last executing test programs: 11.613179913s ago: executing program 4 (id=2260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newspdinfo={0x24, 0x24, 0x21, 0x70bd2a, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}}, 0x84) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x48084}, 0x2404c800) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000001c0)={0x2, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) pselect6(0x40, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x9, 0x7, 0xad03, 0x7, 0x7fffffffffffffff}, &(0x7f0000000140)={0x5, 0xfffffffffffffff9, 0xffffffffffffff5d, 0xffff, 0x7, 0x9, 0x10000, 0x3bfc89d6}, &(0x7f0000000280)={0xfffffffffffffff2, 0x5, 0x5, 0x3, 0x9, 0x92b, 0x0, 0x120000000000}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x7]}, 0x8}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.589821596s ago: executing program 2 (id=2261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newspdinfo={0x24, 0x24, 0x21, 0x70bd2a, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}}, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x48084}, 0x2404c800) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x248c4}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.455923875s ago: executing program 1 (id=2262): unshare(0x2c020400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x4800) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18030000000500000000000000fffd001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 10.500159858s ago: executing program 4 (id=2264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002700)=0x23, 0x1c) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff000000009cb988788014976830"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[], 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xc) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x64000600) 9.470758838s ago: executing program 4 (id=2266): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES16], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2, "3eccd8000200000500"}) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000001040)=[0x1, 0x7f]) 9.01665984s ago: executing program 2 (id=2268): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb6c, 0x40, 0x3, 0x12d}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef000000000000000800"], 0x34}, 0x1, 0x0, 0x0, 0x24084854}, 0x400c810) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000019"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) pread64(r5, &(0x7f0000000040)=""/138, 0x8a, 0x7) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) pselect6(0x40, &(0x7f0000000400)={0xffffffffffffff81, 0x600, 0x100000001, 0x26, 0xffffffff, 0x7, 0x400, 0x7}, &(0x7f0000000440)={0x2, 0x2f, 0x75, 0x2, 0xffff, 0x800, 0x5, 0xffffffffffffff81}, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x100000001]}, 0x8}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 8.973743378s ago: executing program 0 (id=2269): r0 = socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) (async) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x10, 0x3f5, 0x202, 0x70bd27, 0x25dfdbff}, 0x2b}, 0x1, 0x0, 0x0, 0x4000881}, 0x40800) (async) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x50}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 8.734260016s ago: executing program 1 (id=2270): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r1, @ANYBLOB='\x00'/20, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000a07c6c0058d4e93215339245cf2c693fc403173832f469db2ec498ea43558603d27c045ec34371aebfe103e5d31966bcd8639e4a3334d91122cbcce370fa19b72a"], 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000010000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.629331154s ago: executing program 1 (id=2274): syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000740)='mm_khugepaged_scan_pmd\x00', r2, 0x0, 0x1}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 6.901631879s ago: executing program 2 (id=2275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0x4c}}, 0x48004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000050000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 6.547851592s ago: executing program 2 (id=2277): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) getpid() syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, &(0x7f0000000080)=0xa1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = fsmount(r1, 0x0, 0x3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x521000, 0x0) dup3(r4, r3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x27, 0x4, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x5}, {0xffff, 0x9}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x21, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x38, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.195345389s ago: executing program 0 (id=2279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newspdinfo={0x24, 0x24, 0x21, 0x70bd2a, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}}, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x48084}, 0x2404c800) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x248c4}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.132176451s ago: executing program 4 (id=2280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x109900, 0x100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 4.868841772s ago: executing program 4 (id=2282): socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @empty, 0xe}}, 0x24) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0xfdfd, 0x2, 0xffff, 0x100}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async) r10 = creat(&(0x7f0000000480)='./file0\x00', 0xc) syz_clone3(&(0x7f0000000700)={0x200002000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x39}, &(0x7f0000000280)=""/36, 0xfffffffffffffe6a, &(0x7f0000000300)=""/82, &(0x7f0000000380)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r10}}, 0x58) (async) sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000103030000000000000000000700000528000b8008001a40000000070c0018800800014000000006080007400000000608000740000000032400138006000240000500000604014088a800000600014088a800000600014088a800000800034000000007"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 4.042403417s ago: executing program 3 (id=2283): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000110001002cbd7000fedbdf25fe8000000000000000000000000000bb000004d308003c000c0015108a7c35000500000014000d"], 0x48}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003d00070127bd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400178008000700", @ANYRES32=0x0, @ANYBLOB="66bb01001715e135c727ed9ae4f11edb5712051ee468294586fa3f3260f4f34f85c3d67e8c2ab27f475f26391f59b20b250bf168d26d33c293c2d85fe9f99d2673dc5dfd86d059ad86492ba35e86d9271743"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000380)={0x1c8, 0x18, [0x8, 0x8, 0x7, 0x8000000000000001], &(0x7f0000000340)=[0x0, 0x0, 0x0]}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200050, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@verity_require}, {@userxattr}, {@xino_on}, {@redirect_dir_nofollow}]}) 3.782711606s ago: executing program 3 (id=2284): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001480)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f0000001340)=[{&(0x7f00000000c0)="64b3ff81e08ddbdc2327666db2893be6c038edae3bb4579dcde819e4549a26144aab929149bc9a6283c6c470d69657eae7032a4a6b555feb4e59987476c14d9355188a72857c941a02c8cb4c6befdd457b138f1549a07da4306e46aaa2544d600f526d72c6c14e73a201c94db8377d07342b12a1908d", 0x76}, {&(0x7f0000000140)="9db9089c2d2779037d8637b9019f482aa1c1814d66ac1b01d55c9925ab405c7c306c85194b587b7bc5ce8e9d47fb78c17e8b8345a6beb02eb6c5b25ff26eef4560636b81dcd3ec70f17372e8107b706d920f6c414230b30ef762019f66eec7b46da48255c429264d1a77d435004fa44fb1b3e72c297b59f840623327348c2c90b97e9e03ad441f25000e631b5e412ddf98d4b00325ce2e5561663764eead8434df08f7420de401d235ad5505a3f858efbf77a247e28b7e402cc7e8aaf36cdaa726893f8abebaf5d059376975394b8efee6c11e315c96369be908096c74d7a6b7c7ab3f5e6fa10dcdeef58cb1c074ba458c6d522d265e84bf1be9b7ee6e2447ee9a68a3ee8d98e58f4b278ac45e9c549d3b6463ada7a7e0e0f8d1dab2594af2c2d70304fbca760df93dbbcf0e63a3f78228dabf15121440070c331501b3784edf4e2bea6e880d5d2939dc031664d146ba7b8da8329cf8ceb3c63814e1ad5e8727b81afed2bb01f120a5dd0f60ba3a7957e8674bdc3642bbcf897723bab8df0e83574f6acbfb15635c6cc7c56b256a4207467581bb57461c6cd6be126b58bc313feedb7f22176881e713ed04f14968cb3ecbbf494318f35cb2dc6efec56dd915f47fd963280303a7c60ca053b187309981f5cdcff062908640474bfba6ee07e765653558bcd2d2faea9a6be8974850face1e355ec899556146bb9d3041085e42a25e70c1ec543aa93051ac327489d1a70db20a3e3a46777fe9ba9693df244aebad35afda24fb3bfcf86a6b575647734dbb8d246ef3d810f121895204708c08d366c9d37d1462722493747ffad650261a4fa89ce421eb9041893bda6d91d9a04de474842ad65a15fb4c3afef11681f58829e93a68657fd602c67c3e02baa117b7aac36e809735b2be809e17156ab531a08c0eda941089ab4419211f26b7da15afa26bb2f75e8e43b70ddf48a722e7c92ac34e5a1dc252cb777949148d6bdf101d39e34e140e6c3f41762ab1a4ff151229c6a866058da35cfbe82940c8873db4c0530093d07d3482b5864faa6759e71be67f3915387d8b01285c50d2cfd744cd84dad716786cac9b2897f311a2d339614d021a01b8a378d27bd5f73a5725e16478cd96f295fcf53b48d820230bcd2bb348d26e54e036bb31d6e50174d8cb2eee2a1467cd82dd95e6dee0161604c5e4474d60d31b01a372e7323f7c2c6d69fa9715b5b74b8b71b9d11f8db1c69ecc2e2e3d8948d732d17d3af6f31d14b14a6073b7602cee3532dc8cd040814b4d665d9899df85838392ab76b9cab4b318c8e30310efb8f9491d1ee7d57df525368b8821d02b3014e493565df77e46f32954806ff1e3de4d2dd8c343eb1c56597448a6596705a02f2b4b50270ecaee4d6b5cde23958116123200a306b968afeeaceef280bb07c8824f28c351ee8c456116c016185ad55bb93750e50ce83b4a54c3183f100b509921599060094e0506f1d610ad4e56cddb7e29bba71f9987764bebdf567ae56d9b66e2f78c7b7b8f241ccaf9d41218ad07c610b309b61c7150e90c201c29bd494ac5961c33f72d997d46570d2327e9abd1950855de1b1783ebaea0f73aa1a5c7c0f686d1e938bbd92444a6c31619db733822fc2d0c7933615e756bf9bead2f45859be20e42cdad599386bbda6e31ff63b30298e605d0092e49ae8a69effe53b88b9c1a35ad6071115763b6102bd60545af5aea3ea951aa317c3809ab4a0998da1d46b2acafc60a675b5914155f5d032b7321c661fd0ea7ade203b8218d7fafa45bab22bcabe71fdb87d6a58604a12327b9bfe0de6b7a5fcdd4ec84fe8941dca930787b8a1b5c85324fd8c0a2295d49ee9fae30c5cfa27f79b6aaf1ec22d715fe34e00bcd18a207c2c73fd2299316cde6016be317794202ca3a8c76b115bb9252c33f439bb431126c4320c050eda003955fc23242b75b8e20aa201a906e712904ac8939802859f10fbd43d4815bb36f3cba55f27b0d3110dbfd2f11d1765feb4ac81958b75ee35f34d5364199e7e9c29612077877f520aec46f984ba021bb91d37eb5a60acd370f865ab717850104b30b04170ed307cded22d7f630e43e695f4d1ce12c68799f45c8462e836a1f026ac5c952788e397f068cb3a9bf72aef93d88aff7b472d7b7d95c60facc9b249e6e689da5c841a480651501be612ea8d4cc533b9d52363c63f9a5c1fe41056d7a24bbf65d513fce0779dc8cc42066fb9062ea1dcafa81edde6c6ec62206cf0fb7582c1066e0afd3d20ab7b1742dc5a94e1d95685094a76968ce472c514c8dca6f91ee0bfb8f29a89d6c5cc107380060f9f19db6b953924b066094128130c8dfc43e0582d645e09fc1e1675aa8222afc41200aa29c4d7ff688c135f8c729e6e48e0df210d9cd626d7b54b01ee2575dc2a5320c5ca823ac6e22ba2c0ac7a56ec70b676268860a8426e5bbfb34fbaf5226a6cc74018ae8f70cc2a711677db946fe1add986f190e39e1ad00a33db12741174e47ef60ab60bb5ce7d89a136e832da4ae5cf18b47ddba42e1e5220bea64bb997756fa04b7da75a11591bc79b7ce8d04ad197cae26dcfb88e69475ddcba98b0f05554201a90a0005d86fd435a0da7fc3ffbcd60be42cf78f958b4f717f43944ebf5bb4d733228c97f3ad928e56fa3166cc76d655482eff22c836a334b14fd6cea718c1678785ab862ed0bc3481a9615daae7904be67e2334cb7f173e036e529ff5c272e58ea35d83a784a9a72dd1b541ca27227686b4c7c2f853fbc16e793ea277e0d1325474829380e798d0de3244fec63a92cf8eebdb08fc42654c255814e0f10f14eca10633dd17f4783e097d0a0596e286caf405f5291d9ea541784e2fa6e964a5b2c8d16d1d41e2d6da7e4b0e2adae45af7d92256dc0bab48325e0ea4e93681dba63152abf2516740da236f65c04d835a11138be1438f3769b3a99c0df764fb365eda8e569bcdaedba36035c88d79ca1e947a3843800c65227ef413897801886bcdc05603af69f1ec493e1a6832bd27f8599f74c60dfc09ae50f085a3063320b174a77f6a621b6ef7a175b6bc51f3620f1eb8c653b2000a5c8054e8a5f2c094055a45686c01a13a463a45d37e0af822d3d9c63d772f8d5f351dd4f27b045f6090720a2e1d2f9040804c0dfb44ae3365ecccc17e1d2000dca99f09df933def63f14b222137e2689155e77ced38d91ef791ea3181a6f5bf7f4e206034794c26a185231773fc7eea52966d6a5f33beb4dc757e7f2a3fe872f100b831dc0db45ce740031a8591789637b510d8cdd6af5198ea61b1b67891ad4d9c3b8975960b8cc284e4fa0b97a4eaa09ee66cf09b27d4fc6a4f6d1470039b71eb8ccba24d17d4692bcaf535942a59a678900122b737d5f213b3ab7a99e5958bfcd7aefab4e089b72cb0341515dc9fb982661f7e8a501fb0cfd851a30851f7914cc24b00c6c1a63664b828b9cc2c21d53ffd5bd4aba5ae96a0e9873df7018df0acc57dda223d65acf906fc53d56add20ee8c180659477a36b5d8a10a51e6663474319be3caebc6f4cc73526c054bf0bc112a496a3d3d2580aed8c94556036180d05955cf8d2e9b91dc208d8f044e7968267cf21675437448170cd7df35f4d2e51305e6a802aa9f850ecaf302bebfd00ac2dfeb76dad3eeeeb6cfeef68d8dbbfc83da68ecadc8bf65858c68e4938f85258ba6b9947b2dee138c78eaef34b4428fe217359c96848c7aae3320da31b2e6724c6ad8dacc27fb2f6004ec4b129fd5a2d9d79fa60bedb9b0984505576cea4dd6661f4713ba0263e3c9403b1658a514086d2b032d75ee4b560eaa67a83ed6ffd335acf8148e3f8cc5cbdef06c3ad89243533410e44dad2d1a6460408aed60f27a3aeae0e60ddf655e05997bc360d2738c71de12bb0c8c682cab5d580c6d6c545dd5eae85734be4ed513853aa51f05564d3d6613ef5dfdd22adbf4403547f73da8ba162cd3da85506f6aa35e05bf92aeaf85fb6e6d1ad4a304bb223af50ec634523220002a56350f8b52d0491122be9b79a9cbbe7eb3ca37df3ad8f026d9f61f10e300c8a0c5ccbf5150b70e0fd9530ed446ecda32e1a2ce7436a4ece66e1f07d9fc4c77685a4b6001f82e5e5fc3a3a4e62b7d46e68e290e3c327b8a7dc4a8d78bb2b1a575565c86a41249fb7de81a38e911ef95dd1e47c4e7c8c34bd3ba4345b3efd91b9e5449ebb6a57bbed8acda47eb5f004f452b62a9b88fc0138596937f0bd45456c81c229f41ce10dad97082ecef51e8e495c69697920e39ae909f008bf5f2915c9c0c2c3c3704fc00615d65fea02021ebae19dbf4b28e3c3f06d240da964a983abe940c94721462313737d5e8e96e38f04f114031497566f6336f9cb39c3c9d01c7b5950a59dd5d2d8bdb74faa984ce04cb161d2adcffa43d4e5c137bada4f336fbbcd94ae5b8031e462a3a76ef6939d055ce615d9c71de46135d53bb35503803507655ebe5800e8322db40051adee3f57912f9d06fccec301c1e94ad66c516f421ba7d18c40b2172180b7fa55a661a9d523e15c20b307a2d8f0d6d3fc390cb83100b0d5b5160b2b28088fdd328ca2475b223e1c39aeac656ef8a924d945638da1b6c279209bc7c0c26246c3558e273fa62b5d6d33886d36747c4bd58520f98fc9f972a7960d34a4f0735b308f821f6bed28b58824be16ca53f375d38334d183679eea6a1bf907ea879de64842dca5b7d876cc127f9d355ed1e982a4f23d34e1efd2e779f37e2f0295705e329257b4e590e541ec2b5b636699af82fd2d0936d26388964f33e62394a5c53b360b913b7e294f98e0425d9f839653e67e33105960caada1ed0c73fcfe306a60b024030bfa61d251a5aa608bb0492e90f93373bdf0e4caf2284223f15fd52dbba0e57328495a7ebf15c529dfb484b0f2b8f895a2fbb631efd6612c33f8907e21b4286b06afd64b2d98192f64d99209f8fd6d075418cd0fd83e2bcc848261a932e7978119d1e68457a63c48547fad1cefbf8e70a87e950be3b7ae58182514f61fca76a42a5761ae75c1241241e1d0a4a7b66f7d23d94131b760e28c6a04451197e4998349c5d61dc975e3180a4033f0d5e705881212399aa0b02f509ad2e5da1851aa10cb8e4e594c60aae709181c85791d91bb6d7ea653b9155c7b2b697c700f7d0f3f27f1b3f147e16817aa13f1c9d2e49ab524d7676a08e0119870b30713b27515169f6e51eea0c68462d360252a359a83ede32875cb3307337033546df07e4b917053faa246ad9ff84c67c635a655768b34a6980518135d61556bb427286861af9c22b8489c47b99d8f00a52e75a9e5193bfb3bb74ba9dbf02a0796f7461a4aab4b36abb9fc9cdf3afa9f86544ae41953f8e05bed8e55e3f6ee6f760065074565f02a8da27668147ab60af125ebda1c03835c5b5812842ae73f4d79fa5071ea4311c48efb8f4df10f9ef1d8fcee366139fd00eb8ca886ea11bad8dca28ac42b752cb7c83d96f7d4489c970f5f31bf9d8293a08587c0f0d27ddf8c098b77c608afa1274aa76bdbddc373357f6ce24382b1d0b28f809e6b53da7ff231b1e81215b1407cfd5e338c887d46e742ac99b8a4a24a088f3149589434b37578e0836cc7f238d3740dc7a75e6296e6dd03f0fdab54d842b7834885e1861bd11d9b70dc6117b6a2dfd7ae0855bb00d902180d969b72090cfd55fa89443d9a7d310f9f35dde815265d1e08e1444c7bda40c5984f4dbe594c1b76ac14ef032c4a64b41ffbc99c8c323adaac942b0dc6a2e436f31e0fdb18ebd0bf825cc930bea", 0x1000}, {&(0x7f0000001140)="7aff2770a2332a685aaad4a4c08df83e35ddee1973a818ed3cd79cd841153723fd5cdf243dee77fd45ec322663a85e9924a42ac1dab5cd4215ea62c50c1bbf56f0c3641aceb0233fd8224f4bfc16cae333e3585d37a787c5eccce6a3d777a9104d6ed05fb9698ad4a145e6bd4b0362287cf17add352a697fee3bbd90829dd1cb4eb52c56dd846d88da9f37b4dcb820e59a0fe835fb789d7b6dcf3c98e00534d036dfcda7cca06b8db29edf9203fd2d76e5577263c9e1a39e08e19ee2bb3d015ca72aba211675edc06b11db7110aa26b3539b9cbdb4dac18410024c48fd0484143d3d0ce1253ee52244c1d3b7af2701b1996770e432", 0xf5}, {&(0x7f0000001240)="e0a0570798aca0c9f54cd9bfdc1347cf74bfa583153dd11293cb92e6235ea7e50619ac751e300259e3df92a2842e", 0x2e}, {&(0x7f0000001280)="2f8646d1a75ae664939b6d2afcc65d5b845a191ec3afae0d7a042d69b4dc33c35c95c2751f797cf8b0fb99e084324b82879544239bbcd201d71474a5275f7ba5fdc5d6c067468c77600ea06e723412434261944a162b0f6b3444465ab803d9fd33c487007790edc526df665f35007d95027d307475709d46240afaaaa5ee5a394a066ff0d6d4590861fcd9cfc5aa5242f045dfb61e1caf98416b79339ec4db668fb50c56e6069de7f24f5aa90a89834aaf5c12c89eb35c80d2be2a", 