last executing test programs: 2m27.865708602s ago: executing program 1 (id=657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x80000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0xffffffff, 'geneve0\x00', 'wlan1\x00', {0xff}, {}, 0x5c, 0x2, 0x33}, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0xffffffff, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x3]}}}, @common=@unspec=@devgroup={{0x38}, {0x6, 0x9, 0x3, 0x0, 0x4000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) 2m26.519145403s ago: executing program 1 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0b06c9000300fa"], 0xe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/48, 0x30}], 0x1, 0x70000, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x31, [0xbfc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7453, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 2m25.429173968s ago: executing program 1 (id=665): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x5, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x40, {{0x10, 0x4, 0x3, 0x10, 0x40, 0x66, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x2}, @generic={0x94, 0x2}, @noop, @end, @lsrr={0x83, 0x7, 0x7f, [@loopback]}, @timestamp_prespec={0x44, 0x1c, 0x84, 0x3, 0xe, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x8000}, {@empty, 0x2}]}]}}}}}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) recvmmsg$unix(r4, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8dff}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 2m24.438622819s ago: executing program 1 (id=668): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x80, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001200)="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", 0x294}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5", 0x1a6}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d", 0x36}, {&(0x7f0000002e80)="f610e61ac81cc3edc86f05f10dfd1efe17d2e3ba0f2e18", 0x17}, {&(0x7f0000000600)="2054ce9fa34fbc4a1d8599d1a76a4eed8f72f60371dddce7359a1148790a0c992a07daee0eb1228eb2f9f181950dc0e31e832382fff7f4ddad1cfcd672cb1a056e38d318caa400d7337babdaeaf27ff333d856ee2db5efc6273fa1d97845016598d153009f0be2760b6ed06c406f44161b416c8208fd03985252ffc7c27b03a6e66a31d3cc7b1997622b12c3063c2cdd27a3b6fd00e1c4456e65f0804e61b29c97264b5653e220b61068a81d10655f50c4e0bb8589770a0deb1bb209c8e56fab252a06a232496b908b8d68c5446ea1c6b9a2832a12baca720deac13a643984457a8597ece1e2868285626d0c4e29836c6b2b41e328b9d6b0", 0xf8}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 2m24.111991318s ago: executing program 1 (id=670): connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000380)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0xd17, 0x0, 0x0, 0x1}}, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$UHID_DESTROY(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000007c0)={0x0, 0x989680}, 0x0) 2m23.914124663s ago: executing program 1 (id=671): add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffff8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0xd0, 0x0, 0x2b8, 0x530, 0x388, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @remote, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'wg1\x00', {0x5}}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {0xff}, {}, 0x11, 0x0, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [0x0, 0xff], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local, [], [0x0, 0x0, 0xffffff00], [0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r1, r1, 0x0, 0x20000000003f) r2 = dup(r1) fallocate(r2, 0x11, 0x0, 0x40000080400) write$UHID_INPUT(r2, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) 2m8.498024901s ago: executing program 32 (id=671): add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffff8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0xd0, 0x0, 0x2b8, 0x530, 0x388, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @remote, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'wg1\x00', {0x5}}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {0xff}, {}, 0x11, 0x0, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [0x0, 0xff], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local, [], [0x0, 0x0, 0xffffff00], [0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r1, r1, 0x0, 0x20000000003f) r2 = dup(r1) fallocate(r2, 0x11, 0x0, 0x40000080400) write$UHID_INPUT(r2, &(0x7f0000001040)={0x8, {"44e0cd5784bf23badd2ff5bb11724270cdd2f581391632721bf69ce4dcf8862664fcf428c4a8b83e33f2cd6397b83173d5ea0828847e2098c00df450d1010f504f51d52f6fb35c8c66f9789af3a815349ec3d941c06e351b3927abe26c0d1b268a79f3421316e73fc59b0fed816e561433684e4d26c0b0fdd717314ebcc203bd5f5f4dcd99bbd552939ac34267bea8b15a92ed914af37f8f320bea806dc249d438644166d9268a32197fd6ac9fed7502e718e0cd6a50229d12bbbc1cd245ae372a6a597da502d9eef86587463a2d2960b6833c7841d726309ebdab6bbc7a4ddd7038ec11ef2e391f133f01bb8da7b87748954ed43f7c0ad1332f5b0ed4cad8b24e058b93b314bf23adf442300b768b75eedd64e1d21e82e08f8b4c83f1fdc611277c79fa0c4c4b448edf7bfe076f94a083a4cbf04eab812e2b2e729c2826a3209b5a263428428573d417f5421e3f8dac3374ad8f0168f0e67a2f531a54a00ce31d541ba2f4860ff1912d05c09db4e96c99a74d52aa9728b8f320658ee88532fcb2012643ebe9c121cb3dda92f2dec4a8605d803ee380213a0c669046504ae6f15f8fb4519f23e6d3efe9b6d2214b3d4736edb1120b14a534415eaf0e4208722010eb77f86dddd2687477bf19c428a468d65e9e64888fa20b6b64b9d5f42f79157b40b17b25130c45f0950fe397f29c2ece38c86563d3427d3e0e228be67a339f883b1067d740eb6223f352c9464062e5e0192789ab304a83393dca0f3227ad1e5fcb469189efa3740b9a5ac40e0e366c2c0c132c416c0b1141f173a59f04f0ab6d67acf2b2b69f33a789e347c474f9700e1e11566f55c104f46dbcc1c848b0d28d01cb314f2422cd156feb658d9710dab513d554b927f92be82e12e1b824db4e698ecf12fb63d65baac184fd4619f908e7bb2aabc20c81812ec08dab94012e13f9368deff1400c8733840184ef667e84b539d174c0d43e20fb9acb22df3d72c7c0292fc528f2536ad0504b307d991da5895e399db81ddaaa7fa5c67cdbc8e504c7242c381f5de135a62fa721939ce0d4a768d2fc6ea5a23e50db167ca6e0c7d492109ea18bed065bfc14bac1795c7d1bb768087bb8f9ddfe1ddf0f250ef4778c503a96cd8c851f42e9c084053c5b8864a19c438768af204131b706163f5beba7a5181d035b7a8c1e5142ac004d577c3940bc3beb6ebc87d2620298b7129c27487599b1c46b2f786ff9369dc73753bd9eaff1e29e50d204b25961f3dc6253a838562e0ee1a0056c870b632c1a514dc55ff2357e1ebd7d91028a1d5ead23ea3a95620def53ee477f56992403acea22ad6288a7c68e58e22687b7869f5524fb499cd9d1dcc6fbd0c6d04d005a69d7c9aa0c6f0e7cda5c50aa478b35de33b5af95cfa7b0a22486793fa6e75938b85aa070466248630fb84198ed9c3676f86b798e40645cba711f5578922706ad37c8e327fec24422a9b6312147b9ac23fdc9eb7d8d072f6075598b615175ddf9d34db25c4eebee9e1f5c2e908ba7a3957834b67003a45218699a75f511d6419b9d09dc8abadf6e7e81d79df8ca2d73ce927a81f704745123122c591eaac5b5cbdef7758208619c235df5b6b3b1acc345cfefe5711d69f5836c8ef347104db32601eb98c0d4446a5b4f4eac17ad797e09cb1f42f832c69f2730d55cb0388b6d6522211d5a48b373645fa8af4c73c355e5cbf49bf43a6353d915b37baf3bf7a2ec2dec34d6ffafae2696edf4fbaefe60e2138eb217139a3f20783d32ac55080f33254daeb87d8ad25b643008fb6d667504ccba88b46a7def38544fc5c8cc729dba655ee9fe447935d17a455d75742df3298c753aabe728f2094a9c0a9bf19805dca096e79106ec40cd19933335e0f73c59d59b33b724721727be7d3d6437ba4fc42914148a186c764e860e3db345ececbd427dd1b01cca7d0f096eddf9f5dfe83547eff79caf6d7dccdc0c09573c8ad5dbdad26f01d242f86aafe215f99d7230c8822b774912baad7dec1baf3479c853ca665dd64065ed626db6cadacb68f0257e56239b7b38ef018b96ed5c2f133b232578be4965cfe26538d08f211e45a9611d1d1eb239a42c46f229e8b82e099dea7f4e80956c2c2ebd90c79c597c07122b7a336153110a49195dddf5cf35367367bc560f88441b8a7a2549abb05e95916921efef67ea3c12437e9037764c805311f3df61a886d71656fbcc4b0c2dc374885d00551f461af6a4cc669b46522727763892502cb639b78e655493d2da1d3a2ff4b3760c79196cd527dfff152b006d31472fa2a354ef7526e76ddb87d0db4c9a248625a4cf7261ed27c63b9025b2a102e5fe336c85a4decef326676e5bcd1984a9288c2ebdedc1e117c6dd73a0a14007a8fd389c7aed64d216176110c00bba64f0d342e7901fd36be34454c2a4f9dbbfb8f9d81b9ff0891314b7f00b06f5c907011ded4151c76c05c22e8642d3cb08ef310c0290d0a399afb2811c2fc87bbcc3ec6ae7406ab1978a0cde74b307f5851bf799765a85d7aa704a323aa508c0a4d989de746ad1f78fefd9cef9f72322ea7635168ae3a24e90eb58310ce6b144233f3fe01438a835863cece8c047ba2c23579cebb26d33e159161c0a99479c5b375a9c864108a9410b12f3965c8e4040923ffcae3c2a76f608a42a77a5c8e29d9d2896a619a0e8ce2446a12dcb51fbfdcf76279ac1d08cf7656b38c3d1d682bdb87da27ce6c47372e5abe786599d4f5309735a455b43523004e89f950441aa5bf00530bd12c3b5e664b35824551456adf778a66ea5f3045b9de37552224db783e11006a7f075ca0d6d56ef21c1484891caa4e1d48dee1493bfd6b5a54480df45fbd1715c834ba28a50179bce3051a991ce862a494127a657140440d7b8401bf81a04721b34f19275d93506378f69b844e4ca514827da3ab35dc8c068ef173ccd84079453c9c487ce95821541e93aef4e2ea38dbf758165d7f3160488423c4ecd589d8bfd3ec4787cfab6f411d9ce7e10c2f3b1ac0e852434bb305c9e46bb23d2aab42eeb1627678839873561edf24935af9007f84fa078fe241f13ec39f9146f852c767db908ea829c31d1d30a23feaa33f00ff3a99cfd2a014aff7b5934ba8982fe26d051d55cbf062cc89eaa2f42188c3734d36166b22a0d4c2134ac25f0a3471cfecb1274666548c4a9b0e347005886c70f39147619a8db607c578f1d15611573cc6e024adcd574d79d9218e421204ca4cfaaf9fe39075c662ffddff05c64f5bf5a6c31d24679c3f84994995d39f7b7d3fd4b36d4e21c88eeedf743965f824be6e73e8978a1a7b920f647abc3e345bdb51396e49967217e47043271b2b5ac121a0e7400df32fc6100f4783b4a32d4e950370157c49b22ed44e92eb7e18f23e94bd22616df7cb32495fe55966ade0e49dfcbb9cfb975f77492b841489e366c74ee701b30f7d5fe3b1108d333f42638c7211829eaede94399b93c6b1ba77e3505d07750fb53de083df4e15c0999754dc87ead63fbc7cc656330a36e668dcddf4123de4e744935d671ae79ed86a722bf196eb7bf9c9f6ccbd181877a876504b8d52844f5fe87e8ff54c3e7d6f4df701fd46fb828b2557be0be146ca1d4c33f11257d61e16eaee49dbbb58b8411369d54dc9c2dff60352de35c384a6ce150e11b08be7aeec000e150737710ae3f8b2729262dba742d9d0c617d6ec53ac78b08de172f1297e28623b7381a1634831a4484323c64509ca6374601a1d7adb857434cd85b6b6bf3ea397557f47c7898702573ed3b93f9005093da7be4feee6dd2386216dd33947e57880b7a89d4a27b38ed651002aee69c96cfc8143f994a1082c17fd6521f56ed626ae3fa8dcb15399ab74029b67c85d61f889939999227172d6b1f01f76ac48a625006ec98929060afc27c70491b2defec485af6849bb3e69a17a8eb90eb71c7862108fda255919d851038a9e51bee92fcb2e949543e410aae68f31dfb400afd0e14810c86b217d016dccb495a50c34820d9f2e9dcea37aa01d9e571db684074c69b76a806e92eb4e1a867e218f88e64d9a9bdb1f0cea0cc55ed3d9df39bbcbf0a7381381b01de1fe8ac5583e6d90c951c8e801e6717f524e07e3a448da99622e320fa3f4b36700af24efb20d6a7a240d506c16444ebbf0ef8f27159d57a1c72a2f74dfa722ba9b15018f5182a73172ee57806527ebb455431e400801e77afc5cf9230c809b8d5954256aacf0d53761b89855728e4bc82f7c8bea18bfbdd936553d3ac2f38ee2892f53cb5ffccb13a7d0059c499a5dada2f971c376be1644c25c4ea836bfe58cfa80dd3dec903b9d65eb1cabbc2390d71391cbb1509203617417005efdd2bb048db80fb3172cb5e3bd2ca7478b2aff519a49ef61dee27a9c40c7df74ba163ca70dfcdc1f354289b04dfe1916cf82f817194b89a7e90270df6164cd8fd8099c6c37f3c74c1ac561c4d123bea3195a5bcd6a15efad1d2e5c747ba7ab94935aaec292bc2345bd6728d09cb50c77d3389b718c1eb0d57b99bc467a221257a3974f32a4b3622199e134aa8ba7e0475bbbfacf235ba2f30242bc1569e529db12169b23f6099b6173ce46e1356fd1693d2a0b6712dd88f2f063b79466154ffdc4ba45d55f31d3cabdd1ff5dee4f92d4e912d265bfbca58529233602f91050bd44d6d4755121cfc2c3a1ac701e2f48dffc305496951698ca930e85aa639c895c4488d4e470bf05ce4cc85a60d37ca0a3e887052c87647a0fd29dc8fe99d22d06110454055c9671a66660a5598b155d7eed03c17b10bf675ac833f99638b01e98e0f4dc11ff7a4f14364ac15a0f3c8362252bfdad171e73092bded60195c26bcf7b848bc8dec7d2a432c23a81068946ca32620e2962a05a8a5373eb202cf67c76f831db86bfa6a52ef6fb22a29414cded76a0714c07f3873bf0c3ad009b22d003d91bd9eccdbe10fb216fe3756722cd2bc19385fd71fded3faa4e67a91f776f755de0910c0637bd3af05adddb91c6716632136636b4de68e9580573b6780dc4627c0bdd7d8ac14bf707c064b8e150a0c5e5309b29c87f71c7c4bb1c98dd1752556087cdadfaca8145bb7845f7530be20bda904104610c992e7e0a9180b600b7639777799e5beb2fc9fc9da160deaf7e76906ea1f6fece69f8647cb577a5d9bd843ec280cbfbeded43fb03d16f81455bcacc81dbefa3bb2b9fa639bc35711f8b7144d0308b5516d19a25e1c2833e4d19e6fa7ad61612be39b186bd6e8b58d60df0d07f090c163ebf9fcced24392e361d4bf9f048e4c2494e8e2177da94076194a5f7031ca93fdf4fa20162888e2449d5f95e24d933f2ad6b3e297de46f2d02c76086705618b9a533aa96c32ef46e1bef32bdf9621d1ac70d28d4aca1580db42e24fd71561aea26fff2da9cafff6e6845101e76db00d92db44e49b3e5ce9e1b2bb2dc7064812353d0e5961bac51f8ae808f7f6bfee07b73bd81b9730cac0c92f9a6b61065903634c756f07d588fd058d5908679ed394af16048ed32a0aa812f5cc35d74e40328ce913d9a00fcd3a6fea9b9c4836925e294a8804280be44fc1a91a05391765caeb9796868009a8fb211b374084a0cb7efcf16a427eed05c655b432afb4e7032bc846490123c06e990a654eb04a1ea19bb8d9987d3c6836ce93cdf0e30c612385f016d74d8f2c1d9c09ad3c9c1f4a023c7b2d87b70d7742e509019417dd9fdb80bd5519e0053feeaf863dd09c28499c8c9042f971e81f35bfaea82d774897011c3bfe60413f74f456ccba194c", 0x1000}}, 0x1006) 1m2.25765898s ago: executing program 5 (id=911): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8001}, 0x8) 1m1.7578541s ago: executing program 5 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000", @ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) futimesat(0xffffffffffffff9c, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x4000004) 1m0.223745278s ago: executing program 5 (id=916): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = open(&(0x7f0000000000)='./file0\x00', 0x20400, 0x20) write$UHID_CREATE2(r6, &(0x7f0000000500)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x8b, 0xb, 0x0, 0x2, 0x7, 0x6bfbcfa8, "f37b635149672f7ccde86255c01c46a47d49469e19e66c18fcda1e7f6e48b54c2ea300888e0d4c420381e19b7cb361b3063bd1bf48883746aef5e88b4c94c22540282cca47fdf275c106973c5b4ecb203af86cf2631dfb201dd10cec2d7c0edd7ca5718592dd63c33c9dd22fee2526e1052e5bea851e65c46e30804aec210a384cdfb6ecfb864505bf56ac"}}, 0x1a3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 59.182826861s ago: executing program 5 (id=919): io_setup(0x3, &(0x7f0000000000)=0x0) r1 = timerfd_create(0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x1, &(0x7f0000000100), 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) getsockopt$inet_int(r8, 0x10d, 0xaf, &(0x7f0000000080), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8001}, 0x8) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4}) 57.608846511s ago: executing program 5 (id=923): ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x40240, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0145401, 0x0) userfaultfd(0x1) socket$inet6_sctp(0xa, 0x0, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000015640)=""/102400, 0x19000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) syz_open_procfs(0x0, 0x0) 56.689039766s ago: executing program 5 (id=928): socket(0xa, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0x0, 0x0, 0xee00) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) listen(r0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'devices'}]}, 0x9) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x13, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x10, &(0x7f00000001c0)={r6, 0x2}, 0xc) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @private0, 0xffff7fff}}}, 0x32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x16d002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r10, 0x0) 44.872252026s ago: executing program 4 (id=967): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="ce", 0x1}], 0x1}}], 0x1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='bic\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b67bcb1b997ce8b6325d151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7", 0x99}, {&(0x7f0000000e40)="029993440c7a0c95d3bb8cf353fd63ca88ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c364fb7ac429e434ccb0320483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca001c470155ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f80)="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", 0x11d}], 0x3, 0x0, 0x1100}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000003c0)="637f13327edf6958d5eb40fd8be1a9419ba517e0ad8ec4880f265ddadd5e9e14cb5d234bdb829a214933aa1434af24f75c3b6a5c45911e14ef9639ffbfa994adc6600edaaca058e0fde494b3c160033fdddb9df3ef", 0x55}], 0x1}}], 0x2, 0xc0) 43.352242243s ago: executing program 4 (id=971): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x80, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001200)="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", 0x294}, {&(0x7f0000000bc0)="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", 0x1a6}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463", 0x35}, {&(0x7f0000002e80)="f610e61ac81cc3edc86f05f10dfd1efe17d2e3ba0f2e1825", 0x18}, {&(0x7f0000000600)="2054ce9fa34fbc4a1d8599d1a76a4eed8f72f60371dddce7359a1148790a0c992a07daee0eb1228eb2f9f181950dc0e31e832382fff7f4ddad1cfcd672cb1a056e38d318caa400d7337babdaeaf27ff333d856ee2db5efc6273fa1d97845016598d153009f0be2760b6ed06c406f44161b416c8208fd03985252ffc7c27b03a6e66a31d3cc7b1997622b12c3063c2cdd27a3b6fd00e1c4456e65f0804e61b29c97264b5653e220b61068a81d10655f50c4e0bb8589770a0deb1bb209c8e56fab252a06a232496b908b8d68c5446ea1c6b9a2832a12baca720deac13a643984457a8597ece1e2868285626d0c4e29836c6b2b41e328b9d6b0", 0xf8}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 41.767390341s ago: executing program 4 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x302, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r4, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x7, [@enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0xf, 0xfffff000}, {0x0, 0x998}, {0x3, 0xa}, {0xd, 0xfb8}, {0x4, 0x1ff}, {0x0, 0x10000}, {0x10, 0x4}]}, @enum={0x5}]}, {0x0, [0x61, 0x4f, 0x0, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/145, 0x6f, 0x91, 0x1, 0x8001, 0x0, @void, @value}, 0x28) r8 = socket$can_j1939(0x1d, 0x2, 0x7) process_vm_readv(0x0, &(0x7f0000000ac0)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000980)=""/91, 0x5b}, {&(0x7f0000000a00)=""/153, 0x99}], 0x5, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/7, 0x7}], 0x1, 0x0) recvmsg$can_j1939(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)=""/42, 0x2a}], 0x8, &(0x7f0000000580)=""/26, 0x1a}, 0x2000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r10, 0xa, 0x13) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 40.582911236s ago: executing program 33 (id=928): socket(0xa, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0x0, 0x0, 0xee00) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) listen(r0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'devices'}]}, 0x9) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x13, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x10, &(0x7f00000001c0)={r6, 0x2}, 0xc) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @private0, 0xffff7fff}}}, 0x32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x16d002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r10, 