last executing test programs: 6m47.519872385s ago: executing program 1 (id=25): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x1, 0x1}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x3}, [@nested={0x4, 0x42}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x200000000000002}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x470243, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) (async) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) 6m46.764459576s ago: executing program 1 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x1}, 0xe) listen(r2, 0xd) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000440)={@rand_addr=0x64010102, @private=0xa010102, @multicast1}, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff8, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd25, 0x25dfdbf3, {0x0, 0x0, 0x0, r7, 0xb881}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x200}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r5, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @local}, 0x14) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x1}, 0xe) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x33, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f779000f20e035000001000f22e066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x50}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0xffffffffffffffff, 0x6, 0x2001) 6m44.542512793s ago: executing program 1 (id=35): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0xfa) r2 = dup2(r0, r1) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0'}, 0xb) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) sched_getparam(0x0, &(0x7f00000004c0)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x4b4b, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) faccessat(r5, &(0x7f00000000c0)='./file0\x00', 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000240)) r6 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000540)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x125, 0x7ff}, 0x6, 0x0, 0x7fffffff, 0xb, 0x0, 0x0, 0x7f}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x4c}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x8080) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) mount$fuseblk(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 6m43.734175343s ago: executing program 1 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x800897a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$pokeuser(0x6, 0x0, 0x358, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x84025, &(0x7f0000000340)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 6m42.668029368s ago: executing program 1 (id=45): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000700), &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x10, 0x2, 0x0, 0x0}}, &(0x7f0000000b00)) syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000c00)=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r10, 0xc0107521, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, r7, '\x00', @fetch_req_cmd={0x3, 0xa7b, 0x0, 0x0}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x14, 0x14, 0x609, 0x0, 0x0, {0x1e}}, 0x14}}, 0xc044) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r11, &(0x7f0000000500)=[{&(0x7f0000000200)="c6", 0x1}], 0x1) 6m41.992307611s ago: executing program 1 (id=47): getpriority(0x1, 0x0) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000040)={0x8000000000000001, 0x2, 0x7, 0x3, 0x10001}) socket$kcm(0x2, 0xd, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x9, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0xf}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000000)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r2, 0x1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x4}, @CTA_LABELS_MASK={0x20, 0x17, [0x4000800, 0xffffffff, 0x40, 0x3e8e, 0xffffffc2, 0xd5bf, 0x37d]}]}, 0x38}}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 6m41.587251627s ago: executing program 32 (id=47): getpriority(0x1, 0x0) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000040)={0x8000000000000001, 0x2, 0x7, 0x3, 0x10001}) socket$kcm(0x2, 0xd, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x9, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0xf}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000000)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r2, 0x1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x4}, @CTA_LABELS_MASK={0x20, 0x17, [0x4000800, 0xffffffff, 0x40, 0x3e8e, 0xffffffc2, 0xd5bf, 0x37d]}]}, 0x38}}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 15.646090847s ago: executing program 3 (id=1112): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_audit(0x10, 0x3, 0x9) fsetxattr(r1, &(0x7f0000000a80)=@random={'user.', 'vxcan1\x00'}, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 r'], 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x1a, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b3, 0x0, 0x0, 0x0, 0x5}, [@tail_call, @generic={0x27, 0x4, 0x2, 0xfff, 0x82ea}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000540)='GPL\x00', 0xc, 0xc0, &(0x7f0000000580)=""/192, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x4000c, 0x9, 0xe6d}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x5, 0x8, 0x9}, {0x0, 0x5, 0xa, 0x2}, {0x4, 0x1, 0xf, 0x7}, {0x4, 0x5, 0x8, 0xb}], 0x10, 0xc}, 0x94) close_range(r3, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') read$char_usb(r4, &(0x7f0000000300)=""/214, 0xd6) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 13.695479068s ago: executing program 5 (id=1122): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000050000000400000033bf00000000000080e2688819312b0a6149f912051a6a07a1954774384bf35beb5cc106db60717e8da89f951e32526aad0350133e335946187991a984fcd1d3cc39f18e84e477914b769f21d629afdd54809f2fc8fe32b48361ec239ddfa6f2fd598d2e89", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xd, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r4 = getpid() sched_setscheduler(r4, 0x3, &(0x7f0000000200)=0x5) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8010, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x25, 0xa, @void}, 0x10) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) geteuid() 13.027062136s ago: executing program 3 (id=1124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000001200)=0xd4, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="40050c0000000c23f8ba937b52291634046f8e46"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500200000008990425104000010203010902a60003010110020904000000010100000a2401040029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) syz_usb_ep_write(r3, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000058}, 0x4054) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e402010902"], 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) syz_usb_connect$uac3(0x0, 0x95, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0xff, 0x20, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x1f, 0x8}, [@feature_unit={0x9, 0x24, 0x7, 0x5, 0x6, [0x9]}, @source_unit={0xc, 0x24, 0xb, 0x0, 0x2, 0xeb, 0x8, 0x100}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x42, 0xd4, 0x58, {0xa, 0x25, 0x25, 0x401, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x5d0, 0x4, 0x8}}}}}}}}]}}, 0x0) write$dsp(r5, &(0x7f0000000040)='F', 0x1) 8.189817661s ago: executing program 0 (id=1138): syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000329bd7000fbdbdf2538000000ff0f0000", @ANYRES32=r2, @ANYBLOB='\f\x00X\x00R\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00B\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00C\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\b\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00{\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\r\x00\x00\x00\x00\x00\x00\x00'], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x51) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='omfs\x00', 0x204000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xffffffffffffff9d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x20a0, 0x690, 0xa0, 0x6, 0xffff7ffc, 0x8, 0x20000, {0x7f, 0x8}, {0x8, 0x8}, {0x1, 0x6, 0x2}, {0x4, 0x10001, 0xfffffffd}, 0x0, 0x10, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0xb4b, 0x0, 0x3, 0x400009, 0x6, 0x6, 0x17, 0x2, 0x1, 0x2}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000300)={0x2, 0x1, @stop_pts=0x9}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000005000004000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008024}, 0x4004000) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r6, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x30, 0x26, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xe, 0x1}, {0x3, 0x2}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 7.280538099s ago: executing program 3 (id=1139): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7.077895255s ago: executing program 0 (id=1141): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905d6"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f0000000080)={0x8, 0x6, 0x9, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x38}}, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000640)=@attr_other={0x0, 0x1, 0x1000, &(0x7f0000000600)=0xf}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x200040c4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 6.653209725s ago: executing program 5 (id=1142): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) syz_open_dev$media(0x0, 0x4, 0x800082) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000001dc0)={'netdevsim0\x00', @ifru_settings={0x10000, 0x7, @cisco=0x0}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x503, {0x0, 0x6, '\x00', 0xd74b, 0x0, 0xff, @private1, @mcast2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) 6.501598319s ago: executing program 2 (id=1144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&>\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@RR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00'/335, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000003540)={0x2020}, 0x2020) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="0df5", 0x2}], 0x1, 0x0, 0x0, 0x9080}, 0x885) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000100), 0x208, 0x2) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r5, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x1}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x0, 0x20300, 0xfc}, 0x1c) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000320"]) r6 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0xe, 0x4) ppoll(&(0x7f0000000000)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x9, 0x2a580) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 6.348975422s ago: executing program 5 (id=1145): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) gettid() syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xcbc0, 0x1, 0x2, 0x357}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x1000003, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bf, 0x1, 0x0, 0x30b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc47, 0x0, 0x0, 0x1f6, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x8200, 0x0, 0x36a}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0x2, 0x4, 0x0, 0x0}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, 0x0, 0x0) 5.774565073s ago: executing program 3 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x1b, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r1 = socket(0x2d, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x2000000, 0x0, 0x10}, 0x4040040) setsockopt$packet_fanout(r1, 0x11d, 0x12, 0x0, 0x0) 5.660086113s ago: executing program 4 (id=1147): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000240)="c74424002c000000c744240202000000ff1c24440f009000000000c74424006a000000c744240200800000ff2c240f0ffb90f0478355d460440f20c03503000000440f22c03e0f01c2f2430f1b1fc4a2559a07c7442400d7000000c744240207000000ff2c24", 0x66}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}}) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x46}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (rerun: 64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x18, 0x19, "e8e38d1d5a8dd8b601aa545b991c13aa5c5d89a2"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '\xff\xff\xff\xff\xff\xff'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c9cb860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f8e0100f30fc7b103006bb18000ffc00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x8000, @none}, 0xe) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 5.520898076s ago: executing program 3 (id=1148): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x198d1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x3, 0x5, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000e46000/0x3000)=nil, 0x3000, 0x100000b) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x7fffffff, 0x1008, 0x1000000}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x151) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) ioctl$TIOCSTI(r2, 0x5412, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept$alg(r4, 0x0, 0x0) kexec_load(0xef72, 0x0, 0x0, 0x320000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) 5.518099191s ago: executing program 2 (id=1149): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x5, 0x1, 0x2, "ee4f6da8d2cf4011ac7b00", 0x43353039}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r7, r7, 0x0, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x4f0, 0x2f8, 0x2f8, 0x0, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @rand_addr=0x64010102, 0x8, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xff000000, 0xffffffff, 0xe, 0x6, {@mac=@link_local, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, 0x7, 0x7, 0x0, 0x2000, 0x3, 0x8, 'ip6gre0\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x88}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xf, 'system_u:object_r:klogd_var_run_t:s0\x00'}}}, {{@arp={@empty, @remote, 0xffffffff, 0xffffff00, 0x3, 0x1, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x2, 0x3, 0x200, 0x8, 0x101, 0xa59, 'ip6gretap0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x104}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@remote, @remote, @rand_addr=0x64010102, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) 4.652276962s ago: executing program 0 (id=1150): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x8000000004) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x80000008}, 0x0, 0x0) 3.592360039s ago: executing program 5 (id=1151): syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000329bd7000fbdbdf2538000000ff0f0000", @ANYRES32=r2, @ANYBLOB='\f\x00X\x00R\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00B\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00C\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\b\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00{\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\r\x00\x00\x00\x00\x00\x00\x00'], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x51) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='omfs\x00', 0x204000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xffffffffffffff9d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x20a0, 0x690, 0xa0, 0x6, 0xffff7ffc, 0x8, 0x20000, {0x7f, 0x8}, {0x8, 0x8}, {0x1, 0x6, 0x2}, {0x4, 0x10001, 0xfffffffd}, 0x0, 0x10, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0xb4b, 0x0, 0x3, 0x400009, 0x6, 0x6, 0x17, 0x2, 0x1, 0x2}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000300)={0x2, 0x1, @stop_pts=0x9}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000005000004000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008024}, 0x4004000) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r6, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x30, 0x26, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xe, 0x1}, {0x3, 0x2}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 3.492114031s ago: executing program 4 (id=1152): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x25, 0x1, 0x9, 0x5, 0x3e}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20, 0x6}, {0x4, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x6, 0x17, 0x0, 0x1, 0x6}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) splice(r6, 0x0, r7, 0x0, 0x80, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) 2.91520061s ago: executing program 2 (id=1153): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000080)=@md0, r0, &(0x7f0000000180)) 2.060085065s ago: executing program 4 (id=1154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000000)={0xb1c, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0xfffffffd, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0xffffffff, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0xffffffff, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbea}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x2404cc41}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010064000a40000000060a010400000000000000000a0004050900010073797a31000000001400048010000180090001006d617371000000000900020073797a3200000000140600001100010000000000000000000100000a000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000040)=[{0x40, 0x26, 0x2, 0x8}, {0x6, 0x0, 0x6, 0xffff}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0xa}}, './file0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x120, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000480), {[{{@ip={@local, @rand_addr=0x64010100, 