0xbb}], 0x5, &(0x7f00000013c0)=[@init={0x18, 0x84, 0x0, {0x2, 0x3, 0x5, 0x7f}}, @authinfo={0x18, 0x84, 0x6, {0xfff}}, @init={0x18, 0x84, 0x0, {0x3, 0xc0, 0x7, 0x7}}, @init={0x18, 0x84, 0x0, {0x25a, 0x3, 0x2, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @init={0x18, 0x84, 0x0, {0x2, 0x1, 0x3}}], 0x98, 0x4000000}, 0x8000) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x3, 0x5, 0x40, 0x67, 0x0, 0x6, 0x1, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0x45, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x8, 0x9, 0x6b2a, 0x400, 0x1000}}}}}, 0x0) 3.761226582s ago: executing program 1 (id=2285): eventfd2(0x6, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000070000008500000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x4, 0x29b) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x40007, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x200, '\x00', r5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f00000000000200", @ANYRES64=0x0], 0x20) 3.651527368s ago: executing program 3 (id=2286): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb6c, 0x40, 0x3, 0x12d}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef000000000000000800"], 0x34}, 0x1, 0x0, 0x0, 0x24084854}, 0x400c810) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000019"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) pread64(r5, &(0x7f0000000040)=""/138, 0x8a, 0x7) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) pselect6(0x40, &(0x7f0000000400)={0xffffffffffffff81, 0x600, 0x100000001, 0x26, 0xffffffff, 0x7, 0x400, 0x7}, &(0x7f0000000440)={0x2, 0x2f, 0x75, 0x2, 0xffff, 0x800, 0x5, 0xffffffffffffff81}, &(0x7f0000000480)={0x800000000, 0x7, 0x1, 0xfff, 0x2, 0x8, 0x68, 0x400}, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0x100000001]}, 0x8}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 2.818560809s ago: executing program 2 (id=2287): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x4000000}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000002540)=""/197, 0xc5}], 0x1) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.730648897s ago: executing program 1 (id=2288): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x48084}, 0x2404c800) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x248c4}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.076462546s ago: executing program 0 (id=2289): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0xfffe, 0x0, @mcast2}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0000000210001000000000004000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000010a010100000000000000000000000000000000000000060000000080000000000000003c000000000000000a000a00"/79], 0xa0}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="18000071a10bb22e61992a378be3d3879500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r12, 0xc048aec8, &(0x7f00000005c0)={0x20000005}) 1.951909551s ago: executing program 4 (id=2290): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001e00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x24000005) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r7, 0x5418, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, {0xa, 0x0, 0x0, @loopback, 0xf}}}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 1.538101362s ago: executing program 0 (id=2291): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x151) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0xa927, 0x2, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8841) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x1200, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x2000989, 0x0, 0x11}, 0x9c) socket(0x12, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) 987.190458ms ago: executing program 3 (id=2292): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 933.380212ms ago: executing program 2 (id=2293): socket$inet_smc(0x2b, 0x1, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000002180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x5, 0xa, "09df168a00000000"}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x8, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0x7, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x7, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfd}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x401}, {}, 0x4}, {{@in6=@empty, 0x404d3, 0x2b}, 0xa, @in=@empty, 0x0, 0x0, 0x3, 0x0, 0xac9}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000006c07"], 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 872.010321ms ago: executing program 3 (id=2294): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000000000000000181200c0", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 858.381985ms ago: executing program 0 (id=2295): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="44010000c5d618583572dd265bf2aced90cdba4841dfa93b83b2950700a0d57e5df96d3066b2a74e7afe78ef", @ANYRES16=0x0, @ANYBLOB="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"], 0x144}}, 0x20000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_io_uring_setup(0xc56, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x100, 0x1}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x25}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendto$inet6(r5, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000400"/15], 0x48) mmap(&(0x7f000039c000/0x6000)=nil, 0x6000, 0x4, 0xab9f1d0e47981691, r5, 0x2c9ab000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x24}) 650.610547ms ago: executing program 3 (id=2296): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc000) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xcef, @rand_addr=' \x01\x00', 0x1000002}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x40000000015, 0x805, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="9bc3"], 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000100)) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r10, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) sendmsg$NFT_BATCH(r1, 0x0, 0x4048010) pread64(r0, 0x0, 0x0, 0x4000000000000f3) 578.77368ms ago: executing program 1 (id=2297): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000480), 0x40000024a7, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x7, 0x8) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x1002, 0x9, 0x7, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x4, 0xffffffffffffffff, 0x2000000000000000, 0xcb9, 0x92], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r8) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x2048804) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000001c0)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 0 (id=2298): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x0, 0x3, 0x1c, 0x5, 0x2, 0x4e, 0x4, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000000}, {0x6, 0x80, 0x8, 0xc4, 0x4, 0x7, 0x6, 0xf1, 0x7, 0xff, 0x41, 0xfd, 0xfffffffffffffffb}, {0xe2a5, 0x4, 0x1, 0x9, 0x7, 0x4, 0x8, 0xb, 0xff, 0x6, 0x3, 0x3, 0xb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x4, 0x80000000, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3efd}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x3, 0xffffffffffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xd1, &(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) kernel console output (not intermixed with test programs): 02 val 2600 [ 584.375073][ T1209] pwc: recv_control_msg error -71 req 02 val 2900 [ 584.380382][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.398600][T12688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.398764][ T5884] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 584.418446][ T1209] pwc: recv_control_msg error -71 req 02 val 2800 [ 584.425019][ T5884] cdc_wdm 1-1:1.0: Unknown control protocol [ 584.431447][ T1209] pwc: recv_control_msg error -71 req 04 val 1100 [ 584.444317][T12688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.452558][ T1209] pwc: recv_control_msg error -71 req 04 val 1200 [ 584.466917][ T1209] pwc: Registered as video103. [ 584.475761][T12702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1846'. [ 584.486045][ T1209] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 584.521807][T12702] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 584.529657][T12702] netlink: 'syz.3.1846': attribute type 3 has an invalid length. [ 584.537805][T12702] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1846'. [ 584.702557][ T1209] usb 5-1: USB disconnect, device number 56 [ 585.177904][ T5876] usb 1-1: USB disconnect, device number 59 [ 585.200168][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.241301][T12712] kvm: pic: non byte write [ 585.450645][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.577645][ T30] audit: type=1400 audit(1760423044.629:1450): avc: denied { write } for pid=12723 comm="syz.0.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 585.634966][ T30] audit: type=1400 audit(1760423044.659:1451): avc: denied { map } for pid=12723 comm="syz.0.1850" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 585.914840][ T5891] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 585.966821][ T30] audit: type=1400 audit(1760423045.019:1452): avc: denied { accept } for pid=12734 comm="syz.1.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 586.084776][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 586.124476][ T5891] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.164878][ T5891] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.187791][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 586.205415][ T5891] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 586.229609][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.233767][T12740] kvm: pic: non byte write [ 586.465542][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.238441][ T5891] usb 3-1: config 0 descriptor?? [ 587.763289][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.931347][T12749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1860'. [ 588.046655][T12749] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 588.054812][T12749] netlink: 'syz.0.1860': attribute type 3 has an invalid length. [ 588.063424][T12749] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1860'. [ 588.176762][ T5891] hid (null): report_id 4212356190 is invalid [ 588.182944][ T5891] hid (null): unknown global tag 0x2c [ 588.188866][ T5891] hid (null): invalid report_count 53475 [ 588.194576][ T5891] hid (null): global environment stack underflow [ 588.201534][ T5891] hid (null): invalid report_count 53042 [ 588.209431][ T5891] hid (null): unknown global tag 0xd [ 588.215860][ T5891] hid (null): unknown global tag 0xe [ 588.666909][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.785152][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.804549][T12764] nbd: must specify a size in bytes for the device [ 588.813303][ T5876] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 589.076289][ T5876] usb 2-1: config 0 has an invalid interface number: 91 but max is 0 [ 589.095071][ T5876] usb 2-1: config 0 has no interface number 0 [ 589.102981][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16 [ 589.114806][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.139072][ T5876] usb 2-1: Product: syz [ 589.144753][ T5876] usb 2-1: Manufacturer: syz [ 589.153500][ T5876] usb 2-1: SerialNumber: syz [ 589.168528][ T5876] usb 2-1: config 0 descriptor?? [ 589.250744][ T30] audit: type=1400 audit(1760423048.299:1453): avc: denied { wake_alarm } for pid=12783 comm="syz.4.1872" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.287117][T12784] xt_connbytes: Forcing CT accounting to be enabled [ 589.294045][T12784] set match dimension is over the limit! [ 589.380808][ T5891] usb 3-1: USB disconnect, device number 67 [ 589.879609][T12755] sit1: entered allmulticast mode [ 589.885186][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.055646][T12797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1873'. [ 590.071044][T12797] netlink: 'syz.2.1873': attribute type 1 has an invalid length. [ 590.078926][T12797] netlink: 'syz.2.1873': attribute type 3 has an invalid length. [ 590.087353][T12797] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1873'. [ 591.031735][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.050268][ T7468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.062189][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.072458][ T1056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.108738][ T5929] usb 2-1: USB disconnect, device number 48 [ 591.163422][ T30] audit: type=1400 audit(1760423050.189:1454): avc: denied { mount } for pid=12807 comm="syz.3.1878" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 591.384514][ T30] audit: type=1400 audit(1760423050.419:1455): avc: denied { write } for pid=12811 comm="syz.2.1880" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 591.556614][T12812] ubi31: detaching mtd0 [ 591.566624][T12812] ubi31: mtd0 is detached [ 591.676821][ T30] audit: type=1400 audit(1760423050.729:1456): avc: denied { getopt } for pid=12814 comm="syz.0.1882" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 591.700678][T12828] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.1884'. [ 591.710217][T12828] openvswitch: netlink: Missing key (keys=40, expected=80) [ 591.744872][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.976415][T12830] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 592.620793][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.822926][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.884592][ T30] audit: type=1400 audit(1760423052.929:1457): avc: denied { connect } for pid=12846 comm="syz.4.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 594.132471][T12855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1893'. [ 594.784895][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.900385][ T1056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.904788][ T5929] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 594.954795][ T5884] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 595.135450][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 595.140578][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 595.151011][ T5929] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 595.151182][ T5884] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 595.167850][ T5929] usb 4-1: config 0 has no interface number 0 [ 595.173944][ T5929] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 595.194872][ T5884] usb 2-1: config 0 has no interface number 0 [ 595.201429][ T5929] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32800, setting to 1024 [ 595.244972][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 595.272612][ T5929] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 595.284335][ T5884] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32800, setting to 1024 [ 595.295890][ T30] audit: type=1400 audit(1760423054.329:1458): avc: denied { ioctl } for pid=12869 comm="syz.4.1898" path="socket:[39582]" dev="sockfs" ino=39582 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 595.322296][ T5929] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 595.333405][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 595.346257][ T5929] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 595.356195][ T5884] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 595.367698][ T5929] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 595.384919][ T5884] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 595.404797][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 595.416373][T12872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.418125][ T5929] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 595.435429][ T5884] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 595.444468][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.452928][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.463349][ T5929] usb 4-1: config 0 descriptor?? [ 595.477466][ T5929] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 595.488467][ T5884] usb 2-1: config 0 descriptor?? [ 595.518593][ T5884] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 596.437591][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.780131][T12881] loop3: detected capacity change from 0 to 7 [ 596.800456][T12881] Dev loop3: unable to read RDB block 7 [ 596.808047][T12881] loop3: unable to read partition table [ 596.813950][T12881] loop3: partition table beyond EOD, truncated [ 596.820801][T12881] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 596.833774][ T5869] usb 4-1: USB disconnect, device number 48 [ 597.090479][ T5869] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 597.192874][ T5884] usb 2-1: USB disconnect, device number 49 [ 597.212713][ T5884] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 597.213506][T12884] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1901'. [ 597.279327][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 597.295167][T12884] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1901'. [ 597.328705][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 597.365175][T12884] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1901'. [ 597.521005][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.008821][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.561274][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.654017][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.066856][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.421771][ T30] audit: type=1400 audit(1760423059.449:1459): avc: denied { open } for pid=12912 comm="syz.3.1909" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 600.445510][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.945608][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 601.184639][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.664942][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.896839][T12936] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1914'. [ 602.200344][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 602.359822][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.377730][T12936] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1914'. [ 602.412951][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 602.428040][T12936] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1914'. [ 602.791353][T12952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1916'. [ 603.033139][ T5876] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 603.188430][T12954] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 603.196491][T12954] netlink: 'syz.0.1917': attribute type 3 has an invalid length. [ 603.204355][T12954] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1917'. [ 603.728754][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 603.731216][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.737684][ T5876] usb 4-1: config 192 has too many interfaces: 108, using maximum allowed: 32 [ 603.793064][ T5876] usb 4-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 603.835615][ T5876] usb 4-1: config 192 has 0 interfaces, different from the descriptor's value: 108 [ 603.955881][ T5876] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 603.967092][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.884163][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.907008][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.985623][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.075808][ T30] audit: type=1400 audit(1760423064.894:1460): avc: denied { read } for pid=12972 comm="syz.1.1925" path="socket:[40288]" dev="sockfs" ino=40288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 606.099534][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.158635][T12976] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 606.252624][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1925'. [ 606.530288][ T30] audit: type=1400 audit(1760423065.315:1461): avc: denied { write } for pid=12972 comm="syz.1.1925" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 607.168894][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.218351][ T5876] usb 4-1: string descriptor 0 read error: -71 [ 607.249582][ T5876] usb 4-1: USB disconnect, device number 49 [ 607.725539][T12990] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1929'. [ 607.903971][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 608.001921][T12994] loop3: detected capacity change from 0 to 7 [ 608.027032][T12990] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1929'. [ 608.031680][T12994] Dev loop3: unable to read RDB block 7 [ 608.044049][T12994] loop3: unable to read partition table [ 608.050017][T12994] loop3: partition table beyond EOD, truncated [ 608.056264][T12994] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 608.066597][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 608.076692][T12990] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1929'. [ 608.112321][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.123412][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 608.157303][T12998] netlink: 'syz.4.1932': attribute type 1 has an invalid length. [ 608.165226][T12998] netlink: 'syz.4.1932': attribute type 3 has an invalid length. [ 608.173032][T12998] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1932'. [ 608.287877][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.445333][T13000] nbd: must specify a size in bytes for the device [ 609.770832][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.779292][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.797564][T13024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1935'. [ 609.909890][T13025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1940'. [ 610.031935][ T5876] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 610.209200][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.221175][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.279181][ T5876] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 611.017070][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.072529][ T5929] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 611.094734][T13037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1942'. [ 611.207679][T13037] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 611.216901][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.250745][ T5876] usb 3-1: config 0 descriptor?? [ 611.254390][T13037] netlink: 'syz.4.1942': attribute type 3 has an invalid length. [ 611.264051][T13037] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1942'. [ 611.371961][ T5929] usb 4-1: device descriptor read/64, error -71 [ 612.023975][ T5929] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 612.135777][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.185579][ T5929] usb 4-1: device descriptor read/64, error -71 [ 612.219646][T13048] loop2: detected capacity change from 0 to 7 [ 612.231801][ T6016] Dev loop2: unable to read RDB block 7 [ 612.237431][ T6016] loop2: AHDI p1 p2 p3 [ 612.324667][ T5929] usb usb4-port1: attempt power cycle [ 612.354152][ T6016] loop2: partition table partially beyond EOD, truncated [ 612.375626][ T6016] loop2: p1 start 1601398130 is beyond EOD, truncated [ 612.396335][ T6016] loop2: p2 start 1702059890 is beyond EOD, truncated [ 612.408645][T13048] Dev loop2: unable to read RDB block 7 [ 612.415338][T13048] loop2: AHDI p1 p2 p3 [ 612.442269][T13048] loop2: partition table partially beyond EOD, truncated [ 612.466996][T13048] loop2: p1 start 1601398130 is beyond EOD, truncated [ 612.498208][T13048] loop2: p2 start 1702059890 is beyond EOD, truncated [ 612.671829][ T5876] usbhid 3-1:0.0: can't add hid device: -71 [ 612.731910][ T5929] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 612.758594][ T5876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 612.820257][ T5929] usb 4-1: device descriptor read/8, error -71 [ 612.827150][ T5876] usb 3-1: USB disconnect, device number 68 [ 612.906109][T13062] netlink: 'syz.1.1948': attribute type 1 has an invalid length. [ 612.914317][T13062] netlink: 'syz.1.1948': attribute type 3 has an invalid length. [ 613.072073][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.189222][ T5929] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 613.251421][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.302341][ T5929] usb 4-1: device descriptor read/8, error -71 [ 613.884286][ T5929] usb usb4-port1: unable to enumerate USB device [ 614.354891][ T1056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.113499][ T5892] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 615.696431][ T1056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.796874][T13091] kvm: pic: non byte write [ 615.861900][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 615.877699][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 615.897926][ T5892] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 615.909575][T13111] xt_policy: output policy not valid in PREROUTING and INPUT [ 615.927138][ T5892] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 615.943421][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.966576][ T5892] usb 3-1: Product: syz [ 616.049566][ T5892] usb 3-1: Manufacturer: syz [ 616.071929][ T5892] usb 3-1: SerialNumber: syz [ 616.345526][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.380373][T13118] __nla_validate_parse: 8 callbacks suppressed [ 616.380397][T13118] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1963'. [ 616.460662][ T5892] usb 3-1: Cannot retrieve CPort count: -71 [ 616.471603][ T5892] usb 3-1: Cannot retrieve CPort count: -71 [ 616.550954][ T5892] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 616.761049][ T5892] usb 3-1: USB disconnect, device number 69 [ 616.773056][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 616.793446][ T5828] udevd[5828]: setting owner of /dev/bus/usb/003/069 to uid=0, gid=0 failed: No such file or directory [ 616.818589][T13126] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 616.826473][T13126] netlink: 'syz.4.1964': attribute type 3 has an invalid length. [ 616.836965][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.847146][T13126] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1964'. [ 617.764260][ T5892] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 618.074709][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.097093][ T5892] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 618.104411][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 618.182008][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 618.214970][ T5892] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 618.225007][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.238463][ T5892] usb 2-1: Product: syz [ 618.242673][ T5892] usb 2-1: Manufacturer: syz [ 618.256023][ T5892] usb 2-1: SerialNumber: syz [ 618.262974][ T5892] usb 2-1: config 0 descriptor?? [ 618.274005][ T5892] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 618.557089][ T30] audit: type=1400 audit(1760423332.567:1462): avc: denied { write } for pid=13141 comm="syz.0.1969" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 618.602053][ T5892] usb 2-1: USB disconnect, device number 50 [ 618.966797][T13153] 9pnet_virtio: no channels available for device 127.0.0.1 [ 619.322263][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.331521][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.339980][ T1056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.469281][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.570281][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.579449][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.588123][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.861444][T13157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1972'. [ 620.185353][T13159] netlink: 'syz.4.1973': attribute type 4 has an invalid length. [ 620.266083][T13161] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1974'. [ 620.309261][T13161] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 620.376509][ T30] audit: type=1400 audit(1760423334.271:1463): avc: denied { mount } for pid=13160 comm="syz.1.1974" name="/" dev="rpc_pipefs" ino=41069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 620.542730][ T30] audit: type=1400 audit(1760423334.308:1464): avc: denied { getopt } for pid=13160 comm="syz.1.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 620.677720][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 621.461092][ T5876] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 621.536560][ T5869] net_ratelimit: 2 callbacks suppressed [ 621.536579][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.825525][T13186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1979'. [ 621.911671][ T30] audit: type=1400 audit(1760423335.693:1465): avc: denied { append } for pid=13183 comm="syz.1.1980" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 621.913144][ T5876] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.913172][ T5876] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 621.913187][ T5876] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.915919][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.915941][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.915954][ T5876] usb 3-1: Product: syz [ 621.915967][ T5876] usb 3-1: Manufacturer: syz [ 621.915981][ T5876] usb 3-1: SerialNumber: syz [ 621.921974][ T5876] cdc_mbim 3-1:1.0: skipping garbage [ 621.990377][T13181] tmpfs: Unknown parameter 'nr_blo' [ 622.003682][T13181] mkiss: ax0: crc mode is auto. [ 622.046717][ T30] audit: type=1400 audit(1760423335.815:1466): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 622.086389][T13189] loop5: detected capacity change from 0 to 524255232 [ 622.143972][T13179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 622.150276][ T30] audit: type=1400 audit(1760423335.927:1467): avc: denied { ioctl } for pid=13188 comm="syz.3.1981" path="socket:[41112]" dev="sockfs" ino=41112 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 622.151285][ T30] audit: type=1400 audit(1760423335.927:1468): avc: denied { write } for pid=13188 comm="syz.3.1981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 622.151331][ T30] audit: type=1400 audit(1760423335.927:1469): avc: denied { read } for pid=13188 comm="syz.3.1981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 622.263095][ T5884] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 622.340779][T13189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13189 comm=syz.3.1981 [ 622.341184][T13189] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1981'. [ 622.395428][ T5876] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 622.395490][ T5876] cdc_mbim 3-1:1.0: bind() failure [ 622.458028][ T5876] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 622.829868][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.837994][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.039906][ T5876] cdc_ncm 3-1:1.1: bind() failure [ 623.046759][ T5884] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 623.057473][ T5884] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 623.067922][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.088966][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.098276][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.109051][ T5884] usb 2-1: Product: 昨ݯ [ 623.119272][ T5884] usb 2-1: Manufacturer: ች瑠料ꤷﶡ๾ᜬ胈䱔⮳䄧Ὡꢉ鯑ï¦î ê± ï´£æ™†éž²î„¸á¹Ÿá®¸ê« à®“껸쉛஢í æ‰‰ïˆ›é¤¶Í”㻇않푤闃㯀ã¢ä‘‰æŠ«ïµ“ÿ湅⻶眳鈊툠ꯞì¶ê‹žá¾ ç«¨ [ 623.220161][ T5892] usb 3-1: USB disconnect, device number 70 [ 623.741778][ T30] audit: type=1400 audit(1760423337.425:1470): avc: denied { ioctl } for pid=13183 comm="syz.1.1980" path="socket:[41101]" dev="sockfs" ino=41101 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 623.801952][ T5884] usb 2-1: 0:2 : does not exist [ 623.814847][ T30] audit: type=1400 audit(1760423337.453:1471): avc: denied { ioctl } for pid=13183 comm="syz.1.1980" path="/dev/usbmon8" dev="devtmpfs" ino=740 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 623.840283][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.921117][T13215] tipc: Cannot configure node identity twice [ 624.212600][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.637721][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 624.637770][ T30] audit: type=1400 audit(1760423338.248:1473): avc: denied { ioctl } for pid=13212 comm="syz.4.1987" path="socket:[41171]" dev="sockfs" ino=41171 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 624.839012][ T5884] usb 2-1: USB disconnect, device number 51 [ 624.960904][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.275766][ T30] audit: type=1400 audit(1760423338.838:1474): avc: denied { map } for pid=13217 comm="syz.3.1988" path="socket:[41175]" dev="sockfs" ino=41175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 625.378957][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.485637][T13225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1990'. [ 625.511453][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.518149][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.547492][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.557537][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.571557][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.611254][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.633767][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.657629][ T30] audit: type=1400 audit(1760423338.838:1475): avc: denied { read } for pid=13217 comm="syz.3.1988" path="socket:[41175]" dev="sockfs" ino=41175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 626.714291][T13240] 9pnet_virtio: no channels available for device 127.0.0.1 [ 626.801962][T13241] tipc: Cannot configure node identity twice [ 627.017346][ T5934] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 627.178726][T13250] net_ratelimit: 2 callbacks suppressed [ 627.178744][T13250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.193455][T13250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.202046][T13250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.217880][T13250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.235449][T13250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.244600][T13250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.253707][T13250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.263193][T13250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.289139][T13250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.348863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.590804][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 627.610672][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.632446][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.642331][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'. [ 627.651923][ T5934] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 627.661898][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 627.672888][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.695145][T13254] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 627.701829][ T5934] usb 4-1: config 0 descriptor?? [ 627.855709][ T30] audit: type=1400 audit(1760423341.271:1476): avc: denied { create } for pid=13253 comm="syz.4.