0x0) 40.574460366s ago: executing program 4 (id=979): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200180100000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000ec000380e800"], 0x1ac}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(r0, r5, 0x0, 0x7ffff000) 34.434523422s ago: executing program 4 (id=991): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = gettid() get_robust_list(r3, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000680)={&(0x7f00000005c0)}, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)}}, &(0x7f00000007c0)=0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1}, 0x18) r7 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @loopback}}, [0x9, 0x9, 0x8000000000000000, 0x2, 0x0, 0x81, 0x9, 0xff, 0x10, 0x5, 0xf, 0x3, 0x8, 0xfffffffffffffe00, 0xb]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000500)={r8, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x6, 0x9, 0x4, 0x6, 0x6, 0x8}, &(0x7f0000000240)=0x9c) syz_open_dev$sndctrl(&(0x7f0000000180), 0x80000001, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r9, 0x6, &(0x7f0000000000)=0xffff7fff) sched_setscheduler(r9, 0x1, &(0x7f0000000000)=0x2) 31.141624577s ago: executing program 4 (id=997): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = userfaultfd(0x80c00) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00008dc000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000015000/0x400000)=nil) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/64, 0x40}], 0x5) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f000001a880)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000000, 0x3) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/64, 0x40}], 0x5) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f000001a880)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000000, 0x3) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b66, &(0x7f0000000040)={0x3e, 0x0}) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) eventfd(0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000005c0)={'veth0_vlan\x00', 0xff}) 10.034382166s ago: executing program 2 (id=1063): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) mkdir(0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x21, 0x5, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="68000000000901036f5d67df4ef4c23bad0002000000000000050000030c000480080001400000000f08000640000000000900010073797a3100000000080003400f006015100002000c00028005000100060000000800034000000808008c07e349001a1256440609000100"], 0x68}}, 0x4000) socket(0x15, 0x1, 0x8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="2d706964732074590de88a0500000000000000e418606d38"], 0x6) write$cgroup_subtree(r6, &(0x7f00000061c0)=ANY=[@ANYBLOB='+pi'], 0x6) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x200, 0x7, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd451, 0x0, 0xf, 0x793652c9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0xe411, 0x10000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb921, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) 9.13786416s ago: executing program 3 (id=1065): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @local, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x0, 0x0, 0x1000000}, 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1004000, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e823e, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) accept(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000240)=0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x80000000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) 9.062459963s ago: executing program 6 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000", @ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x4000004) 7.751215662s ago: executing program 3 (id=1068): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9dc, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0xc, 0x9, 0x3, 0x18, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x40, 0xbe, &(0x7f0000000640)=""/190, 0x41000, 0x21, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)=[{0x1, 0x1, 0x9, 0xe}], 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000000)='./file0\x00', 0x8e040, 0x0) r2 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x113000, 0x0, 0x9}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r2, 0x47f6, 0x8dd1, 0x0, 0x0, 0x0) 7.41391765s ago: executing program 2 (id=1069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4008004) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x20000000, 0x0, {0x0, 0x0, 0x0, r7, {0x2}}}, 0x24}}, 0x0) io_uring_enter(r3, 0x1066, 0x0, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, r1, 0x3c1ef5685f8d0157, 0x0, 0x4, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x24}}, 0x4) 7.229646392s ago: executing program 6 (id=1070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8000) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r3 = socket$alg(0x26, 0x5, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) bind$alg(r3, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {0xec, 0x0, 0x0, 0xb3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x0, 0x0, 0x0, 0x0, 0xa, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xba]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x115, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x9, 0x2000002], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffffff52, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8000) (async) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) (async) socket$alg(0x26, 0x5, 0x0) (async) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) (async) bind$alg(r3, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) (async) accept4(r3, 0x0, 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) (async) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {0xec, 0x0, 0x0, 0xb3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x0, 0x0, 0x0, 0x0, 0xa, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xba]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r5, 0x5501) (async) write$uinput_user_dev(r5, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x115, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x9, 0x2000002], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffffff52, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) (async) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) (async) 6.790150289s ago: executing program 3 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x302, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x7, [@enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0xf, 0xfffff000}, {0x0, 0x998}, {0x3, 0xa}, {0xd, 0xfb8}, {0x4, 0x1ff}, {0x0, 0x10000}, {0x10, 0x4}]}, @enum={0x5}]}, {0x0, [0x61, 0x4f, 0x0, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/145, 0x6f, 0x91, 0x1, 0x8001, 0x0, @void, @value}, 0x28) r7 = socket$can_j1939(0x1d, 0x2, 0x7) process_vm_readv(0x0, &(0x7f0000000ac0)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000980)=""/91, 0x5b}, {&(0x7f0000000a00)=""/153, 0x99}], 0x5, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/7, 0x7}], 0x1, 0x0) recvmsg$can_j1939(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)=""/42, 0x2a}], 0x8, &(0x7f0000000580)=""/26, 0x1a}, 0x2000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r9, 0xa, 0x13) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 6.781341857s ago: executing program 0 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2d, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r7, 0x701, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) 5.032852846s ago: executing program 0 (id=1074): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306201b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) 5.027980315s ago: executing program 3 (id=1075): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)={0xb, {{0xa, 0x0, 0x0, @mcast2, 0x1fffffe}}, 0x1}, 0x90) 4.880689258s ago: executing program 2 (id=1076): io_setup(0x3, &(0x7f0000000000)=0x0) r1 = timerfd_create(0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1, &(0x7f0000000100), 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) getsockopt$inet_int(r6, 0x10d, 0xaf, &(0x7f0000000080), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8001}, 0x8) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4}) 4.809583228s ago: executing program 0 (id=1077): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x0) 4.681902635s ago: executing program 6 (id=1078): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcd702000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x19, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f00"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_dev$media(&(0x7f0000001200), 0x7, 0x100) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf2501000000000000000b400000004c00180000080000000000000000000000000000000000000000000000000000000600"/89], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x4008840) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x10000000) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 4.670170586s ago: executing program 2 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000", @ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x4000004) 3.700504126s ago: executing program 6 (id=1080): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x40) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[0x3, 0x8, 0x8]}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x4e22, 0xd, 0x4e24, 0x0, 0xa, 0x80, 0xa0, 0x29}, {0xe8, 0x2, 0x8, 0x10, 0x7f, 0xb4, 0x9f4, 0x7fff}, {0x1, 0x80000000000005, 0x9, 0x3}, 0x57, 0x6e6bc1, 0x1, 0x1, 0x0, 0x3}, {{@in6=@private1, 0x4d4, 0x6c}, 0x2, @in=@remote, 0x34ff, 0x3, 0x0, 0x3, 0x3, 0x28000000, 0x80}}, 0xe8) r2 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xb) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000340)=0x8338) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) bind$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) mount(&(0x7f0000002400)=@loop={'/dev/loop', 0x0}, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)='affs\x00', 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x30, r6, 0xfd135000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000300)=[@clear_death, @acquire_done], 0x0, 0x0, 0x0}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r7, 0xc074510c, 0x0) openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2043}, 0x18) 3.511411381s ago: executing program 0 (id=1081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x141, 0x7000000, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x3c8) 3.227000743s ago: executing program 2 (id=1082): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9dc, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0xc, 0x9, 0x3, 0x18, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x40, 0xbe, &(0x7f0000000640)=""/190, 0x41000, 0x21, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)=[{0x1, 0x1, 0x9, 0xe}], 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000000)='./file0\x00', 0x8e040, 0x0) r2 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x113000, 0x0, 0x9}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r2, 0x47f6, 0x8dd1, 0x0, 0x0, 0x0) 3.013879903s ago: executing program 0 (id=1083): syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x8, 0x0, 0x0, 0x0, 0x3000000) rmdir(&(0x7f0000000080)='./file0\x00') write$FUSE_NOTIFY_STORE(r0, 0x0, 0x2b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000053d2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000380)={0x0, 0xcc5f, 0x0, 0x3, 0x26e}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_io_uring_setup(0x2c82, &(0x7f0000000300)={0x0, 0xe09, 0x20, 0x0, 0x3cf, 0x0, r2}, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000480), 0x0, 0x4) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40044) 1.966485052s ago: executing program 6 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2d, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r7, 0x701, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) 1.84964833s ago: executing program 0 (id=1085): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8054) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18230000", @ANYRES32, @ANYBLOB="00000100000000e320bcb700", @ANYRES32, @ANYBLOB="00000000000000005336060010000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r6, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r7, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4}) 984.352633ms ago: executing program 3 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x48b, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x20000000, 0x40000004, 0xfffffffd}, @private=0xa010102, @empty, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r4, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) r5 = open(&(0x7f0000001080)='./file1\x00', 0x145142, 0xc) lseek(r5, 0x1, 0x4) setns(r5, 0x4000000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 888.091119ms ago: executing program 6 (id=1087): pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @default, 0x4, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @rand_addr=0x64010101}, {0x306, @link_local}, 0x20, {0x2, 0x4e22, @rand_addr=0x64010100}, 'veth0\x00'}) recvmmsg$unix(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9, 0x5, 0x9, 0x9400, 0x7, 0x5, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x18}, 0x728}}, 0x6, 0x1, 0xb9c, 0x4, 0x8}}, &(0x7f0000000380)=0xb0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r2, 0xfffffffb, 0x6, 0x1}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) pipe2$watch_queue(&(0x7f00000000c0), 0x80) 0s ago: executing program 3 (id=1088): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) socket$inet(0x2, 0x800, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) kernel console output (not intermixed with test programs): nk_sendmsg+0x813/0xd70 [ 256.151568][ T7998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.156844][ T7998] ____sys_sendmsg+0xaaf/0xc90 [ 256.161597][ T7998] ? copy_msghdr_from_user+0x10b/0x160 [ 256.167037][ T7998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.172308][ T7998] ? hlock_class+0x4e/0x130 [ 256.176793][ T7998] ? __lock_acquire+0x163e/0x3ce0 [ 256.181820][ T7998] ___sys_sendmsg+0x135/0x1e0 [ 256.186505][ T7998] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.191706][ T7998] ? __pfx___lock_acquire+0x10/0x10 [ 256.196900][ T7998] ? __pfx___might_resched+0x10/0x10 [ 256.202183][ T7998] ? __might_fault+0xe3/0x190 [ 256.206927][ T7998] __sys_sendmmsg+0x1a1/0x450 [ 256.211592][ T7998] ? __pfx___sys_sendmmsg+0x10/0x10 [ 256.216779][ T7998] ? vfs_write+0x306/0x1150 [ 256.221283][ T7998] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 256.227284][ T7998] ? fput+0x30/0x390 [ 256.231165][ T7998] ? ksys_write+0x1ad/0x260 [ 256.235661][ T7998] ? __pfx_ksys_write+0x10/0x10 [ 256.240508][ T7998] __x64_sys_sendmmsg+0x9c/0x100 [ 256.245433][ T7998] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.250617][ T7998] do_syscall_64+0xcd/0x250 [ 256.255109][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.260999][ T7998] RIP: 0033:0x7f4bad77e719 [ 256.265400][ T7998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.285064][ T7998] RSP: 002b:00007f4bae5bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 256.293490][ T7998] RAX: ffffffffffffffda RBX: 00007f4bad935f80 RCX: 00007f4bad77e719 [ 256.301453][ T7998] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 256.309414][ T7998] RBP: 00007f4bae5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 256.317370][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.325322][ T7998] R13: 0000000000000000 R14: 00007f4bad935f80 R15: 00007ffcd227d458 [ 256.333003][ T51] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 256.333293][ T7998] [ 256.453787][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 256.472808][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 256.533689][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 256.545324][ T51] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 256.562874][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.579209][ T51] usb 5-1: config 0 descriptor?? [ 256.771533][ T29] audit: type=1400 audit(1730517774.113:450): avc: denied { write } for pid=8010 comm="syz.2.570" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 257.512768][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 257.916453][ T8022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.572'. [ 257.953469][ T29] audit: type=1400 audit(1730517775.293:451): avc: denied { audit_write } for pid=8019 comm="syz.0.572" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 257.953519][ T29] audit: type=1400 audit(1730517775.303:452): avc: denied { setopt } for pid=8019 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.552812][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 259.066030][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.072395][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.155332][ T29] audit: type=1400 audit(259.123:453): avc: denied { setopt } for pid=8021 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.212268][ T51] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 259.231382][ T51] asix 5-1:0.0: probe with driver asix failed with error -71 [ 259.573254][ T8034] netlink: 'syz.4.577': attribute type 9 has an invalid length. [ 259.581033][ T8034] netlink: 134640 bytes leftover after parsing attributes in process `syz.4.577'. [ 259.592783][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 259.829674][ T51] usb 5-1: USB disconnect, device number 25 [ 260.052425][ T29] audit: type=1400 audit(259.683:454): avc: denied { write } for pid=8036 comm="syz.2.578" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 260.420048][ T8046] fuse: Bad value for 'group_id' [ 260.428247][ T8046] fuse: Bad value for 'group_id' [ 260.633744][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 260.880214][ T8046] netdevsim netdevsim4: Direct firmware load for .Þ failed with error -2 [ 260.888738][ T8046] netdevsim netdevsim4: Falling back to sysfs fallback for: .