last executing test programs: 14.643077776s ago: executing program 3 (id=1197): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\n'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x279c, &(0x7f0000000040)={0x0, 0xa6f5, 0x0, 0x1, 0x1d4}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000180), 0x0) close(0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x242800, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x41, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000)) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x284, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x1) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000008c0)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20040090) recvmmsg(r8, &(0x7f0000002780)=[{{&(0x7f0000000480)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f0000000640)=""/202, 0xca}, {&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f0000000980)=""/143, 0x8f}], 0x5, &(0x7f0000000ac0)=""/130, 0x82}, 0x8}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000000b80)=""/112, 0x70}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000d00)=""/246, 0xf6}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/211, 0xd3}, {&(0x7f0000001f00)=""/86, 0x56}, {&(0x7f0000001f80)=""/236, 0xec}, {&(0x7f0000002080)=""/192, 0xc0}, {&(0x7f00000008c0)}], 0xa, &(0x7f0000002200)=""/179, 0xb3}, 0x7}, {{&(0x7f00000022c0)=@ax25={{0x3, @null}, [@netrom, @netrom, @bcast, @null, @remote, @bcast, @rose, @bcast]}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002340)=""/244, 0xf4}, {&(0x7f0000002440)=""/149, 0x95}, {&(0x7f0000002500)=""/181, 0xb5}, {&(0x7f00000025c0)=""/109, 0x6d}, {&(0x7f0000002640)=""/53, 0x35}, {&(0x7f0000002680)=""/9, 0x9}], 0x6, &(0x7f0000002740)=""/58, 0x3a}, 0x6}], 0x3, 0x202, &(0x7f0000002840)={0x77359400}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @loopback}, 0x10) 13.945705174s ago: executing program 2 (id=1205): socket$kcm(0x11, 0x3, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 12.949089727s ago: executing program 2 (id=1208): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x4745504d, 0x3, @stepwise={0xfffffff9, 0xe, 0x3, 0x1, 0x800, 0xfffffff7}}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x101fa, 0x0, &(0x7f0000566000/0x4000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0xffe0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 11.114860706s ago: executing program 4 (id=1209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000e3f56dac972dd96b000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001500000085000000050000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0xbd, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000940)=[@uexit={0x0, 0x18, 0x6}, @rdmsr={0x66, 0x18, {0x8aa}}, @rdmsr={0x32, 0x18, {0xbc5}}, @rdmsr={0x32, 0x18, {0x316}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffffff00}}, @wrmsr={0x1e, 0x20, {0x339, 0x17fffffff}}, @wr_crn={0x46, 0x20, {0x2, 0x4000000}}, @uexit={0x0, 0x18, 0x7ff}, @rdmsr={0x32, 0x18, {0x35c}}, @rdmsr={0x66, 0x18, {0x3f6}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @in_dx={0x69, 0x20, {0x84f9}}, @wrmsr={0x1e, 0x20, {0x340, 0x5}}, @cpuid={0x14, 0x18, {0x3fd, 0x4}}], 0x180}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0x5, 0xb9, 0x1, 0x11, 0xd, 0x204}, {0x804, 0x0, 0x1, 0xfd, 0x87, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x4000001, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x71, 0x3, 0x5, 0x4}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x5, 0x2004ca, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x1, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.943094405s ago: executing program 4 (id=1211): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000400)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffffff, 0x0, 0x8000, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20202, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x0, 0x5003) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 9.585972115s ago: executing program 1 (id=1215): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r0, 0x0, 0x0) 9.565095948s ago: executing program 3 (id=1216): eventfd2(0x100001, 0x80001) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) clock_getres(0x6, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x6c90, 0x480c1) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES16=r4, @ANYBLOB="080001000300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2c048010}, 0x20000000) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000140)=@usbdevfs_disconnect={0xfde1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x1, 0x0) read$FUSE(r8, &(0x7f00000012c0)={0x2020}, 0x2020) vmsplice(r9, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x9) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x20008000) 9.503102395s ago: executing program 0 (id=1217): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x400000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000100)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x12, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000007f000000000000000600000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x342a210b, 0x20, &(0x7f0000000200)=""/32, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x0, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x5, 0x1, 0x5, 0x8}, {0x2, 0x5, 0x9, 0xb}, {0x3, 0x3, 0xf, 0xc}, {0x4, 0x3, 0xa, 0x9}, {0x1, 0x4, 0xd, 0xc}, {0x5, 0x4, 0x9, 0xb}]}, 0x94) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='cachefiles_rename\x00', r3, 0x0, 0xffffffffffffffd6}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c0, 0x188, 0x270, 0x188, 0x390, 0x390, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, &(0x7f00000004c0), {[{{@ip={@multicast1, @local, 0xff000000, 0xff, 'wlan0\x00', 'wlan0\x00', {0xff}, {0xff}, 0x6, 0x1, 0x1}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x90, 0x900}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x1}, {0x3, 0x3}}}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'vxcan1\x00', 'wlan1\x00', {0xff}, {0xef6534cb782b0121}, 0x34, 0x2, 0x10}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}, {{@ip={@private=0xa010102, @multicast1, 0xff, 0xffffffff, 'veth1_vlan\x00', 'team0\x00', {}, {}, 0x5e, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x1}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0x0, 0xffffff00, 'veth0_to_hsr\x00', 'team0\x00', {0xff}, {0xff}, 0x29}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x6}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x8001, @remote, 0x40, 0x4, [0xa, 0x33, 0x5, 0x32, 0x18, 0xe, 0x19, 0x0, 0x3e, 0x20, 0x1e, 0x1b, 0x2c, 0x3d, 0xa, 0x9], 0x2, 0x6, 0x8000000000000000}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xff000000, 0xff, 'erspan0\x00', 'rose0\x00', {0xff}, {}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 9.483532182s ago: executing program 0 (id=1218): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0x880, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000340)=""/224, 0xe0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000680)={'broute\x00', 0x0, 0x4, 0x45, [0x0, 0xb56f, 0x8, 0x8, 0x0, 0x2], 0x9, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000500)=""/69}, &(0x7f00000002c0)=0x78) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x10) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 9.467701921s ago: executing program 3 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x107b000) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) io_uring_enter(0xffffffffffffffff, 0x66a8, 0x4000, 0xf, 0x0, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x1, 0x90c1], 0x0, 0x0, 0x2}}, 0x40) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x195}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) 9.356312083s ago: executing program 1 (id=1220): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = eventfd(0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) r5 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0xffffffffffffffea, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x5}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r9 = socket(0x18, 0x4, 0x0) getsockopt(r9, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000540)={'pim6reg\x00', 0x600}) 8.402349535s ago: executing program 2 (id=1223): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) msgsnd(0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x20000000000, 0xfffffffffffffffd, 0x5, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x10, 0x80000006, 0x400000}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) syz_open_procfs(0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 8.391189191s ago: executing program 1 (id=1224): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb653, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1002, 0x40, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x5, 0x80}}}}}]}}]}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000015000000000000000000000005"], 0xa8}}, 0x40080) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r3 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) socket$inet(0x2, 0x2, 0x0) r4 = fanotify_init(0x20, 0x80000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124) fanotify_mark(r4, 0x1, 0x4000001a, r5, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000726) (async) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) (async) io_uring_setup(0x1b7b, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="0040951de941"}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.312869254s ago: executing program 1 (id=1225): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000040), 0x0, 0x20005100) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpid() bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000180)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x1) recvfrom(r2, 0x0, 0x0, 0x41, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x0, "8baadc68379dd10000419d09000000000000000000161c00"}) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c050023eb3d259266ec9c37865c6c1b4640ce2400bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf770459ff6dcfd54f11ed2c41d078b9cf1fc8f72566153c97ffdc11f30ea6b16b694bb4a6e4606c3fb19d1d2bc3c8c4e97da2213f9d5c3c4891f9150d6850d00c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8fffb58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0484084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835acdabd60da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc575341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374f000000000000000725e75c257834572026c511f57dce67153a4008f9e75e07edfd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0x2000, 0x0, 0x8, 0x2, 0xfc, 0x7f, 0x4, 0x2, 0x0, 0x2e, 0x8, 0x10}, {0x9000, 0x2000, 0x9, 0x2, 0x40, 0x2, 0x7d, 0x5, 0x5, 0x3, 0x7}, {0x5000, 0xeeef0000, 0xb, 0x5, 0x83, 0x7, 0x40, 0x9, 0x1, 0xa7, 0x7c, 0x81}, {0xb000, 0x3000, 0xd, 0x3, 0x4, 0x43, 0xb, 0xff, 0x1, 0xaf, 0xe, 0x11}, {0x4000, 0x8000000, 0x10, 0x1, 0x55, 0x7, 0xab, 0x8, 0x7, 0x83, 0xf6}, {0x1000, 0x4, 0x8, 0x14, 0x4, 0x8, 0x7, 0xa0, 0x80, 0x10, 0x1, 0xc}, {0x0, 0x8ac59f64341f8cf3, 0x3, 0x5, 0x7, 0x5, 0x6b, 0x6, 0x5, 0x81, 0xff, 0x61}, {0x8080000, 0x1000, 0xf, 0xd, 0xf, 0x7, 0x4, 0x34, 0xda, 0x20, 0xd9, 0x9}, {0x5000, 0x10}, {0x1, 0xf}, 0x80000031, 0x0, 0x205000, 0x2024, 0x7, 0x1003, 0x2000, [0x6800000000000000, 0x2, 0x0, 0x10000000ff]}) lseek(r1, 0x2000, 0x0) 7.257673019s ago: executing program 0 (id=1226): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\n'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x279c, &(0x7f0000000040)={0x0, 0xa6f5, 0x0, 0x1, 0x1d4}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000180), 0x0) close(0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x242800, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x41, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000)) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x284, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x1) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000008c0)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20040090) recvmmsg(r8, &(0x7f0000002780)=[{{&(0x7f0000000480)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f0000000640)=""/202, 0xca}, {&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f0000000980)=""/143, 0x8f}], 0x5, &(0x7f0000000ac0)=""/130, 0x82}, 0x8}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000000b80)=""/112, 0x70}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000d00)=""/246, 0xf6}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/211, 0xd3}, {&(0x7f0000001f00)=""/86, 0x56}, {&(0x7f0000001f80)=""/236, 0xec}, {&(0x7f0000002080)=""/192, 0xc0}, {&(0x7f00000008c0)}], 0xa, &(0x7f0000002200)=""/179, 0xb3}, 0x7}, {{&(0x7f00000022c0)=@ax25={{0x3, @null}, [@netrom, @netrom, @bcast, @null, @remote, @bcast, @rose, @bcast]}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002340)=""/244, 0xf4}, {&(0x7f0000002440)=""/149, 0x95}, {&(0x7f0000002500)=""/181, 0xb5}, {&(0x7f00000025c0)=""/109, 0x6d}, {&(0x7f0000002640)=""/53, 0x35}, {&(0x7f0000002680)=""/9, 0x9}], 0x6, &(0x7f0000002740)=""/58, 0x3a}, 0x6}], 0x3, 0x202, &(0x7f0000002840)={0x77359400}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @loopback}, 0x10) 7.150350381s ago: executing program 1 (id=1227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0xc) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000000440)=""/107, &(0x7f00000004c0)=0x6b) 7.120700479s ago: executing program 4 (id=1228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000027"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r4, 0xd6970000) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x4, &(0x7f0000000400)={0x8, 0x800, 0x9, 0x1000, 0xbb1b, 0x0, 0x61, 0x4, 0x8001, 0x6, 0x8000000000000000, 0xf, 0x5, 0x8, 0xe6, 0x101, 0x1, 0x46, 0x8, 0x2, 0xc, 0x4, 0x3, 0x4, 0x2}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) 7.015225715s ago: executing program 2 (id=1229): r0 = socket(0x23, 0x80805, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00'], 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x30) socket$inet_udplite(0x2, 0x2, 0x88) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, 0x0, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x4083}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) 6.991899446s ago: executing program 3 (id=1230): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r0, 0x0, &(0x7f00000005c0)) 6.233913912s ago: executing program 1 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000002010101010000000000feff000000000908001a4000000003040019805d1b95c14d97f28325e795bdcc74857db57d028416b6"], 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0xc0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2509000000050007001e000000050008000e00000008000300", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x14) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r10 = io_uring_setup(0x35a7, &(0x7f00000000c0)={0x0, 0x7f12, 0x3410, 0x3, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r10, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) r11 = socket(0x25, 0x1, 0x0) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x4, {0x2}, 0xfe}, 0x18) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r13, @ANYRES16=r6, @ANYRES32=r1, @ANYBLOB="d506330080000000fffffdffffff0802110000", @ANYRES32=r8, @ANYRESDEC=r11], 0x6f4}, 0x1, 0x0, 0x0, 0x20c0}, 0x0) 6.127818747s ago: executing program 4 (id=1232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r1}) sched_setscheduler(r1, 0x0, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x30, 0x1405, 0x10, 0x70bd25, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) tkill(r5, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x5}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r9 = socket(0x18, 0x4, 0x0) getsockopt(r9, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000540)={'pim6reg\x00', 0x600}) 5.371910767s ago: executing program 0 (id=1233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='fsi_master_write\x00', r0}, 0x18) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0xa0000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000700)=""/55, 0x37, 