last executing test programs: 16m54.758854531s ago: executing program 3 (id=1304): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000100)={@local, @broadcast, @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000380)={0x40, 0x8, 0x7, {0x7, 0x31, "d2a42c717e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x1, 0x75, {0x75, 0x5, "7ea926f2db6923c5d44c5b87f42b3f3d79036acd2cf73c26a2760a3373bd77fd41174c434325dc15d5bbd0e19808d06751ce088e16f023ec90394c6f9652f700cc4dd52e444267edd793314eeefb211f3ba6b28be355c7fa19277ebb79e46e3d94d9a1e85f5fbaa03daea122c2d1b0a0499f82"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000000200)={0x0, 0xf, 0x9a, {0x5, 0xf, 0x9a, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x4, 0xf0f, 0x9, [0xf, 0x6000, 0x3f00, 0x3f00, 0xc0f0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x6b, 0x0, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "beb27118580a36749b2012daf55c2a9b"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "2038a4aad2daad2ab3c5a65bc253a8a9"}, @generic={0x42, 0x10, 0xb, "140740daf641649b4ffc8e6b7917e51a41c61b34358692a0e278ce5327bd4b356da113874756c55c9a91585eda5c2eb552a8c173cd0fb27cb52449b1e6f306"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x98, 0x4, 0x40, 0x2, "7929bde7", "4cf6da06"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x19, 0x5, 0x8, 0x1, 0x9, 0x56}}}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x20, 0xc, 0x55, "ed792ed3d6efbf3e03233c7167402b3eee3cc94e6aa5405a9bd077459563960431e7543d9f1930124875c83c8d747c99ad39207cae008ee41879c2207f52d14bdd1aad7dda0c6cc97e834ead40f4b40b72d05705f1"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x42}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x4, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x4, 0x40}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0xb, 0x2, 'v6'}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x17, 0x6}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d513"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) 16m51.489804541s ago: executing program 3 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 16m49.787959338s ago: executing program 3 (id=1315): r0 = socket$nl_generic(0x11, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x40) mount$fuse(0x0, 0x0, 0x0, 0x1048001, 0x0) chdir(&(0x7f0000000080)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1001b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x2, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x0, 0x7}, {0xfff3, 0xfff2}}}, 0x24}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000000)={0x2, 0x2, 0xcfcd4592ae3d59aa, {0x103b, 0x3, 0x6, 0x90}}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r3) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000880)={0x1, 0x200}, 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 16m49.508390555s ago: executing program 3 (id=1317): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x1, 0x6, 0xd5, 0x7, 0x3, 0x6, 0x7, 0x278, 0x38, 0x184, 0xe, 0x2, 0x20, 0x2, 0xe500, 0x45, 0x9}, [{0x3, 0x8001, 0x0, 0xfa, 0x8, 0x9, 0xb749, 0x8}, {0x1, 0x4, 0x800, 0x7, 0x3481, 0x0, 0x7fffffff}], "50797ff0d71dfabd62d361e5535557ca812ba79394e771f2953b79a8929c77362b69ae65f2b6d9e97b86d10c3b6f531d82920f878cba348f5f57737f6479df05f3790a56165d4927c5a71fdb5e88a3b2541672f314b6ecc33bbf6963551b009ae44ebd956d82bc10", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8e0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) move_mount(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file0\x00', 0x201) 16m48.471240475s ago: executing program 3 (id=1319): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffd578, 0x3}, 0x20) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000080)={0x9, {0x400, 0x81, 0x101, 0xffffffe1}, {0x8, 0x7, 0x1, 0x7ff}, {0x1}}) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdc9, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000100)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000580)={0x0, 0x1d8c, 0x8, 0x0, 0x228}, &(0x7f00000014c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcba3, 0x100, 0x3, 0x81}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x130d, 0x4000, 0x1, 0x1cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xece3, 0x8, 0x3, 0x8e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e19, 0x2, 0x2, 0x168}}], 0x4, &(0x7f0000002f00)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x3, 0xc0, 0x0, 0x0}}, &(0x7f0000002f80)) 16m47.465842451s ago: executing program 3 (id=1324): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x3) 16m47.249244553s ago: executing program 32 (id=1324): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x3) 13.338095656s ago: executing program 0 (id=4612): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000340)="1b0000001d005f0214fffffffffffff8070000000d000000000007", 0x1b) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="a1ab26bd7000020006003200000008000300", @ANYRES32=r7, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) getpid() unshare(0x8040480) 12.99052309s ago: executing program 0 (id=4613): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) write$sndseq(r3, &(0x7f0000000000), 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, r5) add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 12.170615743s ago: executing program 0 (id=4615): clock_adjtime(0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8009, 0xa, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x40, 0x8, 0x4}}]}}}]}}]}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x40, 0x21, 0x2c, {0x2c, 0x23, "e7e6da6e41eaddfb0a8a34d2dd23ee248c364bf0cc12a1ac3369688a105a7e746fb1400590136b7103bd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7, '\x00', 0x0, r1, 0x4, 0x4, 0x4}, 0x50) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1f00000000000000000000000080"], 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r7 = open_tree(r6, &(0x7f0000000200)='./mnt\x00', 0x9001) fstat(r7, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x7, 0x80000000, 0x7, 0x4, 0x1, 0x1, '\x00', 0x0, r1, 0x3, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x17, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xf}, @map_fd={0x18, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x3, 0x1, 0x0, 0x5, 0x5, 0x10, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x0, 0x1, 0xb, 0x5, 0x2, 0x30, 0xffffffffffffffff}]}, &(0x7f0000000240)='syzkaller\x00', 0xa, 0x37, &(0x7f0000000280)=""/55, 0x93e86d3786f47c08, 0x1, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r8, r9, r10], 0x0, 0x10, 0x1000}, 0x94) 11.976746479s ago: executing program 4 (id=4616): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x10001) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11.38918321s ago: executing program 2 (id=4617): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) mount$9p_unix(0x0, &(0x7f0000001100)='./file0/file0\x00', 0x0, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x20}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 10.641683703s ago: executing program 4 (id=4619): socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) pipe2(0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xfffff) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 10.389972665s ago: executing program 2 (id=4621): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0xffffffff}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xffffffff}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e) mknodat$null(0xffffffffffffff9c, 0x0, 0x1, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x2d, 0xd, 0x2041000, 0xc000, 0xff, 0x8, 0x6, 0x0, 0x0, 0x40, 0x6}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x10, 0x400}}, 0x30) 9.439358649s ago: executing program 4 (id=4623): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x12f977180753c243) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x3, 0x0, &(0x7f0000000140), 0x9, 0xf3, 0x10cf, 0x40, 0xc336, 0x1, 0x7, 'syz0\x00'}) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0xffffffffffffffff, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 8.288865404s ago: executing program 0 (id=4626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x2000cc0, r0}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2406c010}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r0}, 0x38) 8.255152047s ago: executing program 1 (id=4627): arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000040)) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x4c9, 0x1, 0xb2, 0x401, 0xffffffff, 0x2, 0xfff}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000240)={0x1, 0x7, @status={[0x7, 0x9, 0x4, 0x7, 0x41e5bca3, 0x9]}, [0xffff, 0x9, 0x7, 0x1c5a0, 0x3, 0xffff, 0x3, 0x0, 0x1, 0xc31200, 0x9, 0x6, 0x10fe5932, 0x1, 0x7, 0xffffffffffffffff, 0xf, 0xfffffffffffff714, 0x8, 0x6, 0x4, 0xbd8, 0x7, 0x2, 0x7, 0x5, 0x2, 0x100000000, 0x92dca27, 0x4, 0x18000000000, 0x0, 0x4, 0x7f, 0xe, 0x0, 0xff, 0x6, 0x3, 0x1, 0x1000, 0x49e9bafd, 0x9, 0x7f, 0x3, 0x3, 0x5, 0x0, 0x4, 0x9, 0x6a, 0x6, 0x5, 0x9, 0x0, 0x5, 0x400, 0xffffffffffffffff, 0xffffffffffff3f24, 0x64bf, 0x6, 0x8000000000000001, 0x3, 0xffffffff]}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0xfffffffd, 0xb77, 0x1012, 0x1, 0xa, 0x6, 0x2}}) 7.974730981s ago: executing program 5 (id=4628): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, 0x0) 7.97426175s ago: executing program 1 (id=4629): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x10001) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.391166059s ago: executing program 1 (id=4630): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, r6) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 6.389328492s ago: executing program 0 (id=4631): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_pgetevents(r3, 0x1, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000006a00010027bd83000000000004000900"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4c830) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x66, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xf, &(0x7f0000019180)=ANY=[@ANYBLOB="5f000000000400000018110000a4f69a6b0268f4a990c1cb36dc4e9e2dc5eb0b9707cb0ae16f87bf45421c41f456e8b6d1a2658a1cb6903a00c2b058254162b46dc6e8", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x73, &(0x7f0000019080)=""/115, 0x41000, 0x2, '\x00', 0x0, @fallback=0x23, r1, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r5, r1, 0x2, &(0x7f0000000740)=[r7, r6, r0, r0, r7], &(0x7f0000000780)=[{0x1, 0x3, 0x1, 0x7}, {0x2, 0x4, 0x5, 0x1}], 0x10, 0x4}, 0x94) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, r1, 0x0, 0x0, 0x400000000000000}]) 6.318250199s ago: executing program 5 (id=4632): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 6.218011355s ago: executing program 1 (id=4633): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r4, 0x0, &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x14, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x1, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10000, 0x590f}}, './file0\x00'}) sendmsg$nl_netfilter(r11, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x26c, 0x0, 0x8, 0x301, 0x70bd29, 0x25dfdbfb, {0x3, 0x0, 0x3}, [@generic="89acf95e94d9a412fdebd91eaf1e38217d84cfe31e3eebaca1ea1d8f6036e94c03bf9110bcff47829b5aaa444c46f660133d7a5396a27d72530da73e2798b5798197d72cb9c2be27b4171282c0a442c3ef9e1daed5bf6984922c08ff3cca170b051940254da48b0a74d3bd8c2bf882253a06e9b7f54ed0ecab5d93117fff4296", @generic="b07b7555f3b9bb20ffde4ac109544409d268c3d05ead72bd4cc57911423b889d7095f14f5bc9352eda97723fb59b5e60e495989fb9556af022edc02724fd75f4c3b752804dbff977d4c59de9f91a5b4f224b746d0b30c4e96354ef26b51519832bd59ea93e7f7a8bd983f0c16ac01f36b9e413cc33143ef32f72b5571174c7fd7fd3d509de6111a1c7fa6b9d857ce7dcfa6921649c96833bc4dfea1aae35807ebbed236c23927d", @generic="12340db427109c9fb347c074662273e59b40c940aa3705eb4f09d5136140b45078642d668cfc45b3437ef9f7a10cb50d399f61004c5ccb565f1a7f10e559bd4b96a01f37", @typed={0x8, 0xe8, 0x0, 0x0, @fd=r11}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0xd4, 0x10b, 0x0, 0x0, @binary="c96abaa07cc9d928d13f2fc62c5d6a9821dca703333cdfb64dd31b3c06ba3a5422bb1309455260547f1b4e5d010e4c5a8436b2193f756da04b12a4110f6b39a6310b4891e20bc9a29dadb98db31bda98d0e303b61cb1c23ad5189a25453a92f0a04300ae6e5516b90838124ff9d2e47bdda22c6c9ddf28182b35fd93d12dbacbdf711467e24c1ead2e1b1fa13b7c51b3941b31cc694f812c928df5cfc158c8091499785547885ad2bdaf7fd2a8ed874c656bb6a8214f90f9eed95feb901e57567be5d0c0bcd4455a1de5cf2f7a09410c"}, @typed={0x4, 0x13c}, @typed={0x4, 0x66}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24000004}, 0x80d5) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r12, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c", @ANYRES32=r12, @ANYBLOB="eb"], 0x40c}}, 0x0) ioctl$NS_GET_PARENT(r11, 0xb702, 0x0) 6.162826506s ago: executing program 5 (id=4634): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r3, 0x0, &(0x7f0000000180)={'syz', 0x0}, r4) add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) timerfd_create(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 5.132417953s ago: executing program 5 (id=4635): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002240)=ANY=[], 0xef8}, 0x1, 0x7}, 0x20000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2d7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb781", 0x4d}, {&(0x7f0000000900)="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", 0x1f9}, {&(0x7f00000000c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045", 0x33}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) dup(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10b400, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) 4.560528212s ago: executing program 1 (id=4636): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) write$sndseq(r3, &(0x7f0000000000), 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, r5) add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 4.521764702s ago: executing program 2 (id=4637): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) keyctl$read(0x2, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, r5) add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 4.470198661s ago: executing program 0 (id=4638): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x5, 0x3, 0x2006, 0xf1, 0x20008, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x3, 0x516f, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x9f, 0x6, 0x4, 0xee, 0x4, 0x8000]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x5574) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) 3.538443934s ago: executing program 2 (id=4639): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100300000040"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) getpid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 3.244763132s ago: executing program 5 (id=4640): r0 = socket$nl_generic(0x11, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x40) mount$fuse(0x0, 0x0, 0x0, 0x1048001, 0x0) chdir(&(0x7f0000000080)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1001b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x2, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x0, 0x7}, {0xfff3, 0xfff2}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="57ffffe3", @ANYRES16=r3, @ANYBLOB="000228bd7000fedbdf256600000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000005b000000080022010c02000008002600b41400000500190105000000080027000200000008002201c0020000050018010f000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000000)={0x2, 0x2, 0xcfcd4592ae3d59aa, {0x103b, 0x3, 0x6, 0x90}}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r5) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 3.168188543s ago: executing program 4 (id=4641): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x10001) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2001000010003b620000000000000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.005088458s ago: executing program 1 (id=4642): syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000360000/0x2000)=nil, 0x2000, 0x11) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) syz_usb_connect(0x1, 0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r4, &(0x7f0000001e80)=""/96, 0x60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) 