Þ [ 261.682789][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 262.722846][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 263.146883][ T8066] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 263.158966][ T8066] overlayfs: missing 'lowerdir' [ 263.163589][ T29] audit: type=1400 audit(263.023:455): avc: denied { mount } for pid=8059 comm="syz.2.585" name="/" dev="ramfs" ino=15470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 263.228431][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.584'. [ 263.243673][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 263.264873][ T8068] tmpfs: Unknown parameter 'grpyukta_i' [ 263.271755][ T8068] dummy0: entered promiscuous mode [ 263.448859][ T8072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8072 comm=syz.0.587 [ 263.461748][ T8071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8071 comm=syz.0.587 [ 263.752776][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 264.792966][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 264.799030][ T8090] ebtables: ebtables: counters copy to user failed while replacing table [ 265.443254][ T29] audit: type=1400 audit(265.413:456): avc: denied { ioctl } for pid=8079 comm="syz.0.591" path="socket:[16699]" dev="sockfs" ino=16699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 265.607809][ T29] audit: type=1400 audit(265.563:457): avc: denied { watch watch_reads } for pid=8094 comm="syz.4.594" path="/106/control" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 265.832789][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 266.309040][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 266.605320][ T8068] dummy0: left promiscuous mode [ 266.882944][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 267.423574][ T29] audit: type=1400 audit(267.383:458): avc: denied { create } for pid=8116 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 267.470450][ T8121] 9pnet_fd: Insufficient options for proto=fd [ 267.880717][ T8130] sctp: [Deprecated]: syz.3.604 (pid 8130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.880717][ T8130] Use struct sctp_sack_info instead [ 267.912792][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 268.550892][ T29] audit: type=1400 audit(267.843:459): avc: denied { write } for pid=8123 comm="syz.3.604" path="socket:[16766]" dev="sockfs" ino=16766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 268.649058][ T2138] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 268.757901][ T29] audit: type=1400 audit(267.843:460): avc: denied { nlmsg_write } for pid=8123 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 268.952780][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 269.992795][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 270.401690][ T8147] FAULT_INJECTION: forcing a failure. [ 270.401690][ T8147] name failslab, interval 1, probability 0, space 0, times 0 [ 270.414413][ T8147] CPU: 0 UID: 0 PID: 8147 Comm: syz.4.608 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 270.425013][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.435117][ T8147] Call Trace: [ 270.438402][ T8147] [ 270.441337][ T8147] dump_stack_lvl+0x16c/0x1f0 [ 270.446041][ T8147] should_fail_ex+0x497/0x5b0 [ 270.450732][ T8147] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 270.456396][ T8147] should_failslab+0xc2/0x120 [ 270.461097][ T8147] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 270.467442][ T8147] ? sidtab_sid2str_get+0x17a/0x680 [ 270.472658][ T8147] kmemdup_noprof+0x29/0x60 [ 270.477178][ T8147] sidtab_sid2str_get+0x17a/0x680 [ 270.482223][ T8147] sidtab_entry_to_string+0x33/0x110 [ 270.487526][ T8147] security_sid_to_context_core+0x35c/0x640 [ 270.493439][ T8147] avc_audit_post_callback+0x1ac/0x8c0 [ 270.498911][ T8147] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 270.504908][ T8147] ? audit_log_format+0xe9/0x130 [ 270.509877][ T8147] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 270.515871][ T8147] ? skb_put+0x138/0x1b0 [ 270.520133][ T8147] ? audit_log_n_string+0x251/0x540 [ 270.525352][ T8147] ? audit_log_n_untrustedstring+0xf2/0x100 [ 270.531278][ T8147] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 270.537299][ T8147] common_lsm_audit+0x260/0x2210 [ 270.542255][ T8147] ? __pfx_common_lsm_audit+0x10/0x10 [ 270.547640][ T8147] ? __pfx_lock_release+0x10/0x10 [ 270.552672][ T8147] ? __pfx_avc_node_free+0x10/0x10 [ 270.557800][ T8147] ? rcu_is_watching+0x12/0xc0 [ 270.562592][ T8147] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 270.568414][ T8147] ? lockdep_hardirqs_on+0x7c/0x110 [ 270.573637][ T8147] ? slow_avc_audit+0x17d/0x210 [ 270.578595][ T8147] slow_avc_audit+0x17d/0x210 [ 270.583295][ T8147] ? __pfx_slow_avc_audit+0x10/0x10 [ 270.588510][ T8147] ? avc_denied+0x138/0x180 [ 270.593039][ T8147] ? avc_has_perm_noaudit+0x2f8/0x3a0 [ 270.598431][ T8147] avc_has_perm+0x18d/0x1c0 [ 270.602957][ T8147] ? __pfx_avc_has_perm+0x10/0x10 [ 270.608000][ T8147] ? find_held_lock+0x2d/0x110 [ 270.612787][ T8147] sock_has_perm+0x256/0x2f0 [ 270.617396][ T8147] ? __pfx_sock_has_perm+0x10/0x10 [ 270.622544][ T8147] ? lock_acquire+0x2f/0xb0 [ 270.627080][ T8147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.633011][ T8147] selinux_netlink_send+0x2a9/0x570 [ 270.638239][ T8147] ? __pfx__copy_from_iter+0x10/0x10 [ 270.643535][ T8147] ? __virt_addr_valid+0x1a4/0x590 [ 270.648662][ T8147] ? __pfx_selinux_netlink_send+0x10/0x10 [ 270.654403][ T8147] ? __virt_addr_valid+0x5e/0x590 [ 270.659538][ T8147] security_netlink_send+0x1e3/0x210 [ 270.664857][ T8147] netlink_sendmsg+0x83f/0xd70 [ 270.669738][ T8147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.675046][ T8147] ? avc_has_perm_noaudit+0x143/0x3a0 [ 270.680458][ T8147] sock_write_iter+0x4fe/0x5b0 [ 270.685248][ T8147] ? __pfx_sock_write_iter+0x10/0x10 [ 270.690567][ T8147] ? __pfx_file_has_perm+0x10/0x10 [ 270.695706][ T8147] do_iter_readv_writev+0x532/0x7f0 [ 270.700928][ T8147] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 270.706671][ T8147] ? bpf_lsm_file_permission+0x9/0x10 [ 270.712056][ T8147] ? security_file_permission+0x71/0x210 [ 270.717714][ T8147] vfs_writev+0x363/0xdd0 [ 270.722070][ T8147] ? find_held_lock+0x2d/0x110 [ 270.726859][ T8147] ? __pfx_vfs_writev+0x10/0x10 [ 270.731734][ T8147] ? find_held_lock+0x2d/0x110 [ 270.736526][ T8147] ? __pfx_lock_release+0x10/0x10 [ 270.741570][ T8147] ? trace_lock_acquire+0x14a/0x1d0 [ 270.746800][ T8147] ? __fget_files+0x244/0x3f0 [ 270.751536][ T8147] ? do_writev+0x289/0x370 [ 270.755979][ T8147] do_writev+0x289/0x370 [ 270.760261][ T8147] ? __pfx_do_writev+0x10/0x10 [ 270.765060][ T8147] do_syscall_64+0xcd/0x250 [ 270.769598][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.775604][ T8147] RIP: 0033:0x7f734497e719 [ 270.780034][ T8147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.799761][ T8147] RSP: 002b:00007f73443bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 270.808199][ T8147] RAX: ffffffffffffffda RBX: 00007f7344b36130 RCX: 00007f734497e719 [ 270.816188][ T8147] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000004 [ 270.824176][ T8147] RBP: 00007f73443bd090 R08: 0000000000000000 R09: 0000000000000000 [ 270.832182][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.840174][ T8147] R13: 0000000000000000 R14: 00007f7344b36130 R15: 00007fffc5829a88 [ 270.848182][ T8147] [ 271.032772][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 271.199625][ T29] audit: type=1400 audit(526.363:461): avc: denied { getopt } for pid=8138 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.219686][ T29] audit: type=1400 audit(526.363:462): avc: denied { nlmsg_read } for pid=8140 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tsid=146 tclass=netlink_tcpdiag_socket permissive=1 [ 271.594655][ T29] audit: type=1400 audit(527.563:463): avc: denied { ioctl } for pid=8152 comm="syz.4.610" path="socket:[16827]" dev="sockfs" ino=16827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.643471][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 271.689157][ T8155] netlink: 'syz.3.611': attribute type 11 has an invalid length. [ 271.987359][ T2138] usb 1-1: device not accepting address 19, error -71 [ 272.072810][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.222919][ T965] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 272.693050][ T965] usb 4-1: Using ep0 maxpacket: 16 [ 272.720779][ T965] usb 4-1: config 253 has an invalid interface number: 157 but max is 3 [ 272.729644][ T965] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 272.749797][ T965] usb 4-1: config 253 has 1 interface, different from the descriptor's value: 4 [ 272.764830][ T965] usb 4-1: config 253 has no interface number 0 [ 272.773582][ T965] usb 4-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 272.782978][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.790982][ T965] usb 4-1: Product: syz [ 272.801522][ T8163] netlink: 'syz.0.614': attribute type 10 has an invalid length. [ 272.832761][ T965] usb 4-1: Manufacturer: syz [ 272.857248][ T965] usb 4-1: SerialNumber: syz [ 272.904110][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.912479][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.967503][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.974686][ T8163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.983629][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.990711][ T8163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.113051][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 273.137676][ T8163] bridge0: entered promiscuous mode [ 273.139062][ T965] r8712u: register rtl8712_netdev_ops to netdev_ops [ 273.149602][ T965] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 273.158406][ T8163] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 273.221462][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'. [ 273.241715][ T29] audit: type=1400 audit(529.203:464): avc: denied { connect } for pid=8165 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 273.264484][ T965] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 273.271128][ T965] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 273.280090][ T965] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 273.299217][ T8171] bridge_slave_1: left allmulticast mode [ 273.323934][ T8171] bridge_slave_1: left promiscuous mode [ 273.332206][ T965] usb 4-1: USB disconnect, device number 14 [ 273.332735][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 273.370160][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.398284][ T8171] bridge_slave_0: left allmulticast mode [ 273.423411][ T8171] bridge_slave_0: left promiscuous mode [ 273.429246][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.479177][ T8171] bond0: (slave bridge0): Releasing backup interface [ 273.486341][ T5878] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 273.515639][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.529604][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.554030][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.616725][ T9] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 273.629974][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.661732][ T9] usb 2-1: config 0 descriptor?? [ 274.152808][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.500583][ T9] acrux 0003:1A34:0802.0008: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 274.511834][ T9] acrux 0003:1A34:0802.0008: no inputs found [ 274.575243][ T9] acrux 0003:1A34:0802.0008: Failed to enable force feedback support, error: -19 [ 275.192816][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 275.851270][ T8190] sctp: [Deprecated]: syz.4.620 (pid 8190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.851270][ T8190] Use struct sctp_sack_info instead [ 276.133332][ T965] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 276.232787][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 276.594408][ T29] audit: type=1400 audit(788.504:465): avc: denied { mount } for pid=8195 comm="syz.1.622" name="/" dev="pstore" ino=3321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 277.066028][ T29] audit: type=1400 audit(788.514:466): avc: denied { mounton } for pid=8195 comm="syz.1.622" path="/127/file0" dev="pstore" ino=3321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 277.238672][ T29] audit: type=1400 audit(789.204:467): avc: denied { read write } for pid=8207 comm="syz.4.626" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 277.272806][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 277.336000][ T8209] sctp: [Deprecated]: syz.2.624 (pid 8209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.336000][ T8209] Use struct sctp_sack_info instead [ 277.420374][ T8213] netlink: 64 bytes leftover after parsing attributes in process `syz.2.624'. [ 277.478115][ T5879] usb 2-1: USB disconnect, device number 16 [ 277.508619][ T29] audit: type=1400 audit(789.204:468): avc: denied { open } for pid=8207 comm="syz.4.626" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 277.683863][ T29] audit: type=1326 audit(789.334:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.2.624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81f017e719 code=0x0 [ 277.706653][ T29] audit: type=1400 audit(789.524:470): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 277.747970][ T29] audit: type=1400 audit(789.714:471): avc: denied { map } for pid=8207 comm="syz.4.626" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.023613][ T29] audit: type=1400 audit(789.984:472): avc: denied { execute } for pid=8207 comm="syz.4.626" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.120104][ T8224] No control pipe specified [ 278.312761][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 278.578758][ T29] audit: type=1400 audit(790.544:473): avc: denied { setopt } for pid=8230 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 279.352764][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 279.663228][ T29] audit: type=1400 audit(791.574:474): avc: denied { mount } for pid=8226 comm="syz.0.630" name="/" dev="hugetlbfs" ino=16939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 280.402780][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 280.487857][ T51] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 280.579315][ T8255] ceph: No mds server is up or the cluster is laggy [ 280.862912][ T2138] libceph: connect (1)[c::]:6789 error -101 [ 281.172122][ T2138] libceph: mon0 (1)[c::]:6789 connect error [ 281.392868][ T51] usb 5-1: device descriptor read/64, error -71 [ 281.442757][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 281.838450][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 281.838471][ T29] audit: type=1400 audit(793.524:476): avc: denied { connect } for pid=8265 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.899633][ T51] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 282.105292][ T51] usb 5-1: device descriptor read/64, error -71 [ 282.223249][ T51] usb usb5-port1: attempt power cycle [ 282.472788][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 282.588965][ T29] audit: type=1400 audit(794.554:477): avc: denied { write } for pid=8278 comm="syz.3.643" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.593018][ T51] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 282.683487][ T51] usb 5-1: device descriptor read/8, error -71 [ 282.952862][ T51] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 283.512798][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 283.692103][ T51] usb 5-1: device not accepting address 29, error -71 [ 283.699314][ T51] usb usb5-port1: unable to enumerate USB device [ 284.552882][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 285.592103][ T8314] fuse: Bad value for 'user_id' [ 285.597165][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 285.608745][ T8314] fuse: Bad value for 'user_id' [ 286.632797][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 287.672786][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 288.319178][ T29] audit: type=1400 audit(800.284:478): avc: denied { append } for pid=8348 comm="syz.3.663" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.392864][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 288.722777][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 289.172855][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 289.182179][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.200632][ T9] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 289.214813][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.362915][ T9] usb 5-1: Product: syz [ 289.366078][ T8359] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 289.387702][ T9] usb 5-1: Manufacturer: syz [ 289.635361][ T9] usb 5-1: SerialNumber: syz [ 289.643465][ T9] usb 5-1: config 0 descriptor?? [ 289.652824][ T29] audit: type=1326 audit(801.364:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 289.653119][ T9] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 289.727801][ T29] audit: type=1326 audit(801.364:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 289.762798][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 289.807747][ T29] audit: type=1326 audit(801.364:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 289.859786][ T29] audit: type=1326 audit(801.364:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 289.912451][ T29] audit: type=1326 audit(801.364:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 290.092458][ T29] audit: type=1326 audit(801.364:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 290.115693][ T29] audit: type=1326 audit(801.364:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 290.138895][ T29] audit: type=1326 audit(801.364:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 290.202894][ T29] audit: type=1326 audit(801.364:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 290.333433][ T8375] FAULT_INJECTION: forcing a failure. [ 290.333433][ T8375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.347532][ T8375] CPU: 1 UID: 0 PID: 8375 Comm: syz.3.669 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 290.358169][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 290.368246][ T8375] Call Trace: [ 290.371539][ T8375] [ 290.374481][ T8375] dump_stack_lvl+0x16c/0x1f0 [ 290.379191][ T8375] should_fail_ex+0x497/0x5b0 [ 290.383903][ T8375] _copy_from_user+0x2e/0xd0 [ 290.385144][ T8377] netlink: 277 bytes leftover after parsing attributes in process `syz.1.670'. [ 290.388508][ T8375] copy_msghdr_from_user+0x99/0x160 [ 290.388542][ T8375] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 290.408483][ T8375] ? hlock_class+0x4e/0x130 [ 290.413277][ T8375] ? __lock_acquire+0x163e/0x3ce0 [ 290.418326][ T8375] ___sys_sendmsg+0xff/0x1e0 [ 290.419459][ T5879] hid-generic 0000:0D17:0000.0009: unknown main item tag 0x0 [ 290.422934][ T8375] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.422961][ T8375] ? __pfx___lock_acquire+0x10/0x10 [ 290.423007][ T8375] ? __pfx___might_resched+0x10/0x10 [ 290.438783][ T5879] hid-generic 0000:0D17:0000.0009: unknown main item tag 0x0 [ 290.440717][ T8375] ? __might_fault+0xe3/0x190 [ 290.440754][ T8375] __sys_sendmmsg+0x1a1/0x450 [ 290.440783][ T8375] ? __pfx___sys_sendmmsg+0x10/0x10 [ 290.467995][ T8375] ? vfs_write+0x306/0x1150 [ 290.472546][ T8375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 290.473651][ T5879] hid-generic 0000:0D17:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 290.478543][ T8375] ? fput+0x30/0x390 [ 290.478572][ T8375] ? ksys_write+0x1ad/0x260 [ 290.478600][ T8375] ? __pfx_ksys_write+0x10/0x10 [ 290.501499][ T8375] __x64_sys_sendmmsg+0x9c/0x100 [ 290.506467][ T8375] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.511699][ T8375] do_syscall_64+0xcd/0x250 [ 290.516239][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.522167][ T8375] RIP: 0033:0x7f358637e719 [ 290.526602][ T8375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.546320][ T8375] RSP: 002b:00007f35870f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 290.554756][ T8375] RAX: ffffffffffffffda RBX: 00007f3586535f80 RCX: 00007f358637e719 [ 290.562749][ T8375] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000003 [ 290.570742][ T8375] RBP: 00007f35870f4090 R08: 0000000000000000 R09: 0000000000000000 [ 290.578730][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.586716][ T8375] R13: 0000000000000000 R14: 00007f3586535f80 R15: 00007fff35cb4c08 [ 290.594704][ T8375] [ 290.606376][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 290.792834][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.901165][ T8386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.683466][ T9] gspca_sunplus: reg_w_1 err -110 [ 291.770605][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 291.784429][ T9] usb 5-1: USB disconnect, device number 30 [ 291.833599][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.053577][ T8397] sctp: [Deprecated]: syz.3.676 (pid 8397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.053577][ T8397] Use struct sctp_sack_info instead [ 292.872786][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.972771][ T9] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 293.244503][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 293.253479][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 293.256983][ T8413] netlink: 165 bytes leftover after parsing attributes in process `syz.3.682'. [ 293.266588][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.273105][ T2138] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 293.295890][ T9] usb 5-1: Product: syz [ 293.301299][ T9] usb 5-1: Manufacturer: syz [ 293.313156][ T9] usb 5-1: SerialNumber: syz [ 293.362892][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 293.432990][ T2138] usb 1-1: Using ep0 maxpacket: 32 [ 293.440375][ T2138] usb 1-1: config 2 has an invalid interface number: 157 but max is 0 [ 293.450510][ T2138] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 293.463479][ T2138] usb 1-1: config 2 has no interface number 1 [ 293.469626][ T2138] usb 1-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30 [ 293.480672][ T2138] usb 1-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 293.493957][ T2138] usb 1-1: config 2 interface 0 has no altsetting 0 [ 293.516490][ T2138] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 293.525875][ T2138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.541014][ T2138] usb 1-1: Product: syz [ 293.546572][ T2138] usb 1-1: Manufacturer: syz [ 293.551333][ T2138] usb 1-1: SerialNumber: syz [ 293.575147][ T2138] imon 1-1:2.157: inconsistent driver matching [ 293.582544][ T2138] imon 1-1:2.157: unable to register, err -22 [ 293.589636][ T2138] imon 1-1:2.157: probe with driver imon failed with error -22 [ 293.830086][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 293.850255][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 293.912793][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 293.999269][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.056219][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 294.126955][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 294.133545][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 294.160590][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.224079][ T8421] input: syz0 as /devices/virtual/input/input15 [ 294.372133][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 294.372153][ T29] audit: type=1400 audit(1062.337:497): avc: denied { read write } for pid=8401 comm="syz.4.679" name="lp0" dev="devtmpfs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 294.402295][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.438603][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.468275][ T29] audit: type=1400 audit(1062.337:498): avc: denied { open } for pid=8401 comm="syz.4.679" path="/dev/usb/lp0" dev="devtmpfs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 294.626540][ T5881] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 294.657263][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 294.664845][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 294.815158][ T29] audit: type=1400 audit(1062.747:499): avc: denied { write } for pid=8424 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.952799][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.249232][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.284668][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.293599][ T5881] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 295.323596][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.350642][ T5881] usb 4-1: config 0 descriptor?? [ 295.351360][ T29] audit: type=1400 audit(1062.757:500): avc: denied { getopt } for pid=8424 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 295.362606][ T5881] cp210x 4-1:0.0: cp210x converter detected [ 295.429473][ T51] usb 5-1: USB disconnect, device number 31 [ 295.457785][ T51] usblp0: removed [ 295.513361][ T25] libceph: connect (1)[c::]:6789 error -101 [ 295.521881][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 295.767544][ T8406] ceph: No mds server is up or the cluster is laggy [ 295.779622][ T5881] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 295.860828][ T5881] usb 4-1: cp210x converter now attached to ttyUSB0 [ 295.992784][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.061488][ T51] usb 4-1: USB disconnect, device number 15 [ 296.073816][ T51] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 296.630193][ T51] cp210x 4-1:0.0: device disconnected [ 296.645927][ T2138] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 296.658875][ T2138] imon 1-1:2.0: unable to initialize intf0, err -19 [ 296.665667][ T2138] imon:imon_probe: failed to initialize context! [ 296.672130][ T2138] imon 1-1:2.0: unable to register, err -19 [ 296.753411][ T2138] usb 1-1: USB disconnect, device number 21 [ 297.032773][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 297.287756][ T2138] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 297.455139][ T2138] usb 1-1: Using ep0 maxpacket: 32 [ 297.471725][ T2138] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 297.494859][ T2138] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 297.507697][ T2138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 297.521533][ T2138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 297.523994][ T29] audit: type=1400 audit(1065.487:501): avc: denied { write } for pid=8456 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 297.531935][ T2138] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.655659][ T2138] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 297.665637][ T2138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.675191][ T2138] usb 1-1: Product: syz [ 297.679398][ T2138] usb 1-1: Manufacturer: syz [ 297.685392][ T2138] usb 1-1: SerialNumber: syz [ 297.692042][ T2138] usb 1-1: config 0 descriptor?? [ 297.700952][ T2138] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 297.708374][ T2138] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 298.082781][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 299.112775][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 299.838990][ T5879] usb 1-1: USB disconnect, device number 22 [ 300.152771][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.501093][ T29] audit: type=1326 audit(1068.467:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 300.582872][ T29] audit: type=1326 audit(1068.497:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 300.858014][ T8495] serio: Serial port ptm0 [ 301.192797][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 301.417844][ T29] audit: type=1326 audit(1068.527:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 301.492862][ T29] audit: type=1326 audit(1068.527:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 301.593702][ T8489] No such timeout policy "syz0" [ 301.771390][ T8502] ebtables: ebtables: counters copy to user failed while replacing table [ 302.177995][ T29] audit: type=1326 audit(1068.527:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 302.200969][ T29] audit: type=1326 audit(1068.527:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 302.226459][ T29] audit: type=1326 audit(1068.527:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 302.249526][ T29] audit: type=1326 audit(1068.527:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 302.252791][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 302.272462][ T29] audit: type=1326 audit(1068.527:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 302.303486][ T29] audit: type=1326 audit(1068.527:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bad77e719 code=0x7ffc0000 [ 302.797377][ T5837] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 302.853625][ T5881] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 302.976067][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.023020][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 303.049038][ T5881] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 303.054194][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.058429][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.076499][ T5837] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 303.272774][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 303.603389][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.719787][ T5837] usb 4-1: config 0 descriptor?? [ 303.827913][ T5881] usb 5-1: Product: syz [ 303.833964][ T5881] usb 5-1: Manufacturer: syz [ 303.839114][ T5881] usb 5-1: SerialNumber: syz [ 303.849867][ T5881] usb 5-1: config 0 descriptor?? [ 303.857961][ T5881] usb 5-1: can't set config #0, error -71 [ 303.869301][ T5881] usb 5-1: USB disconnect, device number 32 [ 303.999070][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.287677][ T8514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.312772][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 304.589189][ T5837] logitech-djreceiver 0003:046D:C70E.000A: unbalanced collection at end of report description [ 304.611624][ T5837] logitech-djreceiver 0003:046D:C70E.000A: logi_dj_probe: parse failed [ 304.623422][ T5837] logitech-djreceiver 0003:046D:C70E.000A: probe with driver logitech-djreceiver failed with error -22 [ 304.688992][ T8519] netlink: 340 bytes leftover after parsing attributes in process `syz.2.709'. [ 305.352784][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 306.007590][ T5881] usb 4-1: USB disconnect, device number 16 [ 306.392984][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.222098][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.237024][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.246227][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.254820][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.268039][ T5836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 307.284716][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.312950][ T5881] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 307.432768][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.502943][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 307.502964][ T29] audit: type=1400 audit(1075.377:536): avc: denied { mounton } for pid=8551 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 307.637838][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 307.757130][ T5881] usb 4-1: config 64 has an invalid interface number: 110 but max is 0 [ 307.833973][ T5881] usb 4-1: config 64 has no interface number 0 [ 307.856635][ T5881] usb 4-1: config 64 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.873047][ T5881] usb 4-1: config 64 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 307.891231][ T5881] usb 4-1: config 64 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 307.909977][ T5881] usb 4-1: config 64 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 307.921706][ T5881] usb 4-1: config 64 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 308.070691][ T8551] chnl_net:caif_netlink_parms(): no params data found [ 308.077697][ T5881] usb 4-1: config 64 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 308.162904][ T5881] usb 4-1: config 64 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 308.185103][ T5881] usb 4-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 308.194896][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.472754][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.508165][ T5881] usb 4-1: Product: syz [ 308.627404][ T5881] usb 4-1: Manufacturer: syz [ 308.664078][ T5881] usb 4-1: SerialNumber: syz [ 308.787275][ T8548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.862405][ T5881] spcp8x5 4-1:64.110: SPCP8x5 converter detected [ 308.883125][ T5881] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 309.041106][ T29] audit: type=1400 audit(1076.987:537): avc: denied { bind } for pid=8572 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.207777][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.512788][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 309.513160][ T5836] Bluetooth: hci5: command tx timeout [ 309.540174][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.643025][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.650783][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.777462][ T8551] bridge_slave_0: entered allmulticast mode [ 310.195240][ T8551] bridge_slave_0: entered promiscuous mode [ 310.270229][ T8551] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.315232][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.322528][ T8551] bridge_slave_1: entered allmulticast mode [ 310.552797][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.575501][ T8551] bridge_slave_1: entered promiscuous mode [ 311.055644][ T8551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.069488][ T8551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.110089][ T8551] team0: Port device team_slave_0 added [ 311.245763][ T8551] team0: Port device team_slave_1 added [ 311.355303][ T965] usb 4-1: USB disconnect, device number 17 [ 311.364504][ T965] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 311.374439][ T965] spcp8x5 4-1:64.110: device disconnected [ 311.592780][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 311.603058][ T5836] Bluetooth: hci5: command tx timeout [ 311.810182][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.864016][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.988352][ T8551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.050898][ T29] audit: type=1400 audit(1080.017:538): avc: denied { create } for pid=8592 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 312.089576][ T29] audit: type=1400 audit(1080.017:539): avc: denied { write } for pid=8592 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 312.453241][ T965] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 312.632772][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 312.651659][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.710146][ T965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 312.738978][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.780825][ T965] usb 4-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 312.871238][ T8551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.876727][ T965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.047398][ T965] usb 4-1: config 0 descriptor?? [ 313.067683][ T965] snd_usb_toneport 4-1:0.0: Line 6 POD Studio UX1 found [ 313.672770][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 313.691767][ T5836] Bluetooth: hci5: command tx timeout [ 313.790914][ T965] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 313.797925][ T8615] fuse: Bad value for 'group_id' [ 313.802246][ T8551] hsr_slave_0: entered promiscuous mode [ 313.803690][ T8615] fuse: Bad value for 'group_id' [ 313.814196][ T965] snd_usb_toneport 4-1:0.0: Line 6 POD Studio UX1 now disconnected [ 313.858484][ T8551] hsr_slave_1: entered promiscuous mode [ 313.868800][ T965] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 313.891233][ T8551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.904297][ T8551] Cannot create hsr debugfs directory [ 314.081835][ T8622] sctp: [Deprecated]: syz.2.736 (pid 8622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.081835][ T8622] Use struct sctp_sack_info instead [ 314.308907][ T29] audit: type=1400 audit(1338.166:540): avc: denied { getopt } for pid=8618 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 314.714848][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.926655][ T5881] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 315.170119][ T965] usb 4-1: USB disconnect, device number 18 [ 315.269609][ T8551] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 315.284950][ T8551] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 315.294620][ T8551] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 315.315698][ T5881] usb 5-1: config 0 has no interfaces? [ 315.327366][ T8551] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 315.359004][ T5881] usb 5-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=df.00 [ 315.369156][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.378484][ T5881] usb 5-1: Product: syz [ 315.386388][ T5881] usb 5-1: Manufacturer: syz [ 315.392596][ T5881] usb 5-1: SerialNumber: syz [ 315.401016][ T5881] usb 5-1: config 0 descriptor?? [ 315.407616][ T8623] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 315.492038][ T8629] binder: 8627:8629 ioctl 400c620e 20000140 returned -22 [ 315.752769][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 315.762427][ T5836] Bluetooth: hci5: command tx timeout [ 315.990631][ T8551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.105414][ T8551] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.543306][ T8551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.554202][ T8551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.714127][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.721264][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.732460][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.739673][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.785540][ T29] audit: type=1400 audit(1340.576:541): avc: denied { associate } for pid=8632 comm="syz.0.740" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 316.808358][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 316.874127][ T2138] usb 5-1: USB disconnect, device number 33 [ 317.293031][ T965] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 317.502956][ T965] usb 4-1: Using ep0 maxpacket: 16 [ 317.519837][ T965] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 317.532045][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.546586][ T965] usb 4-1: Product: syz [ 317.550808][ T965] usb 4-1: Manufacturer: syz [ 317.561239][ T965] usb 4-1: SerialNumber: syz [ 317.573406][ T965] usb 4-1: config 0 descriptor?? [ 317.809036][ T8551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.832858][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 317.911362][ T8656] fuse: Bad value for 'group_id' [ 317.931598][ T965] usb 4-1: Limiting number of CPorts to U8_MAX [ 317.938408][ T965] usb 4-1: Not enough endpoints found in device, aborting! [ 317.946219][ T8656] fuse: Bad value for 'group_id' [ 318.872782][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 319.103001][ T965] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 319.198901][ T8551] veth0_vlan: entered promiscuous mode [ 319.255240][ T8551] veth1_vlan: entered promiscuous mode [ 319.312062][ T8551] veth0_macvtap: entered promiscuous mode [ 319.330896][ T8551] veth1_macvtap: entered promiscuous mode [ 319.344886][ T5878] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 319.379687][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.390349][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.407074][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.418859][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.430806][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.442591][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.453752][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.466009][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.477719][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.605458][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.850607][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.857486][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.912845][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 319.918363][ T8551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.052854][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 320.059675][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.070499][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 320.082968][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.093270][ T5878] usb 3-1: config 0 descriptor?? [ 320.101495][ T5878] hub 3-1:0.0: bad descriptor, ignoring hub [ 320.114101][ T5878] hub 3-1:0.0: probe with driver hub failed with error -5 [ 320.172564][ T2138] usb 4-1: USB disconnect, device number 19 [ 320.190981][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.201644][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.237586][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.251987][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.262078][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.272792][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.282628][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.293236][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.312626][ T8551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.322728][ T8551] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.331591][ T8551] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.340543][ T8551] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.349504][ T8551] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.402968][ T29] audit: type=1400 audit(1344.276:542): avc: denied { connect } for pid=8681 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 320.952779][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 320.982232][ T8] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 321.202242][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.218683][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.843261][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.851271][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.923710][ T29] audit: type=1400 audit(1345.876:543): avc: denied { mounton } for pid=8551 comm="syz-executor" path="/root/syzkaller.9Gs7nV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 321.992824][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 322.002593][ T29] audit: type=1400 audit(1345.966:544): avc: denied { mounton } for pid=8551 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 322.065209][ T5878] usb 3-1: USB disconnect, device number 14 [ 322.112553][ T8708] fuse: Bad value for 'group_id' [ 322.207172][ T8708] fuse: Bad value for 'group_id' [ 323.032824][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 323.548548][ T8725] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 323.674222][ T8719] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 323.891364][ T8735] sctp: [Deprecated]: syz.4.761 (pid 8735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.891364][ T8735] Use struct sctp_sack_info instead [ 324.072790][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.112781][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.216716][ T8745] netlink: 'syz.4.763': attribute type 14 has an invalid length. [ 325.757977][ T8751] loop7: detected capacity change from 0 to 16384 [ 326.093867][ T8761] fuse: Bad value for 'group_id' [ 326.136174][ T8761] fuse: Bad value for 'group_id' [ 326.152820][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 326.421062][ T8763] netdevsim netdevsim3: Direct firmware load for .Þ failed with error -2 [ 326.430225][ T8763] netdevsim netdevsim3: Falling back to sysfs fallback for: .Þ [ 326.791824][ T8] IPVS: starting estimator thread 0... [ 326.882919][ T8770] IPVS: using max 38 ests per chain, 91200 per kthread [ 327.112322][ T8774] fuse: Bad value for 'group_id' [ 327.132788][ T8774] fuse: Bad value for 'group_id' [ 327.192777][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 327.283117][ T8778] netdevsim netdevsim4: Direct firmware load for .Þ failed with error -2 [ 327.291636][ T8778] netdevsim netdevsim4: Falling back to sysfs fallback for: .Þ [ 328.232754][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 328.754963][ T2138] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 328.923009][ T2138] usb 3-1: Using ep0 maxpacket: 32 [ 328.962965][ T2138] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 328.972123][ T2138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.016561][ T2138] usb 3-1: Product: syz [ 329.020816][ T2138] usb 3-1: Manufacturer: syz [ 329.025529][ T2138] usb 3-1: SerialNumber: syz [ 329.187261][ T2138] usb 3-1: config 0 descriptor?? [ 329.272778][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 329.551304][ T2138] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 329.559442][ T2138] airspy 3-1:0.0: Could not detect board [ 329.566535][ T2138] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 330.228651][ T2138] usb 3-1: USB disconnect, device number 15 [ 330.312763][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.352925][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.715646][ T8811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'. [ 332.392970][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 332.429335][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 333.432763][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 334.150722][ T29] audit: type=1400 audit(1614.096:545): avc: denied { mount } for pid=8829 comm="syz.4.790" name="/" dev="autofs" ino=18385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 334.472779][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 334.962246][ T29] audit: type=1400 audit(1614.926:546): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 335.349246][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.794'. [ 335.381029][ T8845] netlink: 68 bytes leftover after parsing attributes in process `syz.2.795'. [ 335.502104][ T8854] fuse: Bad value for 'group_id' [ 335.508246][ T8854] fuse: Bad value for 'group_id' [ 335.513352][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 335.550279][ T8858] fuse: Bad value for 'group_id' [ 335.555518][ T8858] fuse: Bad value for 'group_id' [ 335.623744][ T8852] /dev/nullb0: Can't open blockdev [ 335.712712][ T8861] netdevsim netdevsim0: Direct firmware load for .Þ failed with error -2 [ 335.721752][ T8861] netdevsim netdevsim0: Falling back to sysfs fallback for: .Þ [ 336.482892][ T8866] FAULT_INJECTION: forcing a failure. [ 336.482892][ T8866] name failslab, interval 1, probability 0, space 0, times 0 [ 336.496862][ T8866] CPU: 0 UID: 0 PID: 8866 Comm: syz.4.799 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 336.507455][ T8866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 336.517501][ T8866] Call Trace: [ 336.520773][ T8866] [ 336.523689][ T8866] dump_stack_lvl+0x16c/0x1f0 [ 336.528360][ T8866] should_fail_ex+0x497/0x5b0 [ 336.533023][ T8866] ? fs_reclaim_acquire+0xae/0x150 [ 336.538117][ T8866] should_failslab+0xc2/0x120 [ 336.542794][ T8866] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 336.548496][ T8866] ? __d_alloc+0x31/0xaa0 [ 336.552820][ T8866] __d_alloc+0x31/0xaa0 [ 336.556982][ T8866] d_alloc+0x4a/0x1e0 [ 336.560948][ T8866] d_alloc_parallel+0xe9/0x12b0 [ 336.565789][ T8866] ? __pfx_d_alloc_parallel+0x10/0x10 [ 336.571159][ T8866] ? lockdep_init_map_type+0x16d/0x7d0 [ 336.576601][ T8866] ? lockdep_init_map_type+0x16d/0x7d0 [ 336.582042][ T8866] __lookup_slow+0x194/0x460 [ 336.586639][ T8866] ? __pfx___lookup_slow+0x10/0x10 [ 336.591736][ T8866] ? lookup_one_unlocked+0x133/0x160 [ 336.597011][ T8866] ? d_lookup+0xe9/0x180 [ 336.601324][ T8866] lookup_one_unlocked+0x142/0x160 [ 336.606424][ T8866] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 336.612064][ T8866] ? __pfx_check_irq_usage+0x10/0x10 [ 336.617372][ T8866] ? hlock_conflict+0x58/0x200 [ 336.622148][ T8866] ovl_lookup_single+0x201/0xf90 [ 336.627085][ T8866] ? __pfx_ovl_lookup_single+0x10/0x10 [ 336.632536][ T8866] ovl_lookup_layer+0x3a9/0x4a0 [ 336.637375][ T8866] ? lockdep_lock+0x11/0x200 [ 336.641948][ T8866] ? __pfx_lockdep_lock+0x10/0x10 [ 336.646961][ T8866] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 336.652318][ T8866] ? lockdep_unlock+0x11a/0x290 [ 336.657154][ T8866] ? __lock_acquire+0x2110/0x3ce0 [ 336.662162][ T8866] ovl_lookup+0x4ae/0x21f0 [ 336.666566][ T8866] ? __pfx_ovl_lookup+0x10/0x10 [ 336.671397][ T8866] ? lock_acquire.part.0+0x11b/0x380 [ 336.676664][ T8866] ? find_held_lock+0x2d/0x110 [ 336.681413][ T8866] ? d_alloc+0x176/0x1e0 [ 336.685644][ T8866] ? __pfx_lock_release+0x10/0x10 [ 336.690663][ T8866] ? do_raw_spin_lock+0x12d/0x2c0 [ 336.695672][ T8866] ? do_raw_spin_unlock+0x172/0x230 [ 336.700851][ T8866] ? _raw_spin_unlock+0x28/0x50 [ 336.705690][ T8866] lookup_one_qstr_excl+0x11d/0x190 [ 336.710872][ T8866] ? mnt_want_write+0x161/0x450 [ 336.715718][ T8866] do_renameat2+0x5ae/0xdd0 [ 336.720238][ T8866] ? __pfx_do_renameat2+0x10/0x10 [ 336.725249][ T8866] ? trace_lock_acquire+0x14a/0x1d0 [ 336.730443][ T8866] ? lock_acquire+0x2f/0xb0 [ 336.734928][ T8866] ? __might_fault+0xe3/0x190 [ 336.739592][ T8866] ? __might_fault+0xe3/0x190 [ 336.744266][ T8866] ? getname_flags.part.0+0x1c5/0x550 [ 336.749647][ T8866] __x64_sys_rename+0x7d/0xa0 [ 336.754309][ T8866] do_syscall_64+0xcd/0x250 [ 336.758803][ T8866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.764684][ T8866] RIP: 0033:0x7f734497e719 [ 336.769090][ T8866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.788685][ T8866] RSP: 002b:00007f73443ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 336.797168][ T8866] RAX: ffffffffffffffda RBX: 00007f7344b35f80 RCX: 00007f734497e719 [ 336.805121][ T8866] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000020000100 [ 336.813074][ T8866] RBP: 00007f73443ff090 R08: 0000000000000000 R09: 0000000000000000 [ 336.821050][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.829001][ T8866] R13: 0000000000000000 R14: 00007f7344b35f80 R15: 00007fffc5829a88 [ 336.836963][ T8866] [ 336.840304][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 336.937163][ T29] audit: type=1400 audit(1616.446:547): avc: denied { associate } for pid=8865 comm="syz.4.799" name="bus" dev="tmpfs" ino=904 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:load_policy_exec_t:s0" [ 337.019296][ T29] audit: type=1400 audit(1616.986:548): avc: denied { map } for pid=8870 comm="syz.5.801" path="/10/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 337.170378][ T8876] sctp: [Deprecated]: syz.3.802 (pid 8876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.170378][ T8876] Use struct sctp_sack_info instead [ 337.727101][ T29] audit: type=1400 audit(1873.644:549): avc: denied { create } for pid=8870 comm="syz.5.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 337.912789][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 338.621609][ T8894] afs: Unknown parameter '' [ 338.952761][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 339.486534][ T8894] 9pnet_fd: Insufficient options for proto=fd [ 339.992791][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 340.655875][ T8918] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 340.664762][ T8918] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 340.676574][ T8918] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 341.032766][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 342.072792][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.112778][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.453648][ T5836] Bluetooth: hci5: command tx timeout [ 344.084296][ T8949] sctp: [Deprecated]: syz.2.818 (pid 8949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.084296][ T8949] Use struct sctp_sack_info instead [ 344.152980][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 345.092312][ T29] audit: type=1400 audit(2137.058:550): avc: denied { append } for pid=8958 comm="syz.2.822" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 345.183874][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 345.194509][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.232787][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.707250][ T8976] FAULT_INJECTION: forcing a failure. [ 346.707250][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 346.791704][ T8976] CPU: 1 UID: 0 PID: 8976 Comm: syz.2.825 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 346.802336][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.812397][ T8976] Call Trace: [ 346.815674][ T8976] [ 346.818604][ T8976] dump_stack_lvl+0x16c/0x1f0 [ 346.823309][ T8976] should_fail_ex+0x497/0x5b0 [ 346.827992][ T8976] ? fs_reclaim_acquire+0xae/0x150 [ 346.833110][ T8976] should_failslab+0xc2/0x120 [ 346.837795][ T8976] __kmalloc_cache_noprof+0x6b/0x300 [ 346.843091][ T8976] ? sctp_auth_shkey_create+0x87/0x1f0 [ 346.848565][ T8976] sctp_auth_shkey_create+0x87/0x1f0 [ 346.853876][ T8976] sctp_auth_asoc_copy_shkeys+0x1f4/0x360 [ 346.859614][ T8976] sctp_association_new+0x1973/0x2ab0 [ 346.865003][ T8976] sctp_connect_new_asoc+0x1b7/0x790 [ 346.870301][ T8976] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 346.876117][ T8976] ? release_sock+0x21/0x220 [ 346.880717][ T8976] ? __ipv6_addr_type+0x225/0x300 [ 346.885735][ T8976] ? __ipv6_addr_type+0x225/0x300 [ 346.890752][ T8976] __sctp_connect+0x3f5/0xc60 [ 346.895427][ T8976] ? sctp_inet_connect+0xac/0x200 [ 346.900438][ T8976] ? __pfx___sctp_connect+0x10/0x10 [ 346.905634][ T8976] ? __pfx_sctp_inet_connect+0x10/0x10 [ 346.911100][ T8976] ? sctp_inet_connect+0xac/0x200 [ 346.916130][ T8976] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 346.922027][ T8976] ? __pfx_sctp_inet_connect+0x10/0x10 [ 346.927498][ T8976] sctp_inet_connect+0x15f/0x200 [ 346.932433][ T8976] __sys_connect_file+0x14d/0x190 [ 346.937463][ T8976] __sys_connect+0x147/0x180 [ 346.942072][ T8976] ? __pfx___sys_connect+0x10/0x10 [ 346.947198][ T8976] ? __pfx_ksys_write+0x10/0x10 [ 346.952059][ T8976] __x64_sys_connect+0x72/0xb0 [ 346.956813][ T8976] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.962016][ T8976] do_syscall_64+0xcd/0x250 [ 346.966611][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.972514][ T8976] RIP: 0033:0x7f81f017e719 [ 346.976926][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.996532][ T8976] RSP: 002b:00007f81efbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 347.004939][ T8976] RAX: ffffffffffffffda RBX: 00007f81f0335f80 RCX: 00007f81f017e719 [ 347.012898][ T8976] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 347.020859][ T8976] RBP: 00007f81efbff090 R08: 0000000000000000 R09: 0000000000000000 [ 347.028818][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.036774][ T8976] R13: 0000000000000000 R14: 00007f81f0335f80 R15: 00007fff33b35578 [ 347.044746][ T8976] [ 347.272764][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.312804][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.452705][ T9000] netlink: 'syz.0.834': attribute type 12 has an invalid length. [ 348.460646][ T9000] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.834'. [ 348.632835][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 349.343565][ T29] audit: type=1400 audit(2141.298:551): avc: denied { getopt } for pid=9013 comm="syz.3.