0xffffff00, 0x0, 'virt_wifi0\x00', 'team_slave_1\x00', {0xff}, {}, 0x62, 0x1, 0x21}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x6]}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 0x5, 0x5, [0x1b, 0x1, 0x4, 0x1a, 0x18, 0x28, 0x32, 0x26, 0x13, 0x3c, 0x1f, 0x0, 0x3a, 0x28, 0x34, 0x21], 0x1, 0x3, 0x2}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bridge_slave_1\x00', 'pim6reg0\x00', {}, {}, 0x2f, 0x1, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x2, 0x6, 0x4, 0x1, 0x1], 0x4, 0x4}, {0x1, [0x0, 0x4, 0x0, 0x0, 0x6, 0x5], 0x5, 0x2}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x1, 0x10001, 0xaf, 0x0, 0x5, 0x8, 0x6}}, @common=@set={{0x40}, {{0x2, [0xf, 0x0, 0x6, 0x5, 0x4, 0x4], 0x4, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip_vti0\x00', {0x3ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) write(r2, &(0x7f0000000600)="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", 0x5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) close(r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0xc4f5e9613b5650f4, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000100fddbdf2526", @ANYRES64, @ANYRESHEX=r5, @ANYRESDEC=r5], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48e0000010000d042800008002", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000005) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x5, 0x2}, 0x10}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.908324658s ago: executing program 5 (id=1155): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008010}, 0x40) 1.837549382s ago: executing program 3 (id=1156): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x22002) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000240)) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x2000cc0}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff61", 0xe}], 0x3}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000500)=""/106, 0x6a}], 0x2}, 0x12152) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2054) 1.772495407s ago: executing program 4 (id=1157): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) r1 = syz_ublk_setup_io_uring(0x23d4, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES16=r6, @ANYRESHEX=r9]) read$FUSE(r11, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r11, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r11, &(0x7f0000000400)={0x50, 0x0, r12, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r13, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r13, r14, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ioctl$AUTOFS_IOC_ASKUMOUNT(r15, 0x80049370, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000080)=0x4, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) syz_ublk_setup_queues(r8, r6, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x3, 0x255, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0xffffffff, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x1820, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000500)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r5, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) 1.770116566s ago: executing program 0 (id=1158): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x10248100, &(0x7f0000000400)="fccb63f6cd99470d5aed5a553954f315358f9e584516a4d92fcca2e5253e15e1ef1bf2e50d56252b3ff0c6c694b7678d3abe43bc58df1d49197212ecde4c9c4e851b80f558d71d90f4130c9b09c8880d6bcb07954ffd2f4e5a909c938595ffcfedcd611dd57763b03ed7c2f558256e82", 0x70, 0x0, &(0x7f0000000500), &(0x7f00000002c0)="8ade61ccfad1b2373a9739de4b134feb25d1168e593756387649b41eb85130901f35") shutdown(0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r1, 0x0, 0x0, 0x1001f0) (fail_nth: 7) 1.718344052s ago: executing program 2 (id=1159): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x187902, 0x0) ftruncate(0xffffffffffffffff, 0x800799c) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='MIC\nIGAIN \'Synth'], 0x3c) close(r1) 1.493392827s ago: executing program 5 (id=1160): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905d6"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f0000000080)={0x8, 0x6, 0x9, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x38}}, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000640)=@attr_other={0x0, 0x1, 0x1000, &(0x7f0000000600)=0xf}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 776.040904ms ago: executing program 4 (id=1161): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x88200) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0x1f, 0x3, 0x9, 0xb, 0x23}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) unshare(0x8020080) timer_create(0x6, &(0x7f0000000200)={0x0, 0x21, 0x2}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x242c3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x3000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x84) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x20}}, 0x4000000) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x100, 0x3a, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x6a9614c6}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x481) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 290.2677ms ago: executing program 2 (id=1162): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x8, 0xffffffffffdffff9, 0xfffffffffffffff7, 0x9, 0xfffffffffffffffe, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04d, 0x20000ffff, 0x80000000, 0xbb2, 0xffffffffffffffff, 0x4000000006, 0xfffffffffffffffd, 0x100, 0x4, 0x2, 0x80005, 0x3, 0xc, 0xb}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) 290.064425ms ago: executing program 0 (id=1163): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100d6ee772e7c5967bb4400000008000300", @ANYRES32=r2, @ANYBLOB="08000d000e000000040008010a0018000303030303030000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 272.795546ms ago: executing program 4 (id=1164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x2, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x3000, 0xb8ecfa31b652261c, &(0x7f0000ffa000/0x3000)=nil) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x11f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r4, 0x28) shutdown(r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000010a0101000000000000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01600000000000081c001280090009007f706970000000000c0002800500090029000000"], 0x3c}}, 0x40848c0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000000)='minix\x00', 0x2808404, 0x0) 272.496295ms ago: executing program 2 (id=1165): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) pidfd_send_signal(r0, 0x2a, &(0x7f0000000180)={0x29, 0x4, 0x5}, 0x0) 0s ago: executing program 0 (id=1166): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000140)=""/199, 0xfffffd14}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) fchmod(r1, 0x0) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fallocate(r2, 0x0, 0x6, 0x6) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010652", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @remote}}}}}}, 0x0) kernel console output (not intermixed with test programs): .895602][ T5721] usb 5-1: config 6 has no interface number 2 [ 371.895620][ T5721] usb 5-1: config 6 has no interface number 3 [ 371.895682][ T5721] usb 5-1: config 6 interface 59 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 371.895714][ T5721] usb 5-1: config 6 interface 59 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 371.895745][ T5721] usb 5-1: config 6 interface 59 altsetting 6 bulk endpoint 0xC has invalid maxpacket 8 [ 371.895772][ T5721] usb 5-1: config 6 interface 59 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 371.895802][ T5721] usb 5-1: config 6 interface 59 altsetting 6 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 371.895833][ T5721] usb 5-1: config 6 interface 59 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 371.895859][ T5721] usb 5-1: config 6 interface 59 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 371.895885][ T5721] usb 5-1: config 6 interface 59 altsetting 6 endpoint 0x6 has invalid maxpacket 112, setting to 64 [ 371.895916][ T5721] usb 5-1: config 6 interface 59 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 371.895945][ T5721] usb 5-1: config 6 interface 59 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 371.895969][ T5721] usb 5-1: config 6 interface 59 altsetting 6 bulk endpoint 0xA has invalid maxpacket 32 [ 371.972078][ T9] usb 3-1: config 4 has no interface number 0 [ 372.079296][ T9241] siw: device registration error -23 [ 372.116153][ T9241] smbdirect: ib_dev[syz1] removed [ 372.462593][ T9] usb 3-1: config 4 interface 44 has no altsetting 0 [ 372.695267][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.825112][ T9] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 372.895930][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.922613][ T5721] usb 5-1: config 6 interface 59 altsetting 6 bulk endpoint 0xE has invalid maxpacket 32 [ 372.932702][ T5721] usb 5-1: config 6 interface 59 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 372.943696][ T5721] usb 5-1: config 6 interface 59 altsetting 6 endpoint 0x7 has invalid maxpacket 1040, setting to 64 [ 372.954588][ T9] usb 3-1: Product: syz [ 372.958960][ T5721] usb 5-1: config 6 interface 7 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 372.969640][ T5721] usb 5-1: config 6 interface 7 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 372.969670][ T5721] usb 5-1: config 6 interface 7 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 372.969694][ T5721] usb 5-1: config 6 interface 7 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 372.969717][ T5721] usb 5-1: config 6 interface 7 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 372.969742][ T5721] usb 5-1: config 6 interface 7 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 372.969766][ T5721] usb 5-1: config 6 interface 7 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 372.969792][ T5721] usb 5-1: config 6 interface 7 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 372.969832][ T5721] usb 5-1: config 6 interface 171 altsetting 196 has a duplicate endpoint with address 0x7, skipping [ 372.969858][ T5721] usb 5-1: config 6 interface 171 altsetting 196 has a duplicate endpoint with address 0x1, skipping [ 372.969890][ T5721] usb 5-1: config 6 interface 171 altsetting 196 has a duplicate endpoint with address 0xE, skipping [ 372.969916][ T5721] usb 5-1: config 6 interface 171 altsetting 196 has an endpoint descriptor with address 0x75, changing to 0x5 [ 372.969952][ T5721] usb 5-1: config 6 interface 171 altsetting 196 endpoint 0x5 has an invalid bInterval 180, changing to 11 [ 372.970003][ T5721] usb 5-1: config 6 interface 171 altsetting 196 endpoint 0x5 has invalid maxpacket 16992, setting to 1024 [ 373.065502][ T9] usb 3-1: Manufacturer: syz [ 373.182187][ T9244] pim6reg: entered allmulticast mode [ 373.213463][ T5721] usb 5-1: config 6 interface 171 altsetting 196 has a duplicate endpoint with address 0xF, skipping [ 373.249415][ T9] usb 3-1: SerialNumber: syz [ 373.258756][ T5721] usb 5-1: config 6 interface 171 altsetting 196 has a duplicate endpoint with address 0x3, skipping [ 373.298512][ T5721] usb 5-1: config 6 interface 171 altsetting 196 has a duplicate endpoint with address 0x7, skipping [ 373.334651][ T5721] usb 5-1: config 6 interface 171 altsetting 196 has a duplicate endpoint with address 0x6, skipping [ 373.366960][ T5721] usb 5-1: config 6 interface 171 altsetting 196 has a duplicate endpoint with address 0x4, skipping [ 373.406544][ T5721] usb 5-1: config 6 interface 171 altsetting 196 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 373.440753][ T5721] usb 5-1: config 6 interface 244 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 373.467229][ T5721] usb 5-1: config 6 interface 244 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 373.494626][ T5721] usb 5-1: config 6 interface 244 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 373.524635][ T5721] usb 5-1: config 6 interface 244 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 373.556820][ T5721] usb 5-1: config 6 interface 244 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 373.584805][ T5721] usb 5-1: config 6 interface 244 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 373.618082][ T5721] usb 5-1: config 6 interface 244 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 373.645360][ T5721] usb 5-1: config 6 interface 244 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 373.673147][ T5721] usb 5-1: config 6 interface 244 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 373.703555][ T5721] usb 5-1: config 6 interface 244 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 373.733968][ T5721] usb 5-1: config 6 interface 59 has no altsetting 0 [ 373.752332][ T5721] usb 5-1: config 6 interface 7 has no altsetting 0 [ 373.767323][ T5721] usb 5-1: config 6 interface 171 has no altsetting 0 [ 373.774636][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.794585][ T5721] usb 5-1: config 6 interface 244 has no altsetting 0 [ 373.830118][ T5721] usb 5-1: New USB device found, idVendor=0403, idProduct=e88d, bcdDevice=fb.fd [ 373.846930][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.866194][ T5721] usb 5-1: Product: ࠇ [ 373.875603][ T5721] usb 5-1: Manufacturer: 䐊 [ 373.897204][ T9222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 373.910283][ T9222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 373.924498][ T9222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 373.963336][ T9222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.009586][ T9222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.019158][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.029375][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.040234][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.334716][ T9253] openvswitch: netlink: Key type 30 is not supported [ 374.369773][ T5721] ftdi_sio 5-1:6.59: FTDI USB Serial Device converter detected [ 374.413578][ T5721] ftdi_sio ttyUSB0: unknown device type: 0xfbfd [ 374.467488][ T9] kl5kusb105 3-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 374.554555][ T9] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB1 [ 374.567049][ T5721] ftdi_sio 5-1:6.7: FTDI USB Serial Device converter detected [ 374.603182][ T9] usb 3-1: USB disconnect, device number 38 [ 374.603495][ T5721] ftdi_sio ttyUSB2: unknown device type: 0xfbfd [ 374.639757][ T9247] fuse: Bad value for 'user_id' [ 374.658117][ T9] kl5kusb105d ttyUSB1: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB1 [ 374.689612][ T5721] ftdi_sio 5-1:6.171: FTDI USB Serial Device converter detected [ 374.698945][ T9247] fuse: Bad value for 'user_id' [ 374.715123][ T9] kl5kusb105 3-1:4.44: device disconnected [ 374.737376][ T9249] usb usb8: usbfs: process 9249 (syz.3.813) did not claim interface 0 before use [ 374.750959][ T5721] ftdi_sio ttyUSB1: unknown device type: 0xfbfd [ 374.896516][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.906291][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.923050][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.943264][ T5721] ftdi_sio 5-1:6.244: FTDI USB Serial Device converter detected [ 374.974441][ T5721] ftdi_sio ttyUSB3: unknown device type: 0xfbfd [ 375.030152][ T5721] usb 5-1: USB disconnect, device number 43 [ 375.136272][ T5721] ftdi_sio 5-1:6.59: device disconnected [ 375.182318][ T5721] ftdi_sio 5-1:6.7: device disconnected [ 375.222594][ T5721] ftdi_sio 5-1:6.171: device disconnected [ 375.252262][ T5721] ftdi_sio 5-1:6.244: device disconnected [ 376.011109][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.033759][ T29] audit: type=1400 audit(1782865569.886:643): avc: denied { connect } for pid=9262 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 376.223153][ T5721] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 376.902314][ T5721] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 376.914077][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 376.935636][ T5721] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 376.948224][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.957657][ T5721] usb 5-1: Product: syz [ 376.965792][ T5721] usb 5-1: Manufacturer: syz [ 376.972736][ T5721] usb 5-1: SerialNumber: syz [ 377.004869][ T5721] usb 5-1: config 0 descriptor?? [ 377.021051][ T5721] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 377.031207][ T5818] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 377.050850][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.124112][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.819'. [ 377.191831][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.209977][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.295930][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 377.302442][ T9271] ubi31: attaching mtd0 [ 377.380554][ T5818] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.385862][ T9271] ubi31: scanning is finished [ 377.397181][ T9271] ubi31: empty MTD device detected [ 377.623875][ T5807] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 377.645236][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.669889][ T5818] usb 1-1: config 0 descriptor?? [ 377.825015][ T5807] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 378.137047][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.166843][ T11] usb 5-1: USB disconnect, device number 44 [ 378.177450][ T5807] usb 