0x0, &(0x7f0000000740)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000a000000000000000900e5ff17110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b702000014000000b703001b000000008500000000000000bf0900000000000000000000008520000005200000181100"/68, @ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x10, 0x8c, &(0x7f0000000600)=""/140, 0x41000, 0x14, '\x00', r2, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xf, 0xd970, 0x9}, 0x10, r3, 0xffffffffffffffff, 0x4, &(0x7f0000000800), &(0x7f0000000840)=[{0x2, 0x2, 0x8}, {0x405, 0x5, 0x4, 0x4}, {0x5, 0x2, 0x1, 0x8}, {0x4, 0x3, 0x2, 0x9}], 0x10, 0x7f}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r5, 0x0, 0x7dc9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getresgid(&(0x7f0000000040), &(0x7f00000001c0)=0x0, &(0x7f0000000300)) setfsgid(r8) 5.352196592s ago: executing program 3 (id=1234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, r1, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000380)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0xa, 0x3, 0x52f, 0x7fffffff, 0x401, 0x8000000000000000, 0xb3, 0x10001, 0xb1d, 0x4000000000000008, 0x7fffffff, 0x81, 0x3d9, 0x0, 0xe5, 0x9], 0x1000, 0x383fc2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.258078831s ago: executing program 2 (id=1235): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x448, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x337341fef48d726c}, @TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0xf, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xff, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0x7, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x448}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000002", @ANYRES16=r5, @ANYBLOB="10002abd700000dc9f251600000005000400010000000500020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x44850}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x448, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x337341fef48d726c}, @TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0xf, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xff, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0x7, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x448}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000002", @ANYRES16=r5, @ANYBLOB="10002abd700000dc9f251600000005000400010000000500020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x44850}, 0x20000000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) 5.016667651s ago: executing program 3 (id=1236): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x45}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048d4}, 0x20000000) r1 = socket(0x2b, 0x5, 0xbd) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x81, 0x0, 0xfff, 0x8001, 0x8}, 0x14) syz_emit_ethernet(0x2b, &(0x7f0000000540)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450c001d0000000000019078c11414bb6401010108009078000f00073e642f3bf4bb9c8a8630e6456a0a560552ba216ad97e3a6314e0542630a32058d61ce7cfdcc5b014145812bf6820ce94e535a78462e259ccc5129e069ec0cbf181b8a4404e11751a8e8679ddb5d046850049fbf7327c1f7554287990265f45e62697726a68f310dc50d923db392f5208e62ddea40120b01fcce92f70e13026b8d93cfff6bd13e6793c8baf0e8b17b83792525d3c78d4"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001ed000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x40005, 0x0}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000016000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r3, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) read(r7, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYRES16, @ANYRES16, @ANYBLOB="7c0a659218d449855cdd6b63f0f63edf01db5ca23b3bbac62d992cd9f094c089f86cef96d4d5920ab504c44b7a4db950a6dee0c3f07598dca669d8d809793a192b500e3a88ef8cb2036dea310e00fdf23959132da635469c31bbe4c61492c9771013a526721050eea91c63f3ddf5ff171795613123db1f70565245581250089249fccc37dea9567b1c5578f282145d45a901c2cc57c36f3626858f764f81106fd7d41b4de7d2741163e941faf4d32281e3f8ca693472e71b266f563e62a7e68da87b8166a9f8d65b4e6e214bdcb86da861945c15796e15508dc7c46a8bdced7f5f4e0a455857dccdab6220a8229731ea66badbd4653066aeb6d6e5b7b2cfb572184c0000de364317018f6263fc4aaa5935e45d130e745de42100000000495d6385731ce689a431caf62d36cc93d4753525439b2c120183b4160cf50f2ec455b35dead2c4c3e910663b64d61930b30716808324efca411e1ec1caa27c7900965415b91992f5fa9ec7a71f59f4c25221b061a2d47fcc7800f4a6db00f9c0890f5c1fb6a97e8c04a01783817a62eca921b051a5ebf7235552d238a1d1aaa33a45183f861a131d383345dbc399017768b25dd32d278bafa988215d30d271021d65018ec56182a290f2017d75b1e9e2e00b5151b48523dc82b74efc6b2b26c63eea8528e011d8315fc7f6ce87bbc5e441f0509a"], 0x28}}, 0x40800) r8 = io_uring_setup(0x1b7e, &(0x7f00000004c0)={0x0, 0xc89f, 0x1, 0x5, 0x20002fa}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002e80)={0x1144, 0x1d, 0x200, 0x70bd26, 0x25dfdbfe, "", [@generic="9de3ea832f1f75e206b4a87f3c706f3b007a915f60242eb523e9c4a745faa56cf6d18fe8af006dad5a537d7b6fd91294f87c382f06a2b4efb645a4efaa96a899e741716327f1f2a4ec8024866daa1b7c031f651f7b733e3970b2b5a6c23eaeb0d7f0711b332bdc1ba715c9c46decdfe5f1af56032e795fea432024d124b016542392268f24f2253d423a8978aa27aa684ef7f654860b39353b93c608bd1e0c0f373cac317847c2719725db74f683e46c20cb2372d211f3c5eecf29e3b7cd7f8b614d681767d0c407891b895281bb5bec0299f6a9d32acbecc01b30ed3fb1633decd653a0f42face22b", @generic="87a8d46617e0ee0ba6c2e4cb3aa0047501abdd77b4a413c003dd62fe43bfed3846b167f30a6ce56ca16985f1c22a68dbbe9e3fcca8a6", @generic="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", @typed={0x14, 0xe7, 0x0, 0x0, @ipv6=@remote}]}, 0x1144}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.992747628s ago: executing program 2 (id=1237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000980)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x101842, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 102.586356ms ago: executing program 0 (id=1238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0118"]) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rpc_xdr_alignment\x00', r4, 0x0, 0x8000000000}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', './file0'}, 0xb) ftruncate(r6, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=1239): inotify_init() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x4004743c, 0xf0ff1f00000000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c694000000000000feff2c707f8f00ff", 0x58}], 0x1) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r6}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=[0x0], 0x0, 0x95, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xe9, 0x8, 0x0, 0x0}}, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r9, 0x50dc85624ea6cf59, 0x0, 0x801, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) kernel console output (not intermixed with test programs): 0007fb183be6218 R14: 00007fb183be6180 R15: 00007ffed100fff8 [ 233.272570][ T8158] [ 233.465513][ T30] audit: type=1400 audit(1766186104.665:483): avc: denied { mount } for pid=8153 comm="syz.1.533" name="/" dev="autofs" ino=16922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 233.508277][ T30] audit: type=1400 audit(1766186104.955:484): avc: denied { setopt } for pid=8156 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.545207][ T5930] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 234.296201][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 234.303360][ T30] audit: type=1400 audit(1766186105.765:485): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 234.334723][ T5930] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=d5.47 [ 234.354441][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.374654][ T5930] usb 5-1: Product: syz [ 234.387057][ T5930] usb 5-1: Manufacturer: syz [ 234.398934][ T5930] usb 5-1: SerialNumber: syz [ 234.414805][ T5930] usb 5-1: config 0 descriptor?? [ 234.433540][ T5930] mcba_usb 5-1:0.0: Can't find endpoints [ 234.636788][ T9] usb 5-1: USB disconnect, device number 20 [ 235.355272][ T5976] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.447585][ T30] audit: type=1400 audit(1766186106.915:486): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 235.605190][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 235.623736][ T5976] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.645191][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.653242][ T5976] usb 3-1: Product: syz [ 235.665383][ T5976] usb 3-1: Manufacturer: syz [ 235.670066][ T5976] usb 3-1: SerialNumber: syz [ 235.738107][ T5976] usb 3-1: config 0 descriptor?? [ 235.745774][ T8192] program syz.3.541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.991900][ T5976] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.168293][ T8187] 9p: Bad value for 'rfdno' [ 236.488087][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 236.832887][ T30] audit: type=1400 audit(1766186108.295:487): avc: denied { ioctl } for pid=8213 comm="syz.0.546" path="socket:[17040]" dev="sockfs" ino=17040 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.411895][ T30] audit: type=1400 audit(1766186108.875:488): avc: denied { append } for pid=8173 comm="syz.2.538" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.627264][ T5976] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 237.752650][ T5976] usb 3-1: USB disconnect, device number 14 [ 239.382558][ T8270] program syz.4.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.575356][ T5976] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 239.695888][ T8275] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.555'. [ 239.737764][ T9] IPVS: starting estimator thread 0... [ 239.755374][ T5976] usb 2-1: Using ep0 maxpacket: 16 [ 239.772506][ T5976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.797250][ T5976] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 239.822389][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.838205][ T8279] IPVS: using max 45 ests per chain, 108000 per kthread [ 239.842696][ T5976] usb 2-1: config 0 descriptor?? [ 239.864416][ T30] audit: type=1400 audit(1766186111.325:489): avc: denied { create } for pid=8283 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 239.888351][ T30] audit: type=1400 audit(1766186111.355:490): avc: denied { setopt } for pid=8283 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 239.911922][ T8287] loop8: detected capacity change from 0 to 8 [ 239.926474][ T8287] Dev loop8: unable to read RDB block 8 [ 239.944395][ T8287] loop8: unable to read partition table [ 239.951758][ T8287] loop8: partition table beyond EOD, truncated [ 240.054374][ T8287] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 241.146732][ T8310] program syz.4.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.436718][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 241.832290][ T8325] overlayfs: failed to resolve './file0': -2 [ 243.095567][ T5976] usbhid 2-1:0.0: can't add hid device: -71 [ 243.101568][ T5976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 243.155020][ T5976] usb 2-1: USB disconnect, device number 16 [ 243.725510][ T30] audit: type=1400 audit(1766186115.195:491): avc: denied { ioctl } for pid=8367 comm="syz.1.574" path="socket:[16093]" dev="sockfs" ino=16093 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.003361][ T49] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 248.195207][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 248.210658][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.229760][ T49] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 248.265390][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.295066][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 248.310565][ T49] usb 2-1: config 0 descriptor?? [ 250.765428][ T30] audit: type=1400 audit(1766186122.215:492): avc: denied { shutdown } for pid=8450 comm="syz.3.590" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.131031][ T49] usbhid 2-1:0.0: can't add hid device: -71 [ 251.189469][ T49] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 251.241632][ T49] usb 2-1: USB disconnect, device number 17 [ 251.356773][ T8456] netlink: 72 bytes leftover after parsing attributes in process `syz.3.590'. [ 251.537336][ T8470] netlink: 48 bytes leftover after parsing attributes in process `syz.4.594'. [ 251.606680][ T49] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 251.692306][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.699845][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.368751][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 252.383682][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.457932][ T49] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 252.469532][ T8471] bridge0: entered allmulticast mode [ 252.507297][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.606283][ T49] usb 2-1: config 0 descriptor?? [ 252.820135][ T8471] netlink: 'syz.4.594': attribute type 2 has an invalid length. [ 253.992980][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 254.413728][ T8464] syz.4.594 (8464): drop_caches: 2 [ 254.632192][ T8515] tmpfs: Bad value for 'mpol' [ 255.278077][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.289195][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.386966][ T49] usbhid 2-1:0.0: can't add hid device: -71 [ 255.397328][ T49] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 255.447198][ T49] usb 2-1: USB disconnect, device number 18 [ 255.695182][ T5994] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 255.905263][ T5994] usb 5-1: Using ep0 maxpacket: 16 [ 255.913925][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.937173][ T5994] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 255.968150][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.993240][ T8536] IPVS: set_ctl: invalid protocol: 176 100.1.1.0:20000 [ 256.001945][ T5994] usb 5-1: config 0 descriptor?? [ 257.399835][ T8558] netlink: 260 bytes leftover after parsing attributes in process `syz.2.610'. [ 257.629208][ T30] audit: type=1400 audit(1766186128.925:493): avc: denied { setopt } for pid=8556 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.926121][ T30] audit: type=1400 audit(1766186128.935:494): avc: denied { write } for pid=8556 comm="syz.2.610" path="socket:[17499]" dev="sockfs" ino=17499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.949439][ T8563] netlink: 'syz.3.611': attribute type 2 has an invalid length. [ 260.086187][ T30] audit: type=1400 audit(1766186128.985:495): avc: denied { append } for pid=8556 comm="syz.2.610" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 260.154288][ T30] audit: type=1400 audit(1766186129.415:496): avc: denied { nlmsg_write } for pid=8560 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 260.197905][ T5994] usbhid 5-1:0.0: can't add hid device: -71 [ 260.206455][ T8577] tmpfs: Bad value for 'mpol' [ 260.216923][ T5994] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 260.361956][ T5994] usb 5-1: USB disconnect, device number 21 [ 261.299103][ T30] audit: type=1400 audit(1766186132.765:497): avc: denied { create } for pid=8581 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 263.661269][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 263.685175][ T5976] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 264.005614][ T5976] usb 5-1: config 0 has no interfaces? [ 264.017347][ T5976] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 264.035851][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.051519][ T5976] usb 5-1: Product: syz [ 264.060369][ T5976] usb 5-1: Manufacturer: syz [ 264.072184][ T5976] usb 5-1: SerialNumber: syz [ 264.085398][ T5976] usb 5-1: config 0 descriptor?? [ 264.555582][ T8631] tmpfs: Bad value for 'mpol' [ 264.716625][ T8635] netlink: 72 bytes leftover after parsing attributes in process `syz.0.627'. [ 264.730174][ T8635] netlink: 220 bytes leftover after parsing attributes in process `syz.0.627'. [ 265.996148][ T5994] usb 5-1: USB disconnect, device number 22 [ 266.620071][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 266.653837][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 266.663630][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 266.673012][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 266.736835][ T5994] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.804542][ T5926] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 266.906648][ T5994] usb 