803.30952ms ago: executing program 2 (id=4643): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r6, r7, 0x0, 0x110003) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100002, 0x8, 0x16, "00000000000500"}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f00004c2000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r8, 0xc10c3000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000400000000001c00010000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @val=@perf_event={0x8}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close_range(r5, r8, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 598.169752ms ago: executing program 4 (id=4644): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 328.871141ms ago: executing program 5 (id=4645): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x1, @private2, 0xff}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1}, &(0x7f0000000700)=0x8) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x1034, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {0x0, 0x9}, {0xf, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1008, 0x2, [@TCA_BPF_NAME={0x1003, 0x7, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}]}}]}, 0x1034}, 0x1, 0x0, 0x0, 0x1}, 0x20000802) clock_adjtime(0x0, &(0x7f00000003c0)={0x66b9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000000000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x44, r7, 0x5, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000000}, 0x4004081) socket$packet(0x11, 0x3, 0x300) 202.080625ms ago: executing program 2 (id=4646): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r4, 0x0, &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x14, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x1, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10000, 0x590f}}, './file0\x00'}) sendmsg$nl_netfilter(r11, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x26c, 0x0, 0x8, 0x301, 0x70bd29, 0x25dfdbfb, {0x3, 0x0, 0x3}, [@generic="89acf95e94d9a412fdebd91eaf1e38217d84cfe31e3eebaca1ea1d8f6036e94c03bf9110bcff47829b5aaa444c46f660133d7a5396a27d72530da73e2798b5798197d72cb9c2be27b4171282c0a442c3ef9e1daed5bf6984922c08ff3cca170b051940254da48b0a74d3bd8c2bf882253a06e9b7f54ed0ecab5d93117fff4296", @generic="b07b7555f3b9bb20ffde4ac109544409d268c3d05ead72bd4cc57911423b889d7095f14f5bc9352eda97723fb59b5e60e495989fb9556af022edc02724fd75f4c3b752804dbff977d4c59de9f91a5b4f224b746d0b30c4e96354ef26b51519832bd59ea93e7f7a8bd983f0c16ac01f36b9e413cc33143ef32f72b5571174c7fd7fd3d509de6111a1c7fa6b9d857ce7dcfa6921649c96833bc4dfea1aae35807ebbed236c23927d", @generic="12340db427109c9fb347c074662273e59b40c940aa3705eb4f09d5136140b45078642d668cfc45b3437ef9f7a10cb50d399f61004c5ccb565f1a7f10e559bd4b96a01f37", @typed={0x8, 0xe8, 0x0, 0x0, @fd=r11}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0xd4, 0x10b, 0x0, 0x0, @binary="c96abaa07cc9d928d13f2fc62c5d6a9821dca703333cdfb64dd31b3c06ba3a5422bb1309455260547f1b4e5d010e4c5a8436b2193f756da04b12a4110f6b39a6310b4891e20bc9a29dadb98db31bda98d0e303b61cb1c23ad5189a25453a92f0a04300ae6e5516b90838124ff9d2e47bdda22c6c9ddf28182b35fd93d12dbacbdf711467e24c1ead2e1b1fa13b7c51b3941b31cc694f812c928df5cfc158c8091499785547885ad2bdaf7fd2a8ed874c656bb6a8214f90f9eed95feb901e57567be5d0c0bcd4455a1de5cf2f7a09410c"}, @typed={0x4, 0x13c}, @typed={0x4, 0x66}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24000004}, 0x80d5) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r12, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c", @ANYRES32=r12, @ANYBLOB="eb"], 0x40c}}, 0x0) ioctl$NS_GET_PARENT(r11, 0xb702, 0x0) 0s ago: executing program 4 (id=4647): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0xffffffff}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xffffffff}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e) mknodat$null(0xffffffffffffff9c, 0x0, 0x1, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x2d, 0xd, 0x2041000, 0xc000, 0xff, 0x8, 0x6, 0x0, 0x0, 0x40, 0x6}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x10, 0x400}}, 0x30) kernel console output (not intermixed with test programs): I: 0000000000000004 [ 1284.752076][T23485] RBP: 00007f64a4d1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.752086][T23485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.752096][T23485] R13: 00007f64a4016038 R14: 00007f64a4015fa0 R15: 00007ffd120ddef8 [ 1284.752121][T23485] [ 1285.143115][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.197346][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.507383][T18954] usb 6-1: USB disconnect, device number 67 [ 1285.871918][T18954] usblp0: removed [ 1286.242326][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.276114][ T30] audit: type=1400 audit(1782492037.105:1705): avc: denied { write } for pid=23483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1286.622347][T18954] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1286.632642][T18953] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1286.683425][ T30] audit: type=1400 audit(1782492037.514:1706): avc: denied { write } for pid=23514 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1286.814110][T18953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.828321][T18954] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 1286.848089][T18953] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1286.863063][T18954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.895668][T18953] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1286.912584][T18954] usb 6-1: config 0 has no interface number 0 [ 1286.924047][T18954] usb 6-1: config 0 interface 205 has no altsetting 0 [ 1286.950658][T18953] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1286.976629][T18953] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1286.989170][T18954] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1287.006168][T18954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.014975][T18953] usb 2-1: Manufacturer: syz [ 1287.029463][T18954] usb 6-1: Product: syz [ 1287.037140][T18953] usb 2-1: config 0 descriptor?? [ 1287.048077][T18954] usb 6-1: Manufacturer: syz [ 1287.062489][T18954] usb 6-1: SerialNumber: syz [ 1287.068396][T18953] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1287.084387][T18954] usb 6-1: config 0 descriptor?? [ 1287.118611][T18954] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1287.138345][T18954] dvb-usb: bulk message failed: -22 (3/0) [ 1287.177065][T18954] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1287.198515][T18954] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1287.220859][T18954] usb 6-1: media controller created [ 1287.243066][T18954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1287.276673][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.311042][T18954] dvb-usb: bulk message failed: -22 (6/0) [ 1287.349982][T18954] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1287.418548][T18954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input102 [ 1287.763830][T23535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4174'. [ 1287.782344][T18954] dvb-usb: schedule remote query interval to 150 msecs. [ 1287.794680][T18954] dvb-usb: bulk message failed: -22 (3/0) [ 1287.797424][T18386] kernel read not supported for file /dsp (pid: 18386 comm: kworker/1:5) [ 1287.822336][T18954] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1287.966543][T18954] dvb-usb: bulk message failed: -22 (1/0) [ 1287.991092][T23503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.023857][T18954] dvb-usb: error while querying for an remote control event. [ 1288.152908][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.174126][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.182539][T18953] dvb-usb: bulk message failed: -22 (1/0) [ 1289.188319][T18953] dvb-usb: error while querying for an remote control event. [ 1289.202244][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.266338][ T30] audit: type=1400 audit(1782492040.044:1707): avc: denied { write } for pid=23517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.355804][T18953] dvb-usb: bulk message failed: -22 (1/0) [ 