last executing test programs: 4m38.958013247s ago: executing program 3 (id=21): r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001dfa2e45be3e3ad3f79fef5c9a5bfb2b4d6e48b3f1b6d6f0357673f344c23a8c2c34d1fb2ff9a2b4e5f4082b66c14e25fba0cbfce4ad09000000b82b0a54cd50cfac60e04e19e9e48663277b52421230639313c9e54c2e4ce0ed58daedc4733391146a40f34c7f3c7ec9176028e0826e85b4866d8ca51bd844ae17360f1c3dda8a2a653d91d6709912b61edd044a5ac8fbe2c841852de1bf0c5bf7c8087af4caab9a6ae32adf68d34a41582b58a1e69882212fab7bf8a92f67b61a5aecefe6b3aa78d074593359c89d0543f02b3f766a8961d34777db129089b1593854aa0fd61d2abd6505479c44d72b00"/252, @ANYRES16=r2, @ANYRESHEX=r0, @ANYBLOB="e95123a89920516cc60e561e5fab91b100252fb41cfa45685f46c9e9ec87c360d6f17345837aeff27bcdac8ac0f1ecad8fa18c8674b36a7c1d6f6c2b952f2b8ec58188699ad95953a16dd3b6d1cccb8ff5cabede5f617f2914c2967c13e99490a9b8ca8b1c88f004336d25ef71440e775bb729c5e1a74c314063f09792bec8a9131e0e8738787bcc88515d3fd5f755ee222930"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 4m38.700425568s ago: executing program 3 (id=23): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xe, 0x0, 0x0, [{}]}]}}, &(0x7f00000000c0)=""/140, 0x32, 0x8c, 0x1}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/30, 0x1e}], 0x1, 0x5b, 0x40000002) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) close(0x3) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0', [{0x20, '{,'}], 0xa, "be27e33ea361d0385400f96e9246f45af566892a1540b2582efe16bafab7a1518872d79f2b3cd90b030af13e06b9f8c706687d54be8a66b223c13497238ad905d5d221c480279f7855f20d2b53316ae2bda460ae25087c4c87c7a931e05893a788153a490159dcb8f6e19e050d2cd044d53d0b051886e57d95aefeec356a07c64dae52ebb8bac24d09"}, 0x97) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x2a7, 0x0, 0x0, 0x20780, 0x6d, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) close(r7) 4m37.907285697s ago: executing program 3 (id=26): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x100) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) eventfd(0x3) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) socket$igmp6(0xa, 0x3, 0x2) r2 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x7, 0x0, &(0x7f0000000900)="e02742e8680d85", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r4, &(0x7f0000000240)={0x3, 0x8}, &(0x7f0000000280), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap(&(0x7f0000fa3000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r7, 0xdd81000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) 4m36.979064795s ago: executing program 3 (id=31): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x7, 0xf, 0x7, 0x2, 0x8, 0x5, 0x5, 0x0, 0xc, 0x1, 0x6, 0xc, 0xe9, 0x0, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x16) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @void, @llc={@llc={0x42, 0xf6, '@', "d78cf6799885d9eb4d95b015ace6ab779ec4dfc84a"}}}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x5]}, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20a00, 0x0) prlimit64(0x0, 0x5, 0xfffffffffffffffd, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f00000001c0)) futimesat(r0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={{0x0, 0x2710}}) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000058c0)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x80) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$inet6(0xa, 0x2b3569ffd483801c, 0xfffffff8) 4m33.476014834s ago: executing program 3 (id=40): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, 0x0, 0x0) (async, rerun: 32) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x28}}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004e40000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000140)=0x8, 0x4) (rerun: 32) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601030000000000000000050000020500011406000000"], 0xf}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000000) 4m33.124378354s ago: executing program 3 (id=43): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000006000000000000000a14000000060a0b040000000000000000020000001400000011000100000000000000000000e5ff0a"], 0x3c}}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100005800c00088008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033bbd"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x56, 0x0, 0x8001, {0x0, 0x1}, {0x64, 0x2}, @const={0x8, {0x6, 0x0, 0xe, 0x401}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd700001dcdf251b000000070021006161000008009a0000000000080b201c5c4d1bd37e329b47998d4f29a08ce4671e85d5738166f4982fd781e3440206f5c7a51ebce02d229cdd7d5c47df3a781ac41e501d2db252e7fb9115ace035dc229a55558a7f3156407262dc3490df4bfe5085c4e9ae37d1b9c4badcd3d20144b288837e4f7bdebeff6741dc35d37701640d9e3e9bc7444b9f97a4f1c84fa74e0900057402213bc99b0a7058b28368"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x882) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x4000080) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x8, 0x8, 0xc1}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 4m31.363064454s ago: executing program 32 (id=43): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000006000000000000000a14000000060a0b040000000000000000020000001400000011000100000000000000000000e5ff0a"], 0x3c}}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100005800c00088008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033bbd"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x56, 0x0, 0x8001, {0x0, 0x1}, {0x64, 0x2}, @const={0x8, {0x6, 0x0, 0xe, 0x401}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd700001dcdf251b000000070021006161000008009a0000000000080b201c5c4d1bd37e329b47998d4f29a08ce4671e85d5738166f4982fd781e3440206f5c7a51ebce02d229cdd7d5c47df3a781ac41e501d2db252e7fb9115ace035dc229a55558a7f3156407262dc3490df4bfe5085c4e9ae37d1b9c4badcd3d20144b288837e4f7bdebeff6741dc35d37701640d9e3e9bc7444b9f97a4f1c84fa74e0900057402213bc99b0a7058b28368"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x882) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x4000080) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x8, 0x8, 0xc1}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 10.944553329s ago: executing program 0 (id=831): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000240)="0f1f000f01cf8311cd660f3882a87f418ec066b9b10300000f32f20f5c3566b9800000c00f326635002000000f300f01c90f08660f38037a00", 0x39}], 0x1, 0x18, 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0xf5ffffffffffffff) 10.665421755s ago: executing program 4 (id=832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000000000000000005df9221200001000deffffff82"], 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x200000b4) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff3c, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4812}, 0x40) r1 = syz_open_pts(0xffffffffffffffff, 0x44000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240), 0x0, 0x7e4, 0x10011, 0x200, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000002100)={{&(0x7f0000002080)=""/43, 0x2b}, &(0x7f00000020c0), 0x1}, 0x20) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x9, 0x1000001, 0x8000, 0x4, 0x100000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) getsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000040)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="eb89c839f231028f8f188d75ad5550284c2b4b083484352e8901089713c022d072e257d6ebf43abbd002ca0c73585feee74e3f0b67e4a97c0fd1f428ebcc06161399899263934de6cec9fa5682e58c1af11f0b63ce4085243d9bc3b71b15e693b8a9be94d032121e58f8bd81edc7b9a78ac6a866668d8f7d6d20b8999d261e27736ad46c39b8b160beb6c37c09c6d4dfefa0b69e891341aa753a164102f196", @ANYRES32=r1, @ANYRES32=r6, @ANYRESHEX=r6, @ANYRESOCT=0x0, @ANYRES16=r2, @ANYRES8=r4, @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESDEC=r6], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x12, r5, 0x0) 10.292654255s ago: executing program 0 (id=833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400a6ff", @ANYRES16=r1, @ANYBLOB="010325bd70586962607424"], 0x14}}, 0x0) 9.902286167s ago: executing program 0 (id=835): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = gettid() sendmmsg$unix(r3, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee01}}}], 0x20, 0x20004844}}], 0x1, 0x20000010) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x4, 0x7, 0x0, r4}) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003670e4f2390ed61bc446f28fc1332e1a4698924ce6d69bc92beba996a28c694b7e082100db432e8439d673bd32f2ea2c024db1e4f6eff5a074de3bae81877d2db480"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.651678555s ago: executing program 0 (id=838): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) pipe(&(0x7f00000002c0)) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {}, {0x20, 0xf1}, {}, {}, {0x3}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xfff3, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xb, 0x4, 0xc, 0x0, 0x7, 0x5, 0xc, 0x3, 0x7, 0x8, 0xd, 0xc, 0xe, 0xf, 0xb, 0x8], 0x0, [0x7, 0x3, 0x2, 0x2, 0x823, 0x8000, 0x9, 0x7, 0x9, 0xeaf, 0x8, 0x8, 0x0, 0x100, 0x3ff, 0x9], [0xe, 0x7, 0x2, 0x0, 0x3, 0x2, 0x7, 0x7, 0x7, 0x3, 0x8, 0x3, 0x8, 0x8, 0x4bc3, 0xff]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24004070}, 0x24000890) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x14, r9, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x11) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r11}, 0x48) 6.128665653s ago: executing program 5 (id=839): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB]) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x28840, 0x133) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="9e", 0x1}], 0x1}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4605fc0040ff7f00000000000002003e"], 0x78) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./bus\x00') execveat$binfmt(0xffffffffffffffff, r6, &(0x7f0000000240)={[&(0x7f00000001c0)='overlay\x00']}, &(0x7f0000000380)={[&(0x7f00000002c0)='#[!\x00', &(0x7f0000000340)='upperdir']}, 0x1000) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 5.977595654s ago: executing program 4 (id=840): r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x0, 0x3, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x14) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00001ef000/0x4000)=nil, 0x4000}}) 5.884371773s ago: executing program 2 (id=841): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0xf0ffffffffffff) 5.611902068s ago: executing program 2 (id=842): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f00002c6000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @loopback}, 0x1c) shutdown(r0, 0x1) listen(r0, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8893, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @empty}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x101, 0x2, 0x0, 0x7ffffffb}]}) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8008000) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r5, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) write$selinux_load(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="8c127c257c65438e7b187b7da38a3174f9080000005345204c696e757896b88dc6e199a8bde051b35f0bf8f75b8e93b5d831a624c5723d61711552e042fadcffd59fc4f8494409f155e684f51876f0c8ce6a8651dc0845510e2e783a93155f5905655d4558348b6d90afbce9abee415409d7edfa777f660b139eba660ccb7f8dff1a2349d7d2b689841a432b4301af5319711959a6f5a753e1c8ccef9e444fb257d70000000000"], 0x24) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xf, 0x2, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x7, 0x80, 0x4, 0x1}}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000240)={r8, @loopback, @dev={0xac, 0x14, 0x14, 0x30}}, 0xc) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000100)=0x1, 0x4) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0xff) 5.383236391s ago: executing program 1 (id=843): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.135061386s ago: executing program 4 (id=844): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSETD(r0, 0x5423, 0x0) 5.083614312s ago: executing program 5 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000002, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7ffffffb}, 0x0, 0x0) r6 = pidfd_getfd(r5, r1, 0x0) read$char_usb(r6, &(0x7f0000000f40)=""/4096, 0x1000) fcntl$dupfd(r0, 0x0, r2) accept4(r1, 0x0, 0x0, 0x80000) 5.080931021s ago: executing program 2 (id=846): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r0, 0x405, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x22004000) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) listen(r1, 0xda90) accept4(r1, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20018844}, 0x0) 4.971234969s ago: executing program 1 (id=847): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, 0x50) 4.957344919s ago: executing program 0 (id=848): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000002, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7ffffffb}, 0x0, 0x0) r5 = pidfd_getfd(r4, r0, 0x0) read$char_usb(r5, &(0x7f0000000f40)=""/4096, 0x1000) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0}) accept4(r0, 0x0, 0x0, 0x80000) 4.616464118s ago: executing program 4 (id=849): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x100801, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}, {@loose}, {@version_L}, {@cache_loose}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@audit}, {@subj_user={'subj_user', 0x3d, '[-\x1a])^'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@fsname={'fsname', 0x3d, '!'}}]}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x6, &(0x7f0000000200)="952bb3e006ae"}) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000180)={0x0, 0x12}, 0x0, 0x0}) 4.549670627s ago: executing program 1 (id=850): prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000940)={0x40, 0x15, 0x6, "1495c9073ab8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.070037582s ago: executing program 2 (id=851): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0xf9, 0x16, 0x9092}]}}}}}}}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1, r0, 0x2}) r2 = gettid() mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x5d686000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x10001}, 0x1c) 3.894607646s ago: executing program 5 (id=852): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES8=r0, @ANYBLOB="02002dbd7000fedbdf2514000000800002801c000380080002000002000008000200ff000000080002001d0f0000040004003c000380080001000300000008000200ff03000008000200ff0100000800020009000000080002000100000008000100050000000800010003000000040004"], 0x170}, 0x1, 0x0, 0x0, 0x4001}, 0x48000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$afs(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000000)={[{@dyn}]}) read$FUSE(r4, &(0x7f0000000c40)={0x2020}, 0x2020) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026093a091400"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 3.841777828s ago: executing program 0 (id=853): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace_dev_match', 0x203902, 0x29) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000001c0)={0x30, r2, 0x0, 0x0, 0x5, 0x9, 0x461a, 0x0}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00', 0xfffffffd}, 0x6, 0x2, 0x3, r3, 0x2b, 0x0, 'syz1\x00', 0x0}) poll(0x0, 0x0, 0xffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000400)}, 0x5}], 0x1, 0x62, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x800, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 3.732163573s ago: executing program 1 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x300, 0x4000850}, 0x40) 3.554599998s ago: executing program 1 (id=855): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10201, 0x0, &(0x7f0000413000/0x4000)=nil}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3.417423497s ago: executing program 5 (id=856): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lstat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0xc5, 0x3, @scatter={0x0, 0x5c00, 0x0}, &(0x7f00000004c0)="851666ce20db96ab0c7d83e114e7ef1762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1ac8724e372a5a8a9ca040f5831f2eb11842a4b8ec9064f8439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab327816dc2f3d4d01b4c3b71ebbfd6fc9f316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1d", 0x0, 0x6, 0x5bb727690d5f0ff2, 0x1, 0x0}) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="ea", 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r5, 0x0, 0x0, 0xc0c4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x1}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) socket(0x1e, 0x4, 0x0) r6 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x218888, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) 2.518756554s ago: executing program 2 (id=857): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x88) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100)={[0x40]}, 0x8) (async) ioctl$RTC_PIE_ON(r0, 0x7005) futex(&(0x7f0000000140), 0xb, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x2, 0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x629, 0x2, 0x4, 0x10, 0x4, {}, {0x5, 0x0, 0x0, 0x4, 0x0, 0x7, "8455ecb4"}, 0x9, 0x1, {}, 0x7, 0x0, r0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x8800) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0xb33a, 0x3, r3, 0x0, &(0x7f0000000380)={0x980921, 0xb, '\x00', @value=0x124}}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x5, 0xc, [0xa, 0x0, 0x9]}) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000440)={0xe, 0xe7f, @value=0x1f753b6}) (async, rerun: 32) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000004c0), 0x4) (async, rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r0, r0}, 0xc) (async, rerun: 64) fsopen(&(0x7f0000000540)='reiserfs\x00', 0x1) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x4000, &(0x7f0000000600)={[{@index_off}, {@xino_on}, {@xino_on}, {@verity_on}, {@nfs_export_on}], [{@fowner_gt}, {@hash}, {@fsname={'fsname', 0x3d, '\x00'}}, {@dont_measure}, {@subj_role}]}) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000000680)={0x3, 0xe5, 0x0, 0x0, 0x2, 0x3f}) recvmmsg$unix(r0, &(0x7f0000001c80)=[{{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000740)=""/134, 0x86}, {&(0x7f0000000800)=""/229, 0xe5}, {&(0x7f0000000900)=""/17, 0x11}], 0x3}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000a00)=""/151, 0x97}, {&(0x7f0000000ac0)=""/230, 0xe6}, {&(0x7f0000000bc0)=""/238, 0xee}, {&(0x7f0000000cc0)=""/69, 0x45}, {&(0x7f0000000d40)=""/203, 0xcb}, {&(0x7f0000000e40)=""/224, 0xe0}], 0x6, &(0x7f0000000fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/201, 0xc9}], 0x1, &(0x7f00000011c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001200)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001280)=""/49, 