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 627.913555][T13258] bond0: (slave gretap1): making interface the new active one [ 628.002376][T13258] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 628.015567][ T30] audit: type=1400 audit(1760423341.299:1477): avc: denied { write } for pid=13253 comm="syz.4.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 628.132592][T13264] tipc: Cannot configure node identity twice [ 629.064881][ T5934] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 629.644542][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 629.824948][T13270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2002'. [ 629.877788][ T5892] usb 4-1: USB disconnect, device number 54 [ 629.902238][ T1056] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 630.074315][ T1056] usb 3-1: not running at top speed; connect to a high speed hub [ 630.097598][ T1056] usb 3-1: config 1 has an invalid interface number: 4 but max is 2 [ 630.107659][ T1056] usb 3-1: config 1 has no interface number 1 [ 630.142661][ T1056] usb 3-1: too many endpoints for config 1 interface 4 altsetting 4: 33, using maximum allowed: 30 [ 630.154571][ T1056] usb 3-1: config 1 interface 4 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 630.175317][T13270] batman_adv: batadv0: Adding interface: ipvlan2 [ 630.178148][ T1056] usb 3-1: config 1 interface 4 has no altsetting 0 [ 630.192699][ T1056] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 630.201354][T13270] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.215108][ T1056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.239450][ T1056] usb 3-1: Product: syz [ 630.243675][ T1056] usb 3-1: Manufacturer: syz [ 630.248650][ T1056] usb 3-1: SerialNumber: syz [ 630.259110][T13270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.284274][T13270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.296353][T13270] batman_adv: batadv0: Interface activated: ipvlan2 [ 630.506753][T13282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2004'. [ 630.533587][ T1056] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 630.676893][ T1056] usb 3-1: USB disconnect, device number 71 [ 630.772406][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.995763][T13288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2007'. [ 631.112438][ T30] audit: type=1400 audit(1760423344.322:1478): avc: denied { ioctl } for pid=13287 comm="syz.4.2007" path="socket:[41366]" dev="sockfs" ino=41366 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 631.121057][T13289] netlink: 'syz.4.2007': attribute type 10 has an invalid length. [ 631.170147][T13289] : (slave wlan1): Error -22 calling dev_set_mtu [ 631.865200][ T30] audit: type=1400 audit(1760423344.603:1479): avc: denied { accept } for pid=13292 comm="syz.0.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 631.993961][ T30] audit: type=1400 audit(1760423345.137:1480): avc: denied { write } for pid=13287 comm="syz.4.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 632.450322][ T30] audit: type=1400 audit(1760423345.174:1481): avc: denied { nlmsg_write } for pid=13287 comm="syz.4.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 632.614278][ T30] audit: type=1400 audit(1760423345.174:1482): avc: denied { audit_write } for pid=13287 comm="syz.4.2007" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 632.636214][ T30] audit: type=1107 audit(1760423345.174:1483): pid=13287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 633.172050][ T5869] net_ratelimit: 16 callbacks suppressed [ 633.172070][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.281837][T13309] tipc: Cannot configure node identity twice [ 634.371681][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.424101][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.470254][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.854071][ T5884] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 636.058143][ T5884] usb 3-1: config 0 has no interfaces? [ 636.076781][ T5884] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 636.176364][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.228630][ T5884] usb 3-1: Product: syz [ 636.237291][ T5884] usb 3-1: Manufacturer: syz [ 636.242270][ T5884] usb 3-1: SerialNumber: syz [ 636.807470][ T5884] usb 3-1: config 0 descriptor?? [ 636.847782][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.041902][T13323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.061885][T13323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.072808][T13323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.081267][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.099443][T13323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.192156][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.326208][ T5934] usb 3-1: USB disconnect, device number 72 [ 637.948319][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.134803][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.213675][ T30] audit: type=1400 audit(1760423350.958:1484): avc: denied { read } for pid=13368 comm="syz.3.2027" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 638.520170][ T30] audit: type=1400 audit(1760423350.958:1485): avc: denied { open } for pid=13368 comm="syz.3.2027" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 638.663853][ T30] audit: type=1400 audit(1760423351.005:1486): avc: denied { ioctl } for pid=13368 comm="syz.3.2027" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 638.706886][T13376] bad cache= option: noneê [ 638.706886][T13376] [ 638.772991][T13380] FAULT_INJECTION: forcing a failure. [ 638.772991][T13380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.786243][T13380] CPU: 1 UID: 0 PID: 13380 Comm: syz.4.2029 Not tainted syzkaller #0 PREEMPT(full) [ 638.786267][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 638.786278][T13380] Call Trace: [ 638.786286][T13380] [ 638.786293][T13380] dump_stack_lvl+0x16c/0x1f0 [ 638.786319][T13380] should_fail_ex+0x512/0x640 [ 638.786345][T13380] strncpy_from_user+0x3b/0x2e0 [ 638.786368][T13380] getname_flags.part.0+0x8f/0x550 [ 638.786391][T13380] getname_flags+0x93/0xf0 [ 638.786416][T13380] user_path_at+0x24/0x60 [ 638.786439][T13380] __x64_sys_mount+0x1fb/0x310 [ 638.786466][T13380] ? __pfx___x64_sys_mount+0x10/0x10 [ 638.786499][T13380] do_syscall_64+0xcd/0xfa0 [ 638.786522][T13380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.786540][T13380] RIP: 0033:0x7f201df8eec9 [ 638.786554][T13380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.786572][T13380] RSP: 002b:00007f201ee2a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 638.786590][T13380] RAX: ffffffffffffffda RBX: 00007f201e1e6180 RCX: 00007f201df8eec9 [ 638.786602][T13380] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 00002000000000c0 [ 638.786613][T13380] RBP: 00007f201ee2a090 R08: 0000000000000000 R09: 0000000000000000 [ 638.786624][T13380] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 638.786634][T13380] R13: 00007f201e1e6218 R14: 00007f201e1e6180 R15: 00007fff2f886de8 [ 638.786659][T13380] [ 638.995901][T13376] CIFS: VFS: bad cache= option: noneê [ 639.235542][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.286486][ T5884] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 640.714266][T13395] orangefs_mount: mount request failed with -4 [ 640.832847][ T5869] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 640.993125][ T5954] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 641.004030][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 641.010180][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.030622][ T5869] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 641.046492][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 641.047200][ T5869] usb 4-1: config 0 has no interface number 0 [ 641.052910][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 641.068151][ T5869] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 641.068741][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.089153][ T5884] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 641.090642][ T5869] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32800, setting to 1024 [ 641.140597][ T5869] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 641.174156][ T5869] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 641.191550][ T5869] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 641.211869][ T5954] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 641.230681][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.239575][ T5869] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 641.254987][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.263695][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 641.275264][ T5884] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 641.285650][ T5884] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 641.291967][ T5954] usb 2-1: Product: syz [ 641.311984][ T5869] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 641.313611][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.324353][ T5954] usb 2-1: Manufacturer: syz [ 641.344890][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.345536][ T5884] usb 3-1: config 0 descriptor?? [ 641.353841][ T5954] usb 2-1: SerialNumber: syz [ 641.366147][ T5954] usb 2-1: config 0 descriptor?? [ 641.375132][ T5869] usb 4-1: config 0 descriptor?? [ 641.391616][T13381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 641.410855][ T5954] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 052 [ 641.422677][ T5869] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 641.431424][T13407] kvm: pic: non byte write [ 641.645475][ T1056] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 641.816125][ T1056] usb 1-1: Using ep0 maxpacket: 8 [ 641.836857][ T1056] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 641.847372][ T1056] usb 1-1: config 0 has no interface number 0 [ 641.883487][ T5954] (null): failure reading functionality [ 641.907175][ T1056] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 641.945388][ T5954] i2c i2c-1: failure reading functionality [ 641.973928][ T1056] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32800, setting to 1024 [ 642.009261][ T5954] i2c i2c-1: connected i2c-tiny-usb device [ 642.028375][ T1056] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 642.055197][ T5954] usb 2-1: USB disconnect, device number 52 [ 642.084279][ T1056] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 642.119328][ T1056] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 642.136791][ T1056] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 642.136841][ T5884] usb 4-1: USB disconnect, device number 55 [ 642.156559][ T1056] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 642.166515][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.176119][ T5884] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 642.181413][ T1056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.197360][ T1056] usb 1-1: config 0 descriptor?? [ 642.215271][ T1056] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 642.263749][ T5934] usb 3-1: USB disconnect, device number 73 [ 642.265777][ T5820] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 642.487522][ T30] audit: type=1400 audit(1760423354.954:1487): avc: denied { override_creds } for pid=13410 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 642.507513][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.252855][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.425999][ T5884] usb 1-1: USB disconnect, device number 60 [ 643.437687][ T5884] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 644.156167][T13434] FAULT_INJECTION: forcing a failure. [ 644.156167][T13434] name failslab, interval 1, probability 0, space 0, times 0 [ 644.169002][T13434] CPU: 0 UID: 0 PID: 13434 Comm: syz.3.2042 Not tainted syzkaller #0 PREEMPT(full) [ 644.169026][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.169042][T13434] Call Trace: [ 644.169048][T13434] [ 644.169056][T13434] dump_stack_lvl+0x16c/0x1f0 [ 644.169081][T13434] should_fail_ex+0x512/0x640 [ 644.169103][T13434] ? fs_reclaim_acquire+0xae/0x150 [ 644.169131][T13434] should_failslab+0xc2/0x120 [ 644.169157][T13434] __kmalloc_noprof+0xdd/0x880 [ 644.169177][T13434] ? tomoyo_encode2+0x100/0x3e0 [ 644.169205][T13434] ? tomoyo_encode2+0x100/0x3e0 [ 644.169228][T13434] tomoyo_encode2+0x100/0x3e0 [ 644.169250][T13434] ? trace_sched_exit_tp+0xd1/0x120 [ 644.169279][T13434] tomoyo_encode+0x29/0x50 [ 644.169301][T13434] tomoyo_mount_acl+0x144/0x850 [ 644.169323][T13434] ? __pfx___schedule+0x10/0x10 [ 644.169342][T13434] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 644.169367][T13434] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 644.169393][T13434] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 644.169442][T13434] ? tomoyo_mount_permission+0x2be/0x420 [ 644.169468][T13434] tomoyo_mount_permission+0x16d/0x420 [ 644.169490][T13434] ? tomoyo_mount_permission+0x14f/0x420 [ 644.169515][T13434] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 644.169554][T13434] security_sb_mount+0x9b/0x260 [ 644.169578][T13434] path_mount+0x158/0x23a0 [ 644.169610][T13434] ? __pfx_path_mount+0x10/0x10 [ 644.169637][T13434] ? kmem_cache_free+0x2d4/0x6c0 [ 644.169657][T13434] ? putname+0x154/0x1a0 [ 644.169689][T13434] ? putname+0x154/0x1a0 [ 644.169712][T13434] ? putname+0x154/0x1a0 [ 644.169742][T13434] ? __x64_sys_mount+0x293/0x310 [ 644.169765][T13434] __x64_sys_mount+0x293/0x310 [ 644.169791][T13434] ? __pfx___x64_sys_mount+0x10/0x10 [ 644.169825][T13434] do_syscall_64+0xcd/0xfa0 [ 644.169848][T13434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.169866][T13434] RIP: 0033:0x7f02d178eec9 [ 644.169881][T13434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.169898][T13434] RSP: 002b:00007f02d2694038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 644.169915][T13434] RAX: ffffffffffffffda RBX: 00007f02d19e6180 RCX: 00007f02d178eec9 [ 644.169927][T13434] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 00002000000000c0 [ 644.169939][T13434] RBP: 00007f02d2694090 R08: 0000000000000000 R09: 0000000000000000 [ 644.169949][T13434] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 644.169960][T13434] R13: 00007f02d19e6218 R14: 00007f02d19e6180 R15: 00007ffeac60d038 [ 644.169987][T13434] [ 644.424577][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.802817][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.931596][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.010708][T13442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2041'. [ 