1289.376710][T23503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.394536][T18953] dvb-usb: error while querying for an remote control event. [ 1289.466679][ T30] audit: type=1400 audit(1782492040.295:1708): avc: denied { write } for pid=23544 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.610320][T23548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.644405][T23548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.672698][T18953] dvb-usb: bulk message failed: -22 (1/0) [ 1289.688340][T18953] dvb-usb: error while querying for an remote control event. [ 1289.883410][T18953] dvb-usb: bulk message failed: -22 (1/0) [ 1290.007002][T18953] dvb-usb: error while querying for an remote control event. [ 1290.212779][T23560] geneve2: entered promiscuous mode [ 1290.218671][T23560] geneve2: entered allmulticast mode [ 1290.377573][T21703] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1290.896075][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.386904][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1291.393525][ T9] dvb-usb: error while querying for an remote control event. [ 1291.439086][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.473822][T21703] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1291.505280][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.525715][T21703] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1291.553104][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1291.567641][T21703] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1291.588043][ T1220] usb 2-1: USB disconnect, device number 122 [ 1291.600900][ T9] dvb-usb: error while querying for an remote control event. [ 1291.644442][T21703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.833280][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1291.855058][ T9] dvb-usb: error while querying for an remote control event. [ 1291.915113][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.088956][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1292.121312][ T9] dvb-usb: error while querying for an remote control event. [ 1292.801519][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.830041][T21703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.888313][T21703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.951216][T23575] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1292.966955][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.020877][T18953] dvb-usb: bulk message failed: -22 (1/0) [ 1293.050435][T18953] dvb-usb: error while querying for an remote control event. [ 1293.076503][T18954] usb 6-1: USB disconnect, device number 68 [ 1293.112583][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.182351][ T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1293.230819][T18954] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1293.303225][ T30] audit: type=1400 audit(1782492044.105:1709): avc: denied { write } for pid=23555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.436527][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.464595][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.499932][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1293.524770][ T30] audit: type=1400 audit(1782492044.355:1710): avc: denied { write } for pid=23590 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.605715][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.621992][ T9] usb 3-1: config 0 descriptor?? [ 1293.749533][T23591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.842961][T23591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.997010][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.036886][T23591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.131012][T23591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.207687][ T9] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 1294.381398][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0023/input/input103 [ 1294.401591][T23574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.426955][T23574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.454940][T23574] 8021q: VLANs not supported on ip6gre0 [ 1294.600718][ T9] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1294.773144][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.776069][ T9] usb 3-1: USB disconnect, device number 124 [ 1294.787291][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.883638][T23612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.890893][T23612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.706140][T23613] fido_id[23613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1295.819150][T23619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4189'. [ 1295.837213][ T30] audit: type=1400 audit(1782492046.665:1711): avc: denied { write } for pid=23595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1296.261668][ T1220] kernel read not supported for file /dsp (pid: 1220 comm: kworker/1:2) [ 1296.685889][T18953] net_ratelimit: 2 callbacks suppressed [ 1296.685906][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.742354][T18954] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1297.018921][T18954] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1297.112499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.201510][T18954] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1297.413762][ T30] audit: type=1400 audit(1782492048.245:1712): avc: denied { write } for pid=23624 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.436916][T18954] usb 2-1: Product: syz [ 1297.451701][T18954] usb 2-1: Manufacturer: syz [ 1297.511666][T18954] usb 2-1: SerialNumber: syz [ 1297.512645][T18383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.557734][T18954] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1297.756857][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.775386][T23621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.799414][T23621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.209486][T18954] vp7045: USB control message 'out' went wrong. [ 1298.237508][T18954] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1298.277631][T18954] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1298.307121][T18954] usb 2-1: USB disconnect, device number 123 [ 1298.554404][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.868836][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.552555][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.030436][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.064520][T23641] ipvlan0: entered allmulticast mode [ 1301.070289][T23641] batadv_slave_1: entered allmulticast mode [ 1301.220426][T23641] batman_adv: batadv0: Adding interface: ipvlan0 [ 1301.236917][T23641] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.292764][T23641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.303748][T23641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.322709][T23641] batman_adv: batadv0: Interface activated: ipvlan0 [ 1301.517103][T18954] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1301.742495][T18954] usb 2-1: Using ep0 maxpacket: 8 [ 1301.768448][T18954] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 1301.857374][T23656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.128829][T23656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.155878][T18954] usb 2-1: config 6 has no interface number 0 [ 1302.195458][T18954] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1302.195467][ T30] audit: type=1400 audit(1782492053.015:1713): avc: denied { write } for pid=23634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.209021][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.286009][T18954] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1302.333790][T23656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.355176][T18954] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1302.453853][T18954] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1302.473225][T18954] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1302.481577][T23656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.491665][T18954] usb 2-1: Product: syz [ 1302.502519][T18954] usb 2-1: Manufacturer: syz [ 1303.465619][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.491431][T18954] usb 2-1: SerialNumber: syz [ 1303.614989][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.750186][T18954] hso 2-1:6.2: Failed to find BULK eps [ 1303.780828][ T30] audit: type=1400 audit(1782492054.605:1714): avc: denied { write } for pid=23668 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.962160][T23647] CUSE: info not properly terminated [ 1303.980953][T23681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4201'. [ 1304.001846][T18954] usb 2-1: USB disconnect, device number 124 [ 1304.410463][T18383] kernel read not supported for file /dsp (pid: 18383 comm: kworker/1:1) [ 1304.733639][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.424073][ T30] audit: type=1400 audit(1782492056.245:1715): avc: denied { map } for pid=23686 comm="syz.1.4203" path="socket:[92979]" dev="sockfs" ino=92979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1305.512630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.632802][ T30] audit: type=1400 audit(1782492056.245:1716): avc: denied { accept } for pid=23686 comm="syz.1.4203" path="socket:[92979]" dev="sockfs" ino=92979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1306.662899][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.142382][T18383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.433661][ T30] audit: type=1400 audit(1782492058.255:1717): avc: denied { create } for pid=23700 comm="syz.5.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1307.479931][ T30] audit: type=1400 audit(1782492058.285:1718): avc: denied { connect } for pid=23700 comm="syz.5.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1307.515395][ T30] audit: type=1400 audit(1782492058.305:1719): avc: denied { write } for pid=23700 comm="syz.5.4208" laddr=fe80::9c6f:85ff:fef2:7063 lport=48383 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1307.548685][T18383] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1307.602886][T18954] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1307.730711][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.811167][T18383] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1307.822567][T18383] usb 3-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 1307.843345][T18383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.072049][T18954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.082939][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.097650][T18383] usb 3-1: config 0 descriptor?? [ 1308.122594][T18954] usb 2-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 1308.160140][T18954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.191027][T18954] usb 2-1: config 0 descriptor?? [ 1308.215418][T18954] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1308.593022][T23719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.604102][T18383] usbhid 3-1:0.0: can't add hid device: -71 [ 1308.628772][T18383] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1308.696484][T23719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.741746][T23721] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4211'. [ 1309.286126][T18383] usb 3-1: USB disconnect, device number 125 [ 1309.380526][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.483787][T18954] pwc: send_video_command error -71 [ 1309.490020][T18954] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1309.497982][T18954] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1309.509804][T18954] usb 2-1: USB disconnect, device number 125 [ 1309.646323][T23716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.656800][T23716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.817283][ T9] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1310.025278][ T9] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 1310.035622][T23732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4214'. [ 1310.050407][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.155787][T18383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.462731][T18383] kernel read not supported for file /dsp (pid: 18383 comm: kworker/1:1) [ 1310.811360][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.835142][ T9] usb 6-1: config 0 has no interface number 0 [ 1310.841297][ T9] usb 6-1: config 0 interface 205 has no altsetting 0 [ 1311.121393][ T30] audit: type=1400 audit(1782492061.945:1720): avc: denied { mount } for pid=23739 comm="syz.2.4218" name="/" dev="ramfs" ino=93067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1311.145638][ T30] audit: type=1400 audit(1782492061.945:1721): avc: denied { getattr } for pid=23737 comm="syz.4.4217" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1312.097011][ T30] audit: type=1400 audit(1782492062.275:1722): avc: denied { read } for pid=23737 comm="syz.4.4217" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1312.122106][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.302879][ T9] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1312.324944][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.339918][ T9] usb 6-1: Product: syz [ 1312.348225][ T9] usb 6-1: Manufacturer: syz [ 1312.358098][ T9] usb 6-1: SerialNumber: syz [ 1312.374095][T23751] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4219'. [ 1312.421451][ T9] usb 6-1: config 0 descriptor?? [ 1312.454921][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1312.519108][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1312.687356][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1312.807447][T23758] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4222'. [ 1313.028057][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1313.040563][ T9] usb 6-1: media controller created [ 1313.048320][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1313.085903][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1313.101593][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1313.147905][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input104 [ 1313.174226][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1313.183428][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1313.193036][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.201530][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.213019][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1313.255942][ T9] usb 6-1: USB disconnect, device number 69 [ 1313.349842][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1313.449552][ T30] audit: type=1400 audit(1782492064.275:1723): avc: denied { setopt } for pid=23763 comm="syz.5.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1313.627461][T23774] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4228'. [ 1314.071219][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 1314.243821][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.355205][ T30] audit: type=1400 audit(1782492065.185:1724): avc: denied { execute } for pid=23777 comm="syz.4.4229" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=93160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1314.490524][ T30] audit: type=1400 audit(1782492065.285:1725): avc: denied { read append } for pid=23781 comm="syz.0.4230" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1314.542179][T23782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1314.555172][T23782] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1314.633493][ T30] audit: type=1400 audit(1782492065.285:1726): avc: denied { open } for pid=23781 comm="syz.0.4230" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1314.668100][ T30] audit: type=1400 audit(1782492065.425:1727): avc: denied { getopt } for pid=23784 comm="syz.1.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1315.293036][T14166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.305115][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.054340][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.147682][ T30] audit: type=1400 audit(1782492066.975:1728): avc: denied { setopt } for pid=23796 comm="syz.2.