last executing test programs: 14.860505998s ago: executing program 3 (id=1905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x3f000000, 0x0, 0x8040}, 0x44000) 14.672059575s ago: executing program 3 (id=1907): ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3018, 0x6, 0x7, 0x1, 0x6, 0x1}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = dup(r0) getsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f0000000040)=""/108, &(0x7f00000000c0)=0x6c) chdir(&(0x7f0000000100)='./file0\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x1, 0x6, 0x1}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000180)={0x3, 0x6, @name="3a7f045b0d63bd491aad83441354b8e038c62ed3308e197a8e91e4980771e87c"}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000001c0)) listen(r0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000200)={0x1, 'xfrm0\x00', {}, 0x1}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x4, 0x1, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6b61, 0x7b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x801) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000c80)={0x0, 0x9ad}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000d00)=@sack_info={r3, 0x9, 0x3}, &(0x7f0000000d40)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000d80)={r4, 0x80000000}, &(0x7f0000000dc0)=0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000e80)={0x9, &(0x7f0000000e00)=[{0x2, 0x9, 0x40, 0x1}, {0x8, 0x9, 0x1, 0x3}, {0x50, 0x9, 0x5, 0x5}, {0x77c6, 0x0, 0xfc, 0x3}, {0x2, 0xe, 0xde, 0x5}, {0x1000, 0xff, 0x7, 0x5}, {0x40, 0x4, 0x2, 0x7}, {0x5, 0x2, 0x8, 0x71}, {0x6, 0xd, 0x6, 0x7}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000f00)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000ec0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000f40)={0x9, 0x108, 0xfa00, {r5, 0x7, "2cc8d7", "550d2a94107385eb25cd1e174d052f08cd7066034601538a29bf103ce77775865dc97583e5dfab22761d042ac293e6433add3927aab15fed21969a7de59145ba1b54546d7fa0af10d4a678aeeb956d00f4f32d06edd42aff8b8c717a367c39686052d01b364e7ac727a609aa11984ee0f5ef1ff48c08d14ba996ffddf72658ee50980717a5f6b963c44eff47a27c5c3646c6a15ecacac21c787d18844276cb20ad5ab400e488dcbfd07e9b49894215bb4386cf95081fea9d326a325bbabb2b1c2aa5884c467e54e0e06d063cee4fde8daa81e4a0fbceb473666abcb5c4c209bbcc003d3032219061c1f2e3bac45fcdeb4595d78d96110739c2a10922e7781fe6"}}, 0x110) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000001080)=0x3) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='xen_mmu_set_pmd\x00', r1, 0x0, 0x8}, 0x18) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, &(0x7f0000001180)) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000011c0)=0x1, &(0x7f0000001200)=0x4) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000001240)=""/225, &(0x7f0000001340)=0xe1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000001380)={0x7, 0xffff, 0x9, 0x6, 0x8, 0xd}) r8 = creat(&(0x7f0000001780)='./file0\x00', 0x20) sendmmsg$unix(r1, &(0x7f0000001b80)=[{{&(0x7f00000013c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001440)="34492becf9d8bbbbc92001a23c0bff3011fd09c5735b46ec53289b51e8c2cbb51e74743fbae4b2e9d607fca2746e1c60ad8abc70e2ea4f72863d607c51ce7774611ab74d65c6585af784369c8a017e99dcde443d265aebc3a3a92f4416ebe58c53df4ab39c", 0x65}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000001500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001580)="6915a97c5ac6b5884618fec22fb56713e22ccfefd6ed21f82651b84818d031d2e02c808c6f6d7b3cfe12060598bd279cfb0abfa6d22e14afbd3df5a612", 0x3d}, {&(0x7f00000015c0)="6b2425bffd7d2f48f0c4c5b610edaa79276ad04a1cace3df3356fba55f08b7c7f759b9d229608e328c67d779976046d97f15b66939d8b91ae89bee38eb5ac4a436a0e16d3a0358dd1a7225fd6912a12aabc95309732b77854a35f145596a038edb1a676077d0ec1a65f0feec767c47d7e2c0412746c0e850e38fe0fc5feaf20c753305a3431f3530e99714029a97c31870d53f2cdcd4c6e3dedc9d6e4f574ae5b67f7e64ba040da4f6354de6beea879cba7b9472c9e7e5062ebe674f65ec2cc6046fda0a3ffe72b344473bc0853187232209117730cd2c2045fbdcc0cbeb8167", 0xe0}, {&(0x7f00000016c0)="f17f38af13dce01617150415c6a96ec39294a9301d4621f97e257ecfa65e5e06f94cc473c1a2cb0d89a21bfb5cbaba701fc465383e4ec08a098754c94106c08e33d1b0884e3b184835bac8647d3ba2e4efaad613b08c9ec7616030480620", 0x5e}], 0x3, &(0x7f0000001ac0)=[@rights={{0x24, 0x1, 0x1, [r8, r7, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r6, r7, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, r7, r7]}}], 0x90, 0x8004}}], 0x2, 0x800) 14.504054768s ago: executing program 3 (id=1908): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000300)='}', 0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r1 = syz_io_uring_setup(0xac9, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e8) 12.320837898s ago: executing program 2 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x1, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 11.872511132s ago: executing program 1 (id=1916): socket$inet6(0xa, 0x80002, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r4, 0x0, 0x6}, 0x18) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x3a, "900763a5e64f61889103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 11.360578331s ago: executing program 3 (id=1917): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r2, 0x14, 0xb9c, 0x2b, 0x0, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000000c0)=0x2) close(r5) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000240)=""/59, 0x304000, 0x800, 0x7ffffeff, 0x3}, 0x20) mremap(&(0x7f0000216000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000875000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) 10.928398958s ago: executing program 1 (id=1919): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x3c, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0xfffffffd, 0x200, 0xb, 0x9f, 0x3, [0x100, 0xfffffff9]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x884, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x18) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0xfffffe5b) 9.952621003s ago: executing program 1 (id=1920): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x80000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b9) r6 = syz_clone(0x80284011, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011780)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000300)="0b78ff58cfea480ac96968d1deaa5a148ef7c9e38c341e1d16af6f2139be5ea7b412b44db6cdf9e4528aa6051394379140b7841c9c7ff6affd8221e9f2bbc196edbeb9a9de2d3f477c3715e7d3f71549c429413d6cdab2d5041a2ace3263b5c445b3a17ff30db4dd5e501671fd9633ac6ebb6e5c84b7f9dea52cf8939e42d81a3061fa32d8d2d09061fff9d3eecd2843228c29c9f1035e5d9557456de810817a8cda950d7d02772e99cc65bb8a06c29ed2a22b45a34cd5203dcb30f289761a67736466994d534c56b1535d2ee3", 0xcd}, {&(0x7f0000000400)="a865612d845800d4f55295ba84c89435758ad36f300b10ac0cd8af4074b412dbae5a38f2e498b52c9ffe60c97600ade972c169b184a3d95126a9d6aae26eddd459a0391acfa08e77e9cd124b3459c976a17ed5310d2f421e953858dc720b3a3fa2fc0b6aa4995288e48473bb817175ab20", 0x71}], 0x2, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0xb0, 0x4000004}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000009c0)="246b3e572b50c01b18b7425003f73895adf25b7bb4469de65671f15f015c21c1bdbb31f2c8eec039bd9a3ed0bd7bede0f34d86972ed4481bffc86f45d4ff4e855bb6d3c9a11d531e625421e68b92d31c44a1d11753d2ba51c4ae902088358547c36cfc389e1d804b2c7c4c27e221f146cfb62a78a80f7e25f463f7399219900dde946cb14899395b0f2bd047209675e5e7239f5a8cd2ad085dc8b5adbb763fa938850c3305c25973ad1fa703fadeef314ccfe0bea25dba6d3c0cfafc63eb48ec2cce259712abb16f942523c8bf06e977815dfd4f5022e4a29fcafd6391258130", 0xe0}, {&(0x7f0000000f00)="49e75b9857cc22e68d838d3ae3728b8ce238979be073c02c63b47dbdc816be63303913e6dd328330b813b1918814c36680d7d9d3ac20717fa73895db922d1036005ff2b54aad66edacad2ae1e406901939d3c984a89df317cf2a77f1b76c01dbbcea51a95f6c6e2665c82b65ee8ca00223e52f2a9e751e60322f9aa24e6fe09d62601e34a26f4df15c235fd16b37af3d15fcfac8f38b7ea1d51a1d72180315f18af7ec7a1979edeac617797a193a14e32c6913bd279e6afebed3475ddf04bf087d3134216268fcf531d824cbbe5f6ae33c9909b0f0923f0dfddeac8e8018bb96e52c848da2a1a651d7c8c3e3dcdc6b02e544", 0xf2}], 0x2, &(0x7f0000000ac0)=[@rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f000000c280)="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", 0x1000}, {&(0x7f0000000c40)="bd67ce63b92ef5c73911657afc66591d562d070b293e7085ebcd1e39a4984316227243b9a5719994924fc5b02a75780f92ee7b0e26c0c97b2fca6bf9b79ebd176cae6b793f955a8489", 0x49}, {&(0x7f0000001000)}, {0x0}], 0x4, 0x0, 0x0, 0x4000042}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001300)="98a2ae33be473eb770d51b526e999e333d39bf", 0x13}, {&(0x7f000000d280)="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", 0x1000}, {0x0}, {&(0x7f00000014c0)="6c44796bc2a0aa", 0x7}, {&(0x7f0000001500)="0c116896231d1964261cdb9e598313297f6a6d4af1a49eff46ecd5326b5c24ddaeef7b6151a26729db9e2d412cdea2542bdc7721a1bb24aec1bd5429deb1eed0d4d50a13fae55d153c9be3977c8b9bd1b4ba09c1f4d6bd740e4df797da02c8cccecdd7693d4aa76aa1c976929f9fc499a93e3762cbb90f64df9e37c834d11830b27ed4a978303efcabd2c56dbb8f6e400e2ebfdbe67c27597ecee8911e338e5a71c6bce539159d38a2fe6485214b54e1d35e4fe9d760d1e23b3d5d56fbc1f09e6349a7a6207db366775458846fd655ba1f5fe436ecbfa138323e798ad890db88a25056397a842a6ec711f97565076f482d", 0xf1}], 0x5, &(0x7f00000103c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000028000000001500000100000001fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c00000000000000010000000100", @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xe0, 0x44}}, {{&(0x7f00000104c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000105c0)=[{&(0x7f0000010540)="b1dd30faa98bfc332a8c41191e2ab8ae8a40dd58ef7ef22d64d926cbaee8f2a5d063040a57e92ae3cffb3073729d450627273926319805f97d56753c4cab9596e15c71b587e71399bbd9a608eceb02b11dadad5e85f12066f95ed1db07d859d1c9993e2c1a", 0x65}, {&(0x7f000000e380)="2abbca", 0x3}], 0x2, 0x0, 0x0, 0x20000004}}, {{0x0, 0x0, &(0x7f0000011340)=[{&(0x7f0000010d40)}, {&(0x7f0000010d80)="211f9211ec6dba0ad41eeba1a5600d1f27b7b6235d01f48be008c0284235fc5ddb22785c7cceeb854bde704524056eb1547cc9c26edab4ea9883c6330c3a655c95376a84", 0x44}, {&(0x7f0000010e40)="39be5acda7996f94ff2888170b35c601c559ff35c2db418cb9f4ae28e73d0fcfb8df658b73ff", 0x26}, {&(0x7f0000010ec0)="f0aa5c9735adf1cb84052e8620a45a4e3be571b13454f0df7922ccdf6c54f52a053ff39e5e9ed372926279ce2ff395d1a01403984483a5d3fd93401f667f0b586a42a2ffcef2ac3a2a5893c0ee4374eefed79687ddcb9e0b0bfd9a9df379ea9c7ee40215020a643b780d4c595ce37f3ce1fb91e7ee6406826b7a89992017ad93708944fa19a7cc77362bc5be967fb454ab39e1ef74067fd12afc7730fd66733567d2cc95d630f50afab94455e191c12207f5a099ee576ff9293f79cf8cb632e1596e5c50f108da1d12a18451c846053528386e40526f1fc25ca12e44a589231267fcb9061fe9b04bb0f042cb2d4133", 0xef}, {&(0x7f0000010fc0)}, {&(0x7f0000011000)="d027139813ce45da11ae310ed339d27749cb2013f39ba3a23ad50600efbb34227312a6083fc96552baab62f50c621408b137a3afc0adf8b6b7c0b127218577b4c49fc174798b5ed6fbf210ce220bbd7bdf92183419bfd44dbce258b88aa3a0e8f70b3fad1f488c28eb6b887e2a93df88439afc541451768525157567f7542beccc7f112ea50739ce842d5988c6b22160bd15d37b17ebd1e2a24a8779461b83b252a5adf6d103888471d3bc271e0acc2945e83a01dbfe4beca664adef1c5e02dd17c11decf37abff4161acbe860f5a5ac6a84f3df8d7442ef70074aaa2b01d50b26674fa0309e0cdd45", 0xe9}, {0x0}, {&(0x7f00000112c0)="0c10eb89fd419df459020cdd943f3fa77110d5aa1d43f1b9c225dae7cc065e43914eae0934e07723452c242319839b9c5b6eaf6509abe325348507a278c9c51a2d2f46bf46576fc80da8fc2b6fe4c80a8504532f85fd4aaa638acca20795", 0x5e}], 0x8, &(0x7f0000011680), 0x0, 0x44040010}}], 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f07ebbeeb, 0x8031, r7, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 9.082602502s ago: executing program 2 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0x264, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffe}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x882}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_NAT_DST={0x9c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0xb4, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x264}, 0x1, 0x0, 0x0, 0x811}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="7961dffa4427000000007e00000008f239182c9dcc7ab8000300", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) io_submit(0x0, 0x0, 0x0) 8.929366259s ago: executing program 1 (id=1923): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x13f84, 0x10, 0x1, 0x6fd}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(0xffffffffffffffff, 0x0, 0x10040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 7.692429364s ago: executing program 2 (id=1924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x28000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x8c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 7.646593155s ago: executing program 0 (id=1925): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20048800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) syz_open_dev$vcsa(0x0, 0x3, 0x400) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x200, 0x12) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0xa8, 0x1, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x101}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xfe}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x400d4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 6.891068167s ago: executing program 1 (id=1927): socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x20000000000003b7, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0xdd}, {0x6, 0x0, 0x7, 0x2}]}, 0xfffffdcc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000000) (async) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) (async) memfd_create(0x0, 0x5d7434240000001f) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB="5035cb8306d9e522971bac7b2b0fa95a303efe8b3214d6ec1b81e3dcd0d9f03a4deb221dcef6a6aaf7cba81aad85de4808bd245d4ce42c63d5c8920ed02729365cd03f6f1a557d7f0f360a94f4e234e2aa5ca7913c863c6dcccfc62581e769bda9dc317c004f3c9e2db63e37980cd2ae8b5f9d9a9ec225b9888fed683bef35f1b12ee9dfa981bd15b8a0436e54963d57174fc907718db652477f0fe64ae8b03ccaef47c134f2172a3bb16739d7209c36bc931221dd609cbf935f0bc0f3d9bd91c2edb3efc94bf04c0955ea6b32384c4bffdc786806613004b998afc2d4c3bf2604"], 0x3c}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x88e5, @dccp={{0xb, 0x4, 0x2, 0x1, 0x3c, 0x67, 0x0, 0x7, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp={0x44, 0xc, 0x89, 0x0, 0xc, [0x0, 0x1e]}, @cipso={0x86, 0x6, 0x1}, @timestamp_prespec={0x44, 0x4, 0xff, 0x3, 0x2}]}}, {{0x4e22, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x1, "05f945", 0x4, "44f28b"}}}}}}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) (async) preadv(r4, &(0x7f0000000040), 0x0, 0x80, 0xa7) (async) r8 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x30, 0x0, &(0x7f0000000080)) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) ioctl$IOC_PR_REGISTER(r9, 0x401870c8, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) 6.885356601s ago: executing program 3 (id=1928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0x594c, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc92) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f001f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 6.172982036s ago: executing program 0 (id=1929): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 6.032143001s ago: executing program 2 (id=1930): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x9, "4663b08d"}, @global=@item_012={0x0, 0x1, 0xa}, @global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_usb_connect(0x4, 0x2f5, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0xbd, 0x27, 0x99, 0x10, 0x83a, 0xb522, 0xb36f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e3, 0x2, 0x7, 0xd, 0x0, 0x1, [{{0x9, 0x4, 0xd3, 0x7, 0x9, 0x9b, 0x7b, 0xcb, 0x7, [], [{{0x9, 0x5, 0xb72502cab2ee9a5a, 0xc, 0x10, 0x2, 0x7f, 0xd}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x1, 0x1, 0xbd}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x9, 0x52, 0x11, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8000}, @generic={0xc7, 0xb, "c30e264fb7d6152f6d7d2fe481ae8eb871fba022131b4eeb5b80031f1a3741a3f81eae164c2ef5a6ad6f6b6f73268353bb5038d7c16eff5e9fbd8a715e652a183ea8e13a4f4d365a2afcee0903836e25c5780688b38a07516cc27746f350b74f0186f26a413e664f9fe96462851ea9bf32e534dfce75a17d962e04d00451ef869e04b1da132bf44e01387263b569aa57e3fc246635bbecf3acbc124b80d6811fcc3c776324f7c6c50578e30c49253d18e435448229611b5f480500c524e51509a34fb51c04"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x81, 0x8, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfd}, @generic={0x2d, 0x31, "83874c847064f67ff141c8a799e53dcd7133b4f4867c815d56344df8dbdcc05f4c87a801a8393ad382b39d"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0xff, 0xc, 0x6f}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x5, 0x7, 0x15}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x7, 0x5, 0xf8}}, {{0x9, 0x5, 0x7, 0x2, 0x5df, 0x80, 0x4, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0xfff5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x61, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}]}}]}}, {{0x9, 0x4, 0x22, 0x7, 0x1, 0x2, 0x6, 0x0, 0x7f, [@generic={0xbe, 0x24, "050ddb59601b1779bb408967a5114b85a90cd254d9a6e8b7bc8eb27cf77d546f9154ca0090d29e4d7b0100a130199623328288ce9679f9f980f4e6f12f1b61e0ff0730a7c430012a16ebd293308dd56eec9ec2177d160622f1d754c41599635b4f5a555f607779bf510c139c0c761aa5ea3141b69c99c9e42211ffc779ce968e7263f4a03c4366fafe5c4d5f93b89777aa823442b1e88d773131e24d029868120cdcdb527c6fc9e97518dc1a3a25caf4a0dd5f6d9b66ed8a86315e06"}], [{{0x9, 0x5, 0x1, 0x4, 0x200, 0xf8, 0x9, 0xf, [@generic={0xa0, 0x7, "be3278ebf644393dc32f780e68433916dc25bfff0c62a4b66f6a90c4a9345a9d7a9cdaaddc618e038ed3cc2a77a08a4306ecce5265445d54a7ea1a12440464351ce87ccfc5e51ecd113ac97cedb86511460bc8376c838b49723355249f12a58fd9bd1c8e55d5bae0406e9a30c49b1ad389e44434848811386f946e9304e7ae0e37a62c01191b098788c244debf416141c4d846d7de4b52750d49b1811ae5"}]}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0x2, 0x3, 0x10, 0xfe}, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "177bef8a7ad2153649305ca1d770de73"}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2409}}, {0x78, &(0x7f0000000380)=@string={0x78, 0x3, "18fa54a7e2a7a905f6232d5002f8f398a1bc0a88101d305cf33d69801c9652e7356bc01f1b0584450403efbeaa8cdcdd8d994b14ee1cbd570e16fcb1678279bfdb538faf09bca5f4f492daa62e9eb218aa282665508602da79cb061f47f9ebdacd08a8c80e1a815f92ed8d157cc1d32a2a7a8830d7c4"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x200, 0x12) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xc989, 0x400, 0x1, 0x278}, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x4e14, 0x912a, 0x41, 0x0, 0x0) 5.932682036s ago: executing program 4 (id=1931): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x14, 0xfffc}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0xb0bc, 0x3, 0xa, 0x7, r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0x3) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880), 0x10) shutdown(r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) write(r5, &(0x7f0000000240)="df3a8767e7eaad5399dd29ebf35665b6ab91118b04c7bc6df0823077ba508442030ae1eebad5038ba5a281963799a3f333ab07c0f127da79c47965b8d0c8581227cf2adcfd0741d5a9416e9d719e6ecb43", 0x51) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 5.31942956s ago: executing program 0 (id=1932): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv6_newrule={0x60, 0x1a, 0x0, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_DST={0x14, 0x1, @remote}]}, 0x60}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r5, 0x3) fspick(0xffffffffffffff9c, 0x0, 0x0) 4.668415037s ago: executing program 4 (id=1933): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x80000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b9) r6 = syz_clone(0x80284011, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011780)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000300)="0b78ff58cfea480ac96968d1deaa5a148ef7c9e38c341e1d16af6f2139be5ea7b412b44db6cdf9e4528aa6051394379140b7841c9c7ff6affd8221e9f2bbc196edbeb9a9de2d3f477c3715e7d3f71549c429413d6cdab2d5041a2ace3263b5c445b3a17ff30db4dd5e501671fd9633ac6ebb6e5c84b7f9dea52cf8939e42d81a3061fa32d8d2d09061fff9d3eecd2843228c29c9f1035e5d9557456de810817a8cda950d7d02772e99cc65bb8a06c29ed2a22b45a34cd5203dcb30f289761a67736466994d534c56b1535d2ee3", 0xcd}, {&(0x7f0000000400)="a865612d845800d4f55295ba84c89435758ad36f300b10ac0cd8af4074b412dbae5a38f2e498b52c9ffe60c97600ade972c169b184a3d95126a9d6aae26eddd459a0391acfa08e77e9cd124b3459c976a17ed5310d2f421e953858dc720b3a3fa2fc0b6aa4995288e48473bb817175ab20", 0x71}], 0x2, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0xb0, 0x4000004}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000009c0)="246b3e572b50c01b18b7425003f73895adf25b7bb4469de65671f15f015c21c1bdbb31f2c8eec039bd9a3ed0bd7bede0f34d86972ed4481bffc86f45d4ff4e855bb6d3c9a11d531e625421e68b92d31c44a1d11753d2ba51c4ae902088358547c36cfc389e1d804b2c7c4c27e221f146cfb62a78a80f7e25f463f7399219900dde946cb14899395b0f2bd047209675e5e7239f5a8cd2ad085dc8b5adbb763fa938850c3305c25973ad1fa703fadeef314ccfe0bea25dba6d3c0cfafc63eb48ec2cce259712abb16f942523c8bf06e977815dfd4f5022e4a29fcafd6391258130", 0xe0}, {&(0x7f0000000f00)="49e75b9857cc22e68d838d3ae3728b8ce238979be073c02c63b47dbdc816be63303913e6dd328330b813b1918814c36680d7d9d3ac20717fa73895db922d1036005ff2b54aad66edacad2ae1e406901939d3c984a89df317cf2a77f1b76c01dbbcea51a95f6c6e2665c82b65ee8ca00223e52f2a9e751e60322f9aa24e6fe09d62601e34a26f4df15c235fd16b37af3d15fcfac8f38b7ea1d51a1d72180315f18af7ec7a1979edeac617797a193a14e32c6913bd279e6afebed3475ddf04bf087d3134216268fcf531d824cbbe5f6ae33c9909b0f0923f0dfddeac8e8018bb96e52c848da2a1a651d7c8c3e3dcdc6b02e544", 0xf2}], 0x2, &(0x7f0000000ac0)=[@rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f000000c280)="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", 0x1000}, {&(0x7f0000000c40)="bd67ce63b92ef5c73911657afc66591d562d070b293e7085ebcd1e39a4984316227243b9a5719994924fc5b02a75780f92ee7b0e26c0c97b2fca6bf9b79ebd176cae6b793f955a8489", 0x49}, {&(0x7f0000001000)}, {0x0}], 0x4, 0x0, 0x0, 0x4000042}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001300)="98a2ae33be473eb770d51b526e999e333d39bf", 0x13}, {&(0x7f000000d280)="e60789b8f0b4ea3f6840273172fdc3892dd7921e03ae021218c6d4a359ce5e36c37253b7b6680fe6031d7c0dd48508f6270a15ecd950d1ff7e6e1a193988548a9bc6a1ef169a02f6e5f7f95140dd0a51d69aea38bcca5b7038343def2c3c3262a4738c6dba8c4fa743db8ca873a0cdb9d901fac658dfa7e88daa4ba32b8556d9b60c67bfd7ce343454760bad608c8b54318d283957f86cf0cf7903c840963e08745fae073de1d886dd6be98e0966e1f5692a11c0a02453c857c15113e9eab414eb6c8c480ebe2ec2febb9b6f6c12f2545969babd09a0a9bf686bea1ddc7ffa166468e071c8ea1d37d713bd53f59ef0f1f8390fa894bd136155d334b167daf916e4ed5de05ca21246cac700b56d588ca78ccf89a2289d4ecd649a4dccb47d154df51500ffebe364c0feff329670a4c4216a41745504afe7b6efa5fa370e753bd810377571112862542be2f25e7a7313b686538713dd34afc5c78f852c501f7f353b1d4163aaa4f9a4aee303e156c0decf74f0567333c392c5dcccf1014118f05f5bc00742d8b17676523ada39b5d12b5d91cf8d8b0874f9b82f36e9a0aaf4eb80058c74a1020c12b69809c080cb06aef5ebc68ad7786718bbfbe08913f3c4e93ebac16585883677b1eabc9c3eca94063d79e1f36a61c129a42d8a21f32dcfc496fdbe8373369ee0d340452c1aaaa1317938e0fce0a50fc8ff4dcf085e40f51498bbe70b1cafa12bf62c0a2e5a0b1edb090385cf9d68d14e0d23c0e883775c06811a6ad87b712cd923fc6dc1ac35257411eefc123b0578bb3b7b230cc78e01286abb654e4d15f39362c98847a86bccbd7a90810d90c380c10087691cb2723f8cf9bd100b77c7c7741806eec0f82913a9ac0cce3b4411adb6116a82865cb0b4f7a241c7a80cdc43a995e258d9c586490e186971ade193a9b1f4e56c5313c1095cc72332bfa4260b6bdfaf28872a7eb445c21aefc4316c5d7d4bead5f8ecbcfe68526977344464c80f5c978889fcb4c17dc23fb487be64301e055c3560c8c4206ebd4ae1a1ca3896f57e1a39378180b823f62325f8db6ca28fb04d440e6cb1e9aaa6d9e7e739c27e96a56a375e12c521eb7ec2cda7ab41036983b77d1d1745bf33c7758fcdde5c97944dc9bf2f549669b160ead527e21c1beb418ee68a9e2b2f3cd97ace6edb2522b0924e387601667ff221a3cb0de20b2955e935fe39af8265e2a167ee626933d6c68cc8881f890affe619c947b334151594d8b253ba75763f619ec20dcd2728766db5109d19f60074d662e3b51cacbbc3f9983bdc90e73bc2221f4fdfe2be09f5fedcd7d7cbce87d4bfe31aab459cd8d5d1326e3554d849fdea81df5b536ed565012c2eedb64fad9bcddd43c0eb6808f78dec298889ca15a420d98346f7606fdba6713f366e1599f07eff8cd76caa3f324e24b504dae1766b39298298c7fbe77e5827b90ec5d9725fdf956d63bf60a1db399286f34b52d6af60a53f275230e1b8b4543f53bce8ac4cfcada868fa2f9f863bc2d7eab35d245a00af1f6e485d81fcef2c87bb01353f5da974b976af13ebee22fd625797b6f67a17ae08afe7bd83371f82f3635844cd5e6ee626378bca3b82e3ea4cb00c96e611800183a1c32460ef38914574ffef9aeb50509ad548d2a0e3b1e9d81c65a7f729df91c7310332a04f25c3218384fcb4f83cb2a05d70a63ecbf58546f38a3d0d14ce7df326230d634ceed7202f2e7eecf2aaf64f1ba0641b8c776cafb44a6603a53d0fa4ebccc7abb28c6f44024e101423bd8a4a30278a0921cf8cde924a301ff6b7a1314b7b93b5aa11fe4c3d2e5896bb2e531947ca335865ca42fdb2fb81d7dbb2480da1a82428b037d01a10efff1354729f5ac7e6b76000bd1089a01b80081a09468e493333c5940455fc0e6c3315485024d51849b50010ad3d709527b21eea03825ca1b0719181948c35c16a5cd8e1f9d97baf5a29c1edbad600117b9e040126e476f415e861cfcfadaa7c04a20097716ad6ab84df404c30c778d0122b1fd6c4ca1e08b06ef5507600214f1ecb26ea4a825cd5140f5bf6385bc15a3207619799a3a002c6a37d0558bd0e667d943df42d97c4a65a3823f824a02bdba4a4bd4d916d041c42c8db89418809c8ab4adbda0720c5c197888aa54bc74bd5ea89d237430d692def318007fea664a960d105dfd9d14c77e8536886dc8033a1157856803d0daf6cb69f995a91f830b301a91ca5b8f508f809b01bb59d6058a4db04a4332ef5e6512755920771fc47f7b5b570861a961efbf3726514b9b95ad6f0e29f4e71d2bc9c1331345838674b356e9a12fd8071e61b02514ccb131b808013410c39873901cedf3ce17641fa2abdf927ea01aecf4d7023b56e9c92a7985dd929fc014691d91f0905dc3078b88379055288c94b7e40cd1c9c5c174ed958b80614463e985332449397467a792cbf199f0066d07dc0db2ccd012561f0a56d1afd63a5bdf5b13987cbbb285c8a6a142bcb3e8f0d9d2c424defe2ac8c731aa46f70a374ba6ccf51c8f438d8b0696c4bd0d29e820fe9e46ad9d42efd768d449aeee76ee6d35cccf86f844ca0575efdaf611f016b01778c2850d1d22c11c740ad7a1a054e59b45de0d5bfb563a825e263a6b5ef2861bd79260edc317661934f8f9128d4ab27284ce19a8ea91d771205f6882f869ecda28a1a86d06b97fe9b351946b74676c4468d128e402a02849b2e2b707f26967ed8e100e785403d9f87cb9a453d0242f3483d1980a3e94a73f28eb60491ef714c251ba923d40916896de94dab2c233d8c4ba720f13fae1df0a4839ac215dff63f1713028c6d558501517a3e3ab7a3018cb4f3b5f0142ed1f50e9a2272bcfefa1728cb5dbd660b075823023b2756ea1453d7bc35f3bbe533238d9469c33a968dbf3dc9a466d84f2e110c2ac67dd834361cb38ae6307c513356339bab17832463146b217353a8a744c5f789d85405dc4ffc6e7ba96b19ac5b6d99d10959c5f6e0557a7a1f785e4a5bae7070b74e3088276c6e26a615405c397408f7f9f0632db384f975c3caeef730f9f746a70c018507dbdb52f6d0266ac628f7cbe91befd4ec2eba4e861c3f5be09fe5f4d306742459c474bf33283d1847ae9bcec350fbad895c8966380df309fd032d4d64a7e7313ee21fe2b8bc5408614ef0b91ebb453e21bdfd32c322428c79310b2404ad0322187d7818e1e2c94fcbc7fb7b373862a2a5b05c0264d8a683cb639ca6f8fb9bb9ff41a801eb66c3433c7f10a77c4079dfb45fd21889518f18fd81fce54d70d781d525126f0d38fd1ecaa83ecb44667d3e04b3dc8eb7b332a1b223fba1b6a87a29e258c5a5a83e0ed003cf2f0cb4a39295e9ec28b0c9994ec539ce883e4079fc39b04c25cc4313b037fbc41abb418aedb2971050d8ff7a433dd2c6b9a2e6e05f49011051f1e548168e4e8ef7a7a7c60d6c867e6804a3c7a2527b8d69a54504203e2ea18c9b2445d2a2030581489a88f69d85173d9bcd0f5ab47adafe2b60eb24a6d5b2a96b00c6b610800f0924d5932d86fee06c39698828ec07fc830a00d602bb03674b10c0034d4510155f379484d499a0f15e7900672306ee539295c1743aa495eded758308c2f0f6bdf253ab89eb0c06255c5124bf6fd9cca9685e52a964b66b0007f209c9ffad08a20596a7634fcdc1ec3915fc7b8d831f1c227c06fc0a7fcbb9a7917ecce20496c1be1d1473a674400a2423630f4a162927d16a340b8ea7e9c1a95da4847e81e9c663f2017b1089f8ed15ca321b63df4807efe1381abe23ce4a9b37097bcc7793066264ba6905c25d6c31c4458def5b534618cffbada25c68f5fa116fbc74fec0145e72fe0afa0194a81bab1383902e5073763997cb101d0af43de4b10d6c932982d2f71bc318d82bcf276c36efbee70a7855b030d7193462d933630a8ff2ee14fec86d25f0aaeeeabdb5d12d005f2de4f509323d09a82e5e15b091a23d7f6ab5892256e5bc22c4011f5426837611bff3230a57fa93ba29ef2607140e79c8d128bd62871a98e785746832ca154c5579de14c60a44ab85674b3a051bf8c5ca594a1b9759b4689eaf2f28bc0b6a244fad683368b619b02ca5b5e90c0f89265286953ace4eabadea4207bbd933af349c7c03e5acb162d9fce5ae0b5c2302303a2d8786d23347b658c3d6aad852eb3b1d7e9b8fa8180d3492e71b2312da03535ef32a8353cc738e428b4991a6c3abbe82adcd48529eebfa44aa4db9745ebec4ba8bf26b2eb8c3847da72e5acc3d5ff54b3f5ae225b8d87a0d19e97cc10cb44c7d0c750120fd763d43a0b3caddd62bace26d7c7ea30d71462ed8907758da17ffa36333663ea4ba33a72e459bb07ea1fcf1fa44b3b582410a63f876aa8b55ec3a8792cffd48e0ea281ab90a5c60709d3665cfcdacc7625d1c54ebecc079f3ce6291658e3d4b5b8e18452658a9b305821bccb8acddb059ceef0d349c1d9d3f132c15466b5a86134004bc32cb123b31cff8ff1f30fe9821f70f6455420eaee3fcaee1a51e097c5414b1a7bed1e720599e90b35a49aa03d92f5135247d7d3c571fcd3fb34059acbc8bb3a9d3f2404675ea4d69881bfbed87d801352b4df2ef4a472a3f6b74313b531afb833d986384a77921a30392e14c67d282a74bf2c992d6b92b6cdf45bc47df21dd3c6a861a41069aa4a7d1538dd11baa199aac95addc4d929faaa282dbf0a2186b47c280ab226c5da82df4d6a9a0d66fcb51b122837f628b0d901a7d16abd0465ae38fc89e17c144ab21920b25ae78b7045d7c933dbf6a0090257ace9619ed53080b3ea9a291a6f32d90765b977089653746a33c093b564202858242ce339616f1b30f54f14321b625ec096a76b180a7fb2eac59d22749aa97c927dc9386b2b9df95d9be74d9c42f5128bfbae513c0ff9a19f2f8d602181f68e9fe75e103b841ce01654c3989a77c6e7ba7e7a810c56cb8595fbcfe50cf9b3dd4ffc3ea499935c2443ce727259e7ee4a6435121e29d2c16e03248f48686d7b44f2b8a6515931d2a457ef6ca1c7d11d6a9086eeed55414b4c4578e98f5445af998d154a65a44a9eda5e33e3b70870b154d78ebd47adb9c5d16957cf50ae1301833205f0561645aec727f0cefc0de57d74ceafda2ce834a5374cc0c89abcc0dc2b796932b2224b6fba410477114eb16e2fda2f871a48a3381e09cb6027da9a69790c3dc9a3b2bbd0c658c3eed87dc5334fcca35f75075a079e92abadf46305b3db7bb06b2569ca9c1b53808b943c580106797d3a4f6e4cf0dca81993767a726c1b7b6fd0540a2d944c0729babdc8533eb2095dc253ad2a74e029e82ea789dd391b4e6026dbc51ca29eb2471f7301fc89b5c04fe5b0b41a89917874b950a224d5f89c44ccd75f74fd3d4b21a684e25178b0e99d58d3e45e5524fc3fc32213b4b518ae9611bab6108bd87b798d40ddf92c481b3cd422d3245df19f2d62d85b7b14b80c2a9262894d7209aaef8009c8403d41bc602ab6d33e6013764499ec57a0ac3b692a74582f06087befae74d904571b5930a246446cd3e50a839bd23bea68ac1857f7de813bdf67b446147d86fda52d48b676d7d70aaf60ebe880fbe4f13eae34f79e0e1c797cf8408b1c8d1a18adb7ccfc2e1b42a0ea0063e4876c8234355a58b352eed9149ecdb4c74242bde5bd5b737134d6d8ea5d920e7fd7bd7021e88b96e63630fbc50c35b5d568fc50b2ec2c09a1f5cb3ee634cf8d544f69941dab792c33997840ec5203e72d6fb245a3a73751f44a9608e759268c6cc891d816d", 0x1000}, {0x0}, {&(0x7f00000014c0)="6c44796bc2a0aa", 0x7}, {&(0x7f0000001500)="0c116896231d1964261cdb9e598313297f6a6d4af1a49eff46ecd5326b5c24ddaeef7b6151a26729db9e2d412cdea2542bdc7721a1bb24aec1bd5429deb1eed0d4d50a13fae55d153c9be3977c8b9bd1b4ba09c1f4d6bd740e4df797da02c8cccecdd7693d4aa76aa1c976929f9fc499a93e3762cbb90f64df9e37c834d11830b27ed4a978303efcabd2c56dbb8f6e400e2ebfdbe67c27597ecee8911e338e5a71c6bce539159d38a2fe6485214b54e1d35e4fe9d760d1e23b3d5d56fbc1f09e6349a7a6207db366775458846fd655ba1f5fe436ecbfa138323e798ad890db88a25056397a842a6ec711f97565076f482d", 0xf1}], 0x5, &(0x7f00000103c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000028000000001500000100000001fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c00000000000000010000000100", @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xe0, 0x44}}, {{&(0x7f00000104c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000105c0)=[{&(0x7f0000010540)="b1dd30faa98bfc332a8c41191e2ab8ae8a40dd58ef7ef22d64d926cbaee8f2a5d063040a57e92ae3cffb3073729d450627273926319805f97d56753c4cab9596e15c71b587e71399bbd9a608eceb02b11dadad5e85f12066f95ed1db07d859d1c9993e2c1a", 0x65}, {&(0x7f000000e380)="2abbca", 0x3}], 0x2, 0x0, 0x0, 0x20000004}}, {{0x0, 0x0, &(0x7f0000011340)=[{&(0x7f0000010d40)}, {&(0x7f0000010d80)="211f9211ec6dba0ad41eeba1a5600d1f27b7b6235d01f48be008c0284235fc5ddb22785c7cceeb854bde704524056eb1547cc9c26edab4ea9883c6330c3a655c95376a84", 0x44}, {&(0x7f0000010e40)="39be5acda7996f94ff2888170b35c601c559ff35c2db418cb9f4ae28e73d0fcfb8df658b73ff", 0x26}, {&(0x7f0000010ec0)="f0aa5c9735adf1cb84052e8620a45a4e3be571b13454f0df7922ccdf6c54f52a053ff39e5e9ed372926279ce2ff395d1a01403984483a5d3fd93401f667f0b586a42a2ffcef2ac3a2a5893c0ee4374eefed79687ddcb9e0b0bfd9a9df379ea9c7ee40215020a643b780d4c595ce37f3ce1fb91e7ee6406826b7a89992017ad93708944fa19a7cc77362bc5be967fb454ab39e1ef74067fd12afc7730fd66733567d2cc95d630f50afab94455e191c12207f5a099ee576ff9293f79cf8cb632e1596e5c50f108da1d12a18451c846053528386e40526f1fc25ca12e44a589231267fcb9061fe9b04bb0f042cb2d4133", 0xef}, {&(0x7f0000010fc0)}, {&(0x7f0000011000)="d027139813ce45da11ae310ed339d27749cb2013f39ba3a23ad50600efbb34227312a6083fc96552baab62f50c621408b137a3afc0adf8b6b7c0b127218577b4c49fc174798b5ed6fbf210ce220bbd7bdf92183419bfd44dbce258b88aa3a0e8f70b3fad1f488c28eb6b887e2a93df88439afc541451768525157567f7542beccc7f112ea50739ce842d5988c6b22160bd15d37b17ebd1e2a24a8779461b83b252a5adf6d103888471d3bc271e0acc2945e83a01dbfe4beca664adef1c5e02dd17c11decf37abff4161acbe860f5a5ac6a84f3df8d7442ef70074aaa2b01d50b26674fa0309e0cdd45", 0xe9}, {0x0}, {&(0x7f00000112c0)="0c10eb89fd419df459020cdd943f3fa77110d5aa1d43f1b9c225dae7cc065e43914eae0934e07723452c242319839b9c5b6eaf6509abe325348507a278c9c51a2d2f46bf46576fc80da8fc2b6fe4c80a8504532f85fd4aaa638acca20795", 0x5e}], 0x8, &(0x7f0000011680), 0x0, 0x44040010}}], 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f07ebbeeb, 0x8031, r7, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 4.190007292s ago: executing program 0 (id=1934): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x361400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x4812, 0xfffffffc, 0x0, 0x3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) 3.621145346s ago: executing program 4 (id=1935): socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000cf00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x5, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)="786e21e9a9517b8b9898fe362fe12dc5916b843c2f9bc88684a1001d6e270fcf4b35b761c59a3f04fa8ba45d61c6593cd2259d21415055bcf54bd81a03defd149f06263b0a55f36286c13b43ad749db94dd036f72d6c4f616ad044339cb9d5128fe67e57d8ad0d31ec22b05e6b349e8c1def3f4da41f0ee8169bf166c099749b69647b5eddc3d2592e2588dc12487fa09fd062ffcb91c8ab6f33929df91ec312111c3231ebb565a104858ea5e5fde41eff41839adde8946559a50f4a6ef7ac7bae72dcdab4996ee54cfd955ccf670519101b327918753cbc88569d99", 0xdc}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000000100)="8769", 0x2}], 0x1}}], 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_mr_cache\x00') read$FUSE(r3, &(0x7f0000001e80)={0x2020}, 0x2062) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x482142, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000400)="02d9f4a30c4b2db6cf9b6c9158", 0xd) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000040)={0x4, 0x0, [{0x991, 0x0, 0x4}, {0xaa8, 0x0, 0xa}, {0xa1d, 0x0, 0x40}, {0x208}]}) 3.535821292s ago: executing program 3 (id=1936): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) r3 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x134}}, 0x4c0c8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 3.030209017s ago: executing program 2 (id=1937): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x13f84, 0x10, 0x1, 0x6fd}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(0xffffffffffffffff, 0x0, 0x10040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 3.00104988s ago: executing program 0 (id=1938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000038c0), r0) r2 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000019780)=""/102387, &(0x7f00000003c0)=0xfffffffffffffdc8) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000039c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 2.111504341s ago: executing program 2 (id=1939): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000"], 0x37) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f00000014c0), &(0x7f0000001500)=r2}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000000081d5c7f80c857d", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@local, 0x10001}, @hyper, 0xe, 0x7, 0x3, 0x0, 0x2, 0x7fffffff, 0x3fa}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) 1.531496302s ago: executing program 4 (id=1940): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20048800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) syz_open_dev$vcsa(0x0, 0x3, 0x400) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x200, 0x12) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0xac, 0x1, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x101}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xfe}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40001}, 0x400d4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a3100000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900020073797a300000000008000340000000002c00028008000340000000000900020073797a31000000000900020073797a32000000000800034000000000d0000100b408b1e286b5c8f7a7321d1f80c982b3c96b4dac7dead86aceee30544dfdb289f2cae899fc3fe86ee3f122505d76d6b5878270ecb40c37908d60b9ed31d97a3e0ee856f3cf3c2fdfee967991f8d1ef7fdce37b30f8842735e543ac808675a64f66eb37009373328ddf992e92b3a5765bd5f765d73c578babbb08efd7b59dab641a88f3099e34bb7fbc04cb298bb0df6eb0dc4ca79864758aff38b7192698c89435c5699f4a9222ad4a2c68c9356b741f04ef667f7a169b8976632c7cb98f18ba558bc302c7b73401c42a76160c0002800800034000000000440002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a320000000008000180000000000900020073797a3200000000fc0001"], 0x17d4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 792.563269ms ago: executing program 4 (id=1941): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0xffffffffffffff8c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 616.6224ms ago: executing program 0 (id=1942): r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r1, &(0x7f0000001f00)=""/4093, 0xffd) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00', @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xfffffffffffffdfc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0xf3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, 0x0, 0x40040) recvmmsg(r8, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 616.283751ms ago: executing program 4 (id=1943): pipe(&(0x7f0000000600)) io_setup(0x3ff, &(0x7f0000000500)=0x0) close(0x3) io_submit(r0, 0x1, &(0x7f0000000300)=[0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl(0xffffffffffffffff, 0x8b22, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20040800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000080)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000"], 0x24}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0xc45a841b7f851c4a, 0x8031, 0xffffffffffffffff, 0xd3b90000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000180), 0x0, 0x14040) 0s ago: executing program 1 (id=1944): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x9efec000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000880)={r9, @in6={{0x2, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x4}, &(0x7f0000000300)=0x90) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x0, 0x2, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000005280)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x10, 0x3, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, r0}, [@IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x40) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r10, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): [ 