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 349.363226][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 349.444534][ T9020] fuse: Bad value for 'group_id' [ 349.449528][ T9020] fuse: Bad value for 'group_id' [ 349.450862][ T29] audit: type=1400 audit(2141.358:552): avc: denied { setopt } for pid=9013 comm="syz.3.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 349.496342][ T9021] fuse: Bad value for 'group_id' [ 349.501327][ T9021] fuse: Bad value for 'group_id' [ 349.582777][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 349.708178][ T9025] netdevsim netdevsim0: Direct firmware load for .Þ failed with error -2 [ 349.717309][ T9025] netdevsim netdevsim0: Falling back to sysfs fallback for: .Þ [ 350.253146][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 350.277545][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.289386][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.321488][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 350.392909][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 350.742333][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.771793][ T9] usb 6-1: config 0 descriptor?? [ 351.432873][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 352.347992][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 352.354580][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 352.364641][ T9] usb 6-1: USB disconnect, device number 2 [ 352.420587][ T29] audit: type=1326 audit(2144.388:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734497e719 code=0x7ffc0000 [ 352.473365][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 352.499795][ T29] audit: type=1326 audit(2144.468:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f734497e719 code=0x7ffc0000 [ 352.529969][ T29] audit: type=1326 audit(2144.468:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734497e719 code=0x7ffc0000 [ 352.552902][ T29] audit: type=1326 audit(2144.468:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734497e719 code=0x7ffc0000 [ 352.593035][ T29] audit: type=1326 audit(2144.558:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f734497e719 code=0x7ffc0000 [ 352.617387][ T29] audit: type=1326 audit(2144.558:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734497e719 code=0x7ffc0000 [ 352.641270][ T29] audit: type=1326 audit(2144.558:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734497e719 code=0x7ffc0000 [ 352.664109][ T29] audit: type=1326 audit(2144.598:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f734497e719 code=0x7ffc0000 [ 352.687146][ T29] audit: type=1326 audit(2144.598:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734497e719 code=0x7ffc0000 [ 352.710530][ T29] audit: type=1326 audit(2144.598:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f734497e719 code=0x7ffc0000 [ 353.341226][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 353.435958][ T9064] vlan2: entered allmulticast mode [ 353.441232][ T9064] macvtap0: entered allmulticast mode [ 353.511231][ T9071] fuse: Bad value for 'group_id' [ 353.516387][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.524074][ T9071] fuse: Bad value for 'group_id' [ 353.581258][ T8] IPVS: starting estimator thread 0... [ 353.593273][ T9064] veth0_macvtap: entered allmulticast mode [ 354.552871][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 354.725521][ T9069] IPVS: using max 27 ests per chain, 64800 per kthread [ 354.876259][ T9071] netdevsim netdevsim4: Direct firmware load for .Þ failed with error -2 [ 354.884787][ T9071] netdevsim netdevsim4: Falling back to sysfs fallback for: .Þ [ 355.592758][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 356.460291][ T9098] syzkaller1: entered promiscuous mode [ 356.491772][ T9098] syzkaller1: entered allmulticast mode [ 356.632779][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.672774][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.909170][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 358.124032][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.147470][ T8] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 358.261687][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.272926][ T5881] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 358.416412][ T8] usb 4-1: config 0 descriptor?? [ 358.432909][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 358.452725][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.712790][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 358.730131][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.847375][ T9132] sctp: [Deprecated]: syz.2.869 (pid 9132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.847375][ T9132] Use struct sctp_sack_info instead [ 359.353614][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 359.366698][ T5881] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 359.375916][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.386257][ T5881] usb 5-1: config 0 descriptor?? [ 359.473133][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 359.479161][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 359.553033][ T5881] usb 5-1: USB disconnect, device number 34 [ 359.672378][ T8] uclogic 0003:28BD:0042.000B: interface is invalid, ignoring [ 359.752765][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 360.795694][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 361.313418][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 361.313438][ T29] audit: type=1400 audit(2153.088:596): avc: denied { setattr } for pid=9135 comm="syz.5.871" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 361.450302][ T29] audit: type=1400 audit(2153.418:597): avc: denied { write } for pid=9135 comm="syz.5.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 361.832990][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 362.170066][ T9161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.558472][ T9175] sctp: [Deprecated]: syz.0.880 (pid 9175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.558472][ T9175] Use struct sctp_sack_info instead [ 362.872917][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 363.434588][ T29] audit: type=1400 audit(2411.381:598): avc: denied { create } for pid=9167 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 363.460812][ T51] usb 4-1: USB disconnect, device number 20 [ 363.912801][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 364.102456][ T9183] sctp: [Deprecated]: syz.0.883 (pid 9183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.102456][ T9183] Use struct sctp_sack_info instead [ 364.270831][ T29] audit: type=1400 audit(2412.231:599): avc: denied { getopt } for pid=9180 comm="syz.5.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 364.953094][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.992779][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 366.060794][ T9207] FAULT_INJECTION: forcing a failure. [ 366.060794][ T9207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.074348][ T9207] CPU: 0 UID: 0 PID: 9207 Comm: syz.0.887 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 366.085041][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.095102][ T9207] Call Trace: [ 366.098380][ T9207] [ 366.101312][ T9207] dump_stack_lvl+0x16c/0x1f0 [ 366.106041][ T9207] should_fail_ex+0x497/0x5b0 [ 366.110734][ T9207] _copy_to_user+0x32/0xd0 [ 366.115168][ T9207] simple_read_from_buffer+0xd0/0x160 [ 366.120556][ T9207] proc_fail_nth_read+0x198/0x270 [ 366.125592][ T9207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 366.131155][ T9207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 366.136713][ T9207] vfs_read+0x1df/0xbe0 [ 366.140885][ T9207] ? __fget_files+0x23a/0x3f0 [ 366.145573][ T9207] ? fdget_pos+0x24c/0x360 [ 366.150001][ T9207] ? __pfx_lock_release+0x10/0x10 [ 366.155031][ T9207] ? trace_lock_acquire+0x14a/0x1d0 [ 366.160253][ T9207] ? __pfx_vfs_read+0x10/0x10 [ 366.164940][ T9207] ? __pfx___mutex_lock+0x10/0x10 [ 366.169989][ T9207] ? __fget_files+0x244/0x3f0 [ 366.174710][ T9207] ksys_read+0x12f/0x260 [ 366.178967][ T9207] ? __pfx_ksys_read+0x10/0x10 [ 366.183757][ T9207] do_syscall_64+0xcd/0x250 [ 366.188280][ T9207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.194189][ T9207] RIP: 0033:0x7f4bad77d15c [ 366.198611][ T9207] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 366.218323][ T9207] RSP: 002b:00007f4bae57d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.226750][ T9207] RAX: ffffffffffffffda RBX: 00007f4bad936130 RCX: 00007f4bad77d15c [ 366.234731][ T9207] RDX: 000000000000000f RSI: 00007f4bae57d0a0 RDI: 000000000000000a [ 366.242704][ T9207] RBP: 00007f4bae57d090 R08: 0000000000000000 R09: 0000000000000000 [ 366.250675][ T9207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.258645][ T9207] R13: 0000000000000000 R14: 00007f4bad936130 R15: 00007ffcd227d458 [ 366.266632][ T9207] [ 366.405621][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 366.523756][ T29] audit: type=1400 audit(2414.481:600): avc: denied { recv } for pid=2 comm="kthreadd" saddr=10.128.0.169 src=49684 daddr=10.128.1.21 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 366.632756][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 366.652800][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 366.673555][ T9] usb 5-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 366.682785][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.692954][ T9] usb 5-1: config 0 descriptor?? [ 367.032809][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 367.172173][ T9259] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 367.180436][ T9259] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 367.190220][ T9259] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 367.198280][ T9259] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 367.569591][ T29] audit: type=1400 audit(2415.181:601): avc: denied { mounton } for pid=9238 comm="syz.0.891" path="/194/file0" dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 367.822855][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 367.828885][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 368.072779][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 368.073555][ T29] audit: type=1400 audit(2415.881:602): avc: denied { read } for pid=9240 comm="syz.2.892" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 368.168729][ T9] usb 5-1: USB disconnect, device number 35 [ 368.476968][ T29] audit: type=1326 audit(2416.441:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.3.893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f358637e719 code=0x0 [ 368.568885][ T29] audit: type=1400 audit(2416.531:604): avc: denied { read } for pid=9263 comm="syz.3.893" dev="sockfs" ino=20660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 368.675843][ T9277] sctp: [Deprecated]: syz.2.896 (pid 9277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.675843][ T9277] Use struct sctp_sack_info instead [ 369.112826][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 369.136331][ T9282] 9pnet_fd: Insufficient options for proto=fd [ 369.144242][ T9282] FAULT_INJECTION: forcing a failure. [ 369.144242][ T9282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.160372][ T9282] CPU: 0 UID: 0 PID: 9282 Comm: syz.5.898 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 369.170999][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 369.181072][ T9282] Call Trace: [ 369.184343][ T9282] [ 369.187266][ T9282] dump_stack_lvl+0x16c/0x1f0 [ 369.191949][ T9282] should_fail_ex+0x497/0x5b0 [ 369.196626][ T9282] _copy_from_user+0x2e/0xd0 [ 369.201224][ T9282] kstrtouint_from_user+0xd7/0x1c0 [ 369.206330][ T9282] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 369.212050][ T9282] ? irqentry_exit+0x3b/0x90 [ 369.216641][ T9282] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.221846][ T9282] proc_fail_nth_write+0x84/0x250 [ 369.226862][ T9282] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 369.232486][ T9282] ? preempt_schedule_thunk+0x1a/0x30 [ 369.237853][ T9282] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 369.243475][ T9282] vfs_write+0x24c/0x1150 [ 369.247806][ T9282] ? fdget_pos+0x24c/0x360 [ 369.252219][ T9282] ? __pfx_vfs_write+0x10/0x10 [ 369.256982][ T9282] ? __pfx___mutex_lock+0x10/0x10 [ 369.262019][ T9282] ksys_write+0x12f/0x260 [ 369.266349][ T9282] ? __pfx_ksys_write+0x10/0x10 [ 369.271206][ T9282] do_syscall_64+0xcd/0x250 [ 369.275730][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.281624][ T9282] RIP: 0033:0x7f6cf157d1ff [ 369.286032][ T9282] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 369.305638][ T9282] RSP: 002b:00007f6cf238b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 369.314050][ T9282] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6cf157d1ff [ 369.322011][ T9282] RDX: 0000000000000001 RSI: 00007f6cf238b0a0 RDI: 000000000000000a [ 369.329972][ T9282] RBP: 00007f6cf238b090 R08: 0000000000000000 R09: 0000000000000000 [ 369.337931][ T9282] R10: 0000000000010410 R11: 0000000000000293 R12: 0000000000000002 [ 369.345895][ T9282] R13: 0000000000000000 R14: 00007f6cf1736058 R15: 00007ffc09dbc418 [ 369.353867][ T9282] [ 369.649903][ T29] audit: type=1400 audit(2417.611:605): avc: denied { create } for pid=9287 comm="syz.4.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 369.972324][ T29] audit: type=1400 audit(2417.611:606): avc: denied { setopt } for pid=9287 comm="syz.4.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 370.152845][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 370.207007][ T5878] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 370.502823][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 370.686117][ T5878] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 370.696202][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.706789][ T5878] usb 1-1: config 0 descriptor?? [ 370.731155][ T5878] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 371.192911][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 372.227860][ T5878] gspca_sonixj: reg_w1 err -110 [ 372.232910][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 372.240443][ T5878] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 373.273147][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 373.319248][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'. [ 374.121015][ T5878] usb 1-1: USB disconnect, device number 24 [ 374.129979][ T29] audit: type=1400 audit(2422.101:607): avc: denied { write } for pid=9317 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 374.312786][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 374.416039][ T9338] fuse: Bad value for 'group_id' [ 374.421874][ T9338] fuse: Bad value for 'group_id' [ 375.279353][ T9338] netdevsim netdevsim2: Direct firmware load for .Þ failed with error -2 [ 375.287907][ T9338] netdevsim netdevsim2: Falling back to sysfs fallback for: .Þ [ 375.352803][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 375.383766][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 375.673404][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 375.712179][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 375.731802][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 375.741195][ T8] usb 4-1: can't read configurations, error -61 [ 375.857437][ T9355] sctp: [Deprecated]: syz.5.919 (pid 9355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.857437][ T9355] Use struct sctp_sack_info instead [ 375.873988][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 376.032958][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 376.042242][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 376.071805][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 376.090787][ T8] usb 4-1: can't read configurations, error -61 [ 376.108308][ T8] usb usb4-port1: attempt power cycle [ 376.179997][ T9361] sctp: [Deprecated]: syz.4.922 (pid 9361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.179997][ T9361] Use struct sctp_sack_info instead [ 376.392790][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.744100][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 376.776499][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 376.792521][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 376.817128][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 376.841263][ T8] usb 4-1: can't read configurations, error -61 [ 376.998799][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 377.063481][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 377.070312][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.081824][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 377.103807][ T8] usb 4-1: can't read configurations, error -61 [ 377.128449][ T8] usb usb4-port1: unable to enumerate USB device [ 377.432998][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 378.019789][ T29] audit: type=1400 audit(2681.987:608): avc: denied { accept } for pid=9380 comm="syz.5.