1, 0x7], 0x3, [0xc, 0x9, 0x67, 0x7fff, 0x5, 0x404, 0xfb2e, 0x2, 0x8, 0x27, 0xc0, 0x9, 0x2, 0x2, 0x1, 0x94], [0xb59, 0x2, 0x97, 0x2, 0xc, 0x6, 0x5a, 0x6, 0x4, 0x55, 0x83d8, 0x7, 0xe5, 0xbd, 0x5, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x8}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2080}, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0xba9d, 0x101200) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x72, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240080001aa3dded62000100000000000000000002000002fe00000000000000080002007f000001"], 0x24}}, 0x0) sendfile(r6, r4, 0x0, 0x2) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') 12.920398938s ago: executing program 3 (id=3851): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000019380)=0x7fffffff) r0 = getpid() r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x80000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) fsopen(0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000193c0)={0x0, 0x9f, 0x58}, &(0x7f0000019600)=ANY=[@ANYBLOB="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"], &(0x7f0000019480)="ddf0d4a640fef0b538d6084a8ca9e4dc1395a9b2a87f3634c34106b6c5b96eb28258da20f09d432b348bb69ca3e4ff4eac9659d29444c503516a7100954cde89e425acccb36f329691925594be3d7be269bea8f6acff624c4779816923e3e528efe61d6bd4e6fec8fede82c5d7f77b2466cc23d0542ed04a12afe6f651d628e86c1f1a4b1c4ae2be3276395b27adf36b9658bd71f7db9fc9fd211559d25f8a", &(0x7f00000197c0)=""/88) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000019300)={0x110c1300, &(0x7f0000019400), &(0x7f0000000100)=0x0, &(0x7f0000000340), {0x11}, &(0x7f0000000280)=""/9, 0xfffffffffffffe3c, &(0x7f00000000c0)=""/31, &(0x7f0000000400)}, 0x58) sched_setscheduler(r6, 0x6, &(0x7f00000001c0)=0x6d0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 12.869814058s ago: executing program 2 (id=3852): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x1d, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x5f, &(0x7f0000000240)}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() read$msr(r0, &(0x7f00000000c0)=""/189, 0xbd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x4}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r4, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x0) 12.295141877s ago: executing program 4 (id=3853): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip_tables_matches\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) read$FUSE(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192ea0845050c800a030102030109021275a8000000000904"], 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) 11.916156894s ago: executing program 2 (id=3855): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000100)={0x28, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x1d, 0x0, 0x0, r3, 0x0, 0x0, 0xdead, 0x5f, &(0x7f0000000240)}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() read$msr(r0, &(0x7f00000000c0)=""/189, 0xbd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x4}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r4, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x0) 10.757600533s ago: executing program 2 (id=3856): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f1f, 0xa3) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 10.718995714s ago: executing program 6 (id=3857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="4001000010003306000000000400000000000000000000000000000000000001fe8000"/46, @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000040), 0x4) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080002010900680000800900456f009100660000401190780a010102ac1414aa4f204e22007d9078c10200169c79cb22459ff50866ff829694a603d3c443eead4100af7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5e155c033fbf5a6b311de39eb228702b8bf5538"], 0x9f) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.388102525s ago: executing program 3 (id=3858): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x7ffffffc) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) write(r1, &(0x7f0000000080)="5a5d6457e918fb", 0x7) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x10001, 0xfe04, 0xfff}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/87, 0x57}], 0x1, 0x0, 0x400) ptrace$setopts(0x6, 0x0, 0x6, 0x8) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 9.487498887s ago: executing program 6 (id=3859): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0xb) openat(0xffffffffffffff9c, 0x0, 0x121c80, 0x47) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x100000000ed, 0x24b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0xffbb) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000380), 0x1041044, &(0x7f00000003c0)) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x4]}, &(0x7f0000000280), 0x8) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 9.158972072s ago: executing program 5 (id=3860): syz_open_dev$sg(0x0, 0x0, 0x38dd80) r0 = socket$inet6(0xa, 0xa, 0x400000) bind$inet6(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000140) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000c40)={{r1}, "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"}) getpgrp(0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') 8.740565026s ago: executing program 4 (id=3861): r0 = socket(0xa, 0x3, 0xff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1404, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}}, 0x20008000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x30, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0x437, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x4}]}}}]}, 0x40}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1400000000000000000000000700000094040000008cdf08"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) 7.666291691s ago: executing program 4 (id=3862): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f014, 0x4}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r0], 0x7c}}, 0x80) 7.563878397s ago: executing program 5 (id=3863): r0 = socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x14, r8, 0x0, r7}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8, r8}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000001e00"/20, @ANYRES32, @ANYBLOB], 0x18}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r10, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote, r10}, 0xc) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000400)=0x0) syz_clone3(&(0x7f0000000540)={0x30018800, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x34}, &(0x7f0000000300)=""/199, 0xc7, &(0x7f0000000480)=""/103, &(0x7f0000000500)=[r1, r1, r1, r1, r11, r1, r1, r1, r1], 0x9, {r4}}, 0x58) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7.304361022s ago: executing program 4 (id=3864): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8000000000000000, &(0x7f0000000180)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x78, 0x0, &(0x7f0000000100)="8e0ef086dd00000000000000003c5200ca5e361fb025b8e84660f97cd3c50752845a968b416b36e31cb7fc876a78a4c8ba275f2643fc8f46e70976a8f0cfec039c56421f7426d64fcccd49a43c5da25b8ba74f92674300517a44ebc71cae3da2f34ffe97141f01ed58dbc0658ce9725e71f7a4b68db54409", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000001c0)={0x8, 0x80000001}) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000040000000200000001000006"], 0x0, 0x30}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x10ffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102394, 0x18ffa) r7 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000340)="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", &(0x7f0000000200)="3de384a9a9cd7e6fed"}}, &(0x7f0000000240)) read$FUSE(r7, &(0x7f00000008c0)={0x2020}, 0xfffffef0) 6.87347045s ago: executing program 2 (id=3865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfb, {0xa}, [@RTA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000850}, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40048094) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x201f00) 6.849368172s ago: executing program 5 (id=3866): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000100)={0x28, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x1d, 0x0, 0x0, r3, 0x0, 0x0, 0xdead, 0x5f, &(0x7f0000000240)}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() read$msr(r0, &(0x7f00000000c0)=""/189, 0xbd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x4}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r4, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x0) 6.468693449s ago: executing program 6 (id=3867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000240)="648678210790aef789014d2950e053689eccf7911ac46393fef05bb12e069e89ca22d52f003429a35e"}) 6.432111907s ago: executing program 5 (id=3868): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x48, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020}, 0x2020) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) 6.268792979s ago: executing program 3 (id=3869): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x301f}, 0x3}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() r5 = gettid() sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0xec0}, {0x0, 0xfffffdf4}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}], 0x60}, 0x0) 6.263334943s ago: executing program 6 (id=3870): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$key(0xf, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d0006", 0x1f}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 4.988518786s ago: executing program 5 (id=3871): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip_tables_matches\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) read$FUSE(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192ea0845050c800a030102030109021275a8000000000904"], 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) 4.970965386s ago: executing program 3 (id=3872): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x11, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @private0, 0x20005}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x7, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0x7fffffffffffffff, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) r8 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r8, 0x414, 0x0) recvmmsg(r7, &(0x7f00000045c0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f0000004800)=""/117, 0x75}], 0x1, &(0x7f0000000540)=""/76, 0x4c}, 0xfe}, {{&(0x7f00000005c0)=@caif=@util, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/130, 0x82}, {&(0x7f0000000700)=""/147, 0x93}, {&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/136, 0x88}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000940)=""/209, 0xd1}, {&(0x7f0000004880)=""/204, 0xcc}], 0x7}, 0x80000001}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000b80)=""/158, 0x9e}, {&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f0000000c40)=""/88, 0x58}, {&(0x7f0000000cc0)=""/235, 0xeb}, {&(0x7f0000000dc0)=""/35, 0x23}, {&(0x7f0000003dc0)=""/59, 0x3b}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/123, 0x7b}], 0x8, &(0x7f0000001f40)=""/156, 0x9c}, 0x1}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002000)=""/218, 0xda}], 0x1, &(0x7f0000002140)=""/226, 0xe2}, 0x81}, {{&(0x7f0000002240)=@tipc=@id, 0x80, &(0x7f0000002700)=[{&(0x7f00000022c0)=""/152, 0x98}, {&(0x7f0000002380)=""/239, 0xef}, {&(0x7f0000002480)=""/230, 0xe6}, {&(0x7f0000002580)=""/94, 0x5e}, {&(0x7f0000002600)=""/198, 0xc6}], 0x5, &(0x7f0000002780)=""/77, 0x4d}, 0x6}, {{&(0x7f0000002800)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002880)=""/61, 0x3d}, {&(0x7f00000028c0)=""/238, 0xee}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003a00)=""/125, 0x7d}, 0x6}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003a80)=""/162, 0xa2}], 0x1, &(0x7f0000003b80)=""/45, 0x2d}, 0x5}, {{&(0x7f0000003bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003c40)=""/115, 0x73}, {&(0x7f0000003cc0)=""/78, 0x4e}, {&(0x7f0000003d40)=""/36, 0x24}], 0x3, &(0x7f0000003dc0)}, 0x3}, {{&(0x7f0000003e00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004440)=[{&(0x7f0000003e80)=""/55, 0x37}, {&(0x7f0000003ec0)=""/249, 0xf9}, {&(0x7f0000004980)=""/194, 0xc2}, {&(0x7f0000004080)=""/27, 0x1b}, {&(0x7f00000040c0)=""/68, 0x44}, {&(0x7f0000004140)=""/161, 0xa1}, {&(0x7f0000004200)=""/211, 0xd3}, {&(0x7f0000004300)=""/138, 0x8a}, {&(0x7f00000043c0)=""/99, 0x63}], 0x9, &(0x7f0000004500)=""/140, 0x8c}, 0x8}], 0x9, 0x0, 0x0) 3.100614135s ago: executing program 6 (id=3873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.004355724s ago: executing program 4 (id=3874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) (fail_nth: 4) 2.886506319s ago: executing program 2 (id=3875): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x11e, 0x1e, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0125ecc46800"]) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r6, 0x3, 0x0) getdents(r6, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0], 0x0) 1.50566292s ago: executing program 5 (id=3876): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x20382, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000080)={0x2, 0x9, 0x0, 0x5, 0x5, 0x16, 0x2, 0x6, 0x0, 0x46, 0x2, "46510f4524410444959e0c520361a47e37cc7e305d8fe231939a4b81ffd8baea"}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x7, 0x6, {{0x30, 0x4, 0x2, 0x2, 0xc0, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @private=0xa010100, {[@timestamp={0x44, 0xc, 0x5e, 0x0, 0xa, [0x9, 0xe4]}, @cipso={0x86, 0x46, 0x3, [{0x1, 0xe, "79bd2ef7356a6ecead37ddb8"}, {0x7, 0x10, "8730739fc78b5a46aa45fe5a1f74"}, {0x6, 0x3, "c3"}, {0x0, 0xe, "623a7f75a9485b2b6f1068e4"}, {0x2, 0x8, "7df4785b6423"}, {0x6, 0x4, "a813"}, {0x0, 0x5, "2fcce6"}]}, @timestamp_prespec={0x44, 0x2c, 0x95, 0x3, 0x3, [{@multicast2}, {@local, 0x1c47}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0x81}, {@loopback, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x8e, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x8}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x200}, {@multicast2, 0x7}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@delqdisc={0x3c, 0x25, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0xffe0}, {0xd, 0xfff2}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x9}}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x1, 0xaa}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x5c, 0x0, &(0x7f0000000540)=[@acquire_done={0x40106309, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/98, 0x62, 0x0, 0x1f}, @flat=@handle={0x73682a85, 0x101, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @exit_looper], 0x76, 0x0, &(0x7f00000005c0)="d2a3dd9a2230618cdf347f8dd8a390527e2d168d45cb3d92b177775e73a0f0d564a66fee1cfd289c88a36cde35c0443f3a804b34121a3b4422ac1738c7c116729c72d72a838e00be5905a04ca4358046a3f7bb8dc95fb5e1a5c98bc301650f76c365ed95451a21de6f6eee441339cc63b226e057a5ca"}) 1.400170595s ago: executing program 2 (id=3877): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="15002abd7000fedbdf252e0000000a0001047770616e300000000c0005000201bdb183aaaaaaaaaaaa05002b0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000511000/0x4000)=nil, 0x4000, 0x4000004, 0x5d031, 0xffffffffffffffff, 0x0) gettid() r6 = socket(0x9, 0x80000, 0x7) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$alg(0x26, 0x5, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) 1.397435314s ago: executing program 6 (id=3878): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0xb) openat(0xffffffffffffff9c, 0x0, 0x121c80, 0x47) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x100000000ed, 0x24b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0xffbb) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000380), 0x1041044, &(0x7f00000003c0)) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x4]}, &(0x7f0000000280), 0x8) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 0s ago: executing program 3 (id=3879): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x7ffffffc) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) write(r1, &(0x7f0000000080)="5a5d6457e918fb", 0x7) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x10001, 0xfe04, 0xfff}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/87, 0x57}], 0x1, 0x0, 0x400) ptrace$setopts(0x6, 0x0, 0x6, 0x8) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): l+0xb4/0x270 [ 1261.532099][T20293] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1261.532124][T20293] ? __x64_sys_ioctl+0x18e/0x210 [ 1261.532152][T20293] __x64_sys_ioctl+0x18e/0x210 [ 1261.532177][T20293] do_syscall_64+0xcd/0x4c0 [ 1261.532196][T20293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.532213][T20293] RIP: 0033:0x7f0350f8e9a9 [ 1261.532228][T20293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1261.532246][T20293] RSP: 002b:00007f0351e89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1261.532264][T20293] RAX: ffffffffffffffda RBX: 00007f03511b6080 RCX: 00007f0350f8e9a9 [ 1261.532276][T20293] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 1261.532287][T20293] RBP: 00007f0351e89090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.532297][T20293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.532307][T20293] R13: 