474.374073][T10854] ? tomoyo_path_number_perm+0x237/0x580 [ 474.374093][T10854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 474.374138][T10854] ? find_held_lock+0x2b/0x80 [ 474.374163][T10854] ? hook_file_ioctl_common+0x144/0x410 [ 474.374199][T10854] ? __fget_files+0x20e/0x3c0 [ 474.374226][T10854] security_file_ioctl+0x9b/0x240 [ 474.374249][T10854] __x64_sys_ioctl+0xb7/0x210 [ 474.374270][T10854] do_syscall_64+0xcd/0xf80 [ 474.374293][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.374309][T10854] RIP: 0033:0x7ff4d078f749 [ 474.374323][T10854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.374339][T10854] RSP: 002b:00007ff4ce9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.374355][T10854] RAX: ffffffffffffffda RBX: 00007ff4d09e6180 RCX: 00007ff4d078f749 [ 474.374365][T10854] RDX: 0000200000000040 RSI: 0000000000003b85 RDI: 0000000000000005 [ 474.374374][T10854] RBP: 00007ff4ce9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 474.374383][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.374393][T10854] R13: 00007ff4d09e6218 R14: 00007ff4d09e6180 R15: 00007ffd3dbcb758 [ 474.374417][T10854] [ 474.374442][T10854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 474.665030][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 475.250612][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 475.704924][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.064976][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 476.083939][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 476.095229][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 476.106543][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.117448][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.131441][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.744788][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.837565][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.969287][ T7528] usbhid 1-1:0.1: can't add hid device: -71 [ 476.976605][ T7528] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 476.999603][ T7528] usb 1-1: USB disconnect, device number 31 [ 477.112398][ T24] usb 5-1: usb_control_msg returned -32 [ 477.118868][T10879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1320'. [ 477.118985][ T24] usbtmc 5-1:16.0: can't read capabilities [ 477.311606][T10882] i2c i2c-0: Invalid block write size 58 [ 477.554679][ T7528] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 477.643844][ T30] audit: type=1400 audit(1767325467.288:620): avc: denied { ioctl } for pid=10855 comm="syz.4.1314" path="mnt:[4026532797]" dev="nsfs" ino=4026532797 ioctlcmd=0x5b0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 477.754647][ T7528] usb 1-1: Using ep0 maxpacket: 8 [ 477.761575][ T7528] usb 1-1: config index 0 descriptor too short (expected 8192, got 45) [ 477.775788][ T7528] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.788512][ T7528] usb 1-1: config 0 has no interfaces? [ 477.794013][ T7528] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 477.794670][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.803563][ T7528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.836946][ T7528] usb 1-1: config 0 descriptor?? [ 478.150759][ T30] audit: type=1400 audit(1767325467.798:621): avc: denied { bind } for pid=10876 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 478.408361][T10893] netlink: 'syz.3.1323': attribute type 12 has an invalid length. [ 478.416453][T10893] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 478.424385][T10893] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1323'. [ 478.434451][T10893] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 478.593683][T10895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 478.605224][T10895] block device autoloading is deprecated and will be removed. [ 478.754924][ T7528] usb 1-1: string descriptor 0 read error: -71 [ 478.766116][ T7528] usb 1-1: USB disconnect, device number 32 [ 478.824536][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.864450][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.930349][ T5894] usb 5-1: USB disconnect, device number 42 [ 480.784393][ T7528] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 480.904451][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 481.188536][ T7528] usb 4-1: Using ep0 maxpacket: 32 [ 481.205952][ T7528] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 481.233089][ T7528] usb 4-1: config 0 has no interface number 0 [ 481.239722][ T7528] usb 4-1: config 0 interface 50 has no altsetting 0 [ 481.249251][ T7528] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=94.35 [ 481.275527][ T7528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.334212][ T7528] usb 4-1: Product: syz [ 481.369591][T10934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 481.407227][ T7528] usb 4-1: Manufacturer: syz [ 481.419048][ T7528] usb 4-1: SerialNumber: syz [ 481.433317][ T7528] usb 4-1: config 0 descriptor?? [ 481.944174][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.619544][ T7528] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 482.640580][ T7528] gspca_sn9c2028: read1 error -71 [ 482.646094][ T7528] gspca_sn9c2028: read1 error -71 [ 482.673560][ T7528] gspca_sn9c2028: read1 error -71 [ 482.686789][ T7528] sn9c2028 4-1:0.50: probe with driver sn9c2028 failed with error -71 [ 482.697658][ T3482] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 482.732144][ T7528] usb 4-1: USB disconnect, device number 38 [ 482.877671][ T30] audit: type=1400 audit(1767325472.529:622): avc: denied { append } for pid=10951 comm="syz.2.1337" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 482.952579][T10954] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 482.994041][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.023914][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.219331][T10970] usb usb5: usbfs: process 10970 (syz.1.1340) did not claim interface 0 before use [ 485.063790][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.821032][T10993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.103699][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 486.251531][ T7528] libceph: connect (1)[c::]:6789 error -22 [ 486.257598][ T7528] libceph: mon0 (1)[c::]:6789 connect error [ 486.293672][ T5894] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 486.494240][ T6277] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 486.523777][ T7528] libceph: connect (1)[c::]:6789 error -22 [ 486.529719][ T7528] libceph: mon0 (1)[c::]:6789 connect error [ 486.726201][ T6277] usb 4-1: Using ep0 maxpacket: 32 [ 486.744846][ T6277] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 486.753051][ T6277] usb 4-1: config 0 has no interface number 0 [ 486.759268][ T6277] usb 4-1: config 0 interface 50 has no altsetting 0 [ 486.788761][ T6277] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=94.35 [ 487.143532][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.210413][ T7528] libceph: connect (1)[c::]:6789 error -22 [ 487.216512][ T7528] libceph: mon0 (1)[c::]:6789 connect error [ 487.240888][ T6277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.270875][ T6277] usb 4-1: Product: syz [ 487.279532][ T6277] usb 4-1: Manufacturer: syz [ 487.289564][ T6277] usb 4-1: SerialNumber: syz [ 487.300929][ T6277] usb 4-1: config 0 descriptor?? [ 488.183421][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 488.428647][ T7528] libceph: connect (1)[c::]:6789 error -22 [ 488.521228][ T7528] libceph: mon0 (1)[c::]:6789 connect error [ 488.547582][ T6277] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 488.564656][ T6277] gspca_sn9c2028: read1 error -71 [ 488.590379][ T6277] gspca_sn9c2028: read1 error -71 [ 488.606333][ T6277] gspca_sn9c2028: read1 error -71 [ 488.625388][ T6277] sn9c2028 4-1:0.50: probe with driver sn9c2028 failed with error -71 [ 488.696442][T10997] ceph: No mds server is up or the cluster is laggy [ 488.853489][ T6277] usb 4-1: USB disconnect, device number 39 [ 489.223321][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.273155][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.576347][ T30] audit: type=1400 audit(1767325480.210:623): avc: denied { setattr } for pid=11040 comm="syz.4.1358" name="NETLINK" dev="sockfs" ino=32982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 491.303037][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 491.479725][ T30] audit: type=1400 audit(1767325480.220:624): avc: denied { create } for pid=11040 comm="syz.4.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 491.499257][ T30] audit: type=1400 audit(1767325480.230:625): avc: denied { bind } for pid=11040 comm="syz.4.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 491.580972][T11045] input: syz0 as /devices/virtual/input/input32 [ 492.352939][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.604734][T11056] block nbd0: shutting down sockets [ 492.803733][T11063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1363'. [ 492.833990][ T5872] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 493.243393][ T5872] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 493.268534][ T5872] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 493.301464][ T5872] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 493.350298][ T5872] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 493.362784][ T5872] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 493.381317][ T5872] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 493.392335][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.413582][ T5872] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 493.421023][ T5872] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 493.445212][ T5872] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 493.462855][ T5859] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 493.485373][ T5872] usb 5-1: string descriptor 0 read error: -22 [ 493.497423][ T5872] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 493.522599][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.600426][ T5872] adutux 5-1:168.0: interrupt endpoints not found [ 493.672286][T11072] netlink: 'syz.3.1368': attribute type 13 has an invalid length. [ 493.672997][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 493.697720][ T5859] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 493.722784][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.758724][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.828983][ T6277] usb 5-1: USB disconnect, device number 43 [ 493.839045][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.875183][ T5859] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 493.892358][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.909624][ T5859] usb 1-1: Product: syz [ 493.914190][ T5859] usb 1-1: Manufacturer: syz [ 493.918813][ T5859] usb 1-1: SerialNumber: syz [ 493.926984][ T5859] usb 1-1: config 0 descriptor?? [ 493.934140][T11066] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 493.966286][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.973612][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.145995][ T5859] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 494.168718][ T5859] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 494.422663][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 494.546132][T11072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.578729][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.601256][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.615494][ C0] powermate: config urb returned -71 [ 494.616821][T11072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.620983][ C0] powermate: config urb returned -71 [ 494.634012][ C0] powermate: config urb returned -71 [ 494.643427][ T5859] usb 1-1: USB disconnect, device number 33 [ 494.649341][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 495.279716][T11072] veth1_vlan: left allmulticast mode [ 495.367553][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 495.462568][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.553479][T11086] Device name cannot be null; rc = [-22] [ 495.828099][T11080] macsec0: entered promiscuous mode [ 495.843865][T11082] macsec0: left promiscuous mode [ 495.857617][ T3482] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.969459][ T3482] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.008382][ T3482] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.155596][ T3482] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.223263][T11098] i2c i2c-0: Invalid block write size 58 [ 496.502422][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 496.587781][T11102] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 496.602771][T11102] netlink: 'syz.3.1375': attribute type 2 has an invalid length. [ 496.645389][T11102] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 496.696558][T11102] netlink: 'syz.3.1375': attribute type 3 has an invalid length. [ 496.759319][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 497.347622][T11108] netlink: 'syz.0.1376': attribute type 10 has an invalid length. [ 497.542463][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.070985][ T30] audit: type=1400 audit(1767325487.721:626): avc: denied { block_suspend } for pid=11113 comm="syz.1.1379" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.582162][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.744718][T11122] netlink: 'syz.0.1381': attribute type 39 has an invalid length. [ 498.916375][T11127] NILFS (nbd4): device size too small [ 499.170766][T11133] i2c i2c-0: Invalid block write size 58 [ 499.622033][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 500.061751][T11145] ISOFS: Unable to identify CD-ROM format. [ 500.480274][ T30] audit: type=1400 audit(1767325490.131:627): avc: denied { accept } for pid=11148 comm="syz.4.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 500.565750][ T30] audit: type=1400 audit(1767325490.221:628): avc: denied { append } for pid=11150 comm="syz.3.1393" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 500.661969][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 500.992841][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.701783][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.281683][ T5974] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 502.351961][ T5894] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 502.471153][T11176] i2c i2c-0: Invalid block write size 58 [ 502.481750][ T5974] usb 4-1: Using ep0 maxpacket: 32 [ 502.488563][ T5974] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 502.498029][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.510247][ T5974] usb 4-1: config 0 descriptor?? [ 502.518512][ T5974] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 502.530068][ T5974] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 502.540816][ T5974] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 502.554898][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.565363][ T5894] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 502.574507][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.582537][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 502.603443][ T5894] usb 1-1: config 0 descriptor?? [ 502.610369][ T5974] usb 4-1: media controller created [ 502.615637][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 502.651368][ T5974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 502.741674][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.800470][ T5974] usb 4-1: selecting invalid altsetting 1 [ 502.806297][ T5974] set interface failed [ 502.806785][ T5974] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 502.818963][ T5974] error writing reg: 0xff, val: 0x00 [ 503.692098][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00 [ 503.781920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.821608][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 505.769755][ T5974] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 505.783684][ T5894] pwc: recv_control_msg error -71 req 02 val 2700 [ 505.791831][ T5894] pwc: recv_control_msg error -71 req 02 val 2c00 [ 505.804939][ T5894] pwc: recv_control_msg error -71 req 04 val 1000 [ 505.812467][ T5894] pwc: recv_control_msg error -71 req 04 val 1300 [ 505.819321][ T5894] pwc: recv_control_msg error -71 req 04 val 1400 [ 505.826574][ T5894] pwc: recv_control_msg error -71 req 02 val 2000 [ 505.833700][ T5894] pwc: recv_control_msg error -71 req 02 val 2100 [ 505.836424][T11193] Invalid logical block size (-4) [ 505.851327][ T5974] usb 4-1: USB disconnect, device number 40 [ 505.858971][ T5894] pwc: recv_control_msg error -71 req 04 val 1500 [ 505.861289][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 505.882228][ T5894] pwc: recv_control_msg error -71 req 02 val 2500 [ 505.906469][ T5894] pwc: recv_control_msg error -71 req 02 val 2400 [ 505.937373][ T5894] pwc: recv_control_msg error -71 req 02 val 2600 [ 505.968025][T11197] fuse: Bad value for 'fd' [ 506.162586][ T5894] pwc: recv_control_msg error -71 req 02 val 2900 [ 506.226681][ T5894] pwc: recv_control_msg error -71 req 02 val 2800 [ 506.272544][ T5894] pwc: recv_control_msg error -71 req 04 val 1100 [ 506.333469][ T5894] pwc: recv_control_msg error -71 req 04 val 1200 [ 506.706836][ T5894] pwc: Registered as video103. [ 506.784277][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 506.798653][ T5894] usb 1-1: USB disconnect, device number 34 [ 506.901160][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 506.908747][ T30] audit: type=1400 audit(1767325496.562:629): avc: denied { accept } for pid=11207 comm="syz.1.