6-1: config 0 descriptor?? [ 378.224638][ T5807] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 378.254186][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.261985][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.321446][ T9271] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 378.353906][ T5818] hid_parser_main: 5 callbacks suppressed [ 378.353926][ T5818] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 378.388321][ T5818] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 378.419525][ T5818] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 378.448453][ T5818] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 378.478590][ T5818] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 378.512261][ T5818] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 378.530408][ T5818] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 378.540099][ T5818] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 378.560988][ T5818] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 378.580285][ T5818] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 378.610534][ T5818] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 378.676862][ T5818] usb 1-1: USB disconnect, device number 32 [ 378.692928][ T9278] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 378.720630][ T9278] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 378.753612][ T9278] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 378.808772][ T9280] fido_id[9280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 378.857020][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 378.911750][ T5807] gspca_cpia1: usb_control_msg 03, error -71 [ 378.930559][ T5807] gspca_cpia1: usb_control_msg 01, error -71 [ 378.956299][ T5807] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 378.997573][ T5807] usb 6-1: USB disconnect, device number 35 [ 379.659918][ T14] net_ratelimit: 2 callbacks suppressed [ 379.659937][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.704019][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.871249][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.076116][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.175098][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.185597][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.186842][ T9299] netlink: 'syz.5.828': attribute type 10 has an invalid length. [ 380.202996][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.245044][ T9299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.275850][ T9299] team0: Port device netdevsim1 added [ 380.341076][ T5721] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 380.501292][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 380.537548][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 380.551460][ T5721] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 380.564372][ T9306] tmpfs: Bad value for 'mpol' [ 380.570624][ T5721] usb 1-1: config 14 has an invalid interface number: 100 but max is 1 [ 380.594808][ T5721] usb 1-1: config 14 has no interface number 0 [ 380.614854][ T5721] usb 1-1: config 14 has no interface number 1 [ 380.914609][ T5721] usb 1-1: config 14 interface 57 altsetting 216 endpoint 0x8 has invalid maxpacket 160, setting to 64 [ 380.995539][ T9312] binder: 9308:9312 ioctl c0306201 200000000080 returned -14 [ 381.016762][ T5721] usb 1-1: config 14 interface 100 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 381.029986][ T29] audit: type=1400 audit(1782865574.946:644): avc: denied { name_bind } for pid=9307 comm="syz.5.833" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 381.074929][ T9309] binder: 9308:9309 ioctl c0306201 2000000003c0 returned -14 [ 381.088892][ T5721] usb 1-1: config 14 interface 100 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 381.111228][ T5721] usb 1-1: config 14 interface 100 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 381.131781][ T5721] usb 1-1: config 14 interface 100 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 381.143462][ T5721] usb 1-1: config 14 interface 100 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 381.158896][ T5721] usb 1-1: config 14 interface 57 has no altsetting 0 [ 381.169412][ T5721] usb 1-1: config 14 interface 100 has no altsetting 0 [ 381.183208][ T5721] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 381.192701][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.210376][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.228747][ T5721] usb 1-1: Product: syz [ 381.234785][ T5721] usb 1-1: Manufacturer: syz [ 381.242576][ T5721] usb 1-1: SerialNumber: syz [ 381.337306][ T9324] fuse: Bad value for 'user_id' [ 381.354368][ T9324] fuse: Bad value for 'user_id' [ 381.522050][ T42] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 381.677703][ T5721] legousbtower 1-1:14.57: interrupt endpoints not found [ 381.823164][ T42] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 381.842097][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 381.864714][ T42] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 381.878793][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.895447][ T29] audit: type=1400 audit(1782865575.816:645): avc: denied { execute } for pid=9292 comm="syz.0.825" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 381.900609][ T42] usb 3-1: Product: syz [ 381.934033][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 381.953425][ T42] usb 3-1: Manufacturer: syz [ 381.965561][ T5721] legousbtower 1-1:14.100: get version request failed: -71 [ 381.974248][ T42] usb 3-1: SerialNumber: syz [ 381.980979][ T5721] legousbtower 1-1:14.100: probe with driver legousbtower failed with error -71 [ 381.994551][ T42] usb 3-1: config 0 descriptor?? [ 382.014249][ T42] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 382.027028][ T5721] usb 1-1: USB disconnect, device number 33 [ 382.060433][ T5818] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 382.070098][ T5617] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 382.240106][ T5818] usb 6-1: Using ep0 maxpacket: 8 [ 382.252601][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.291443][ T5818] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 382.313438][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.317250][ T5617] usb 4-1: Using ep0 maxpacket: 32 [ 382.522333][ T5617] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 382.632480][ T5617] usb 4-1: config 0 has no interface number 0 [ 382.644966][ T5617] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.659019][ T5617] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 382.682907][ T5617] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 382.707621][ T5818] usb 6-1: Product: syz [ 382.717386][ T5818] usb 6-1: Manufacturer: syz [ 382.723745][ T5818] usb 6-1: SerialNumber: syz [ 382.752874][ T5818] usb 6-1: config 0 descriptor?? [ 382.797371][ T5617] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 382.838087][ T5721] usb 3-1: USB disconnect, device number 39 [ 382.886705][ T5617] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 382.917904][ T5617] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 382.939856][ T5617] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 382.960110][ T5617] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29304, setting to 1024 [ 382.973222][ T5617] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 382.979253][ T5818] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 382.984822][ T5617] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.009853][ T29] audit: type=1400 audit(1782865576.916:646): avc: denied { setopt } for pid=9325 comm="syz.5.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 383.036618][ T5818] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 383.037302][ T5617] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 383.060118][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.069065][ T5617] usb 4-1: Product: syz [ 383.076752][ T5617] usb 4-1: Manufacturer: syz [ 383.081844][ T5617] usb 4-1: SerialNumber: syz [ 383.095006][ T5818] usb 6-1: USB disconnect, device number 36 [ 383.096493][ T5617] usb 4-1: config 0 descriptor?? [ 383.109111][ T9328] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 383.117478][ T9328] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 383.128896][ T5617] usb 4-1: will this work? Response EP is not usually 3 [ 383.136398][ T5736] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 383.145452][ T5617] usb 4-1: will this work? Image data EP is not usually 2 [ 383.167601][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.183890][ T5617] scsi host1: microtekX6 [ 383.310251][ T5736] usb 1-1: Using ep0 maxpacket: 32 [ 383.326722][ T5736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.348240][ T5736] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 383.387796][ T5736] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 383.438137][ T5736] usb 1-1: config 1 interface 2 has no altsetting 0 [ 383.469327][ T5736] usb 1-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 383.482871][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.502883][ T5736] usb 1-1: Product: syz [ 383.507313][ T5736] usb 1-1: Manufacturer: syz [ 383.512381][ T5736] usb 1-1: SerialNumber: syz [ 383.597730][ T9338] fuse: Bad value for 'fd' [ 383.740930][ T29] audit: type=1400 audit(1782865577.656:647): avc: denied { ioctl } for pid=9333 comm="syz.0.838" path="socket:[23082]" dev="sockfs" ino=23082 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 383.857615][ T29] audit: type=1400 audit(1782865577.756:648): avc: denied { create } for pid=9339 comm="syz.5.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.195789][ T29] audit: type=1400 audit(1782865577.756:649): avc: denied { setopt } for pid=9339 comm="syz.5.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.568679][ T5736] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 384.711113][ T5736] usb 1-1: selecting invalid altsetting 0 [ 385.290658][ T174] net_ratelimit: 2 callbacks suppressed [ 385.290670][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.305642][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.313828][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.323721][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.335315][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.351250][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.375959][ T5736] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 385.427577][ T5736] usb 1-1: USB disconnect, device number 34 [ 385.508183][ T42] usb 4-1: USB disconnect, device number 33 [ 385.592440][ T9351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.646039][ T8156] udevd[8156]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.654899][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 385.832962][ T29] audit: type=1400 audit(1782865579.756:650): avc: denied { bind } for pid=9355 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 385.981035][ T9351] syz.3.844 (9351) used greatest stack depth: 19768 bytes left [ 386.206632][ T29] audit: type=1400 audit(1782865580.126:651): avc: denied { create } for pid=9368 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 386.311055][ T42] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 386.480340][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 386.501612][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 386.532541][ T42] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 386.564436][ T42] usb 4-1: config 14 has an invalid interface number: 100 but max is 1 [ 386.603615][ T42] usb 4-1: config 14 has no interface number 0 [ 386.640385][ T42] usb 4-1: config 14 has no interface number 1 [ 386.683192][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.694744][ T42] usb 4-1: config 14 interface 57 altsetting 216 endpoint 0x8 has invalid maxpacket 160, setting to 64 [ 386.727031][ T42] usb 4-1: config 14 interface 100 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 386.756501][ T42] usb 4-1: config 14 interface 100 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 386.789828][ T42] usb 4-1: config 14 interface 100 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 386.830643][ T42] usb 4-1: config 14 interface 100 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 386.844609][ T9366] fuse: Bad value for 'user_id' [ 386.854395][ T9366] fuse: Bad value for 'user_id' [ 386.873698][ T42] usb 4-1: config 14 interface 100 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 386.912771][ T42] usb 4-1: config 14 interface 57 has no altsetting 0 [ 386.930149][ T42] usb 4-1: config 14 interface 100 has no altsetting 0 [ 386.955176][ T42] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 386.979195][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.012412][ T42] usb 4-1: Product: syz [ 387.026647][ T42] usb 4-1: Manufacturer: syz [ 387.040239][ T42] usb 4-1: SerialNumber: syz [ 387.463390][ T42] legousbtower 4-1:14.57: interrupt endpoints not found [ 387.583174][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9393 comm=syz.5.856 [ 387.679561][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.848'. [ 387.692869][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.775643][ T9395] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 387.786134][ T42] legousbtower 4-1:14.100: get version request failed: -71 [ 387.804927][ T42] legousbtower 4-1:14.100: probe with driver legousbtower failed with error -71 [ 387.859289][ T42] usb 4-1: USB disconnect, device number 34 [ 388.310632][ T5736] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 388.420729][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.470115][ T5736] usb 3-1: Using ep0 maxpacket: 16 [ 388.488142][ T5736] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.541124][ T5736] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 388.576998][ T5736] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 388.614535][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.653132][ T5736] usb 3-1: Product: syz [ 388.668323][ T5736] usb 3-1: Manufacturer: syz [ 388.686674][ T5736] usb 3-1: SerialNumber: syz [ 388.700111][ T42] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 388.734658][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.891747][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 388.911378][ T42] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 388.940402][ T42] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.980234][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 389.011805][ T42] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 389.055187][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.104060][ T42] usb 4-1: config 0 descriptor?? [ 389.143406][ T9407] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 389.420101][ T5818] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 389.580119][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 389.607575][ T5818] usb 6-1: unable to get BOS descriptor or descriptor too short [ 389.640391][ T5818] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 389.684337][ T5818] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 389.719289][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.731826][ T9409] fuse: Bad value for 'user_id' [ 389.747689][ T9409] fuse: Bad value for 'user_id' [ 389.754614][ T5818] usb 6-1: Product: syz [ 389.766160][ T5818] usb 6-1: Manufacturer: syz [ 389.778411][ T5818] usb 6-1: SerialNumber: syz [ 389.970954][ T5736] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 389.989679][ T42] hid_parser_main: 5 callbacks suppressed [ 389.989719][ T42] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 390.035720][ T42] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 390.053984][ T42] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 390.075039][ T42] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 390.093048][ T42] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 390.112215][ T9421] netlink: 'syz.4.867': attribute type 29 has an invalid length. [ 390.124380][ T9421] netlink: 76 bytes leftover after parsing attributes in process `syz.4.867'. [ 390.157177][ T42] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 390.337036][ T42] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 390.344610][ T42] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 390.351640][ T42] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 390.358603][ T42] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 390.369362][ T42] a4tech 0003:09DA:022B.0017: unknown global tag 0xe [ 390.396532][ T42] a4tech 0003:09DA:022B.0017: item 0 4 1 14 parsing failed [ 390.424103][ T42] a4tech 0003:09DA:022B.0017: parse failed [ 390.439194][ T5736] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 390.439716][ T5818] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 390.453386][ T5736] usb 3-1: USB disconnect, device number 40 [ 390.471458][ T42] a4tech 0003:09DA:022B.0017: probe with driver a4tech failed with error -22 [ 390.522151][ T5818] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 390.576208][ T8156] udevd[8156]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.803664][ T29] audit: type=1400 audit(1782865584.726:652): avc: denied { mount } for pid=9427 comm="syz.4.869" name="/" dev="autofs" ino=24043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 390.830843][ T42] net_ratelimit: 1 callbacks suppressed [ 390.830857][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.919835][ T5818] usb 6-1: USB disconnect, device number 37 [ 391.050625][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.062979][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.079206][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.279828][ T29] audit: type=1400 audit(1782865585.186:653): avc: denied { getopt } for pid=9433 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 391.411321][ T5736] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 391.520097][ T5818] usb 4-1: USB disconnect, device number 35 [ 391.587482][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.750439][ T5736] usb 1-1: Using ep0 maxpacket: 32 [ 391.814975][ T5736] usb 1-1: unable to get BOS descriptor or descriptor too short [ 391.939768][ T5736] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 391.962273][ T5736] usb 1-1: config 14 has an invalid interface number: 100 but max is 1 [ 392.659848][ T5736] usb 1-1: config 14 has no interface number 0 [ 392.666801][ T5736] usb 1-1: config 14 has no interface number 1 [ 392.674636][ T5736] usb 1-1: config 14 interface 57 altsetting 216 endpoint 0x8 has invalid maxpacket 160, setting to 64 [ 392.686886][ T5736] usb 1-1: config 14 interface 100 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 392.702193][ T5736] usb 1-1: config 14 interface 100 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 392.772789][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.780093][ T5736] usb 1-1: config 14 interface 100 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 392.829047][ T5736] usb 1-1: config 14 interface 100 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 392.850353][ T5818] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 392.856312][ T5736] usb 1-1: config 14 interface 100 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 392.880818][ T5736] usb 1-1: config 14 interface 57 has no altsetting 0 [ 392.888918][ T5736] usb 1-1: config 14 interface 100 has no altsetting 0 [ 392.961691][ T5736] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 392.985932][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.003598][ T5736] usb 1-1: Product: syz [ 393.011953][ T5736] usb 1-1: Manufacturer: syz [ 393.022991][ T5736] usb 1-1: SerialNumber: syz [ 393.030817][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 393.041767][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.078696][ T5818] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 393.121055][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 393.144839][ T5818] usb 4-1: Product: syz [ 393.155055][ T5818] usb 4-1: Manufacturer: syz [ 393.165392][ T5818] usb 4-1: SerialNumber: syz [ 393.187456][ T5818] usb 4-1: config 0 descriptor?? [ 393.207967][ T5818] hub 4-1:0.0: bad descriptor, ignoring hub [ 393.232927][ T5818] hub 4-1:0.0: probe with driver hub failed with error -5 [ 393.520297][ T5736] legousbtower 1-1:14.57: interrupt endpoints not found [ 393.632443][ T9452] fuse: Bad value for 'user_id' [ 393.651886][ T9452] fuse: Bad value for 'user_id' [ 393.760379][ T42] usb 4-1: USB disconnect, device number 36 [ 394.052387][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.083851][ T9461] netlink: 68 bytes leftover after parsing attributes in process `syz.4.879'. [ 394.096265][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 394.284042][ T5736] legousbtower 1-1:14.100: get version request failed: -71 [ 394.487291][ T5736] legousbtower 1-1:14.100: probe with driver legousbtower failed with error -71 [ 394.507527][ T5736] usb 1-1: USB disconnect, device number 35 [ 394.650331][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.699111][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.880'. [ 394.786696][ T9466] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9466 comm=syz.2.880 [ 394.830172][ T29] audit: type=1400 audit(1782865588.746:654): avc: denied { ioctl } for pid=9464 comm="syz.2.880" path="socket:[24101]" dev="sockfs" ino=24101 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 394.930978][ T5818] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 395.009688][ T29] audit: type=1400 audit(1782865588.926:655): avc: denied { ioctl } for pid=9467 comm="syz.4.882" path="socket:[24177]" dev="sockfs" ino=24177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 395.120140][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 395.131147][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.144327][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.167435][ T5818] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.194226][ T5818] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.225425][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.236734][ T5818] usb 4-1: Product: syz [ 395.241645][ T5818] usb 4-1: Manufacturer: syz [ 395.246843][ T5818] usb 4-1: SerialNumber: syz [ 395.264360][ T5818] usb 4-1: 0:2 : does not exist [ 395.269309][ T5818] usb 4-1: unit 9 not found! [ 395.280383][ T5736] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 395.310096][ T42] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 395.450173][ T5736] usb 5-1: Using ep0 maxpacket: 16 [ 395.458281][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.475578][ T42] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 395.498203][ T42] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 395.515977][ T5736] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 395.530519][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.542419][ T42] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 395.546380][ T5736] usb 5-1: config 0 descriptor?? [ 395.573791][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.605407][ T9473] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 395.627400][ T5807] usb 4-1: USB disconnect, device number 37 [ 395.640105][ T5818] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 395.680378][ T42] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 395.815279][ T5818] usb 6-1: unable to get BOS descriptor or descriptor too short [ 395.846527][ T5818] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.882729][ T5818] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.913773][ T5818] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.954273][ T5818] usb 6-1: config 1 interface 0 has no altsetting 0 [ 395.981379][ T5736] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 395.997874][ T5818] usb 6-1: string descriptor 0 read error: -22 [ 396.010568][ T5818] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 396.041436][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.171344][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.459982][ T29] audit: type=1400 audit(1782865590.376:656): avc: denied { write } for pid=9467 comm="syz.4.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 396.461454][ T42] usb 5-1: USB disconnect, device number 45 [ 396.615964][ T29] audit: type=1400 audit(1782865590.536:657): avc: denied { write } for pid=9481 comm="syz.5.887" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 396.688465][ T5818] kone 0003:1E7D:2CED.0019: unexpected long global item [ 396.715564][ T5818] kone 0003:1E7D:2CED.0019: parse failed [ 396.726386][ T29] audit: type=1400 audit(1782865590.536:658): avc: denied { open } for pid=9481 comm="syz.5.887" path="/157/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 396.737726][ T5818] kone 0003:1E7D:2CED.0019: probe with driver kone failed with error -22 [ 396.827188][ T29] audit: type=1400 audit(1782865590.536:659): avc: denied { ioctl } for pid=9481 comm="syz.5.887" path="/157/file0/file0" dev="fuse" ino=64 ioctlcmd=0x6404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 396.910154][ T29] audit: type=1800 audit(1782865590.746:660): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.887" name="/" dev="fuse" ino=1 res=0 errno=0 [ 397.064504][ T9482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.102591][ T9482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.211946][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.473237][ T29] audit: type=1400 audit(1782865591.396:661): avc: denied { map } for pid=9501 comm="syz.2.893" path="socket:[24653]" dev="sockfs" ino=24653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 397.690418][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.718037][ T5818] usb 6-1: USB disconnect, device number 38 [ 398.250709][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.270819][ T9] usb 1-1: USB disconnect, device number 36 [ 399.731838][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.818731][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 400.010226][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 400.039163][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 400.072815][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.103989][ T9] usb 1-1: Product: syz [ 400.122521][ T9] usb 1-1: Manufacturer: syz [ 400.134891][ T9] usb 1-1: SerialNumber: syz [ 400.168605][ T9] usb 1-1: config 0 descriptor?? [ 400.231124][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 400.731307][ T5818] usb 1-1: USB disconnect, device number 37 [ 400.737347][ T1112] usb 1-1: Failed to submit usb control message: -71 [ 400.758391][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.784930][ T1112] usb 1-1: unable to send the bmi data to the device: -71 [ 400.815895][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.833878][ T1112] usb 1-1: unable to get target info from device [ 400.860106][ T1112] usb 1-1: could not get target info (-71) [ 400.887717][ T1112] usb 1-1: could not probe fw (-71) [ 401.322895][ T9558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.332819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.373346][ T9555] lo speed is unknown, defaulting to 1000 [ 401.537686][ T9563] xt_l2tp: v2 sid > 0xffff: 117440512 [ 401.650151][ T5818] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 401.820259][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 401.840566][ T5818] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 401.855185][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.898171][ T5818] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 401.951539][ T5818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.983877][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 402.018420][ T5818] usb 5-1: SerialNumber: syz [ 402.071606][ T5818] cdc_acm 5-1:1.0: skipping garbage [ 402.333424][ T9560] netlink: 'syz.4.910': attribute type 5 has an invalid length. [ 402.383747][ T29] audit: type=1400 audit(1782865596.286:662): avc: denied { sys_module } for pid=9569 comm="syz.2.913" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 402.950704][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.834182][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.010633][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.114898][ T5617] usb 5-1: USB disconnect, device number 46 [ 404.424686][ T9588] syzkaller0: entered promiscuous mode [ 404.464584][ T9588] syzkaller0: entered allmulticast mode [ 405.051090][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.644957][ T9619] netlink: 24 bytes leftover after parsing attributes in process `syz.5.922'. [ 405.973349][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 406.046487][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.922'. [ 406.074282][ T9623] netlink: 'syz.2.924': attribute type 11 has an invalid length. [ 406.090831][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.890504][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.004539][ T29] audit: type=1400 audit(1782865600.926:663): avc: denied { setopt } for pid=9633 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.130499][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.214394][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 408.192387][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.204656][ T29] audit: type=1400 audit(1782865602.076:664): avc: denied { getopt } for pid=9646 comm="syz.0.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 409.070390][ T42] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 409.211903][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.221946][ T42] usb 5-1: device descriptor read/64, error -71 [ 409.935182][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.950104][ T42] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 410.100266][ T42] usb 5-1: device descriptor read/64, error -71 [ 410.210462][ T42] usb usb5-port1: attempt power cycle [ 410.542851][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.620339][ T42] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 410.864893][ T42] usb 5-1: device not accepting address 49, error -71 [ 411.610515][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.894079][ T29] audit: type=1400 audit(1782865605.816:665): avc: denied { write } for pid=9690 comm="syz.2.943" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 412.564552][ T9695] FAULT_INJECTION: forcing a failure. [ 412.564552][ T9695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.609075][ T9695] CPU: 1 UID: 0 PID: 9695 Comm: syz.5.946 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.609108][ T9695] Tainted: [L]=SOFTLOCKUP [ 412.609115][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 412.609128][ T9695] Call Trace: [ 412.609135][ T9695] [ 412.609143][ T9695] dump_stack_lvl+0x100/0x190 [ 412.609175][ T9695] should_fail_ex.cold+0x5/0xa [ 412.609205][ T9695] _copy_to_user+0x32/0xd0 [ 412.609234][ T9695] simple_read_from_buffer+0xcb/0x170 [ 412.609259][ T9695] proc_fail_nth_read+0x1af/0x230 [ 412.609291][ T9695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.609322][ T9695] ? rw_verify_area+0xce/0x6d0 [ 412.609349][ T9695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.609378][ T9695] vfs_read+0x1e4/0xb40 [ 412.609411][ T9695] ? __pfx_vfs_read+0x10/0x10 [ 412.609440][ T9695] ? __fget_files+0x215/0x3d0 [ 412.609466][ T9695] ? __fget_files+0x21f/0x3d0 [ 412.609495][ T9695] ksys_read+0x12a/0x250 [ 412.609524][ T9695] ? __pfx_ksys_read+0x10/0x10 [ 412.609561][ T9695] do_syscall_64+0x115/0x870 [ 412.609590][ T9695] ? clear_bhb_loop+0x40/0x90 [ 412.609615][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.609637][ T9695] RIP: 0033:0x7f8497f5d68e [ 412.609653][ T9695] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.609671][ T9695] RSP: 002b:00007f8498ea8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.609688][ T9695] RAX: ffffffffffffffda RBX: 00007f8498ea96c0 RCX: 00007f8497f5d68e [ 412.609701][ T9695] RDX: 000000000000000f RSI: 00007f8498ea90a0 RDI: 0000000000000004 [ 412.609713][ T9695] RBP: 00007f8498ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 412.609723][ T9695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.609735][ T9695] R13: 00007f8498216038 R14: 00007f8498215fa0 R15: 00007ffd255eb268 [ 412.609759][ T9695] [ 412.838147][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.973784][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.087245][ T29] audit: type=1400 audit(1782865606.996:666): avc: denied { ioctl } for pid=9703 comm="syz.3.948" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 413.150831][ T9] libceph: connect (1)[c::]:6789 error -101 [ 413.166525][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 413.210340][ T29] audit: type=1400 audit(1782865607.006:667): avc: denied { create } for pid=9703 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 413.310212][ T9707] ceph: No mds server is up or the cluster is laggy [ 413.447157][ T42] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 413.485865][ T9] libceph: connect (1)[c::]:6789 error -101 [ 413.504283][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 413.544247][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.949'. [ 413.650371][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 413.669355][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.695480][ T42] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 413.746457][ T42] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 413.758527][ T9723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.767265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.777825][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.822171][ T9723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.831956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.854674][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.875127][ T42] usb 6-1: Product: syz [ 413.889338][ T42] usb 6-1: Manufacturer: syz [ 413.905177][ T42] usb 6-1: SerialNumber: syz [ 413.934659][ T42] usb 6-1: config 0 descriptor?? [ 414.123994][ T9731] devpts: Unknown parameter '/dev/vbi#' [ 414.165725][ T9723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.174138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.266535][ T9720] syzkaller0: entered promiscuous mode [ 414.293818][ T9720] syzkaller0: entered allmulticast mode [ 414.314440][ T42] usb 6-1: USB disconnect, device number 39 [ 414.354487][ T9723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.276807][ T29] audit: type=1400 audit(1782865609.196:668): avc: denied { connect } for pid=9738 comm="syz.5.