645.088107][T13442] netlink: 'syz.4.2041': attribute type 1 has an invalid length. [ 645.095928][T13442] netlink: 'syz.4.2041': attribute type 3 has an invalid length. [ 645.179203][T13442] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2041'. [ 646.069736][ T1056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.094709][T13449] orangefs_mount: mount request failed with -4 [ 646.290175][T13448] kvm: pic: non byte write [ 646.912530][ T5884] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 647.078453][T13474] input: syz0 as /devices/virtual/input/input28 [ 647.095844][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 647.111078][ T5884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 647.121746][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 647.137390][ T5884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 647.196787][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.208011][ T1209] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 647.225674][ T5884] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 647.243989][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.252920][ T5884] usb 2-1: Product: syz [ 647.257794][ T5884] usb 2-1: Manufacturer: syz [ 647.268372][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 647.277518][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2054'. [ 647.285291][ T1056] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 647.286617][ T5884] usb 2-1: SerialNumber: syz [ 647.288592][ T5884] usb 2-1: config 0 descriptor?? [ 647.313459][ T5884] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 647.404086][ T1209] usb 1-1: Using ep0 maxpacket: 8 [ 647.411682][ T1209] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 647.420541][ T1209] usb 1-1: config 0 has no interface number 0 [ 647.427064][ T1209] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 647.438691][ T1209] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32800, setting to 1024 [ 647.452849][ T1209] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 647.458722][ T1056] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 647.465283][ T1209] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 647.484143][ T1056] usb 3-1: config 1 has no interface number 0 [ 647.484160][ T1209] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 647.500610][ T1056] usb 3-1: config 1 interface 105 has no altsetting 0 [ 647.501093][ T1209] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 647.521444][ T1209] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 647.522870][ T1056] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 647.541335][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.817050][ T1056] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 647.895142][ T1209] usb 1-1: config 0 descriptor?? [ 647.926830][ T1056] usb 3-1: Product: syz [ 647.949627][ T1209] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 647.986031][ T1056] usb 3-1: Manufacturer: syz [ 648.000909][ T1056] usb 3-1: SerialNumber: syz [ 648.034622][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.082091][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'. [ 648.091094][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2055'. [ 648.293510][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.503601][ T5934] usb 1-1: USB disconnect, device number 61 [ 648.511870][ T5934] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 648.519893][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.549564][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.720292][ T5884] scsi host1: usb-storage 2-1:0.0 [ 648.790408][ T5884] usb 2-1: USB disconnect, device number 53 [ 648.861635][T13490] CUSE: info not properly terminated [ 648.906323][T13492] netlink: 'syz.1.2057': attribute type 15 has an invalid length. [ 648.971693][T13492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2057'. [ 649.522795][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.656617][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.759714][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 650.866075][ T1056] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 650.892202][ T1056] usb 3-1: USB disconnect, device number 74 [ 651.282748][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.052857][T13508] netlink: 'syz.3.2062': attribute type 1 has an invalid length. [ 652.062953][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 652.075924][T13508] netlink: 'syz.3.2062': attribute type 3 has an invalid length. [ 652.107216][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 652.117224][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.318816][T13523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 652.418224][T13527] lo: entered promiscuous mode [ 652.423050][T13527] lo: entered allmulticast mode [ 652.428655][T13527] tunl0: entered promiscuous mode [ 652.433733][T13527] tunl0: entered allmulticast mode [ 652.441011][T13527] gre0: entered promiscuous mode [ 652.446010][T13527] gre0: entered allmulticast mode [ 652.452041][T13527] gretap0: entered promiscuous mode [ 652.457299][T13527] gretap0: entered allmulticast mode [ 652.463383][T13527] erspan0: entered promiscuous mode [ 652.468667][T13527] erspan0: entered allmulticast mode [ 652.474541][T13527] ip_vti0: entered promiscuous mode [ 652.479805][T13527] ip_vti0: entered allmulticast mode [ 652.485794][T13527] ip6_vti0: entered promiscuous mode [ 652.491172][T13527] ip6_vti0: entered allmulticast mode [ 652.497125][T13527] sit0: entered promiscuous mode [ 652.502406][T13527] sit0: entered allmulticast mode [ 652.508055][T13527] ip6tnl0: entered promiscuous mode [ 652.513331][T13527] ip6tnl0: entered allmulticast mode [ 652.519204][T13527] ip6gre0: entered promiscuous mode [ 652.528880][T13527] ip6gre0: entered allmulticast mode [ 652.535028][T13527] syz_tun: entered promiscuous mode [ 652.540260][T13527] syz_tun: entered allmulticast mode [ 652.545979][T13527] ip6gretap0: entered promiscuous mode [ 652.551474][T13527] ip6gretap0: entered allmulticast mode [ 652.557444][T13527] bridge0: entered promiscuous mode [ 652.562654][T13527] bridge0: entered allmulticast mode [ 652.568387][T13527] vcan0: entered promiscuous mode [ 652.573413][T13527] vcan0: entered allmulticast mode [ 652.578912][T13527] bond0: entered promiscuous mode [ 652.583935][T13527] bond_slave_0: entered promiscuous mode [ 652.589684][T13527] bond_slave_1: entered promiscuous mode [ 652.595473][T13527] bond0: entered allmulticast mode [ 652.600626][T13527] bond_slave_0: entered allmulticast mode [ 652.606342][T13527] bond_slave_1: entered allmulticast mode [ 652.612608][T13527] team0: entered promiscuous mode [ 652.617647][T13527] C: entered promiscuous mode [ 652.622431][T13527] team_slave_1: entered promiscuous mode [ 652.628147][T13527] team0: entered allmulticast mode [ 652.633267][T13527] C: entered allmulticast mode [ 652.638023][T13527] team_slave_1: entered allmulticast mode [ 652.644365][T13527] dummy0: entered promiscuous mode [ 652.649741][T13527] dummy0: entered allmulticast mode [ 652.656578][T13527] nlmon0: entered promiscuous mode [ 652.661734][T13527] nlmon0: entered allmulticast mode [ 652.667763][ T30] audit: type=1400 audit(1760423364.257:1488): avc: denied { bind } for pid=13524 comm="syz.0.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 652.690273][T13527] caif0: entered promiscuous mode [ 652.695397][T13527] caif0: entered allmulticast mode [ 652.700518][T13527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.720183][ T30] audit: type=1400 audit(1760423364.257:1489): avc: denied { write } for pid=13524 comm="syz.0.2067" path="socket:[41854]" dev="sockfs" ino=41854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 652.767266][T13508] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2062'. [ 653.194709][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 653.439992][T13538] netlink: 'syz.0.2070': attribute type 1 has an invalid length. [ 653.448134][ T30] audit: type=1400 audit(1760423365.081:1490): avc: denied { accept } for pid=13534 comm="syz.3.2071" lport=44831 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 653.449596][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.479870][T13538] netlink: 'syz.0.2070': attribute type 3 has an invalid length. [ 653.493496][T13538] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2070'. [ 653.932526][ T5891] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 654.272084][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 654.296932][ T5891] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 654.315929][ T5891] usb 3-1: config 0 has no interface number 0 [ 654.324416][ T5891] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 655.064909][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.139081][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.148425][ T5891] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32800, setting to 1024 [ 655.160029][ T5891] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 655.172121][ T5891] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.183531][ T5891] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 655.197462][ T5891] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 655.235574][ T5891] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 655.425543][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.879720][ T5891] usb 3-1: config 0 descriptor?? [ 655.917135][ T5891] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 655.968206][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2081'. [ 656.268290][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.428018][ T5934] usb 3-1: USB disconnect, device number 75 [ 656.437582][ T5934] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 657.402538][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.547731][T13586] netlink: 'syz.1.2085': attribute type 1 has an invalid length. [ 657.651260][ T30] audit: type=1400 audit(1760423369.152:1491): avc: denied { watch } for pid=13585 comm="syz.1.2085" path="/433/control" dev="tmpfs" ino=2282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 658.292237][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.302623][ T5934] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 658.476035][ T5934] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 658.484742][ T5934] usb 3-1: config 0 has no interface number 0 [ 658.513237][ T5934] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 658.548803][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.556739][ T5934] usb 3-1: config 0 interface 89 has no altsetting 0 [ 658.577941][ T1209] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 658.593956][ T5934] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 658.604732][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.635301][ T5934] usb 3-1: Product: syz [ 658.728835][ T5934] usb 3-1: Manufacturer: syz [ 658.733983][ T30] audit: type=1400 audit(1760423370.172:1492): avc: denied { read write } for pid=13613 comm="syz.3.2094" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 658.761339][ T5934] usb 3-1: SerialNumber: syz [ 658.780835][T13614] binder: 13613:13614 ioctl c0306201 0 returned -14 [ 658.791279][ T30] audit: type=1400 audit(1760423370.191:1493): avc: denied { open } for pid=13613 comm="syz.3.2094" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 658.792098][ T5934] usb 3-1: config 0 descriptor?? [ 658.816553][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.861744][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.872995][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.891782][ T1209] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 658.901142][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.910098][T13600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 658.938361][ T5934] em28xx 3-1:0.89: New device syz syz @ 12 Mbps (0ccd:10af, interface 89, class 89) [ 658.952527][ T5934] em28xx 3-1:0.89: Device initialization failed. [ 658.966382][T13615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2094'. [ 659.004413][ T5934] em28xx 3-1:0.89: Device must be connected to a high-speed USB 2.0 port. [ 659.252774][ T1209] usb 2-1: config 0 descriptor?? [ 659.670509][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.160231][ T30] audit: type=1326 audit(1760423370.265:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.3.2094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02d178eec9 code=0x0 [ 660.183236][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.190792][ T1209] pyra 0003:1E7D:2CF6.0017: item fetching failed at offset 4/7 [ 660.206824][ T1209] pyra 0003:1E7D:2CF6.0017: parse failed [ 660.215616][ T1209] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -22 [ 660.228727][ T5934] usb 3-1: USB disconnect, device number 76 [ 660.781907][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.799580][ T1209] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 660.846366][T13634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2099'. [ 660.866294][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'. [ 660.876958][T13634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2099'. [ 660.926676][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'. [ 660.936253][T13634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2099'. [ 660.963642][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 660.976941][ T1209] usb 5-1: unable to get BOS descriptor or descriptor too short [ 660.987920][ T1209] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 661.005310][ T1209] usb 5-1: config 4 has no interface number 0 [ 661.086841][ T1209] usb 5-1: config 4 interface 30 has no altsetting 0 [ 661.099891][ T1209] usb 5-1: string descriptor 0 read error: -22 [ 661.107153][ T1209] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 661.117452][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.820487][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.862044][ T1209] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 661.874955][ T1209] dw2102: su3000_power_ctrl: 1, initialized 0 [ 661.881060][ T1209] dvb-usb: bulk message failed: -22 (2/0) [ 661.895845][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.910127][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 661.925161][ T5884] usb 2-1: USB disconnect, device number 54 [ 661.953378][ T1209] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 662.128696][T13625] dw2102: i2c wr: len=66 is too big! [ 662.128696][T13625] [ 662.257077][ T1209] usb 5-1: media controller created [ 662.320303][ T1209] dvb-usb: bulk message failed: -22 (6/0) [ 662.329002][ T1209] dw2102: i2c transfer failed. [ 662.348069][ T1209] dvb-usb: bulk message failed: -22 (6/0) [ 662.422040][ T1209] dw2102: i2c transfer failed. [ 662.457256][ T1209] dvb-usb: bulk message failed: -22 (6/0) [ 662.607082][ T1209] dw2102: i2c transfer failed. [ 662.631061][ T1209] dvb-usb: bulk message failed: -22 (6/0) [ 662.637248][ T1209] dw2102: i2c transfer failed. [ 662.642702][ T1209] dvb-usb: bulk message failed: -22 (6/0) [ 662.648706][ T1209] dw2102: i2c transfer failed. [ 662.659330][ T1209] dvb-usb: bulk message failed: -22 (6/0) [ 662.670636][ T1209] dw2102: i2c transfer failed. [ 662.877204][T13646] orangefs_mount: mount request failed with -4 [ 663.115930][ T1209] dvb-usb: MAC address: 02:02:02:02:02:02 [ 663.142241][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 663.174795][ T1209] dvb-usb: bulk message failed: -22 (3/0) [ 663.180884][ T1209] dw2102: command 0x0e transfer failed. [ 663.196688][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.205675][ T1209] dvb-usb: bulk message failed: -22 (3/0) [ 663.212334][ T1209] dw2102: command 0x0e transfer failed. [ 663.738910][T13659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.747189][T13659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.755456][T13659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.766238][T13659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.774938][T13659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.783101][T13659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.791305][T13659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.991694][T13667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2109'. [ 664.290411][ T1209] dvb-usb: bulk message failed: -22 (3/0) [ 664.314482][ T1209] dw2102: command 0x0e transfer failed. [ 664.324905][ T1209] dvb-usb: bulk message failed: -22 (3/0) [ 664.374985][ T1209] dw2102: command 0x0e transfer failed. [ 664.380567][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 664.414371][ T1209] dw2102: command 0x51 transfer failed. [ 664.419971][ T1209] dvb-usb: bulk message failed: -22 (5/0) [ 664.458460][T13674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'. [ 664.478955][ T1209] dw2102: i2c probe for address 0x68 failed. [ 664.485398][ T1209] dvb-usb: bulk message failed: -22 (5/0) [ 664.514892][T13674] netem: invalid attributes len -17 [ 664.533735][ T1209] dw2102: i2c probe for address 0x69 failed. [ 664.539806][T13674] netem: change failed [ 664.552711][ T1209] dvb-usb: bulk message failed: -22 (5/0) [ 664.569903][ T1209] dw2102: i2c probe for address 0x6a failed. [ 664.599405][ T1209] dw2102: probing for demodulator failed. Is the external power switched on? [ 664.635345][ T30] audit: type=1400 audit(1760423375.694:1495): avc: denied { write } for pid=13683 comm="syz.3.2115" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 664.680863][ T1209] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 664.799022][ T1209] rc_core: IR keymap rc-tt-1500 not found [ 664.809720][ T1209] Registered IR keymap rc-empty [ 664.815314][ T1209] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 664.834027][ T30] audit: type=1400 audit(1760423375.797:1496): avc: denied { getopt } for pid=13688 comm="syz.0.