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 507.114880][T11210] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 507.214513][T11210] netlink: 'syz.1.1406': attribute type 6 has an invalid length. [ 507.255883][T11210] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1406'. [ 507.426699][T11215] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 507.474596][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'. [ 507.854949][T11220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.951027][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 508.343798][T11229] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 508.350325][T11229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 508.369664][T11229] vhci_hcd vhci_hcd.0: Device attached [ 508.910328][ T5894] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 508.980894][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 509.159043][T11234] ipt_REJECT: TCP_RESET invalid for non-tcp [ 509.416017][T11232] vhci_hcd: connection reset by peer [ 509.422352][ T1304] vhci_hcd vhci_hcd.2: stop threads [ 509.466232][ T1304] vhci_hcd vhci_hcd.2: release socket [ 509.520918][ T1304] vhci_hcd vhci_hcd.2: disconnect device [ 509.810898][ T49] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 510.020883][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 510.052727][ T49] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 510.067015][ T49] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 510.086093][ T49] usb 1-1: config 0 interface 0 has no altsetting 0 [ 510.534612][ T49] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 510.546442][ T49] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 510.555189][ T49] usb 1-1: Product: syz [ 510.559382][ T49] usb 1-1: Manufacturer: syz [ 510.564069][ T49] usb 1-1: SerialNumber: syz [ 510.601589][ T49] usb 1-1: config 0 descriptor?? [ 510.635844][ T49] usb 1-1: selecting invalid altsetting 0 [ 510.871474][T11252] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 511.060666][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.210779][ T5859] usb 1-1: USB disconnect, device number 35 [ 511.999414][T11285] lo: Caught tx_queue_len zero misconfig [ 512.005645][T11285] sch_fq: defrate 0 ignored. [ 512.100911][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 512.221601][ T30] audit: type=1400 audit(1767325501.882:630): avc: denied { execute } for pid=11276 comm="syz.1.1427" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 512.332118][ T49] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 512.490508][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 512.545184][ T49] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 512.559772][ T49] usb 1-1: config 0 has no interface number 0 [ 512.569926][ T49] usb 1-1: config 0 interface 50 has no altsetting 0 [ 512.595105][ T49] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=94.35 [ 512.614340][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.634079][ T49] usb 1-1: Product: syz [ 512.645801][ T49] usb 1-1: Manufacturer: syz [ 512.655170][ T49] usb 1-1: SerialNumber: syz [ 512.800438][ T49] usb 1-1: config 0 descriptor?? [ 513.150436][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.052111][ T6265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 514.190368][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.322734][ T5894] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 514.733713][ T49] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 514.750762][ T49] gspca_sn9c2028: read1 error -71 [ 514.762662][ T49] gspca_sn9c2028: read1 error -71 [ 514.769045][ T49] gspca_sn9c2028: read1 error -71 [ 515.192353][ T49] sn9c2028 1-1:0.50: probe with driver sn9c2028 failed with error -71 [ 515.230172][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 515.397428][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 515.549722][ T49] usb 1-1: USB disconnect, device number 36 [ 515.580889][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 515.612179][ T5823] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 516.270029][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 516.480191][T11322] FAULT_INJECTION: forcing a failure. [ 516.480191][T11322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.548179][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.0.1440 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.548206][T11322] Tainted: [L]=SOFTLOCKUP [ 516.548211][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.548220][T11322] Call Trace: [ 516.548225][T11322] [ 516.548231][T11322] dump_stack_lvl+0x16c/0x1f0 [ 516.548256][T11322] should_fail_ex+0x512/0x640 [ 516.548283][T11322] _copy_to_user+0x32/0xd0 [ 516.548307][T11322] simple_read_from_buffer+0xcb/0x170 [ 516.548331][T11322] proc_fail_nth_read+0x197/0x240 [ 516.548350][T11322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.548369][T11322] ? rw_verify_area+0xcf/0x6c0 [ 516.548388][T11322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.548405][T11322] vfs_read+0x1e4/0xcf0 [ 516.548427][T11322] ? __pfx___mutex_lock+0x10/0x10 [ 516.548451][T11322] ? __pfx_vfs_read+0x10/0x10 [ 516.548477][T11322] ? __fget_files+0x20e/0x3c0 [ 516.548505][T11322] ksys_read+0x12a/0x250 [ 516.548523][T11322] ? __pfx_ksys_read+0x10/0x10 [ 516.548548][T11322] do_syscall_64+0xcd/0xf80 [ 516.548568][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.548584][T11322] RIP: 0033:0x7f30ae58e15c [ 516.548598][T11322] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 516.548613][T11322] RSP: 002b:00007f30af421030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.548636][T11322] RAX: ffffffffffffffda RBX: 00007f30ae7e5fa0 RCX: 00007f30ae58e15c [ 516.548646][T11322] RDX: 000000000000000f RSI: 00007f30af4210a0 RDI: 0000000000000004 [ 516.548654][T11322] RBP: 00007f30af421090 R08: 0000000000000000 R09: 0000000000000000 [ 516.548662][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.548671][T11322] R13: 00007f30ae7e6038 R14: 00007f30ae7e5fa0 R15: 00007ffea4a04a98 [ 516.548692][T11322] [ 516.859257][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 517.299936][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 518.339834][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.247561][ T30] audit: type=1400 audit(1767325508.903:631): avc: denied { getopt } for pid=11330 comm="syz.0.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 519.379672][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 520.419552][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.459828][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.724422][T11383] netlink: 'syz.0.1455': attribute type 6 has an invalid length. [ 522.499330][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 523.442867][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'. [ 523.482411][T11395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1457'. [ 523.539305][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.579074][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.621624][ T30] audit: type=1400 audit(1767325514.284:632): avc: denied { accept } for pid=11400 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 525.084197][T11413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 525.187618][ T5894] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 525.408883][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 525.415470][ T5894] usb 1-1: config 0 has no interfaces? [ 525.422714][ T5894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 525.432921][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.444208][ T5894] usb 1-1: Product: syz [ 525.450081][ T5894] usb 1-1: Manufacturer: syz [ 525.456942][ T5894] usb 1-1: SerialNumber: syz [ 525.475466][ T5894] usb 1-1: config 0 descriptor?? [ 525.618957][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 526.344656][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1462'. [ 526.645430][ T49] usb 1-1: USB disconnect, device number 37 [ 526.668828][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 526.779391][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1465'. [ 526.978774][ T6277] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 527.078791][ T5974] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 527.161198][ T6277] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 527.173202][ T6277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.189441][ T6277] usb 4-1: config 0 descriptor?? [ 527.260284][ T5974] usb 5-1: Using ep0 maxpacket: 8 [ 527.280156][ T5974] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 527.291623][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.322212][ T5974] usb 5-1: Product: syz [ 527.327473][ T5974] usb 5-1: Manufacturer: syz [ 527.332595][ T5974] usb 5-1: SerialNumber: syz [ 527.347328][ T5974] usb 5-1: config 0 descriptor?? [ 527.361577][ T5974] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 527.698687][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.898650][ T5894] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 528.262578][ T5974] gspca_sonixj: reg_r err -32 [ 528.267315][ T5974] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 528.280636][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 528.295047][ T5974] usb 5-1: USB disconnect, device number 44 [ 528.413233][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.427303][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 528.468558][ T5894] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 528.537575][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.564969][ T5894] usb 1-1: config 0 descriptor?? [ 528.738557][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 529.090799][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1471'. [ 529.114154][ T6277] smartjoyplus 0003:0925:8866.000E: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 529.126639][ T6277] smartjoyplus 0003:0925:8866.000E: Force feedback for SmartJoy PLUS PS2/USB adapter [ 529.135213][ T30] audit: type=1400 audit(1767325518.374:633): avc: denied { connect } for pid=11423 comm="syz.3.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 529.609146][T11455] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 529.778433][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.291913][ T5859] usb 4-1: USB disconnect, device number 41 [ 530.818452][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.988835][ T5894] usbhid 1-1:0.0: can't add hid device: -71 [ 530.994835][ T5894] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 531.010691][ T5894] usb 1-1: USB disconnect, device number 38 [ 531.227571][T11469] netlink: 'syz.4.1477': attribute type 5 has an invalid length. [ 531.821572][ T5974] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 531.858183][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.089699][ T5974] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 532.105209][ T5974] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 532.115442][ T5974] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 532.183077][T11488] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 532.333077][ T5859] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 532.520540][ T5974] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 532.528250][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 532.529863][ T5974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.561644][ T5974] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 532.587644][ T5974] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 532.688486][ T5859] usb 3-1: device descriptor read/64, error -32 [ 532.696606][T11313] udevd[11313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.821953][ T5974] usb 1-1: USB disconnect, device number 39 [ 532.898058][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.948045][ T5859] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 533.097989][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 533.116004][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.127145][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.136958][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 533.155951][ T5859] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 533.166093][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.180926][ T5859] usb 3-1: config 0 descriptor?? [ 533.937941][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.007679][ T30] audit: type=1400 audit(1767325523.665:634): avc: denied { read write } for pid=11500 comm="syz.3.1487" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 534.038602][ T30] audit: type=1400 audit(1767325523.665:635): avc: denied { open } for pid=11500 comm="syz.3.1487" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 534.191734][ T30] audit: type=1400 audit(1767325523.745:636): avc: denied { setopt } for pid=11485 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 534.381686][ T5859] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 534.395306][ T5859] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 534.403606][ T5859] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 534.414639][ T5859] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 534.431729][ T5859] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 534.439352][ T5859] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 534.446581][ T5859] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 534.604659][ T5859] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 534.617952][ T5859] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 534.890011][ T5859] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 534.922923][ T5859] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000F/input/input35 [ 534.937875][ T6277] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 534.977872][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.012223][ T5859] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 535.119781][ T6277] usb 1-1: Using ep0 maxpacket: 8 [ 535.132301][ T6277] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 535.140925][ T6277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.155158][ T6277] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 535.164879][ T6277] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 535.174649][ T6277] usb 1-1: Product: syz [ 535.192110][ T6277] usb 1-1: config 0 descriptor?? [ 535.231519][T11513] Process accounting resumed [ 535.645849][ T6277] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 535.648101][ T5859] usb 3-1: USB disconnect, device number 35 [ 536.027741][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 536.037633][ T6277] usb 4-1: Using ep0 maxpacket: 32 [ 536.044738][ T6277] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 536.053175][ T6277] usb 4-1: config 0 has no interface number 0 [ 536.059492][ T6277] usb 4-1: config 0 interface 50 has no altsetting 0 [ 536.069727][ T6277] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=94.35 [ 536.082028][ T6277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.094201][ T6277] usb 4-1: Product: syz [ 536.101387][ T6277] usb 4-1: Manufacturer: syz [ 536.119098][ T6277] usb 4-1: SerialNumber: syz [ 536.134413][ T6277] usb 4-1: config 0 descriptor?? [ 536.259999][ T5859] usb 1-1: USB disconnect, device number 40 [ 537.057575][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.536165][T11546] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 537.547652][T11546] netlink: 'syz.2.1497': attribute type 2 has an invalid length. [ 537.712974][T11546] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 538.048426][T11546] netlink: 'syz.2.1497': attribute type 3 has an invalid length. [ 538.084359][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'. [ 538.097451][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.409397][ T5859] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 538.487944][T11554] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 538.495683][T11554] netlink: 'syz.1.1500': attribute type 2 has an invalid length. [ 538.519141][ T30] audit: type=1400 audit(1767325528.175:637): avc: denied { setopt } for pid=11552 comm="syz.1.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 538.547461][ T5859] usb 1-1: device descriptor read/64, error -71 [ 538.570630][ T6277] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 538.585164][ T6277] gspca_sn9c2028: read1 error -71 [ 538.605437][ T6277] gspca_sn9c2028: read1 error -71 [ 538.614790][ T6277] gspca_sn9c2028: read1 error -71 [ 538.622219][ T6277] sn9c2028 4-1:0.50: probe with driver sn9c2028 failed with error -71 [ 538.673650][ T6277] usb 4-1: USB disconnect, device number 42 [ 538.787362][ T5859] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 538.917344][ T5859] usb 1-1: device descriptor read/64, error -71 [ 539.069070][ T5859] usb usb1-port1: attempt power cycle [ 539.137817][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 539.427500][ T5859] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 539.960426][ T5859] usb 1-1: device descriptor read/8, error -71 [ 540.177272][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 540.197189][ T5859] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 540.525177][ T6277] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 540.537599][ T5859] usb 1-1: device descriptor read/8, error -71 [ 541.173142][ T5859] usb usb1-port1: unable to enumerate USB device [ 541.217128][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.225826][ T6277] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 541.234149][ T6277] usb 5-1: config 0 has no interface number 0 [ 541.249203][ T6277] usb 5-1: config 0 interface 41 has no altsetting 0 [ 541.258861][ T6277] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 541.268736][ T6277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.276701][ T6277] usb 5-1: Product: syz [ 541.281835][ T6277] usb 5-1: Manufacturer: syz [ 541.286475][ T6277] usb 5-1: SerialNumber: syz [ 541.295840][ T6277] usb 5-1: config 0 descriptor?? [ 542.256949][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 542.449292][ T6277] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 542.558398][T11591] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 542.558398][T11591] program syz.3.1511 not setting count and/or reply_len properly [ 542.863487][T11605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.246492][T11610] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 543.259078][T11610] netlink: 'syz.2.1514': attribute type 2 has an invalid length. [ 543.270661][T11610] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 543.290880][T11610] netlink: 'syz.2.1514': attribute type 3 has an invalid length. [ 543.306825][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.325547][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 543.782359][T11599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.336724][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.361542][T11599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.498847][ T5974] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 544.891014][ T5974] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 545.006642][ T30] audit: type=1400 audit(1767325534.606:638): avc: denied { connect } for pid=11570 comm="syz.4.