5-1: config 6 has an invalid interface number: 244 but max is 3 [ 267.164741][ T5926] usb 3-1: config index 0 descriptor too short (expected 530, got 18) [ 267.170380][ T5994] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 267.176214][ T5926] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 267.199848][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.202987][ T5994] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 267.214232][ T5926] usb 3-1: config 0 descriptor?? [ 267.223355][ T5994] usb 5-1: config 6 has no interface number 0 [ 267.229867][ T5994] usb 5-1: config 6 interface 244 altsetting 129 endpoint 0x9 has an invalid bInterval 147, changing to 7 [ 267.244279][ T5994] usb 5-1: config 6 interface 244 altsetting 129 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 267.258744][ T5994] usb 5-1: config 6 interface 244 has no altsetting 0 [ 267.267918][ T5994] usb 5-1: New USB device found, idVendor=12d1, idProduct=07ad, bcdDevice=22.c7 [ 267.277281][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.286153][ T5994] usb 5-1: Product: 긌ᝧ臘橜㐕覎෌쵔驷뽵ᢞ蘂漫塯縙영釻紀ﵘ㯕灗朘뵯輲ᐋ☈語 [ 267.297589][ T5994] usb 5-1: Manufacturer: љ [ 267.302113][ T5994] usb 5-1: SerialNumber: Ф [ 267.416206][ T30] audit: type=1400 audit(1766186138.885:498): avc: denied { read } for pid=8663 comm="syz.1.637" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 267.416304][ T8664] random: crng reseeded on system resumption [ 267.506734][ T5926] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 267.733835][ T5994] option 5-1:6.244: GSM modem (1-port) converter detected [ 267.756865][ T8668] netlink: 111 bytes leftover after parsing attributes in process `syz.0.638'. [ 267.854382][ T5994] usb 5-1: USB disconnect, device number 23 [ 267.875212][ T5926] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 267.890795][ T5994] option 5-1:6.244: device disconnected [ 267.898713][ T49] usb 3-1: USB disconnect, device number 15 [ 268.525181][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 268.534267][ T5926] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 268.542883][ T5926] usb 2-1: config 0 has no interface number 0 [ 268.552153][ T5926] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 268.561603][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.569992][ T5926] usb 2-1: Product: syz [ 268.574382][ T5926] usb 2-1: Manufacturer: syz [ 268.579180][ T5926] usb 2-1: SerialNumber: syz [ 268.589133][ T5926] usb 2-1: config 0 descriptor?? [ 268.849518][ T8677] tmpfs: Bad value for 'mpol' [ 269.051017][ T30] audit: type=1400 audit(1766186140.515:499): avc: denied { write } for pid=8684 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 269.072496][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 269.856683][ T5926] radio-si470x 2-1:0.35: this is not a si470x device. [ 269.890114][ T5926] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 269.981183][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 271.015335][ T49] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 271.053994][ T8690] usb 2-1: USB disconnect, device number 19 [ 271.215378][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 271.227116][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.645'. [ 271.232025][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.335516][ T8709] program syz.1.648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.551594][ T49] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 271.563724][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.573953][ T49] usb 3-1: config 0 descriptor?? [ 273.606314][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 273.652284][ T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 273.693436][ T49] usb 3-1: USB disconnect, device number 16 [ 273.838057][ T30] audit: type=1400 audit(1766186145.305:500): avc: denied { accept } for pid=8743 comm="syz.4.652" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff01::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.381560][ T30] audit: type=1400 audit(1766186145.305:501): avc: denied { read write } for pid=8743 comm="syz.4.652" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 274.448324][ T30] audit: type=1400 audit(1766186145.305:502): avc: denied { open } for pid=8743 comm="syz.4.652" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 274.500545][ T30] audit: type=1400 audit(1766186145.485:503): avc: denied { write } for pid=8741 comm="syz.2.653" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 274.603538][ T8755] tmpfs: Bad value for 'mpol' [ 275.214451][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 275.455166][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 275.505168][ T9] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 275.575714][ T9] usb 4-1: config 0 has no interface number 0 [ 275.604124][ T9] usb 4-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 275.627505][ T9] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 275.643758][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.663855][ T9] usb 4-1: Product: syz [ 275.673737][ T9] usb 4-1: Manufacturer: syz [ 275.685907][ T9] usb 4-1: SerialNumber: syz [ 275.838060][ T9] usb 4-1: config 0 descriptor?? [ 275.843774][ T8753] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 276.963023][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 276.992627][ T30] audit: type=1800 audit(1766186148.435:504): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.655" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 277.050998][ T30] audit: type=1400 audit(1766186148.485:505): avc: denied { connect } for pid=8752 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.175202][ T5926] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 277.335291][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 277.345053][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.502134][ T5926] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 277.531512][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.553207][ T5926] usb 5-1: config 0 descriptor?? [ 278.522873][ T9] asix 4-1:0.191: probe with driver asix failed with error -71 [ 278.556225][ T9] usb 4-1: USB disconnect, device number 8 [ 279.755473][ T5926] usbhid 5-1:0.0: can't add hid device: -71 [ 279.765297][ T5926] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 279.805848][ T5926] usb 5-1: USB disconnect, device number 24 [ 281.480143][ T5825] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 281.768328][ T8854] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.868680][ T8862] overlayfs: failed to get inode (-116) [ 281.878891][ T8862] overlayfs: failed to get inode (-116) [ 281.889845][ T8862] overlayfs: failed to get inode (-116) [ 281.905349][ T8862] overlayfs: failed to get inode (-116) [ 282.055461][ T8866] sctp: [Deprecated]: syz.2.678 (pid 8866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.055461][ T8866] Use struct sctp_sack_info instead [ 283.005188][ T5930] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 283.050088][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 283.072386][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 283.092677][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 283.101647][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 283.165303][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 283.236207][ T5930] usb 3-1: not running at top speed; connect to a high speed hub [ 283.333076][ T5930] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 283.355173][ T5930] usb 3-1: config 95 has no interface number 0 [ 283.376020][ T5930] usb 3-1: config 95 interface 1 has no altsetting 0 [ 283.441543][ T5930] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 283.464547][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.482859][ T5930] usb 3-1: Product: syz [ 283.487451][ T5930] usb 3-1: Manufacturer: syz [ 283.492035][ T5930] usb 3-1: SerialNumber: syz [ 283.527221][ T8882] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 283.533848][ T8882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 283.656451][ T8882] vhci_hcd vhci_hcd.0: Device attached [ 283.841380][ T5930] usb 3-1: USB disconnect, device number 17 [ 283.976440][ T9] usb 42-1: SetAddress Request (2) to port 0 [ 283.982606][ T9] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 284.034525][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.133668][ T8883] vhci_hcd: connection closed [ 284.133868][ T285] vhci_hcd vhci_hcd.4: stop threads [ 284.313965][ T285] vhci_hcd vhci_hcd.4: release socket [ 284.788667][ T285] vhci_hcd vhci_hcd.4: disconnect device [ 285.813579][ T8913] overlay: ./file0 is not a directory [ 286.341145][ T8925] SELinux: Context : is not valid (left unmapped). [ 286.461957][ T30] audit: type=1400 audit(1766186157.925:506): avc: denied { relabelto } for pid=8921 comm="syz.0.692" name="rdma.current" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 286.965183][ T30] audit: type=1400 audit(1766186157.925:507): avc: denied { associate } for pid=8921 comm="syz.0.692" name="rdma.current" dev="tmpfs" ino=764 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 287.065505][ T30] audit: type=1400 audit(1766186158.415:508): avc: denied { unlink } for pid=5808 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 287.778061][ T5870] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 287.935221][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 287.965389][ T5870] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 287.974442][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.982673][ T5870] usb 3-1: Product: syz [ 287.986902][ T5870] usb 3-1: Manufacturer: syz [ 287.991474][ T5870] usb 3-1: SerialNumber: syz [ 288.004393][ T5870] usb 3-1: config 0 descriptor?? [ 288.093407][ T5870] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 288.209540][ T5870] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 288.278333][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.698'. [ 288.287266][ T8945] netlink: 'syz.0.698': attribute type 7 has an invalid length. [ 288.368368][ T8945] netlink: 'syz.0.698': attribute type 8 has an invalid length. [ 288.383338][ T5870] usb 3-1: USB disconnect, device number 18 [ 288.406934][ T30] audit: type=1400 audit(1766186159.875:509): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=3019 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.444828][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 288.509315][ T30] audit: type=1400 audit(1766186159.875:510): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3019 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.801246][ T30] audit: type=1400 audit(1766186160.265:511): avc: denied { write } for pid=8952 comm="syz.4.699" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 289.457924][ T9] usb 42-1: device descriptor read/8, error -110 [ 289.750583][ T8972] lo speed is unknown, defaulting to 1000 [ 289.845967][ T9] usb usb42-port1: attempt power cycle [ 289.875199][ T5870] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 290.045389][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 290.060838][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.070496][ T5870] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 290.079916][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.088132][ T5870] usb 3-1: Product: syz [ 290.093612][ T5870] usb 3-1: Manufacturer: syz [ 290.098558][ T5870] usb 3-1: SerialNumber: syz [ 290.106734][ T5870] usb 3-1: config 0 descriptor?? [ 290.184419][ T30] audit: type=1400 audit(1766186161.645:512): avc: denied { accept } for pid=8978 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 290.362923][ T5926] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 290.617847][ T5870] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 290.646564][ T5926] usb 4-1: config index 0 descriptor too short (expected 530, got 18) [ 290.657034][ T5926] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 290.666176][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.701159][ T5926] usb 4-1: config 0 descriptor?? [ 290.711960][ T9] usb usb42-port1: unable to enumerate USB device [ 291.100626][ T30] audit: type=1400 audit(1766186162.565:513): avc: denied { create } for pid=8989 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.159539][ T30] audit: type=1400 audit(1766186162.585:514): avc: denied { connect } for pid=8989 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.199204][ T30] audit: type=1400 audit(1766186162.585:515): avc: denied { write } for pid=8989 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.258097][ T5870] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 291.266768][ T5870] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 291.286493][ T5926] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 291.385848][ T9001] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 291.396095][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 291.483504][ T49] usb 4-1: USB disconnect, device number 9 [ 291.545184][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 291.553614][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.564504][ T9] usb 2-1: config 0 has no interfaces? [ 291.570239][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 291.579537][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.596683][ T9] usb 2-1: config 0 descriptor?? [ 291.685226][ T5926] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 291.839490][ T5926] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=8f.4f [ 291.849066][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.857460][ T5926] usb 5-1: Product: syz [ 291.861631][ T5926] usb 5-1: Manufacturer: syz [ 291.866758][ T5926] usb 5-1: SerialNumber: syz [ 291.876917][ T5926] usb 5-1: config 0 descriptor?? [ 292.305252][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 292.466775][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.479058][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.489090][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 292.498188][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.509010][ T9] usb 4-1: config 0 descriptor?? [ 292.720627][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.730781][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.867956][ T5870] usb 3-1: USB disconnect, device number 19 [ 292.967268][ T5926] airspy 5-1:0.0: usb_control_msg() failed -110 request 09 [ 292.974546][ T5926] airspy 5-1:0.0: Could not detect board [ 293.288065][ T5926] airspy 5-1:0.0: probe with driver airspy failed with error -110 [ 294.118137][ T30] audit: type=1400 audit(1766186165.585:516): avc: denied { lock } for pid=9023 comm="syz.0.717" path="socket:[19040]" dev="sockfs" ino=19040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.160166][ T5870] usb 2-1: USB disconnect, device number 20 [ 294.449198][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 294.968791][ T5870] usb 5-1: USB disconnect, device number 25 [ 295.076275][ T9036] syzkaller0: entered promiscuous mode [ 295.083570][ T9036] syzkaller0: entered allmulticast mode [ 295.251301][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 295.335254][ T30] audit: type=1400 audit(1766186166.795:517): avc: denied { create } for pid=9040 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 295.694370][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 295.704561][ T9] usb 4-1: USB disconnect, device number 10 [ 295.730264][ T30] audit: type=1400 audit(1766186166.855:518): avc: denied { write } for pid=9040 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 295.770425][ T9050] tipc: Enabled bearer , priority 0 [ 295.798222][ T9047] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 295.829834][ T9047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.849075][ T9035] tipc: Resetting bearer [ 295.868901][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 295.911972][ T30] audit: type=1400 audit(1766186167.245:519): avc: denied { ioctl } for pid=9040 comm="syz.2.725" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 295.993798][ T9035] tipc: Disabling bearer [ 296.002332][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 296.022529][ T9047] bond2: (slave dummy0): making interface the new active one [ 296.036554][ T9047] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 296.053439][ T9055] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 296.075835][ T9047] netlink: 'syz.1.723': attribute type 10 has an invalid length. [ 296.083621][ T9047] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 296.098701][ T30] audit: type=1400 audit(1766186167.565:520): avc: denied { bind } for pid=9052 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.122370][ T9055] batman_adv: batadv0: Adding interface: ip6gretap1 [ 296.129256][ T9055] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.166167][ T30] audit: type=1326 audit(1766186167.625:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9043 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 296.201285][ T9055] batman_adv: batadv0: Interface activated: ip6gretap1 [ 296.217215][ T9047] dummy0: entered promiscuous mode [ 296.225065][ T9047] bond2: (slave dummy0): Releasing active interface [ 296.257327][ T30] audit: type=1326 audit(1766186167.635:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9043 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 296.291108][ T30] audit: type=1326 audit(1766186167.635:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9043 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 296.405742][ T30] audit: type=1326 audit(1766186167.635:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9043 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 296.435432][ T30] audit: type=1326 audit(1766186167.635:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9043 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 296.558654][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 296.667715][ T49] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 296.709558][ T9072] netlink: 'syz.1.732': attribute type 32 has an invalid length. [ 296.857734][ T49] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.873931][ T49] usb 5-1: not running at top speed; connect to a high speed hub [ 296.891885][ T49] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.922811][ T49] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.963348][ T49] usb 5-1: string descriptor 0 read error: -22 [ 296.970009][ T49] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.982118][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.018355][ T49] usb 5-1: 0:2 : does not exist [ 297.137935][ T9085] lo speed is unknown, defaulting to 1000 [ 297.145877][ T5930] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 297.328910][ T5930] usb 4-1: config index 0 descriptor too short (expected 530, got 18) [ 297.355373][ T5930] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 297.365977][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.382154][ T5930] usb 4-1: config 0 descriptor?? [ 297.597703][ T5930] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 297.850253][ T9] usb 4-1: USB disconnect, device number 11 [ 298.455561][ T49] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 298.477199][ T49] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 298.534936][ T49] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 298.558117][ T49] usb 5-1: USB disconnect, device number 26 [ 298.628661][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 298.728025][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.320712][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 299.320730][ T30] audit: type=1400 audit(1766186170.745:542): avc: denied { read } for pid=9120 comm="syz.4.748" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 299.358996][ T30] audit: type=1400 audit(1766186170.745:543): avc: denied { open } for pid=9120 comm="syz.4.748" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 299.444622][ T30] audit: type=1400 audit(1766186170.745:544): avc: denied { ioctl } for pid=9120 comm="syz.4.748" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 300.224544][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.451017][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 300.487717][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 300.564727][ T9113] delete_channel: no stack [ 300.908568][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.970932][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 300.971925][ T1857] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.980442][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 301.001530][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 301.050743][ T1857] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.081377][ T1857] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.113829][ T1857] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.276423][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.360246][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 301.528924][ T9151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'. [ 301.755625][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.357412][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.496619][ T30] audit: type=1400 audit(1766186173.965:545): avc: denied { ioctl } for pid=9164 comm="syz.2.758" path="socket:[19338]" dev="sockfs" ino=19338 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 303.014988][ T9190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.023720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.053946][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 303.435936][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.444415][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.673937][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.682640][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.844574][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.934250][ T30] audit: type=1400 audit(1766186176.285:546): avc: denied { create } for pid=9210 comm="syz.3.768" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 305.073356][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.466767][ T9226] fuse: Bad value for 'fd' [ 305.677120][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.840312][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.848666][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.920986][ T30] audit: type=1400 audit(1766186177.385:547): avc: denied { unlink } for pid=5809 comm="syz-executor" name="file5" dev="tmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 306.724619][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.820023][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 306.875366][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.922420][ T9240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.777'. [ 306.985354][ T30] audit: type=1400 audit(1766186178.455:548): avc: denied { mount } for pid=9243 comm="syz.3.780" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 307.204110][ T30] audit: type=1400 audit(1766186178.665:549): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 307.378468][ T6001] udevd[6001]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 307.512091][ T9264] netlink: 5 bytes leftover after parsing attributes in process `syz.2.782'. [ 307.755501][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.860142][ T30] audit: type=1400 audit(1766186179.325:550): avc: denied { execute_no_trans } for pid=9273 comm="syz.1.787" path="/167/file0" dev="tmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 307.877432][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 308.981692][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 309.835565][ T5930] net_ratelimit: 5 callbacks suppressed [ 309.835581][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.995316][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.328520][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.478495][ T9321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=9321 comm=syz.1.799 [ 310.493603][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 310.876026][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.059151][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.059355][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.129059][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.595903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.740950][ T9330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.749296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.784340][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 312.560931][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 312.607014][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 314.935161][ T30] audit: type=1400 audit(1766186186.385:551): avc: denied { bind } for pid=9358 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 315.035479][ T5976] net_ratelimit: 8 callbacks suppressed [ 315.035495][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.190854][ T30] audit: type=1400 audit(1766186186.655:552): avc: denied { execute } for pid=9360 comm="syz.2.811" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.225242][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.436334][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.659618][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 316.127694][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.136502][ T5976] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 316.155301][ T5870] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 316.174518][ T9387] hub 1-0:1.0: USB hub found [ 316.236358][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.645502][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 316.656483][ T9387] hub 1-0:1.0: 1 port detected [ 316.709388][ T5976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.719813][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.735198][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 316.735445][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.747147][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.748147][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.794217][ T5870] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 316.804002][ T5976] usb 3-1: config 0 has no interface number 0 [ 316.815239][ T5976] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.838760][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.855208][ T5976] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.865358][ T5976] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 316.895184][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.947573][ T5976] usb 3-1: config 0 descriptor?? [ 316.953477][ T5870] usb 5-1: config 0 descriptor?? [ 316.988093][ T9395] fuse: Bad value for 'fd' [ 317.214196][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.277521][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.567769][ T5976] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71 [ 317.581306][ T5976] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71 [ 317.592215][ T5976] uclogic 0003:28BD:0071.0005: pen probing failed: -71 [ 317.599530][ T5976] uclogic 0003:28BD:0071.0005: failed probing parameters: -71 [ 317.605750][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.615479][ T5976] uclogic 0003:28BD:0071.0005: probe with driver uclogic failed with error -71 [ 317.658634][ T5976] usb 3-1: USB disconnect, device number 20 [ 318.030795][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.824'. [ 318.139154][ T9413] bond0: ARP target 170.170.170.170 is already present [ 318.198143][ T9413] bond0: option arp_ip_target: invalid value (2863311530) [ 318.238414][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.551666][ T30] audit: type=1400 audit(1766186190.015:553): avc: denied { append } for pid=9421 comm="syz.2.825" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 318.631602][ T30] audit: type=1400 audit(1766186190.015:554): avc: denied { map } for pid=9421 comm="syz.2.825" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 318.856823][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 318.882839][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 318.944825][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 318.955155][ T30] audit: type=1400 audit(1766186190.015:555): avc: denied { execute } for pid=9421 comm="syz.2.825" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 318.997397][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 319.024369][ T5870] usbhid 5-1:0.0: can't add hid device: -71 [ 319.040157][ T30] audit: type=1400 audit(1766186190.185:556): avc: denied { mount } for pid=9422 comm="syz.0.827" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 319.040955][ T5870] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 319.165298][ T5976] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 320.568727][ T5934] net_ratelimit: 3 callbacks suppressed [ 320.568742][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.582592][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.615212][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 320.624092][ T5976] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 320.636598][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.693687][ T5976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.718711][ T30] audit: type=1400 audit(1766186192.085:557): avc: denied { connect } for pid=9436 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.826158][ T5976] usb 3-1: config 0 has no interface number 0 [ 320.875589][ T5976] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 320.946499][ T9439] tipc: Started in network mode [ 320.970752][ T5976] usb 3-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.994397][ T9439] tipc: Node identity 46aaf43a9271, cluster identity 4711 [ 321.047810][ T9439] tipc: Enabled bearer , priority 0 [ 321.062760][ T5976] usb 3-1: config 0 interface 98 has no altsetting 0 [ 321.098824][ T9440] syzkaller0: entered promiscuous mode [ 321.125801][ T5976] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 321.131337][ T5870] usb 5-1: USB disconnect, device number 27 [ 321.147993][ T9440] syzkaller0: entered allmulticast mode [ 321.154498][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.179357][ T5976] usb 3-1: Product: syz [ 321.188511][ T9439] tipc: Resetting bearer [ 321.197166][ T5976] usb 3-1: Manufacturer: syz [ 321.207014][ T5976] usb 3-1: SerialNumber: syz [ 321.222294][ T5976] usb 3-1: config 0 descriptor?? [ 321.228269][ T9431] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 321.229982][ T9449] Cannot find set identified by id 0 to match [ 321.243400][ T5976] asix 3-1:0.98: probe with driver asix failed with error -22 [ 321.935367][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.946099][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.956805][ T9436] tipc: Resetting bearer [ 322.000394][ T5961] usb 3-1: USB disconnect, device number 21 [ 322.027987][ T9436] tipc: Disabling bearer [ 322.640579][ T30] audit: type=1400 audit(1766186194.105:558): avc: denied { map } for pid=9458 comm="syz.4.838" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 322.679201][ T9461] tmpfs: Unknown parameter 'm z ' [ 322.809489][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.878756][ T9469] Cannot find add_set index 0 as target [ 322.912696][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 322.945257][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 322.963004][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.971578][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.991888][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 323.003459][ T9473] tmpfs: Bad value for 'mpol' [ 323.089540][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 323.676138][ T8690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.981950][ T5930] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 324.808910][ T30] audit: type=1400 audit(1766186195.555:559): avc: denied { create } for pid=9481 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 325.035624][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.302568][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.311262][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.311600][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.325599][ T30] audit: type=1400 audit(1766186195.605:560): avc: denied { sys_admin } for pid=9481 comm="syz.2.843" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 326.433483][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 326.457688][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.473933][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.483874][ T5930] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 326.494795][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.526935][ T5930] usb 4-1: config 0 descriptor?? [ 326.539259][ T9497] netlink: 'syz.0.848': attribute type 21 has an invalid length. [ 326.566733][ T9497] netlink: 164 bytes leftover after parsing attributes in process `syz.0.848'. [ 326.597099][ T30] audit: type=1400 audit(1766186198.065:561): avc: denied { mounton } for pid=9496 comm="syz.0.848" path="/file0" dev="ramfs" ino=21010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 326.678715][ T9499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.718377][ T9499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.722614][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.742990][ T9499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.829350][ T5930] usbhid 4-1:0.0: can't add hid device: -71 [ 326.842767][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 326.904065][ T9499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.956612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.969187][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.015205][ T30] audit: type=1400 audit(1766186198.475:562): avc: denied { unmount } for pid=9506 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 327.035733][ T5930] usb 4-1: USB disconnect, device number 12 [ 327.065214][ T30] audit: type=1400 audit(1766186198.525:563): avc: denied { ioctl } for pid=9494 comm="syz.2.845" path="socket:[20945]" dev="sockfs" ino=20945 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.109631][ T9512] tmpfs: Bad value for 'mpol' [ 327.717879][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 327.801712][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 327.911021][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'. [ 327.924883][ T9530] netlink: 5 bytes leftover after parsing attributes in process `syz.2.857'. [ 328.092589][ T30] audit: type=1400 audit(1766186199.535:564): avc: denied { relabelfrom } for pid=9518 comm="syz.4.