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1316.272480][T23803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4235'. [ 1316.273912][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.360389][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.582571][T21424] Bluetooth: hci2: command 0x0406 tx timeout [ 1316.635458][T21424] Bluetooth: hci3: command 0x0406 tx timeout [ 1316.644267][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.660001][T23782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1316.709600][T23811] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4236'. [ 1316.828425][ T30] audit: type=1400 audit(1782492067.655:1729): avc: denied { create } for pid=23814 comm="syz.2.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1316.829557][T23815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.075222][T23820] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 1317.092215][T23819] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 1317.139232][T23833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.229619][T23833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.814041][T23843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4242'. [ 1317.888096][T23843] erspan0: entered promiscuous mode [ 1317.903856][T23843] macvtap1: entered promiscuous mode [ 1317.922103][T23843] macvtap1: entered allmulticast mode [ 1317.928489][T23843] erspan0: entered allmulticast mode [ 1317.958457][T23847] erspan0: left allmulticast mode [ 1317.963864][T23847] erspan0: left promiscuous mode [ 1317.970563][T23847] macvtap1: left promiscuous mode [ 1317.975677][T23847] macvtap1: left allmulticast mode [ 1318.018884][ T30] audit: type=1400 audit(1782492068.845:1730): avc: denied { bind } for pid=23844 comm="syz.5.4244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1318.051263][ T30] audit: type=1400 audit(1782492068.865:1731): avc: denied { node_bind } for pid=23844 comm="syz.5.4244" saddr=100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1318.652526][ T4931] Bluetooth: hci2: command 0x0406 tx timeout [ 1318.713704][ T4931] Bluetooth: hci3: command 0x0406 tx timeout [ 1319.408276][ T9] net_ratelimit: 9 callbacks suppressed [ 1319.408295][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.672677][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.042085][ T30] audit: type=1400 audit(1782492070.655:1732): avc: denied { unlink } for pid=23870 comm="syz.4.4251" name="#17" dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1320.074206][ T30] audit: type=1400 audit(1782492070.685:1733): avc: denied { mount } for pid=23870 comm="syz.4.4251" name="/" dev="overlay" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1320.354863][ T30] audit: type=1400 audit(1782492071.187:1734): avc: denied { unmount } for pid=18022 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1320.561512][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.716675][ T30] audit: type=1400 audit(1782492071.517:1735): avc: denied { bind } for pid=23880 comm="syz.2.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1320.951262][ T30] audit: type=1400 audit(1782492071.517:1736): avc: denied { listen } for pid=23880 comm="syz.2.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1320.973746][ T30] audit: type=1400 audit(1782492071.537:1737): avc: denied { bind } for pid=23880 comm="syz.2.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1321.003306][ T30] audit: type=1400 audit(1782492071.547:1738): avc: denied { name_bind } for pid=23880 comm="syz.2.4255" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1321.034959][ T30] audit: type=1400 audit(1782492071.547:1739): avc: denied { node_bind } for pid=23880 comm="syz.2.4255" saddr=10.1.1.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1321.064783][ T30] audit: type=1400 audit(1782492071.777:1740): avc: denied { read } for pid=23890 comm="syz.4.4256" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1321.099257][ T30] audit: type=1400 audit(1782492071.777:1741): avc: denied { open } for pid=23890 comm="syz.4.4256" path="/dev/binderfs/binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1321.404928][T23903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4260'. [ 1321.512876][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.521555][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.535015][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.762806][T18383] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1322.152628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.562592][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.564641][T18383] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.583071][T18383] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1322.595062][T18383] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1322.620625][T23914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.657315][T23914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.675839][T23914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.692757][T18383] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1322.702610][T18383] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1322.713486][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.765795][T23914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.785286][T18383] usb 2-1: Manufacturer: syz [ 1322.817715][T18383] usb 2-1: config 0 descriptor?? [ 1322.847009][T18383] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1323.164884][ T9] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1323.398016][T23921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.438803][T23921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.478352][ T9] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 1323.508360][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.551209][ T9] usb 3-1: config 0 has no interface number 0 [ 1323.573038][ T9] usb 3-1: config 0 interface 205 has no altsetting 0 [ 1323.594433][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.669321][ T9] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1323.693915][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.718823][ T9] usb 3-1: Product: syz [ 1323.734464][ T9] usb 3-1: Manufacturer: syz [ 1323.745209][ T9] usb 3-1: SerialNumber: syz [ 1323.764253][T14166] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.798757][T14166] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.826373][ T9] usb 3-1: config 0 descriptor?? [ 1323.837361][T14166] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.883803][T14166] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.902174][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1323.927112][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1323.968518][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1324.027987][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1324.069836][ T9] usb 3-1: media controller created [ 1324.098651][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1324.114555][T23939] netlink: 'syz.5.4269': attribute type 2 has an invalid length. [ 1324.145750][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1324.157910][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1324.197999][T23916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.207760][T23916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.222747][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input105 [ 1324.251708][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1324.268656][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1324.312691][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1324.367987][T23936] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1324.422407][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1324.435490][ T9] dvb-usb: error while querying for an remote control event. [ 1324.513028][T18383] usb 2-1: USB disconnect, device number 126 [ 1324.632657][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.642599][T11402] dvb-usb: bulk message failed: -22 (1/0) [ 1324.659192][T11402] dvb-usb: error while querying for an remote control event. [ 1324.719203][T23948] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4270'. [ 