0x31}, {&(0x7f00000012c0)=""/89, 0x59}, {&(0x7f0000001340)=""/94, 0x5e}, {&(0x7f00000013c0)}], 0x4, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000001580), 0x0, &(0x7f00000015c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001680)=""/247, 0xf7}, {&(0x7f0000001780)=""/160, 0xa0}], 0x2, &(0x7f0000001880)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/148, 0x94}], 0x1, &(0x7f0000001a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000001b80), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/36, 0x24}], 0x1}}], 0x8, 0x2022, &(0x7f0000001e80)={0x77359400}) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001ec0)={r19, r8, r20}, 0xc) (async) ioctl$SYNC_IOC_MERGE(r13, 0xc0303e03, &(0x7f0000001f00)={"63929419d1ed9c17aab9cf004f634cfc7e9cf90c4538c5d3c8f70270687a3f07", r18}) (async) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000001f40)=0x4, 0x4) sched_setattr(r15, &(0x7f0000001f80)={0x38, 0x0, 0x10000002, 0x0, 0xffff0000, 0x1ff, 0xfd1, 0x0, 0x81, 0xc20}, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001fc0)={0x0, 0x9, 0x20}, &(0x7f0000002000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000002040)={r23, 0x9, 0x10}, &(0x7f0000002080)=0xc) (async) write(r3, &(0x7f00000020c0)="918bbcb4e157b8c5aa2d0fb9a4f947641c015886b53a7fc05a94d0976f52951a2750fa8afd9766d78ed5c9a6cf96879617b2fbdebbea246e3330aeaa38319a790320c51f68a0e21b5559c6726721007cd866bd172abcc5ce25a6a5fed834bda8b6cf10e12939dd5fdcbba69cfbb5c03ab603791daff3ae24ffc9226d30f77df116b993cdc41ef085698a706b3c8912cfebe19c31e3824763f2df0d55e42330698acbebe51b65b5bbd91da763426847ee388ccdcfe65f4d6979a44eef0bca0e855c72b4ef9ca8d8796c62c3daed980c0b6ea98199", 0xd4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r11, 0xc0189375, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$VIDIOC_G_PRIORITY(r21, 0x80045643, 0xb6f71dae8fc2b3b1) (async) ioctl$SW_SYNC_IOC_INC(r16, 0x40045701, &(0x7f0000002200)=0x4) (async, rerun: 64) r24 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x1e, 0x5, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x27692373}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}]}, &(0x7f0000002280)='GPL\x00', 0x3bc8, 0xbe, &(0x7f00000022c0)=""/190, 0x41000, 0x40, '\x00', 0x0, @fallback=0x36, r17, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002380)={0x5, 0xa, 0x8, 0x1}, 0x10, 0xffffffffffffffff, r12, 0x0, &(0x7f00000023c0)=[r10, r22, r9], 0x0, 0x10, 0x1000}, 0x94) (rerun: 64) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x40010, r24, 0x8dff5000) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r14, &(0x7f00000028c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002540)={0x334, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x41}, 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0xce, 0x3, "98c52408a957b23b1fe88c4b6008670829e77ffa326aeae10024233a94fc7361d7912fad7e4f0b00e1441939762c11be670601584b18dcd35eef422804ef4768afd07c604518160d7945f4de24c5a2b16bd1441e7da40af1a5d62760f207260490e717c1a49fa5ea043cee334d0e56cf4ab9581e6ad18a13c7e842cf817b4629e065a348d31b4dc2a26fe0a909dfb544fe24bb200ff018ba998a01bc0b69b8a6d24b40cb7960b457f2df6c377d5d629ef509d686134113bb505d77de86a667350a7a1c24dcb1428680e5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x41}, 0x4040080) 2.452793669s ago: executing program 4 (id=858): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.222391608s ago: executing program 5 (id=859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0xa, 0x401) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pause() r7 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000080)={0x1008, r8}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r1, 0x311, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4) 2.099081599s ago: executing program 2 (id=860): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x61, 0x2, 0xc, @loopback, @mcast2, 0x10, 0x8060, 0xe7}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="140012800cf7ff0280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) r7 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x694f840696960e3d) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.044721821s ago: executing program 1 (id=861): r0 = socket(0x1d, 0x2, 0x6) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002e0000000c000500000000000000000008000200", @ANYRES32=r5, @ANYBLOB="05002b0000000000"], 0x30}}, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) (async, rerun: 32) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r8 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}, {0xfff2, 0x7}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r12, {0xb, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24004810) (async) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) (async, rerun: 64) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (rerun: 64) ioctl$KDGKBDIACR(r7, 0x4b4a, 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 29.790574ms ago: executing program 5 (id=862): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x4000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lstat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0xc5, 0x3, @scatter={0x0, 0x5c00, 0x0}, &(0x7f00000004c0)="851666ce20db96ab0c7d83e114e7ef1762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1ac8724e372a5a8a9ca040f5831f2eb11842a4b8ec9064f8439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab327816dc2f3d4d01b4c3b71ebbfd6fc9f316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1d", 0x0, 0x6, 0x5bb727690d5f0ff2, 0x1, 0x0}) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000140)="ea", 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000080000000c0000000100000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000000000000000000050000000019a7f6a5bbc5e4a50a62ee4800000000000000000000001fa2eb9feefab4ef4045ddef82997144d5680e6c4b1ff5fa5ed126ac7a13d18602bf6758822bcfd8129adf5340ec772f381b64e97880b136018c82386c47f606f9ebe549e0be7b09ee081cfbbf32e6baf01bf4001a1fe9fe8fe10bc17c0fbc594c6c950000"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = accept4$alg(r4, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, 0x0, 0x0, 0xc0c4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x20b}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) socket(0x1e, 0x4, 0x0) r7 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x218888, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="ffb0f36d6ed6ee35f2a4be2c32"]) 0s ago: executing program 4 (id=863): clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x3580) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000001c0)={'s526\x00', [0xcf7, 0x20, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x7, 0x4, 0x1, 0x8, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40d, 0xe69, 0x81, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d78e0bfa0dfbfced34", 0x16}], 0x1}}], 0x1, 0x20008000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (rerun: 32) close(0xffffffffffffffff) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) (rerun: 64) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) (async) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') kernel console output (not intermixed with test programs): r 17 using dummy_hcd [ 215.594188][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 215.606331][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 64 [ 215.674471][ T5738] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 215.693674][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.811183][ T5738] usb 1-1: Product: syz [ 215.845160][ T5738] usb 1-1: Manufacturer: syz [ 215.861191][ T5738] usb 1-1: SerialNumber: syz [ 215.900439][ T5738] usb 1-1: config 0 descriptor?? [ 215.915862][ T7625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.926009][ T7625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.965427][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 215.971837][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 215.980644][ T5738] port100 1-1:0.0: NFC: Could not get supported command types [ 217.199205][ T7651] netlink: 'syz.4.467': attribute type 2 has an invalid length. [ 217.271808][ T5615] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 217.442013][ T5615] usb 6-1: Using ep0 maxpacket: 8 [ 217.468608][ T5615] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 217.517555][ T5615] usb 6-1: config 0 has no interface number 0 [ 217.538786][ T5615] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.572137][ T5615] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 217.612670][ T5615] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.657046][ T5615] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.725874][ T5615] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 217.765330][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.808526][ T5615] usb 6-1: config 0 descriptor?? [ 217.867817][ T5615] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 218.059105][ T7649] netlink: 'syz.5.466': attribute type 3 has an invalid length. [ 218.098346][ T7649] netlink: 'syz.5.466': attribute type 3 has an invalid length. [ 218.116774][ T24] usb 6-1: USB disconnect, device number 17 [ 218.165462][ T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 218.190525][ T5615] usb 1-1: USB disconnect, device number 17 [ 218.581932][ T804] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 218.853583][ T7671] capability: warning: `syz.5.473' uses 32-bit capabilities (legacy support in use) [ 219.002579][ T29] audit: type=1400 audit(1778429136.671:709): avc: denied { wake_alarm } for pid=7662 comm="syz.4.471" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 221.010632][ T29] audit: type=1400 audit(1778429138.671:710): avc: denied { ioctl } for pid=7700 comm="syz.5.479" path="socket:[21641]" dev="sockfs" ino=21641 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.131479][ T7709] __vm_enough_memory: pid: 7709, comm: syz.0.481, bytes: 11727195275264 not enough memory for the allocation [ 221.526710][ T7715] netlink: 'syz.0.483': attribute type 2 has an invalid length. [ 221.895425][ T7721] binder: 7720:7721 ioctl 8010640b 2000000696c0 returned -22 [ 222.494383][ T7732] afs: Bad value for 'flock' [ 223.194036][ T5738] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 224.247271][ T7735] netlink: 9 bytes leftover after parsing attributes in process `syz.2.491'. [ 224.463224][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 224.707570][ T5738] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 224.728945][ T7735] netlink: 9 bytes leftover after parsing attributes in process `syz.2.491'. [ 224.799457][ T5738] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.812852][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.846967][ T5738] usb 6-1: Product: syz [ 224.860012][ T5738] usb 6-1: Manufacturer: syz [ 224.872047][ T5738] usb 6-1: SerialNumber: syz [ 224.906608][ T24] usb 1-1: config 6 has an invalid interface number: 116 but max is 1 [ 225.841829][ T24] usb 1-1: config 6 has an invalid interface number: 14 but max is 1 [ 225.850759][ T24] usb 1-1: config 6 has an invalid interface number: 49 but max is 1 [ 225.864847][ T24] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 225.876696][ T24] usb 1-1: config 6 has an invalid descriptor of length 131, skipping remainder of the config [ 225.888540][ T24] usb 1-1: config 6 has 3 interfaces, different from the descriptor's value: 2 [ 225.900109][ T24] usb 1-1: config 6 has no interface number 0 [ 226.502859][ T24] usb 1-1: config 6 has no interface number 1 [ 226.510414][ T24] usb 1-1: config 6 has no interface number 2 [ 226.524386][ T5738] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 226.531884][ T24] usb 1-1: config 6 interface 14 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 226.552171][ T5738] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 226.558923][ T5738] usb 6-1: 2:1 : invalid channels 0 [ 226.565960][ T24] usb 1-1: too many endpoints for config 6 interface 49 altsetting 206: 200, using maximum allowed: 30 [ 226.586225][ T24] usb 1-1: config 6 interface 49 altsetting 206 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 226.618519][ T24] usb 1-1: config 6 interface 49 altsetting 206 has a duplicate endpoint with address 0xA, skipping [ 226.644871][ T24] usb 1-1: config 6 interface 49 altsetting 206 has 5 endpoint descriptors, different from the interface descriptor's value: 200 [ 226.670539][ T5738] usb 6-1: USB disconnect, device number 18 [ 226.678501][ T24] usb 1-1: config 6 interface 116 has no altsetting 0 [ 226.696675][ T24] usb 1-1: config 6 interface 14 has no altsetting 0 [ 226.710671][ T24] usb 1-1: config 6 interface 49 has no altsetting 0 [ 226.719879][ T24] usb 1-1: string descriptor 0 read error: -71 [ 226.727428][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= f.9e [ 226.749669][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.804860][ T24] usb 1-1: can't set config #6, error -71 [ 226.834610][ T24] usb 1-1: USB disconnect, device number 18 [ 226.935658][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.495'. [ 227.071080][ T6305] udevd[6305]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.693456][ T7771] netlink: 44 bytes leftover after parsing attributes in process `syz.0.499'. [ 228.297281][ T29] audit: type=1400 audit(1778429145.951:711): avc: denied { create } for pid=7753 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 229.231993][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 230.457479][ T29] audit: type=1400 audit(1778429146.001:712): avc: denied { setopt } for pid=7753 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 230.478030][ T29] audit: type=1400 audit(1778429146.051:713): avc: denied { unmount } for pid=5984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 230.501495][ T29] audit: type=1400 audit(1778429146.191:714): avc: denied { mount } for pid=7753 comm="syz.1.498" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 230.694835][ T5798] libceph: connect (1)[c::]:6789 error -101 [ 230.708813][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 230.722651][ T5798] libceph: connect (1)[c::]:6789 error -101 [ 230.729525][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 230.735554][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.5.500'. [ 230.782099][ T29] audit: type=1400 audit(1778429148.451:715): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 230.885217][ T5798] libceph: connect (1)[b::]:6789 error -101 [ 230.923979][ T5798] libceph: mon0 (1)[b::]:6789 connect error [ 231.158035][ T29] audit: type=1400 audit(1778429148.651:716): avc: denied { setopt } for pid=7784 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.179934][ T5798] libceph: connect (1)[b::]:6789 error -101 [ 231.186647][ T24] libceph: connect (1)[c::]:6789 error -101 [ 231.193136][ T5798] libceph: mon0 (1)[b::]:6789 connect error [ 231.199803][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 232.034725][ T29] audit: type=1400 audit(1778429149.271:717): avc: denied { create } for pid=7784 comm="syz.1.501" name="#25" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 232.086637][ T7780] ceph: No mds server is up or the cluster is laggy [ 232.259018][ T5738] libceph: connect (1)[b::]:6789 error -101 [ 232.267107][ T24] libceph: connect (1)[c::]:6789 error -101 [ 232.273998][ T5738] libceph: mon0 (1)[b::]:6789 connect error [ 232.280780][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 232.288645][ T29] audit: type=1400 audit(1778429149.361:718): avc: denied { link } for pid=7784 comm="syz.1.501" name="#25" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 232.528194][ T7777] ceph: No mds server is up or the cluster is laggy [ 232.557603][ T7790] netlink: 'syz.0.502': attribute type 2 has an invalid length. [ 232.587688][ T29] audit: type=1400 audit(1778429149.361:719): avc: denied { rename } for pid=7784 comm="syz.1.501" name="#26" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 232.802934][ T24] libceph: connect (1)[b::]:6789 error -101 [ 232.814674][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 233.975567][ T29] audit: type=1400 audit(1778429151.641:720): avc: denied { shutdown } for pid=7803 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.083145][ T29] audit: type=1400 audit(1778429151.761:721): avc: denied { connect } for pid=7808 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 235.488478][ T7822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.607120][ T7826] 9p: Bad value for 'rfdno' [ 235.818525][ T7832] netlink: 56 bytes leftover after parsing attributes in process `syz.4.514'. [ 237.617154][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 237.879134][ T24] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 237.937825][ T24] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 237.972669][ T7842] netlink: 'syz.0.517': attribute type 2 has an invalid length. [ 237.978954][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.009656][ T24] usb 3-1: Product: syz [ 238.023096][ T24] usb 3-1: Manufacturer: syz [ 238.036002][ T24] usb 3-1: SerialNumber: syz [ 238.078245][ T24] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 238.282624][ T5738] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 238.334268][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 238.348355][ T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 238.358784][ T24] usb 3-1: media controller created [ 238.394592][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.457874][ T5738] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 238.480767][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.504540][ T5738] usb 5-1: Product: syz [ 238.517697][ T5738] usb 5-1: Manufacturer: syz [ 238.531837][ T5738] usb 5-1: SerialNumber: syz [ 238.559218][ T5738] usb 5-1: config 0 descriptor?? [ 238.695636][ T24] usb 3-1: USB disconnect, device number 16 [ 238.825511][ T5738] usb 5-1: USB disconnect, device number 16 [ 239.329429][ T7859] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 239.397154][ T7861] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 239.643749][ T5738] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 239.762501][ T7859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.811201][ T7859] team0: Port device netdevsim1 added [ 239.814637][ T5738] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 239.831458][ T5738] usb 3-1: config 1 has no interface number 0 [ 239.848493][ T5738] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 239.867469][ T5738] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 239.879559][ T5738] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.903837][ T7861] team0: Port