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.038667][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.080982][ T9385] gre0: entered promiscuous mode [ 378.120458][ T9390] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 378.129311][ T9390] netlink: 'syz.0.929': attribute type 3 has an invalid length. [ 378.140356][ T9390] netlink: 224 bytes leftover after parsing attributes in process `syz.0.929'. [ 378.181641][ T29] audit: type=1400 audit(2682.147:609): avc: denied { setattr } for pid=9383 comm="syz.0.929" path="socket:[20905]" dev="sockfs" ino=20905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.205424][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.214521][ T9391] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 378.472792][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 379.066420][ T9407] sctp: [Deprecated]: syz.2.934 (pid 9407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.066420][ T9407] Use struct sctp_sack_info instead [ 379.512784][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.237895][ T29] audit: type=1400 audit(2939.909:610): avc: denied { setopt } for pid=9411 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 380.552815][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.303549][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.553784][ T8689] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 381.592794][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 382.160644][ T9436] netlink: 156 bytes leftover after parsing attributes in process `syz.4.943'. [ 382.178017][ T8689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.319815][ T8689] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.496878][ T8689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24945, setting to 64 [ 382.632769][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 382.679252][ T8689] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 382.689165][ T8689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.734392][ T9424] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 382.763412][ T8689] hub 4-1:1.0: bad descriptor, ignoring hub [ 382.770218][ T8689] hub 4-1:1.0: probe with driver hub failed with error -5 [ 382.779600][ T8689] cdc_wdm 4-1:1.0: skipping garbage [ 382.784947][ T8689] cdc_wdm 4-1:1.0: skipping garbage [ 382.991440][ T9424] netlink: 88 bytes leftover after parsing attributes in process `syz.3.939'. [ 383.000048][ T8689] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 383.104271][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 383.483472][ T8689] cdc_wdm 4-1:1.0: Unknown control protocol [ 383.575401][ T8689] usb 4-1: USB disconnect, device number 25 [ 383.672850][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 384.196360][ T9455] sctp: [Deprecated]: syz.2.948 (pid 9455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.196360][ T9455] Use struct sctp_sack_info instead [ 384.616636][ T5881] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 384.712763][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 385.223054][ T5881] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 385.331883][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.345154][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.356496][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 385.372147][ T5881] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 385.382447][ T5881] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 385.390628][ T5881] usb 5-1: Manufacturer: syz [ 385.494290][ T5881] usb 5-1: config 0 descriptor?? [ 385.572584][ T9467] fuse: Bad value for 'group_id' [ 385.652832][ T9467] fuse: Bad value for 'group_id' [ 385.753441][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 386.491746][ T9471] netdevsim netdevsim3: Direct firmware load for .Þ failed with error -2 [ 386.501604][ T9471] netdevsim netdevsim3: Falling back to sysfs fallback for: .Þ [ 386.792767][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 386.877537][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 386.894194][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 386.924717][ T5881] usb 5-1: USB disconnect, device number 36 [ 386.951487][ T9476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.330739][ T9492] sctp: [Deprecated]: syz.3.956 (pid 9492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.330739][ T9492] Use struct sctp_sack_info instead [ 387.832774][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 387.998551][ T9495] netlink: 'syz.2.960': attribute type 10 has an invalid length. [ 388.282985][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 388.872775][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 388.884983][ T9513] sctp: [Deprecated]: syz.3.963 (pid 9513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.884983][ T9513] Use struct sctp_sack_info instead [ 389.912807][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 390.496427][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.516642][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.526763][ T8] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 390.535953][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.852145][ T8] usb 3-1: config 0 descriptor?? [ 390.952779][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 391.107365][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 391.127382][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 391.203722][ T8] usb 3-1: USB disconnect, device number 16 [ 391.537713][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 391.994187][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 393.032839][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 394.072784][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 394.135979][ T9558] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 394.292902][ T51] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 394.300983][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 394.443293][ T51] usb 1-1: device descriptor read/64, error -32 [ 394.855887][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 394.873055][ T51] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 394.881784][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 394.891575][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 394.928412][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 394.947037][ T5838] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 394.971887][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 395.086748][ T51] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 395.103432][ T51] usb 1-1: config 0 has no interface number 0 [ 395.109562][ T51] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=26.3d [ 395.112857][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 395.129082][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.133620][ T9576] 9pnet_fd: p9_fd_create_tcp (9576): problem connecting socket to 127.0.0.1 [ 395.155571][ T5837] IPVS: starting estimator thread 0... [ 395.252868][ T9582] IPVS: using max 20 ests per chain, 48000 per kthread [ 395.348564][ T51] usb 1-1: config 0 descriptor?? [ 395.514954][ T9571] chnl_net:caif_netlink_parms(): no params data found [ 396.152778][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 396.164069][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.978'. [ 396.860774][ T29] audit: type=1400 audit(3468.827:611): avc: denied { bind } for pid=9560 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 396.875576][ T9565] netlink: 228 bytes leftover after parsing attributes in process `syz.4.979'. [ 396.963421][ T51] airspy 1-1:0.183: usb_control_msg() failed -110 request 0a [ 396.970840][ T51] airspy 1-1:0.183: Could not detect board [ 396.995610][ T9571] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.003398][ T51] airspy 1-1:0.183: probe with driver airspy failed with error -110 [ 397.006581][ T9571] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.019210][ T9571] bridge_slave_0: entered allmulticast mode [ 397.022089][ T9565] netlink: 228 bytes leftover after parsing attributes in process `syz.4.979'. [ 397.026255][ T9571] bridge_slave_0: entered promiscuous mode [ 397.044630][ T9571] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.053137][ T9571] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.061249][ T5836] Bluetooth: hci6: command tx timeout [ 397.072003][ T9571] bridge_slave_1: entered allmulticast mode [ 397.089872][ T9571] bridge_slave_1: entered promiscuous mode [ 397.163469][ T51] usb 1-1: USB disconnect, device number 26 [ 397.192760][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 397.288989][ T9571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.388750][ T9571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.544525][ T9571] team0: Port device team_slave_0 added [ 397.570706][ T9571] team0: Port device team_slave_1 added [ 397.629557][ T9571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.641088][ T9571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.945258][ T9571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.232804][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 398.297035][ T9571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.315348][ T9571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.542754][ T9571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.726101][ T9571] hsr_slave_0: entered promiscuous mode [ 398.950643][ T9571] hsr_slave_1: entered promiscuous mode [ 399.272777][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 399.543271][ T9571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.548135][ T5836] Bluetooth: hci6: command tx timeout [ 399.550872][ T9571] Cannot create hsr debugfs directory [ 400.312790][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 401.412678][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 401.616838][ T5836] Bluetooth: hci6: command tx timeout [ 402.392816][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 402.489780][ T9571] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 402.659819][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 402.767733][ T9571] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 403.379209][ T9571] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.432801][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 403.461138][ T9571] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 403.722925][ T5836] Bluetooth: hci6: command tx timeout [ 404.376763][ T9571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.401238][ T9571] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.449721][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.457052][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.466832][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.473971][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.481446][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 404.506177][ T9571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.516986][ T9571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.009222][ T9571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.512793][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 406.539963][ T9571] veth0_vlan: entered promiscuous mode [ 406.552840][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 406.723458][ T9571] veth1_vlan: entered promiscuous mode [ 406.747228][ T9571] veth0_macvtap: entered promiscuous mode [ 406.756038][ T9571] veth1_macvtap: entered promiscuous mode [ 406.775400][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.785982][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.796226][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.806740][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.816810][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.827314][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.837207][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.847726][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.857623][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.868439][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.879246][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.889875][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.901039][ T9571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.910892][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.921411][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.931342][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.972097][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.989937][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.000468][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.011768][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.023819][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.037555][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.050003][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.081265][ T9571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.120474][ T9571] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.153300][ T9571] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.168246][ T9571] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.372290][ T9571] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.592828][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 407.840014][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.853005][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.897382][ T3828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.905378][ T3828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.267348][ T9712] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 408.292904][ T9713] sctp: [Deprecated]: syz.6.977 (pid 9713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.292904][ T9713] Use struct sctp_sack_info instead [ 408.632844][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 408.914923][ T9716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.672785][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 409.783034][ T5837] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 409.943470][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 410.293086][ T5837] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 410.301409][ T5837] usb 1-1: config 179 has no interface number 0 [ 410.310543][ T5837] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 410.322449][ T5837] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 410.339346][ T5837] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 410.350818][ T5837] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 410.362862][ T5837] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 410.376603][ T5837] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 410.393549][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.409028][ T9733] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 410.638428][ T8689] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16 [ 410.712781][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 411.372951][ T29] audit: type=1400 audit(3739.317:612): avc: denied { nlmsg_read } for pid=9732 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 411.445876][ T5838] Bluetooth: hci6: command tx timeout [ 411.482898][ T8689] usb 1-1: USB disconnect, device number 27 [ 411.482961][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 411.483006][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 411.546837][ T8689] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 411.752756][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 412.792941][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 413.726351][ T29] audit: type=1400 audit(3741.697:613): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 413.832773][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 414.400646][ T9771] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1029'. [ 414.480879][ C1] sd 0:0:1:0: [sda] tag#7424 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 414.491397][ C1] sd 0:0:1:0: [sda] tag#7424 CDB: Read(6) 08 00 00 00 85 f0 [ 414.734758][ T29] audit: type=1326 audit(3742.687:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82557e719 code=0x7ffc0000 [ 414.750793][ T9780] netlink: 'syz.0.1033': attribute type 9 has an invalid length. [ 414.801650][ T29] audit: type=1326 audit(3742.687:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82557e719 code=0x7ffc0000 [ 414.872860][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 415.506842][ T29] audit: type=1326 audit(3742.757:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc82557e719 code=0x7ffc0000 [ 415.529653][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.536666][ T29] audit: type=1326 audit(3742.757:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82557e719 code=0x7ffc0000 [ 415.559464][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.566197][ T29] audit: type=1326 audit(3742.757:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82557e719 code=0x7ffc0000 [ 415.589258][ T29] audit: type=1326 audit(3742.757:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc82557e719 code=0x7ffc0000 [ 415.612029][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.619049][ T29] audit: type=1326 audit(3742.757:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82557e719 code=0x7ffc0000 [ 415.641863][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.652838][ T29] audit: type=1326 audit(3742.757:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82557e719 code=0x7ffc0000 [ 415.912783][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 416.162787][ T8689] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 416.336152][ T8689] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.367374][ T8689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.430348][ T8689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 416.444273][ T8689] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.457307][ T8689] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.466732][ T8689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.952791][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 417.118176][ T8689] usb 1-1: config 0 descriptor?? [ 417.992908][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 418.452924][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 418.474042][ T8689] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 418.495675][ T8689] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 418.613633][ T8] usb 4-1: device descriptor read/64, error -71 [ 418.740868][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 418.751450][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 418.782766][ T9788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.796286][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 418.807993][ T9788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.820210][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 418.831169][ T5836] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 418.841274][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 418.865691][ T2138] usb 1-1: USB disconnect, device number 28 [ 418.901911][ T9820] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1047'. [ 418.929095][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 419.033479][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 419.098480][ C1] sd 0:0:1:0: [sda] tag#7432 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 419.109030][ C1] sd 0:0:1:0: [sda] tag#7432 CDB: Read(6) 08 00 00 00 85 f0 [ 419.135201][ T9819] chnl_net:caif_netlink_parms(): no params data found [ 419.254685][ T8] usb 4-1: device descriptor read/64, error -71 [ 419.508073][ T8] usb usb4-port1: attempt power cycle [ 420.072900][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 420.095463][ T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 420.179264][ T8] usb 4-1: device descriptor read/8, error -71 [ 420.209356][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1049'. [ 420.429760][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.437828][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.446566][ T9819] bridge_slave_0: entered allmulticast mode [ 420.456863][ T9819] bridge_slave_0: entered promiscuous mode [ 