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 664.878298][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2117'. [ 664.889339][T13702] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 664.897501][T13702] netlink: 'syz.1.2117': attribute type 3 has an invalid length. [ 664.912366][T13702] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2117'. [ 664.962920][ T1209] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input29 [ 665.000264][ T1209] dvb-usb: schedule remote query interval to 250 msecs. [ 665.015406][ T1209] dw2102: su3000_power_ctrl: 0, initialized 1 [ 665.035498][ T1209] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 665.097512][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 665.114110][ T1209] usb 5-1: USB disconnect, device number 57 [ 665.173323][T13693] netlink: 'syz.2.2118': attribute type 1 has an invalid length. [ 665.181307][T13693] netlink: 'syz.2.2118': attribute type 3 has an invalid length. [ 665.190110][T13693] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2118'. [ 665.241926][ T1209] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 665.354704][ T5954] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 665.363794][T13706] afs: Unknown parameter 'dyn0000000000000000' [ 665.475825][ T5892] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 665.529837][ T5954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.569495][ T5954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.680173][T13709] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 666.069720][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.080293][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.091955][ T5954] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 666.101230][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 666.109562][ T5954] usb 1-1: SerialNumber: syz [ 666.115927][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.127306][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.135515][ T5892] usb 2-1: Product: syz [ 666.140549][ T5892] usb 2-1: Manufacturer: syz [ 666.145337][ T5892] usb 2-1: SerialNumber: syz [ 666.365365][T13705] EXT4-fs (nbd0): unable to read superblock [ 666.374587][ T30] audit: type=1400 audit(1760423377.313:1497): avc: denied { read append } for pid=13704 comm="syz.0.2120" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 666.404025][ T30] audit: type=1400 audit(1760423377.313:1498): avc: denied { open } for pid=13704 comm="syz.0.2120" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 666.431861][ T5934] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 666.542538][T13729] overlayfs: failed to resolve './file1': -2 [ 666.794794][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.807270][ T5934] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 666.819183][ T5934] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.829385][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 666.836495][ T5934] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 666.845945][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.883979][ T5934] usb 4-1: config 0 descriptor?? [ 667.594028][ T5934] hid_parser_main: 65 callbacks suppressed [ 667.594051][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 667.608889][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 667.617672][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 667.629989][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 667.640564][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 667.649760][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 667.817319][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 667.834953][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 667.977446][ T5891] net_ratelimit: 13 callbacks suppressed [ 667.977460][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.028860][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 668.083866][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: unknown main item tag 0x0 [ 668.149140][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: item fetching failed at offset 114/160 [ 668.162219][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: parse failed (reason: -22) [ 668.171817][ T5934] hid-corsair-void 0003:1B1C:1B29.0018: probe with driver hid-corsair-void failed with error -22 [ 668.213783][ T5934] usb 4-1: USB disconnect, device number 56 [ 668.271926][ T1209] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 668.293746][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.459279][ T5892] usb 2-1: 0:2 : does not exist [ 668.481293][ T5954] usb 1-1: 0:2 : does not exist [ 668.496379][ T5892] usb 2-1: USB disconnect, device number 55 [ 668.504962][ T5954] usb 1-1: unit 5: unexpected type 0x0d [ 668.505859][ T1209] usb 5-1: not running at top speed; connect to a high speed hub [ 668.538977][ T5954] usb 1-1: USB disconnect, device number 62 [ 668.574273][ T1209] usb 5-1: config 0 has too many interfaces: 77, using maximum allowed: 32 [ 668.939485][ T1209] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 77 [ 668.958391][ T1209] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 668.982427][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.022450][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.039213][ T1209] usb 5-1: Product: syz [ 669.054246][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 669.070307][ T1209] usb 5-1: Manufacturer: syz [ 669.075158][ T1209] usb 5-1: SerialNumber: syz [ 669.076652][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.089284][ T1209] usb 5-1: config 0 descriptor?? [ 669.414656][T13745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.747191][T13745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.998455][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'. [ 670.142891][T13777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2139'. [ 670.177714][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.405499][T13775] loop2: detected capacity change from 0 to 7 [ 670.590590][ T5891] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 670.666105][T13775] Dev loop2: unable to read RDB block 7 [ 670.687129][ T30] audit: type=1400 audit(1760423381.365:1499): avc: denied { ioctl } for pid=13773 comm="syz.3.2139" path="socket:[44451]" dev="sockfs" ino=44451 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 670.713045][T13777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2139'. [ 670.725723][T13775] loop2: unable to read partition table [ 670.732081][T13775] loop2: partition table beyond EOD, truncated [ 670.738768][T13775] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 670.817014][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 670.881549][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.918977][ T5891] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 671.067718][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.232388][ T5891] usb 2-1: config 0 descriptor?? [ 671.244419][ T5891] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 671.285698][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.511641][ T5884] usb 5-1: USB disconnect, device number 58 [ 671.635593][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.642038][ T30] audit: type=1400 audit(1760423382.254:1500): avc: denied { bind } for pid=13790 comm="syz.2.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 672.308502][T13806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2145'. [ 672.398247][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.332594][ T5892] usb 2-1: USB disconnect, device number 56 [ 673.511138][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.958324][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2152'. [ 673.976855][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 674.037295][ T5892] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 674.578659][ T5892] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 674.590154][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.639683][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.648090][ T5892] usb 1-1: config 0 has no interface number 0 [ 674.693525][ T5892] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 674.830684][ T30] audit: type=1400 audit(1760423385.128:1501): avc: denied { read write } for pid=13837 comm="syz.1.2154" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 674.855644][ T5892] usb 1-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.956461][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.971118][ T5892] usb 1-1: config 0 interface 11 has no altsetting 0 [ 674.980280][ T5892] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 675.010191][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.035244][ T30] audit: type=1400 audit(1760423385.128:1502): avc: denied { open } for pid=13837 comm="syz.1.2154" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 675.099700][ T5892] usb 1-1: config 0 descriptor?? [ 675.117080][ T5892] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 675.151233][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 7 [ 675.216648][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 675.254215][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 675.291270][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 675.323160][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 675.373134][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 675.453003][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 675.490650][ T5892] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 675.683569][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 675.692179][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 675.700360][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 675.708387][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 675.719007][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 675.726869][ T5892] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 675.735032][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.754678][ T5934] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 675.772924][T13825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.793345][ T5892] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 675.819856][T13825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.934364][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 675.949010][ T5934] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.976854][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.003201][ T5934] usb 3-1: config 0 descriptor?? [ 676.026015][ T5934] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 676.059631][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 676.086039][T13857] netlink: 'syz.3.2160': attribute type 1 has an invalid length. [ 676.094443][T13857] netlink: 'syz.3.2160': attribute type 3 has an invalid length. [ 676.105319][T13857] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2160'. [ 676.146441][ T5892] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 676.308405][ T5892] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 676.317058][ T5892] usb 5-1: config 0 has no interface number 0 [ 676.324375][ T5892] usb 5-1: config 0 interface 104 has no altsetting 0 [ 676.547892][ T5934] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 676.560769][ T5892] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=77.43 [ 676.570221][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 676.578635][ T5892] usb 5-1: Product: syz [ 676.583541][ T5892] usb 5-1: Manufacturer: syz [ 676.647609][ T5892] usb 5-1: SerialNumber: syz [ 676.663386][ T5892] usb 5-1: config 0 descriptor?? [ 676.725482][ T5934] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 676.736726][ T5934] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 676.746863][ T5934] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 676.756880][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.776437][T13859] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 676.833444][ T5934] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 676.857011][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.113576][ T5891] usb 2-1: USB disconnect, device number 57 [ 677.307186][ T5892] usb 1-1: USB disconnect, device number 63 [ 677.389759][ T5892] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 677.530217][ T5892] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 677.568097][ T5892] keyspan 1-1:0.11: device disconnected [ 678.053013][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.188519][ T5892] usb 5-1: USB disconnect, device number 59 [ 678.225519][T13880] loop3: detected capacity change from 0 to 7 [ 678.233536][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.261143][ T5828] Dev loop3: unable to read RDB block 7 [ 678.267381][ T5828] loop3: unable to read partition table [ 678.441482][ T5828] loop3: partition table beyond EOD, truncated [ 678.454722][T13880] Dev loop3: unable to read RDB block 7 [ 678.460698][T13880] loop3: unable to read partition table [ 678.488971][T13880] loop3: partition table beyond EOD, truncated [ 678.509190][T13880] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 678.655262][ T5934] usb 3-1: USB disconnect, device number 77 [ 679.250290][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.026978][ T30] audit: type=1400 audit(1760423390.097:1503): avc: denied { mount } for pid=13912 comm="syz.0.2174" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 680.049051][ C0] vkms_vblank_simulate: vblank timer overrun [ 680.111431][ T1209] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 680.206702][ T5891] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 680.292560][ T1209] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 680.311546][ T1209] usb 3-1: config 0 has no interface number 0 [ 680.322323][ T1209] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 680.332360][ T5934] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 680.349322][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.350767][ T1209] usb 3-1: config 0 interface 235 has no altsetting 0 [ 680.387826][ T1209] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 680.401831][ T5891] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 680.407777][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.418319][ T1209] usb 3-1: Product: syz [ 680.441772][ T1209] usb 3-1: Manufacturer: syz [ 680.446432][ T1209] usb 3-1: SerialNumber: syz [ 680.457965][ T1209] usb 3-1: config 0 descriptor?? [ 680.476616][ T1209] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 680.496952][ T1209] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 680.504827][ T1209] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 680.517050][ T5891] usb 4-1: config 0 has no interface number 0 [ 680.523751][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 680.533973][ T5891] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.539186][ T5934] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 680.555210][ T1209] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 680.566557][ T5891] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.570017][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.584789][ T1209] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 680.598016][ T5891] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 680.607508][ T1209] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 680.625619][ T5934] usb 2-1: config 0 descriptor?? [ 680.634327][ T1209] keyspan 3-1:0.235: unsupported endpoint type 0 [ 680.641462][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.654431][ T5934] gspca_main: sunplus-2.14.0 probing 041e:400b [ 680.668889][ T1209] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 680.669312][ T5891] usb 4-1: config 0 descriptor?? [ 680.847814][T13906] comedi comedi0: reset error (fatal) [ 680.860997][ T5869] usb 3-1: USB disconnect, device number 78 [ 680.871662][ T5869] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 680.883337][ T5869] keyspan 3-1:0.235: device disconnected [ 681.250030][ T5891] prodikeys 0003:041E:2801.0019: collection stack underflow [ 681.290401][ T5891] prodikeys 0003:041E:2801.0019: item 0 1 0 12 parsing failed [ 681.312137][ T5891] prodikeys 0003:041E:2801.0019: hid parse failed [ 681.326012][ T5891] prodikeys 0003:041E:2801.0019: probe with driver prodikeys failed with error -22 [ 681.458132][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.472333][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.491134][T13910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.512265][T13910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.524645][T13917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.533117][ T5934] gspca_sunplus: reg_r err -32 [ 681.537893][ T5934] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 681.564678][T13917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.638437][ T5876] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 681.652439][ T5891] usb 4-1: USB disconnect, device number 57 [ 681.821780][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 681.858201][ T5876] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 681.872318][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.890066][ T5876] usb 1-1: config 0 descriptor?? [ 681.912189][ T5876] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 682.605837][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.048151][ T5934] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 683.371438][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 683.409236][ T30] audit: type=1400 audit(1760423393.232:1504): avc: denied { setopt } for pid=13965 comm="syz.2.