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 416.530167][ T5714] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 416.854217][ T5714] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 416.867979][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.943456][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.996561][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.099328][ T5714] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.150953][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.190248][ T5714] usb 5-1: config 0 descriptor?? [ 417.595080][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 417.638137][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 418.064960][ T29] audit: type=1400 audit(1782865611.986:669): avc: denied { accept } for pid=9782 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 418.410536][ T42] net_ratelimit: 2045 callbacks suppressed [ 418.410554][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.585156][ T5714] usbhid 5-1:0.0: can't add hid device: -71 [ 418.609930][ T5714] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 418.660947][ T5714] usb 5-1: USB disconnect, device number 51 [ 419.170172][ T5617] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 419.222822][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 419.342458][ T5617] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.370508][ T5617] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.426606][ T5617] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.443696][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.452821][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 419.459281][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.461909][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 419.491136][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 419.505793][ T5617] usb 4-1: config 0 descriptor?? [ 419.517051][ T5617] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 419.545951][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 419.558736][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.969'. [ 419.565692][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.580794][ T9] usb 5-1: Product: syz [ 419.586698][ T9] usb 5-1: Manufacturer: syz [ 419.586732][ T9] usb 5-1: SerialNumber: syz [ 419.609245][ T9] usb 5-1: config 0 descriptor?? [ 420.281251][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.487213][ T9] usb 5-1: USB disconnect, device number 52 [ 420.534521][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.679328][ T9806] IPv6: sit2: Disabled Multicast RS [ 421.198651][ T9813] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.970674][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.992105][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.334155][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.343933][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.363299][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.536132][ T9802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.736625][ T29] audit: type=1400 audit(1782865617.646:670): avc: denied { bind } for pid=9822 comm="syz.5.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 424.410843][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.137194][ T9834] FAULT_INJECTION: forcing a failure. [ 425.137194][ T9834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.151066][ T9834] CPU: 0 UID: 0 PID: 9834 Comm: syz.5.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.151086][ T9834] Tainted: [L]=SOFTLOCKUP [ 425.151090][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 425.151100][ T9834] Call Trace: [ 425.151104][ T9834] [ 425.151108][ T9834] dump_stack_lvl+0x100/0x190 [ 425.151129][ T9834] should_fail_ex.cold+0x5/0xa [ 425.151145][ T9834] _copy_from_user+0x2e/0xd0 [ 425.151160][ T9834] __x64_sys_sendfile64+0x120/0x220 [ 425.151174][ T9834] ? ksys_write+0x1ac/0x250 [ 425.151184][ T9834] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 425.151201][ T9834] do_syscall_64+0x115/0x870 [ 425.151222][ T9834] ? clear_bhb_loop+0x40/0x90 [ 425.151236][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.151247][ T9834] RIP: 0033:0x7f8497f9ce59 [ 425.151258][ T9834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.151269][ T9834] RSP: 002b:00007f8498ea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 425.151283][ T9834] RAX: ffffffffffffffda RBX: 00007f8498215fa0 RCX: 00007f8497f9ce59 [ 425.151291][ T9834] RDX: 00002000000000c0 RSI: 0000000000000005 RDI: 0000000000000006 [ 425.151297][ T9834] RBP: 00007f8498ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 425.151304][ T9834] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 425.151310][ T9834] R13: 00007f8498216038 R14: 00007f8498215fa0 R15: 00007ffd255eb268 [ 425.151325][ T9834] [ 425.494018][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.746806][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.991006][ T9802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.416166][ T9853] xt_hashlimit: size too large, truncated to 1048576 [ 427.456322][ T5714] usb 4-1: USB disconnect, device number 38 [ 427.608500][ T29] audit: type=1400 audit(1782865621.526:671): avc: denied { watch } for pid=9863 comm="syz.3.989" path="/200/file1" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 427.700135][ T42] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 427.720190][ T9802] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 427.770672][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.860870][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 427.874339][ T42] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 427.893725][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.905182][ T42] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 427.921897][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.923051][ T9802] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 427.953713][ T5714] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 427.963272][ T42] usb 1-1: config 0 descriptor?? [ 427.993176][ T9802] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 428.016714][ T9802] usb 3-1: config 8 has no interface number 0 [ 428.031095][ T9802] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 428.141156][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.152098][ T5714] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 428.162916][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.223179][ T5714] usb 5-1: config 0 descriptor?? [ 428.336493][ T9802] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 428.349674][ T9802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.379140][ T9802] usb 3-1: Product: syz [ 428.388973][ T9802] usb 3-1: Manufacturer: syz [ 428.398245][ T9802] usb 3-1: SerialNumber: syz [ 428.460238][ T5714] usbhid 5-1:0.0: can't add hid device: -71 [ 428.469080][ T5714] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 428.479475][ T9877] syzkaller0: entered promiscuous mode [ 428.527745][ T5714] usb 5-1: USB disconnect, device number 53 [ 428.536631][ T9877] syzkaller0: entered allmulticast mode [ 428.659070][ T9802] usb 3-1: USB disconnect, device number 41 [ 428.736603][ T29] audit: type=1400 audit(1782865622.656:672): avc: denied { append } for pid=9855 comm="syz.0.987" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 428.772488][ T42] hid_parser_main: 429 callbacks suppressed [ 428.772510][ T42] corsair-cpro 0003:1B1C:0C10.001A: unknown main item tag 0x0 [ 428.810683][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.818803][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.828664][ T42] corsair-cpro 0003:1B1C:0C10.001A: unknown main item tag 0x0 [ 428.829027][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.850448][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.874419][ T29] audit: type=1400 audit(1782865622.656:673): avc: denied { open } for pid=9855 comm="syz.0.987" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 428.908883][ T42] corsair-cpro 0003:1B1C:0C10.001A: unknown main item tag 0x0 [ 428.927310][ T42] corsair-cpro 0003:1B1C:0C10.001A: unknown main item tag 0x0 [ 428.935127][ T42] corsair-cpro 0003:1B1C:0C10.001A: unknown main item tag 0x0 [ 428.952442][ T42] corsair-cpro 0003:1B1C:0C10.001A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 429.031546][ T5714] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 429.191922][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.206217][ T5714] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 429.223340][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.256048][ T5714] usb 5-1: config 0 descriptor?? [ 429.356706][ T42] corsair-cpro 0003:1B1C:0C10.001A: probe with driver corsair-cpro failed with error -110 [ 429.394290][ T42] usb 1-1: USB disconnect, device number 38 [ 429.851781][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.991511][ T9892] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 430.081041][ T5714] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 430.089003][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.546478][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.809422][ T5714] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 430.891260][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.978665][ T9888] netlink: 72 bytes leftover after parsing attributes in process `syz.5.994'. [ 431.862735][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 432.567074][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.613269][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 433.041571][ T9802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.356916][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.646845][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.157173][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.242655][ T9802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.250768][ C0] sched: DL replenish lagged too much [ 436.280048][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.688237][ T9802] usb 5-1: USB disconnect, device number 54 [ 436.688349][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 436.806691][ T9921] overlayfs: failed to resolve './file0': -2 [ 437.384023][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.691067][ T42] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 437.834172][ T9931] tipc: Started in network mode [ 437.839065][ T9931] tipc: Node identity ac14142f, cluster identity 4711 [ 437.846857][ T9931] tipc: Enabled bearer , priority 10 [ 437.939632][ T9936] ubi16: attaching mtd0 [ 437.946870][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 437.947847][ T9936] ubi16: scanning is finished [ 437.953441][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.983320][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 438.016983][ T42] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 438.037024][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.150540][ T5807] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 438.183675][ T42] usb 6-1: config 0 descriptor?? [ 438.252194][ T9802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.306044][ T42] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 438.387640][ T9936] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 438.396232][ T9936] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 438.404608][ T9936] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 438.417689][ T5807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 438.426440][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.435150][ T9936] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 438.443134][ T5807] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 438.454655][ T9936] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 438.483611][ T9936] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 438.494281][ T5807] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 438.513993][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.530070][ T9936] ubi16: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2255565890 [ 438.542308][ T5807] usb 5-1: Product: syz [ 438.548385][ T9936] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 438.568830][ T5807] usb 5-1: Manufacturer: syz [ 438.576866][ T5807] usb 5-1: SerialNumber: syz [ 438.611159][ T9946] ubi16: background thread "ubi_bgt16d" started, PID 9946 [ 438.839238][ T29] audit: type=1400 audit(1782865632.756:674): avc: denied { append } for pid=9940 comm="syz.4.1007" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 438.879277][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.882083][ T9802] tipc: Node number set to 2886997039 [ 438.908741][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.939973][ T29] audit: type=1400 audit(1782865632.786:675): avc: denied { ioctl } for pid=9940 comm="syz.4.1007" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 439.055303][ T29] audit: type=1400 audit(1782865632.966:676): avc: denied { read } for pid=9940 comm="syz.4.1007" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 439.077537][ T42] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 439.144649][ T5807] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 439.154735][ T5807] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 439.225609][ T5807] usb 5-1: USB disconnect, device number 55 [ 439.280290][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 439.293054][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.336616][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 439.382421][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 439.411163][ T9954] udevd[9954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.451471][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.478520][ T42] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 439.532781][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.582113][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 439.609887][ T42] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 439.631252][ T42] usb 3-1: Manufacturer: syz [ 439.650773][ T42] usb 3-1: config 0 descriptor?? [ 439.693157][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.795796][ T9969] bond1 (unregistering): Released all slaves [ 440.020452][ T42] rc_core: IR keymap rc-hauppauge not found [ 440.028282][ T42] Registered IR keymap rc-empty [ 440.055597][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.082978][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.250450][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 440.281337][ T9974] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 440.284299][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 440.476491][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.492283][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.503138][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.513643][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.526690][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.541255][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.558018][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.571488][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.590753][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.605155][ T9] usb 6-1: USB disconnect, device number 40 [ 440.620995][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.701005][ T5807] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 441.603756][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.604365][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.619728][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.756578][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.771579][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.795002][ T5807] usb 5-1: config 3 has no interfaces? [ 441.841449][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 441.856111][ T5807] usb 5-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice=25.e9 [ 441.879979][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.889721][ T5807] usb 5-1: Product: syz [ 442.067162][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.075196][ T5807] usb 5-1: Manufacturer: syz [ 442.079942][ T5807] usb 5-1: SerialNumber: syz [ 442.101588][ T42] mceusb 3-1:0.0: Registered 〉 with mce emulator interface version 1 [ 442.849012][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.917816][ T42] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 442.977096][ T9] usb 3-1: USB disconnect, device number 42 [ 444.629083][ T5807] usb 5-1: USB disconnect, device number 56 [ 444.906886][T10008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 444.914612][T10008] UDF-fs: Scanning with blocksize 512 failed [ 444.938479][T10008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 444.946826][T10008] UDF-fs: Scanning with blocksize 1024 failed [ 444.954752][T10008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 444.962255][T10008] UDF-fs: Scanning with blocksize 2048 failed [ 444.969965][T10008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 444.977450][T10008] UDF-fs: Scanning with blocksize 4096 failed [ 445.127689][ T5617] net_ratelimit: 4 callbacks suppressed [ 445.127701][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.489302][T10013] xt_hashlimit: size too large, truncated to 1048576 [ 445.585799][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.153140][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.345694][ T9997] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 446.361924][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.371475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.371338][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.379483][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.930236][ T42] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 448.093068][ T42] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 448.128349][ T42] usb 5-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 448.157412][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.270600][ T5818] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 448.522541][ T42] usb 5-1: Product: syz [ 448.542317][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.551919][ T42] usb 5-1: Manufacturer: syz [ 448.562869][ T42] usb 5-1: SerialNumber: syz [ 448.650548][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.680076][ T5818] usb 4-1: device descriptor read/64, error -71 [ 448.863894][ T42] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 448.900494][ T42] usb 5-1: USB disconnect, device number 57 [ 448.940092][ T5818] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 449.163335][ T29] audit: type=1400 audit(1782865643.076:677): avc: denied { map } for pid=10045 comm="syz.2.1034" path="socket:[27220]" dev="sockfs" ino=27220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 449.200244][ T5818] usb 4-1: device descriptor read/64, error -71 [ 449.238963][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 449.323385][ T5818] usb usb4-port1: attempt power cycle [ 450.547116][ T42] net_ratelimit: 2 callbacks suppressed [ 450.547134][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.604185][ T5818] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 450.651465][ T5818] usb 4-1: device descriptor read/8, error -71 [ 450.920425][ T5818] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 451.527661][T10061] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 451.611148][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.170374][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.180119][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.200699][ T5818] usb 4-1: device descriptor read/8, error -71 [ 453.360347][ T5818] usb usb4-port1: unable to enumerate USB device [ 453.502176][ T29] audit: type=1400 audit(1782865647.426:678): avc: denied { getopt } for pid=10066 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 454.106696][T10076] overlayfs: failed to resolve './file0': -2 [ 454.411625][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.530943][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.541002][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.550603][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.559288][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.810343][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 454.936279][ T29] audit: type=1400 audit(1782865648.856:679): avc: denied { connect } for pid=10084 comm="syz.3.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 455.084412][ T29] audit: type=1400 audit(1782865648.866:680): avc: denied { read } for pid=10084 comm="syz.3.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 455.115820][ T5617] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 455.176410][ T29] audit: type=1400 audit(1782865648.886:681): avc: denied { create } for pid=10069 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 455.180134][ T42] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 455.420173][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 455.461195][ T42] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 455.516248][ T42] usb 1-1: config 0 has no interface number 0 [ 455.536722][ T42] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 455.622465][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.296548][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.333924][ T42] usb 1-1: Product: syz [ 456.348820][ T42] usb 1-1: Manufacturer: syz [ 456.370370][ T42] usb 1-1: SerialNumber: syz [ 456.387380][ T42] usb 1-1: config 0 descriptor?? [ 456.652197][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.080274][ T11] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 457.258379][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 457.278307][ T11] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 457.290565][ T11] usb 3-1: config 4 has no interface number 0 [ 457.297330][ T11] usb 3-1: config 4 interface 44 has no altsetting 0 [ 457.627155][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.757000][T10114] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1049'. [ 457.778443][T10117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1050'. [ 457.788901][T10117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.797779][T10117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.806542][T10117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.815195][T10117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.823768][T10117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.885338][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.894768][ T42] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 457.984327][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.164163][ T11] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 458.173223][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.181211][ T11] usb 3-1: Product: syz [ 458.185365][ T11] usb 3-1: Manufacturer: syz [ 458.189951][ T11] usb 3-1: SerialNumber: syz [ 458.193664][T10127] netlink: 'syz.5.1054': attribute type 10 has an invalid length. [ 458.239819][T10127] team0: Port device netdevsim1 removed [ 458.363412][T10130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1053'. [ 458.374271][T10127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.426604][T10127] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 458.434455][T10127] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 458.475456][T10127] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1054'. [ 458.510101][T10127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.510470][T10127] bond_slave_0: left allmulticast mode [ 458.512281][T10127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.513150][T10127] bond_slave_1: left allmulticast mode [ 458.575156][T10127] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 458.609853][T10127] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 458.630052][T10127] bond0 (unregistering): Released all slaves [ 458.709844][ T5617] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 458.950174][ T5721] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 458.983078][ T5617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.994320][ T5617] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 459.022661][ T5617] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 459.053854][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.101174][ T5617] usb 4-1: config 0 descriptor?? [ 459.124249][ T5721] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 459.144980][ T5617] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 459.146306][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.166486][ T5721] usb 5-1: Product: syz [ 459.171075][ T5617] dvb-usb: bulk message failed: -22 (3/0) [ 459.173232][ T5721] usb 5-1: Manufacturer: syz [ 459.185342][ T5721] usb 5-1: SerialNumber: syz [ 459.212917][ T5617] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 459.233963][ T5721] usb 5-1: config 0 descriptor?? [ 459.253421][ T5617] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 459.274363][ T5617] usb 4-1: media controller created [ 459.291598][ T5617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.332968][ T5617] dvb-usb: bulk message failed: -22 (6/0) [ 459.366653][ T5617] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 459.461882][ T5721] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 459.531625][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 459.541119][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 459.626235][ T5617] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 459.714617][ T5617] dvb-usb: schedule remote query interval to 150 msecs. [ 459.739001][ T5617] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 459.768626][ T11] kl5kusb105 3-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 459.801095][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 459.823136][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 459.837719][ T11] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 459.877706][ T42] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 459.907529][ T11] usb 3-1: USB disconnect, device number 43 [ 459.945486][ T42] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 459.952716][ T11] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 459.965042][ T5617] dvb-usb: bulk message failed: -22 (1/0) [ 459.970786][ T5617] dvb-usb: error while querying for an remote control event. [ 459.990445][ T42] usb 1-1: USB disconnect, device number 39 [ 460.000665][ T11] kl5kusb105 3-1:4.44: device disconnected [ 460.046409][T10152] Bluetooth: MGMT ver 1.23 [ 460.235194][ T9802] dvb-usb: bulk message failed: -22 (1/0) [ 460.450670][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 460.495283][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 460.551023][T10160] netlink: 'syz.5.1061': attribute type 11 has an invalid length. [ 460.562317][ T29] audit: type=1400 audit(1782865654.456:682): avc: denied { read } for pid=10153 comm="syz.5.1061" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 460.609048][ T9802] dvb-usb: error while querying for an remote control event. [ 460.628022][T10160] netlink: 'syz.5.1061': attribute type 4 has an invalid length. [ 460.645628][T10137] ceph: No mds server is up or the cluster is laggy [ 460.652662][T10160] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1061'. [ 460.826382][ T11] dvb-usb: bulk message failed: -22 (1/0) [ 460.832155][ T11] dvb-usb: error while querying for an remote control event. [ 460.855140][ T11] usb 4-1: USB disconnect, device number 43 [ 460.862569][T10165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1062'. [ 460.895155][ T11] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 460.951962][ T29] audit: type=1400 audit(1782865654.866:683): avc: denied { set_context_mgr } for pid=10164 comm="syz.0.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 460.985575][T10166] binder: BINDER_SET_CONTEXT_MGR already set [ 460.992099][T10166] binder: 10164:10166 ioctl 4018620d 200000004a80 returned -16 [ 461.004644][T10166] binder: 10164:10166 unknown command 0 [ 461.026279][T10166] binder: 10164:10166 ioctl c0306201 200000000480 returned -22 [ 461.050441][ T5818] net_ratelimit: 5 callbacks suppressed [ 461.050453][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.094977][ T5721] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 461.128166][ T5721] usb 5-1: USB disconnect, device number 59 [ 461.890138][ T11] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 462.247038][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.255371][ T5721] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 462.331912][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 462.342063][ T11] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 462.361866][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 462.377905][ T11] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 462.390063][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.399470][ T11] usb 4-1: Product: syz [ 462.405175][ T11] usb 4-1: Manufacturer: syz [ 462.410911][ T11] usb 4-1: SerialNumber: syz [ 462.450109][ T5721] usb 6-1: device descriptor read/64, error -71 [ 462.463892][ T11] usb 4-1: config 0 descriptor?? [ 462.492723][ T11] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 462.510082][ T11] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 462.690087][ T5721] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 462.830142][ T5721] usb 6-1: device descriptor read/64, error -71 [ 462.860116][ T5818] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 462.941300][ T5721] usb usb6-port1: attempt power cycle [ 463.010291][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 463.016993][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 463.029405][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.039622][ T5818] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.049781][ T5818] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 463.060582][ T5818] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 463.069646][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.083559][ T5818] usb 3-1: config 0 descriptor?? [ 463.089617][T10185] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 463.100118][ T11] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 463.126878][ T11] em28xx 4-1:0.0: Config register raw data: 0x41 [ 463.294166][ T5721] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 463.314677][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.340884][ T5721] usb 6-1: device descriptor read/8, error -71 [ 463.409297][T10197] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1072'. [ 463.686722][ T5721] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 463.772142][T10170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.795040][T10170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.813973][T10170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.823603][T10170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.838016][T10170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.846266][T10170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.854494][T10170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.914523][ T5807] usb 3-1: USB disconnect, device number 44 [ 463.922782][ T5629] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 463.961523][ T5721] usb 6-1: device descriptor read/8, error -71 [ 464.110692][ T5721] usb usb6-port1: unable to enumerate USB device [ 464.321759][T10206] xt_hashlimit: size too large, truncated to 1048576 [ 466.774573][ T5617] usb 4-1: USB disconnect, device number 44 [ 466.832870][ T5721] net_ratelimit: 368 callbacks suppressed [ 466.832887][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.847926][ T5617] em28xx 4-1:0.0: Disconnecting em28xx [ 466.928895][ T5617] em28xx 4-1:0.0: Freeing device [ 466.940213][ T11] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 466.974872][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.117778][ T11] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 467.139174][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.165592][ T11] usb 3-1: Product: syz [ 467.187294][ T11] usb 3-1: Manufacturer: syz [ 467.209006][ T11] usb 3-1: SerialNumber: syz [ 467.255834][ T11] usb 3-1: config 0 descriptor?? [ 467.481690][ T11] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 467.540349][ T5721] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 467.554497][ T29] audit: type=1400 audit(1782865661.476:684): avc: denied { write } for pid=10214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.793693][ T29] audit: type=1400 audit(1782865661.686:685): avc: denied { write } for pid=10252 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.769479][ T5721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.931135][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.056354][ T5721] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 469.108089][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.256728][ T5721] usb 6-1: config 0 descriptor?? [ 469.397260][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'. [ 469.452711][ T11] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 469.498041][ T5721] usbhid 6-1:0.0: can't add hid device: -71 [ 469.521850][ T5721] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 469.567237][ T5721] usb 6-1: USB disconnect, device number 45 [ 469.612867][ T5714] usb 3-1: USB disconnect, device number 45 [ 469.620426][ T5818] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 469.671739][ T5807] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 469.953186][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.010604][ T5807] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 470.010863][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.050405][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 470.093096][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.117866][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.135955][ T5807] usb 5-1: config 0 descriptor?? [ 470.155932][ T5818] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 470.172645][ T5807] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 470.189805][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.223398][ T5818] usb 4-1: Product: syz [ 470.233566][ T5818] usb 4-1: Manufacturer: syz [ 470.240566][ T5806] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 470.251462][ T5818] usb 4-1: SerialNumber: syz [ 470.286179][ T5818] usb 4-1: config 0 descriptor?? [ 470.308358][ T5818] smsc95xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 470.345016][ T5818] smsc95xx 4-1:0.0: probe with driver smsc95xx failed with error -22 [ 470.405135][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.446867][ T5806] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 470.466711][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.510705][ T5806] usb 6-1: config 0 descriptor?? [ 470.512063][ T11] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 470.588281][ T29] audit: type=1400 audit(1782865664.506:686): avc: denied { write } for pid=10264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.762021][ T29] audit: type=1400 audit(1782865664.666:687): avc: denied { write } for pid=10287 