device netdevsim1 removed [ 239.905644][ T5738] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 239.921959][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.933364][ T5738] usb 3-1: Product: syz [ 239.976049][ T5738] usb 3-1: Manufacturer: syz [ 239.995467][ T5738] usb 3-1: SerialNumber: syz [ 240.041070][ T7862] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 240.080115][ T7861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.128247][ T7861] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 240.253072][ T7862] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 240.407199][ T5738] usb 3-1: Error in usbnet_get_endpoints (-71) [ 240.417679][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'. [ 240.440466][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 240.490217][ T7875] bridge: RTM_NEWNEIGH with invalid ether address [ 240.505870][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 240.536470][ T7878] netlink: 75 bytes leftover after parsing attributes in process `syz.0.524'. [ 240.548034][ T5738] usb 3-1: USB disconnect, device number 17 [ 240.554549][ T7878] bridge: RTM_NEWNEIGH with invalid ether address [ 240.600169][ T7875] netlink: 'syz.0.524': attribute type 2 has an invalid length. [ 240.646055][ T7880] syzkaller0: entered promiscuous mode [ 240.667609][ T7880] syzkaller0: entered allmulticast mode [ 240.751097][ T7875] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 242.873790][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 242.965178][ T29] audit: type=1400 audit(1778429160.641:722): avc: denied { create } for pid=7916 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 243.013108][ T29] audit: type=1400 audit(1778429160.641:723): avc: denied { ioctl } for pid=7916 comm="syz.0.538" path="socket:[22496]" dev="sockfs" ino=22496 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.073371][ T10] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 243.083410][ T10] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 243.094152][ T10] usb 5-1: config 0 has no interface number 0 [ 243.103503][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 243.115812][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.131826][ T10] usb 5-1: Product: syz [ 243.131883][ T24] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 243.137598][ T10] usb 5-1: Manufacturer: syz [ 243.158776][ T10] usb 5-1: SerialNumber: syz [ 243.171371][ T10] usb 5-1: config 0 descriptor?? [ 243.182552][ T10] hub 5-1:0.31: bad descriptor, ignoring hub [ 243.189184][ T10] hub 5-1:0.31: probe with driver hub failed with error -5 [ 243.202624][ T5738] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 243.318260][ T24] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 243.361258][ T24] usb 6-1: config 0 has no interface number 0 [ 243.370923][ T5738] usb 1-1: Using ep0 maxpacket: 32 [ 243.383017][ T24] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 243.387801][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 243.404552][ T24] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0xE has invalid maxpacket 12336, setting to 64 [ 243.423591][ T5738] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 243.434233][ T24] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 243.447674][ T5738] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.473976][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.486466][ T5738] usb 1-1: config 0 has no interface number 0 [ 243.497472][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.508508][ T5738] usb 1-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.524704][ T24] usb 6-1: config 0 descriptor?? [ 243.530939][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.554819][ T5738] usb 1-1: config 0 interface 12 has no altsetting 0 [ 243.571053][ T5738] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 243.574418][ T10] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 243.615217][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.626352][ T10] uvcvideo 5-1:0.31: No valid video chain found. [ 243.642391][ T5738] usb 1-1: Product: syz [ 243.647194][ T5738] usb 1-1: Manufacturer: syz [ 243.654055][ T5738] usb 1-1: SerialNumber: syz [ 243.678208][ T10] usb 5-1: USB disconnect, device number 17 [ 243.687279][ T5738] usb 1-1: config 0 descriptor?? [ 243.716041][ T5738] f81534 1-1:0.12: required endpoints missing [ 243.854798][ T5615] usb 6-1: USB disconnect, device number 19 [ 244.351789][ T804] usb 1-1: USB disconnect, device number 19 [ 244.694300][ T7928] netlink: 'syz.1.542': attribute type 2 has an invalid length. [ 244.923323][ T5615] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 244.941001][ T29] audit: type=1400 audit(1778429162.611:724): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 245.055835][ T7937] netlink: 216 bytes leftover after parsing attributes in process `syz.4.546'. [ 245.066792][ T7937] netlink: 'syz.4.546': attribute type 2 has an invalid length. [ 245.069122][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 245.086066][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 245.104986][ T1168] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.114290][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 245.125392][ T1168] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.135826][ T5615] usb 3-1: Using ep0 maxpacket: 16 [ 245.143002][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 245.162316][ T1168] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.171191][ T5615] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.193307][ T1168] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.205132][ T5615] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 245.230282][ T5615] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 245.256258][ T5615] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.271938][ T7941] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.280919][ T5615] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.296146][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.314245][ T5615] usb 3-1: SerialNumber: syz [ 245.328493][ T7927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.368504][ T7927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.416164][ T5615] hub 3-1:1.0: bad descriptor, ignoring hub [ 245.436590][ T5615] hub 3-1:1.0: probe with driver hub failed with error -5 [ 245.480442][ T7945] FAULT_INJECTION: forcing a failure. [ 245.480442][ T7945] name failslab, interval 1, probability 0, space 0, times 1 [ 245.504571][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.4.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.504609][ T7945] Tainted: [L]=SOFTLOCKUP [ 245.504617][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.504635][ T7945] Call Trace: [ 245.504641][ T7945] [ 245.504650][ T7945] dump_stack_lvl+0x100/0x190 [ 245.504694][ T7945] should_fail_ex.cold+0x5/0xa [ 245.504725][ T7945] should_failslab+0xc2/0x120 [ 245.504749][ T7945] __kvmalloc_node_noprof+0xfa/0xa00 [ 245.504781][ T7945] ? bucket_table_alloc.isra.0+0x88/0x460 [ 245.504817][ T7945] bucket_table_alloc.isra.0+0x88/0x460 [ 245.504848][ T7945] rhashtable_init_noprof+0x43b/0x890 [ 245.504879][ T7945] rhltable_init_noprof+0x20/0x60 [ 245.504907][ T7945] nf_tables_newtable+0xf1b/0x19f0 [ 245.504945][ T7945] ? __pfx_nf_tables_newtable+0x10/0x10 [ 245.504982][ T7945] ? __nla_parse+0x40/0x60 [ 245.505013][ T7945] nfnetlink_rcv_batch+0x1410/0x2880 [ 245.505050][ T7945] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 245.505091][ T7945] ? avc_has_perm_noaudit+0x145/0x3b0 [ 245.505141][ T7945] ? __nla_parse+0x40/0x60 [ 245.505170][ T7945] nfnetlink_rcv+0x3bd/0x440 [ 245.505192][ T7945] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 245.505221][ T7945] netlink_unicast+0x585/0x850 [ 245.505253][ T7945] ? __pfx_netlink_unicast+0x10/0x10 [ 245.505288][ T7945] netlink_sendmsg+0x8b0/0xda0 [ 245.505320][ T7945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.505345][ T7945] ? pti_set_user_pgtbl+0x30/0x50 [ 245.505386][ T7945] ____sys_sendmsg+0x9e1/0xb70 [ 245.505411][ T7945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.505441][ T7945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.505480][ T7945] ___sys_sendmsg+0x190/0x1e0 [ 245.505509][ T7945] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.505572][ T7945] __sys_sendmsg+0x170/0x220 [ 245.505594][ T7945] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.505632][ T7945] ? rcu_is_watching+0x12/0xc0 [ 245.505669][ T7945] do_syscall_64+0x10b/0xf80 [ 245.505697][ T7945] ? clear_bhb_loop+0x40/0x90 [ 245.505723][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.505744][ T7945] RIP: 0033:0x7f2bc799cdd9 [ 245.505765][ T7945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.505789][ T7945] RSP: 002b:00007f2bc87f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.505812][ T7945] RAX: ffffffffffffffda RBX: 00007f2bc7c15fa0 RCX: 00007f2bc799cdd9 [ 245.505826][ T7945] RDX: 0000000000008040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 245.505839][ T7945] RBP: 00007f2bc87f7090 R08: 0000000000000000 R09: 0000000000000000 [ 245.505851][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.505862][ T7945] R13: 00007f2bc7c16038 R14: 00007f2bc7c15fa0 R15: 00007fff95f3b708 [ 245.505891][ T7945] [ 245.804563][ T7927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.812819][ T7927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.747976][ T5615] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 247.174952][ T29] audit: type=1400 audit(1778429164.821:725): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 248.123113][ T5738] usb 3-1: USB disconnect, device number 18 [ 248.190718][ T5738] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 248.658352][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 249.131917][ T7979] nbd: socks must be embedded in a SOCK_ITEM attr [ 249.741053][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 249.986155][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 250.204131][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 250.313441][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 251.815133][ T8009] fuse: Bad value for 'fd' [ 251.839751][ T5730] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 251.872394][ T29] audit: type=1400 audit(1778429169.511:726): avc: denied { write } for pid=7969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.882513][ T5730] dvb_usb_az6027 2-1:0.2: probe with driver dvb_usb_az6027 failed with error -110 [ 251.968863][ T5730] usb 2-1: USB disconnect, device number 18 [ 252.545094][ T5624] udevd[5624]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 252.673085][ T29] audit: type=1400 audit(1778429170.341:727): avc: denied { write } for pid=8019 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.433451][ T989] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 253.572825][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.701942][ T989] usb 3-1: device descriptor read/64, error -71 [ 254.032857][ T989] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 254.470327][ T989] usb 3-1: device descriptor read/64, error -71 [ 254.640194][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.742078][ T989] usb usb3-port1: attempt power cycle [ 254.850079][ T29] audit: type=1400 audit(1778429172.521:728): avc: denied { ioctl } for pid=8043 comm="syz.1.569" path="socket:[26110]" dev="sockfs" ino=26110 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.972042][ T29] audit: type=1400 audit(1778429172.611:729): avc: denied { bind } for pid=8043 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.032924][ T29] audit: type=1400 audit(1778429172.611:730): avc: denied { accept } for pid=8043 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.091896][ T989] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 255.113900][ T989] usb 3-1: device descriptor read/8, error -71 [ 255.252034][ T5344] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 255.329258][ T29] audit: type=1400 audit(1778429173.001:731): avc: denied { write } for pid=8037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.353681][ T989] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 255.432409][ T989] usb 3-1: device descriptor read/8, error -71 [ 255.479985][ T5344] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 256.143549][ T989] usb usb3-port1: unable to enumerate USB device [ 256.173093][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.179556][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.195744][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.212747][ T5344] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 256.299336][ T5344] usb 2-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 256.330315][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.360761][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.576'. [ 256.431814][ T5344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 256.479985][ T5344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 256.498697][ T29] audit: type=1400 audit(1778429174.171:732): avc: denied { write } for pid=8074 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.537781][ T5344] usb 2-1: SerialNumber: syz [ 256.575486][ T5344] cdc_acm 2-1:253.0: Zero length descriptor references [ 256.586935][ T8078] selinux_netlink_send: 25 callbacks suppressed [ 256.586954][ T8078] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65534 sclass=netlink_xfrm_socket pid=8078 comm=syz.0.578 [ 256.650200][ T5344] cdc_acm 2-1:253.0: probe with driver cdc_acm failed with error -22 [ 256.685135][ T5344] usb-storage 2-1:253.0: USB Mass Storage device detected [ 256.724393][ T5344] usb-storage 2-1:253.0: Quirks match for vid 0525 pid a4a5: 10000 [ 257.171524][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 257.470535][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.974099][ T5344] usb 2-1: USB disconnect, device number 19 [ 258.308065][ T8098] netlink: 'syz.2.585': attribute type 1 has an invalid length. [ 258.346279][ T8098] netlink: 224 bytes leftover after parsing attributes in process `syz.2.585'. [ 258.513317][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.714378][ T804] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 258.893039][ T804] usb 1-1: Using ep0 maxpacket: 8 [ 259.037979][ T804] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 259.061396][ T804] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 259.071379][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.083299][ T804] usb 1-1: Product: syz [ 259.088974][ T804] usb 1-1: Manufacturer: syz [ 259.094874][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 259.103289][ T804] usb 1-1: SerialNumber: syz [ 259.223853][ T8125] 9pnet_virtio: no channels available for device syz [ 259.241907][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.264607][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 259.292993][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.318617][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.334827][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.398987][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 259.472920][ T24] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 259.482429][ T24] usb 6-1: Product: syz [ 259.487251][ T24] usb 6-1: Manufacturer: syz [ 259.492549][ T24] usb 6-1: SerialNumber: syz [ 259.528921][ T24] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input20 [ 259.552944][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.317715][ T29] audit: type=1400 audit(1778429177.771:733): avc: denied { getopt } for pid=8117 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.520487][ T29] audit: type=1400 audit(1778429178.191:734): avc: denied { ioctl } for pid=8128 comm="syz.4.591" path="pid:[4026533204]" dev="nsfs" ino=4026533204 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 260.595036][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.613635][ T29] audit: type=1400 audit(1778429178.241:735): avc: denied { remount } for pid=8128 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 260.931867][ T5615] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 261.110697][ T5615] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.138846][ T5615] usb 5-1: not running at top speed; connect to a high speed hub [ 261.165462][ T5615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 261.187356][ T5615] usb 5-1: can't read configurations, error -61 [ 261.334270][ T5615] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 261.650775][ T5615] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.704924][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.758308][ T5615] usb 5-1: not running at top speed; connect to a high speed hub [ 261.801927][ T5615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 261.952782][ T5344] usb 6-1: USB disconnect, device number 20 [ 261.988227][ T5615] usb 5-1: can't read configurations, error -61 [ 262.063811][ T5615] usb usb5-port1: attempt power cycle [ 262.163611][ T8145] netlink: 'syz.5.594': attribute type 2 has an invalid length. [ 262.206437][ T5344] appletouch 6-1:1.0: input: appletouch disconnected [ 262.249885][ T5730] usb 1-1: USB disconnect, device number 20 [ 262.273417][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.433711][ T5615] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 262.476702][ T5615] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.499216][ T5615] usb 5-1: not running at top speed; connect to a high speed hub [ 262.521194][ T5615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 262.543467][ T5615] usb 5-1: can't read configurations, error -61 [ 262.691820][ T5615] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 262.738192][ T5615] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.738659][ T5615] usb 5-1: not running at top speed; connect to a high speed hub [ 262.739947][ T5615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 262.739982][ T5615] usb 5-1: can't read configurations, error -61 [ 262.740234][ T5615] usb usb5-port1: unable to enumerate USB device [ 262.753121][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.301915][ T5344] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 263.414252][ T29] audit: type=1400 audit(1778429181.091:736): avc: denied { read write } for pid=8164 comm="syz.4.598" name="cgroup.max.descendants" dev="cgroup2" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 263.466650][ T5344] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 263.486344][ T29] audit: type=1400 audit(1778429181.091:737): avc: denied { open } for pid=8164 comm="syz.4.598" path="" dev="cgroup2" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 