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 328.186056][ T9544] 9p: Bad value for 'wfdno' [ 328.241617][ T30] audit: type=1400 audit(1766186199.585:565): avc: denied { relabelto } for pid=9518 comm="syz.4.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 328.857332][ T30] audit: type=1400 audit(1766186199.945:566): avc: denied { mounton } for pid=9547 comm="syz.0.861" path="/172/file0" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 329.070007][ T9548] 9p: Could not find request transport: f [ 329.565450][ T5926] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 329.616389][ T9568] netlink: 'syz.1.868': attribute type 10 has an invalid length. [ 329.625465][ T9568] hsr0: entered promiscuous mode [ 329.687022][ T9568] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 329.746624][ T9568] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 329.775160][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 329.816744][ T9568] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 329.816798][ T5926] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 329.879796][ T9574] tmpfs: Bad value for 'mpol' [ 329.905963][ T5926] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.048434][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 330.482084][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 330.755478][ T5926] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.765304][ T5926] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.776713][ T5926] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.825247][ T5926] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 330.846817][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.636543][ T9590] capability: warning: `syz.1.873' uses deprecated v2 capabilities in a way that may be insecure [ 331.741111][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 331.822857][ T5926] usb 4-1: GET_CAPABILITIES returned 0 [ 331.832128][ T5926] usbtmc 4-1:16.0: can't read capabilities [ 332.384800][ T5961] net_ratelimit: 52 callbacks suppressed [ 332.384816][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.400104][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.430282][ T9560] netlink: 'syz.3.864': attribute type 1 has an invalid length. [ 332.485022][ T9560] bond2: entered promiscuous mode [ 332.508753][ T9560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.562273][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.864'. [ 332.587749][ T9560] bond2: entered allmulticast mode [ 332.600954][ T9560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9560 comm=syz.3.864 [ 332.666418][ T9560] bond2: (slave bridge2): making interface the new active one [ 332.695214][ T9560] bridge2: entered promiscuous mode [ 332.703962][ T9560] bridge2: entered allmulticast mode [ 332.722064][ T9560] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 332.752073][ T5870] usb 4-1: USB disconnect, device number 13 [ 333.438752][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.446177][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.455663][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.515351][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.743140][ T9596] Set syz1 is full, maxelem 65536 reached [ 333.762674][ T5930] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 334.688694][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.698660][ T5930] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 334.712683][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.772159][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.777400][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.791807][ T9630] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 334.801208][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.861700][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 334.897244][ T5930] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 335.718782][ T5930] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 335.727528][ T5930] usb 3-1: Manufacturer: syz [ 335.790357][ T9640] netlink: 92 bytes leftover after parsing attributes in process `syz.3.889'. [ 335.800186][ T9640] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 335.814659][ T5930] usb 3-1: config 0 descriptor?? [ 335.815888][ T9640] PKCS7: Only support pkcs7_signedData type [ 336.849644][ T5930] appleir 0003:05AC:8243.0006: item fetching failed at offset 0/1 [ 336.860670][ T5930] appleir 0003:05AC:8243.0006: parse failed [ 336.891232][ T5930] appleir 0003:05AC:8243.0006: probe with driver appleir failed with error -22 [ 336.958959][ T9653] tmpfs: Bad value for 'mpol' [ 337.090012][ T5930] usb 3-1: USB disconnect, device number 22 [ 337.519619][ T49] net_ratelimit: 6 callbacks suppressed [ 337.519640][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.562080][ T6758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.571059][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.581037][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.916393][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.925547][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.655805][ T9665] hub 1-0:1.0: USB hub found [ 338.662039][ T9665] hub 1-0:1.0: 1 port detected [ 338.744973][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 338.886896][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 338.972476][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.115010][ T9677] FAT-fs (loop7): unable to read boot sector [ 339.642765][ T30] audit: type=1400 audit(1766186210.575:567): avc: denied { mounton } for pid=9668 comm="syz.3.899" path="/181/file0" dev="tmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.712312][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.726722][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 339.745227][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 339.765224][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.031125][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.179866][ T30] audit: type=1400 audit(1766186211.645:568): avc: denied { ioctl } for pid=9667 comm="syz.2.898" path="socket:[20331]" dev="sockfs" ino=20331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.207203][ T30] audit: type=1400 audit(1766186211.675:569): avc: denied { ioctl } for pid=9667 comm="syz.2.898" path="socket:[20324]" dev="sockfs" ino=20324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 340.210361][ T5926] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 340.241755][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 340.276619][ T9670] hsr_slave_0: left promiscuous mode [ 340.282360][ T9670] hsr_slave_1: left promiscuous mode [ 340.449669][ T5926] usb 4-1: device descriptor read/64, error -71 [ 340.856756][ T5926] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 341.056484][ T5926] usb 4-1: device descriptor read/64, error -71 [ 341.604953][ T5926] usb usb4-port1: attempt power cycle [ 342.305251][ T9709] lo speed is unknown, defaulting to 1000 [ 342.716176][ T10] net_ratelimit: 5 callbacks suppressed [ 342.716193][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.822187][ T5926] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 342.891207][ T5926] usb 4-1: device descriptor read/8, error -71 [ 343.088576][ T5976] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 343.225297][ T5926] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 343.255409][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 343.255653][ T5926] usb 4-1: device descriptor read/8, error -71 [ 343.283641][ T5976] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 343.318657][ T5976] usb 3-1: config 0 has no interface number 0 [ 343.325327][ T5976] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 343.334453][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.359162][ T5976] usb 3-1: config 0 descriptor?? [ 343.385444][ T5926] usb usb4-port1: unable to enumerate USB device [ 343.459609][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.468146][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.477022][ T5976] viperboard 3-1:0.143: version 0.00 found at bus 003 address 023 [ 343.630402][ T9726] hub 1-0:1.0: USB hub found [ 343.635161][ T9726] hub 1-0:1.0: 1 port detected [ 343.716750][ T9716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.755775][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.758256][ T5976] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 343.837248][ T5976] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 343.867316][ T9732] program syz.4.915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.137667][ T9716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.246307][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.261610][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.270220][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.290678][ T5825] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 344.479735][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.488119][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.522354][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 344.576842][ T9745] vlan2: entered allmulticast mode [ 344.582234][ T9745] macsec0: entered allmulticast mode [ 344.590688][ T9745] veth1_macvtap: entered allmulticast mode [ 344.651291][ T9733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.912020][ T9754] x_tables: ip_tables: osf match: only valid for protocol 6 [ 345.134110][ T9753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 345.770027][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.778140][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.778518][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.819062][ T10] usb 3-1: USB disconnect, device number 23 [ 346.255328][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 346.415315][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 346.445859][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.454711][ T10] usb 3-1: config 2 has an invalid interface number: 218 but max is 0 [ 346.475246][ T10] usb 3-1: config 2 has no interface number 0 [ 346.493347][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=18.d6 [ 346.507390][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.566780][ T10] usb 3-1: Product: syz [ 346.594049][ T10] usb 3-1: Manufacturer: syz [ 346.605443][ T10] usb 3-1: SerialNumber: syz [ 346.963784][ T9783] overlayfs: failed to clone upperpath [ 347.408877][ T30] audit: type=1400 audit(1766186218.865:570): avc: denied { firmware_load } for pid=9773 comm="syz.3.923" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 347.486386][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 347.567259][ T30] audit: type=1400 audit(1766186218.975:571): avc: denied { mount } for pid=9775 comm="syz.0.929" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 347.688239][ T9780] syz.3.923 (9780) used greatest stack depth: 19176 bytes left [ 347.714279][ T10] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 348.326376][ T5825] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 348.334921][ T5825] Bluetooth: hci4: Injecting HCI hardware error event [ 348.343569][ T5136] Bluetooth: hci4: hardware error 0x00 [ 348.434910][ T30] audit: type=1326 audit(1766186219.895:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5dd8f749 code=0x7ffc0000 [ 348.465259][ T30] audit: type=1326 audit(1766186219.925:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5dd8f749 code=0x7ffc0000 [ 348.492603][ T5976] net_ratelimit: 3 callbacks suppressed [ 348.492614][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.508068][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.516380][ T30] audit: type=1326 audit(1766186219.925:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f9f5dd8f749 code=0x7ffc0000 [ 348.540367][ T30] audit: type=1326 audit(1766186219.925:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5dd8f749 code=0x7ffc0000 [ 348.564664][ T30] audit: type=1326 audit(1766186219.925:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5dd8f749 code=0x7ffc0000 [ 348.658214][ T30] audit: type=1326 audit(1766186219.925:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f5dd8f749 code=0x7ffc0000 [ 348.782520][ T9801] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 348.795351][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.860377][ T9801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.006425][ T9805] bond3: (slave ip6erspan0): making interface the new active one [ 349.425528][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 349.439915][ T9805] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 349.519602][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.624829][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.740038][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 349.755345][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.776003][ T30] audit: type=1326 audit(1766186221.245:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5dd8f749 code=0x7ffc0000 [ 349.802399][ T10] usb 3-1: config 0 descriptor?? [ 349.920429][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.978783][ T30] audit: type=1326 audit(1766186221.245:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5dd8f749 code=0x7ffc0000 [ 350.262847][ T9799] misc userio: No port type given on /dev/userio [ 350.404942][ T5136] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 350.566462][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.875959][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.038056][ T10] ath6kl: Failed to submit usb control message: -110 [ 351.054062][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 351.090285][ T10] ath6kl: Unable to send get target info: -110 [ 351.154804][ T10] ath6kl: Failed to init ath6kl core: -110 [ 351.180713][ T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 351.242674][ T10] usb 3-1: USB disconnect, device number 25 [ 351.519635][ T9855] netlink: 'syz.4.946': attribute type 13 has an invalid length. [ 352.397773][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 352.406641][ T9857] netlink: 'syz.3.951': attribute type 8 has an invalid length. [ 352.414274][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 352.893055][ T8690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.905876][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.003513][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 353.284030][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 353.295119][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 353.495307][ T6073] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 353.510931][ T9857] geneve2: entered promiscuous mode [ 353.516242][ T9857] geneve2: entered allmulticast mode [ 353.733371][ T6073] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 353.755575][ T6073] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 353.775884][ T6073] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 353.795258][ T6073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.820916][ T9869] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.836464][ T8690] net_ratelimit: 2 callbacks suppressed [ 353.836478][ T8690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.847000][ T6073] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.685332][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 354.685349][ T30] audit: type=1400 audit(1766186226.135:586): avc: denied { bind } for pid=9882 comm="syz.4.