420.465989][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.553006][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 420.622383][ T9851] ebtables: ebtables: counters copy to user failed while replacing table [ 420.985467][ T5836] Bluetooth: hci7: command tx timeout [ 421.010355][ T9819] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.038509][ T8] usb 4-1: device descriptor read/8, error -71 [ 421.112764][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 421.162963][ T8] usb usb4-port1: unable to enumerate USB device [ 421.179923][ T9819] bridge_slave_1: entered allmulticast mode [ 421.193807][ T9819] bridge_slave_1: entered promiscuous mode [ 421.442111][ T9819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.728376][ T9819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.130439][ T9819] team0: Port device team_slave_0 added [ 422.145449][ T9819] team0: Port device team_slave_1 added [ 422.153013][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 423.034244][ T5836] Bluetooth: hci7: command tx timeout [ 423.192775][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 423.794995][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.849387][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.992940][ T9819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.232770][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 424.464242][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.542852][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.670425][ T9819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.793853][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 425.141765][ T5836] Bluetooth: hci7: command tx timeout [ 425.272804][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 425.432837][ T9896] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1063'. [ 425.739430][ T9819] hsr_slave_0: entered promiscuous mode [ 426.312757][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 426.524737][ T9819] hsr_slave_1: entered promiscuous mode [ 426.532112][ T9819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.566216][ T9819] Cannot create hsr debugfs directory [ 427.232253][ T5836] Bluetooth: hci7: command tx timeout [ 427.352859][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 427.648322][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 427.687469][ T9915] veth1_macvtap: left promiscuous mode [ 427.743883][ T9919] input: syz1 as /devices/virtual/input/input17 [ 428.392899][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 429.432779][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 429.660625][ T9948] sctp: [Deprecated]: syz.2.1076 (pid 9948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.660625][ T9948] Use struct sctp_sack_info instead [ 429.753810][ T8689] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 429.789767][ T9819] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 429.811523][ T9819] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 430.003779][ T8689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.472775][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 430.655630][ T8689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.665562][ T8689] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 430.674773][ T8689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.706265][ T9819] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 430.733941][ T8689] usb 4-1: config 0 descriptor?? [ 430.787509][ T9819] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 431.442781][ T9819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.460020][ T9819] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.479385][ T8689] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 431.491437][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.498585][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.512799][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 431.540316][ T8689] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 431.647628][ T8689] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.000D/input/input18 [ 431.668792][ T8689] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 431.672255][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 431.672285][ T29] audit: type=1400 audit(4015.635:661): avc: denied { mount } for pid=9963 comm="syz.6.1080" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 431.685767][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.715678][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.802248][ T9970] affs: No valid root block on device loop6 [ 432.332635][ T8] usb 4-1: USB disconnect, device number 30 [ 432.340418][ T9819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 432.412284][ T9819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.552814][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 432.651323][ T29] audit: type=1400 audit(4016.615:662): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 433.563696][ T9819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.592793][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.081875][ T9992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.419802][ T29] audit: type=1400 audit(4018.375:663): avc: denied { ioctl } for pid=9987 comm="syz.6.1087" path="socket:[23814]" dev="sockfs" ino=23814 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.553157][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 434.574907][ T29] audit: type=1400 audit(4018.445:664): avc: denied { ioctl } for pid=9987 comm="syz.6.1087" path="socket:[24616]" dev="sockfs" ino=24616 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 434.632771][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 435.053662][ T30] INFO: task syz.1.671:8380 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 435.102765][ T30] Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 435.110502][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.306677][ T30] task:syz.1.671 state:D stack:24400 pid:8380 tgid:8379 ppid:5822 flags:0x00004006 [ 435.372889][ T30] Call Trace: [ 435.376217][ T30] [ 435.379159][ T30] __schedule+0xe55/0x5730 [ 435.384860][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 435.390088][ T30] ? lockdep_hardirqs_on_prepare+0x370/0x420 [ 435.397217][ T30] ? __pfx___schedule+0x10/0x10 [ 435.402101][ T30] ? schedule+0x298/0x350 [ 435.407618][ T30] ? __pfx_lock_release+0x10/0x10 [ 435.412741][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 435.417968][ T30] ? lock_acquire+0x2f/0xb0 [ 435.422481][ T30] ? schedule+0x1fd/0x350 [ 435.426929][ T30] schedule+0xe7/0x350 [ 435.431486][ T30] schedule_preempt_disabled+0x13/0x30 [ 435.438164][ T30] rwsem_down_read_slowpath+0x61e/0xb20 [ 435.445046][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 435.451138][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 435.456903][ T30] ? rwsem_read_trylock+0x6d/0x250 [ 435.463159][ T30] ? lock_acquire+0x2f/0xb0 [ 435.467713][ T30] ? page_cache_ra_unbounded+0x173/0x6c0 [ 435.474662][ T30] down_read+0x124/0x330 [ 435.478934][ T30] ? __pfx_down_read+0x10/0x10 [ 435.484786][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 435.491838][ T30] ? find_held_lock+0x2d/0x110 [ 435.499280][ T30] page_cache_ra_unbounded+0x173/0x6c0 [ 435.504900][ T30] page_cache_ra_order+0x7d9/0xc90 [ 435.510047][ T30] page_cache_async_ra+0x5cb/0x820 [ 435.516892][ T30] filemap_get_pages+0x367/0x1be0 [ 435.521962][ T30] ? __pfx_filemap_get_pages+0x10/0x10 [ 435.528549][ T30] ? __pfx___might_resched+0x10/0x10 [ 435.536768][ T30] ? kasan_quarantine_put+0x10a/0x240 [ 435.546021][ T30] filemap_splice_read+0x5cc/0xd00 [ 435.551195][ T30] ? iter_file_splice_write+0x678/0x10b0 [ 435.556992][ T30] ? iter_file_splice_write+0x6b6/0x10b0 [ 435.562725][ T30] ? __pfx_filemap_splice_read+0x10/0x10 [ 435.568512][ T30] ? __pfx_filemap_splice_read+0x10/0x10 [ 435.574324][ T30] do_splice_read+0x282/0x370 [ 435.580455][ T30] splice_direct_to_actor+0x2a4/0xa40 [ 435.587242][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 435.593890][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 435.601509][ T30] ? __pfx___might_resched+0x10/0x10 [ 435.608047][ T30] do_splice_direct+0x178/0x250 [ 435.613052][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 435.619993][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 435.626015][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 435.631407][ T30] ? security_file_permission+0x71/0x210 [ 435.638685][ T30] do_sendfile+0xb0c/0xe40 [ 435.643207][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 435.649300][ T30] ? fput+0x30/0x390 [ 435.654828][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 435.660808][ T30] ? __x64_sys_futex+0x1ea/0x4c0 [ 435.666726][ T30] __x64_sys_sendfile64+0x1da/0x220 [ 435.673013][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 435.676502][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 435.678752][ T30] do_syscall_64+0xcd/0x250 [ 435.701428][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.712069][ T30] RIP: 0033:0x7f574cf7e719 [ 435.719064][ T30] RSP: 002b:00007f574dd54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 435.727837][ T30] RAX: ffffffffffffffda RBX: 00007f574d135f80 RCX: 00007f574cf7e719 [ 435.735859][ T30] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 435.744476][ T30] RBP: 00007f574cff132e R08: 0000000000000000 R09: 0000000000000000 [ 435.756727][ T30] R10: 000020000000003f R11: 0000000000000246 R12: 0000000000000000 [ 435.767601][ T30] R13: 0000000000000000 R14: 00007f574d135f80 R15: 00007ffccf8bbeb8 [ 435.776714][ T30] [ 435.780825][ T30] [ 435.780825][ T30] Showing all locks held in the system: [ 435.788765][ T30] 5 locks held by kworker/0:0/8: [ 435.793790][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 435.805213][ T30] #1: ffffc900000d7d80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 435.815815][ T30] #2: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 435.825938][ T30] #3: ffff8880b8628a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 435.869669][ T30] #4: ffff888031840a18 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xa1/0x14f0 [ 435.912925][ T30] 1 lock held by ksoftirqd/0/16: [ 435.918780][ T30] #0: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 435.932754][ T30] 1 lock held by khungtaskd/30: [ 435.937640][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 435.962907][ T30] 2 locks held by kworker/u8:6/2988: [ 435.968268][ T30] #0: ffff888140542148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 435.980544][ T30] #1: ffffc9000be7fd80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 435.993374][ T30] 2 locks held by getty/5582: [ 435.998913][ T30] #0: ffff888031f6b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 436.009127][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 436.019487][ T30] 1 lock held by syz.1.671/8380: [ 436.025470][ T30] #0: ffff8880238a0940 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x173/0x6c0 [ 436.037804][ T30] 1 lock held by syz.1.671/8383: [ 436.042898][ T30] 1 lock held by syz.5.928/9381: [ 436.048699][ T30] #0: ffff8880238a0940 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x173/0x6c0 [ 436.081244][ T30] 2 locks held by syz.4.997/9656: [ 436.106608][ T30] #0: ffff88807c579498 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x35/0x6a0 [ 436.131291][ T30] #1: ffff8880238a0940 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0x62e/0x2820 [ 436.143803][ T30] 1 lock held by syz.2.1000/9659: [ 436.151252][ T30] #0: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 436.193082][ T30] 4 locks held by syz-executor/9819: [ 436.211101][ T30] #0: ffff88804e3f8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 436.220943][ T30] #1: ffff88804e3f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x3ab/0x11b0 [ 436.231143][ T30] #2: ffffffff9014b628 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 436.242134][ T30] #3: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 436.252613][ T30] [ 436.255689][ T30] ============================================= [ 436.255689][ T30] [ 436.264804][ T30] NMI backtrace for cpu 1 [ 436.269152][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 436.279666][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.289745][ T30] Call Trace: [ 436.293041][ T30] [ 436.295988][ T30] dump_stack_lvl+0x116/0x1f0 [ 436.300701][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 436.305665][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.311675][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 436.317687][ T30] watchdog+0xf0c/0x1240 [ 436.321951][ T30] ? __pfx_watchdog+0x10/0x10 [ 436.326638][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.331863][ T30] ? __kthread_parkme+0x148/0x220 [ 436.336918][ T30] ? __pfx_watchdog+0x10/0x10 [ 436.341609][ T30] kthread+0x2c1/0x3a0 [ 436.345691][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.350914][ T30] ? __pfx_kthread+0x10/0x10 [ 436.355525][ T30] ret_from_fork+0x45/0x80 [ 436.359951][ T30] ? __pfx_kthread+0x10/0x10 [ 436.364562][ T30] ret_from_fork_asm+0x1a/0x30 [ 436.369362][ T30] [ 436.374743][ T30] Sending NMI from CPU 1 to CPUs 0: [ 436.380639][ C0] NMI backtrace for cpu 0 [ 436.380653][ C0] CPU: 0 UID: 0 PID: 9659 Comm: syz.2.1000 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 436.380677][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.380693][ C0] RIP: 0010:pvclock_clocksource_read_nowd+0x1a/0x100 [ 436.380730][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 54 55 53 48 89 fb 48 83 ec 10 8b 17 83 e2 fe 41 89 d4 0f 01 f9 <66> 90 48 c1 e2 20 8b 6b 18 48 09 c2 48 89 d0 0f be 53 1c 48 2b 43 [ 436.380749][ C0] RSP: 0018:ffffc9001020f920 EFLAGS: 00000202 [ 436.380766][ C0] RAX: 0000000073f2d514 RBX: ffffffff93793000 RCX: 0000000000000000 [ 436.380779][ C0] RDX: 000000000000011f RSI: ffffffff81f8c761 RDI: ffffffff93793000 [ 436.380793][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff940003464c6 [ 436.380805][ C0] R10: ffffea0001a32637 R11: 0000000000000000 R12: 0000000000000008 [ 436.380818][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.380829][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 436.380849][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.380862][ C0] CR2: 00007f7c6d62d440 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 436.380875][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 436.380886][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 436.380898][ C0] Call Trace: [ 436.380904][ C0] [ 436.380911][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 436.380937][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 436.380968][ C0] ? nmi_handle+0x1a9/0x5c0 [ 436.380989][ C0] ? pvclock_clocksource_read_nowd+0x1a/0x100 [ 436.381018][ C0] ? default_do_nmi+0x6a/0x160 [ 436.381041][ C0] ? exc_nmi+0x170/0x1e0 [ 436.381063][ C0] ? end_repeat_nmi+0xf/0x53 [ 436.381095][ C0] ? __reset_page_owner+0x21/0x400 [ 436.381115][ C0] ? pvclock_clocksource_read_nowd+0x1a/0x100 [ 436.381145][ C0] ? pvclock_clocksource_read_nowd+0x1a/0x100 [ 436.381175][ C0] ? pvclock_clocksource_read_nowd+0x1a/0x100 [ 436.381204][ C0] [ 436.381210][ C0] [ 436.381218][ C0] kvm_sched_clock_read+0x11/0x20 [ 436.381244][ C0] local_clock_noinstr+0xd/0xe0 [ 436.381272][ C0] local_clock+0x10/0x30 [ 436.381292][ C0] __reset_page_owner+0x26/0x400 [ 436.381310][ C0] ? __pfx_lock_release+0x10/0x10 [ 436.381328][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 436.381351][ C0] free_unref_page+0x5f4/0xdc0 [ 436.381377][ C0] vfree+0x17a/0x890 [ 436.381397][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 436.381425][ C0] ? __pfx_kcov_close+0x10/0x10 [ 436.381454][ C0] kcov_put+0x2a/0x40 [ 436.381481][ C0] kcov_close+0xd/0x20 [ 436.381507][ C0] __fput+0x3f6/0xb60 [ 436.381530][ C0] ? cleanup_mnt+0x266/0x450 [ 436.381556][ C0] task_work_run+0x14e/0x250 [ 436.381574][ C0] ? __pfx_task_work_run+0x10/0x10 [ 436.381600][ C0] do_exit+0xadd/0x2d70 [ 436.381629][ C0] ? get_signal+0x1dcd/0x2770 [ 436.381652][ C0] ? __pfx_do_exit+0x10/0x10 [ 436.381680][ C0] ? cgroup_update_frozen+0x14d/0x6a0 [ 436.381714][ C0] do_group_exit+0xd3/0x2a0 [ 436.381742][ C0] get_signal+0x25fb/0x2770 [ 436.381767][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 436.381792][ C0] ? __pfx_get_signal+0x10/0x10 [ 436.381814][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 436.381837][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 436.381865][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 436.381896][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 436.381921][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 436.381951][ C0] do_syscall_64+0xda/0x250 [ 436.381982][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.382009][ C0] RIP: 00fb:0x294e66b3c7c44cb4 [ 436.382024][ C0] Code: Unable to access opcode bytes at 0x294e66b3c7c44c8a. [ 436.382032][ C0] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 436.382050][ C0] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 436.382063][ C0] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 436.382077][ C0] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 436.382091][ C0] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 436.382104][ C0] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018 [ 436.382125][ C0] [ 436.414235][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 436.414253][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 436.414276][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.414288][ T30] Call Trace: [ 436.414294][ T30] [ 436.414302][ T30] dump_stack_lvl+0x3d/0x1f0 [ 436.414356][ T30] panic+0x71d/0x800 [ 436.414385][ T30] ? __pfx_panic+0x10/0x10 [ 436.850061][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 436.855435][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.861414][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 436.866775][ T30] ? watchdog+0xd76/0x1240 [ 436.871178][ T30] ? watchdog+0xd69/0x1240 [ 436.875600][ T30] watchdog+0xd87/0x1240 [ 436.879836][ T30] ? __pfx_watchdog+0x10/0x10 [ 436.884514][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.890000][ T30] ? __kthread_parkme+0x148/0x220 [ 436.895032][ T30] ? __pfx_watchdog+0x10/0x10 [ 436.899705][ T30] kthread+0x2c1/0x3a0 [ 436.903766][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.908957][ T30] ? __pfx_kthread+0x10/0x10 [ 436.913543][ T30] ret_from_fork+0x45/0x80 [ 436.917956][ T30] ? __pfx_kthread+0x10/0x10 [ 436.922538][ T30] ret_from_fork_asm+0x1a/0x30 [ 436.927303][ T30] [ 436.930517][ T30] Kernel Offset: disabled [ 436.934834][ T30] Rebooting in 86400 seconds..