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.874457][ T5807] gspca_cpia1: usb_control_msg 03, error -71 [ 470.884515][ T5807] gspca_cpia1: usb_control_msg 01, error -71 [ 470.894345][ T5807] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 470.916762][ T5807] usb 5-1: USB disconnect, device number 60 [ 471.011274][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.019464][ T5818] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 471.169279][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 471.176414][ T11] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 471.191984][ T11] usb 3-1: config 4 has no interface number 0 [ 471.202775][ T5617] usb 4-1: USB disconnect, device number 45 [ 471.210656][ T11] usb 3-1: config 4 interface 44 has no altsetting 0 [ 471.225374][ T11] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 471.235307][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.243896][ T11] usb 3-1: Product: syz [ 471.248246][ T11] usb 3-1: Manufacturer: syz [ 471.250037][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 471.253422][ T11] usb 3-1: SerialNumber: syz [ 471.259742][ T5818] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 471.273743][ T5818] usb 1-1: config 4 has no interface number 0 [ 471.279878][ T5818] usb 1-1: config 4 interface 44 has no altsetting 0 [ 471.289116][ T5818] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 471.300737][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.308796][ T5818] usb 1-1: Product: syz [ 471.313323][ T5818] usb 1-1: Manufacturer: syz [ 471.317932][ T5818] usb 1-1: SerialNumber: syz [ 471.360719][ T5806] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 471.362684][T10236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.369948][ T5806] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 471.391749][T10236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.585859][ T29] audit: type=1400 audit(1782865665.506:688): avc: denied { connect } for pid=10290 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 471.607068][ T29] audit: type=1400 audit(1782865665.506:689): avc: denied { read } for pid=10290 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 471.638866][ T29] audit: type=1400 audit(1782865665.556:690): avc: denied { setopt } for pid=10290 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 471.732095][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'. [ 471.756857][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'. [ 471.790672][T10293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.864831][T10293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.908532][T10236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.938664][T10236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.114210][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.170602][ T5617] usb 6-1: USB disconnect, device number 46 [ 472.170647][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 472.555873][ T11] kl5kusb105 3-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 472.590247][T10300] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48566 sclass=netlink_xfrm_socket pid=10300 comm=syz.5.1092 [ 472.730088][ T11] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 472.782966][ T11] usb 3-1: USB disconnect, device number 46 [ 472.828954][ T11] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 472.892333][ T11] kl5kusb105 3-1:4.44: device disconnected [ 472.942276][ T9802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.042405][ T5818] kl5kusb105 1-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 473.086756][ T5818] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 473.132197][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.540843][ T5818] usb 1-1: USB disconnect, device number 40 [ 475.213949][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.696665][T10312] netlink: 'syz.0.1094': attribute type 4 has an invalid length. [ 475.726254][ T5818] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 475.768067][ T5818] kl5kusb105 1-1:4.44: device disconnected [ 475.770570][T10315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1094'. [ 475.782832][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1094'. [ 475.791787][T10315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1094'. [ 475.815801][ T29] audit: type=1400 audit(1782865669.686:691): avc: denied { getopt } for pid=10305 comm="syz.0.1094" lport=54663 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 475.893123][T10311] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 475.910464][T10311] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 476.098469][ T11] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 476.112637][ T9802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.260664][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.328580][T10326] overlayfs: missing 'lowerdir' [ 476.453338][ T11] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 476.523394][T10328] syzkaller0: entered promiscuous mode [ 476.538704][ T11] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 476.557808][ T11] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 476.584080][ T11] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.595403][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.613646][ T11] usb 6-1: Product: 叙 [ 476.625339][ T11] usb 6-1: Manufacturer: ᐁ [ 476.637201][ T11] usb 6-1: SerialNumber: 䀁 [ 476.677163][T10328] syzkaller0: entered allmulticast mode [ 477.300635][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.971977][ T11] cdc_ncm 6-1:1.0: bind() failure [ 478.192412][ T11] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 478.201226][ T11] cdc_ncm 6-1:1.1: bind() failure [ 478.221482][ T11] usb 6-1: USB disconnect, device number 47 [ 478.330520][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.002503][T10339] netlink: 'syz.5.1103': attribute type 12 has an invalid length. [ 479.026311][T10339] netlink: 'syz.5.1103': attribute type 29 has an invalid length. [ 479.040815][T10339] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1103'. [ 479.049945][T10339] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1103'. [ 479.100085][ T42] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 479.133710][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.340353][ T11] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 479.364852][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 479.377249][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.741809][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 479.753820][ T42] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 479.764129][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.767554][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.772729][ T42] usb 4-1: Product: syz [ 479.788219][ T42] usb 4-1: Manufacturer: syz [ 479.931184][ T42] usb 4-1: SerialNumber: syz [ 479.948784][ T42] usb 4-1: config 0 descriptor?? [ 479.974851][ T42] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 479.988355][ T11] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 480.037251][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.066607][ T11] usb 1-1: config 0 descriptor?? [ 480.136269][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 480.599203][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.683387][ T11] usbhid 1-1:0.0: can't add hid device: -71 [ 480.694049][ T11] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 480.734024][ T5807] usb 4-1: USB disconnect, device number 46 [ 480.760168][ T42] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 480.771621][ T11] usb 1-1: USB disconnect, device number 41 [ 480.921637][ T42] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 480.949073][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 480.993085][ T42] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 481.002415][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.011059][ T42] usb 5-1: Product: syz [ 481.015794][ T42] usb 5-1: Manufacturer: syz [ 481.025857][ T42] usb 5-1: SerialNumber: syz [ 481.062985][ T42] usb 5-1: config 0 descriptor?? [ 481.079284][ T42] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 481.201872][ T11] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 481.676647][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.724336][ T5807] usb 5-1: USB disconnect, device number 61 [ 481.736121][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.751201][ T5617] libceph: connect (1)[c::]:6789 error -101 [ 481.757645][ T5617] libceph: mon0 (1)[c::]:6789 connect error [ 481.791334][ T11] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 481.801070][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.825487][ T11] usb 1-1: config 0 descriptor?? [ 481.924857][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1110'. [ 482.093635][ T29] audit: type=1400 audit(1782865675.836:692): avc: denied { create } for pid=10368 comm="syz.5.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 482.114745][ T5617] libceph: connect (1)[c::]:6789 error -101 [ 482.120731][ T5617] libceph: mon0 (1)[c::]:6789 connect error [ 482.141206][ T29] audit: type=1400 audit(1782865675.846:693): avc: denied { connect } for pid=10368 comm="syz.5.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 482.161035][ T29] audit: type=1400 audit(1782865675.846:694): avc: denied { getopt } for pid=10368 comm="syz.5.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 482.220661][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.229015][ T11] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 482.237887][ T11] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31 [ 482.270425][ T42] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 482.307921][ T11] usb 1-1: USB disconnect, device number 42 [ 482.325136][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 482.422158][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.432925][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 482.446362][ T42] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 482.456000][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.479722][ T29] audit: type=1400 audit(1782865676.396:695): avc: denied { write } for pid=10381 comm="syz.0.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 482.517047][ T42] usb 4-1: config 0 descriptor?? [ 482.551090][T10373] ceph: No mds server is up or the cluster is laggy [ 482.551598][ T42] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 482.598241][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 482.640627][ T42] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 482.681506][ T42] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 482.685933][ T5617] libceph: connect (1)[c::]:6789 error -101 [ 482.707771][ T42] usb 4-1: media controller created [ 482.717851][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 482.741624][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.746433][ T5617] libceph: mon0 (1)[c::]:6789 connect error [ 482.850160][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 482.868916][ T42] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 482.889054][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 482.906195][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 482.913195][ T42] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 482.990569][ T5806] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 483.014030][ T29] audit: type=1400 audit(1782865676.936:696): avc: denied { append } for pid=10392 comm="syz.5.1118" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 483.081704][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 483.091081][ T42] dvb-usb: error while querying for an remote control event. [ 483.171611][T10397] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 483.230337][ T5806] usb 1-1: Using ep0 maxpacket: 32 [ 483.238972][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.252260][ T5806] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.262434][ T5818] dvb-usb: bulk message failed: -22 (1/0) [ 483.270139][ T5818] dvb-usb: error while querying for an remote control event. [ 483.281819][ T5806] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 483.318413][ T5806] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 483.353583][ T5806] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 483.403206][ T5806] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 483.438071][ T5806] usb 1-1: config 1 interface 1 has no altsetting 0 [ 483.447801][ T5806] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 483.457651][ T5818] dvb-usb: bulk message failed: -22 (1/0) [ 483.464689][ T5818] dvb-usb: error while querying for an remote control event. [ 483.474719][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.483766][ T5806] usb 1-1: Product: syz [ 483.491500][ T5806] usb 1-1: Manufacturer: syz [ 483.496875][ T5806] usb 1-1: SerialNumber: syz [ 483.607895][ T5617] usb 4-1: USB disconnect, device number 47 [ 483.757840][ T5617] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 483.803239][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.883666][ T29] audit: type=1400 audit(1782865677.806:697): avc: denied { read } for pid=10383 comm="syz.0.1115" name="file0" dev="fuse" ino=36028797018963968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 483.967860][ T29] audit: type=1400 audit(1782865677.866:698): avc: denied { open } for pid=10383 comm="syz.0.1115" path="/235/file0/file0" dev="fuse" ino=36028797018963968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 484.009964][T10414] random: crng reseeded on system resumption [ 484.017608][ T5806] usb 1-1: selecting invalid altsetting 0 [ 484.017992][ T5806] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 484.018378][ T5806] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 484.142340][ T5806] usb 1-1: USB disconnect, device number 43 [ 484.201224][ T9924] udevd[9924]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.810320][ T5806] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 484.820395][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.970237][ T5818] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 485.004756][ T5806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.016870][ T5806] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 485.027080][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.068080][ T5806] usb 4-1: config 0 descriptor?? [ 485.119049][ T42] libceph: connect (1)[c::]:6789 error -101 [ 485.129196][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 485.149049][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 485.179738][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 485.214666][ T5818] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 485.241182][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.264360][ T5818] usb 1-1: Product: syz [ 485.277254][ T5818] usb 1-1: Manufacturer: syz [ 485.291674][ T5818] usb 1-1: SerialNumber: syz [ 485.310861][ T5806] usbhid 4-1:0.0: can't add hid device: -71 [ 485.333999][ T5806] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 485.344223][ T5818] usb 1-1: config 0 descriptor?? [ 485.367874][ T5818] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 485.382891][ T5806] usb 4-1: USB disconnect, device number 48 [ 485.429944][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 485.443740][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 485.875512][T10428] ceph: No mds server is up or the cluster is laggy [ 485.886320][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.945876][ T5818] usb 1-1: USB disconnect, device number 44 [ 485.981408][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 486.001626][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 486.091767][ T5806] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 486.251659][ T9802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.620303][ T5806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.632157][ T5806] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 486.643347][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.678950][ T5806] usb 4-1: config 0 descriptor?? [ 486.899130][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.344328][ T29] audit: type=1400 audit(1782865681.266:699): avc: denied { append } for pid=10444 comm="syz.2.1132" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.423833][ T29] audit: type=1400 audit(1782865681.346:700): avc: denied { map } for pid=10444 comm="syz.2.1132" path="socket:[28018]" dev="sockfs" ino=28018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 487.424262][T10445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1132'. [ 487.529889][T10449] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 487.603398][ T5806] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 487.604780][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.623552][T10449] lo speed is unknown, defaulting to 1000 [ 487.636107][ T5806] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 487.645852][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.940848][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.951335][T10460] xt_socket: unknown flags 0xc [ 488.107608][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 488.116565][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 488.128581][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.137301][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.151307][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.160031][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.172091][ T5714] usb 4-1: USB disconnect, device number 49 [ 488.172142][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 488.981246][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.034636][T10470] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 489.400603][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.748212][T10481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 489.757298][T10481] UDF-fs: Scanning with blocksize 512 failed [ 489.860286][T10481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 489.869287][T10481] UDF-fs: Scanning with blocksize 1024 failed [ 489.982948][T10481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 489.993169][T10481] UDF-fs: Scanning with blocksize 2048 failed [ 490.084839][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.272560][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 490.310393][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 490.431111][T10481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 490.470355][T10481] UDF-fs: Scanning with blocksize 4096 failed [ 490.497278][T10474] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 490.562384][ T5714] lo speed is unknown, defaulting to 1000 [ 490.562390][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.568200][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.622780][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 490.632910][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 490.689866][ T5806] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 490.852332][ T5806] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 490.886181][T10494] vivid-000: disconnect [ 490.892514][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 490.940788][ T5806] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 490.966160][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.966187][ T5806] usb 1-1: Product: syz [ 490.966214][ T5806] usb 1-1: Manufacturer: syz [ 490.966231][ T5806] usb 1-1: SerialNumber: syz [ 490.973549][ T5806] usb 1-1: config 0 descriptor?? [ 490.981014][T10493] vivid-000: reconnect [ 491.018997][ T5806] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 491.037002][T10483] ceph: No mds server is up or the cluster is laggy [ 491.132219][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 491.145319][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 491.152692][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.634407][ T5714] usb 1-1: USB disconnect, device number 45 [ 491.768216][ T29] audit: type=1400 audit(1782865685.686:701): avc: denied { setopt } for pid=10509 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 491.810253][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1145'. [ 492.180016][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.458434][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.577087][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.761023][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 494.650173][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.435563][T10547] omfs: Invalid superblock (0) [ 495.485416][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 495.494358][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1154'. [ 495.503522][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 495.513159][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1154'. [ 495.542348][ T9802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.670576][T10556] fuse: Bad value for 'group_id' [ 495.675578][T10556] fuse: Bad value for 'group_id' [ 495.710661][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.589611][T10561] FAULT_INJECTION: forcing a failure. [ 496.589611][T10561] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 496.664864][T10561] CPU: 0 UID: 0 PID: 10561 Comm: syz.0.1158 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.664898][T10561] Tainted: [L]=SOFTLOCKUP [ 496.664905][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 496.664918][T10561] Call Trace: [ 496.664925][T10561] [ 496.664933][T10561] dump_stack_lvl+0x100/0x190 [ 496.664962][T10561] should_fail_ex.cold+0x5/0xa [ 496.664976][T10561] ? prepare_alloc_pages+0x16d/0x5f0 [ 496.664993][T10561] should_fail_alloc_page+0xeb/0x140 [ 496.665021][T10561] prepare_alloc_pages+0x1f0/0x5f0 [ 496.665038][T10561] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 496.665055][T10561] ? rcu_is_watching+0x12/0xc0 [ 496.665072][T10561] ? trace_kmem_cache_alloc+0xdd/0x100 [ 496.665089][T10561] ? __lock_acquire+0x49f/0x1a40 [ 496.665107][T10561] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 496.665138][T10561] ? do_raw_spin_lock+0x128/0x260 [ 496.665156][T10561] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 496.665172][T10561] ? find_held_lock+0x2b/0x80 [ 496.665187][T10561] ? __lock_acquire+0x49f/0x1a40 [ 496.665201][T10561] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.665216][T10561] ? policy_nodemask+0xed/0x4f0 [ 496.665232][T10561] alloc_pages_mpol+0x1fb/0x540 [ 496.665248][T10561] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 496.665270][T10561] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 496.665291][T10561] folio_alloc_mpol_noprof+0x36/0x260 [ 496.665309][T10561] shmem_alloc_folio+0x135/0x160 [ 496.665325][T10561] shmem_alloc_and_add_folio+0x371/0xd40 [ 496.665341][T10561] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 496.665354][T10561] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 496.665369][T10561] shmem_get_folio_gfp+0x6ad/0x1910 [ 496.665384][T10561] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 496.665397][T10561] ? __pfx___might_resched+0x10/0x10 [ 496.665410][T10561] ? noop_dirty_folio+0xfd/0x160 [ 496.665424][T10561] shmem_fallocate+0x6d7/0x1060 [ 496.665443][T10561] ? __pfx_shmem_fallocate+0x10/0x10 [ 496.665456][T10561] ? irqentry_exit+0x24d/0xa00 [ 496.665475][T10561] ? __lock_acquire+0x49f/0x1a40 [ 496.665500][T10561] ? __pfx_shmem_fallocate+0x10/0x10 [ 496.665512][T10561] vfs_fallocate+0x576/0x10a0 [ 496.665525][T10561] ? __pfx_vfs_fallocate+0x10/0x10 [ 496.665540][T10561] __x64_sys_fallocate+0xd5/0x140 [ 496.665554][T10561] do_syscall_64+0x115/0x870 [ 496.665569][T10561] ? clear_bhb_loop+0x40/0x90 [ 496.665583][T10561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.665595][T10561] RIP: 0033:0x7f17ddd9ce59 [ 496.665605][T10561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.665615][T10561] RSP: 002b:00007f17dec79028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 496.665627][T10561] RAX: ffffffffffffffda RBX: 00007f17de015fa0 RCX: 00007f17ddd9ce59 [ 496.665634][T10561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 496.665641][T10561] RBP: 00007f17dec79090 R08: 0000000000000000 R09: 0000000000000000 [ 496.665647][T10561] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000001 [ 496.665654][T10561] R13: 00007f17de016038 R14: 00007f17de015fa0 R15: 00007fffc0304ed8 [ 496.665669][T10561] [ 496.970913][ T5806] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 496.999121][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.144068][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 602.151040][ C1] rcu: 0-...!: (1 GPs behind) idle=929c/1/0x4000000000000000 softirq=49373/49373 fqs=0 [ 602.161886][ C1] rcu: (detected by 1, t=10506 jiffies, g=59729, q=655 ncpus=2) [ 602.169611][ C1] Sending NMI from CPU 1 to CPUs 0: [ 602.169645][ C0] NMI backtrace for cpu 0 [ 602.169663][ C0] CPU: 0 UID: 0 PID: 5609 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 602.169688][ C0] Tainted: [L]=SOFTLOCKUP [ 602.169697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 602.169709][ C0] RIP: 0010:lock_acquire+0x166/0x370 [ 602.169736][ C0] Code: bd 00 00 00 65 8b 05 49 35 4f 12 85 c0 0f 85 ae 00 00 00 65 48 8b 05 81 ee 4e 12 8b 90 9c 0b 00 00 85 d2 0f 85 98 00 00 00 9c <8f> 04 24 fa 48 c7 c7 ea 08 25 8e e8 ba d9 b7 09 45 89 e8 44 89 e1 [ 602.169754][ C0] RSP: 0018:ffffc90000007e08 EFLAGS: 00000046 [ 602.169768][ C0] RAX: ffff88807c11a540 RBX: 0000000000000000 RCX: 0000000000000001 [ 602.169779][ C0] RDX: 0000000000000000 RSI: ffffffff8b9fc3e6 RDI: ffffed1017085083 [ 602.169790][ C0] RBP: ffff8880b8428418 R08: 0000000000000001 R09: 0000000000000000 [ 602.169801][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 602.169811][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 602.169822][ C0] FS: 000055559422a500(0000) GS:ffff8881240e0000(0000) knlGS:0000000000000000 [ 602.169839][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.169851][ C0] CR2: 00007fc841f456b8 CR3: 000000005b67a000 CR4: 00000000003526f0 [ 602.169862][ C0] Call Trace: [ 602.169868][ C0] [ 602.169885][ C0] _raw_spin_lock_irq+0x36/0x50 [ 602.169908][ C0] ? __hrtimer_run_queues+0x1b7/0x9c0 [ 602.169934][ C0] __hrtimer_run_queues+0x1b7/0x9c0 [ 602.169965][ C0] hrtimer_interrupt+0x3e5/0x940 [ 602.169989][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 602.170023][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 602.170047][ C0] [ 602.170052][ C0] [ 602.170058][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 602.170078][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 602.170104][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 6e e1 5e 05 85 c0 74 20 8b 05 20 14 5f 05 85 c0 74 16 65 48 8b 05 c8 2d 97 08 <8b> 80 9c 0b 00 00 85 c0 0f 94 c0 0f b6 c0 e9 fd 3e 03 00 66 2e 0f [ 602.170120][ C0] RSP: 0018:ffffc900035ff320 EFLAGS: 00000202 [ 602.170133][ C0] RAX: ffff88807c11a540 RBX: ffffc900035ff6f8 RCX: ffffffff91aad301 [ 602.170144][ C0] RDX: ffffc900035ff700 RSI: 0000000000000001 RDI: ffffc900035ff3a8 [ 602.170156][ C0] RBP: 0000000000000001 R08: ffffffff91aad3ba R09: 0000000000000007 [ 602.170167][ C0] R10: 0000000000000200 R11: 00000000000179c4 R12: ffffc900035ff3e8 [ 602.170179][ C0] R13: ffffc900035ff398 R14: ffffc900035ff6f8 R15: ffffc900035ff3cc [ 602.170198][ C0] unwind_next_frame+0x3a8/0x2090 [ 602.170216][ C0] ? kasan_save_track+0x14/0x30 [ 602.170237][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 602.170260][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 602.170281][ C0] arch_stack_walk+0x94/0xf0 [ 602.170299][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 602.170322][ C0] stack_trace_save+0x8e/0xc0 [ 602.170339][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 602.170362][ C0] kasan_save_stack+0x30/0x50 [ 602.170381][ C0] ? kasan_save_stack+0x30/0x50 [ 602.170400][ C0] ? kasan_save_track+0x14/0x30 [ 602.170440][ C0] kasan_save_track+0x14/0x30 [ 602.170459][ C0] __kasan_slab_alloc+0x89/0x90 [ 602.170481][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 602.170502][ C0] ? anon_vma_clone+0x2ba/0xcd0 [ 602.170529][ C0] anon_vma_clone+0x2ba/0xcd0 [ 602.170551][ C0] ? kmem_cache_alloc_noprof+0x2b1/0x6a0 [ 602.170575][ C0] anon_vma_fork+0x1bb/0x6b0 [ 602.170603][ C0] dup_mmap+0x143e/0x21b0 [ 602.170633][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 602.170655][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 602.170681][ C0] ? __lock_acquire+0x49f/0x1a40 [ 602.170702][ C0] ? find_held_lock+0x2b/0x80 [ 602.170717][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 602.170750][ C0] copy_process+0x4588/0x8030 [ 602.170782][ C0] ? __pfx_copy_process+0x10/0x10 [ 602.170805][ C0] ? do_raw_spin_lock+0x128/0x260 [ 602.170836][ C0] kernel_clone+0x176/0x9d0 [ 602.170861][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 602.170888][ C0] ? find_held_lock+0x2b/0x80 [ 602.170903][ C0] ? __might_fault+0xc5/0x140 [ 602.170922][ C0] __do_sys_clone+0xd9/0x120 [ 602.170945][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 602.170981][ C0] do_syscall_64+0x115/0x870 [ 602.171009][ C0] ? clear_bhb_loop+0x40/0x90 [ 602.171028][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.171046][ C0] RIP: 0033:0x7fc8411c58d2 [ 602.171061][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 602.171078][ C0] RSP: 002b:00007ffd601ef100 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 602.171093][ C0] RAX: ffffffffffffffda RBX: 00007ffd601ef100 RCX: 00007fc8411c58d2 [ 602.171105][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 602.171116][ C0] RBP: 00007ffd601ef28c R08: 0000000000000000 R09: 0000000000000001 [ 602.171126][ C0] R10: 000055559422a7d0 R11: 0000000000000246 R12: 0000000000000001 [ 602.171137][ C0] R13: 00000000000927c0 R14: 00000000000793fa R15: 00007ffd601ef2e0 [ 602.171156][ C0] [ 602.171641][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g59729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 602.685683][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 602.695640][ C1] rcu: RCU grace-period kthread stack dump: [ 602.701510][ C1] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 602.715016][ C1] Call Trace: [ 602.718282][ C1] [ 602.721207][ C1] __schedule+0x125c/0x6730 [ 602.725732][ C1] ? __pfx___schedule+0x10/0x10 [ 602.730579][ C1] ? find_held_lock+0x2b/0x80 [ 602.735248][ C1] ? schedule+0x225/0x2c0 [ 602.739579][ C1] schedule+0xdd/0x2c0 [ 602.743646][ C1] schedule_timeout+0x127/0x280 [ 602.748491][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 602.753857][ C1] ? __pfx_process_timeout+0x10/0x10 [ 602.759138][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 602.764941][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 602.770398][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 602.775159][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 602.780444][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 602.785386][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 602.790576][ C1] ? rcu_is_watching+0x12/0xc0 [ 602.795341][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 602.801150][ C1] rcu_gp_kthread+0x179/0x230 [ 602.805822][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 602.811016][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 602.816823][ C1] ? __kthread_parkme+0x18c/0x230 [ 602.821850][ C1] ? kthread+0x13a/0x450 [ 602.826081][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 602.831274][ C1] kthread+0x370/0x450 [ 602.835336][ C1] ? __pfx_kthread+0x10/0x10 [ 602.839920][ C1] ret_from_fork+0x72b/0xd50 [ 602.844513][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 602.849626][ C1] ? __switch_to+0x800/0x10f0 [ 602.854297][ C1] ? __pfx_kthread+0x10/0x10 [ 602.858880][ C1] ret_from_fork_asm+0x1a/0x30 [ 602.863650][ C1] [ 602.866658][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 602.872971][ C1] CPU: 1 UID: 0 PID: 3367 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.884069][ C1] Tainted: [L]=SOFTLOCKUP [ 602.888374][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 602.898442][ C1] Workqueue: events_unbound toggle_allocation_gate [ 602.905049][ C1] RIP: 0010:smp_call_function_many_cond+0x593/0x16c0 [ 602.911732][ C1] Code: 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b9 95 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 <84> c0 0f 85 2c 0f 00 00 8b 45 08 31 ff 83 e0 01 41 89 c6 89 c6 e8 [ 602.931348][ C1] RSP: 0018:ffffc9000e22f878 EFLAGS: 00000206 [ 602.937415][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fcea8d [ 602.945373][ C1] RDX: ffff888034600000 RSI: ffffffff81fcea67 RDI: ffff888034600000 [ 602.953336][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 602.961299][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 602.969258][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 602.977219][ C1] FS: 0000000000000000(0000) GS:ffff8881241e0000(0000) knlGS:0000000000000000 [ 602.986141][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.992716][ C1] CR2: 00007f17deb456b8 CR3: 000000000e792000 CR4: 00000000003526f0 [ 603.000683][ C1] Call Trace: [ 603.003957][ C1] [ 603.006880][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 603.011908][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 603.018235][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 603.023604][ C1] ? __pfx___text_poke+0x10/0x10 [ 603.028533][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 603.033547][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 603.038656][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 603.044546][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 603.050263][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 603.056149][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 603.062386][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 603.068622][ C1] ? find_held_lock+0x2b/0x80 [ 603.073294][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 603.079269][ C1] jump_label_update+0x37a/0x550 [ 603.084206][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 603.090092][ C1] static_key_enable+0x1a/0x20 [ 603.094848][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 603.100128][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 603.106020][ C1] ? rcu_is_watching+0x12/0xc0 [ 603.110790][ C1] process_one_work+0xa23/0x1940 [ 603.115738][ C1] ? __pfx_process_one_work+0x10/0x10 [ 603.121111][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 603.127002][ C1] worker_thread+0x5ef/0xe50 [ 603.131602][ C1] ? kthread+0x13a/0x450 [ 603.135833][ C1] ? __pfx_worker_thread+0x10/0x10 [ 603.140931][ C1] kthread+0x370/0x450 [ 603.144993][ C1] ? __pfx_kthread+0x10/0x10 [ 603.149576][ C1] ret_from_fork+0x72b/0xd50 [ 603.154166][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 603.159274][ C1] ? __switch_to+0x800/0x10f0 [ 603.163944][ C1] ? __pfx_kthread+0x10/0x10 [ 603.168528][ C1] ret_from_fork_asm+0x1a/0x30 [ 603.173299][ C1]