0000000000000001 R14: 00007f03511b6080 R15: 00007ffe206ca9e8 [ 1261.532331][T20293] [ 1261.786324][ C1] vkms_vblank_simulate: vblank timer overrun [ 1262.033791][T20298] FAULT_INJECTION: forcing a failure. [ 1262.033791][T20298] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.047719][T20298] CPU: 1 UID: 0 PID: 20298 Comm: syz.3.3501 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1262.047745][T20298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1262.047756][T20298] Call Trace: [ 1262.047762][T20298] [ 1262.047769][T20298] dump_stack_lvl+0x16c/0x1f0 [ 1262.047801][T20298] should_fail_ex+0x512/0x640 [ 1262.047833][T20298] should_failslab+0xc2/0x120 [ 1262.047852][T20298] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1262.047879][T20298] ? skb_clone+0x190/0x3f0 [ 1262.047900][T20298] skb_clone+0x190/0x3f0 [ 1262.047918][T20298] netlink_deliver_tap+0xabd/0xd30 [ 1262.047944][T20298] netlink_unicast+0x62f/0x850 [ 1262.047969][T20298] ? __pfx_netlink_unicast+0x10/0x10 [ 1262.047997][T20298] netlink_sendmsg+0x8d1/0xdd0 [ 1262.048022][T20298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1262.048049][T20298] ____sys_sendmsg+0xa95/0xc70 [ 1262.048070][T20298] ? copy_msghdr_from_user+0x10a/0x160 [ 1262.048098][T20298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1262.048130][T20298] ___sys_sendmsg+0x134/0x1d0 [ 1262.048160][T20298] ? __pfx____sys_sendmsg+0x10/0x10 [ 1262.048185][T20298] ? __lock_acquire+0x622/0x1c90 [ 1262.048234][T20298] __sys_sendmsg+0x16d/0x220 [ 1262.048252][T20298] ? __pfx___sys_sendmsg+0x10/0x10 [ 1262.048286][T20298] do_syscall_64+0xcd/0x4c0 [ 1262.048305][T20298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.048324][T20298] RIP: 0033:0x7f0350f8e9a9 [ 1262.048339][T20298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1262.048359][T20298] RSP: 002b:00007f0351eaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1262.048377][T20298] RAX: ffffffffffffffda RBX: 00007f03511b5fa0 RCX: 00007f0350f8e9a9 [ 1262.048389][T20298] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1262.048401][T20298] RBP: 00007f0351eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.048412][T20298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.048422][T20298] R13: 0000000000000000 R14: 00007f03511b5fa0 R15: 00007ffe206ca9e8 [ 1262.048447][T20298] [ 1262.048482][T20298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3501'. [ 1262.066071][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1262.269611][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1262.336066][T17987] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1263.096020][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1263.336338][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1263.410379][T17987] usb 6-1: Using ep0 maxpacket: 16 [ 1263.516813][T20301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3499'. [ 1264.135999][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1264.161374][T17987] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1264.189981][T17987] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.376165][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1264.636160][T17987] usb 6-1: config 0 has no interface number 0 [ 1264.642296][T17987] usb 6-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1264.657244][T17987] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1264.666472][T17987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.691204][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1264.856787][T17987] usb 6-1: config 0 descriptor?? [ 1264.880836][T17987] usb 6-1: can't set config #0, error -71 [ 1264.909455][T17987] usb 6-1: USB disconnect, device number 5 [ 1264.931840][T20324] lo speed is unknown, defaulting to 1000 [ 1265.176028][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1265.416067][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1265.569889][T20346] netlink: 'syz.2.3509': attribute type 6 has an invalid length. [ 1266.216057][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1266.456060][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1267.265990][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1267.496072][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1268.296370][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1268.536071][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1268.598472][T11266] Bluetooth: hci5: unexpected event for opcode 0x0401 [ 1268.856824][T20356] netlink: zone id is out of range [ 1268.888424][T20363] netlink: zone id is out of range [ 1269.200919][T20356] netlink: set zone limit has 4 unknown bytes [ 1269.336013][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1271.415988][ C0] net_ratelimit: 4 callbacks suppressed [ 1271.416007][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1271.467269][T20388] ipvlan2: entered promiscuous mode [ 1271.492888][T20388] ipvlan2: entered allmulticast mode [ 1271.516349][T20388] batadv0: entered allmulticast mode [ 1271.545815][T20388] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1271.656063][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1272.455992][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1272.581676][T20402] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3523'. [ 1272.706164][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1272.926344][T20409] binder: 20408:20409 ioctl c0306201 200000000c00 returned -11 [ 1272.938776][T20391] binder: 20386:20391 ioctl 4018620d 0 returned -22 [ 1273.026755][T20394] binder: 20386:20394 ioctl c018620c 0 returned -14 [ 1273.309505][T20419] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3521'. [ 1273.346140][ T5902] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 1273.505997][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1273.543474][ T5902] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1273.587466][ T5902] usb 4-1: config 1 has an invalid interface number: 6 but max is 2 [ 1273.644835][ T5902] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1273.713117][ T5902] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1273.736001][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1273.790244][ T5902] usb 4-1: config 1 has no interface number 1 [ 1273.840704][ T5902] usb 4-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1273.957400][ T5902] usb 4-1: config 1 interface 6 has no altsetting 0 [ 1274.014658][ T5902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1274.063866][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.126634][ T5902] usb 4-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 1274.252857][ T5902] usb 4-1: Manufacturer: 숯侭ᯒ涸 [ 1274.322008][ T5902] usb 4-1: SerialNumber: 鬛눔赭Г谓䄝㓑᮪銇뎼難 [ 1274.536064][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1274.776080][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1275.571977][T20416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.580417][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1275.592952][T20416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.818685][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1275.978166][T20439] netlink: 'syz.0.3531': attribute type 6 has an invalid length. [ 1275.990545][ T5902] usb 4-1: 0:2 : does not exist [ 1276.186621][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 1276.388236][ T5902] usb 4-1: USB disconnect, device number 62 [ 1276.616213][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1276.861553][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1277.087620][ T5902] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1277.277664][ T5902] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1277.296787][ T5902] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.329231][ T5902] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1277.343051][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.494468][T11266] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 1277.592157][ T5902] usb 3-1: usb_control_msg returned -32 [ 1277.619046][ T5902] usbtmc 3-1:16.0: can't read capabilities [ 1277.656010][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1277.902650][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1277.975654][T20466] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1277.997223][T19651] usb 3-1: USB disconnect, device number 52 [ 1278.695992][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1278.766225][T20476] fuse: Bad value for 'fd' [ 1278.776762][ T43] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1278.938265][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1279.257598][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1279.269486][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.277114][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1279.293825][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.310434][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.321572][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1279.357430][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.364851][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1279.376152][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.387884][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.399062][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1279.427523][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.435114][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1279.446464][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.460288][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.475150][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1279.512273][ T43] usb 6-1: string descriptor 0 read error: -22 [ 1279.522010][ T43] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1279.542975][T20484] netlink: 'syz.3.3547': attribute type 3 has an invalid length. [ 1279.546584][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.552696][T20484] netlink: 'syz.3.3547': attribute type 1 has an invalid length. [ 1279.599378][ T43] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1279.620352][ T30] audit: type=1400 audit(1753266038.063:987): avc: denied { setattr } for pid=20483 comm="syz.3.3547" name="radio2" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1279.735996][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1279.976048][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1280.608934][ T2146] usb 6-1: USB disconnect, device number 6 [ 1280.775996][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1281.016069][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1281.266320][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 1281.815995][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1282.056476][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1282.818844][ T30] audit: type=1400 audit(1753266040.893:988): avc: denied { read } for pid=20513 comm="syz.0.3557" path="socket:[66396]" dev="sockfs" ino=66396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1282.842472][T20515] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1282.856004][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1283.096064][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1283.580834][T20524] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1283.895993][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1283.977786][T20533] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3562'. [ 1283.990361][T20533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3562'. [ 1284.019237][ T30] audit: type=1400 audit(1753266042.463:989): avc: denied { watch_mount } for pid=20532 comm="syz.3.3562" path="/84" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1284.069551][T20536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3561'. [ 1284.136000][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1284.146006][ T43] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1284.686005][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1284.717137][T20542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3563'. [ 1284.829713][T20544] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3559'. [ 1284.936000][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1284.996003][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1284.996059][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1285.002536][ T43] usb 5-1: config index 0 descriptor too short (expected 29970, got 18) [ 1285.024783][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1285.033119][ T43] usb 5-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 1285.043267][ T9] usb 4-1: config 0 has no interface number 0 [ 1285.044063][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 1285.063511][ T43] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1285.073971][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.082544][ T43] usb 5-1: Product: syz [ 1285.083739][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1285.086830][ T43] usb 5-1: Manufacturer: syz [ 1285.086847][ T43] usb 5-1: SerialNumber: syz [ 1285.088733][ T43] usb 5-1: config 0 descriptor?? [ 1285.114332][ T43] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 1285.125750][ T43] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input54 [ 1285.146684][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.176078][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1285.183260][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.190760][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1285.208431][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.223774][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.236994][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1285.254653][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1285.263400][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.273480][ T9] usb 4-1: Product: syz [ 1285.280844][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.331192][ T9] usb 4-1: SerialNumber: syz [ 1285.336061][ T2146] usb 5-1: USB disconnect, device number 54 [ 1285.337826][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.351481][ T9] usb 4-1: config 0 descriptor?? [ 1285.357106][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.633832][ T30] audit: type=1400 audit(1753266044.033:990): avc: denied { accept } for pid=20550 comm="syz.5.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1285.769070][ T9] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1285.777849][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.786717][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input55 [ 1285.796782][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.804543][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.812110][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.819691][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.831781][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.843901][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.853195][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1285.946592][ T30] audit: type=1400 audit(1753266044.363:991): avc: denied { write } for pid=20547 comm="syz.2.3565" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1285.976006][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1286.106364][T19651] hid-generic 0002:0004:0009.0043: unknown main item tag 0x0 [ 1286.182905][T19651] hid-generic 0002:0004:0009.0043: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1286.715671][T20574] 9pnet_virtio: no channels available for device syz [ 1286.929934][T20568] fido_id[20568]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1287.015989][ C0] net_ratelimit: 1 callbacks suppressed [ 1287.016007][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1287.183606][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1287.193522][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1287.201358][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1287.209087][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1287.217075][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1287.224154][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1287.231245][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1287.238315][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1287.245382][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1287.252483][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1287.259613][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1287.280867][T17987] usb 4-1: USB disconnect, device number 63 [ 1287.286899][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1287.609446][T20585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3572'. [ 1287.623187][T17987] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1288.051823][T20573] team0 (unregistering): Port device team_slave_0 removed [ 1288.059023][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1288.179519][T20573] team0 (unregistering): Port device team_slave_1 removed [ 1288.295997][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1288.526815][ T5902] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1288.849710][T20592] rdma_op ffff8880281331f0 conn xmit_rdma 0000000000000000 [ 