1324.853671][T11402] dvb-usb: bulk message failed: -22 (1/0) [ 1324.881408][T11402] dvb-usb: error while querying for an remote control event. [ 1325.082632][T11402] dvb-usb: bulk message failed: -22 (1/0) [ 1325.090727][T11402] dvb-usb: error while querying for an remote control event. [ 1325.266646][ T5745] dvb-usb: bulk message failed: -22 (1/0) [ 1325.279670][ T5745] dvb-usb: error while querying for an remote control event. [ 1325.475506][ T5745] dvb-usb: bulk message failed: -22 (1/0) [ 1325.495653][ T5745] dvb-usb: error while querying for an remote control event. [ 1325.545826][T11402] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1325.672438][ T5745] dvb-usb: bulk message failed: -22 (1/0) [ 1325.691421][T23963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.700863][ T5745] dvb-usb: error while querying for an remote control event. [ 1325.708449][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.717588][T11402] usb 2-1: Using ep0 maxpacket: 32 [ 1325.734013][T23963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.749122][T11402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.752713][T18383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.799536][T11402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.814977][T23963] dvb-usb: bulk message failed: -22 (2/0) [ 1325.857701][T11402] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1325.895849][T11402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.919151][T11402] usb 2-1: config 0 descriptor?? [ 1325.925153][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1325.938346][ T9] dvb-usb: error while querying for an remote control event. [ 1325.966408][T11402] hub 2-1:0.0: USB hub found [ 1326.067296][T18383] usb 3-1: USB disconnect, device number 126 [ 1326.165459][T11402] hub 2-1:0.0: 16 ports detected [ 1326.180746][T11402] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1326.207237][T18383] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1326.776114][T14166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.784229][T14166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.807997][T18383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.856790][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.273644][T18383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.005159][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.027588][T11402] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 1328.042565][T18383] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1328.260710][T23994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.297195][T23994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.333501][T18383] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1328.371962][T18383] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1328.385186][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1328.385201][ T30] audit: type=1400 audit(1782492079.197:1743): avc: denied { getopt } for pid=23995 comm="syz.2.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1328.421465][T18383] usb 6-1: Product: syz [ 1328.423005][T23994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.445713][T18383] usb 6-1: Manufacturer: syz [ 1328.452498][T18383] usb 6-1: SerialNumber: syz [ 1328.463690][T11402] usb 2-1: USB disconnect, device number 127 [ 1328.485435][T23994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.534568][T18383] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1328.735510][T23986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.752979][T23986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.792724][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.913115][T18383] vp7045: USB control message 'out' went wrong. [ 1328.926521][T18383] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1328.943460][T18383] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1329.179088][T18383] usb 6-1: USB disconnect, device number 70 [ 1329.848038][T24011] macsec1: entered promiscuous mode [ 1329.853767][T24011] virt_wifi0: entered promiscuous mode [ 1330.540798][T11402] net_ratelimit: 1 callbacks suppressed [ 1330.540814][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.822367][T18383] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1330.986038][T18383] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.007106][T18383] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1331.028073][T18383] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1331.045588][T18383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1331.062208][T18383] usb 3-1: SerialNumber: syz [ 1331.301352][T18383] usb 3-1: 0:2 : does not exist [ 1331.404182][T18383] usb 3-1: USB disconnect, device number 127 [ 1331.554855][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1331.596498][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.833315][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.851210][T24034] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4297'. [ 1332.027035][T24040] netlink: 'syz.2.4299': attribute type 49 has an invalid length. [ 1332.039847][ T30] audit: type=1400 audit(1782492082.867:1744): avc: denied { getopt } for pid=24039 comm="syz.2.4299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1332.112440][T18383] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1332.278483][T18383] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1332.298668][T18383] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1332.337957][T24048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.351175][T18383] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1332.361748][T18383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.370901][T18383] usb 6-1: Product: syz [ 1332.380301][T24048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.389012][T18383] usb 6-1: Manufacturer: syz [ 1332.397429][T14176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.409717][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.417910][T18383] usb 6-1: SerialNumber: syz [ 1332.422699][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.616870][ T30] audit: type=1400 audit(1782492083.427:1745): avc: denied { connect } for pid=24055 comm="syz.1.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1332.657967][ T30] audit: type=1326 audit(1782492083.477:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.1.4303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1332.699042][ T30] audit: type=1326 audit(1782492083.477:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.1.4303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1332.725581][ T30] audit: type=1326 audit(1782492083.477:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.1.4303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1332.759444][ T30] audit: type=1326 audit(1782492083.477:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.1.4303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1332.822753][ T30] audit: type=1326 audit(1782492083.477:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.1.4303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1332.991872][ T30] audit: type=1326 audit(1782492083.477:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.1.4303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1333.114136][ T30] audit: type=1326 audit(1782492083.477:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.1.4303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1333.459274][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.376919][T11402] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1334.872808][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.885323][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.950719][T18383] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1335.117864][T11402] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 1335.157128][T11402] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.214084][T11402] usb 3-1: config 0 has no interface number 0 [ 1335.246896][T11402] usb 3-1: config 0 interface 205 has no altsetting 0 [ 1335.261583][T18383] usb 6-1: USB disconnect, device number 