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 683.428991][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.460926][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.472294][ T5934] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 683.502955][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.524043][ T5934] usb 4-1: config 0 descriptor?? [ 683.524498][ T5891] usb 2-1: USB disconnect, device number 58 [ 683.687420][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.605516][ T5869] usb 1-1: USB disconnect, device number 64 [ 684.706124][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.794170][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.442300][ T1209] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 685.626469][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 685.636649][ T1209] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 685.647058][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 685.659548][ T1209] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 685.671513][ T1209] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 685.680738][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.689031][ T1209] usb 2-1: Product: syz [ 685.693577][ T1209] usb 2-1: Manufacturer: syz [ 685.698258][ T1209] usb 2-1: SerialNumber: syz [ 685.709084][T13995] SELinux: Context Ü is not valid (left unmapped). [ 685.717691][ T1209] usb 2-1: config 0 descriptor?? [ 685.784344][ T1209] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 685.902223][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.034472][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 686.040524][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 686.299644][ T5934] usb 4-1: USB disconnect, device number 58 [ 686.556999][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.565721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.017628][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.312602][T14020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2199'. [ 687.515931][ T5934] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 687.525118][ T1209] scsi host1: usb-storage 2-1:0.0 [ 687.549294][ T1209] usb 2-1: USB disconnect, device number 59 [ 687.698364][ T5934] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 687.761125][ T5876] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 687.771836][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 687.809458][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 687.826797][T14038] bridge0: port 3(batadv2) entered blocking state [ 687.842676][ T5934] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 687.854101][T14038] bridge0: port 3(batadv2) entered disabled state [ 687.885958][ T5934] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 687.953470][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.123653][T14038] batadv2: entered allmulticast mode [ 688.150662][T14038] batadv2: entered promiscuous mode [ 688.156059][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.156078][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.177385][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 688.207286][ T5876] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 688.225958][ T5934] usb 4-1: Product: syz [ 688.233905][ T5934] usb 4-1: Manufacturer: syz [ 688.238535][ T5934] usb 4-1: SerialNumber: syz [ 688.273226][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.350569][ T66] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 688.350975][ T5934] usb 4-1: config 0 descriptor?? [ 688.360333][ T66] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 688.377382][ T5876] usb 3-1: config 0 descriptor?? [ 688.417976][ T5876] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 688.516158][ T1209] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 688.536773][T14011] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 688.545706][ T5934] usb 4-1: ucan: probing device on interface #0 [ 688.552787][ T5934] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 688.562463][ T5934] usb 4-1: ucan: probe failed; try to update the device firmware [ 688.948283][ T1209] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 688.956671][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.020567][ T1209] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 689.031592][ T1209] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 689.039745][ T1209] usb 2-1: Manufacturer: syz [ 689.054651][ T1209] usb 2-1: config 0 descriptor?? [ 689.307211][T14053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.317725][T14053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.684694][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.934891][ T1209] rc_core: IR keymap rc-hauppauge not found [ 689.942933][ T1209] Registered IR keymap rc-empty [ 689.961174][ T1209] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 689.982360][ T1209] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 690.244389][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2207'. [ 690.309568][T14060] netlink: 'syz.0.2207': attribute type 1 has an invalid length. [ 690.338779][T14060] netlink: 'syz.0.2207': attribute type 3 has an invalid length. [ 690.351524][T14060] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2207'. [ 690.517114][T14036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2204'. [ 690.774237][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.033517][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.040053][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.079667][ T5954] usb 3-1: USB disconnect, device number 79 [ 691.202408][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.806535][ T5869] usb 4-1: USB disconnect, device number 59 [ 691.997909][ T5954] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 692.058801][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.271462][ T5891] usb 2-1: USB disconnect, device number 60 [ 692.327998][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 692.363543][ T5954] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 692.385118][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 692.437595][ T5954] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 692.520802][T14102] loop3: detected capacity change from 0 to 7 [ 692.531585][ T5828] Dev loop3: unable to read RDB block 7 [ 692.544219][ T5954] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 692.547212][ T5828] loop3: unable to read partition table [ 692.566450][ T5828] loop3: partition table beyond EOD, truncated [ 692.574519][T14102] Dev loop3: unable to read RDB block 7 [ 692.583364][T14102] loop3: unable to read partition table [ 692.589701][T14102] loop3: partition table beyond EOD, truncated [ 692.599347][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.614202][T14102] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 692.624037][ T5954] usb 3-1: Product: syz [ 692.628243][ T5954] usb 3-1: Manufacturer: syz [ 692.634740][ T1209] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 692.678877][ T5954] usb 3-1: SerialNumber: syz [ 692.740231][ T5869] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 692.985937][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 693.009505][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 693.010874][ T5869] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 693.024747][ T5954] usb 3-1: config 0 descriptor?? [ 693.031335][ T5954] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 693.053707][ T1209] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 693.053765][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.064802][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.118295][ T5869] usb 4-1: config 0 descriptor?? [ 693.139996][ T1209] usb 1-1: config 0 descriptor?? [ 693.168079][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.567238][ T1209] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 693.590529][T14110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2222'. [ 693.627134][ T1209] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 693.636410][ T1209] dib0700: firmware download failed at 7 with -22 [ 693.657020][ T1209] usb 1-1: USB disconnect, device number 65 [ 693.708543][T14112] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 693.718499][T14112] netlink: 'syz.1.2222': attribute type 3 has an invalid length. [ 693.729152][T14112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2222'. [ 694.228963][ T5954] scsi host1: usb-storage 3-1:0.0 [ 694.281410][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.321888][ T5954] usb 3-1: USB disconnect, device number 80 [ 694.449971][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.719042][T14123] 9pnet_virtio: no channels available for device 127.0.0.1 [ 695.430366][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.122855][ T30] audit: type=1326 audit(1760423405.165:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.1.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10d8eec9 code=0x7ffc0000 [ 696.146493][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.198545][ T30] audit: type=1326 audit(1760423405.165:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.1.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7eff10d8eec9 code=0x7ffc0000 [ 696.254734][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 696.533301][ T1056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.639569][ T5954] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 696.640058][ T30] audit: type=1326 audit(1760423405.165:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.1.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10d8eec9 code=0x7ffc0000 [ 696.691839][ T5869] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 696.767361][ T5869] usb 4-1: USB disconnect, device number 60 [ 696.792525][ T30] audit: type=1326 audit(1760423405.203:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.1.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10d8eec9 code=0x7ffc0000 [ 696.982644][ T30] audit: type=1326 audit(1760423405.221:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.1.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff10d8eec9 code=0x7ffc0000 [ 697.047217][ T5954] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 697.048296][T14153] input: syz0 as /devices/virtual/input/input34 [ 697.083045][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.098516][ T30] audit: type=1326 audit(1760423405.221:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.1.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10d8eec9 code=0x7ffc0000 [ 697.122310][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.176871][ T5954] usb 2-1: Product: syz [ 697.205283][ T5954] usb 2-1: Manufacturer: syz [ 697.218917][ T30] audit: type=1326 audit(1760423405.221:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.1.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff10d8eec9 code=0x7ffc0000 [ 697.249391][ T5954] usb 2-1: SerialNumber: syz [ 697.272718][T14153] vivid-002: disconnect [ 697.273003][ T5954] usb 2-1: config 0 descriptor?? [ 697.338248][T14152] vivid-002: reconnect [ 697.379543][ T30] audit: type=1326 audit(1760423405.221:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.1.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10d8eec9 code=0x7ffc0000 [ 697.499687][ T30] audit: type=1326 audit(1760423405.221:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.1.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff10d8eec9 code=0x7ffc0000 [ 697.552923][T14150] xt_l2tp: v2 tid > 0xffff: 37482740 [ 697.568550][ T30] audit: type=1326 audit(1760423405.231:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.1.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff10d8eec9 code=0x7ffc0000 [ 697.657059][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.690085][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2238'. [ 697.699579][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.772682][ T1056] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 697.893632][T14171] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2240'. [ 697.902896][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 697.913312][T14171] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2240'. [ 697.932961][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 697.942163][T14171] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2240'. [ 697.955454][ T1056] usb 5-1: Using ep0 maxpacket: 16 [ 697.971331][ T1056] usb 5-1: config 0 interface 0 has no altsetting 0 [ 697.994685][ T1056] usb 5-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.00 [ 698.028062][ T1056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.067345][ T1056] usb 5-1: config 0 descriptor?? [ 698.467319][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 698.529028][ T1056] hid_parser_main: 93 callbacks suppressed [ 698.529042][ T1056] apple 0003:05AC:0215.001A: unknown main item tag 0x0 [ 698.545409][ T1056] apple 0003:05AC:0215.001A: unknown main item tag 0x0 [ 698.553407][ T1056] apple 0003:05AC:0215.001A: unknown main item tag 0x0 [ 698.560462][ T1056] apple 0003:05AC:0215.001A: unknown main item tag 0x0 [ 698.567467][ T1056] apple 0003:05AC:0215.001A: unknown main item tag 0x0 [ 698.574460][ T1056] apple 0003:05AC:0215.001A: unknown main item tag 0x0 [ 698.581408][ T1056] apple 0003:05AC:0215.001A: unknown main item tag 0x0 [ 698.588586][ T1056] apple 0003:05AC:0215.001A: unknown main item tag 0x0 [ 698.604119][ T1056] apple 0003:05AC:0215.001A: unknown main item tag 0x0 [ 698.616589][ T1056] apple 0003:05AC:0215.001A: unknown main item tag 0x0 [ 698.660201][ T1056] apple 0003:05AC:0215.001A: hidraw0: USB HID v0.03 Device [HID 05ac:0215] on usb-dummy_hcd.4-1/input0 [ 698.774873][T14159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2236'. [ 698.814193][ T5876] usb 5-1: USB disconnect, device number 60 [ 698.821150][ T1056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.002032][ T1209] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 699.131163][T14177] fido_id[14177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 699.419953][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 699.498195][ T1209] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 699.521455][ T1209] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.564168][ T1209] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 699.569034][ T5954] usb_8dev 2-1:0.0 can0: sending command