1289.096107][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1289.336160][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1289.864472][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 1289.890404][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1289.954174][ T5902] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1290.002363][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.106557][ T5902] usb 3-1: Product: syz [ 1290.110838][ T5902] usb 3-1: Manufacturer: syz [ 1290.115662][ T5902] usb 3-1: SerialNumber: syz [ 1290.135994][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1290.146546][ T43] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1290.201667][T20600] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3578'. [ 1290.376000][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1290.943769][ T5902] usb 3-1: config 0 descriptor?? [ 1291.076001][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1291.154919][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1291.175994][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1291.180334][ T5902] usb 3-1: can't set config #0, error -71 [ 1291.195087][ T43] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 1291.214033][ T43] usb 6-1: config 7 has an invalid descriptor of length 138, skipping remainder of the config [ 1291.255194][ T5902] usb 3-1: USB disconnect, device number 53 [ 1291.268645][ T43] usb 6-1: config 7 has no interface number 0 [ 1291.274758][ T43] usb 6-1: config 7 interface 187 has no altsetting 0 [ 1291.290797][ T43] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1291.304907][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.316584][T20606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1291.353972][ T43] usb 6-1: Product: syz [ 1291.368410][ T43] usb 6-1: Manufacturer: syz [ 1291.373030][ T43] usb 6-1: SerialNumber: syz [ 1291.416066][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1291.820845][T20622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3585'. [ 1292.045262][ T43] usb 6-1: Cannot retrieve CPort count: -110 [ 1292.152927][ T43] usb 6-1: Cannot retrieve CPort count: -110 [ 1292.161208][ T43] es2_ap_driver 6-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 1292.215991][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1292.456000][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1292.542190][ T43] usb 6-1: USB disconnect, device number 7 [ 1292.846841][T20633] netlink: 'syz.0.3588': attribute type 6 has an invalid length. [ 1293.256010][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1293.496157][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1293.643983][ T30] audit: type=1400 audit(1753266051.503:992): avc: denied { getopt } for pid=20631 comm="syz.3.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1293.711070][T20637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1294.295977][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1294.538518][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1294.570541][ T43] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1294.768352][ T43] usb 5-1: device descriptor read/64, error -71 [ 1295.336002][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1295.476024][ T43] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1295.576065][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1295.695509][T20657] lo speed is unknown, defaulting to 1000 [ 1295.757989][ T43] usb 5-1: device descriptor read/64, error -71 [ 1296.028233][ T43] usb usb5-port1: attempt power cycle [ 1296.376180][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1296.386249][ T43] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1296.408284][ T43] usb 5-1: device descriptor read/8, error -71 [ 1296.465325][T20669] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3598'. [ 1296.615985][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1297.136083][ T43] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1297.209280][T20674] FAULT_INJECTION: forcing a failure. [ 1297.209280][T20674] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.223142][T20674] CPU: 1 UID: 0 PID: 20674 Comm: syz.2.3599 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1297.223166][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1297.223177][T20674] Call Trace: [ 1297.223183][T20674] [ 1297.223190][T20674] dump_stack_lvl+0x16c/0x1f0 [ 1297.223224][T20674] should_fail_ex+0x512/0x640 [ 1297.223252][T20674] ? __kvmalloc_node_noprof+0x124/0x620 [ 1297.223280][T20674] should_failslab+0xc2/0x120 [ 1297.223298][T20674] __kvmalloc_node_noprof+0x137/0x620 [ 1297.223325][T20674] ? nf_hook_entries_grow+0x285/0x860 [ 1297.223358][T20674] ? nf_hook_entries_grow+0x285/0x860 [ 1297.223384][T20674] nf_hook_entries_grow+0x285/0x860 [ 1297.223411][T20674] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 1297.223440][T20674] __nf_register_net_hook+0x1cd/0x730 [ 1297.223462][T20674] nf_register_net_hook+0x109/0x160 [ 1297.223481][T20674] nf_register_net_hooks+0x5d/0xd0 [ 1297.223502][T20674] ip_vs_register_hooks+0xe7/0x150 [ 1297.223525][T20674] ip_vs_add_service+0xd58/0x1550 [ 1297.223552][T20674] ? find_held_lock+0x2b/0x80 [ 1297.223576][T20674] ? do_ip_vs_set_ctl+0xbff/0x11d0 [ 1297.223604][T20674] do_ip_vs_set_ctl+0xee3/0x11d0 [ 1297.223636][T20674] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1297.223659][T20674] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1297.223678][T20674] ? __pfx___might_resched+0x10/0x10 [ 1297.223709][T20674] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1297.223735][T20674] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1297.223776][T20674] ? nf_setsockopt+0x8a/0xf0 [ 1297.223799][T20674] nf_setsockopt+0x8a/0xf0 [ 1297.223822][T20674] ip_setsockopt+0xcb/0xf0 [ 1297.223850][T20674] sctp_setsockopt+0x16c/0xb870 [ 1297.223874][T20674] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1297.223908][T20674] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1297.223931][T20674] ? find_held_lock+0x2b/0x80 [ 1297.223958][T20674] ? selinux_socket_setsockopt+0x6a/0x80 [ 1297.223982][T20674] ? sock_common_setsockopt+0x2e/0xf0 [ 1297.224002][T20674] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1297.224026][T20674] do_sock_setsockopt+0xf3/0x1d0 [ 1297.224050][T20674] __sys_setsockopt+0x1a0/0x230 [ 1297.224082][T20674] __x64_sys_setsockopt+0xbd/0x160 [ 1297.224106][T20674] ? do_syscall_64+0x91/0x4c0 [ 1297.224124][T20674] ? lockdep_hardirqs_on+0x7c/0x110 [ 1297.224150][T20674] do_syscall_64+0xcd/0x4c0 [ 1297.224170][T20674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.224188][T20674] RIP: 0033:0x7fae6038e9a9 [ 1297.224203][T20674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.224221][T20674] RSP: 002b:00007fae601b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1297.224239][T20674] RAX: ffffffffffffffda RBX: 00007fae605b6160 RCX: 00007fae6038e9a9 [ 1297.224251][T20674] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000007 [ 1297.224262][T20674] RBP: 00007fae601b5090 R08: 000000000000002c R09: 0000000000000000 [ 1297.224274][T20674] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1297.224285][T20674] R13: 0000000000000000 R14: 00007fae605b6160 R15: 00007ffea0b71968 [ 1297.224310][T20674] [ 1297.416024][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1297.419228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.541900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.549259][T20672] atomic_op ffff88807b11a998 conn xmit_atomic 0000000000000000 [ 1297.556971][ T43] usb 5-1: device not accepting address 58, error -71 [ 1297.563853][ T43] usb usb5-port1: unable to enumerate USB device [ 1297.647871][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.656058][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1297.750938][T20677] Bluetooth: MGMT ver 1.23 [ 1298.268515][T20689] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3605'. [ 1298.465990][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1298.695986][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1299.495989][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1299.746071][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1300.105511][ T30] audit: type=1400 audit(1753266058.183:993): avc: denied { create } for pid=20696 comm="syz.4.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1300.138655][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.156278][ T30] audit: type=1400 audit(1753266058.183:994): avc: denied { ioctl } for pid=20696 comm="syz.4.3607" path="socket:[66878]" dev="sockfs" ino=66878 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1300.545994][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1300.776705][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1301.301339][T20724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.373590][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3615'. [ 1301.576131][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1301.591497][T17987] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1301.718064][T20733] FAULT_INJECTION: forcing a failure. [ 1301.718064][T20733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.731627][T20733] CPU: 0 UID: 0 PID: 20733 Comm: syz.5.3616 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1301.731650][T20733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1301.731661][T20733] Call Trace: [ 1301.731667][T20733] [ 1301.731674][T20733] dump_stack_lvl+0x16c/0x1f0 [ 1301.731707][T20733] should_fail_ex+0x512/0x640 [ 1301.731738][T20733] _copy_from_user+0x2e/0xd0 [ 1301.731758][T20733] __do_sys_add_key+0x229/0x470 [ 1301.731781][T20733] ? __pfx___do_sys_add_key+0x10/0x10 [ 1301.731802][T20733] ? ksys_write+0x1ac/0x250 [ 1301.731842][T20733] do_syscall_64+0xcd/0x4c0 [ 1301.731862][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.731880][T20733] RIP: 0033:0x7f9e8358e9a9 [ 1301.731895][T20733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1301.731912][T20733] RSP: 002b:00007f9e8431f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1301.731930][T20733] RAX: ffffffffffffffda RBX: 00007f9e837b6160 RCX: 00007f9e8358e9a9 [ 1301.731942][T20733] RDX: 00002000000002c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 1301.731953][T20733] RBP: 00007f9e8431f090 R08: fffffffffffffffe R09: 0000000000000000 [ 1301.731965][T20733] R10: 00000000000000ba R11: 0000000000000246 R12: 0000000000000001 [ 1301.731976][T20733] R13: 0000000000000000 R14: 00007f9e837b6160 R15: 00007fff75844958 [ 1301.732000][T20733] [ 1301.877580][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1301.934349][T17987] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1301.942933][T17987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.962866][T17987] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1301.973862][T17987] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1301.982185][T17987] usb 4-1: Manufacturer: syz [ 1301.999698][T17987] usb 4-1: config 0 descriptor?? [ 1302.056186][T17987] rc_core: IR keymap rc-hauppauge not found [ 1302.062747][T17987] Registered IR keymap rc-empty [ 1302.069401][T17987] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1302.082435][T17987] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 1302.213502][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1302.224679][T17987] usb 4-1: USB disconnect, device number 64 [ 1302.401532][T11409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.587588][T11409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.625994][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1302.902645][T20743] atomic_op ffff888026e3c198 conn xmit_atomic 0000000000000000 [ 1302.936025][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1303.294712][T11409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.655989][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1303.678231][ T5902] IPVS: starting estimator thread 0... [ 1303.809894][T20746] IPVS: using max 38 ests per chain, 91200 per kthread [ 1303.986035][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1304.295797][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1304.304654][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1304.312893][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1304.321913][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1304.329452][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1304.696008][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1304.753473][T11409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.820164][T20766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3623'. [ 1305.016007][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1305.242733][T20764] lo speed is unknown, defaulting to 1000 [ 1305.651634][T20781] 9pnet_fd: Insufficient options for proto=fd [ 1305.735984][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1306.056089][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1306.272435][T20784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1306.427645][ T5845] Bluetooth: hci3: command tx timeout [ 1306.769667][T11409] bridge_slave_1: left allmulticast mode [ 1306.775323][T11409] bridge_slave_1: left promiscuous mode [ 1306.780910][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1307.096004][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1307.127556][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.235776][T11409] bridge_slave_0: left allmulticast mode [ 1307.247836][T11409] bridge_slave_0: left promiscuous mode [ 1307.273385][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.394310][T11409] tipc: Resetting bearer [ 1307.815981][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1308.136026][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1308.291033][ T30] audit: type=1400 audit(1753266066.713:995): avc: denied { lock } for pid=20823 comm="syz.4.3638" path="socket:[68190]" dev="sockfs" ino=68190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1308.314925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1308.461662][ T5845] Bluetooth: hci3: command tx timeout [ 1308.855982][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1308.990652][ T30] audit: type=1326 audit(1753266067.423:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20823 comm="syz.4.3638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cf278e9a9 code=0x0 [ 1309.175985][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1309.237706][T11409] tipc: Disabling bearer [ 1309.789038][T20838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3641'. [ 1309.842085][T11409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.861982][T11409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.888010][T11409] bond0 (unregistering): Released all slaves [ 1309.896229][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1310.069500][ T30] audit: type=1400 audit(1753266068.523:997): avc: denied { map } for pid=20844 comm="syz.2.3643" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1310.097000][T11409] tipc: Left network mode [ 1310.097199][T11963] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1310.109743][ T30] audit: type=1400 audit(1753266068.523:998): avc: denied { execute } for pid=20844 comm="syz.2.3643" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1310.216035][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1310.297710][T11963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.318404][T11963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.332365][T11963] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1310.344061][T11963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.378013][T11963] usb 4-1: config 0 descriptor?? [ 1310.536022][ T5845] Bluetooth: hci3: command tx timeout [ 1310.701941][T20764] chnl_net:caif_netlink_parms(): no params data found [ 1310.927045][T11963] cm6533_jd 0003:0D8C:0022.0044: unknown main item tag 0x0 [ 1310.934367][T11963] cm6533_jd 0003:0D8C:0022.0044: unknown main item tag 0x0 [ 1310.935976][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1310.956272][T11963] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0044/input/input57 [ 1310.988635][T11963] cm6533_jd 0003:0D8C:0022.0044: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 1311.186271][ T30] audit: type=1400 audit(1753266069.603:999): avc: denied { accept } for pid=20839 comm="syz.3.3642" path="socket:[68282]" dev="sockfs" ino=68282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1311.255993][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1311.895611][ T30] audit: type=1400 audit(1753266070.343:1000): avc: denied { map } for pid=20864 comm="syz.4.3646" path="/dev/qat_adf_ctl" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1311.976065][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1312.215999][T17987] usb 4-1: reset high-speed USB device number 65 using dummy_hcd [ 1312.296052][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1312.354289][T11409] hsr_slave_0: left promiscuous mode [ 1312.369864][T11409] hsr_slave_1: left promiscuous mode [ 1312.410169][T11409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.429174][T20885] binder: 20880:20885 ioctl c0306201 0 returned -14 [ 1312.469818][T11409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.636388][ T5845] Bluetooth: hci3: command tx timeout [ 1312.637844][T20890] 9pnet_virtio: no channels available for device syz [ 1312.676475][T11409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.734602][T11409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.816967][T11409] veth1_macvtap: left promiscuous mode [ 1312.836716][T11409] veth0_macvtap: left promiscuous mode [ 1313.016062][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1313.046285][T11409] veth1_vlan: left promiscuous mode [ 1313.052277][T11409] veth0_vlan: left promiscuous mode [ 1313.336003][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1313.450312][ T9] usb 4-1: USB disconnect, device number 65 [ 1314.055976][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1314.376049][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1314.673746][ T5895] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1314.848083][T20912] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3655'. [ 1315.095983][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1315.416007][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1315.580499][ T5895] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1315.598085][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1315.616679][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1315.633804][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1315.645835][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1315.666342][ T5895] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1315.675510][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.720281][T20918] atomic_op ffff88803368a998 conn xmit_atomic 0000000000000000 [ 1315.799879][ T5895] usb 3-1: config 0 descriptor?? [ 1315.884038][T20905] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1315.909296][ T30] audit: type=1400 audit(1753266074.343:1001): avc: denied { bind } for pid=20919 comm="syz.4.