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 545.061171][ T5974] usb 4-1: config 0 has no interface number 0 [ 545.078018][ T5974] usb 4-1: config 0 interface 4 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1023 [ 545.262949][ T6277] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 545.295029][ T5974] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 545.321918][ T6277] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 545.336390][ T5974] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=f8.c2 [ 545.376613][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.443953][ T6277] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 545.510595][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.550218][ T5974] usb 4-1: config 0 descriptor?? [ 545.556209][ T6277] usb 5-1: USB disconnect, device number 45 [ 545.563315][ T6265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 545.578212][T11621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 545.612589][ T5974] kvaser_usb 4-1:0.4: error -ENODEV: Cannot get usb endpoint(s) [ 546.366684][ T6277] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 546.416445][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.527102][ T6277] usb 5-1: Using ep0 maxpacket: 16 [ 546.542061][ T6277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.760050][ T6277] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 546.807608][ T6277] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 546.838305][ T6277] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 546.872361][ T6277] usb 5-1: Manufacturer: syz [ 546.888228][ T5859] usb 4-1: USB disconnect, device number 43 [ 546.902896][ T6277] usb 5-1: config 0 descriptor?? [ 547.456329][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.271928][T11658] kvm: user requested TSC rate below hardware speed [ 548.506188][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.945092][ T5859] usb 5-1: USB disconnect, device number 46 [ 549.150166][T11668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1531'. [ 549.202047][T11668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11668 comm=syz.4.1531 [ 549.225748][T11670] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 549.526347][ T30] audit: type=1400 audit(1767325539.187:639): avc: denied { create } for pid=11681 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 549.547109][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.559071][ T30] audit: type=1400 audit(1767325539.197:640): avc: denied { write } for pid=11681 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 549.583275][ T30] audit: type=1400 audit(1767325539.197:641): avc: denied { ioctl } for pid=11681 comm="syz.2.1537" path="socket:[35433]" dev="sockfs" ino=35433 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 549.698138][T11690] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1536'. [ 550.036879][ T30] audit: type=1400 audit(1767325539.197:642): avc: denied { write } for pid=11681 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 550.438752][T11695] comedi comedi0: pcl730: I/O port conflict (0x3,4) [ 550.457031][ T30] audit: type=1400 audit(1767325540.117:643): avc: denied { bpf } for pid=11693 comm="syz.4.1539" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 550.585973][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.615827][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.863759][ T30] audit: type=1400 audit(1767325540.137:644): avc: denied { perfmon } for pid=11693 comm="syz.4.1539" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.951756][ T30] audit: type=1400 audit(1767325540.147:645): avc: denied { read } for pid=11697 comm="syz.0.1540" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 552.063953][ T30] audit: type=1400 audit(1767325540.147:646): avc: denied { open } for pid=11697 comm="syz.0.1540" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 552.345965][T11722] xt_socket: unknown flags 0x4c [ 552.655720][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.695860][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.016861][T11740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 554.676481][T11750] xt_socket: unknown flags 0x4c [ 554.735589][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.128278][ T7528] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 555.297145][ T7528] usb 1-1: Using ep0 maxpacket: 8 [ 555.775349][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.106687][ T7528] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 556.155264][ T7528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.183950][ T7528] usb 1-1: Product: syz [ 556.188260][ T7528] usb 1-1: Manufacturer: syz [ 556.202231][ T7528] usb 1-1: SerialNumber: syz [ 556.212968][ T7528] usb 1-1: config 0 descriptor?? [ 556.227732][ T7528] gspca_main: sq905-2.14.0 probing 2770:9120 [ 556.355990][T11764] ubi: mtd0 is already attached to ubi31 [ 556.815264][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.030978][ T7528] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 557.402036][ T7528] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 557.855086][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.110042][ T30] audit: type=1400 audit(1767325547.768:647): avc: denied { bind } for pid=11777 comm="syz.1.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 558.132404][ T30] audit: type=1400 audit(1767325547.798:648): avc: denied { listen } for pid=11777 comm="syz.1.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 558.228599][ T7528] usb 1-1: USB disconnect, device number 45 [ 558.894984][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.934854][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.974731][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.097256][T11817] overlayfs: failed to resolve './file0': -2 [ 561.411782][T11826] Invalid source name [ 561.415799][T11826] UBIFS error (pid: 11826): cannot open "./file0", error -22 [ 561.416782][T11826] fuse: Unknown parameter 'fd½' [ 561.474672][ T30] audit: type=1400 audit(1767325551.068:649): avc: denied { mounton } for pid=11825 comm="syz.4.1575" path="/322/file0" dev="tmpfs" ino=1701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 561.591436][ T30] audit: type=1400 audit(1767325551.088:650): avc: denied { append } for pid=11825 comm="syz.4.1575" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 561.645319][ T7528] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 561.719038][T11835] fuse: Bad value for 'fd' [ 561.894969][ T7528] usb 3-1: Using ep0 maxpacket: 16 [ 561.951820][ T7528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.973821][ T7528] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 561.996629][ T7528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.013102][ T7528] usb 3-1: config 0 descriptor?? [ 562.024598][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.433442][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.064499][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.094506][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.134229][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.581121][ T7528] usbhid 3-1:0.0: can't add hid device: -71 [ 565.587136][ T7528] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 565.596405][ T7528] usb 3-1: USB disconnect, device number 36 [ 566.184121][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.442664][T11874] netlink: 'syz.2.1587': attribute type 1 has an invalid length. [ 566.496593][T11874] netlink: 'syz.2.1587': attribute type 2 has an invalid length. [ 566.504496][T11874] netlink: 'syz.2.1587': attribute type 1 has an invalid length. [ 566.512259][T11874] netlink: 'syz.2.1587': attribute type 3 has an invalid length. [ 566.520091][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 566.879234][T11884] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 566.928794][T11884] netlink: 'syz.3.1588': attribute type 2 has an invalid length. [ 566.964092][T11884] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 567.002765][T11884] netlink: 'syz.3.1588': attribute type 3 has an invalid length. [ 567.047977][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1588'. [ 567.213986][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.226825][T11893] syz.4.1589 (11893): drop_caches: 2 [ 568.253853][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.363961][ T6277] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 568.541421][ T6277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.541509][ T6277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.541682][ T6277] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 568.541753][ T6277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.612012][T11917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 568.773864][ T6277] usb 1-1: config 0 descriptor?? [ 569.293744][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.459414][ T5859] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 569.607197][ T5859] usb 5-1: too many configurations: 106, using maximum allowed: 8 [ 569.629034][ T5859] usb 5-1: config index 0 descriptor too short (expected 111, got 72) [ 569.644590][ T5859] usb 5-1: config index 1 descriptor too short (expected 111, got 72) [ 569.659168][ T6277] hid_parser_main: 5 callbacks suppressed [ 569.659188][ T6277] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 569.661254][ T5859] usb 5-1: config index 2 descriptor too short (expected 111, got 72) [ 569.697122][ T6277] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 569.701317][ T5859] usb 5-1: config index 3 descriptor too short (expected 111, got 72) [ 569.718283][ T5859] usb 5-1: config index 4 descriptor too short (expected 111, got 72) [ 569.730421][ T5859] usb 5-1: config index 5 descriptor too short (expected 111, got 72) [ 569.740843][ T5859] usb 5-1: config index 6 descriptor too short (expected 111, got 72) [ 569.758783][ T5859] usb 5-1: config index 7 descriptor too short (expected 111, got 72) [ 569.773938][ T6277] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 569.796560][ T6277] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 569.819633][ T6277] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 569.852644][ T6277] playstation 0003:054C:0DF2.0010: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 569.905226][ T5859] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 569.937240][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.970357][ T5859] usb 5-1: Product: syz [ 569.981106][ T5859] usb 5-1: Manufacturer: syz [ 569.984221][ T6277] playstation 0003:054C:0DF2.0010: Invalid reportID received, expected 9 got 8 [ 569.991177][ T5859] usb 5-1: SerialNumber: syz [ 570.008171][ T6277] playstation 0003:054C:0DF2.0010: Failed to retrieve DualSense pairing info: -22 [ 570.056664][ T6277] playstation 0003:054C:0DF2.0010: Failed to get MAC address from DualSense [ 570.243472][ T6277] playstation 0003:054C:0DF2.0010: Failed to create dualsense. [ 570.333632][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.355943][ T5859] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 570.369676][ T6277] playstation 0003:054C:0DF2.0010: probe with driver playstation failed with error -22 [ 570.409366][ T7528] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 570.496611][ T6277] usb 1-1: USB disconnect, device number 46 [ 570.889117][T11934] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 570.897134][T11934] netlink: 'syz.1.1597': attribute type 2 has an invalid length. [ 570.904902][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 571.295404][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 571.342247][T11942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1599'. [ 571.373503][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.573406][ T7528] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 571.598747][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 571.602845][ T7528] ath9k_htc: Failed to initialize the device [ 571.621805][ C0] usb 5-1: ath9k_htc: over RX MAX_PKT_NUM [ 571.649414][T11944] input: syz0 as /devices/virtual/input/input37 [ 571.691430][ T7528] usb 5-1: ath9k_htc: USB layer deinitialized [ 572.413369][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.128804][T11960] input: syz1 as /devices/virtual/input/input38 [ 573.389641][ T6277] usb 5-1: USB disconnect, device number 47 [ 573.453239][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.597374][T11962] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 573.606827][ T30] audit: type=1400 audit(1767325563.250:651): avc: denied { mounton } for pid=11961 comm="syz.4.1604" path="/327/file0/bus" dev="ramfs" ino=36488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 573.782988][T11962] overlayfs: failed to set xattr on upper [ 573.795107][T11964] comedi comedi0: pcl730: I/O port conflict (0x3,4) [ 573.803308][T11962] overlayfs: ...falling back to redirect_dir=nofollow. [ 573.813247][ T30] audit: type=1400 audit(1767325563.450:652): avc: denied { getopt } for pid=11963 comm="syz.0.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 573.953196][T11962] overlayfs: ...falling back to index=off. [ 573.983172][T11962] overlayfs: ...falling back to uuid=null. [ 574.317764][ T30] audit: type=1400 audit(1767325563.910:653): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 574.364733][T11937] 8021q: VLANs not supported on ip6gre0 [ 574.493133][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 574.708208][T11980] validate_nla: 2 callbacks suppressed [ 574.708246][T11980] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 574.722043][T11980] netlink: 'syz.0.1608': attribute type 2 has an invalid length. [ 574.730033][T11980] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 574.737984][T11980] netlink: 'syz.0.1608': attribute type 3 has an invalid length. [ 574.746136][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 575.063385][T11985] veth1_macvtap: left promiscuous mode [ 575.088394][T11985] macsec0: entered promiscuous mode [ 575.277810][T11985] veth1_macvtap: entered promiscuous mode [ 575.291046][T11993] SELinux: syz.3.1606 (11993) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 575.306343][ T30] audit: type=1400 audit(1767325564.970:654): avc: denied { bind } for pid=11981 comm="syz.4.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 575.467207][T11985] macsec0: left promiscuous mode [ 575.533005][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.762339][T11990] pim6reg1: entered promiscuous mode [ 575.768140][T11990] pim6reg1: entered allmulticast mode [ 576.073409][ T5823] block nbd1: Receive control failed (result -32) [ 576.084668][T11998] block nbd1: shutting down sockets [ 576.378441][T12006] gfs2: error -5 reading superblock [ 576.572876][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.062628][T12024] overlayfs: overlapping lowerdir path [ 577.612763][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 578.146440][T12026] i2c i2c-0: Invalid block write size 58 [ 578.194280][T12032] loop8: detected capacity change from 0 to 8 [ 578.224545][T12032] Dev loop8: unable to read RDB block 8 [ 578.232531][T12032] loop8: unable to read partition table [ 578.239411][T12032] loop8: partition table beyond EOD, truncated [ 578.251959][T12032] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 578.453331][T12045] ubi31: detaching mtd0 [ 578.469833][T12045] ubi31: mtd0 is detached [ 578.652640][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.632513][ T6277] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 579.672684][ T30] audit: type=1400 audit(1767325569.340:655): avc: denied { setopt } for pid=12057 comm="syz.1.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 579.692517][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.012957][ T6277] usb 3-1: Using ep0 maxpacket: 16 [ 580.050293][ T6277] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 580.109073][ T6277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.122421][ T6277] usb 3-1: Product: syz [ 580.132323][ T6277] usb 3-1: Manufacturer: syz [ 580.150618][ T6277] usb 3-1: SerialNumber: syz [ 580.193571][ T6277] usb 3-1: config 0 descriptor?? [ 580.221703][ T6277] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 580.278029][ T30] audit: type=1400 audit(1767325569.940:656): avc: denied { ioctl } for pid=12063 comm="syz.1.1629" path="socket:[37061]" dev="sockfs" ino=37061 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 580.629088][ T6277] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 580.742508][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.851263][ T6277] usb 3-1: USB disconnect, device number 37 [ 580.954473][ T6277] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 580.964285][ T6277] visor 3-1:0.0: device disconnected [ 581.188988][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 581.606997][T12078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1632'. [ 581.772271][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 582.085738][T12080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1635'. [ 582.139950][T12080] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1635'. [ 582.183165][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1635'. [ 582.382193][ T5974] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 582.745870][T12083] SELinux: failed to load policy [ 582.812163][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 582.840649][T12095] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 582.848548][T12095] netlink: 'syz.0.1638': attribute type 2 has an invalid length. [ 582.856336][T12095] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 582.864063][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1638'. [ 583.152091][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 583.294743][T12097] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 583.302742][T12097] netlink: 'syz.0.1639': attribute type 2 has an invalid length. [ 583.310429][T12097] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 583.318210][T12097] netlink: 'syz.0.1639': attribute type 3 has an invalid length. [ 583.325958][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1639'. [ 583.351313][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.852028][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 583.975327][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.985209][ T5974] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 583.994292][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.004335][ T5974] usb 5-1: config 0 descriptor?? [ 584.313760][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.727901][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.901991][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 584.912751][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.922357][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.930915][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.282995][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.345042][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.374809][ T6277] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 585.382333][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.396430][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.473682][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.582156][ T5974] usbhid 5-1:0.0: can't add hid device: -71 [ 585.588162][ T5974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 585.622079][ T6277] usb 1-1: Using ep0 maxpacket: 16 [ 585.674705][T12123] netlink: 'syz.1.1644': attribute type 4 has an invalid length. [ 585.682627][T12123] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1644'. [ 585.941765][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 585.960588][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 585.970521][ T6277] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 585.982097][ T5974] usb 5-1: USB disconnect, device number 48 [ 585.988113][ T6277] usb 1-1: config 1 has no interface number 0 [ 585.997933][ T6277] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 586.008868][ T6277] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 586.018973][ T6277] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 586.028947][ T6277] usb 1-1: config 1 interface 105 has no altsetting 0 [ 586.037749][ T6277] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 586.047736][ T6277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.055876][ T6277] usb 1-1: Product: syz [ 586.060098][ T6277] usb 1-1: Manufacturer: syz [ 586.064903][ T6277] usb 1-1: SerialNumber: syz [ 586.073463][T12108] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 586.104160][T12126] SELinux: syz.3.1642 (12126) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 586.795236][T12134] i2c i2c-0: Invalid block write size 58 [ 586.971714][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 587.594742][ T6277] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 587.635400][ T6277] usb 1-1: USB disconnect, device number 47 [ 587.635961][T12136] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=12136 comm=syz.4.1649 [ 588.014407][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 588.083643][ T36] nci: nci_ntf_packet: unknown ntf opcode 0x108 [ 589.051537][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 589.352733][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 589.844761][T12174] i2c i2c-0: Invalid block write size 58 [ 590.077849][ T30] audit: type=1400 audit(1767325579.741:657): avc: denied { ioctl } for pid=12178 comm="syz.2.1661" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 590.103200][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 590.171929][T12182] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 590.333878][T12183] ieee802154 phy0 wpan0: encryption failed: -22 [ 590.710961][T12191] comedi comedi0: rti800: I/O port conflict (0x1,16) [ 590.721478][ T6277] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 590.780928][T12192] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 590.788903][T12192] netlink: 'syz.0.1663': attribute type 2 has an invalid length. [ 590.796824][T12192] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 590.818337][T12192] netlink: 'syz.0.1663': attribute type 3 has an invalid length. [ 590.828423][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1663'. [ 590.902720][ T6277] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 590.910929][ T6277] usb 3-1: config 0 has no interface number 0 [ 590.924474][ T6277] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 590.933861][ T6277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.943721][ T6277] usb 3-1: Product: syz [ 590.947966][ T6277] usb 3-1: Manufacturer: syz [ 590.953989][ T6277] usb 3-1: SerialNumber: syz [ 590.989452][ T6277] usb 3-1: config 0 descriptor?? [ 591.131154][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 591.561710][ T5823] Bluetooth: hci4: connection err: -111 [ 591.951101][ T976] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 592.171053][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 592.552650][ T976] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 592.564085][ T976] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 592.574905][ T976] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.589000][ T976] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 592.599520][ T976] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 592.611808][ T976] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.631301][ T976] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 592.644774][ T976] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 593.220931][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 593.323220][ T976] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.345266][ T976] usb 4-1: string descriptor 0 read error: -22 [ 593.355651][ T6277] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 593.364481][ T976] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 593.380860][ T6277] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 593.393324][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.404946][ T6277] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 593.422368][ T976] adutux 4-1:168.0: interrupt endpoints not found [ 593.429401][ T6277] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 593.484603][ T6277] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 593.747406][ T6277] usb 3-1: USB disconnect, device number 38 [ 593.826060][ T6277] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 593.837263][ T7528] usb 4-1: USB disconnect, device number 44 [ 593.901462][ T6277] keyspan 3-1:0.133: device disconnected [ 593.926479][T12217] netlink: 'syz.2.1671': attribute type 1 has an invalid length. [ 594.031093][T12217] netlink: 'syz.2.1671': attribute type 2 has an invalid length. [ 594.036049][T12224] input: syz0 as /devices/virtual/input/input39 [ 594.045696][T12217] netlink: 'syz.2.1671': attribute type 1 has an invalid length. [ 594.053674][T12217] netlink: 'syz.2.1671': attribute type 3 has an invalid length. [ 594.144587][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'. [ 594.250802][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 594.581436][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1671'. [ 594.689992][T12229] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1675'. [ 595.290679][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.350161][T12232] input: syz0 as /devices/virtual/input/input40 [ 595.597177][T12240] SELinux: syz.3.1677 (12240) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 596.289588][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1680'. [ 596.298750][T12245] openvswitch: netlink: Flow actions attr not present in new flow. [ 596.332410][T12247] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 596.341030][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 596.348312][T12247] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 596.396893][ T30] audit: type=1400 audit(1767325586.062:658): avc: denied { create } for pid=12248 comm="syz.2.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 596.417845][ T30] audit: type=1400 audit(1767325586.092:659): avc: denied { sys_admin } for pid=12248 comm="syz.2.1682" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 596.552811][ T1304] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.924581][T12263] input: syz0 as /devices/virtual/input/input41 [ 597.121035][ T5859] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 597.140492][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 597.370620][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 597.398449][ T5859] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 597.415125][ T5859] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 597.429840][ T5859] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.446220][ T5859] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 597.457137][ T5859] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 597.468034][ T5859] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.482131][ T5859] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 597.494363][ T5859] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 597.505174][ T5859] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.520575][ T5859] usb 5-1: string descriptor 0 read error: -22 [ 597.526962][ T5859] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 597.536300][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.548575][ T5859] adutux 5-1:168.0: interrupt endpoints not found [ 597.808085][ T5859] usb 5-1: USB disconnect, device number 49 [ 597.970277][T12271] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1690'. [ 598.420417][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 599.460200][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 600.490302][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 600.928646][T12309] input: syz0 as /devices/virtual/input/input42 [ 601.529989][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 602.569867][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 602.620752][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 603.384245][ T30] audit: type=1400 audit(1767325593.053:660): avc: denied { map } for pid=12335 comm="syz.0.1706" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 603.442570][ T30] audit: type=1400 audit(1767325593.053:661): avc: denied { execute } for pid=12335 comm="syz.0.1706" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 603.609746][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 603.676342][T12344] i2c i2c-0: Invalid block write size 58 [ 603.932685][T12349] SELinux: syz.0.1710 (12349) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 604.649621][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 605.689501][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 605.897807][T12359] 9pnet_virtio: no channels available for device syz [ 606.070302][T12363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 606.729363][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 606.917061][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 607.601753][ T6277] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 607.769319][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 607.787202][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1718'. [ 607.807490][T12384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12384 comm=syz.3.1718 [ 607.889401][ T6277] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 607.919850][ T6277] usb 5-1: config 0 has no interface number 0 [ 607.949252][ T6277] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 607.969286][ T6277] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 607.999143][ T30] audit: type=1400 audit(1767325597.664:662): avc: denied { relabelfrom } for pid=12396 comm="syz.2.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 608.001198][ T6277] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 608.076010][ T30] audit: type=1400 audit(1767325597.694:663): avc: denied { relabelto } for pid=12396 comm="syz.2.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 608.079221][ T6277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.115678][T12398] syzkaller0: create flow: hash 2643873342 index 1 [ 608.167778][ T6277] usb 5-1: Product: syz [ 608.185380][ T6277] usb 5-1: Manufacturer: syz [ 608.191341][ T6265] syzkaller0: tun_net_xmit 76 [ 608.196716][ T6265] syzkaller0: tun_net_xmit 48 [ 608.219378][ T5974] syzkaller0: tun_net_xmit 76 [ 608.302428][ T6277] usb 5-1: SerialNumber: syz [ 608.323039][ T6277] usb 5-1: config 0 descriptor?? [ 608.362968][T12382] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 608.372356][T12382] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 608.705200][ T6277] smsc95xx v2.0.0 [ 608.809248][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 608.919371][ T5974] syzkaller0: tun_net_xmit 76 [ 608.949549][T12381] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 608.964124][T12381] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 609.195066][T12408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1723'. [ 609.229731][ T5974] syzkaller0: tun_net_xmit 76 [ 609.299595][ T6277] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 609.322505][ T6277] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 609.458025][ T5974] syzkaller0: tun_net_xmit 76 [ 609.488836][T12396] syzkaller0: delete flow: hash 2643873342 index 1 [ 609.580090][T12416] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 609.587848][T12416] netlink: 'syz.0.1725': attribute type 2 has an invalid length. [ 609.595619][T12416] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 609.603332][T12416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1725'. [ 609.859077][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 610.391123][ T5823] Bluetooth: hci1: connection err: -111 [ 610.888858][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 611.023937][T12427] input: syz1 as /devices/virtual/input/input43 [ 611.297047][ T6277] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 611.315759][ T6277] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 611.379006][ T6277] usb 5-1: USB disconnect, device number 50 [ 611.406524][T12431] FAULT_INJECTION: forcing a failure. [ 611.406524][T12431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.473868][T12431] CPU: 1 UID: 0 PID: 12431 Comm: syz.3.1729 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.473893][T12431] Tainted: [L]=SOFTLOCKUP [ 611.473899][T12431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 611.473908][T12431] Call Trace: [ 611.473913][T12431] [ 611.473920][T12431] dump_stack_lvl+0x16c/0x1f0 [ 611.473945][T12431] should_fail_ex+0x512/0x640 [ 611.473972][T12431] _copy_from_user+0x2e/0xd0 [ 611.473999][T12431] do_tcp_setsockopt+0x237c/0x2c10 [ 611.474021][T12431] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 611.474037][T12431] ? proc_fail_nth_write+0x9f/0x220 [ 611.474061][T12431] ? __pfx_sock_has_perm+0x10/0x10 [ 611.474080][T12431] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 611.474102][T12431] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 611.474128][T12431] ? find_held_lock+0x2b/0x80 [ 611.474158][T12431] tcp_setsockopt+0xe2/0x100 [ 611.474176][T12431] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 611.474198][T12431] do_sock_setsockopt+0xf3/0x1d0 [ 611.474221][T12431] __sys_setsockopt+0x1a0/0x230 [ 611.474241][T12431] __x64_sys_setsockopt+0xbd/0x160 [ 611.474256][T12431] ? do_syscall_64+0x91/0xf80 [ 611.474276][T12431] ? lockdep_hardirqs_on+0x7c/0x110 [ 611.474294][T12431] do_syscall_64+0xcd/0xf80 [ 611.474313][T12431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.474331][T12431] RIP: 0033:0x7ff4d078f749 [ 611.474340][T12431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.474350][T12431] RSP: 002b:00007ff4d157b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 611.474361][T12431] RAX: ffffffffffffffda RBX: 00007ff4d09e5fa0 RCX: 00007ff4d078f749 [ 611.474367][T12431] RDX: 0000000000000016 RSI: 0000000000000006 RDI: 0000000000000003 [ 611.474373][T12431] RBP: 00007ff4d157b090 R08: 0000000000000008 R09: 0000000000000000 [ 611.474378][T12431] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 611.474384][T12431] R13: 00007ff4d09e6038 R14: 00007ff4d09e5fa0 R15: 00007ffd3dbcb758 [ 611.474398][T12431] [ 611.928736][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.117061][T12440] netlink: 'syz.3.1731': attribute type 20 has an invalid length. [ 612.978728][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 613.040375][T12447] SELinux: syz.4.1733 (12447) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 613.426486][T12449] siw: device registration error -23 [ 613.520117][T12449] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1732'. [ 614.008523][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.048640][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.091160][ T5823] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 615.843295][T12477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 615.899085][T12478] netlink: 'syz.3.1739': attribute type 21 has an invalid length. [ 616.088258][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 616.395568][ T5823] Bluetooth: hci2: connection err: -111 [ 617.128133][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 618.168022][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 619.207898][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 620.178676][ T5974] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 620.249806][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 620.367744][ T5974] usb 5-1: Using ep0 maxpacket: 8 [ 620.376149][ T5974] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 620.414265][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.433181][ T5974] usb 5-1: Product: syz [ 620.437735][ T5859] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 620.455437][ T5974] usb 5-1: Manufacturer: syz [ 620.460154][ T5974] usb 5-1: SerialNumber: syz [ 620.476297][ T5974] usb 5-1: config 0 descriptor?? [ 620.528470][ T5974] gspca_main: sq930x-2.14.0 probing 2770:930c [ 620.591079][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.602914][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.617719][ T5859] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 620.637692][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.653294][ T5859] usb 1-1: config 0 descriptor?? [ 620.897821][ T5859] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 620.898707][ T5974] gspca_sq930x: ucbus_write failed -71 [ 620.905867][ T30] audit: type=1400 audit(1767325610.565:664): avc: denied { mounton } for pid=12510 comm="syz.0.1748" path="/proc/1285/cgroup" dev="proc" ino=38714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 620.945254][ T30] audit: type=1400 audit(1767325610.565:665): avc: denied { mounton } for pid=12510 comm="syz.0.1748" path="/proc/1285/cgroup" dev="nsfs" ino=4026532792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 620.984159][ T5859] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 621.063123][ T5859] cp2112 0003:10C4:EA90.0011: error requesting version [ 621.107105][ T5859] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 621.147849][ T5974] gspca_sq930x: Sensor ov9630 not yet treated [ 621.155761][ T5859] usb 1-1: USB disconnect, device number 48 [ 621.155761][ T5974] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 621.194826][ T5974] usb 5-1: USB disconnect, device number 51 [ 621.289229][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 621.588709][T12478] netlink: 'syz.3.1739': attribute type 1 has an invalid length. [ 621.597400][T12478] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1739'. [ 621.758221][ T30] audit: type=1400 audit(1767325611.435:666): avc: denied { map } for pid=12523 comm="syz.4.1755" path="socket:[39254]" dev="sockfs" ino=39254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 621.927274][T12533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 622.327655][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 622.423367][T12545] SELinux: syz.0.1756 (12545) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 622.777837][T12546] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 622.807484][ T5859] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 622.821690][T12546] netlink: 'syz.3.1759': attribute type 2 has an invalid length. [ 622.844144][T12546] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 622.854176][T12546] netlink: 'syz.3.1759': attribute type 3 has an invalid length. [ 622.865568][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 622.990577][ T5859] usb 5-1: Using ep0 maxpacket: 8 [ 623.007398][ T5859] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 623.034624][ T5859] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.280692][ T5859] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 623.327454][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.364156][ T5859] usbtmc 5-1:16.0: bulk endpoints not found [ 623.377574][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 623.850114][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.407275][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.565009][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 624.582319][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1758'. [ 624.637256][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1758'. [ 624.921310][T12569] netlink: 'syz.3.1766': attribute type 1 has an invalid length. [ 624.929468][T12569] netlink: 'syz.3.1766': attribute type 2 has an invalid length. [ 624.938746][T12569] netlink: 'syz.3.1766': attribute type 1 has an invalid length. [ 625.212061][T12569] netlink: 'syz.3.1766': attribute type 3 has an invalid length. [ 625.240230][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1766'. [ 625.447256][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.058455][ T6277] usb 5-1: USB disconnect, device number 52 [ 626.487045][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.607565][ T5859] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 626.668552][T12588] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 626.676759][T12588] netlink: 'syz.1.1772': attribute type 2 has an invalid length. [ 626.684736][T12588] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 626.692745][T12588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1772'. [ 626.819383][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 626.845936][ T5859] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 626.854233][ T5859] usb 4-1: config 0 has no interface number 0 [ 626.882272][ T5859] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=bf.0a [ 626.918373][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.933283][ T5859] usb 4-1: Product: syz [ 626.947217][ T5859] usb 4-1: Manufacturer: syz [ 626.952001][ T5859] usb 4-1: SerialNumber: syz [ 626.963016][ T5859] usb 4-1: config 0 descriptor?? [ 626.977518][ T5859] gspca_main: t613-2.14.0 probing 17a1:0128 [ 627.181432][ T5859] gspca_t613: unknown sensor 0000 [ 627.192342][ T5859] t613 4-1:0.196: probe with driver t613 failed with error -22 [ 627.217392][ T5859] usb 4-1: USB disconnect, device number 45 [ 627.526928][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 628.151538][ T6978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 628.186768][ T7528] libceph: connect (1)[c::]:6789 error -101 [ 628.192945][ T7528] libceph: mon0 (1)[c::]:6789 connect error [ 628.513431][ T7528] libceph: connect (1)[c::]:6789 error -101 [ 628.525892][ T7528] libceph: mon0 (1)[c::]:6789 connect error [ 628.566809][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 629.048962][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 629.058114][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 629.084309][T12613] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 629.606771][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 629.778856][T12638] i2c i2c-0: Invalid block write size 58 [ 629.923475][T12605] ceph: No mds server is up or the cluster is laggy [ 630.646786][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 631.686442][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 632.116819][T12678] input: syz0 as /devices/virtual/input/input44 [ 632.455934][ T5974] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 632.643841][ T5974] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 632.643879][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 632.643901][ T5974] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.650408][ T5974] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 632.650466][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 632.650482][ T5974] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.653558][ T5974] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 632.653584][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 632.653598][ T5974] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.676457][ T5974] usb 4-1: string descriptor 0 read error: -22 [ 632.676561][ T5974] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 632.676583][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.685280][ T5974] adutux 4-1:168.0: interrupt endpoints not found [ 632.739167][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 632.918417][ T6277] usb 4-1: USB disconnect, device number 46 [ 633.766254][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 634.816065][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 635.537621][T12734] input: syz1 as /devices/virtual/input/input45 [ 635.845953][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 635.923637][T12741] input: syz0 as /devices/virtual/input/input46 [ 636.885835][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 636.914225][T12760] xt_policy: neither incoming nor outgoing policy selected [ 637.035307][T12764] fuse: Unknown parameter '000000000000000000000x0000000000000005' [ 637.166236][ T6277] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 637.335855][ T6277] usb 3-1: Using ep0 maxpacket: 16 [ 637.377247][ T6277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.387455][ T6277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 637.404526][ T6277] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 637.423465][ T6277] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.424414][ T6277] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 637.424436][ T6277] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 637.424453][ T6277] usb 3-1: Manufacturer: syz [ 637.431689][ T6277] usb 3-1: config 0 descriptor?? [ 637.925943][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 637.981969][T12772] netlink: 'syz.4.1821': attribute type 1 has an invalid length. [ 637.982054][T12772] netlink: 'syz.4.1821': attribute type 2 has an invalid length. [ 637.982074][T12772] netlink: 'syz.4.1821': attribute type 1 has an invalid length. [ 637.982094][T12772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1821'. [ 638.324667][T12777] netlink: ct family unspecified [ 638.324694][T12777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.965776][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 639.068717][T12784] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 639.597117][T12789] netlink: 'syz.3.1826': attribute type 13 has an invalid length. [ 640.005461][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 640.318149][ T6277] usb 3-1: USB disconnect, device number 39 [ 641.045356][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 641.256712][ T30] audit: type=1400 audit(1767325630.917:667): avc: denied { connect } for pid=12804 comm="syz.0.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 641.467536][ T30] audit: type=1400 audit(1767325630.927:668): avc: denied { read } for pid=12804 comm="syz.0.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 641.594174][T12812] FAULT_INJECTION: forcing a failure. [ 641.594174][T12812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.085233][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 642.505413][T12812] CPU: 0 UID: 0 PID: 12812 Comm: syz.2.1831 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.505441][T12812] Tainted: [L]=SOFTLOCKUP [ 642.505447][T12812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 642.505455][T12812] Call Trace: [ 642.505460][T12812] [ 642.505467][T12812] dump_stack_lvl+0x16c/0x1f0 [ 642.505492][T12812] should_fail_ex+0x512/0x640 [ 642.505520][T12812] _copy_to_user+0x32/0xd0 [ 642.505546][T12812] simple_read_from_buffer+0xcb/0x170 [ 642.505570][T12812] proc_fail_nth_read+0x197/0x240 [ 642.505589][T12812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.505608][T12812] ? rw_verify_area+0xcf/0x6c0 [ 642.505626][T12812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.505643][T12812] vfs_read+0x1e4/0xcf0 [ 642.505664][T12812] ? __pfx___mutex_lock+0x10/0x10 [ 642.505689][T12812] ? __pfx_vfs_read+0x10/0x10 [ 642.505716][T12812] ? __fget_files+0x20e/0x3c0 [ 642.505746][T12812] ksys_read+0x12a/0x250 [ 642.505766][T12812] ? __pfx_ksys_read+0x10/0x10 [ 642.505793][T12812] do_syscall_64+0xcd/0xf80 [ 642.505816][T12812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.505833][T12812] RIP: 0033:0x7fb83c18e15c [ 642.505847][T12812] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 642.505863][T12812] RSP: 002b:00007fb83cf4d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 642.505879][T12812] RAX: ffffffffffffffda RBX: 00007fb83c3e5fa0 RCX: 00007fb83c18e15c [ 642.505890][T12812] RDX: 000000000000000f RSI: 00007fb83cf4d0a0 RDI: 0000000000000004 [ 642.505900][T12812] RBP: 00007fb83cf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 642.505910][T12812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.505920][T12812] R13: 00007fb83c3e6038 R14: 00007fb83c3e5fa0 R15: 00007ffd760bcbb8 [ 642.505944][T12812] [ 642.918376][T12816] netlink: 'syz.0.1834': attribute type 1 has an invalid length. [ 642.926161][T12816] netlink: 'syz.0.1834': attribute type 2 has an invalid length. [ 642.934072][T12816] netlink: 'syz.0.1834': attribute type 1 has an invalid length. [ 642.941834][T12816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1834'. [ 642.960603][T12822] overlayfs: failed to resolve './file1': -2 [ 642.992929][ T30] audit: type=1400 audit(1767325632.658:669): avc: denied { getopt } for pid=12817 comm="syz.3.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 643.125098][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 644.174998][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 644.264932][ T6277] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 644.414958][ T6277] usb 3-1: device descriptor read/64, error -71 [ 644.654974][ T6277] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 644.804906][ T6277] usb 3-1: device descriptor read/64, error -71 [ 644.968841][ T6277] usb usb3-port1: attempt power cycle [ 645.204858][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 645.595888][ T6277] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 645.820941][ T6277] usb 3-1: device descriptor read/8, error -71 [ 646.094832][ T6277] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 646.244752][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 646.324819][ T6277] usb 3-1: device not accepting address 43, error -71 [ 646.328672][ T6277] usb usb3-port1: unable to enumerate USB device [ 646.341678][T12866] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1845'. [ 647.284613][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 647.530658][ T30] audit: type=1400 audit(1767325637.198:670): avc: denied { getopt } for pid=12876 comm="syz.2.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 647.833480][T12880] netlink: 'syz.2.1851': attribute type 1 has an invalid length. [ 647.833623][T12880] netlink: 'syz.2.1851': attribute type 2 has an invalid length. [ 647.833650][T12880] netlink: 'syz.2.1851': attribute type 1 has an invalid length. [ 647.833676][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1851'. [ 648.110659][T12887] ALSA: mixer_oss: invalid OSS volume '' [ 648.272553][T12889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 648.324516][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 648.764415][ T5974] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 648.821905][ T5823] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 648.924598][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 648.931216][ T5974] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 648.942992][ T5974] usb 5-1: config 0 has no interface number 0 [ 648.959754][ T5974] usb 5-1: config 0 interface 50 has no altsetting 0 [ 648.978000][ T5974] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=94.35 [ 649.004973][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.027766][ T5974] usb 5-1: Product: syz [ 649.031947][ T5974] usb 5-1: Manufacturer: syz [ 649.042277][ T5974] usb 5-1: SerialNumber: syz [ 649.051692][ T5974] usb 5-1: config 0 descriptor?? [ 649.162499][T12900] delete_channel: no stack [ 649.364379][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 649.469610][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1856'. [ 649.486829][T12900] bridge_slave_1: left allmulticast mode [ 649.493579][T12900] bridge_slave_1: left promiscuous mode [ 649.500484][T12900] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.670539][T12900] bridge_slave_0: left allmulticast mode [ 650.412819][T12900] bridge_slave_0: left promiscuous mode [ 650.414251][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 650.442639][T12900] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.109545][ T976] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 651.188126][ T5974] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 651.197348][ T5974] gspca_sn9c2028: read1 error -71 [ 651.209600][ T5974] gspca_sn9c2028: read1 error -71 [ 651.217837][ T5974] gspca_sn9c2028: read1 error -71 [ 651.233543][ T5974] sn9c2028 5-1:0.50: probe with driver sn9c2028 failed with error -71 [ 651.244480][ T5974] usb 5-1: USB disconnect, device number 53 [ 651.444141][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 652.484337][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 652.825390][T12937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 653.523991][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 654.564206][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 654.687585][T12959] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1869'. [ 655.261020][T12959] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.313892][T12959] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.327686][T12959] .` (unregistering): Released all slaves [ 655.603734][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 655.662104][T12976] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 655.669971][T12976] netlink: 'syz.1.1874': attribute type 2 has an invalid length. [ 655.677803][T12976] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 655.685738][T12976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1874'. [ 656.323673][ T5823] Bluetooth: hci2: connection err: -111 [ 656.653707][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 657.133437][ T30] audit: type=1400 audit(1767325646.109:671): avc: denied { connect } for pid=12979 comm="syz.2.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 657.462042][T12990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.568095][ T5823] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 657.693423][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 657.717778][T13006] i2c i2c-0: Invalid block write size 58 [ 657.796703][ T6277] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 657.930775][ C1] sd 0:0:1:0: [sda] tag#8541 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 657.941203][ C1] sd 0:0:1:0: [sda] tag#8541 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 657.984889][ T6277] usb 3-1: device descriptor read/64, error -71 [ 658.233411][ T6277] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 658.373351][ T6277] usb 3-1: device descriptor read/64, error -71 [ 658.380265][ T7528] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 658.483594][ T6277] usb usb3-port1: attempt power cycle [ 658.529325][T13022] input: syz0 as /devices/virtual/input/input47 [ 658.533360][ T7528] usb 1-1: Using ep0 maxpacket: 16 [ 658.550432][ T7528] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.587055][ T7528] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.621645][ T7528] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 658.650162][ T7528] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 658.693385][ T7528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.729147][ T7528] usb 1-1: config 0 descriptor?? [ 658.733284][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 658.903431][ T6277] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 659.287374][ T6277] usb 3-1: device descriptor read/8, error -71 [ 659.321178][ T30] audit: type=1800 audit(1767325648.949:672): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1891" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 659.457318][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.465992][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.583186][ T6277] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 659.713657][ T6277] usb 3-1: device descriptor read/8, error -71 [ 659.736552][ T7528] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 659.749790][ T5823] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 659.763223][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 659.773176][ T7528] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 659.787791][ T7528] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 659.818921][ T7528] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 659.826913][ T7528] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 659.864900][ T7528] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 659.872140][ T7528] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 659.873398][ T6277] usb usb3-port1: unable to enumerate USB device [ 659.910354][ T7528] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 659.928724][ T7528] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 659.983125][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'. [ 659.983270][ T7528] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 660.044527][T13048] netlink: 'syz.1.1895': attribute type 1 has an invalid length. [ 660.052394][T13048] netlink: 'syz.1.1895': attribute type 2 has an invalid length. [ 660.060281][T13048] netlink: 'syz.1.1895': attribute type 1 has an invalid length. [ 660.068135][T13048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1895'. [ 660.337124][ T7528] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0012/input/input48 [ 660.400917][ T7528] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 660.780283][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'. [ 660.803055][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 660.963288][ T4904] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 661.197268][ T7528] usb 1-1: USB disconnect, device number 49 [ 661.338737][T13075] i2c i2c-0: Invalid block write size 58 [ 661.503168][T13080] netlink: 'syz.2.1902': attribute type 1 has an invalid length. [ 661.511062][T13080] netlink: 'syz.2.1902': attribute type 2 has an invalid length. [ 661.518940][T13080] netlink: 'syz.2.1902': attribute type 1 has an invalid length. [ 661.527093][T13080] netlink: 'syz.2.1902': attribute type 3 has an invalid length. [ 661.527207][T13079] input: syz0 as /devices/virtual/input/input49 [ 661.541504][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'. [ 661.842937][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 662.236327][T13091] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 662.882877][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 663.085856][ T6277] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 663.281707][ T6277] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 663.407605][ T6277] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 663.438555][ T6277] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.477889][ T6277] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 663.492139][ T6277] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 663.924112][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 664.657737][ T6277] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.962733][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 665.033398][ T6277] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 665.052795][ T6277] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 665.072487][ T6277] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.179927][ T6277] usb 4-1: string descriptor 0 read error: -22 [ 665.407392][ T6277] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 665.417506][T13126] i2c i2c-0: Invalid block write size 58 [ 665.439544][ T6277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.480208][ T6277] adutux 4-1:168.0: interrupt endpoints not found [ 665.527597][ T6277] usb 4-1: USB disconnect, device number 47 [ 666.002454][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 666.214120][T13142] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1919'. [ 666.238240][ T30] audit: type=1326 audit(1767325655.900:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98918f749 code=0x7ffc0000 [ 666.644292][ T30] audit: type=1326 audit(1767325655.900:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98918f749 code=0x7ffc0000 [ 666.995113][ T30] audit: type=1326 audit(1767325655.910:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe98918f749 code=0x7ffc0000 [ 667.042322][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 667.223477][T13146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 667.279480][ T30] audit: type=1326 audit(1767325655.910:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98918f749 code=0x7ffc0000 [ 667.574649][T13150] input: syz0 as /devices/virtual/input/input50 [ 667.851328][ T30] audit: type=1326 audit(1767325655.910:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98918f749 code=0x7ffc0000 [ 668.082209][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 668.108928][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 668.773721][T13158] syz.2.1922 (13158) used greatest stack depth: 18936 bytes left [ 668.992251][ T30] audit: type=1326 audit(1767325655.910:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe98918f749 code=0x7ffc0000 [ 669.122098][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 669.202049][ T30] audit: type=1326 audit(1767325655.910:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98918f749 code=0x7ffc0000 [ 669.252157][ T30] audit: type=1326 audit(1767325655.910:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98918f749 code=0x7ffc0000 [ 670.161979][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 670.202284][T13162] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 670.210018][T13162] netlink: 'syz.0.1925': attribute type 2 has an invalid length. [ 670.217790][T13162] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 670.225504][T13162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1925'. [ 670.362491][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 670.992940][T13178] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1929'. [ 671.045666][ T30] audit: type=1400 audit(1767325660.721:681): avc: denied { getopt } for pid=13181 comm="syz.4.