263.487211][ T5344] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 263.561646][ T5344] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 263.588251][ T5615] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 263.612501][ T5344] usb 2-1: config 220 has no interface number 2 [ 263.628040][ T5344] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 263.678252][ T5344] usb 2-1: config 220 interface 0 has no altsetting 0 [ 263.692424][ T5344] usb 2-1: config 220 interface 76 has no altsetting 0 [ 263.706319][ T5344] usb 2-1: config 220 interface 1 has no altsetting 0 [ 263.734578][ T5344] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 263.755675][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.775657][ T5615] usb 6-1: Using ep0 maxpacket: 16 [ 263.783416][ T5615] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.796530][ T5344] usb 2-1: Product: syz [ 263.805966][ T5615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.818699][ T5344] usb 2-1: Manufacturer: syz [ 263.828510][ T5344] usb 2-1: SerialNumber: syz [ 263.840061][ T5615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 263.853019][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.868750][ T5615] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 263.896226][ T5615] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.922326][ T5615] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 263.931959][ T5615] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 263.951293][ T5615] usb 6-1: Manufacturer: syz [ 263.970801][ T5615] usb 6-1: config 0 descriptor?? [ 264.090293][ T29] audit: type=1400 audit(1778429181.761:738): avc: denied { write } for pid=8169 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 264.257547][ T29] audit: type=1400 audit(1778429181.931:739): avc: denied { mounton } for pid=8173 comm="syz.0.602" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 264.283330][ T8174] 9pnet_fd: p9_fd_create_tcp (8174): problem connecting socket to 127.0.0.1 [ 264.311838][ T5615] rc_core: IR keymap rc-hauppauge not found [ 264.327902][ T5615] Registered IR keymap rc-empty [ 264.351158][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.368158][ T29] audit: type=1400 audit(1778429182.041:740): avc: denied { write } for pid=8173 comm="syz.0.602" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 264.433860][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.484247][ T5615] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 264.596716][ T5615] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 264.701621][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.806074][ T29] audit: type=1400 audit(1778429182.481:741): avc: denied { load_policy } for pid=8162 comm="syz.5.599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 264.809383][ T8186] binder: 8185:8186 ioctl c0306201 2000000001c0 returned -14 [ 264.834113][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.865198][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.912041][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.924830][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.925050][ T8188] SELinux: policydb magic number 0x8daf8ddc does not match expected magic number 0xf97cff8c [ 264.982466][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 265.031256][ T8188] SELinux: failed to load policy [ 265.043258][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 265.082769][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 265.122060][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 265.153093][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 265.182057][ T5615] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 265.182689][ T29] audit: type=1400 audit(1778429182.861:742): avc: denied { write } for pid=8162 comm="syz.5.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.218183][ T5615] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 265.259141][ T5615] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 265.309851][ T5615] usb 6-1: USB disconnect, device number 21 [ 265.339631][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.362945][ T5730] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 265.580216][ T5730] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 265.597025][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.623468][ T5730] usb 1-1: config 0 descriptor?? [ 265.628709][ T5344] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 265.628744][ T5344] uvcvideo 2-1:220.0: No valid video chain found. [ 265.628794][ T5344] usb 2-1: selecting invalid altsetting 0 [ 265.663912][ T5344] usb 2-1: selecting invalid altsetting 0 [ 265.697883][ T5344] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 265.759140][ T5344] usb 2-1: USB disconnect, device number 20 [ 265.826347][ T8200] input: syz0 as /devices/virtual/input/input22 [ 265.954653][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.962357][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 266.034410][ T8210] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 266.109030][ T8210] bond1: (slave bridge1): making interface the new active one [ 266.131522][ T8214] netlink: 'syz.2.610': attribute type 5 has an invalid length. [ 266.141794][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 266.150017][ T10] usb 5-1: config 128 has no interfaces? [ 266.160220][ T8210] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 266.180578][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=37.32 [ 266.196004][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.205441][ T10] usb 5-1: Product: syz [ 266.216505][ T10] usb 5-1: Manufacturer: syz [ 266.225262][ T10] usb 5-1: SerialNumber: syz [ 266.325812][ T8195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.605'. [ 266.664450][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.726161][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.739683][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.888695][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.939107][ T5730] usb 1-1: Cannot set autoneg [ 267.001859][ T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 267.022312][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.048012][ T5730] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 267.180180][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 267.466885][ T29] audit: type=1400 audit(1778429184.791:743): avc: denied { setopt } for pid=8223 comm="syz.5.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 267.521659][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 267.586502][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.804276][ T29] audit: type=1400 audit(1778429184.801:744): avc: denied { setopt } for pid=8223 comm="syz.5.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.834002][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.911133][ T10] apple-mfi-fastcharge 5-1: USB disconnect, device number 22 [ 267.918839][ T9] usb 2-1: string descriptor 0 read error: -22 [ 267.942102][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.011967][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.042336][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.054629][ T5730] usb 1-1: USB disconnect, device number 21 [ 268.118168][ T9] usb 2-1: 0:2 : does not exist [ 268.509984][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.693031][ T29] audit: type=1400 audit(1778429186.241:745): avc: denied { setopt } for pid=8231 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 269.019935][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.124347][ T29] audit: type=1400 audit(1778429186.801:746): avc: denied { map } for pid=8231 comm="syz.0.615" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.150264][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.364482][ T8242] afs: Bad value for 'flock' [ 270.204122][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.261676][ T9] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 270.283349][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 270.284922][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 270.342527][ T9] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 270.402715][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 270.528476][ T8248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.550582][ T9] usb 2-1: USB disconnect, device number 21 [ 270.706930][ T24] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 271.133737][ T24] usb 5-1: config 0 has no interface number 0 [ 271.140414][ T24] usb 5-1: config 0 interface 50 has no altsetting 0 [ 271.317856][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 271.398090][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.428564][ T24] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=c4.0e [ 271.463061][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.481997][ T24] usb 5-1: Product: syz [ 271.491371][ T24] usb 5-1: Manufacturer: syz [ 271.510775][ T24] usb 5-1: SerialNumber: syz [ 271.551114][ T24] usb 5-1: config 0 descriptor?? [ 271.557519][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.582916][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 271.755304][ T9] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 271.763817][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.771941][ T804] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 271.774150][ T9] usb 1-1: config 0 has no interface number 0 [ 271.788647][ T9] usb 1-1: config 0 interface 205 has no altsetting 0 [ 271.798285][ T9] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 271.808191][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.817143][ T9] usb 1-1: Product: syz [ 271.821497][ T9] usb 1-1: Manufacturer: syz [ 271.826482][ T9] usb 1-1: SerialNumber: syz [ 271.835960][ T9] usb 1-1: config 0 descriptor?? [ 271.854366][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 271.865754][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 271.886721][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 271.896630][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 271.909652][ T9] usb 1-1: media controller created [ 271.915139][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 271.925000][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.939174][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 271.945281][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 271.961480][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 271.964204][ T804] usb 6-1: Using ep0 maxpacket: 32 [ 271.974671][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 271.981833][ T5738] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 271.987163][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 272.005259][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 272.017487][ T804] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 272.021804][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 272.030333][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 272.056437][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 272.078499][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.081381][ T804] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 272.095999][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 272.110519][ T5730] usb 1-1: USB disconnect, device number 22 [ 272.118951][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.128122][ T10] usb 3-1: Product: syz [ 272.137196][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.138345][ T10] usb 3-1: Manufacturer: syz [ 272.147551][ T804] usb 6-1: Product: syz [ 272.155632][ T804] usb 6-1: Manufacturer: syz [ 272.164492][ T10] usb 3-1: SerialNumber: syz [ 272.164643][ T804] usb 6-1: SerialNumber: syz [ 272.184830][ T10] usb 3-1: config 0 descriptor?? [ 272.200105][ T804] usb 6-1: config 0 descriptor?? [ 272.207578][ T5738] usb 2-1: Using ep0 maxpacket: 32 [ 272.216891][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 272.249355][ T804] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input24 [ 272.261764][ T5738] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 272.279906][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 272.292281][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 272.305984][ T24] usbserial_generic 5-1:0.50: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 272.326786][ T5730] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 272.340457][ T24] usbserial_generic 5-1:0.50: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 272.371093][ T24] usbserial_generic 5-1:0.50: device has no bulk endpoints [ 272.390730][ T5738] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 272.400726][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.412543][ T5738] usb 2-1: Product: syz [ 272.417529][ T24] safe_serial 5-1:0.50: safe_serial converter detected [ 272.429748][ T24] safe_serial 5-1:0.50: probe with driver safe_serial failed with error -22 [ 272.431408][ T10] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 273.547154][ T10] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 273.569714][ T5738] usb 2-1: Manufacturer: syz [ 273.581905][ T10] usb 3-1: USB disconnect, device number 23 [ 273.587280][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.619947][ T989] usb 6-1: USB disconnect, device number 22 [ 273.621755][ T5738] usb 2-1: SerialNumber: syz [ 273.677796][ T5738] usb 2-1: config 0 descriptor?? [ 273.686629][ T24] usb 5-1: USB disconnect, device number 23 [ 273.751484][ T5738] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 275.030335][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.044439][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.267187][ T8279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.627'. [ 275.269879][ T10] usb 2-1: USB disconnect, device number 22 [ 275.810359][ T29] audit: type=1400 audit(1778429193.481:747): avc: denied { bind } for pid=8273 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 275.894316][ T29] audit: type=1400 audit(1778429193.481:748): avc: denied { write } for pid=8273 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 275.977789][ T8285] netlink: 'syz.0.631': attribute type 2 has an invalid length. [ 276.042311][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.672191][ T5344] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 276.836020][ T5344] usb 3-1: unable to get BOS descriptor or descriptor too short [ 276.862308][ T5344] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 276.897973][ T5344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.917870][ T5344] usb 3-1: Product: syz [ 276.932124][ T5344] usb 3-1: Manufacturer: syz [ 276.944815][ T5344] usb 3-1: SerialNumber: syz [ 277.097963][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.701870][ T989] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 277.754714][ T29] audit: type=1400 audit(1778429195.431:749): avc: denied { read write } for pid=8294 comm="syz.4.634" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 278.092078][ T989] usb 1-1: Using ep0 maxpacket: 16 [ 278.131396][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.294915][ T29] audit: type=1400 audit(1778429195.461:750): avc: denied { open } for pid=8294 comm="syz.4.634" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 278.403773][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 278.945674][ T24] usb 5-1: config index 0 descriptor too short (expected 9728, got 59) [ 279.186071][ T24] usb 5-1: config 111 has too many interfaces: 201, using maximum allowed: 32 [ 279.198027][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.323853][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.333451][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.346925][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.430215][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.534734][ T24] usb 5-1: config 111 has an invalid descriptor of length 0, skipping remainder of the config [ 279.622448][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.643367][ T5738] hid_parser_main: 362 callbacks suppressed [ 279.643425][ T5738] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 279.806279][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.907794][ T24] usb 5-1: config 111 has 0 interfaces, different from the descriptor's value: 201 [ 279.974238][ T989] usb 1-1: unable to get BOS descriptor or descriptor too short [ 280.050430][ T989] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 280.064804][ T989] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 280.074016][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.082533][ T989] usb 1-1: Product: syz [ 280.086758][ T989] usb 1-1: Manufacturer: syz [ 280.091397][ T989] usb 1-1: SerialNumber: syz [ 280.144157][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.155715][ T5344] usb 3-1: 1:1: cannot get freq at ep 0x1 [ 280.199640][ T5738] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 280.241785][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.285862][ T989] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 280.293031][ T24] usb 5-1: SerialNumber: syz [ 280.312454][ T989] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 280.624537][ T5344] usb 3-1: USB disconnect, device number 24 [ 280.755251][ T989] usb 1-1: USB disconnect, device number 23 [ 280.807305][ T8313] netlink: 'syz.0.638': attribute type 2 has an invalid length. [ 280.868522][ T24] usb 5-1: USB disconnect, device number 24 [ 281.098141][ T5739] net_ratelimit: 3 callbacks suppressed [ 281.098168][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.290678][ T6550] udevd[6550]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.412495][ T29] audit: type=1400 audit(1778429199.091:751): avc: denied { setopt } for pid=8324 comm="syz.5.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.501869][ T5344] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 282.113318][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.270054][ T5344] usb 3-1: Using ep0 maxpacket: 32 [ 283.088066][ T29] audit: type=1400 audit(1778429199.121:752): avc: denied { open } for pid=8324 comm="syz.5.640" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 283.169263][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.581957][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 283.658887][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.667137][ T5344] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 283.679150][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 283.801808][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 283.817276][ T8336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.874063][ T29] audit: type=1400 audit(1778429201.551:753): avc: denied { read } for pid=8334 comm="syz.5.