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 354.742343][ T9885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.751142][ T9885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.825858][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.840451][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.940193][ T9888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.978806][ T9888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.994016][ T9888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.002813][ T9888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.011218][ T9888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.027241][ T9888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.131959][ T9888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.223437][ T30] audit: type=1400 audit(1766186227.685:587): avc: denied { mounton } for pid=9903 comm="syz.3.955" path="/syzcgroup/unified/syz3" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 356.275773][ T30] audit: type=1400 audit(1766186227.745:588): avc: denied { write } for pid=9903 comm="syz.3.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 356.463268][ T8690] usb 3-1: USB disconnect, device number 26 [ 356.647609][ T9904] XFS (nbd3): SB validate failed with error -5. [ 356.727784][ T9916] program syz.2.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.188855][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 357.231547][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.965'. [ 358.955686][ T8690] net_ratelimit: 164 callbacks suppressed [ 358.955704][ T8690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.084420][ T9930] 9pnet_fd: Insufficient options for proto=fd [ 359.504040][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.571302][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.580012][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.617893][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.974'. [ 360.662621][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.663005][ T9962] program syz.4.975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.675026][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.998754][ T30] audit: type=1400 audit(1766186232.465:589): avc: denied { bind } for pid=9966 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 361.081816][ T5136] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 361.093451][ T5136] CPU: 1 UID: 0 PID: 5136 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.093481][ T5136] Tainted: [L]=SOFTLOCKUP [ 361.093488][ T5136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.093500][ T5136] Workqueue: hci2 hci_rx_work [ 361.093525][ T5136] Call Trace: [ 361.093532][ T5136] [ 361.093538][ T5136] dump_stack_lvl+0x16c/0x1f0 [ 361.093564][ T5136] sysfs_warn_dup+0x7f/0xa0 [ 361.093586][ T5136] sysfs_create_dir_ns+0x24b/0x2b0 [ 361.093606][ T5136] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 361.093626][ T5136] ? find_held_lock+0x2b/0x80 [ 361.093658][ T5136] ? do_raw_spin_unlock+0x172/0x230 [ 361.093684][ T5136] kobject_add_internal+0x2c4/0x9d0 [ 361.093715][ T5136] kobject_add+0x16e/0x240 [ 361.093739][ T5136] ? __pfx_kobject_add+0x10/0x10 [ 361.093767][ T5136] ? kobject_put+0xaf/0x6f0 [ 361.093788][ T5136] ? _raw_spin_unlock+0x28/0x50 [ 361.093816][ T5136] device_add+0x288/0x1980 [ 361.093836][ T5136] ? __pfx_dev_set_name+0x10/0x10 [ 361.093857][ T5136] ? __pfx_device_add+0x10/0x10 [ 361.093876][ T5136] ? mgmt_send_event_skb+0x2fb/0x460 [ 361.093902][ T5136] hci_conn_add_sysfs+0x1a8/0x260 [ 361.093925][ T5136] le_conn_complete_evt+0x11ed/0x1fa0 [ 361.093951][ T5136] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 361.093978][ T5136] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 361.093998][ T5136] ? skb_pull_data+0x166/0x210 [ 361.094019][ T5136] hci_le_meta_evt+0x357/0x610 [ 361.094040][ T5136] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 361.094063][ T5136] hci_event_packet+0x685/0x1210 [ 361.094082][ T5136] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 361.094104][ T5136] ? __pfx_hci_event_packet+0x10/0x10 [ 361.094126][ T5136] ? kcov_remote_start+0x399/0x680 [ 361.094145][ T5136] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.094173][ T5136] hci_rx_work+0x2c9/0x1020 [ 361.094196][ T5136] process_one_work+0x9ba/0x1b20 [ 361.094230][ T5136] ? __pfx_process_one_work+0x10/0x10 [ 361.094260][ T5136] ? assign_work+0x1a0/0x250 [ 361.094284][ T5136] worker_thread+0x6c8/0xf10 [ 361.094318][ T5136] ? __pfx_worker_thread+0x10/0x10 [ 361.094340][ T5136] kthread+0x3c5/0x780 [ 361.094361][ T5136] ? __pfx_kthread+0x10/0x10 [ 361.094383][ T5136] ? rcu_is_watching+0x12/0xc0 [ 361.094400][ T5136] ? __pfx_kthread+0x10/0x10 [ 361.094428][ T5136] ret_from_fork+0x983/0xb10 [ 361.094448][ T5136] ? __pfx_ret_from_fork+0x10/0x10 [ 361.094470][ T5136] ? __switch_to+0x7af/0x10d0 [ 361.094495][ T5136] ? __pfx_kthread+0x10/0x10 [ 361.094517][ T5136] ret_from_fork_asm+0x1a/0x30 [ 361.094557][ T5136] [ 361.094580][ T5136] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 361.196002][ T6297] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 361.365165][ T6297] usb 3-1: Using ep0 maxpacket: 32 [ 361.365929][ T5136] Bluetooth: hci2: failed to register connection device [ 361.388005][ T6297] usb 3-1: config 0 has no interfaces? [ 361.415362][ T6297] usb 3-1: New USB device found, idVendor=1b3d, idProduct=9308, bcdDevice=de.e9 [ 361.445149][ T6297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.453156][ T6297] usb 3-1: Product: syz [ 361.486433][ T6297] usb 3-1: Manufacturer: syz [ 361.491059][ T6297] usb 3-1: SerialNumber: syz [ 361.507289][ T6297] usb 3-1: config 0 descriptor?? [ 361.521563][ T9977] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 361.679636][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.687904][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.615979][ T792] usb 3-1: USB disconnect, device number 27 [ 362.628815][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.637896][ T8690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.831058][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 363.885539][ T8690] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 365.301721][ T5930] net_ratelimit: 5 callbacks suppressed [ 365.301739][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.316076][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.316301][ T8690] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 365.685409][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.836959][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.982362][ T8690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.027064][ T8690] usb 5-1: Product: syz [ 366.056425][ T8690] usb 5-1: Manufacturer: syz [ 366.087038][ T8690] usb 5-1: SerialNumber: syz [ 366.093494][ T8690] usb 5-1: config 0 descriptor?? [ 366.325868][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.395432][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.545630][T10015] fuse: Bad value for 'fd' [ 367.355680][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.578841][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.627537][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 367.680033][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 367.941630][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.380962][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 368.395815][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.462187][ T8690] usb-storage 5-1:0.0: USB Mass Storage device detected [ 368.640153][ T8690] usb 5-1: USB disconnect, device number 28 [ 368.971423][ T30] audit: type=1326 audit(1766186240.435:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 369.005190][ T30] audit: type=1326 audit(1766186240.465:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 369.076552][ T30] audit: type=1326 audit(1766186240.465:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 369.196408][ T30] audit: type=1326 audit(1766186240.525:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10060 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1839c2005 code=0x7ffc0000 [ 369.221281][ T30] audit: type=1326 audit(1766186240.525:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 369.762467][ T30] audit: type=1326 audit(1766186240.525:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb183991667 code=0x7ffc0000 [ 369.821257][ T30] audit: type=1326 audit(1766186240.535:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 370.436861][ T30] audit: type=1326 audit(1766186240.535:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 370.476981][ T30] audit: type=1326 audit(1766186240.685:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10060 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb18398f749 code=0x7ffc0000 [ 370.529571][T10070] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 370.540194][ T30] audit: type=1326 audit(1766186240.695:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb18392b829 code=0x7ffc0000 [ 370.795790][ T49] net_ratelimit: 5 callbacks suppressed [ 370.795806][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.814901][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.771456][ T8690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.835692][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.844295][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.033317][ T8690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.849664][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 372.877740][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.887288][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.921730][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 373.014654][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 373.024461][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 373.035496][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 373.955204][ T8690] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 374.033758][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.045917][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.063478][T10129] FAULT_INJECTION: forcing a failure. [ 374.063478][T10129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.088416][T10129] CPU: 1 UID: 0 PID: 10129 Comm: syz.2.1019 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.088443][T10129] Tainted: [L]=SOFTLOCKUP [ 374.088449][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.088457][T10129] Call Trace: [ 374.088462][T10129] [ 374.088468][T10129] dump_stack_lvl+0x16c/0x1f0 [ 374.088493][T10129] should_fail_ex+0x512/0x640 [ 374.088518][T10129] _copy_from_iter+0x2a4/0x16c0 [ 374.088543][T10129] ? __alloc_skb+0x220/0x410 [ 374.088564][T10129] ? __alloc_skb+0x35d/0x410 [ 374.088585][T10129] ? __pfx__copy_from_iter+0x10/0x10 [ 374.088609][T10129] ? netlink_autobind.isra.0+0x158/0x370 [ 374.088639][T10129] netlink_sendmsg+0x820/0xdd0 [ 374.088663][T10129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.088691][T10129] ____sys_sendmsg+0xa5d/0xc30 [ 374.088713][T10129] ? copy_msghdr_from_user+0x10a/0x160 [ 374.088729][T10129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.088759][T10129] ___sys_sendmsg+0x134/0x1d0 [ 374.088777][T10129] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.088824][T10129] __sys_sendmsg+0x16d/0x220 [ 374.088841][T10129] ? __pfx___sys_sendmsg+0x10/0x10 [ 374.088874][T10129] do_syscall_64+0xcd/0xf80 [ 374.088896][T10129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.088913][T10129] RIP: 0033:0x7f41c538f749 [ 374.088927][T10129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.088942][T10129] RSP: 002b:00007f41c6291038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.088959][T10129] RAX: ffffffffffffffda RBX: 00007f41c55e5fa0 RCX: 00007f41c538f749 [ 374.088969][T10129] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 374.088978][T10129] RBP: 00007f41c6291090 R08: 0000000000000000 R09: 0000000000000000 [ 374.088987][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.088996][T10129] R13: 00007f41c55e6038 R14: 00007f41c55e5fa0 R15: 00007ffca2df7f28 [ 374.089020][T10129] [ 374.399659][ T8690] usb 4-1: config index 0 descriptor too short (expected 530, got 18) [ 374.531181][ T8690] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 374.560546][ T8690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.604409][ T8690] usb 4-1: config 0 descriptor?? [ 374.890247][T10135] mmap: syz.0.1023 (10135): VmData 25972736 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 375.379641][ T8690] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 376.364192][ T5934] net_ratelimit: 4 callbacks suppressed [ 376.364210][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.378263][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.233425][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1028'. [ 377.529505][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.537859][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.605911][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.642991][ T49] usb 4-1: USB disconnect, device number 18 [ 377.754351][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 377.835383][ T8690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.086196][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.159030][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.195751][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.208866][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.399085][ T2108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.411185][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.646919][T10176] Invalid option length (1047412) for dns_resolver key [ 379.208558][T10182] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1036'. [ 380.660740][ T6297] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 380.667829][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 380.677349][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 380.702326][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 380.702342][ T30] audit: type=1400 audit(1766186252.165:620): avc: denied { map } for pid=10204 comm="syz.0.1042" path="socket:[22257]" dev="sockfs" ino=22257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 380.830512][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 380.835393][ T6297] usb 4-1: Using ep0 maxpacket: 8 [ 380.896545][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 380.916657][ T6297] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.993303][ T6297] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 381.109840][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 381.135797][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 381.146339][ T6297] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.242611][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1046'. [ 381.552509][ T5934] net_ratelimit: 7 callbacks suppressed [ 381.552526][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.567195][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.609620][ T6297] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 381.642866][ T6297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.694914][ T6297] usb 4-1: Product: syz [ 381.699168][ T6297] usb 4-1: Manufacturer: syz [ 381.703772][ T6297] usb 4-1: SerialNumber: syz [ 381.712937][ T6297] usb 4-1: config 0 descriptor?? [ 381.965173][ T6297] iowarrior 4-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 381.997301][ T6297] usb 4-1: USB disconnect, device number 19 [ 382.656698][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.665505][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.925516][ T6252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.925666][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.943406][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.958809][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.977964][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.997961][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.260439][T10261] FAULT_INJECTION: forcing a failure. [ 385.260439][T10261] name failslab, interval 1, probability 0, space 0, times 0 [ 385.273565][T10261] CPU: 1 UID: 0 PID: 10261 Comm: syz.3.1055 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.273592][T10261] Tainted: [L]=SOFTLOCKUP [ 385.273598][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.273609][T10261] Call Trace: [ 385.273614][T10261] [ 385.273621][T10261] dump_stack_lvl+0x16c/0x1f0 [ 385.273649][T10261] should_fail_ex+0x512/0x640 [ 385.273673][T10261] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 385.273695][T10261] should_failslab+0xc2/0x120 [ 385.273718][T10261] kmem_cache_alloc_node_noprof+0x86/0x800 [ 385.273735][T10261] ? __alloc_skb+0x156/0x410 [ 385.273767][T10261] ? __alloc_skb+0x156/0x410 [ 385.273790][T10261] __alloc_skb+0x156/0x410 [ 385.273812][T10261] ? __alloc_skb+0x35d/0x410 [ 385.273836][T10261] ? __pfx___alloc_skb+0x10/0x10 [ 385.273870][T10261] _sctp_make_chunk+0x51/0x270 [ 385.273891][T10261] sctp_make_datafrag_empty+0x16f/0x240 [ 385.273913][T10261] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 385.273941][T10261] sctp_datamsg_from_user+0x595/0x1330 [ 385.273971][T10261] sctp_sendmsg_to_asoc+0xafa/0x1c50 [ 385.273995][T10261] ? sctp_assoc_set_primary+0x177/0x300 [ 385.274020][T10261] ? sctp_assoc_add_peer+0x252/0x1540 [ 385.274049][T10261] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 385.274070][T10261] ? sctp_connect_new_asoc+0x41e/0x770 [ 385.274102][T10261] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 385.274128][T10261] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 385.274156][T10261] sctp_sendmsg+0xe99/0x1e20 [ 385.274189][T10261] ? __pfx_sctp_sendmsg+0x10/0x10 [ 385.274219][T10261] ? __pfx_sock_has_perm+0x10/0x10 [ 385.274251][T10261] ? __pfx_sctp_sendmsg+0x10/0x10 [ 385.274277][T10261] inet_sendmsg+0x11c/0x140 [ 385.274295][T10261] __sys_sendto+0x43c/0x520 [ 385.274322][T10261] ? __pfx___sys_sendto+0x10/0x10 [ 385.274368][T10261] ? ksys_write+0x1ac/0x250 [ 385.274389][T10261] ? __pfx_ksys_write+0x10/0x10 [ 385.274414][T10261] __x64_sys_sendto+0xe0/0x1c0 [ 385.274439][T10261] ? do_syscall_64+0x91/0xf80 [ 385.274459][T10261] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.274480][T10261] do_syscall_64+0xcd/0xf80 [ 385.274503][T10261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.274521][T10261] RIP: 0033:0x7f62d758f749 [ 385.274535][T10261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.274550][T10261] RSP: 002b:00007f62d838d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 385.274567][T10261] RAX: ffffffffffffffda RBX: 00007f62d77e6090 RCX: 00007f62d758f749 [ 385.274579][T10261] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000008 [ 385.274590][T10261] RBP: 00007f62d838d090 R08: 000020000005ffe4 R09: 000000000000001c [ 385.274600][T10261] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 385.274610][T10261] R13: 00007f62d77e6128 R14: 00007f62d77e6090 R15: 00007ffd1bc9be58 [ 385.274636][T10261] [ 386.783505][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 386.903633][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 386.916060][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 386.925627][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 386.944876][T10280] net_ratelimit: 5 callbacks suppressed [ 386.944886][T10280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.976203][T10280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.985324][T10280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.359149][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.367578][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.403957][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.412121][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.420519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.430632][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.624747][ T30] audit: type=1400 audit(1766186259.085:621): avc: denied { connect } for pid=10288 comm="syz.1.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 388.771299][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.801177][T10295] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 388.840097][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 388.852928][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 388.871001][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 388.910430][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 388.944179][ T30] audit: type=1400 audit(1766186260.405:622): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 389.154668][T10328] program syz.2.1071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.645459][ T5929] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 389.835297][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 389.857511][ T5929] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 389.866706][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=11, SerialNumber=3 [ 389.874946][ T5929] usb 4-1: Product: syz [ 389.908562][ T5929] usb 4-1: Manufacturer: syz [ 389.920157][ T5929] usb 4-1: SerialNumber: syz [ 389.928678][ T5929] usb 4-1: config 0 descriptor?? [ 389.937993][ T5929] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 389.946003][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 389.954439][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.964528][ T5929] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 389.972980][ T5929] usb 4-1: media controller created [ 389.993323][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 390.048139][ T5929] usb 4-1: selecting invalid altsetting 7 [ 390.064853][ T5929] cxusb: set interface failed [ 390.070073][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 390.137352][T10334] FAULT_INJECTION: forcing a failure. [ 390.137352][T10334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.158674][T10334] CPU: 1 UID: 0 PID: 10334 Comm: syz.3.1074 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.158701][T10334] Tainted: [L]=SOFTLOCKUP [ 390.158708][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.158717][T10334] Call Trace: [ 390.158722][T10334] [ 390.158729][T10334] dump_stack_lvl+0x16c/0x1f0 [ 390.158754][T10334] should_fail_ex+0x512/0x640 [ 390.158782][T10334] _copy_from_user+0x2e/0xd0 [ 390.158807][T10334] i2cdev_ioctl+0x599/0x840 [ 390.158827][T10334] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 390.158847][T10334] ? selinux_file_ioctl+0x180/0x270 [ 390.158871][T10334] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 390.158890][T10334] __x64_sys_ioctl+0x18e/0x210 [ 390.158909][T10334] do_syscall_64+0xcd/0xf80 [ 390.158928][T10334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.158945][T10334] RIP: 0033:0x7f62d758f749 [ 390.158958][T10334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.158973][T10334] RSP: 002b:00007f62d83ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.158988][T10334] RAX: ffffffffffffffda RBX: 00007f62d77e5fa0 RCX: 00007f62d758f749 [ 390.158998][T10334] RDX: 0000200000000100 RSI: 0000000000000707 RDI: 0000000000000004 [ 390.159007][T10334] RBP: 00007f62d83ae090 R08: 0000000000000000 R09: 0000000000000000 [ 390.159015][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.159024][T10334] R13: 00007f62d77e6038 R14: 00007f62d77e5fa0 R15: 00007ffd1bc9be58 [ 390.159047][T10334] [ 390.159079][ T5929] DVB: Unable to find symbol lgdt330x_attach() [ 390.372525][ T5929] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 390.525176][ T5929] rc_core: IR keymap rc-dvico-portable not found [ 390.531641][ T5929] Registered IR keymap rc-empty [ 390.539236][ T5929] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 390.558829][ T5929] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input12 [ 390.781141][ T30] audit: type=1400 audit(1766186262.245:623): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3103 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.166080][ T5929] dvb-usb: schedule remote query interval to 100 msecs. [ 391.173062][ T5929] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 391.196858][ T5929] usb 4-1: USB disconnect, device number 20 [ 391.283949][ T5929] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 391.474201][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 391.516347][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 391.913334][ T5929] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 391.921097][ T30] audit: type=1400 audit(1766186263.355:624): avc: denied { create } for pid=10390 comm="syz.1.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 392.012619][ T6073] net_ratelimit: 166 callbacks suppressed [ 392.012635][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.072468][T10394] Device name cannot be null; rc = [-22] [ 392.415512][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.576218][T10398] xt_TPROXY: Can be used only with -p tcp or -p udp [ 392.625150][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 392.633597][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.648989][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.658854][ T5929] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 392.667926][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.685638][ T5929] usb 4-1: config 0 descriptor?? [ 393.048487][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.435366][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.465510][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.476931][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.488220][ T5929] ft260 0003:0403:6030.0007: unknown main item tag 0x7 [ 393.618284][ T5929] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 394.104835][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.423909][T10379] __nla_validate_parse: 5 callbacks suppressed [ 394.423935][T10379] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1086'. [ 394.990630][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.004339][ T5929] ft260 0003:0403:6030.0007: failed to retrieve system status [ 395.014315][ T5929] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -71 [ 395.025537][ T5929] usb 4-1: USB disconnect, device number 21 [ 395.193340][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.463533][T10438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.521834][T10441] hfsplus: unable to find HFS+ superblock [ 395.765281][ T6073] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 396.486922][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.525431][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.557686][ T6073] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 396.582875][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.602671][ T6073] usb 4-1: config 0 descriptor?? [ 397.609058][ T49] net_ratelimit: 10 callbacks suppressed [ 397.609077][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.624019][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.653625][ T6073] usbhid 4-1:0.0: can't add hid device: -71 [ 397.705191][ T6073] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 397.725419][ T6073] usb 4-1: USB disconnect, device number 22 [ 398.713667][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.722297][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.783318][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 398.847705][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 399.080337][T10488] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 399.128916][T10488] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 399.183569][T10488] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 399.255419][T10488] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 399.279739][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.295636][T10488] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 400.287892][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.307988][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.215429][ T792] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 401.849305][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 401.913278][ T30] audit: type=1326 audit(1766186272.369:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.1.1126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb18398f749 code=0x0 [ 402.289798][T10517] fuse: Unknown parameter 'O"*SG0Q#4y [ 402.289798][T10517] Ry{9qT W(Rg/%gÅڶBXv' [ 402.419935][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 402.687835][ T10] net_ratelimit: 54 callbacks suppressed [ 402.687852][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.881874][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 403.279841][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.290532][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.606223][T10556] lo speed is unknown, defaulting to 1000 [ 404.250384][T10564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.353699][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.362073][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.886857][ T30] audit: type=1400 audit(1766186275.359:626): avc: denied { setopt } for pid=10577 comm="syz.4.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.935657][ T30] audit: type=1400 audit(1766186275.379:627): avc: denied { read } for pid=10577 comm="syz.4.