message failed [ 699.596804][ T1209] usb 3-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 699.622178][ T1209] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 699.650868][ T5954] usb_8dev 2-1:0.0 can0: can't get firmware version [ 699.650980][ T1209] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.675367][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.683590][ T1209] usb 3-1: Product: syz [ 699.688500][ T1209] usb 3-1: Manufacturer: syz [ 699.693104][ T1209] usb 3-1: SerialNumber: syz [ 699.761211][T14185] loop6: detected capacity change from 0 to 2560 [ 699.768310][T14185] buffer_io_error: 11 callbacks suppressed [ 699.768324][T14185] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.811390][ T5954] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 699.833425][T14185] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.872063][ T5954] usb 2-1: USB disconnect, device number 61 [ 699.883633][T14185] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.906457][T14185] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.915294][T14185] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.923804][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.930462][T14188] IPVS: length: 24 != 37748856 [ 699.968573][T14185] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.995872][T14185] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.110408][T14176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.124283][T14176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.124802][T14185] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.152192][T14185] ldm_validate_partition_table(): Disk read failed. [ 700.411861][ T1056] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 700.493446][T14185] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.507508][T14185] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.517522][T14185] Dev loop6: unable to read RDB block 0 [ 700.524701][T14185] loop6: unable to read partition table [ 700.540012][T14185] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 700.669786][ T1056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.691176][ T1056] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 700.711642][ T1056] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 700.728512][ T1056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.746494][ T1056] usb 4-1: config 0 descriptor?? [ 700.789096][ T1056] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 700.946227][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.982378][T14210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2252'. [ 701.040105][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.044583][T14210] netlink: 'syz.1.2252': attribute type 1 has an invalid length. [ 701.058862][T14210] netlink: 'syz.1.2252': attribute type 3 has an invalid length. [ 701.069623][T14210] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2252'. [ 701.619203][ T5876] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 701.962051][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 702.120660][ T5876] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 702.142869][ T1056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.184351][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 702.220428][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 702.258632][ T5876] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.329112][ T5876] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 702.338469][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.401664][ T1209] usb 3-1: USB disconnect, device number 81 [ 702.459335][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.592837][ T5876] usb 1-1: GET_CAPABILITIES returned 0 [ 702.611357][ T5876] usbtmc 1-1:16.0: can't read capabilities [ 703.179229][ T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 703.193012][ T1056] usb 1-1: USB disconnect, device number 66 [ 703.257971][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.272824][ T5954] usb 4-1: USB disconnect, device number 61 [ 703.355180][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 703.371722][T14251] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 703.381016][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 703.403749][ T7468] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 703.418307][ T7468] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 703.450133][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 703.535647][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 703.559783][ T24] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 703.573633][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.623343][ T24] usb 2-1: Product: syz [ 703.628242][ T24] usb 2-1: Manufacturer: syz [ 703.632854][ T24] usb 2-1: SerialNumber: syz [ 703.650144][ T24] usb 2-1: config 0 descriptor?? [ 703.658375][ T24] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 704.394339][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.779877][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.903532][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 704.903546][ T30] audit: type=1400 audit(1760423413.373:1566): avc: denied { bind } for pid=14262 comm="syz.0.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 704.997808][ T30] audit: type=1400 audit(1760423413.373:1567): avc: denied { listen } for pid=14262 comm="syz.0.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 705.071444][ T30] audit: type=1400 audit(1760423413.410:1568): avc: denied { accept } for pid=14262 comm="syz.0.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 705.136210][ T5876] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 705.326952][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 705.335653][ T5876] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 705.349839][T14277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2268'. [ 705.356819][ T5876] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 705.384021][ T5876] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 169, changing to 11 [ 705.395594][ T24] scsi host1: usb-storage 2-1:0.0 [ 705.403142][T14277] netlink: 'syz.2.2268': attribute type 1 has an invalid length. [ 705.410991][T14277] netlink: 'syz.2.2268': attribute type 3 has an invalid length. [ 705.418883][ T5876] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 50609, setting to 1024 [ 705.430121][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 705.439921][T14277] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2268'. [ 705.451537][ T5876] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 705.453826][ T24] usb 2-1: USB disconnect, device number 62 [ 705.476477][ T5133] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 705.533213][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.562048][ T5954] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 705.587019][ T5876] usb 5-1: Product: syz [ 705.622700][ T5876] usb 5-1: Manufacturer: syz [ 705.641654][ T5876] usb 5-1: SerialNumber: syz [ 705.655938][ T5876] usb 5-1: config 0 descriptor?? [ 705.747224][ T5954] usb 1-1: device descriptor read/64, error -71 [ 705.767844][T14265] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 705.917991][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.021437][ T5954] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 706.334953][T14265] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 706.342001][ T30] audit: type=1400 audit(1760423414.721:1569): avc: denied { setopt } for pid=14264 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 706.395210][ T5876] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 706.402286][ T30] audit: type=1400 audit(1760423414.758:1570): avc: denied { ioctl } for pid=14286 comm="syz.3.2272" path="socket:[46624]" dev="sockfs" ino=46624 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 706.502360][ T5954] usb 1-1: device descriptor read/64, error -71 [ 706.629605][ T5954] usb usb1-port1: attempt power cycle [ 706.706664][ T30] audit: type=1400 audit(1760423415.067:1571): avc: denied { ioctl } for pid=14264 comm="syz.4.2266" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 707.083007][ T5954] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 707.097061][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.108119][ T5876] usb 5-1: USB disconnect, device number 61 [ 707.122539][ T5954] usb 1-1: device descriptor read/8, error -71 [ 707.365983][T14299] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2275'. [ 707.375362][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 707.385781][ T5954] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 707.394012][T14299] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2275'. [ 707.483514][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 707.483521][ T5954] usb 1-1: device descriptor read/8, error -71 [ 707.605404][ T5954] usb usb1-port1: unable to enumerate USB device [ 707.615756][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.619867][T14299] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2275'. [ 708.455550][T14305] orangefs_mount: mount request failed with -4 [ 708.647630][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.422867][T14304] ALSA: mixer_oss: invalid OSS volume '' [ 709.794713][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.039576][T14316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2281'. [ 710.380312][T14330] : entered promiscuous mode [ 710.394092][T14330] overlayfs: missing 'lowerdir' [ 710.869342][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.249647][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.282306][T14340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2286'. [ 711.357828][T14340] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 711.365845][T14340] netlink: 'syz.3.2286': attribute type 3 has an invalid length. [ 711.375204][T14340] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2286'. [ 712.387437][T14355] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2289'. [ 712.398415][T14355] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2289'. [ 712.416664][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.440190][T14371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.448716][T14371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.456915][T14371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.358962][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 714.399508][T14380] netlink: 'syz.3.2296': attribute type 10 has an invalid length. [ 714.571646][T14380] skbuff: skb_under_panic: text:ffffffff89ef1f08 len:-1783546478 put:-1783546484 head:ffff88804f6bc9c0 data:ffff887fb9ba8c74 tail:0x46 end:0x180 dev:bond0 [ 714.855230][T14380] ------------[ cut here ]------------ [ 714.861163][T14380] kernel BUG at net/core/skbuff.c:212! [ 714.867081][ T30] audit: type=1400 audit(1760423422.704:1572): avc: denied { read } for pid=5164 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 714.889912][ T5954] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 714.914774][T14380] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 714.921224][T14380] CPU: 0 UID: 0 PID: 14380 Comm: syz.3.2296 Not tainted syzkaller #0 PREEMPT(full) [ 714.930592][T14380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 714.940635][T14380] RIP: 0010:skb_panic+0x157/0x1d0 [ 714.945656][T14380] Code: b6 04 01 84 c0 74 04 3c 03 7e 21 41 56 8b 4b 70 45 89 e8 48 c7 c7 20 d2 bf 8c 41 57 56 48 89 ee 52 4c 89 e2 e8 0a 8f 6a f8 90 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 04 c2 f4 f8 4c [ 714.965246][T14380] RSP: 0018:ffffc9001c36f858 EFLAGS: 00010282 [ 714.971294][T14380] RAX: 0000000000000098 RBX: ffff888035778640 RCX: ffffc9000cd4c000 [ 714.979267][T14380] RDX: 0000000000000000 RSI: ffffffff819c1a36 RDI: 0000000000000005 [ 714.987225][T14380] RBP: ffffffff8cbfe5e0 R08: 0000000000000005 R09: 0000000000000000 [ 714.995180][T14380] R10: 0000000080000000 R11: fffffffffffdae58 R12: ffffffff89ef1f08 [ 715.003130][T14380] R13: 0000000095b13d8c R14: ffff888051a14120 R15: 0000000000000180 [ 715.011078][T14380] FS: 00007f02d26d66c0(0000) GS:ffff8881249d9000(0000) knlGS:0000000000000000 [ 715.019988][T14380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.026551][T14380] CR2: 000020000037c030 CR3: 0000000074dec000 CR4: 00000000003526f0 [ 715.034503][T14380] Call Trace: [ 715.037759][T14380] [ 715.040673][T14380] ? __pfx_skb_set_owner_w+0x10/0x10 [ 715.045944][T14380] ? ipgre_header+0x68/0x530 [ 715.050517][T14380] skb_push+0xca/0xf0 [ 715.054480][T14380] ipgre_header+0x68/0x530 [ 715.058880][T14380] ? __pfx_ipgre_header+0x10/0x10 [ 715.063905][T14380] pppoe_sendmsg+0x570/0x7b0 [ 715.068476][T14380] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 715.073566][T14380] ____sys_sendmsg+0xa98/0xc70 [ 715.078329][T14380] ? copy_msghdr_from_user+0x10a/0x160 [ 715.083769][T14380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.089047][T14380] ? find_held_lock+0x2b/0x80 [ 715.093703][T14380] ? futex_unqueue+0x133/0x2c0 [ 715.098451][T14380] ___sys_sendmsg+0x134/0x1d0 [ 715.103109][T14380] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.108292][T14380] ? find_held_lock+0x2b/0x80 [ 715.112953][T14380] __sys_sendmmsg+0x200/0x420 [ 715.117615][T14380] ? __pfx___sys_sendmmsg+0x10/0x10 [ 715.122794][T14380] ? __pfx_do_futex+0x10/0x10 [ 715.127457][T14380] ? xfd_validate_state+0x61/0x180 [ 715.132554][T14380] __x64_sys_sendmmsg+0x9c/0x100 [ 715.137473][T14380] ? lockdep_hardirqs_on+0x7c/0x110 [ 715.142657][T14380] do_syscall_64+0xcd/0xfa0 [ 715.147143][T14380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.153014][T14380] RIP: 0033:0x7f02d178eec9 [ 715.157410][T14380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.176996][T14380] RSP: 002b:00007f02d26d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 715.185390][T14380] RAX: ffffffffffffffda RBX: 00007f02d19e5fa0 RCX: 00007f02d178eec9 [ 715.193340][T14380] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 000000000000000d [ 715.201291][T14380] RBP: 00007f02d1811f91 R08: 0000000000000000 R09: 0000000000000000 [ 715.209238][T14380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.217186][T14380] R13: 00007f02d19e6038 R14: 00007f02d19e5fa0 R15: 00007ffeac60d038 [ 715.225141][T14380] [ 715.228136][T14380] Modules linked in: [ 715.232497][T14380] ---[ end trace 0000000000000000 ]--- [ 715.238001][ T30] audit: type=1400 audit(1760423422.704:1573): avc: denied { search } for pid=5164 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.260034][ T30] audit: type=1400 audit(1760423422.704:1574): avc: denied { search } for pid=5164 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.292516][T14380] RIP: 0010:skb_panic+0x157/0x1d0 [ 715.297286][ T30] audit: type=1400 audit(1760423422.704:1575): avc: denied { add_name } for pid=5164 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.307522][T14380] Code: b6 04 01 84 c0 74 04 3c 03 7e 21 41 56 8b 4b 70 45 89 e8 48 c7 c7 20 d2 bf 8c 41 57 56 48 89 ee 52 4c 89 e2 e8 0a 8f 6a f8 90 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 04 c2 f4 f8 4c [ 715.320710][ T30] audit: type=1400 audit(1760423422.704:1576): avc: denied { create } for pid=5164 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 715.359029][T14380] RSP: 0018:ffffc9001c36f858 EFLAGS: 00010282 [ 715.365861][T14370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.366844][T14380] RAX: 0000000000000098 RBX: ffff888035778640 RCX: ffffc9000cd4c000 [ 715.374549][T14370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.382073][T14380] RDX: 0000000000000000 RSI: ffffffff819c1a36 RDI: 0000000000000005 [ 715.398567][T14380] RBP: ffffffff8cbfe5e0 R08: 0000000000000005 R09: 0000000000000000 [ 715.406607][T14380] R10: 0000000080000000 R11: fffffffffffdae58 R12: ffffffff89ef1f08 [ 715.424063][ T5954] usb 1-1: device descriptor read/64, error -71 [ 715.457336][ T30] audit: type=1400 audit(1760423422.704:1577): avc: denied { append open } for pid=5164 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 715.483381][ T30] audit: type=1400 audit(1760423422.704:1578): avc: denied { getattr } for pid=5164 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 715.506434][T14380] R13: 0000000095b13d8c R14: ffff888051a14120 R15: 0000000000000180 [ 715.518267][T14380] FS: 00007f02d26d66c0(0000) GS:ffff8881249d9000(0000) knlGS:0000000000000000 [ 715.527374][T14380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.534059][T14380] CR2: 00007f20063b6358 CR3: 0000000074dec000 CR4: 00000000003526f0 [ 715.542122][T14380] Kernel panic - not syncing: Fatal exception [ 715.548369][T14380] Kernel Offset: disabled [ 715.552669][T14380] Rebooting in 86400 seconds..