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 283.908979][ T5344] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 283.935705][ T5344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.965739][ T5344] usb 3-1: Product: syz [ 283.976959][ T5344] usb 3-1: Manufacturer: syz [ 283.989822][ T5344] usb 3-1: SerialNumber: syz [ 284.020226][ T5344] usb 3-1: config 0 descriptor?? [ 284.051412][ T5344] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 284.131126][ T8335] batadv_slave_1: entered promiscuous mode [ 284.173681][ T5344] usb 3-1: USB disconnect, device number 25 [ 284.205982][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.226737][ T8335] macsec1: entered promiscuous mode [ 284.332993][ T8342] fuse: Bad value for 'fd' [ 285.540795][ T8347] vlan2: entered promiscuous mode [ 285.546109][ T8347] syz_tun: entered promiscuous mode [ 285.592797][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.645673][ T29] audit: type=1400 audit(1778429204.321:754): avc: denied { create } for pid=8352 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.965900][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.982913][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.097660][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.106512][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.124429][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.134462][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.369313][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 288.755011][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.867687][ T8402] netlink: 'syz.2.654': attribute type 2 has an invalid length. [ 288.876901][ T29] audit: type=1400 audit(1778429206.541:755): avc: denied { kexec_image_load } for pid=8396 comm="syz.5.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 289.042916][ T8409] netlink: 'syz.0.655': attribute type 2 has an invalid length. [ 289.162554][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.212620][ T804] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 289.401869][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 289.430963][ T804] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 289.456877][ T804] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.490153][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.518063][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 289.549755][ T804] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 289.574595][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.594220][ T804] usb 2-1: Product: syz [ 289.608220][ T804] usb 2-1: Manufacturer: syz [ 289.621844][ T804] usb 2-1: SerialNumber: syz [ 289.657272][ T804] usb 2-1: config 0 descriptor?? [ 289.667726][ T8397] kexec: Could not allocate control_code_buffer [ 289.679371][ T8404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 289.911133][ T804] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 289.936745][ T804] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 289.982894][ T29] audit: type=1400 audit(1778429207.651:756): avc: denied { open } for pid=8412 comm="syz.2.657" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=28870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 290.085874][ T8415] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65534 sclass=netlink_xfrm_socket pid=8415 comm=syz.5.656 [ 290.146105][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.185699][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.204365][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.152028][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.274863][ T29] audit: type=1400 audit(1778429208.901:757): avc: denied { block_suspend } for pid=8420 comm="syz.0.659" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 291.742024][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 291.917953][ T9] usb 1-1: config 0 has no interfaces? [ 291.939653][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 291.977783][ T29] audit: type=1400 audit(1778429209.641:758): avc: denied { connect } for pid=8434 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 292.003055][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.036471][ T9] usb 1-1: config 0 descriptor?? [ 292.167858][ T8441] xt_hashlimit: size too large, truncated to 1048576 [ 292.325105][ T8443] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 292.352169][ T989] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 292.405353][ T8443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.435526][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 292.446729][ T5738] net_ratelimit: 1 callbacks suppressed [ 292.446757][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.453653][ T5615] usb 1-1: USB disconnect, device number 24 [ 292.545156][ T989] usb 6-1: Using ep0 maxpacket: 8 [ 293.186769][ T8445] bond1: (slave geneve2): making interface the new active one [ 293.210781][ C1] powermate: config urb returned -71 [ 293.217085][ C1] powermate: config urb returned -71 [ 293.223499][ C1] powermate: config urb returned -71 [ 293.233723][ T5615] usb 2-1: USB disconnect, device number 23 [ 293.233781][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 293.274943][ T8445] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 293.401862][ T989] usb 6-1: unable to read config index 0 descriptor/all [ 293.429171][ T989] usb 6-1: can't read configurations, error -71 [ 293.452754][ T8451] netlink: 'syz.1.665': attribute type 2 has an invalid length. [ 293.478939][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.514118][ T8443] bond1: entered promiscuous mode [ 293.522554][ T8443] geneve2: entered promiscuous mode [ 293.874432][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.884395][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.893866][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.920131][ T8457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.216682][ T8462] netlink: 'syz.5.669': attribute type 2 has an invalid length. [ 294.522117][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.615839][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.025142][ T29] audit: type=1400 audit(1778429213.701:759): avc: denied { execute } for pid=8496 comm="syz.0.682" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.062917][ T8500] Trying to write to read-only block-device nullb0 [ 296.382755][ T29] audit: type=1400 audit(1778429214.051:760): avc: denied { lock } for pid=8514 comm="syz.2.686" path="socket:[31271]" dev="sockfs" ino=31271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.397462][ T8515] xt_TCPMSS: Only works on TCP SYN packets [ 296.432121][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 296.442028][ T8518] netlink: 'syz.0.688': attribute type 2 has an invalid length. [ 296.544556][ T804] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 296.721878][ T8525] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 296.753989][ T989] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 296.877907][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.934916][ T8528] netlink: 'syz.4.691': attribute type 2 has an invalid length. [ 296.952594][ T989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.975734][ T989] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 296.976126][ T804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.996923][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.013362][ T989] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 297.036841][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.042232][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.068832][ T804] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 297.079506][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.084833][ T989] usb 3-1: config 0 descriptor?? [ 297.140649][ T804] usb 2-1: config 0 descriptor?? [ 297.537513][ T989] Bluetooth: Can't get version to change to load ram patch err [ 297.558422][ T989] Bluetooth: Loading patch file failed [ 297.573763][ T989] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 297.604751][ T989] usb 3-1: USB disconnect, device number 26 [ 297.652258][ T804] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf4 found [ 297.663655][ T804] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf3 found [ 297.789218][ T8510] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8510 comm=syz.1.684 [ 297.831341][ T5344] usb 2-1: USB disconnect, device number 24 [ 297.840459][ T5615] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 297.964510][ T5739] net_ratelimit: 1 callbacks suppressed [ 297.964539][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.011997][ T5615] usb 6-1: Using ep0 maxpacket: 16 [ 298.031349][ T5615] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.058613][ T5615] usb 6-1: config 0 interface 0 has no altsetting 0 [ 298.067575][ T5615] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 298.077999][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.092028][ T5615] usb 6-1: config 0 descriptor?? [ 298.275226][ T29] audit: type=1400 audit(1778429215.951:761): avc: denied { setopt } for pid=8544 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 298.352335][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.538874][ T5615] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 298.604558][ T5739] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 298.651870][ T989] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 298.737628][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 299.083236][ T5739] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 299.098075][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.134780][ T5739] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 299.135605][ T5344] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 299.150027][ T5739] usb 5-1: config 0 interface 0 has no altsetting 0 [ 299.164498][ T5739] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 299.175049][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.244075][ T989] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 299.261866][ T989] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.273033][ T989] usb 1-1: config 0 has no interface number 0 [ 299.279181][ T989] usb 1-1: config 0 interface 205 has no altsetting 0 [ 299.289163][ T989] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 299.307468][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.318676][ T989] usb 1-1: Product: syz [ 299.320084][ T5739] usb 5-1: config 0 descriptor?? [ 299.331176][ T5344] usb 2-1: Using ep0 maxpacket: 16 [ 299.358521][ T5344] usb 2-1: unable to get BOS descriptor or descriptor too short [ 299.373873][ T989] usb 1-1: Manufacturer: syz [ 299.380970][ T989] usb 1-1: SerialNumber: syz [ 299.386977][ T5344] usb 2-1: too many endpoints for config 1 interface 0 altsetting 1: 65, using maximum allowed: 30 [ 299.413191][ T8559] input: syz0 as /devices/virtual/input/input28 [ 299.423826][ T989] usb 1-1: config 0 descriptor?? [ 299.428839][ T5344] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 299.452811][ T5344] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 299.468401][ T5344] usb 2-1: config 1 interface 0 has no altsetting 0 [ 299.478685][ T989] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 299.493296][ T989] dvb-usb: bulk message failed: -22 (3/0) [ 299.504832][ T5344] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.40 [ 299.514100][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.534205][ T5615] usb 6-1: USB disconnect, device number 25 [ 299.543751][ T989] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 299.554404][ T5344] usb 2-1: Product: syz [ 299.560976][ T5344] usb 2-1: Manufacturer: syz [ 299.570067][ T989] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 299.595088][ T5344] usb 2-1: SerialNumber: syz [ 299.640993][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.771482][ T989] usb 1-1: media controller created [ 299.939076][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.963417][ T989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.995198][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.118273][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.148332][ T5739] usbhid 5-1:0.0: can't add hid device: -71 [ 300.180577][ T5739] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 300.182799][ T8550] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 300.192995][ T5739] usb 5-1: USB disconnect, device number 25 [ 300.360527][ T989] dvb-usb: bulk message failed: -22 (6/0) [ 300.372234][ T989] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 300.430724][ T989] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 300.481545][ T989] dvb-usb: schedule remote query interval to 150 msecs. [ 300.500030][ T989] dvb-usb: bulk message failed: -22 (3/0) [ 300.517693][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.532001][ T989] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 300.538360][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.563864][ T989] usb 1-1: USB disconnect, device number 25 [ 300.584405][ T5344] usbhid 2-1:1.0: can't add hid device: -71 [ 300.592429][ T5344] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 300.634962][ T5344] usb 2-1: USB disconnect, device number 25 [ 300.646432][ T989] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 301.153903][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.191104][ T29] audit: type=1400 audit(1778429218.861:762): avc: denied { read } for pid=8571 comm="syz.0.704" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 301.248414][ T29] audit: type=1400 audit(1778429218.861:763): avc: denied { open } for pid=8571 comm="syz.0.704" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 301.273490][ T29] audit: type=1400 audit(1778429218.901:764): avc: denied { ioctl } for pid=8571 comm="syz.0.704" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 302.144026][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 302.155531][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 302.168609][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 302.179226][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 302.205796][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.365925][ T29] audit: type=1400 audit(1778429220.771:765): avc: denied { getopt } for pid=8604 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 304.376096][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.385501][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.393981][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.403182][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.421302][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.578467][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.755689][ T29] audit: type=1400 audit(1778429228.431:766): avc: denied { getopt } for pid=8624 comm="syz.5.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.523160][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.725269][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.552989][ T29] audit: type=1400 audit(1778429231.231:767): avc: denied { mount } for pid=8635 comm="syz.4.725" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 313.793621][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.854228][ T29] audit: type=1400 audit(1778429231.491:768): avc: denied { name_connect } for pid=8637 comm="syz.2.726" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 314.300300][ T29] audit: type=1400 audit(1778429231.971:769): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 314.521124][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.545449][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.586613][ T5738] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 314.629565][ T5738] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 314.762623][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 314.832108][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.964810][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 314.992724][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.010178][ T10] usb 5-1: Product: syz [ 315.024279][ T10] usb 5-1: Manufacturer: syz [ 315.040038][ T10] usb 5-1: SerialNumber: syz [ 315.297059][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 315.383405][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 315.451683][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 315.559532][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.872660][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.247125][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 316.270524][ T8666] netlink: 'syz.4.733': attribute type 11 has an invalid length. [ 316.326429][ T10] usb 5-1: USB disconnect, device number 26 [ 316.765161][ T8671] syzkaller0: entered promiscuous mode [ 316.796857][ T8671] syzkaller0: entered allmulticast mode [ 316.917226][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.925865][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.925922][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.133022][ T804] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 317.364249][ T804] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 317.389203][ T8692] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 317.528811][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.957781][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.972859][ T804] usb 2-1: config 0 descriptor?? [ 318.227278][ T804] ath6kl: Failed to submit usb control message: -71 [ 318.234491][ T804] ath6kl: unable to send the bmi data to the device: -71 [ 318.255299][ T804] ath6kl: Unable to send get target info: -71 [ 318.292843][ T804] ath6kl: Failed to init ath6kl core: -71 [ 318.313028][ T804] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 318.350002][ T804] usb 2-1: USB disconnect, device number 26 [ 318.592042][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.835299][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.992403][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.312277][ T8712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.322668][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 319.463042][ T10] usb 2-1: device descriptor read/64, error -71 [ 319.721944][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 319.831842][ T29] audit: type=1400 audit(1778429237.501:770): avc: denied { append } for pid=8718 comm="syz.5.747" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 319.885251][ T10] usb 2-1: device descriptor read/64, error -71 [ 319.993018][ T10] usb usb2-port1: attempt power cycle [ 320.045299][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.336221][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 320.375882][ T10] usb 2-1: device descriptor read/8, error -71 [ 320.456461][ T5738] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 320.633773][ T5738] usb 6-1: Using ep0 maxpacket: 16 [ 320.635546][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 320.643006][ T5738] usb 6-1: unable to get BOS descriptor or descriptor too short [ 320.666813][ T10] usb 2-1: device descriptor read/8, error -71 [ 320.668081][ T5738] usb 6-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 320.687735][ T5738] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.716115][ T5738] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 320.725975][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.739450][ T5738] usb 6-1: Product: syz [ 320.744860][ T5738] usb 6-1: Manufacturer: syz [ 320.749739][ T5738] usb 6-1: SerialNumber: syz [ 320.782375][ T10] usb usb2-port1: unable to enumerate USB device [ 321.074235][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.516819][ T8692] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 321.575810][ T5738] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 321.614994][ T5738] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 321.632359][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.813602][ T29] audit: type=1400 audit(1778429239.481:771): avc: granted { setsecparam } for pid=8735 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 321.871286][ T5738] usb 6-1: USB disconnect, device number 26 [ 322.046102][ T6305] udevd[6305]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.113771][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.205452][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.319163][ T29] audit: type=1400 audit(1778429240.701:772): avc: denied { read } for pid=8741 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.481782][ T8765] binder: 8759:8765 ioctl c0306201 200000000140 returned -11 [ 324.069660][ T29] audit: type=1400 audit(1778429240.711:773): avc: denied { shutdown } for pid=8752 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 324.165354][ T804] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 324.384380][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.670812][ T29] audit: type=1400 audit(1778429240.771:774): avc: denied { create } for pid=8752 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 324.780794][ T804] usb 2-1: Invalid ep0 maxpacket: 64 [ 324.921820][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.529295][ T29] audit: type=1400 audit(1778429241.111:775): avc: denied { map_create } for pid=8759 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.651386][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.860488][ T29] audit: type=1400 audit(1778429241.111:776): avc: denied { perfmon } for pid=8759 comm="syz.4.756" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.961941][ T29] audit: type=1400 audit(1778429241.111:777): avc: denied { map_read map_write } for pid=8759 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.988307][ T29] audit: type=1400 audit(1778429241.121:778): avc: denied { prog_load } for pid=8759 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 326.021873][ T804] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 326.023377][ T29] audit: type=1400 audit(1778429241.131:779): avc: denied { bpf } for pid=8759 comm="syz.4.756" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.144039][ T29] audit: type=1400 audit(1778429241.131:780): avc: denied { create } for pid=8759 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.169833][ T29] audit: type=1400 audit(1778429241.141:781): avc: denied { set_context_mgr } for pid=8759 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 326.233980][ T29] audit: type=1400 audit(1778429241.141:782): avc: denied { read write } for pid=8759 comm="syz.4.756" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 326.323224][ T804] usb 2-1: Invalid ep0 maxpacket: 64 [ 326.330289][ T804] usb usb2-port1: attempt power cycle [ 326.340128][ T29] audit: type=1400 audit(1778429241.151:783): avc: denied { open } for pid=8759 comm="syz.4.756" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 326.417893][ T29] audit: type=1400 audit(1778429241.151:784): avc: denied { ioctl } for pid=8759 comm="syz.4.756" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 326.674893][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.723857][ T804] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 326.776714][ T804] usb 2-1: Invalid ep0 maxpacket: 64 [ 326.923015][ T804] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 326.963599][ T804] usb 2-1: Invalid ep0 maxpacket: 64 [ 326.977647][ T804] usb usb2-port1: unable to enumerate USB device [ 327.722131][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.952253][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.065058][ T8800] netlink: 'syz.5.765': attribute type 28 has an invalid length. [ 328.140489][ T8800] netlink: 'syz.5.765': attribute type 29 has an invalid length. [ 328.181801][ T8800] netlink: 132 bytes leftover after parsing attributes in process `syz.5.765'. [ 328.435396][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.832264][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.872503][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.092408][ T804] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 330.154099][ T8842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.164499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.228870][ T8842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.291845][ T804] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 330.313628][ T804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.334469][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.776'. [ 330.345873][ T804] usb 3-1: config 0 has no interface number 0 [ 330.359373][ T8842] netlink: 16 bytes leftover after parsing attributes in process `syz.5.775'. [ 330.360693][ T804] usb 3-1: config 0 interface 205 has no altsetting 0 [ 330.573157][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 330.573173][ T29] audit: type=1400 audit(1778429248.251:1029): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.646997][ T29] audit: type=1400 audit(1778429248.281:1030): avc: denied { read write open } for pid=5609 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.693253][ T10] net_ratelimit: 19 callbacks suppressed [ 330.693270][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.709434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.722845][ T804] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 330.739429][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.822345][ T8857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.002078][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.019235][ T8842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.030774][ T29] audit: type=1400 audit(1778429248.281:1031): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.077705][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.117926][ T8842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.127957][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.136412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.148644][ T29] audit: type=1400 audit(1778429248.311:1032): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.176791][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.231895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.292145][ T804] usb 3-1: Product: syz [ 331.304766][ T804] usb 3-1: Manufacturer: syz [ 331.315310][ T804] usb 3-1: SerialNumber: syz [ 331.334378][ T804] usb 3-1: config 0 descriptor?? [ 331.399640][ T804] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 331.427448][ T29] audit: type=1400 audit(1778429248.311:1033): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.431882][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 331.516122][ T804] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 331.546707][ T29] audit: type=1400 audit(1778429248.311:1034): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.621606][ T804] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 331.634101][ T29] audit: type=1400 audit(1778429248.361:1035): avc: denied { ioctl } for pid=8835 comm="syz.2.773" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.634148][ T29] audit: type=1400 audit(1778429248.391:1036): avc: denied { ioctl } for pid=8835 comm="syz.2.773" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.634201][ T29] audit: type=1400 audit(1778429248.481:1037): avc: denied { read write } for pid=8843 comm="syz.1.776" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.634239][ T29] audit: type=1400 audit(1778429248.481:1038): avc: denied { open } for pid=8843 comm="syz.1.776" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 332.020295][ T8873] netlink: 44 bytes leftover after parsing attributes in process `syz.5.781'. [ 332.574439][ T804] usb 3-1: media controller created [ 332.873125][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.888389][ T8878] netlink: 'syz.5.784': attribute type 2 has an invalid length. [ 332.951103][ T804] dvb-usb: bulk message failed: -22 (6/0) [ 332.976002][ T804] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 333.050075][ T804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 333.127212][ T804] dvb-usb: schedule remote query interval to 150 msecs. [ 333.152502][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 333.201899][ T804] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 333.311905][ T5798] dvb-usb: bulk message failed: -22 (1/0) [ 333.313086][ T8886] use of bytesused == 0 is deprecated and will be removed in the future, [ 333.318970][ T5798] dvb-usb: error while querying for an remote control event. [ 333.355969][ T804] usb 3-1: USB disconnect, device number 28 [ 333.410362][ T8886] use the actual size instead. [ 333.454018][ T804] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 334.583199][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 334.605402][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 334.632448][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 334.665631][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 335.409304][ T8915] binder: 8911:8915 ioctl c0306201 0 returned -14 [ 335.719869][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 335.719893][ T29] audit: type=1400 audit(1778429253.081:1274): avc: denied { ioctl } for pid=8911 comm="syz.1.791" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 335.754600][ T5344] net_ratelimit: 62 callbacks suppressed [ 335.754617][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.825537][ T8893] netlink: 'syz.5.786': attribute type 10 has an invalid length. [ 335.833988][ T8893] netlink: 40 bytes leftover after parsing attributes in process `syz.5.786'. [ 335.843879][ T8893] gretap0: entered promiscuous mode [ 335.849945][ T8893] gretap0: entered allmulticast mode [ 335.855813][ T8893] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 335.884455][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.005448][ T29] audit: type=1400 audit(1778429253.451:1275): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 336.133271][ T29] audit: type=1400 audit(1778429253.451:1276): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 336.242912][ T29] audit: type=1400 audit(1778429253.451:1277): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 336.378135][ T29] audit: type=1400 audit(1778429253.481:1278): avc: denied { create } for pid=8892 comm="syz.5.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 336.484339][ T29] audit: type=1400 audit(1778429253.481:1279): avc: denied { read write } for pid=8892 comm="syz.5.786" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 336.610397][ T29] audit: type=1400 audit(1778429253.491:1280): avc: denied { open } for pid=8892 comm="syz.5.786" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 336.726467][ T29] audit: type=1400 audit(1778429253.491:1281): avc: denied { ioctl } for pid=8892 comm="syz.5.786" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 336.883557][ T29] audit: type=1400 audit(1778429253.581:1282): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 336.940415][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.053995][ T29] audit: type=1400 audit(1778429253.581:1283): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 337.394709][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.397567][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'. [ 337.931958][ T5739] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 337.963195][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.061179][ T8959] netlink: 'syz.2.803': attribute type 2 has an invalid length. [ 338.080407][ T8963] binder: binder_mmap: 8953 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 338.138612][ T5739] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 338.174878][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.196418][ T5739] usb 6-1: Product: syz [ 338.210951][ T5739] usb 6-1: Manufacturer: syz [ 338.263397][ T5739] usb 6-1: SerialNumber: syz [ 338.833857][ T5739] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 338.858293][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.878035][ T5798] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 338.993023][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.751906][ T5798] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 340.822347][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.099909][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 341.099941][ T29] audit: type=1400 audit(1778429258.231:1532): avc: denied { execmem } for pid=8975 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 341.456625][ T5798] ath9k_htc: Failed to initialize the device [ 341.491223][ T5344] usb 6-1: USB disconnect, device number 27 [ 341.535965][ T29] audit: type=1400 audit(1778429258.241:1533): avc: denied { create } for pid=8946 comm="syz.5.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.553031][ T5344] usb 6-1: ath9k_htc: USB layer deinitialized [ 341.616966][ T29] audit: type=1400 audit(1778429258.241:1534): avc: denied { write } for pid=8946 comm="syz.5.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.753509][ T29] audit: type=1400 audit(1778429258.241:1535): avc: denied { read } for pid=8946 comm="syz.5.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.854496][ T29] audit: type=1400 audit(1778429258.241:1536): avc: denied { create } for pid=8946 comm="syz.5.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 341.874495][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.885043][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.015227][ T29] audit: type=1400 audit(1778429258.251:1537): avc: denied { prog_load } for pid=8946 comm="syz.5.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 342.133602][ T29] audit: type=1400 audit(1778429258.251:1538): avc: denied { bpf } for pid=8946 comm="syz.5.802" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 342.290411][ T29] audit: type=1400 audit(1778429258.261:1539): avc: denied { prog_load } for pid=8946 comm="syz.5.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 342.488585][ T29] audit: type=1400 audit(1778429258.261:1540): avc: denied { write } for pid=8946 comm="syz.5.802" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 342.762348][ T29] audit: type=1400 audit(1778429258.261:1541): avc: denied { open } for pid=8946 comm="syz.5.802" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 342.880772][ T8989] netlink: 'syz.2.814': attribute type 2 has an invalid length. [ 343.152287][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.498727][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.592028][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.807837][ T8999] netlink: 'syz.5.818': attribute type 2 has an invalid length. [ 345.161853][ T5798] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 345.172612][ T5344] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 345.331770][ T5344] usb 5-1: Using ep0 maxpacket: 16 [ 345.338937][ T5798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.343043][ T5344] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.367847][ T5798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.369471][ T5344] usb 5-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 345.396576][ T5344] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.403523][ T5344] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 345.407660][ T5798] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 345.412872][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.440815][ T5344] usb 5-1: config 0 descriptor?? [ 345.491314][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.550338][ T5798] usb 3-1: config 0 descriptor?? [ 345.632756][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.669092][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.704162][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.946213][ T5344] cypress 0003:04B4:DE64.000B: unexpected long global item [ 345.988814][ T5344] cypress 0003:04B4:DE64.000B: parse failed [ 346.018736][ T5344] cypress 0003:04B4:DE64.000B: probe with driver cypress failed with error -22 [ 346.049541][ T5798] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 346.114771][ T5798] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 346.172871][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 346.172903][ T29] audit: type=1400 audit(1778429263.791:1767): avc: denied { execmem } for pid=9012 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 346.248960][ T5798] cp2112 0003:10C4:EA90.000C: error requesting version [ 346.313063][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.345536][ T29] audit: type=1400 audit(1778429263.821:1768): avc: denied { search } for pid=9014 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.354018][ T10] usb 5-1: USB disconnect, device number 27 [ 346.373382][ T5798] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -32 [ 346.702783][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.730806][ T29] audit: type=1400 audit(1778429263.891:1769): avc: denied { ioctl } for pid=8994 comm="syz.2.816" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 346.771493][ T5798] usb 3-1: USB disconnect, device number 29 [ 346.816141][ T29] audit: type=1400 audit(1778429263.991:1770): avc: denied { prog_load } for pid=8994 comm="syz.2.