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.364082][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.435678][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.689475][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.768890][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.463679][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 406.477465][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 406.491233][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 406.512325][T10607] ceph: No mds server is up or the cluster is laggy [ 406.522242][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 406.536768][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 406.761841][T10616] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1150'. [ 406.812508][T10616] syzkaller1: entered promiscuous mode [ 407.007693][T10616] syzkaller1: entered allmulticast mode [ 407.050073][T10625] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 407.393500][T10641] program syz.2.1157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.078073][ T6073] net_ratelimit: 6 callbacks suppressed [ 408.078091][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.223296][T10639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.558566][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.739080][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.795526][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.875572][ T5929] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 408.883950][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.115405][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 409.115480][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.139005][ T5929] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 409.149217][ T5929] usb 4-1: config 179 has no interface number 0 [ 409.159067][ T5929] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 409.185202][ T5929] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 409.220788][ T5929] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 409.254052][ T5929] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 409.313767][ T5929] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 409.344248][ T5929] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 409.373699][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.396497][T10653] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 409.436204][ T3947] wlan1: Trigger new scan to find an IBSS to join [ 409.609579][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.641006][ T5929] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 410.393743][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.417498][ T5994] usb 4-1: USB disconnect, device number 23 [ 410.417552][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 410.432413][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 410.496759][T10359] udevd[10359]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 410.647678][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.404254][T10691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.365066][ T49] net_ratelimit: 5 callbacks suppressed [ 413.365083][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.435158][ T3836] wlan1: Trigger new scan to find an IBSS to join [ 413.560844][T10702] syz.3.1175 (10702): /proc/10700/oom_adj is deprecated, please use /proc/10700/oom_score_adj instead. [ 413.576397][ T30] audit: type=1400 audit(1766186284.049:628): avc: denied { accept } for pid=10700 comm="syz.3.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 413.614665][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.746623][ T5929] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 413.838353][ T49] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 414.375205][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 414.387173][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.397688][ T5929] usb 3-1: config 0 has no interfaces? [ 414.403189][ T5929] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 414.415448][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.418626][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.425723][ T5929] usb 3-1: config 0 descriptor?? [ 414.449921][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'. [ 414.459023][ T49] usb 4-1: device descriptor read/64, error -71 [ 414.467597][ T1857] wlan1: Creating new IBSS network, BSSID 46:95:93:f0:46:c7 [ 414.574185][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 414.594978][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'. [ 414.635419][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.725740][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 414.737101][ T5929] usb 3-1: USB disconnect, device number 29 [ 414.960114][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.233409][ T49] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 415.256789][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.395285][ T49] usb 4-1: device descriptor read/64, error -71 [ 415.498918][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.617655][ T49] usb usb4-port1: attempt power cycle [ 415.670079][T10733] 9p: Could not find request transport: rdpG%/lP$ma [ 415.677827][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.965245][ T49] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 415.995993][ T49] usb 4-1: device descriptor read/8, error -71 [ 416.245188][ T49] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 416.262125][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1190'. [ 416.357315][ T49] usb 4-1: device descriptor read/8, error -71 [ 416.480565][ T49] usb usb4-port1: unable to enumerate USB device [ 417.031985][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.041262][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.442428][ T9] net_ratelimit: 1 callbacks suppressed [ 418.442444][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.458198][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.466309][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.475514][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.541012][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 418.627374][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 418.674599][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 418.689681][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 418.780574][T10775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.005207][ T792] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 419.175995][ T792] usb 4-1: Using ep0 maxpacket: 16 [ 419.194512][ T792] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.211942][ T792] usb 4-1: config 0 interface 0 has no altsetting 0 [ 419.226618][ T792] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 419.230833][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.240339][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.257771][ T792] usb 4-1: config 0 descriptor?? [ 419.961649][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.341844][T10812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1206'. [ 420.351515][T10812] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1206'. [ 420.367162][T10812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1206'. [ 420.605276][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.645822][ T792] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 420.652180][T10769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1197'. [ 420.654468][ T792] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 420.674114][ T792] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 420.682569][ T792] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 420.692740][ T792] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 420.803371][ T792] acrux 0003:1A34:0802.0008: hidraw0: USB HID v0.05 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 420.834167][T10769] syz_tun: entered allmulticast mode [ 421.794755][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.797927][ T30] audit: type=1400 audit(1766186291.649:629): avc: denied { getopt } for pid=10813 comm="syz.2.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 421.803117][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.801932][ T792] acrux 0003:1A34:0802.0008: no inputs found [ 422.808069][ T792] acrux 0003:1A34:0802.0008: Failed to enable force feedback support, error: -19 [ 422.965743][ T49] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 423.017705][T10769] pimreg: entered allmulticast mode [ 423.104203][T10768] syz_tun: left allmulticast mode [ 423.144210][ T5976] usb 4-1: USB disconnect, device number 28 [ 423.152578][T10825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1210'. [ 423.222318][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 423.242412][ T49] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 423.250992][ T49] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 423.263647][ T49] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 423.283037][ T49] usb 3-1: config 150 has no interface number 0 [ 423.294788][ T49] usb 3-1: config 150 interface 204 has no altsetting 0 [ 423.305218][ T49] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 423.325242][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.335778][ T49] usb 3-1: Product: syz [ 423.342258][ T49] usb 3-1: Manufacturer: syz [ 423.348342][ T49] usb 3-1: SerialNumber: syz [ 423.619392][T10845] x_tables: duplicate underflow at hook 1 [ 424.267322][ T5994] net_ratelimit: 4 callbacks suppressed [ 424.267337][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.281496][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.679737][ T5816] usb 3-1: USB disconnect, device number 30 [ 424.803425][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.894470][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.912126][ T30] audit: type=1400 audit(1766186295.329:630): avc: denied { read write } for pid=10862 comm="syz.2.1223" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 425.245368][ T30] audit: type=1400 audit(1766186295.329:631): avc: denied { open } for pid=10862 comm="syz.2.1223" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 425.803194][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.895229][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.151017][T10889] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1226'. [ 426.895189][T10889] lo: entered allmulticast mode [ 426.899613][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.992687][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.052412][T10889] pimreg: entered allmulticast mode [ 427.112499][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1231'. [ 427.114996][T10884] lo: left allmulticast mode [ 427.839320][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.914614][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 427.929516][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.951605][T10912] veth0_macvtap: left promiscuous mode [ 431.633374][ T5863] net_ratelimit: 3 callbacks suppressed [ 431.633391][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.633480][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.655129][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.663496][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.065588][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.595446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.875479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.095009][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 538.101973][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3456/1:b..l [ 538.110206][ C0] rcu: (detected by 0, t=10502 jiffies, g=36157, q=541 ncpus=2) [ 538.117894][ C0] task:kworker/u8:11 state:R running task stack:24920 pid:3456 tgid:3456 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 538.132039][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 538.139832][ C0] Call Trace: [ 538.143098][ C0] [ 538.146002][ C0] ? __schedule+0x10b9/0x6150 [ 538.150654][ C0] __schedule+0x1139/0x6150 [ 538.155137][ C0] ? __pfx___schedule+0x10/0x10 [ 538.159959][ C0] ? mark_held_locks+0x49/0x80 [ 538.164694][ C0] preempt_schedule_irq+0x51/0x90 [ 538.169690][ C0] irqentry_exit+0x1d8/0x8c0 [ 538.174253][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.180201][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0xc/0x20 [ 538.186931][ C0] Code: 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 40 0f b6 d6 <40> 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44 00 00 90 90 [ 538.206522][ C0] RSP: 0018:ffffc9000c9d7a38 EFLAGS: 00000246 [ 538.212562][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8b400854 [ 538.220501][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 538.228443][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 538.236393][ C0] R10: 0000000000000001 R11: ffff8880320b8b30 R12: dffffc0000000000 [ 538.244333][ C0] R13: ffff88807ed48d80 R14: 00000000000000a0 R15: ffff8880326a4080 [ 538.252290][ C0] ? batadv_iv_ogm_schedule_buff+0xa84/0x14c0 [ 538.258338][ C0] batadv_iv_ogm_schedule_buff+0xa84/0x14c0 [ 538.264202][ C0] ? ww_mutex_lock+0x81/0x160 [ 538.268853][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 538.275165][ C0] ? batadv_send_skb_packet+0x597/0x6f0 [ 538.280698][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 538.287697][ C0] process_one_work+0x9ba/0x1b20 [ 538.292610][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 538.297868][ C0] ? __pfx_process_one_work+0x10/0x10 [ 538.303216][ C0] ? assign_work+0x1a0/0x250 [ 538.307783][ C0] worker_thread+0x6c8/0xf10 [ 538.312375][ C0] ? __kthread_parkme+0x19e/0x250 [ 538.317383][ C0] ? __pfx_worker_thread+0x10/0x10 [ 538.322465][ C0] kthread+0x3c5/0x780 [ 538.326504][ C0] ? __pfx_kthread+0x10/0x10 [ 538.331065][ C0] ? rcu_is_watching+0x12/0xc0 [ 538.335807][ C0] ? __pfx_kthread+0x10/0x10 [ 538.340366][ C0] ret_from_fork+0x983/0xb10 [ 538.344928][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 538.350010][ C0] ? __switch_to+0x7af/0x10d0 [ 538.354661][ C0] ? __pfx_kthread+0x10/0x10 [ 538.359221][ C0] ret_from_fork_asm+0x1a/0x30 [ 538.363966][ C0] [ 538.366958][ C0] rcu: rcu_preempt kthread starved for 10523 jiffies! g36157 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 538.378123][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 538.388069][ C0] rcu: RCU grace-period kthread stack dump: [ 538.393936][ C0] task:rcu_preempt state:R running task stack:28328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 538.407382][ C0] Call Trace: [ 538.410636][ C0] [ 538.413540][ C0] ? __schedule+0x10b9/0x6150 [ 538.418190][ C0] __schedule+0x1139/0x6150 [ 538.422665][ C0] ? __lock_acquire+0x436/0x2890 [ 538.427575][ C0] ? __mod_timer+0x8f2/0xd30 [ 538.432139][ C0] ? __pfx___schedule+0x10/0x10 [ 538.436968][ C0] ? find_held_lock+0x2b/0x80 [ 538.441619][ C0] ? schedule+0x2d7/0x3a0 [ 538.445919][ C0] schedule+0xe7/0x3a0 [ 538.449958][ C0] schedule_timeout+0x123/0x290 [ 538.454789][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 538.460129][ C0] ? __pfx_process_timeout+0x10/0x10 [ 538.465383][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 538.471165][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 538.476594][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 538.481329][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 538.486585][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.491755][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 538.496669][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 538.501497][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 538.507273][ C0] rcu_gp_kthread+0x26d/0x380 [ 538.511923][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 538.517093][ C0] ? rcu_is_watching+0x12/0xc0 [ 538.521829][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.527002][ C0] ? __kthread_parkme+0x19e/0x250 [ 538.531995][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 538.537252][ C0] kthread+0x3c5/0x780 [ 538.541292][ C0] ? __pfx_kthread+0x10/0x10 [ 538.545855][ C0] ? rcu_is_watching+0x12/0xc0 [ 538.550587][ C0] ? __pfx_kthread+0x10/0x10 [ 538.555148][ C0] ret_from_fork+0x983/0xb10 [ 538.559708][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 538.564788][ C0] ? __switch_to+0x7af/0x10d0 [ 538.569436][ C0] ? __pfx_kthread+0x10/0x10 [ 538.573995][ C0] ret_from_fork_asm+0x1a/0x30 [ 538.578738][ C0] [ 538.581729][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 538.588018][ C0] Sending NMI from CPU 0 to CPUs 1: [ 538.593201][ C1] NMI backtrace for cpu 1 [ 538.593214][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.593231][ C1] Tainted: [L]=SOFTLOCKUP [ 538.593235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.593242][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 538.593259][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 538.593271][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 538.593282][ C1] RAX: 0000000001ed071b RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 538.593290][ C1] RDX: 0000000000000000 RSI: ffffffff8dacde18 RDI: ffffffff8bf2b380 [ 538.593298][ C1] RBP: ffffed1003b5a498 R08: 0000000000000001 R09: ffffed10170a673d [ 538.593306][ C1] R10: ffff8880b85339eb R11: ffff88801dad2ff0 R12: 0000000000000001 [ 538.593314][ C1] R13: ffff88801dad24c0 R14: ffffffff9088b3d0 R15: 0000000000000000 [ 538.593322][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 538.593335][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.593344][ C1] CR2: 00007fb6121e6ffc CR3: 0000000035a4a000 CR4: 00000000003526f0 [ 538.593353][ C1] Call Trace: [ 538.593357][ C1] [ 538.593361][ C1] default_idle+0x13/0x20 [ 538.593378][ C1] default_idle_call+0x6c/0xb0 [ 538.593395][ C1] do_idle+0x38d/0x510 [ 538.593414][ C1] ? __pfx_do_idle+0x10/0x10 [ 538.593433][ C1] cpu_startup_entry+0x4f/0x60 [ 538.593451][ C1] start_secondary+0x21d/0x2d0 [ 538.593464][ C1] ? __pfx_start_secondary+0x10/0x10 [ 538.593478][ C1] common_startup_64+0x13e/0x148 [ 538.593497][ C1]