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 671.201866][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 671.468361][ T6277] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 671.542982][ T30] audit: type=1400 audit(1767325660.741:682): avc: denied { setopt } for pid=13181 comm="syz.4.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 671.733290][ T6277] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 671.744478][ T6277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.758175][ T6277] usb 3-1: config 0 descriptor?? [ 672.241760][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 672.348795][T13195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 672.418256][ T6277] smartjoyplus 0003:0925:8866.0013: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.2-1/input0 [ 672.743695][ T6277] smartjoyplus 0003:0925:8866.0013: Force feedback for SmartJoy PLUS PS2/USB adapter [ 673.291630][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 673.325505][ T6277] usb 3-1: USB disconnect, device number 48 [ 674.321516][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 675.169694][ T7528] libceph: connect (1)[c::]:6789 error -101 [ 675.175850][ T7528] libceph: mon0 (1)[c::]:6789 connect error [ 675.361384][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 675.491598][ T7528] libceph: connect (1)[c::]:6789 error -101 [ 675.511448][ T7528] libceph: mon0 (1)[c::]:6789 connect error [ 675.605043][T13234] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 675.613198][T13234] netlink: 'syz.4.1940': attribute type 2 has an invalid length. [ 675.620971][T13234] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 675.628912][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1940'. [ 676.021438][ T7528] libceph: connect (1)[c::]:6789 error -101 [ 676.027455][ T7528] libceph: mon0 (1)[c::]:6789 connect error [ 676.401269][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 676.460225][T13223] ceph: No mds server is up or the cluster is laggy [ 676.573944][T13243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=13243 comm=syz.0.1942 [ 676.595651][ T30] audit: type=1400 audit(1767325666.251:683): avc: denied { setopt } for pid=13240 comm="syz.0.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 677.441135][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 678.481009][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 679.520916][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 680.560765][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 681.600655][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 682.640538][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 683.680421][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 684.720285][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 685.760204][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 686.800062][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 687.839941][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 688.879830][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 689.919705][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 690.959580][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 691.999462][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 693.039327][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 694.079222][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 695.119086][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 696.159005][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 697.199045][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 698.238741][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 699.278621][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 700.318531][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 701.358391][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 702.398279][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 703.438150][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 704.478029][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 705.517913][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 706.557795][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 707.597687][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 708.637560][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 709.677437][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 710.717343][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 711.757219][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 712.797079][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 713.836951][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 714.876843][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 715.916723][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 716.956612][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 717.996477][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 719.036366][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 720.076253][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 721.116140][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 722.156013][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 723.195896][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 724.235778][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 725.275679][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 726.315566][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 727.355482][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 728.395299][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 729.435195][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 730.475251][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 731.514951][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 732.554832][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 733.594714][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 734.634588][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 735.674480][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 736.714388][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 737.754249][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 738.794126][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 739.834011][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 740.873907][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 741.913788][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 742.953654][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 743.993533][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 745.033419][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 746.073299][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 747.113182][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 748.153066][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 749.192952][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 750.232831][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 751.272704][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 752.312628][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 753.352472][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 754.392359][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 755.432244][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 756.472129][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 757.512005][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 758.551903][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 759.591780][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 760.631658][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 761.671549][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 762.711429][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 763.751493][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 764.791185][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 765.831064][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 766.870969][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 767.910836][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 768.950729][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 769.990614][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 771.030491][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 772.070383][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 773.110255][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 774.150130][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 775.190019][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 776.229913][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 777.269782][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 778.309683][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 779.349555][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 780.389437][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 781.429328][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 782.009160][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 782.016111][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13148/1:b..l P5816/1:b..l [ 782.025719][ C1] rcu: (detected by 1, t=10502 jiffies, g=52289, q=278 ncpus=2) [ 782.033422][ C1] task:syz-executor state:R running task stack:23672 pid:5816 tgid:5816 ppid:5806 task_flags:0x400140 flags:0x00080000 [ 782.047652][ C1] Call Trace: [ 782.050935][ C1] [ 782.053875][ C1] ? __schedule+0x10b9/0x6150 [ 782.058562][ C1] __schedule+0x1139/0x6150 [ 782.063065][ C1] ? lock_acquire+0x179/0x330 [ 782.067743][ C1] ? __pfx___schedule+0x10/0x10 [ 782.072581][ C1] ? process_measurement+0x1e6/0x22d0 [ 782.077953][ C1] preempt_schedule_irq+0x51/0x90 [ 782.082971][ C1] irqentry_exit+0x1d8/0x8c0 [ 782.087561][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 782.093531][ C1] RIP: 0010:stack_access_ok+0x12/0x200 [ 782.098983][ C1] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 <41> 55 41 54 49 89 d4 4c 89 f2 55 48 c1 ea 03 48 89 f5 53 48 89 fb [ 782.118575][ C1] RSP: 0018:ffffc90003837898 EFLAGS: 00000283 [ 782.124629][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff9120f27e [ 782.132586][ C1] RDX: 0000000000000008 RSI: ffffc90003837940 RDI: ffffc90003837970 [ 782.140542][ C1] RBP: ffffc90003837940 R08: 0000000000000001 R09: 00000000ffffffff [ 782.148497][ C1] R10: 0000000000000002 R11: 0000000000006cdb R12: ffffc900038379c0 [ 782.156453][ C1] R13: ffffc90003837970 R14: ffffc90003837978 R15: ffffc900038379a4 [ 782.164426][ C1] unwind_next_frame+0x1509/0x20b0 [ 782.169530][ C1] ? __unwind_start+0x574/0x7f0 [ 782.174378][ C1] __unwind_start+0x45f/0x7f0 [ 782.179050][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 782.185199][ C1] arch_stack_walk+0x73/0x100 [ 782.189931][ C1] ? arch_stack_walk+0x73/0x100 [ 782.194776][ C1] stack_trace_save+0x8e/0xc0 [ 782.199443][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 782.204806][ C1] ? __lock_acquire+0x436/0x2890 [ 782.209734][ C1] kasan_save_stack+0x33/0x60 [ 782.214443][ C1] kasan_save_track+0x14/0x30 [ 782.219107][ C1] kasan_save_free_info+0x3b/0x60 [ 782.224117][ C1] __kasan_slab_free+0x5f/0x80 [ 782.228874][ C1] kmem_cache_free+0x2d8/0x770 [ 782.233626][ C1] ? putname+0xf5/0x1a0 [ 782.237786][ C1] ? putname+0xf5/0x1a0 [ 782.241934][ C1] putname+0xf5/0x1a0 [ 782.245924][ C1] do_sys_openat2+0x191/0x290 [ 782.250615][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 782.255821][ C1] ? putname+0xf5/0x1a0 [ 782.259977][ C1] ? do_mkdirat+0x2dc/0x5e0 [ 782.264479][ C1] __x64_sys_openat+0x174/0x210 [ 782.269318][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 782.274687][ C1] do_syscall_64+0xcd/0xf80 [ 782.279194][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.285094][ C1] RIP: 0033:0x7fb83c18df90 [ 782.289499][ C1] RSP: 002b:00007ffd760bcec0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 782.297905][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb83c18df90 [ 782.305868][ C1] RDX: 0000000000000002 RSI: 00007ffd760bcfd0 RDI: 00000000ffffff9c [ 782.313824][ C1] RBP: 00007ffd760bcfd0 R08: 0000000000000000 R09: 00007ffd760bcc87 [ 782.321788][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001a1 [ 782.329750][ C1] R13: 00000000000927c0 R14: 00000000000a48a4 R15: 00007ffd760bcfd0 [ 782.337809][ C1] [ 782.340813][ C1] task:syz.1.1920 state:R running task stack:23624 pid:13148 tgid:13148 ppid:5811 task_flags:0x40064c flags:0x00080001 [ 782.354283][ C1] Call Trace: [ 782.357546][ C1] [ 782.360464][ C1] ? __schedule+0x10b9/0x6150 [ 782.365137][ C1] __schedule+0x1139/0x6150 [ 782.369634][ C1] ? mark_held_locks+0x49/0x80 [ 782.374388][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 782.379580][ C1] ? __pfx___schedule+0x10/0x10 [ 782.384424][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 782.389786][ C1] preempt_schedule_common+0x44/0xc0 [ 782.395062][ C1] preempt_schedule_thunk+0x16/0x30 [ 782.400258][ C1] _raw_spin_unlock+0x3e/0x50 [ 782.404922][ C1] unmap_page_range+0x1047/0x43c0 [ 782.409958][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 782.415320][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 782.420262][ C1] ? uprobe_munmap+0x20/0x600 [ 782.424930][ C1] unmap_single_vma+0x153/0x240 [ 782.429781][ C1] unmap_vmas+0x218/0x470 [ 782.434102][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 782.438943][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 782.443888][ C1] exit_mmap+0x1b0/0xb60 [ 782.448126][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 782.452887][ C1] ? __lock_acquire+0x436/0x2890 [ 782.457825][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 782.463369][ C1] __mmput+0x12a/0x410 [ 782.467435][ C1] mmput+0x62/0x70 [ 782.471154][ C1] do_exit+0x7d7/0x2bd0 [ 782.475304][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 782.480929][ C1] ? __pfx_do_exit+0x10/0x10 [ 782.485518][ C1] do_group_exit+0xd3/0x2a0 [ 782.490011][ C1] get_signal+0x2671/0x26d0 [ 782.494518][ C1] ? __pfx_get_signal+0x10/0x10 [ 782.499367][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 782.504907][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 782.511058][ C1] ? __bad_area_nosemaphore+0x350/0x690 [ 782.516602][ C1] irqentry_exit+0x38a/0x8c0 [ 782.521186][ C1] asm_exc_page_fault+0x26/0x30 [ 782.526034][ C1] RIP: 0033:0x7fe98904f6b7 [ 782.530450][ C1] RSP: 002b:00007fe98a0891a0 EFLAGS: 00010206 [ 782.536512][ C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe98918f749 [ 782.544475][ C1] RDX: 00007fe98a0891c0 RSI: 00007fe98a0892f0 RDI: 000000000000000b [ 782.552432][ C1] RBP: 00007fe989213f91 R08: 0000000000000000 R09: 0000000000000000 [ 782.560388][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 782.568342][ C1] R13: 00007fe9893e6128 R14: 00007fe9893e6090 R15: 00007ffd100cccb8 [ 782.576316][ C1] [ 782.579323][ C1] rcu: rcu_preempt kthread starved for 10556 jiffies! g52289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 782.590499][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 782.600450][ C1] rcu: RCU grace-period kthread stack dump: [ 782.606330][ C1] task:rcu_preempt state:R running task stack:28320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 782.619806][ C1] Call Trace: [ 782.623071][ C1] [ 782.625995][ C1] ? __schedule+0x10b9/0x6150 [ 782.630665][ C1] __schedule+0x1139/0x6150 [ 782.635156][ C1] ? __lock_acquire+0x436/0x2890 [ 782.640088][ C1] ? __mod_timer+0x8f2/0xd30 [ 782.644679][ C1] ? __pfx___schedule+0x10/0x10 [ 782.649516][ C1] ? find_held_lock+0x2b/0x80 [ 782.654186][ C1] ? schedule+0x2d7/0x3a0 [ 782.658506][ C1] schedule+0xe7/0x3a0 [ 782.662563][ C1] schedule_timeout+0x123/0x290 [ 782.667403][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 782.672760][ C1] ? __pfx_process_timeout+0x10/0x10 [ 782.678039][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 782.683834][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 782.689287][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 782.694044][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 782.699322][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 782.704514][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 782.709439][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 782.714286][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 782.720103][ C1] rcu_gp_kthread+0x26d/0x380 [ 782.724797][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 782.729989][ C1] ? rcu_is_watching+0x12/0xc0 [ 782.734744][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 782.739936][ C1] ? __kthread_parkme+0x19e/0x250 [ 782.744951][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 782.750153][ C1] kthread+0x3c5/0x780 [ 782.754234][ C1] ? __pfx_kthread+0x10/0x10 [ 782.758819][ C1] ? rcu_is_watching+0x12/0xc0 [ 782.763572][ C1] ? __pfx_kthread+0x10/0x10 [ 782.768156][ C1] ret_from_fork+0x983/0xb10 [ 782.772738][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 782.777840][ C1] ? __switch_to+0x7af/0x10d0 [ 782.782523][ C1] ? __pfx_kthread+0x10/0x10 [ 782.787136][ C1] ret_from_fork_asm+0x1a/0x30 [ 782.791930][ C1] [ 782.794948][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 782.801268][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.811762][ C1] Tainted: [L]=SOFTLOCKUP [ 782.816071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 782.826110][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 782.831739][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 782.851341][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 782.857408][ C1] RAX: 00000000035c29ef RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 782.865369][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf79 RDI: ffffffff8bf2b400 [ 782.873332][ C1] RBP: ffffed1003b57498 R08: 0000000000000001 R09: ffffed10170a673d [ 782.881288][ C1] R10: ffff8880b85339eb R11: ffff88801dabaff0 R12: 0000000000000001 [ 782.889678][ C1] R13: ffff88801daba4c0 R14: ffffffff9088b6d0 R15: 0000000000000000 [ 782.897635][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 782.906560][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 782.913134][ C1] CR2: 000000110c2fa9e8 CR3: 000000000e184000 CR4: 00000000003526f0 [ 782.921092][ C1] Call Trace: [ 782.924356][ C1] [ 782.927272][ C1] default_idle+0x13/0x20 [ 782.931600][ C1] default_idle_call+0x6c/0xb0 [ 782.936353][ C1] do_idle+0x38d/0x510 [ 782.940417][ C1] ? __pfx_do_idle+0x10/0x10 [ 782.945004][ C1] ? do_idle+0x14/0x510 [ 782.949157][ C1] cpu_startup_entry+0x4f/0x60 [ 782.953912][ C1] start_secondary+0x21d/0x2d0 [ 782.958661][ C1] ? __pfx_start_secondary+0x10/0x10 [ 782.963942][ C1] common_startup_64+0x13e/0x148 [ 782.968880][ C1] [ 782.972439][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 783.989047][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 785.028920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 786.068824][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 787.108682][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 788.148578][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 789.188449][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 790.228346][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 791.268216][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available