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.836370][ T29] audit: type=1400 audit(1778429263.991:1771): avc: denied { bpf } for pid=8994 comm="syz.2.816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.876202][ T29] audit: type=1400 audit(1778429264.011:1772): avc: denied { map_create } for pid=8994 comm="syz.2.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.959888][ T29] audit: type=1400 audit(1778429264.131:1773): avc: denied { mount } for pid=9012 comm="syz.5.821" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 347.018498][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.117867][ T29] audit: type=1400 audit(1778429264.601:1774): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.369693][ T29] audit: type=1400 audit(1778429264.611:1775): avc: denied { open } for pid=5608 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.416870][ T29] audit: type=1400 audit(1778429264.611:1776): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.634347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.410368][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.169342][ T9037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.183620][ T9037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.271115][ T9037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.300384][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 349.329086][ T9037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.345086][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 349.402054][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.632563][ T24] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 349.681949][ T5798] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 349.683216][ T5344] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 349.795447][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 349.809224][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.827412][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.841919][ T24] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 349.852602][ T5798] usb 3-1: Using ep0 maxpacket: 32 [ 349.860875][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.876693][ T5798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.879521][ T5344] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 349.907763][ T5798] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.915770][ T5344] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 349.924376][ T5798] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.943730][ T24] usb 6-1: config 0 descriptor?? [ 349.957192][ T5344] usb 1-1: config 220 has no interface number 2 [ 349.959336][ T5798] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.979626][ T5798] usb 3-1: config 0 interface 0 has no altsetting 0 [ 349.989868][ T5344] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 350.069462][ T5344] usb 1-1: config 220 interface 0 has no altsetting 0 [ 350.079964][ T5798] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 350.089654][ T5344] usb 1-1: config 220 interface 76 has no altsetting 0 [ 350.089680][ T5344] usb 1-1: config 220 interface 1 has no altsetting 0 [ 350.093711][ T5344] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 350.152189][ T5344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.176255][ T5344] usb 1-1: Product: syz [ 350.194738][ T5344] usb 1-1: Manufacturer: syz [ 350.210141][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.213789][ T5344] usb 1-1: SerialNumber: syz [ 350.348993][ T5798] usb 3-1: config 0 descriptor?? [ 350.509714][ T5344] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 350.541024][ T5344] uvcvideo 1-1:220.0: No valid video chain found. [ 350.558235][ T5344] usb 1-1: selecting invalid altsetting 0 [ 350.589711][ T5344] usb 1-1: selecting invalid altsetting 0 [ 350.597589][ T5344] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 350.597667][ T24] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 350.616241][ T9067] netlink: 'syz.4.830': attribute type 2 has an invalid length. [ 350.618947][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.640033][ T5344] usb 1-1: USB disconnect, device number 26 [ 350.651026][ T24] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 350.654664][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.770229][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.781181][ T24] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 350.825326][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.828162][ T24] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 350.877326][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.925275][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.975293][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.024152][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.059753][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.099013][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.129247][ T24] hid-multitouch 0003:0457:07DA.000D: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 351.198294][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 351.198311][ T29] audit: type=1400 audit(1778429268.871:2099): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.330597][ T29] audit: type=1400 audit(1778429268.911:2101): avc: denied { read write } for pid=9042 comm="syz.2.829" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.353142][ T24] usb 6-1: USB disconnect, device number 28 [ 351.446000][ T29] audit: type=1400 audit(1778429268.911:2102): avc: denied { read write open } for pid=9042 comm="syz.2.829" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.485360][ T29] audit: type=1400 audit(1778429268.901:2100): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.536729][ T9070] fido_id[9070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 351.570698][ T5738] net_ratelimit: 4 callbacks suppressed [ 351.570723][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.582083][ T29] audit: type=1400 audit(1778429268.911:2103): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.624203][ T5798] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 351.665693][ T5798] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 351.782015][ T5798] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 351.789970][ T29] audit: type=1400 audit(1778429268.911:2104): avc: denied { ioctl } for pid=9042 comm="syz.2.829" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.790033][ T29] audit: type=1400 audit(1778429268.921:2105): avc: denied { ioctl } for pid=9042 comm="syz.2.829" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.790078][ T29] audit: type=1400 audit(1778429269.071:2106): avc: denied { prog_load } for pid=9071 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.790118][ T29] audit: type=1400 audit(1778429269.071:2107): avc: denied { bpf } for pid=9071 comm="syz.0.831" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.790158][ T29] audit: type=1400 audit(1778429269.071:2108): avc: denied { perfmon } for pid=9071 comm="syz.0.831" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 352.432097][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.592577][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.633327][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.008722][ T9100] loop7: detected capacity change from 0 to 16384 [ 355.647844][ T5798] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 355.657215][ T5798] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 355.724012][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.803948][ T5798] corsair-cpro 0003:1B1C:0C10.000E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 356.159893][ T5798] corsair-cpro 0003:1B1C:0C10.000E: probe with driver corsair-cpro failed with error -38 [ 356.246294][ T5798] usb 3-1: USB disconnect, device number 30 [ 356.308014][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 356.308044][ T29] audit: type=1400 audit(1778429273.981:2216): avc: denied { mounton } for pid=9105 comm="syz.5.839" path="/137/bus" dev="tmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 356.308334][ T9106] overlayfs: failed to resolve './file1': -2 [ 356.486817][ T29] audit: type=1400 audit(1778429274.161:2217): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.580112][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.839'. [ 356.599306][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.615321][ T29] audit: type=1400 audit(1778429274.191:2218): avc: denied { prog_load } for pid=9105 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 356.658153][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 356.707349][ T29] audit: type=1400 audit(1778429274.191:2219): avc: denied { bpf } for pid=9105 comm="syz.5.839" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.760901][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 356.779846][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.839'. [ 356.803953][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 356.821548][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 356.832203][ T29] audit: type=1400 audit(1778429274.191:2220): avc: denied { read write open } for pid=5612 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.903752][ T9117] netlink: 'syz.1.843': attribute type 10 has an invalid length. [ 356.917468][ T29] audit: type=1400 audit(1778429274.191:2221): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.945628][ T9117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.843'. [ 357.048817][ T29] audit: type=1400 audit(1778429274.191:2222): avc: denied { prog_load } for pid=9105 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.124983][ T29] audit: type=1400 audit(1778429274.201:2223): avc: denied { perfmon } for pid=9105 comm="syz.5.839" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.178991][ T29] audit: type=1400 audit(1778429274.201:2224): avc: denied { perfmon } for pid=9105 comm="syz.5.839" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.235528][ T9123] netlink: 'syz.5.845': attribute type 2 has an invalid length. [ 357.238938][ T9127] netlink: 'syz.0.848': attribute type 2 has an invalid length. [ 357.252431][ T29] audit: type=1400 audit(1778429274.201:2225): avc: denied { bpf } for pid=9105 comm="syz.5.839" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.782052][ T9131] fido_id[9131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 357.875318][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.964763][ T5798] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 358.156396][ T5798] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 358.182457][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.204247][ T5798] usb 5-1: config 0 descriptor?? [ 358.388238][ T9144] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 358.460617][ T9145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.493198][ T9148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.852'. [ 358.660328][ T5798] hackrf 5-1:0.0: Board ID: 00 [ 358.683656][ T5798] hackrf 5-1:0.0: Firmware version: [ 358.754086][ T7011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.767535][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.778980][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.780415][ T5798] hackrf 5-1:0.0: Registered as swradio24 [ 358.839864][ T5798] videodev: could not get a free minor [ 358.929171][ T5798] hackrf 5-1:0.0: Failed to register as video device (-23) [ 359.402309][ T10] kernel write not supported for file /bluetooth/6lowpan_control (pid: 10 comm: kworker/0:1) [ 359.538791][ T5798] hackrf 5-1:0.0: probe with driver hackrf failed with error -23 [ 359.575691][ T5798] usb 5-1: USB disconnect, device number 28 [ 359.860089][ T9163] netlink: 'syz.4.858': attribute type 10 has an invalid length. [ 359.893553][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.858'. [ 359.925918][ T9163] team0: entered promiscuous mode [ 359.941692][ T9163] team_slave_0: entered promiscuous mode [ 359.952854][ T9163] team_slave_1: entered promiscuous mode [ 359.959585][ T9163] team0: entered allmulticast mode [ 359.969724][ T9163] team_slave_0: entered allmulticast mode [ 359.984722][ T9163] team_slave_1: entered allmulticast mode [ 360.000770][ T9163] bridge0: port 3(team0) entered blocking state [ 360.026330][ T9163] bridge0: port 3(team0) entered disabled state [ 360.086595][ T9163] bridge0: port 3(team0) entered blocking state [ 360.095035][ T9163] bridge0: port 3(team0) entered forwarding state [ 361.860757][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 361.860803][ T29] audit: type=1400 audit(1778429277.861:2505): avc: denied { execmem } for pid=9166 comm="syz.5.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 361.905657][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.913795][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.133896][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.860'. [ 434.672367][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 467.161706][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 467.168684][ C0] rcu: 1-...!: (1 GPs behind) idle=db64/1/0x4000000000000000 softirq=39272/39277 fqs=0 [ 467.179415][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5984/1:b..l P6305/1:b..l P9172/1:b..l [ 467.189608][ C0] rcu: (detected by 0, t=10502 jiffies, g=45777, q=255 ncpus=2) [ 467.197323][ C0] Sending NMI from CPU 0 to CPUs 1: [ 467.197357][ C1] NMI backtrace for cpu 1 [ 467.197375][ C1] CPU: 1 UID: 0 PID: 9178 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 467.197398][ C1] Tainted: [L]=SOFTLOCKUP [ 467.197405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.197419][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 467.197442][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 9b bf e7 f5 cc [ 467.197460][ C1] RSP: 0018:ffffc90000a08e38 EFLAGS: 00000046 [ 467.197475][ C1] RAX: 0000000080010003 RBX: ffff888030c84300 RCX: 0000000000000001 [ 467.197487][ C1] RDX: ffff888053de8000 RSI: ffffffff81f47130 RDI: ffff8880b8528660 [ 467.197498][ C1] RBP: ffff8880b8528600 R08: 0000000000000005 R09: 000000000000001f [ 467.197510][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 467.197520][ C1] R13: ffff8880b85284c0 R14: 0000000000000000 R15: 0000000000000000 [ 467.197531][ C1] FS: 0000000000000000(0000) GS:ffff888124472000(0000) knlGS:0000000000000000 [ 467.197547][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.197559][ C1] CR2: 000055994e258660 CR3: 000000003e2bf000 CR4: 00000000003526f0 [ 467.197570][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000007 [ 467.197581][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 467.197592][ C1] Call Trace: [ 467.197599][ C1] [ 467.197606][ C1] __remove_hrtimer+0x230/0x440 [ 467.197639][ C1] __hrtimer_run_queues+0x359/0xa00 [ 467.197670][ C1] hrtimer_interrupt+0x3e5/0x940 [ 467.197697][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 467.197725][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 467.197749][ C1] [ 467.197754][ C1] [ 467.197760][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.197780][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 467.197803][ C1] Code: 05 7b 5a 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 27 f3 0e 0f 82 a4 02 00 00 8b 35 0e 5b f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 5a 26 12 0f 85 ed 02 00 00 48 83 c4 [ 467.197819][ C1] RSP: 0018:ffffc9000427f670 EFLAGS: 00000206 [ 467.197833][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000003 [ 467.197843][ C1] RDX: 0000000000000000 RSI: ffffffff8defba4f RDI: ffffffff8c1c3800 [ 467.197855][ C1] RBP: ffffffff8e7e5420 R08: 000000000a9c946f R09: 000000000000001e [ 467.197866][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 467.197876][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.197893][ C1] ? page_table_check_clear+0x46f/0x8f0 [ 467.197912][ C1] ? page_table_check_clear+0x46f/0x8f0 [ 467.197932][ C1] page_table_check_clear+0x67/0x8f0 [ 467.197948][ C1] ? page_table_check_clear+0x4b/0x8f0 [ 467.197968][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 467.197986][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 467.198005][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 467.198031][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 467.198059][ C1] __zap_vma_range+0x2da3/0x4bf0 [ 467.198090][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 467.198111][ C1] ? find_held_lock+0x2b/0x80 [ 467.198132][ C1] unmap_vmas+0x299/0x5f0 [ 467.198153][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 467.198172][ C1] ? mas_next_slot+0x10a3/0x1960 [ 467.198204][ C1] exit_mmap+0x1ef/0xa10 [ 467.198225][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 467.198245][ C1] ? trace_contention_end+0x122/0x170 [ 467.198270][ C1] ? uprobe_clear_state+0x5f/0x260 [ 467.198297][ C1] ? uprobe_clear_state+0x5f/0x260 [ 467.198326][ C1] ? __lock_acquire+0x4a5/0x2630 [ 467.198353][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 467.198379][ C1] __mmput+0x12a/0x410 [ 467.198404][ C1] mmput+0x67/0x80 [ 467.198427][ C1] do_exit+0x833/0x2a60 [ 467.198446][ C1] ? do_raw_spin_lock+0x128/0x260 [ 467.198472][ C1] ? __pfx_do_exit+0x10/0x10 [ 467.198488][ C1] ? do_group_exit+0x1bd/0x2a0 [ 467.198507][ C1] ? rcu_is_watching+0x12/0xc0 [ 467.198536][ C1] do_group_exit+0xd5/0x2a0 [ 467.198556][ C1] __x64_sys_exit_group+0x3e/0x50 [ 467.198575][ C1] x64_sys_call+0x102c/0x1530 [ 467.198601][ C1] do_syscall_64+0x10b/0xf80 [ 467.198623][ C1] ? clear_bhb_loop+0x40/0x90 [ 467.198643][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.198660][ C1] RIP: 0033:0x7f72223286c5 [ 467.198673][ C1] Code: Unable to access opcode bytes at 0x7f722232869b. [ 467.198685][ C1] RSP: 002b:00007ffd54a6e078 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 467.198700][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f72223286c5 [ 467.198711][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 467.198722][ C1] RBP: 00007ffd54a6e688 R08: 000055996a48e2c0 R09: 0000000000000002 [ 467.198733][ C1] R10: 00000000000000e0 R11: 0000000000000206 R12: 00007ffd54a6e0c0 [ 467.198744][ C1] R13: 000055996a48f8a0 R14: 00007ffd54a6e300 R15: 00007ffd54a6e0b0 [ 467.198763][ C1] [ 467.199350][ C0] task:syz.1.861 state:R running task stack:27416 pid:9172 tgid:9169 ppid:5608 task_flags:0x40054c flags:0x00080000 [ 467.704117][ C0] Call Trace: [ 467.707381][ C0] [ 467.710302][ C0] __schedule+0x1295/0x67a0 [ 467.714807][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 467.720005][ C0] ? get_signal+0x1ec7/0x21e0 [ 467.724696][ C0] ? __pfx___schedule+0x10/0x10 [ 467.729545][ C0] ? mark_held_locks+0x40/0x70 [ 467.734310][ C0] preempt_schedule_irq+0x50/0x90 [ 467.739332][ C0] irqentry_exit+0x205/0x7e0 [ 