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1316.096097][ T30] audit: type=1400 audit(1753266074.453:1002): avc: denied { listen } for pid=20919 comm="syz.4.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1316.121342][ T30] audit: type=1400 audit(1753266074.473:1003): avc: denied { read } for pid=20919 comm="syz.4.3657" path="socket:[67197]" dev="sockfs" ino=67197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1316.135991][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1316.224898][T20924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20924 comm=syz.4.3657 [ 1316.370045][ T5895] plantronics 0003:047F:FFFF.0045: reserved main item tag 0xd [ 1316.409650][ T5895] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1316.456260][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1317.015026][ T5895] usb 3-1: USB disconnect, device number 54 [ 1317.085787][T20764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.102968][T20764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.114041][T20764] bridge_slave_0: entered allmulticast mode [ 1317.131490][T20764] bridge_slave_0: entered promiscuous mode [ 1317.175980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1317.495987][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1317.647684][T20764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.665119][T20764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.682718][T20764] bridge_slave_1: entered allmulticast mode [ 1317.700092][T20764] bridge_slave_1: entered promiscuous mode [ 1317.880487][T20943] FAULT_INJECTION: forcing a failure. [ 1317.880487][T20943] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.921938][T20943] CPU: 0 UID: 0 PID: 20943 Comm: syz.4.3662 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1317.921964][T20943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1317.921975][T20943] Call Trace: [ 1317.921981][T20943] [ 1317.921988][T20943] dump_stack_lvl+0x16c/0x1f0 [ 1317.922021][T20943] should_fail_ex+0x512/0x640 [ 1317.922052][T20943] should_failslab+0xc2/0x120 [ 1317.922069][T20943] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1317.922095][T20943] ? skb_clone+0x190/0x3f0 [ 1317.922116][T20943] skb_clone+0x190/0x3f0 [ 1317.922133][T20943] netlink_deliver_tap+0xabd/0xd30 [ 1317.922159][T20943] netlink_unicast+0x62f/0x850 [ 1317.922183][T20943] ? __pfx_netlink_unicast+0x10/0x10 [ 1317.922201][T20943] ? __build_skb_around+0x278/0x3b0 [ 1317.922231][T20943] netlink_sendmsg+0x8d1/0xdd0 [ 1317.922255][T20943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.922284][T20943] ____sys_sendmsg+0xa95/0xc70 [ 1317.922305][T20943] ? copy_msghdr_from_user+0x10a/0x160 [ 1317.922332][T20943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1317.922365][T20943] ___sys_sendmsg+0x134/0x1d0 [ 1317.922394][T20943] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.922418][T20943] ? __lock_acquire+0x622/0x1c90 [ 1317.922465][T20943] __sys_sendmsg+0x16d/0x220 [ 1317.922482][T20943] ? __pfx___sys_sendmsg+0x10/0x10 [ 1317.922516][T20943] do_syscall_64+0xcd/0x4c0 [ 1317.922535][T20943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.922553][T20943] RIP: 0033:0x7f0cf278e9a9 [ 1317.922568][T20943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1317.922584][T20943] RSP: 002b:00007f0cf36d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.922602][T20943] RAX: ffffffffffffffda RBX: 00007f0cf29b5fa0 RCX: 00007f0cf278e9a9 [ 1317.922614][T20943] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1317.922625][T20943] RBP: 00007f0cf36d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.922636][T20943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.922646][T20943] R13: 0000000000000000 R14: 00007f0cf29b5fa0 R15: 00007ffe9a8828d8 [ 1317.922669][T20943] [ 1317.922809][T20943] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1318.215977][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1318.536079][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1319.063663][T20764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.163600][T20764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.256098][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1319.576001][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1319.686052][ T9] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 1319.697001][T20764] team0: Port device team_slave_0 added [ 1319.722703][T20764] team0: Port device team_slave_1 added [ 1319.928600][ T9] usb 5-1: No LPM exit latency info found, disabling LPM. [ 1319.970013][ T9] usb 5-1: config 1 has an invalid interface number: 6 but max is 2 [ 1320.072128][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1320.091827][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1320.104721][ T9] usb 5-1: config 1 has no interface number 1 [ 1320.236029][T17987] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 1320.275076][ T9] usb 5-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1320.295995][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1320.326552][T20764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.343443][T20764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.372143][ T9] usb 5-1: config 1 interface 6 has no altsetting 0 [ 1320.380916][T20764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.395290][T20969] 9pnet_virtio: no channels available for device syz [ 1320.487280][T17987] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1320.554735][T17987] usb 4-1: config 1 has an invalid interface number: 6 but max is 2 [ 1320.616015][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1320.642843][T11409] IPVS: stop unused estimator thread 0... [ 1320.648020][T17987] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1320.653898][T20764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.117167][T17987] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1321.126568][T17987] usb 4-1: config 1 has no interface number 1 [ 1321.132701][T17987] usb 4-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1321.151501][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1321.165200][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.193007][T20764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.194156][T17987] usb 4-1: config 1 interface 6 has no altsetting 0 [ 1321.239695][T20764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.252535][ T9] usb 5-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 1321.294870][ T9] usb 5-1: Manufacturer: 숯侭ᯒ涸 [ 1321.305457][ T9] usb 5-1: SerialNumber: 鬛눔赭Г谓䄝㓑᮪銇뎼難 [ 1321.319040][T17987] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1321.330748][T17987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.338813][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1321.471139][T17987] usb 4-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 1321.515207][T17987] usb 4-1: Manufacturer: 숯侭ᯒ涸 [ 1321.522764][T17987] usb 4-1: SerialNumber: 鬛눔赭Г谓䄝㓑᮪銇뎼難 [ 1321.601899][T20764] hsr_slave_0: entered promiscuous mode [ 1321.632883][T20764] hsr_slave_1: entered promiscuous mode [ 1321.641097][T20764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1321.655978][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1321.663473][T20764] Cannot create hsr debugfs directory [ 1321.870677][T20957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.886297][T20957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.950626][T20975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.959521][T20975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.014154][ T9] usb 5-1: 0:2 : does not exist [ 1322.062673][T17987] usb 4-1: 0:2 : does not exist [ 1322.070647][ T9] usb 5-1: USB disconnect, device number 59 [ 1322.212334][T17987] usb 4-1: USB disconnect, device number 66 [ 1322.375976][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1322.504724][T20764] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1322.525149][T20764] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1322.549197][T20764] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1322.581344][T20764] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1322.696087][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1323.416044][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1323.418334][T20764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.461633][T20764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.517773][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.524937][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.581623][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.588788][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.735999][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1324.456021][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1324.776034][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1325.496010][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1325.681744][T21057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1325.815984][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1326.045353][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3685'. [ 1326.195069][T21072] FAULT_INJECTION: forcing a failure. [ 1326.195069][T21072] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.208621][T21072] CPU: 0 UID: 0 PID: 21072 Comm: syz.4.3685 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1326.208644][T21072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1326.208655][T21072] Call Trace: [ 1326.208661][T21072] [ 1326.208669][T21072] dump_stack_lvl+0x16c/0x1f0 [ 1326.208702][T21072] should_fail_ex+0x512/0x640 [ 1326.208733][T21072] should_failslab+0xc2/0x120 [ 1326.208751][T21072] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1326.208780][T21072] ? skb_clone+0x190/0x3f0 [ 1326.208802][T21072] skb_clone+0x190/0x3f0 [ 1326.208820][T21072] netlink_deliver_tap+0xabd/0xd30 [ 1326.208846][T21072] netlink_unicast+0x62f/0x850 [ 1326.208871][T21072] ? __pfx_netlink_unicast+0x10/0x10 [ 1326.208899][T21072] netlink_sendmsg+0x8d1/0xdd0 [ 1326.208925][T21072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1326.208957][T21072] ____sys_sendmsg+0xa95/0xc70 [ 1326.208980][T21072] ? copy_msghdr_from_user+0x10a/0x160 [ 1326.209007][T21072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1326.209043][T21072] ___sys_sendmsg+0x134/0x1d0 [ 1326.209072][T21072] ? __pfx____sys_sendmsg+0x10/0x10 [ 1326.209098][T21072] ? __lock_acquire+0x622/0x1c90 [ 1326.209148][T21072] __sys_sendmsg+0x16d/0x220 [ 1326.209166][T21072] ? __pfx___sys_sendmsg+0x10/0x10 [ 1326.209201][T21072] do_syscall_64+0xcd/0x4c0 [ 1326.209222][T21072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.209239][T21072] RIP: 0033:0x7f0cf278e9a9 [ 1326.209255][T21072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1326.209272][T21072] RSP: 002b:00007f0cf3693038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1326.209290][T21072] RAX: ffffffffffffffda RBX: 00007f0cf29b6160 RCX: 00007f0cf278e9a9 [ 1326.209302][T21072] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1326.209313][T21072] RBP: 00007f0cf3693090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.209324][T21072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.209335][T21072] R13: 0000000000000000 R14: 00007f0cf29b6160 R15: 00007ffe9a8828d8 [ 1326.209359][T21072] [ 1326.536007][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1326.692528][T21072] veth3: entered promiscuous mode [ 1326.700921][T21072] bridge3: port 1(veth3) entered blocking state [ 1326.769960][T21072] bridge3: port 1(veth3) entered disabled state [ 1326.856064][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1327.081647][T21072] veth3: entered allmulticast mode [ 1327.192986][T20764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.575979][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1327.896016][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1328.282414][T20764] veth0_vlan: entered promiscuous mode [ 1328.324456][T20764] veth1_vlan: entered promiscuous mode [ 1328.416008][T11963] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1328.615974][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1328.763325][T20764] veth0_macvtap: entered promiscuous mode [ 1328.799549][T20764] veth1_macvtap: entered promiscuous mode [ 1328.830067][T20764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.845168][T20764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.877845][T11963] usb 5-1: Using ep0 maxpacket: 8 [ 1328.877905][T20764] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.893548][T20764] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.902984][T20764] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.912935][T20764] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.914202][T11963] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1328.936774][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1329.012052][T11963] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1329.027190][T10856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.035032][T10856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.048983][T11963] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1329.060796][T11963] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1329.104964][T11963] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1329.122132][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.130148][ T5910] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1329.137062][T11963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.153441][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.412958][ T5902] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1329.417729][ T5910] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1329.431345][T11963] usb 5-1: GET_CAPABILITIES returned 0 [ 1329.438607][ T5910] usb 6-1: config 1 has an invalid interface number: 6 but max is 2 [ 1329.447449][ T5910] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1329.448982][T11963] usbtmc 5-1:16.0: can't read capabilities [ 1329.614872][ T5910] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1329.624865][ T5910] usb 6-1: config 1 has no interface number 1 [ 1329.626346][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 1329.631367][ T5910] usb 6-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1329.653275][T17987] usb 5-1: USB disconnect, device number 60 [ 1329.659310][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1329.681401][ T5902] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1329.688406][ T5910] usb 6-1: config 1 interface 6 has no altsetting 0 [ 1329.705103][ T5902] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1329.720013][ T5910] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1329.723888][ T5902] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1329.739184][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.739209][ T5910] usb 6-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 1329.739230][ T5910] usb 6-1: Manufacturer: 숯侭ᯒ涸 [ 1329.739245][ T5910] usb 6-1: SerialNumber: 鬛눔赭Г谓䄝㓑᮪銇뎼難 [ 1329.783818][ T5902] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1329.832860][ T5902] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1329.862211][ T5902] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1329.899916][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.976086][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1330.237486][T21117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.253804][T21117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.283233][ T5910] usb 6-1: 0:2 : does not exist [ 1330.318209][ T5902] usb 4-1: usb_control_msg returned -32 [ 1330.346063][ T5902] usbtmc 4-1:16.0: can't read capabilities [ 1330.358242][ T5910] usb 6-1: USB disconnect, device number 8 [ 1330.428844][T19347] udevd[19347]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1330.696005][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1331.016041][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1331.177695][T21151] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 5 [ 1331.735997][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1332.056626][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1332.162725][ T30] audit: type=1326 audit(1753266089.903:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21152 comm="syz.2.3697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae6038e9a9 code=0x0 [ 1332.216722][ T5910] usb 4-1: USB disconnect, device number 67 [ 1332.418954][T21167] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3699'. [ 1332.763864][T21176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1332.775974][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1332.893852][T21180] FAULT_INJECTION: forcing a failure. [ 1332.893852][T21180] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.957169][T21180] CPU: 0 UID: 0 PID: 21180 Comm: syz.4.3703 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1332.957195][T21180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1332.957207][T21180] Call Trace: [ 1332.957213][T21180] [ 1332.957221][T21180] dump_stack_lvl+0x16c/0x1f0 [ 1332.957254][T21180] should_fail_ex+0x512/0x640 [ 1332.957280][T21180] ? __kmalloc_noprof+0xbf/0x510 [ 1332.957308][T21180] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1332.957334][T21180] should_failslab+0xc2/0x120 [ 1332.957352][T21180] __kmalloc_noprof+0xd2/0x510 [ 1332.957383][T21180] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1332.957409][T21180] ? cred_has_capability.isra.0+0x193/0x2f0 [ 1332.957440][T21180] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1332.957465][T21180] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1332.957498][T21180] ? bpf_lsm_capable+0x9/0x10 [ 1332.957520][T21180] ? security_capable+0x7e/0x260 [ 1332.957549][T21180] genl_rcv_msg+0x55c/0x800 [ 1332.957576][T21180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1332.957600][T21180] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 1332.957622][T21180] ? __lock_acquire+0x622/0x1c90 [ 1332.957644][T21180] netlink_rcv_skb+0x155/0x420 [ 1332.957664][T21180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1332.957689][T21180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1332.957725][T21180] ? netlink_deliver_tap+0x1ae/0xd30 [ 1332.957744][T21180] ? is_vmalloc_addr+0x86/0xa0 [ 1332.957772][T21180] genl_rcv+0x28/0x40 [ 1332.957793][T21180] netlink_unicast+0x58d/0x850 [ 1332.957817][T21180] ? __pfx_netlink_unicast+0x10/0x10 [ 1332.957845][T21180] netlink_sendmsg+0x8d1/0xdd0 [ 1332.957871][T21180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1332.957901][T21180] ____sys_sendmsg+0xa95/0xc70 [ 1332.957925][T21180] ? copy_msghdr_from_user+0x10a/0x160 [ 1332.957953][T21180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1332.957987][T21180] ___sys_sendmsg+0x134/0x1d0 [ 1332.958017][T21180] ? __pfx____sys_sendmsg+0x10/0x10 [ 1332.958042][T21180] ? __lock_acquire+0x622/0x1c90 [ 1332.958093][T21180] __sys_sendmsg+0x16d/0x220 [ 1332.958111][T21180] ? __pfx___sys_sendmsg+0x10/0x10 [ 1332.958144][T21180] do_syscall_64+0xcd/0x4c0 [ 1332.958164][T21180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.958180][T21180] RIP: 0033:0x7f0cf278e9a9 [ 1332.958195][T21180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1332.958212][T21180] RSP: 002b:00007f0cf36d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1332.958230][T21180] RAX: ffffffffffffffda RBX: 00007f0cf29b5fa0 RCX: 00007f0cf278e9a9 [ 1332.958242][T21180] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1332.958253][T21180] RBP: 00007f0cf36d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.958264][T21180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.958274][T21180] R13: 0000000000000000 R14: 00007f0cf29b5fa0 R15: 00007ffe9a8828d8 [ 1332.958299][T21180] [ 1333.243813][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.250489][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1333.815967][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1334.017540][T21196] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1334.295991][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1334.586279][ T5902] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1334.736850][T21216] 9pnet_virtio: no channels available for device syz [ 1334.856857][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1335.137640][T21223] FAULT_INJECTION: forcing a failure. [ 1335.137640][T21223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.196365][T21223] CPU: 1 UID: 0 PID: 21223 Comm: syz.4.3712 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1335.196391][T21223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1335.196401][T21223] Call Trace: [ 1335.196408][T21223] [ 1335.196415][T21223] dump_stack_lvl+0x16c/0x1f0 [ 1335.196454][T21223] should_fail_ex+0x512/0x640 [ 1335.196486][T21223] _copy_from_user+0x2e/0xd0 [ 1335.196505][T21223] video_usercopy+0xb59/0x1720 [ 1335.196535][T21223] ? __pfx___video_do_ioctl+0x10/0x10 [ 1335.196560][T21223] ? selinux_kernel_read_file+0xf1/0x130 [ 1335.196578][T21223] ? __pfx_video_usercopy+0x10/0x10 [ 1335.196623][T21223] v4l2_ioctl+0x1bd/0x250 [ 1335.196647][T21223] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1335.196674][T21223] __x64_sys_ioctl+0x18e/0x210 [ 1335.196699][T21223] do_syscall_64+0xcd/0x4c0 [ 1335.196719][T21223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.196737][T21223] RIP: 0033:0x7f0cf278e9a9 [ 1335.196752][T21223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1335.196770][T21223] RSP: 002b:00007f0cf36d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.196787][T21223] RAX: ffffffffffffffda RBX: 00007f0cf29b5fa0 RCX: 00007f0cf278e9a9 [ 1335.196799][T21223] RDX: 0000200000000080 RSI: 00000000c0285629 RDI: 0000000000000003 [ 1335.196810][T21223] RBP: 00007f0cf36d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.196821][T21223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.196832][T21223] R13: 0000000000000000 R14: 00007f0cf29b5fa0 R15: 00007ffe9a8828d8 [ 1335.196855][T21223] [ 1335.336039][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1335.577911][ T5902] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 1335.650870][ T5902] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1335.703077][ T5902] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1335.731045][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1335.740370][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.760879][ T5902] usb 3-1: Product: syz [ 1335.770287][ T5902] usb 3-1: Manufacturer: syz [ 1335.895970][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1335.917832][ T5902] usb 3-1: SerialNumber: syz [ 1336.006318][T21208] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1336.306261][T21236] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1336.375986][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1336.385657][ T30] audit: type=1400 audit(1753266094.833:1005): avc: denied { write } for pid=21207 comm="syz.2.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1336.599182][T21249] FAULT_INJECTION: forcing a failure. [ 1336.599182][T21249] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.611909][T21249] CPU: 1 UID: 0 PID: 21249 Comm: syz.5.3717 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1336.611932][T21249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1336.611943][T21249] Call Trace: [ 1336.611951][T21249] [ 1336.611959][T21249] dump_stack_lvl+0x16c/0x1f0 [ 1336.611994][T21249] should_fail_ex+0x512/0x640 [ 1336.612021][T21249] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1336.612051][T21249] should_failslab+0xc2/0x120 [ 1336.612069][T21249] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1336.612096][T21249] ? __alloc_skb+0x2b2/0x380 [ 1336.612127][T21249] __alloc_skb+0x2b2/0x380 [ 1336.612153][T21249] ? __pfx___alloc_skb+0x10/0x10 [ 1336.612178][T21249] ? __lock_acquire+0xb8a/0x1c90 [ 1336.612204][T21249] tipc_buf_acquire+0x26/0xe0 [ 1336.612229][T21249] tipc_msg_build+0x112/0x1150 [ 1336.612259][T21249] ? __pfx_tipc_msg_build+0x10/0x10 [ 1336.612296][T21249] __tipc_sendmsg+0xa30/0x19a0 [ 1336.612329][T21249] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1336.612352][T21249] ? __pfx___schedule+0x10/0x10 [ 1336.612384][T21249] ? __pfx_woken_wake_function+0x10/0x10 [ 1336.612416][T21249] ? preempt_schedule_thunk+0x16/0x30 [ 1336.612455][T21249] tipc_sendmsg+0x4f/0x70 [ 1336.612477][T21249] ____sys_sendmsg+0xa95/0xc70 [ 1336.612501][T21249] ? copy_msghdr_from_user+0x10a/0x160 [ 1336.612528][T21249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1336.612554][T21249] ? kfree+0x24f/0x4d0 [ 1336.612574][T21249] ? __lock_acquire+0xb8a/0x1c90 [ 1336.612596][T21249] ___sys_sendmsg+0x134/0x1d0 [ 1336.612625][T21249] ? __pfx____sys_sendmsg+0x10/0x10 [ 1336.612678][T21249] ? __pfx___might_resched+0x10/0x10 [ 1336.612707][T21249] __sys_sendmmsg+0x200/0x420 [ 1336.612727][T21249] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1336.612753][T21249] ? preempt_schedule_thunk+0x16/0x30 [ 1336.612786][T21249] ? fput+0xe2/0xf0 [ 1336.612806][T21249] ? ksys_write+0x1ac/0x250 [ 1336.612831][T21249] ? __pfx_ksys_write+0x10/0x10 [ 1336.612861][T21249] __x64_sys_sendmmsg+0x9c/0x100 [ 1336.612878][T21249] ? lockdep_hardirqs_on+0x7c/0x110 [ 1336.612905][T21249] do_syscall_64+0xcd/0x4c0 [ 1336.612924][T21249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.612942][T21249] RIP: 0033:0x7f9e8358e9a9 [ 1336.612957][T21249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1336.612974][T21249] RSP: 002b:00007f9e8431f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1336.612991][T21249] RAX: ffffffffffffffda RBX: 00007f9e837b6160 RCX: 00007f9e8358e9a9 [ 1336.613003][T21249] RDX: 0400000000000203 RSI: 0000200000004400 RDI: 0000000000000007 [ 1336.613014][T21249] RBP: 00007f9e8431f090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.613024][T21249] R10: 00000000000101d0 R11: 0000000000000246 R12: 0000000000000001 [ 1336.613035][T21249] R13: 0000000000000000 R14: 00007f9e837b6160 R15: 00007fff75844958 [ 1336.613060][T21249] [ 1336.896259][ T30] audit: type=1400 audit(1753266095.043:1006): avc: denied { connect } for pid=21242 comm="syz.5.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1336.935978][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1337.416021][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1337.459440][ T5902] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 2 proto 1 vid 0x0525 pid 0xA4A8 [ 1337.536334][ T5902] usb 3-1: USB disconnect, device number 55 [ 1337.748198][ T5902] usblp0: removed [ 1337.976010][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1338.455980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1338.799805][T21276] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3722'. [ 1339.016026][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1339.496186][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1340.055982][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1340.535989][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1341.096001][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1341.576038][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1342.135965][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1342.158134][T21310] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3730'. [ 1342.268010][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.279849][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.288332][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.297414][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.305309][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.313234][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.321574][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.330235][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.338478][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.576258][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.594542][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.615991][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1342.716336][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1342.987116][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1343.028377][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1343.176381][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1343.247675][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1343.258258][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1343.267871][ T9] hid-generic 0002:0004:0009.0046: unknown main item tag 0x0 [ 1343.386741][ T9] hid-generic 0002:0004:0009.0046: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1343.656039][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1343.668330][T21334] fido_id[21334]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1343.828097][T21344] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3737'. [ 1343.876134][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1344.215966][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1344.516021][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1344.522561][ T9] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 1344.532004][ T9] usb 6-1: config 8 has no interface number 0 [ 1344.545044][ T9] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1344.695980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1344.710177][ T9] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1344.720082][ T9] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1344.729944][ T9] usb 6-1: config 8 interface 39 has no altsetting 0 [ 1344.807111][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3739'. [ 1345.170346][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1345.195975][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.204005][ T9] usb 6-1: Product: syz [ 1345.219700][ T9] usb 6-1: Manufacturer: syz [ 1345.224330][ T9] usb 6-1: SerialNumber: syz [ 1345.255973][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1345.368932][ T30] audit: type=1400 audit(1753266103.813:1007): avc: denied { mount } for pid=21363 comm="syz.6.3741" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1345.492345][ T9] ipheth 6-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1345.506321][ T9] ipheth 6-1:8.39: probe with driver ipheth failed with error -71 [ 1345.534798][ T9] usb 6-1: USB disconnect, device number 9 [ 1345.738188][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1345.773495][T21375] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3743'. [ 1346.246621][ T30] audit: type=1400 audit(1753266104.683:1008): avc: denied { unmount } for pid=20764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1346.295977][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1346.776037][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1347.335989][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1347.641034][T21391] fuse: Bad value for 'fd' [ 1347.816095][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1348.375969][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1348.856123][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1348.966401][T21425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1349.415982][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1349.743754][T21439] FAULT_INJECTION: forcing a failure. [ 1349.743754][T21439] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.866162][T21439] CPU: 1 UID: 0 PID: 21439 Comm: syz.4.3756 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1349.866187][T21439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1349.866198][T21439] Call Trace: [ 1349.866204][T21439] [ 1349.866211][T21439] dump_stack_lvl+0x16c/0x1f0 [ 1349.866244][T21439] should_fail_ex+0x512/0x640 [ 1349.866274][T21439] should_failslab+0xc2/0x120 [ 1349.866292][T21439] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1349.866318][T21439] ? skb_clone+0x190/0x3f0 [ 1349.866339][T21439] skb_clone+0x190/0x3f0 [ 1349.866356][T21439] netlink_deliver_tap+0xabd/0xd30 [ 1349.866382][T21439] netlink_unicast+0x62f/0x850 [ 1349.866406][T21439] ? __pfx_netlink_unicast+0x10/0x10 [ 1349.866432][T21439] netlink_sendmsg+0x8d1/0xdd0 [ 1349.866457][T21439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1349.866487][T21439] ____sys_sendmsg+0xa95/0xc70 [ 1349.866509][T21439] ? copy_msghdr_from_user+0x10a/0x160 [ 1349.866535][T21439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1349.866568][T21439] ___sys_sendmsg+0x134/0x1d0 [ 1349.866597][T21439] ? __pfx____sys_sendmsg+0x10/0x10 [ 1349.866621][T21439] ? __lock_acquire+0x622/0x1c90 [ 1349.866676][T21439] __sys_sendmsg+0x16d/0x220 [ 1349.866694][T21439] ? __pfx___sys_sendmsg+0x10/0x10 [ 1349.866729][T21439] do_syscall_64+0xcd/0x4c0 [ 1349.866749][T21439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.866767][T21439] RIP: 0033:0x7f0cf278e9a9 [ 1349.866781][T21439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1349.866798][T21439] RSP: 002b:00007f0cf36d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1349.866816][T21439] RAX: ffffffffffffffda RBX: 00007f0cf29b5fa0 RCX: 00007f0cf278e9a9 [ 1349.866828][T21439] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1349.866839][T21439] RBP: 00007f0cf36d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.866850][T21439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.866860][T21439] R13: 0000000000000000 R14: 00007f0cf29b5fa0 R15: 00007ffe9a8828d8 [ 1349.866885][T21439] [ 1349.896023][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1349.896308][ C1] vkms_vblank_simulate: vblank timer overrun [ 1350.093519][ C1] vkms_vblank_simulate: vblank timer overrun [ 1350.199517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1350.455971][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1350.893948][T21449] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3760'. [ 1350.935974][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1351.138486][T21458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1351.496219][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1351.916120][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1351.976032][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1352.160223][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1352.245534][ T9] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 1352.321696][ T9] usb 5-1: config 0 has no interface number 0 [ 1352.388249][ T9] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1352.436199][ T9] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1352.488611][ T9] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1352.519089][ T9] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1352.535978][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1353.016012][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1353.575964][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1353.607590][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1353.610253][T21486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1353.616930][ T9] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1353.925998][ T9] usb 5-1: Product: syz [ 1353.930291][ T9] usb 5-1: Manufacturer: syz [ 1353.935386][ T9] usb 5-1: SerialNumber: syz [ 1353.974579][ T9] usb 5-1: config 0 descriptor?? [ 1354.052259][T21461] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1354.060331][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1354.277943][ T9] usb 5-1: USB disconnect, device number 61 [ 1354.616241][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1354.706376][T21503] binder: BINDER_SET_CONTEXT_MGR already set [ 1354.716011][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1354.729477][T21503] binder: 21502:21503 ioctl 4018620d 200000000040 returned -16 [ 1355.095979][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1355.496057][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1355.565854][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.656078][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1355.701961][T21522] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3773'. [ 1355.843534][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1355.983293][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1356.012899][ T24] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1356.065985][ T24] usb 5-1: Product: syz [ 1356.076302][ T24] usb 5-1: Manufacturer: syz [ 1356.108499][ T24] usb 5-1: SerialNumber: syz [ 1356.136037][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1356.168120][T21543] FAULT_INJECTION: forcing a failure. [ 1356.168120][T21543] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.196422][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input59 [ 1356.229797][T21543] CPU: 0 UID: 0 PID: 21543 Comm: syz.6.3777 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1356.229815][T21543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1356.229822][T21543] Call Trace: [ 1356.229826][T21543] [ 1356.229831][T21543] dump_stack_lvl+0x16c/0x1f0 [ 1356.229853][T21543] should_fail_ex+0x512/0x640 [ 1356.229870][T21543] ? __build_skb_around+0x278/0x3b0 [ 1356.229887][T21543] should_failslab+0xc2/0x120 [ 1356.229899][T21543] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1356.229917][T21543] ? sctp_chunkify+0x51/0x2d0 [ 1356.229935][T21543] sctp_chunkify+0x51/0x2d0 [ 1356.229952][T21543] _sctp_make_chunk+0x148/0x270 [ 1356.229970][T21543] sctp_make_control+0x2f/0x2d0 [ 1356.229987][T21543] sctp_make_heartbeat+0xa7/0x2e0 [ 1356.229997][T21543] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 1356.230007][T21543] ? is_bpf_text_address+0x94/0x1a0 [ 1356.230023][T21543] ? sctp_sm_lookup_event+0x15b/0x570 [ 1356.230041][T21543] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 1356.230059][T21543] ? __pfx_sctp_pname+0x10/0x10 [ 1356.230068][T21543] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 1356.230085][T21543] ? __pfx_sctp_pname+0x10/0x10 [ 1356.230094][T21543] sctp_do_sm+0x181/0x5c80 [ 1356.230109][T21543] ? __pfx_stack_trace_save+0x10/0x10 [ 1356.230128][T21543] ? __pfx_sctp_do_sm+0x10/0x10 [ 1356.230143][T21543] ? kasan_save_stack+0x33/0x60 [ 1356.230158][T21543] ? kasan_save_track+0x14/0x30 [ 1356.230173][T21543] ? __kasan_kmalloc+0xaa/0xb0 [ 1356.230187][T21543] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 1356.230204][T21543] ? sctp_setsockopt+0x4ce/0xb870 [ 1356.230236][T21543] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 1356.230254][T21543] sctp_apply_peer_addr_params+0x113/0x3400 [ 1356.230270][T21543] sctp_setsockopt+0x143b/0xb870 [ 1356.230285][T21543] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1356.230307][T21543] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1356.230321][T21543] ? find_held_lock+0x2b/0x80 [ 1356.230338][T21543] ? selinux_socket_setsockopt+0x6a/0x80 [ 1356.230353][T21543] ? sock_common_setsockopt+0x2e/0xf0 [ 1356.230385][T21543] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1356.230399][T21543] do_sock_setsockopt+0xf3/0x1d0 [ 1356.230413][T21543] __sys_setsockopt+0x1a0/0x230 [ 1356.230433][T21543] __x64_sys_setsockopt+0xbd/0x160 [ 1356.230448][T21543] ? do_syscall_64+0x91/0x4c0 [ 1356.230458][T21543] ? lockdep_hardirqs_on+0x7c/0x110 [ 1356.230475][T21543] do_syscall_64+0xcd/0x4c0 [ 1356.230487][T21543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.230499][T21543] RIP: 0033:0x7f7c80d8e9a9 [ 1356.230508][T21543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.230519][T21543] RSP: 002b:00007f7c81ba3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1356.230530][T21543] RAX: ffffffffffffffda RBX: 00007f7c80fb5fa0 RCX: 00007f7c80d8e9a9 [ 1356.230537][T21543] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 1356.230543][T21543] RBP: 00007f7c81ba3090 R08: 000000000000009c R09: 0000000000000000 [ 1356.230549][T21543] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1356.230556][T21543] R13: 0000000000000000 R14: 00007f7c80fb5fa0 R15: 00007fff1d341c68 [ 1356.230569][T21543] [ 1356.696060][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1357.175974][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1357.333110][ T5910] usb 5-1: USB disconnect, device number 62 [ 1357.339163][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1357.364675][ T5910] appletouch 5-1:1.0: input: appletouch disconnected [ 1357.736065][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1358.216027][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1358.776019][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1359.255974][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1359.816140][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1359.922821][T21587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1360.295157][T21598] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1360.305312][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1360.650911][T21600] FAULT_INJECTION: forcing a failure. [ 1360.650911][T21600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1360.692297][T21600] CPU: 0 UID: 0 PID: 21600 Comm: syz.4.3792 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1360.692317][T21600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1360.692324][T21600] Call Trace: [ 1360.692328][T21600] [ 1360.692333][T21600] dump_stack_lvl+0x16c/0x1f0 [ 1360.692354][T21600] should_fail_ex+0x512/0x640 [ 1360.692379][T21600] _copy_from_user+0x2e/0xd0 [ 1360.692391][T21600] move_addr_to_kernel+0x65/0x170 [ 1360.692406][T21600] __copy_msghdr+0x386/0x470 [ 1360.692424][T21600] copy_msghdr_from_user+0xc1/0x160 [ 1360.692441][T21600] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1360.692461][T21600] ? kfree+0x24f/0x4d0 [ 1360.692475][T21600] ? __pfx__kstrtoull+0x10/0x10 [ 1360.692491][T21600] ___sys_sendmsg+0xfe/0x1d0 [ 1360.692508][T21600] ? __pfx____sys_sendmsg+0x10/0x10 [ 1360.692537][T21600] ? __pfx___might_resched+0x10/0x10 [ 1360.692555][T21600] __sys_sendmmsg+0x200/0x420 [ 1360.692566][T21600] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1360.692581][T21600] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1360.692598][T21600] ? fput+0x70/0xf0 [ 1360.692610][T21600] ? ksys_write+0x1ac/0x250 [ 1360.692626][T21600] ? __pfx_ksys_write+0x10/0x10 [ 1360.692644][T21600] __x64_sys_sendmmsg+0x9c/0x100 [ 1360.692653][T21600] ? lockdep_hardirqs_on+0x7c/0x110 [ 1360.692670][T21600] do_syscall_64+0xcd/0x4c0 [ 1360.692682][T21600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.692694][T21600] RIP: 0033:0x7f0cf278e9a9 [ 1360.692704][T21600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1360.692715][T21600] RSP: 002b:00007f0cf36d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1360.692726][T21600] RAX: ffffffffffffffda RBX: 00007f0cf29b5fa0 RCX: 00007f0cf278e9a9 [ 1360.692733][T21600] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000006 [ 1360.692739][T21600] RBP: 00007f0cf36d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.692746][T21600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.692753][T21600] R13: 0000000000000000 R14: 00007f0cf29b5fa0 R15: 00007ffe9a8828d8 [ 1360.692766][T21600] [ 1360.904734][ C0] vkms_vblank_simulate: vblank timer overrun [ 1360.911469][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1361.103924][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.162026][T21603] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3790'. [ 1361.336346][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1361.387862][ T30] audit: type=1400 audit(1753266119.693:1009): avc: denied { mount } for pid=21604 comm="syz.4.3793" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1361.402645][T21607] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3793'. [ 1361.568166][ T30] audit: type=1400 audit(1753266119.723:1010): avc: denied { mounton } for pid=21604 comm="syz.4.3793" path="/162/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1361.591504][ T30] audit: type=1400 audit(1753266119.953:1011): avc: denied { read } for pid=21604 comm="syz.4.3793" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1361.634137][ T30] audit: type=1400 audit(1753266119.953:1012): avc: denied { open } for pid=21604 comm="syz.4.3793" path="/162/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1361.672026][ T30] audit: type=1400 audit(1753266119.953:1013): avc: denied { read } for pid=21604 comm="syz.4.3793" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1361.975956][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1362.009562][ T30] audit: type=1400 audit(1753266120.153:1014): avc: denied { unmount } for pid=17671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1362.092769][T21617] lo speed is unknown, defaulting to 1000 [ 1362.376114][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1362.653979][T21629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3798'. [ 1362.915940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.016003][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1363.107161][ T5888] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1363.114876][ T30] audit: type=1400 audit(1753266121.553:1015): avc: denied { map } for pid=21631 comm="syz.2.3799" path="socket:[70959]" dev="sockfs" ino=70959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.387390][ T5888] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 1363.405874][ T5888] usb 7-1: config 5 has no interface number 0 [ 1363.415980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1363.446051][ T5888] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1363.485289][ T5888] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1363.952789][ T5888] usb 7-1: config 5 interface 123 has no altsetting 0 [ 1363.970442][ T5888] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1363.985147][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.994167][ T5888] usb 7-1: Product: syz [ 1364.005975][T17987] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1364.015790][ T5888] usb 7-1: Manufacturer: syz [ 1364.023419][ T5888] usb 7-1: SerialNumber: syz [ 1364.056041][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1364.175818][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.199164][T17987] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1364.216122][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.230540][T17987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.259863][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.307850][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.319241][T17987] usb 3-1: config 0 descriptor?? [ 1364.359865][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.375422][T17987] usb 3-1: Invalid firmware size=18. [ 1364.439562][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.456063][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1364.469701][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.508478][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.566023][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.567908][T21653] syzkaller0: entered promiscuous mode [ 1364.582896][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.624296][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.635556][T21653] syzkaller0: entered allmulticast mode [ 1364.734211][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.757025][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.784435][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.843306][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.852457][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.862366][ T9] hid-generic 0002:0004:0009.0047: unknown main item tag 0x0 [ 1364.874356][ T9] hid-generic 0002:0004:0009.0047: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1365.096021][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1365.197670][T21672] fido_id[21672]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1365.215655][ T5888] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1365.269062][ T5888] usb 7-1: USB disconnect, device number 2 [ 1365.505981][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1366.136025][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1366.173470][ T5910] usb 3-1: USB disconnect, device number 56 [ 1366.536020][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1367.175967][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1367.397782][T21689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.473510][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1367.575970][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1367.634616][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1367.678230][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1367.781159][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1367.802965][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1367.853598][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1367.874566][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1367.949427][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1367.969442][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1368.006165][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1368.043836][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1368.063829][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1368.092347][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1368.215979][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1368.293708][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1368.375354][T21719] FAULT_INJECTION: forcing a failure. [ 1368.375354][T21719] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.388701][T21719] CPU: 0 UID: 0 PID: 21719 Comm: syz.6.3813 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1368.388726][T21719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1368.388737][T21719] Call Trace: [ 1368.388743][T21719] [ 