467.743924][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.749902][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 467.755099][ C0] Code: 05 7b 5a 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 27 f3 0e 0f 82 a4 02 00 00 8b 35 0e 5b f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 5a 26 12 0f 85 ed 02 00 00 48 83 c4 [ 467.774695][ C0] RSP: 0018:ffffc9000426f0e0 EFLAGS: 00000206 [ 467.780749][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 467.788707][ C0] RDX: 0000000000000000 RSI: ffffffff8defba4f RDI: ffffffff8c1c3800 [ 467.796666][ C0] RBP: ffffffff8e7e54e0 R08: 00000000866429ea R09: 0000000000000007 [ 467.804627][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 467.812583][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.820558][ C0] ? unwind_next_frame+0x3be/0x2090 [ 467.825756][ C0] ? unwind_next_frame+0x3be/0x2090 [ 467.830958][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 467.837106][ C0] unwind_next_frame+0xd1/0x2090 [ 467.842044][ C0] ? unwind_next_frame+0xbd/0x2090 [ 467.847154][ C0] ? save_stack+0x162/0x1e0 [ 467.851654][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 467.857802][ C0] arch_stack_walk+0x94/0xf0 [ 467.862399][ C0] ? save_stack+0x162/0x1e0 [ 467.866899][ C0] stack_trace_save+0x8e/0xc0 [ 467.871573][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 467.876940][ C0] ? __lock_acquire+0x4a5/0x2630 [ 467.881872][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 467.887678][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 467.892871][ C0] save_stack+0x162/0x1e0 [ 467.897193][ C0] ? __pfx_save_stack+0x10/0x10 [ 467.902044][ C0] ? page_ext_put+0x3e/0xd0 [ 467.906543][ C0] __reset_page_owner+0x84/0x190 [ 467.911476][ C0] free_unref_folios+0xa0d/0x16f0 [ 467.916503][ C0] ? print_kernel_ident+0x10/0x40 [ 467.921517][ C0] ? folios_put_refs+0x50a/0xa90 [ 467.926461][ C0] folios_put_refs+0x571/0xa90 [ 467.931232][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 467.936534][ C0] ? free_pages_and_swap_cache+0xe5/0x3b0 [ 467.942280][ C0] free_pages_and_swap_cache+0x30b/0x3b0 [ 467.947931][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 467.954134][ C0] ? __pfx___might_resched+0x10/0x10 [ 467.959428][ C0] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 467.965413][ C0] tlb_finish_mmu+0x1b0/0x810 [ 467.970097][ C0] exit_mmap+0x454/0xa10 [ 467.974343][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 467.979102][ C0] ? rcu_is_watching+0x12/0xc0 [ 467.983883][ C0] ? uprobe_clear_state+0x5f/0x260 [ 467.989011][ C0] ? uprobe_clear_state+0x5f/0x260 [ 467.994135][ C0] ? __lock_acquire+0x4a5/0x2630 [ 467.999086][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 468.004726][ C0] __mmput+0x12a/0x410 [ 468.008805][ C0] mmput+0x67/0x80 [ 468.012532][ C0] do_exit+0x833/0x2a60 [ 468.016694][ C0] ? __pfx_do_exit+0x10/0x10 [ 468.021281][ C0] ? do_raw_spin_lock+0x128/0x260 [ 468.026305][ C0] ? find_held_lock+0x2b/0x80 [ 468.030974][ C0] ? get_signal+0x7e0/0x21e0 [ 468.035621][ C0] do_group_exit+0xd5/0x2a0 [ 468.040123][ C0] get_signal+0x1ec7/0x21e0 [ 468.044629][ C0] ? __sys_sendmmsg+0x367/0x430 [ 468.049481][ C0] ? __pfx_get_signal+0x10/0x10 [ 468.054381][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 468.059933][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.066105][ C0] ? rcu_is_watching+0x12/0xc0 [ 468.070875][ C0] exit_to_user_mode_loop+0x8b/0x4f0 [ 468.076156][ C0] ? rcu_is_watching+0x12/0xc0 [ 468.080924][ C0] do_syscall_64+0x706/0xf80 [ 468.085509][ C0] ? clear_bhb_loop+0x40/0x90 [ 468.090184][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.096066][ C0] RIP: 0033:0x7f16e2f9cdd9 [ 468.100470][ C0] RSP: 002b:00007f16e3ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 468.108871][ C0] RAX: 000000000000000b RBX: 00007f16e3216090 RCX: 00007f16e2f9cdd9 [ 468.116829][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 468.124793][ C0] RBP: 00007f16e3032d69 R08: 0000000000000000 R09: 0000000000000000 [ 468.132760][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.140727][ C0] R13: 00007f16e3216128 R14: 00007f16e3216090 R15: 00007fff7547a708 [ 468.148710][ C0] [ 468.151723][ C0] task:udevd state:R running task stack:24600 pid:6305 tgid:6305 ppid:4978 task_flags:0x400140 flags:0x00080000 [ 468.165212][ C0] Call Trace: [ 468.168480][ C0] [ 468.171401][ C0] __schedule+0x1295/0x67a0 [ 468.175917][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 468.181119][ C0] ? __pfx___schedule+0x10/0x10 [ 468.185969][ C0] ? mark_held_locks+0x40/0x70 [ 468.190745][ C0] preempt_schedule_irq+0x50/0x90 [ 468.195779][ C0] irqentry_exit+0x205/0x7e0 [ 468.200377][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 468.206349][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 468.211547][ C0] Code: 05 7b 5a 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 27 f3 0e 0f 82 a4 02 00 00 8b 35 0e 5b f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 5a 26 12 0f 85 ed 02 00 00 48 83 c4 [ 468.231261][ C0] RSP: 0018:ffffc900025b7358 EFLAGS: 00000206 [ 468.237324][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000002 [ 468.245286][ C0] RDX: 0000000000000000 RSI: ffffffff8defba4f RDI: ffffffff8c1c3800 [ 468.253248][ C0] RBP: ffffffff8e7e54e0 R08: 00000000a1327550 R09: 0000000000000007 [ 468.261207][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 468.269164][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.277141][ C0] ? unwind_next_frame+0x3be/0x2090 [ 468.282441][ C0] ? unwind_next_frame+0x3be/0x2090 [ 468.287659][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 468.293821][ C0] unwind_next_frame+0xd1/0x2090 [ 468.298777][ C0] ? unwind_next_frame+0xbd/0x2090 [ 468.303897][ C0] ? path_setxattrat+0x1ff/0x3b0 [ 468.308837][ C0] ? arch_stack_walk+0xa6/0xf0 [ 468.313602][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 468.319758][ C0] arch_stack_walk+0x94/0xf0 [ 468.324371][ C0] ? path_setxattrat+0x1ff/0x3b0 [ 468.329309][ C0] ? security_context_to_sid_core+0x3b0/0x870 [ 468.335378][ C0] stack_trace_save+0x8e/0xc0 [ 468.340053][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 468.345426][ C0] ? __lock_acquire+0x4a5/0x2630 [ 468.350377][ C0] ? security_context_to_sid_core+0x3a7/0x870 [ 468.356456][ C0] kasan_save_stack+0x30/0x50 [ 468.361125][ C0] ? kasan_save_stack+0x30/0x50 [ 468.365965][ C0] ? kasan_save_track+0x14/0x30 [ 468.370810][ C0] ? kasan_save_free_info+0x3b/0x70 [ 468.376009][ C0] ? __kasan_slab_free+0x5f/0x80 [ 468.380940][ C0] ? kfree+0x223/0x6c0 [ 468.385006][ C0] ? security_context_to_sid_core+0x3b0/0x870 [ 468.391070][ C0] ? selinux_inode_post_setxattr+0x125/0x410 [ 468.397052][ C0] ? security_inode_post_setxattr+0x22f/0x250 [ 468.403116][ C0] ? __vfs_setxattr_noperm+0x4ad/0x660 [ 468.408578][ C0] ? __vfs_setxattr_locked+0x127/0x2b0 [ 468.414032][ C0] ? vfs_setxattr+0x14a/0x390 [ 468.418705][ C0] ? do_setxattr+0x145/0x180 [ 468.423292][ C0] ? filename_setxattr+0x167/0x1d0 [ 468.428408][ C0] ? path_setxattrat+0x1ff/0x3b0 [ 468.433391][ C0] kasan_save_track+0x14/0x30 [ 468.438063][ C0] kasan_save_free_info+0x3b/0x70 [ 468.443090][ C0] __kasan_slab_free+0x5f/0x80 [ 468.447847][ C0] ? security_context_to_sid_core+0x300/0x870 [ 468.453920][ C0] kfree+0x223/0x6c0 [ 468.457826][ C0] ? security_context_to_sid_core+0x18a/0x870 [ 468.463893][ C0] security_context_to_sid_core+0x3b0/0x870 [ 468.469792][ C0] ? __pfx_security_context_to_sid_core+0x10/0x10 [ 468.476203][ C0] ? do_raw_spin_lock+0x128/0x260 [ 468.481231][ C0] ? find_held_lock+0x2b/0x80 [ 468.485906][ C0] ? __fsnotify_parent+0x2b4/0xca0 [ 468.491023][ C0] selinux_inode_post_setxattr+0x125/0x410 [ 468.496835][ C0] ? __pfx_selinux_inode_post_setxattr+0x10/0x10 [ 468.503167][ C0] ? __pfx___vfs_setxattr+0x10/0x10 [ 468.508360][ C0] ? __pfx_make_vfsgid+0x10/0x10 [ 468.513292][ C0] security_inode_post_setxattr+0x22f/0x250 [ 468.519205][ C0] __vfs_setxattr_noperm+0x4ad/0x660 [ 468.524496][ C0] __vfs_setxattr_locked+0x127/0x2b0 [ 468.529789][ C0] vfs_setxattr+0x14a/0x390 [ 468.534292][ C0] ? __pfx_vfs_setxattr+0x10/0x10 [ 468.539314][ C0] ? mnt_get_write_access+0x52/0x2f0 [ 468.544592][ C0] ? mnt_get_write_access+0x52/0x2f0 [ 468.549881][ C0] do_setxattr+0x145/0x180 [ 468.554314][ C0] filename_setxattr+0x167/0x1d0 [ 468.559258][ C0] ? __pfx_filename_setxattr+0x10/0x10 [ 468.564726][ C0] ? do_getname+0x191/0x390 [ 468.569244][ C0] path_setxattrat+0x1ff/0x3b0 [ 468.574010][ C0] ? __pfx_path_setxattrat+0x10/0x10 [ 468.579304][ C0] ? taprio_dequeue+0x166/0x5f0 [ 468.584183][ C0] ? lockdep_softirqs_on+0xad/0x120 [ 468.589383][ C0] ? handle_softirqs+0x861/0xa00 [ 468.594330][ C0] __x64_sys_lsetxattr+0xc9/0x140 [ 468.599446][ C0] ? do_syscall_64+0x90/0xf80 [ 468.604122][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 468.609327][ C0] do_syscall_64+0x10b/0xf80 [ 468.613929][ C0] ? clear_bhb_loop+0x40/0x90 [ 468.618606][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.624496][ C0] RIP: 0033:0x7f139991d57a [ 468.628903][ C0] RSP: 002b:00007ffc3df6a208 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 468.637307][ C0] RAX: ffffffffffffffda RBX: 0000560b031eb1e0 RCX: 00007f139991d57a [ 468.645270][ C0] RDX: 0000560b031eb1e0 RSI: 00007f139a0ff29c RDI: 00007ffc3df6ad50 [ 468.653232][ C0] RBP: 0000560b02fb68d0 R08: 0000000000000000 R09: 0000560b02fbb450 [ 468.661192][ C0] R10: 000000000000001b R11: 0000000000000246 R12: 00007ffc3df6ad50 [ 468.669149][ C0] R13: 0000000000000001 R14: 0000560afcde16d7 R15: 0000560b031effa0 [ 468.677126][ C0] [ 468.680131][ C0] task:syz-executor state:R running task stack:23904 pid:5984 tgid:5984 ppid:5975 task_flags:0x400140 flags:0x00080000 [ 468.693619][ C0] Call Trace: [ 468.696882][ C0] [ 468.699803][ C0] __schedule+0x1295/0x67a0 [ 468.704304][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 468.709083][ C0] ? arch_stack_walk+0xa6/0xf0 [ 468.713850][ C0] ? __pfx___schedule+0x10/0x10 [ 468.718695][ C0] ? mark_held_locks+0x40/0x70 [ 468.723456][ C0] preempt_schedule_irq+0x50/0x90 [ 468.728476][ C0] irqentry_exit+0x205/0x7e0 [ 468.733070][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 468.739041][ C0] RIP: 0010:write_comp_data+0x2b/0x90 [ 468.744403][ C0] Code: 8b 05 59 40 02 12 49 89 f8 49 89 f1 49 89 d2 65 48 8b 3d 30 40 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 cc cc cc cc 8b 87 d4 16 00 00 85 c0 74 f1 8b 87 b0 16 00 00 83 [ 468.763998][ C0] RSP: 0018:ffffc90005547560 EFLAGS: 00000293 [ 468.770054][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8280d878 [ 468.778021][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802da12500 [ 468.785997][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 468.793961][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802da12500 [ 468.801922][ C0] R13: 00000000072001db R14: 0000000000000001 R15: 0000000000042689 [ 468.809897][ C0] ? __update_page_owner_free_handle.isra.0+0x328/0x4d0 [ 468.816844][ C0] __update_page_owner_free_handle.isra.0+0x328/0x4d0 [ 468.823609][ C0] __reset_page_owner+0x93/0x190 [ 468.828541][ C0] free_unref_folios+0xa0d/0x16f0 [ 468.833568][ C0] ? print_kernel_ident+0x10/0x40 [ 468.838584][ C0] ? folios_put_refs+0x50a/0xa90 [ 468.843540][ C0] folios_put_refs+0x571/0xa90 [ 468.848308][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 468.853600][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 468.859927][ C0] shmem_undo_range+0x5e5/0x1570 [ 468.864866][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 468.870249][ C0] ? unwind_get_return_address+0x59/0xa0 [ 468.875884][ C0] ? arch_stack_walk+0xa6/0xf0 [ 468.880676][ C0] ? kasan_save_stack+0x3f/0x50 [ 468.885516][ C0] ? kasan_save_stack+0x30/0x50 [ 468.890356][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 468.895733][ C0] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 468.901798][ C0] ? dentry_free+0xbc/0x170 [ 468.906298][ C0] ? __dentry_kill+0x4c6/0x690 [ 468.911062][ C0] ? dput.part.0+0x456/0x570 [ 468.915647][ C0] shmem_evict_inode+0x3f3/0xc40 [ 468.920580][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 468.926294][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 468.931742][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 468.937805][ C0] ? find_held_lock+0x2b/0x80 [ 468.942475][ C0] ? evict+0x37e/0xad0 [ 468.946548][ C0] ? evict+0x37e/0xad0 [ 468.950619][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 468.956066][ C0] evict+0x3c2/0xad0 [ 468.959966][ C0] ? __pfx_evict+0x10/0x10 [ 468.964389][ C0] ? iput.part.0+0x5fd/0xf50 [ 468.968973][ C0] iput.part.0+0x605/0xf50 [ 468.973377][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 468.978662][ C0] iput+0x35/0x40 [ 468.982295][ C0] filename_unlinkat+0x466/0x730 [ 468.987232][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 468.992699][ C0] ? do_getname+0x191/0x390 [ 468.997208][ C0] __x64_sys_unlink+0x46/0x70 [ 469.001882][ C0] do_syscall_64+0x10b/0xf80 [ 469.006469][ C0] ? clear_bhb_loop+0x40/0x90 [ 469.011146][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.017029][ C0] RIP: 0033:0x7ff80cd9bec7 [ 469.021434][ C0] RSP: 002b:00007ffd47d731f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 469.029836][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff80cd9bec7 [ 469.037793][ C0] RDX: 00007ffd47d73220 RSI: 00007ffd47d732b0 RDI: 00007ffd47d732b0 [ 469.045752][ C0] RBP: 00007ffd47d732b0 R08: 00007ffd47d742b0 R09: 00000000ffffffff [ 469.053713][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd47d74340 [ 469.061672][ C0] R13: 00007ff80ce32120 R14: 0000000000058590 R15: 00007ffd47d74380 [ 469.069646][ C0] [ 469.072666][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g45777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 469.083848][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 469.093798][ C0] rcu: RCU grace-period kthread stack dump: [ 469.099667][ C0] task:rcu_preempt state:R running task stack:27848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 469.113158][ C0] Call Trace: [ 469.116421][ C0] [ 469.119342][ C0] __schedule+0x1295/0x67a0 [ 469.123863][ C0] ? __pfx___schedule+0x10/0x10 [ 469.128707][ C0] ? find_held_lock+0x2b/0x80 [ 469.133376][ C0] ? schedule+0x2bf/0x390 [ 469.137706][ C0] schedule+0xdd/0x390 [ 469.141772][ C0] schedule_timeout+0x127/0x280 [ 469.146614][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 469.151991][ C0] ? __pfx_process_timeout+0x10/0x10 [ 469.157290][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 469.163102][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 469.168567][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 469.173333][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 469.178622][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 469.183570][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 469.188790][ C0] rcu_gp_kthread+0x179/0x230 [ 469.193474][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 469.198677][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 469.204490][ C0] ? __kthread_parkme+0x18c/0x230 [ 469.209511][ C0] ? kthread+0x13a/0x450 [ 469.213749][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 469.218943][ C0] kthread+0x370/0x450 [ 469.223010][ C0] ? __pfx_kthread+0x10/0x10 [ 469.227598][ C0] ret_from_fork+0x72b/0xd50 [ 469.232196][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 469.237317][ C0] ? __switch_to+0x800/0x1100 [ 469.241995][ C0] ? __pfx_kthread+0x10/0x10 [ 469.246583][ C0] ret_from_fork_asm+0x1a/0x30 [ 469.251367][ C0] [ 469.254380][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 469.260698][ C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.271548][ C0] Tainted: [L]=SOFTLOCKUP [ 469.275856][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.285933][ C0] Workqueue: events_unbound toggle_allocation_gate [ 469.292449][ C0] RIP: 0010:write_comp_data+0x40/0x90 [ 469.297823][ C0] Code: 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 d4 16 00 00 85 c0 74 f1 8b 87 b0 16 00 00 <83> f8 03 75 e6 48 8b 87 b8 16 00 00 8b bf b4 16 00 00 48 8b 30 48 [ 469.317421][ C0] RSP: 0018:ffffc90000ab7868 EFLAGS: 00000246 [ 469.323485][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fc238d [ 469.331464][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888020e9ca00 [ 469.339432][ C0] RBP: ffff8880b8540f40 R08: 0000000000000005 R09: 0000000000000000 [ 469.347396][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 469.355371][ C0] R13: ffffed10170a81e9 R14: 0000000000000001 R15: ffff8880b843c5c0 [ 469.363344][ C0] FS: 0000000000000000(0000) GS:ffff888124372000(0000) knlGS:0000000000000000 [ 469.372273][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.378851][ C0] CR2: 00007f2bc87d5ff8 CR3: 000000000e596000 CR4: 00000000003526f0 [ 469.386816][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000007 [ 469.394783][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 469.402746][ C0] Call Trace: [ 469.406014][ C0] [ 469.408935][ C0] smp_call_function_many_cond+0x5ad/0x1700 [ 469.414833][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 469.419862][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 469.426184][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 469.431564][ C0] ? __pfx___text_poke+0x10/0x10 [ 469.436502][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 469.441529][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 469.446639][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 469.453132][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 469.458847][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 469.465095][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 469.471344][ C0] ? find_held_lock+0x2b/0x80 [ 469.476024][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 469.482005][ C0] jump_label_update+0x37a/0x550 [ 469.486950][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 469.492848][ C0] static_key_enable+0x1a/0x20 [ 469.497610][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 469.502886][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 469.508776][ C0] ? rcu_is_watching+0x12/0xc0 [ 469.513545][ C0] process_one_work+0xa0e/0x1980 [ 469.518491][ C0] ? __pfx_process_one_work+0x10/0x10 [ 469.523867][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 469.529839][ C0] worker_thread+0x5ef/0xe50 [ 469.534446][ C0] ? __pfx_worker_thread+0x10/0x10 [ 469.539565][ C0] ? kthread+0x13a/0x450 [ 469.543814][ C0] ? __pfx_worker_thread+0x10/0x10 [ 469.548923][ C0] kthread+0x370/0x450 [ 469.552990][ C0] ? __pfx_kthread+0x10/0x10 [ 469.557580][ C0] ret_from_fork+0x72b/0xd50 [ 469.562169][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 469.567284][ C0] ? __switch_to+0x800/0x1100 [ 469.571970][ C0] ? __pfx_kthread+0x10/0x10 [ 469.576561][ C0] ret_from_fork_asm+0x1a/0x30 [ 469.581343][ C0]