1368.388751][T21719] dump_stack_lvl+0x16c/0x1f0 [ 1368.388783][T21719] should_fail_ex+0x512/0x640 [ 1368.388810][T21719] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1368.388839][T21719] should_failslab+0xc2/0x120 [ 1368.388857][T21719] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1368.388884][T21719] ? __rds_conn_create+0x791/0x2340 [ 1368.388908][T21719] __rds_conn_create+0x791/0x2340 [ 1368.388936][T21719] ? __pfx___rds_conn_create+0x10/0x10 [ 1368.388956][T21719] ? lockdep_init_map_type+0x5c/0x280 [ 1368.388979][T21719] rds_conn_create_outgoing+0x44/0x60 [ 1368.389002][T21719] rds_sendmsg+0xe37/0x31f0 [ 1368.389028][T21719] ? __pfx___schedule+0x10/0x10 [ 1368.389060][T21719] ? __pfx_rds_sendmsg+0x10/0x10 [ 1368.389086][T21719] ? rcu_is_watching+0x12/0xc0 [ 1368.389107][T21719] ? irqentry_exit+0x3b/0x90 [ 1368.389123][T21719] ? lockdep_hardirqs_on+0x7c/0x110 [ 1368.389161][T21719] ? ____sys_sendmsg+0xa95/0xc70 [ 1368.389182][T21719] ____sys_sendmsg+0xa95/0xc70 [ 1368.389205][T21719] ? copy_msghdr_from_user+0x10a/0x160 [ 1368.389232][T21719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1368.389260][T21719] ? irqentry_exit+0x3b/0x90 [ 1368.389278][T21719] ___sys_sendmsg+0x134/0x1d0 [ 1368.389307][T21719] ? __pfx____sys_sendmsg+0x10/0x10 [ 1368.389333][T21719] ? __lock_acquire+0x622/0x1c90 [ 1368.389380][T21719] __sys_sendmsg+0x16d/0x220 [ 1368.389403][T21719] ? __pfx___sys_sendmsg+0x10/0x10 [ 1368.389436][T21719] do_syscall_64+0xcd/0x4c0 [ 1368.389455][T21719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.389472][T21719] RIP: 0033:0x7f7c80d8e9a9 [ 1368.389487][T21719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1368.389504][T21719] RSP: 002b:00007f7c81b61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.389522][T21719] RAX: ffffffffffffffda RBX: 00007f7c80fb6160 RCX: 00007f7c80d8e9a9 [ 1368.389535][T21719] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1368.389546][T21719] RBP: 00007f7c81b61090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.389557][T21719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.389568][T21719] R13: 0000000000000000 R14: 00007f7c80fb6160 R15: 00007fff1d341c68 [ 1368.389591][T21719] [ 1368.567076][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1368.585840][ C0] vkms_vblank_simulate: vblank timer overrun [ 1368.626005][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1368.797235][ T9] IPVS: starting estimator thread 0... [ 1369.134083][T21721] IPVS: using max 36 ests per chain, 86400 per kthread [ 1369.190564][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1369.198058][T11963] hid-generic 0002:0004:0009.0048: unknown main item tag 0x0 [ 1369.208008][T11963] hid-generic 0002:0004:0009.0048: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1369.265982][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1369.655957][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1370.102498][T21741] binder_alloc: 21740: pid 21740 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1370.262449][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1370.298075][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1370.305980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1370.337487][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1370.355095][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1370.363676][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1370.371981][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1370.654305][ T30] audit: type=1326 audit(1753266128.913:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21747 comm="syz.3.3821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0350f8e9a9 code=0x0 [ 1370.680613][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1370.696071][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1371.280384][T21734] fido_id[21734]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1371.302802][ T30] audit: type=1400 audit(1753266128.933:1017): avc: denied { connect } for pid=21745 comm="syz.6.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1371.306563][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1371.337876][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1371.398307][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1371.495752][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1371.735988][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1372.303833][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1372.320190][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1372.328564][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1372.375972][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1372.731540][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1372.776023][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1372.783992][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1372.814328][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1372.822274][ T9] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 1373.426132][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1373.443681][T21778] netlink: 'syz.4.3826': attribute type 6 has an invalid length. [ 1373.825947][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1374.327101][ T9] hid-generic 0002:0004:0009.0049: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1374.455961][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1374.501364][T21781] fido_id[21781]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1374.629179][T21786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1374.856026][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1374.890762][T21789] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1375.495968][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1375.895968][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1375.903047][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1376.149100][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.178652][ T9] usb 3-1: config 0 has no interfaces? [ 1376.213405][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1376.250587][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.302173][ T9] usb 3-1: config 0 descriptor?? [ 1376.535971][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1376.574227][T21809] delete_channel: no stack [ 1376.578714][ T30] audit: type=1326 audit(1753266135.013:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6038e9a9 code=0x7ffc0000 [ 1376.578763][ T30] audit: type=1326 audit(1753266135.013:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fae6038e9a9 code=0x7ffc0000 [ 1376.578801][ T30] audit: type=1326 audit(1753266135.013:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6038e9a9 code=0x7ffc0000 [ 1376.603199][ T9] usb 3-1: USB disconnect, device number 57 [ 1376.936030][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1377.209095][ T30] audit: type=1326 audit(1753266135.013:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fae6038e9a9 code=0x7ffc0000 [ 1377.236052][ T30] audit: type=1326 audit(1753266135.023:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6038e9a9 code=0x7ffc0000 [ 1377.257531][T21822] 9pnet_fd: Insufficient options for proto=fd [ 1377.576211][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1377.789756][ T30] audit: type=1326 audit(1753266135.023:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fae6038e9a9 code=0x7ffc0000 [ 1377.816895][ T30] audit: type=1326 audit(1753266135.213:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6038e9a9 code=0x7ffc0000 [ 1377.847527][ T30] audit: type=1326 audit(1753266135.233:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.2.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae6038e9a9 code=0x7ffc0000 [ 1377.975992][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1378.616004][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1378.707440][ T5845] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 1378.865043][ T5910] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1378.991996][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1378.999548][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1379.010159][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1379.017622][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1379.029216][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.070930][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1379.086573][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1379.115801][ T5910] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1379.126870][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1379.136673][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1379.186089][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.206053][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1379.421599][T21845] FAULT_INJECTION: forcing a failure. [ 1379.421599][T21845] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.435039][T21845] CPU: 1 UID: 0 PID: 21845 Comm: syz.5.3841 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1379.435064][T21845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1379.435074][T21845] Call Trace: [ 1379.435082][T21845] [ 1379.435090][T21845] dump_stack_lvl+0x16c/0x1f0 [ 1379.435122][T21845] should_fail_ex+0x512/0x640 [ 1379.435149][T21845] ? __kmalloc_noprof+0xbf/0x510 [ 1379.435178][T21845] ? inotify_handle_inode_event+0x1cf/0x6f0 [ 1379.435198][T21845] should_failslab+0xc2/0x120 [ 1379.435216][T21845] __kmalloc_noprof+0xd2/0x510 [ 1379.435248][T21845] inotify_handle_inode_event+0x1cf/0x6f0 [ 1379.435274][T21845] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 1379.435294][T21845] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 1379.435330][T21845] fsnotify+0x13d6/0x1dc0 [ 1379.435363][T21845] ? __pfx_fsnotify+0x10/0x10 [ 1379.435394][T21845] ? inode_has_perm+0x16f/0x1d0 [ 1379.435421][T21845] __fsnotify_parent+0x7c7/0xc40 [ 1379.435445][T21845] ? __pfx_selinux_file_open+0x10/0x10 [ 1379.435480][T21845] ? __pfx___fsnotify_parent+0x10/0x10 [ 1379.435510][T21845] ? do_dentry_open+0xcfa/0x1c10 [ 1379.435537][T21845] ? __pfx_shmem_file_open+0x10/0x10 [ 1379.435560][T21845] ? vfs_open+0x2e3/0x3f0 [ 1379.435577][T21845] vfs_open+0x2e3/0x3f0 [ 1379.435601][T21845] path_openat+0x1de4/0x2cb0 [ 1379.435633][T21845] ? finish_task_switch.isra.0+0x221/0xc10 [ 1379.435657][T21845] ? lockdep_hardirqs_on+0x7c/0x110 [ 1379.435685][T21845] ? __pfx_path_openat+0x10/0x10 [ 1379.435710][T21845] ? rcu_is_watching+0x12/0xc0 [ 1379.435732][T21845] ? trace_sched_exit_tp+0xde/0x130 [ 1379.435763][T21845] do_filp_open+0x20b/0x470 [ 1379.435790][T21845] ? __pfx_do_filp_open+0x10/0x10 [ 1379.435817][T21845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.435858][T21845] ? rcu_is_watching+0x12/0xc0 [ 1379.435879][T21845] ? irqentry_exit+0x3b/0x90 [ 1379.435897][T21845] ? lockdep_hardirqs_on+0x7c/0x110 [ 1379.435925][T21845] do_open_execat+0xf9/0x380 [ 1379.435950][T21845] ? __pfx_do_open_execat+0x10/0x10 [ 1379.435976][T21845] ? strncpy_from_user+0x76/0x2e0 [ 1379.436001][T21845] ? kasan_check_range+0xbe/0x1b0 [ 1379.436025][T21845] alloc_bprm+0x2d/0x6f0 [ 1379.436052][T21845] do_execveat_common.isra.0+0x1ce/0x610 [ 1379.436084][T21845] __x64_sys_execve+0x8e/0xb0 [ 1379.436111][T21845] do_syscall_64+0xcd/0x4c0 [ 1379.436130][T21845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.436148][T21845] RIP: 0033:0x7f9e8358e9a9 [ 1379.436164][T21845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1379.436181][T21845] RSP: 002b:00007f9e8431f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1379.436198][T21845] RAX: ffffffffffffffda RBX: 00007f9e837b6160 RCX: 00007f9e8358e9a9 [ 1379.436211][T21845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1379.436222][T21845] RBP: 00007f9e8431f090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.436232][T21845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.436242][T21845] R13: 0000000000000000 R14: 00007f9e837b6160 R15: 00007fff75844958 [ 1379.436267][T21845] [ 1379.656070][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1379.657655][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.751295][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.816260][T21843] netlink: 'syz.6.3840': attribute type 6 has an invalid length. [ 1379.857331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.055969][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1380.335781][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1380.346125][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1380.353745][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1380.361604][ T5910] usb 3-1: config 0 descriptor?? [ 1380.366777][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1380.377815][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1380.385267][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1380.392785][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1380.406055][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1380.413684][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1380.421213][ T9] hid-generic 0002:0004:0009.004A: unknown main item tag 0x0 [ 1380.431194][ T9] hid-generic 0002:0004:0009.004A: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1380.551088][T21849] fido_id[21849]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1380.696092][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1381.096024][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1381.162628][ T5910] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1381.187496][T21860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1381.368206][ T5910] cp2112 0003:10C4:EA90.004B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1381.450013][ T5910] cp2112 0003:10C4:EA90.004B: Part Number: 0x00 Device Version: 0x4D [ 1381.608993][T11963] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1381.735978][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1382.123953][ T5910] cp2112 0003:10C4:EA90.004B: error reading lock byte: -71 [ 1382.135956][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1382.165221][ T5910] usb 3-1: USB disconnect, device number 58 [ 1382.222897][ T24] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1382.249425][T11963] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1382.259113][T11963] usb 7-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1382.268470][T11963] usb 7-1: Manufacturer: syz [ 1382.625750][ T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.644718][T11963] kaweth 7-1:64.0: Firmware present in device. [ 1382.672753][ T24] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1382.687355][T11963] kaweth 7-1:64.0: Error reading configuration (-71), no net device created [ 1382.710840][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.733283][T11963] kaweth 7-1:64.0: probe with driver kaweth failed with error -5 [ 1382.743155][ T24] usb 5-1: Product: syz [ 1382.751605][ T24] usb 5-1: Manufacturer: syz [ 1382.767757][ T24] usb 5-1: SerialNumber: syz [ 1382.775975][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1382.792548][T11963] usb 7-1: USB disconnect, device number 3 [ 1383.076129][ T5902] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1383.176093][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1383.266235][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 1383.296569][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1383.324813][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1383.397235][T21884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1383.400812][ T5902] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1383.506445][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.582210][ T5902] usb 6-1: Product: syz [ 1383.605407][ T5902] usb 6-1: Manufacturer: syz [ 1383.630482][ T5902] usb 6-1: SerialNumber: syz [ 1383.731072][ T5902] usb 6-1: config 0 descriptor?? [ 1383.766091][ T5902] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1383.816091][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1383.909245][ T24] usb 5-1: selecting invalid altsetting 1 [ 1383.923072][ T5902] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1383.955138][ T24] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1383.955231][ T24] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1384.140041][ T24] usb 5-1: USB disconnect, device number 63 [ 1384.215960][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1384.328290][T21889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1384.627263][ T5902] em28xx 6-1:0.0: chip ID is em2860 [ 1384.855954][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1384.877017][ T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1385.004711][T21874] input: syz1 as /devices/virtual/input/input61 [ 1385.166320][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1385.240260][ T24] usb 5-1: config index 0 descriptor too short (expected 29970, got 18) [ 1385.256110][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1385.274765][ T24] usb 5-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 1385.329001][ T5902] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1385.345947][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 1385.362173][ T5902] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1385.369275][ T5902] em28xx 6-1:0.0: No AC97 audio processor [ 1385.372720][T19347] udevd[19347]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 1385.398010][ T24] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1385.436013][ T5902] usb 6-1: USB disconnect, device number 10 [ 1385.446304][T19347] udevd[19347]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 1385.457454][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.457482][ T24] usb 5-1: Product: syz [ 1385.457496][ T24] usb 5-1: Manufacturer: syz [ 1385.457510][ T24] usb 5-1: SerialNumber: syz [ 1385.460277][ T5902] em28xx 6-1:0.0: Disconnecting em28xx [ 1385.492749][ T24] usb 5-1: config 0 descriptor?? [ 1385.517872][ T24] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 1385.617630][ T24] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input62 [ 1385.642095][ T5902] em28xx 6-1:0.0: Freeing device [ 1385.664103][ T30] audit: type=1400 audit(1753266144.113:1026): avc: denied { append } for pid=21898 comm="syz.2.3856" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1385.895954][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1386.295963][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1386.935956][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1386.945244][ T30] audit: type=1400 audit(1753266144.133:1027): avc: denied { ioctl } for pid=21898 comm="syz.2.3856" path="/108/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1387.004214][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1387.072611][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1387.080334][ T30] audit: type=1800 audit(1753266145.043:1028): pid=21899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3856" name="/" dev="9p" ino=2 res=0 errno=0 [ 1387.327827][ T24] usb 5-1: USB disconnect, device number 64 [ 1387.346252][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1387.548087][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1387.686357][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1387.693757][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1387.976329][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1388.236037][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.255934][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.276547][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.299220][T21918] 9pnet_virtio: no channels available for device syz [ 1388.317972][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.351874][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.375977][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1388.445155][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.472610][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.543195][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.572308][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.595295][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.622369][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.643690][ T5902] hid-generic 0002:0004:0009.004C: unknown main item tag 0x0 [ 1388.681936][ T5902] hid-generic 0002:0004:0009.004C: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1388.694126][T21932] netlink: 'syz.4.3862': attribute type 3 has an invalid length. [ 1388.828927][T21935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1389.015966][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1389.168129][T21936] fido_id[21936]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1389.416120][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1389.709076][T21950] binder_alloc: 21949: pid 21949 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1390.056198][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1390.466008][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1391.095984][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1391.496028][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1392.136018][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1392.535984][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1392.836046][ T5910] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1393.116030][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 1393.123005][ T5910] usb 6-1: config index 0 descriptor too short (expected 29970, got 18) [ 1393.175969][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1393.216344][ T5910] usb 6-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 1393.576019][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1393.681591][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 1393.719058][ T5910] usb 6-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1393.777769][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.947262][ T5910] usb 6-1: Product: syz [ 1393.952172][ T5910] usb 6-1: Manufacturer: syz [ 1393.961258][ T5910] usb 6-1: SerialNumber: syz [ 1394.215955][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1394.600624][ T5910] usb 6-1: config 0 descriptor?? [ 1394.615958][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1394.731726][ T5910] usb 6-1: can't set config #0, error -71 [ 1394.747546][ T5910] usb 6-1: USB disconnect, device number 11 [ 1395.255948][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1395.296511][ T30] audit: type=1400 audit(1753266153.523:1029): avc: denied { execute } for pid=22018 comm="syz.2.3877" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=72772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1395.620348][T10527] Bluetooth: hci4: Frame reassembly failed (-84) [ 1395.656316][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1396.106883][ C0] ------------[ cut here ]------------ [ 1396.113093][ C0] WARNING: CPU: 0 PID: 19518 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 [ 1396.122703][ C0] Modules linked in: [ 1396.127074][ C0] CPU: 0 UID: 0 PID: 19518 Comm: udevd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1396.136979][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1396.147052][ C0] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 1396.152845][ C0] Code: 0f 0b 90 e9 12 fe ff ff e8 d9 4c b7 f7 90 0f 0b 90 e9 5e fe ff ff e8 cb 4c b7 f7 90 0f 0b 90 e9 94 fe ff ff e8 bd 4c b7 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 2f a0 1c f8 e9 d7 fc ff ff 4c 89 ff e8 [ 1396.172466][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010246 [ 1396.178553][ C0] RAX: 0000000000000000 RBX: ffff8880788d0d80 RCX: ffffffff8a049a87 [ 1396.186579][ C0] RDX: ffff88802888a440 RSI: ffffffff8a049bb3 RDI: 0000000000000005 [ 1396.194565][ C0] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 1396.202587][ C0] R10: 0000000000000fff R11: 0000000000000001 R12: ffff8880788d0d80 [ 1396.210579][ C0] R13: ffff8880788d0e10 R14: ffffc90000007e90 R15: 0000000000000000 [ 1396.218581][ C0] FS: 00007fd3f12aa880(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 1396.227524][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1396.234088][ C0] CR2: 00007ffc1afa9e48 CR3: 000000007dcd1000 CR4: 00000000003526f0 [ 1396.242072][ C0] Call Trace: [ 1396.245333][ C0] [ 1396.248171][ C0] ? inet6_cleanup_sock+0x117/0x210 [ 1396.253352][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 1396.258980][ C0] __sk_destruct+0x81/0x980 [ 1396.263469][ C0] ? rcu_core+0x797/0x14e0 [ 1396.267876][ C0] rcu_core+0x799/0x14e0 [ 1396.272109][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1396.276813][ C0] ? run_timer_base+0x121/0x190 [ 1396.281656][ C0] handle_softirqs+0x219/0x8e0 [ 1396.286436][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1396.291714][ C0] __irq_exit_rcu+0x109/0x170 [ 1396.296410][ C0] irq_exit_rcu+0x9/0x30 [ 1396.300645][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1396.306309][ C0] [ 1396.309231][ C0] [ 1396.312161][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1396.318163][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1396.323368][ C0] Code: 76 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 32 b6 10 0f 0f 82 74 02 00 00 8b 35 1a e8 10 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 c9 75 37 12 0f 85 c7 02 00 00 48 83 c4 [ 1396.342986][ C0] RSP: 0018:ffffc9000566f858 EFLAGS: 00000206 [ 1396.349068][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c4e00 RCX: 00000000ef9d33e4 [ 1396.357035][ C0] RDX: 0000000000000000 RSI: ffffffff8de0aca5 RDI: ffffffff8c1573e0 [ 1396.364981][ C0] RBP: 0000000000000002 R08: 0ac0d5affe09d4ff R09: 0000000000000000 [ 1396.372945][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1396.380910][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1396.388902][ C0] ? is_module_text_address+0x144/0x230 [ 1396.394448][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1396.400622][ C0] is_bpf_text_address+0x36/0x1a0 [ 1396.405653][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 1396.410852][ C0] kernel_text_address+0x8d/0x100 [ 1396.415857][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1396.421087][ C0] __kernel_text_address+0xd/0x40 [ 1396.426102][ C0] unwind_get_return_address+0x59/0xa0 [ 1396.431553][ C0] arch_stack_walk+0xa6/0x100 [ 1396.436224][ C0] stack_trace_save+0x8e/0xc0 [ 1396.440880][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1396.446247][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1396.451160][ C0] kasan_save_stack+0x33/0x60 [ 1396.455818][ C0] ? kasan_save_stack+0x33/0x60 [ 1396.460661][ C0] ? kasan_save_track+0x14/0x30 [ 1396.465498][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1396.470524][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1396.476155][ C0] ? getname_flags.part.0+0x4c/0x550 [ 1396.481416][ C0] ? getname_flags+0x93/0xf0 [ 1396.486009][ C0] ? vfs_fstatat+0xe1/0xf0 [ 1396.490403][ C0] ? __do_sys_newfstatat+0x97/0x120 [ 1396.495591][ C0] ? do_syscall_64+0xcd/0x4c0 [ 1396.500284][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.506368][ C0] kasan_save_track+0x14/0x30 [ 1396.511024][ C0] __kasan_slab_alloc+0x89/0x90 [ 1396.515853][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1396.521354][ C0] ? getname_flags.part.0+0x4c/0x550 [ 1396.526634][ C0] getname_flags.part.0+0x4c/0x550 [ 1396.531722][ C0] getname_flags+0x93/0xf0 [ 1396.536131][ C0] vfs_fstatat+0xe1/0xf0 [ 1396.540350][ C0] __do_sys_newfstatat+0x97/0x120 [ 1396.545364][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 1396.550998][ C0] ? do_user_addr_fault+0x843/0x1370 [ 1396.556305][ C0] do_syscall_64+0xcd/0x4c0 [ 1396.560785][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.566667][ C0] RIP: 0033:0x7fd3f0b11b0a [ 1396.571056][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1396.590661][ C0] RSP: 002b:00007ffc1afa9e48 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 1396.599062][ C0] RAX: ffffffffffffffda RBX: 00005626890bf01b RCX: 00007fd3f0b11b0a [ 1396.607023][ C0] RDX: 00007ffc1afa9e50 RSI: 00007ffc1afa9ee0 RDI: 00000000ffffff9c [ 1396.614967][ C0] RBP: 00005626b134a6d0 R08: 00005626890bf01b R09: 0000000000000000 [ 1396.622926][ C0] R10: 0000000000000100 R11: 0000000000000202 R12: 00005626b134a7c0 [ 1396.630895][ C0] R13: 00007ffc1afa9ee0 R14: 00007ffc1afac020 R15: 00005626890c5bcc [ 1396.638867][ C0] [ 1396.641862][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1396.649116][ C0] CPU: 0 UID: 0 PID: 19518 Comm: udevd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1396.658994][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1396.669027][ C0] Call Trace: [ 1396.672282][ C0] [ 1396.675118][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1396.679692][ C0] panic+0x71c/0x800 [ 1396.683568][ C0] ? __pfx_panic+0x10/0x10 [ 1396.687961][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 1396.693141][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1396.698321][ C0] ? inet_sock_destruct+0x684/0x830 [ 1396.703504][ C0] check_panic_on_warn+0xab/0xb0 [ 1396.708420][ C0] __warn+0xf6/0x3c0 [ 1396.712292][ C0] ? inet_sock_destruct+0x684/0x830 [ 1396.717467][ C0] report_bug+0x3c3/0x580 [ 1396.721775][ C0] ? inet_sock_destruct+0x684/0x830 [ 1396.726950][ C0] handle_bug+0x184/0x210 [ 1396.731263][ C0] exc_invalid_op+0x17/0x50 [ 1396.735743][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1396.740573][ C0] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 1396.746357][ C0] Code: 0f 0b 90 e9 12 fe ff ff e8 d9 4c b7 f7 90 0f 0b 90 e9 5e fe ff ff e8 cb 4c b7 f7 90 0f 0b 90 e9 94 fe ff ff e8 bd 4c b7 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 2f a0 1c f8 e9 d7 fc ff ff 4c 89 ff e8 [ 1396.765944][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010246 [ 1396.771986][ C0] RAX: 0000000000000000 RBX: ffff8880788d0d80 RCX: ffffffff8a049a87 [ 1396.779946][ C0] RDX: ffff88802888a440 RSI: ffffffff8a049bb3 RDI: 0000000000000005 [ 1396.787906][ C0] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 1396.795856][ C0] R10: 0000000000000fff R11: 0000000000000001 R12: ffff8880788d0d80 [ 1396.803818][ C0] R13: ffff8880788d0e10 R14: ffffc90000007e90 R15: 0000000000000000 [ 1396.811776][ C0] ? inet_sock_destruct+0x557/0x830 [ 1396.816970][ C0] ? inet_sock_destruct+0x683/0x830 [ 1396.822169][ C0] ? inet6_cleanup_sock+0x117/0x210 [ 1396.827348][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 1396.832956][ C0] __sk_destruct+0x81/0x980 [ 1396.837440][ C0] ? rcu_core+0x797/0x14e0 [ 1396.841832][ C0] rcu_core+0x799/0x14e0 [ 1396.846083][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1396.850781][ C0] ? run_timer_base+0x121/0x190 [ 1396.855625][ C0] handle_softirqs+0x219/0x8e0 [ 1396.860373][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1396.865638][ C0] __irq_exit_rcu+0x109/0x170 [ 1396.870298][ C0] irq_exit_rcu+0x9/0x30 [ 1396.874516][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1396.880132][ C0] [ 1396.883052][ C0] [ 1396.885977][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1396.891943][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1396.897130][ C0] Code: 76 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 32 b6 10 0f 0f 82 74 02 00 00 8b 35 1a e8 10 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 c9 75 37 12 0f 85 c7 02 00 00 48 83 c4 [ 1396.916725][ C0] RSP: 0018:ffffc9000566f858 EFLAGS: 00000206 [ 1396.922772][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c4e00 RCX: 00000000ef9d33e4 [ 1396.930719][ C0] RDX: 0000000000000000 RSI: ffffffff8de0aca5 RDI: ffffffff8c1573e0 [ 1396.938666][ C0] RBP: 0000000000000002 R08: 0ac0d5affe09d4ff R09: 0000000000000000 [ 1396.946623][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1396.954590][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1396.962555][ C0] ? is_module_text_address+0x144/0x230 [ 1396.968085][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1396.974219][ C0] is_bpf_text_address+0x36/0x1a0 [ 1396.979229][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 1396.984402][ C0] kernel_text_address+0x8d/0x100 [ 1396.989403][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1396.994575][ C0] __kernel_text_address+0xd/0x40 [ 1396.999593][ C0] unwind_get_return_address+0x59/0xa0 [ 1397.005061][ C0] arch_stack_walk+0xa6/0x100 [ 1397.009728][ C0] stack_trace_save+0x8e/0xc0 [ 1397.014383][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1397.019744][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1397.024666][ C0] kasan_save_stack+0x33/0x60 [ 1397.029321][ C0] ? kasan_save_stack+0x33/0x60 [ 1397.034156][ C0] ? kasan_save_track+0x14/0x30 [ 1397.038990][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1397.043994][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1397.049606][ C0] ? getname_flags.part.0+0x4c/0x550 [ 1397.054867][ C0] ? getname_flags+0x93/0xf0 [ 1397.059436][ C0] ? vfs_fstatat+0xe1/0xf0 [ 1397.063832][ C0] ? __do_sys_newfstatat+0x97/0x120 [ 1397.069014][ C0] ? do_syscall_64+0xcd/0x4c0 [ 1397.073666][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.079741][ C0] kasan_save_track+0x14/0x30 [ 1397.084416][ C0] __kasan_slab_alloc+0x89/0x90 [ 1397.089256][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1397.094700][ C0] ? getname_flags.part.0+0x4c/0x550 [ 1397.099966][ C0] getname_flags.part.0+0x4c/0x550 [ 1397.105057][ C0] getname_flags+0x93/0xf0 [ 1397.109453][ C0] vfs_fstatat+0xe1/0xf0 [ 1397.113670][ C0] __do_sys_newfstatat+0x97/0x120 [ 1397.118669][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 1397.124285][ C0] ? do_user_addr_fault+0x843/0x1370 [ 1397.129555][ C0] do_syscall_64+0xcd/0x4c0 [ 1397.134035][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.139905][ C0] RIP: 0033:0x7fd3f0b11b0a [ 1397.144295][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1397.163886][ C0] RSP: 002b:00007ffc1afa9e48 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 1397.172276][ C0] RAX: ffffffffffffffda RBX: 00005626890bf01b RCX: 00007fd3f0b11b0a [ 1397.180311][ C0] RDX: 00007ffc1afa9e50 RSI: 00007ffc1afa9ee0 RDI: 00000000ffffff9c [ 1397.188257][ C0] RBP: 00005626b134a6d0 R08: 00005626890bf01b R09: 0000000000000000 [ 1397.196203][ C0] R10: 0000000000000100 R11: 0000000000000202 R12: 00005626b134a7c0 [ 1397.204157][ C0] R13: 00007ffc1afa9ee0 R14: 00007ffc1afac020 R15: 00005626890c5bcc [ 1397.212138][ C0] [ 1397.215375][ C0] Kernel Offset: disabled [ 1397.219688][ C0] Rebooting in 86400 seconds..