71 [ 1335.263750][T24083] netlink: 'syz.5.4311': attribute type 1 has an invalid length. [ 1335.285619][T11402] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1335.327039][T11402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.357125][T11402] usb 3-1: Product: syz [ 1335.387470][T11402] usb 3-1: Manufacturer: syz [ 1335.398877][T24083] netlink: 'syz.5.4311': attribute type 2 has an invalid length. [ 1335.421362][T11402] usb 3-1: SerialNumber: syz [ 1335.448338][T11402] usb 3-1: config 0 descriptor?? [ 1335.679686][T11402] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1336.549422][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.558762][T11402] dvb-usb: bulk message failed: -22 (3/0) [ 1336.925804][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.144945][T11402] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1337.202246][T11402] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1337.234050][T24083] input: syz1 as /devices/virtual/input/input107 [ 1337.268638][T11402] usb 3-1: media controller created [ 1337.325802][T11402] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1337.411028][T11402] dvb-usb: bulk message failed: -22 (6/0) [ 1337.427485][T11402] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1337.489398][T11402] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input108 [ 1337.544354][T11402] dvb-usb: schedule remote query interval to 150 msecs. [ 1337.572354][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1337.572497][T11402] dvb-usb: bulk message failed: -22 (3/0) [ 1337.613601][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.652390][T11402] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1337.732472][T11402] dvb-usb: bulk message failed: -22 (1/0) [ 1337.744622][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1337.757261][T11402] dvb-usb: error while querying for an remote control event. [ 1337.770620][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.824187][ T9] usb 2-1: config 0 descriptor?? [ 1337.913337][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.943346][T11402] dvb-usb: bulk message failed: -22 (1/0) [ 1337.955232][T11402] dvb-usb: error while querying for an remote control event. [ 1338.152520][T11402] dvb-usb: bulk message failed: -22 (1/0) [ 1338.154023][T14176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.165456][T11402] dvb-usb: error while querying for an remote control event. [ 1338.171495][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.365378][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.496884][T24116] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4317'. [ 1338.546562][ T5745] dvb-usb: bulk message failed: -22 (1/0) [ 1338.546854][ T5745] dvb-usb: error while querying for an remote control event. [ 1338.702601][T18953] dvb-usb: bulk message failed: -22 (1/0) [ 1338.702630][T18953] dvb-usb: error while querying for an remote control event. [ 1338.862357][T18953] dvb-usb: bulk message failed: -22 (1/0) [ 1338.870200][T18953] dvb-usb: error while querying for an remote control event. [ 1338.889213][ T5745] usb 3-1: USB disconnect, device number 2 [ 1338.968410][ T5745] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1339.365183][ T9] usb 2-1: Cannot set MAC address [ 1339.376395][ T9] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1339.404658][ T9] usb 2-1: USB disconnect, device number 2 [ 1339.433100][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.452696][ T30] audit: type=1400 audit(1782492090.269:1753): avc: denied { write } for pid=24120 comm="syz.2.4320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1339.476939][ T5745] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1339.645684][ T5745] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1339.654942][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.663041][ T5745] usb 6-1: Product: syz [ 1339.667297][ T5745] usb 6-1: Manufacturer: syz [ 1339.671914][ T5745] usb 6-1: SerialNumber: syz [ 1340.158610][ T5745] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1340.244258][ T5745] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1340.484462][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.023271][T24128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4322'. [ 1341.620739][T18953] net_ratelimit: 1 callbacks suppressed [ 1341.620754][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.769757][T24150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.786607][T24151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4329'. [ 1341.790668][T24150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.810793][T24151] IPv6: Can't replace route, no match found [ 1342.324112][ T5745] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1342.530225][ T30] audit: type=1400 audit(1782492093.349:1754): avc: denied { ioctl } for pid=24167 comm="syz.4.4333" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1342.568276][ T5745] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 1342.618890][ T5745] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1342.636241][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.668834][ T5745] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1342.690819][ T5745] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1342.710366][ T5745] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1342.738085][ T5745] usb 6-1: USB disconnect, device number 72 [ 1343.674285][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.081706][T14176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.092199][ T30] audit: type=1400 audit(1782492094.909:1755): avc: denied { mount } for pid=24184 comm="syz.4.4339" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1344.115890][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.132435][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.141199][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.177404][ T4931] Bluetooth: hci2: unexpected event 0x14 length: 11 > 6 [ 1344.380871][T24191] fuse: Bad value for 'group_id' [ 1344.409791][T24191] fuse: Bad value for 'group_id' [ 1344.953026][T24198] FAULT_INJECTION: forcing a failure. [ 1344.953026][T24198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.989432][T24198] CPU: 0 UID: 0 PID: 24198 Comm: syz.2.4341 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.989461][T24198] Tainted: [L]=SOFTLOCKUP [ 1344.989474][T24198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1344.989483][T24198] Call Trace: [ 1344.989489][T24198] [ 1344.989496][T24198] dump_stack_lvl+0x100/0x190 [ 1344.989524][T24198] should_fail_ex.cold+0x5/0xa [ 1344.989549][T24198] _copy_from_user+0x2e/0xd0 [ 1344.989568][T24198] __sys_bpf+0x2f5/0x4e80 [ 1344.989596][T24198] ? __pfx___sys_bpf+0x10/0x10 [ 1344.989611][T24198] ? find_held_lock+0x2b/0x80 [ 1344.989627][T24198] ? get_pid_task+0xfc/0x250 [ 1344.989643][T24198] ? get_pid_task+0xfc/0x250 [ 1344.989662][T24198] ? find_held_lock+0x2b/0x80 [ 1344.989682][T24198] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1344.989699][T24198] ? find_held_lock+0x2b/0x80 [ 1344.989714][T24198] ? ksys_write+0x190/0x250 [ 1344.989738][T24198] ? ksys_write+0x190/0x250 [ 1344.989778][T24198] ? fput+0x79/0x100 [ 1344.989802][T24198] ? __x64_sys_bpf+0xce/0x140 [ 1344.989819][T24198] __x64_sys_bpf+0xce/0x140 [ 1344.989838][T24198] ? do_syscall_64+0x90/0x870 [ 1344.989860][T24198] do_syscall_64+0x115/0x870 [ 1344.989879][T24198] ? clear_bhb_loop+0x40/0x90 [ 1344.989900][T24198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.989918][T24198] RIP: 0033:0x7fc06d19ce59 [ 1344.989935][T24198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.989952][T24198] RSP: 002b:00007fc06e0e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1344.989969][T24198] RAX: ffffffffffffffda RBX: 00007fc06d415fa0 RCX: 00007fc06d19ce59 [ 1344.989980][T24198] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1344.989990][T24198] RBP: 00007fc06e0e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.990000][T24198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.990011][T24198] R13: 00007fc06d416038 R14: 00007fc06d415fa0 R15: 00007ffe5ae29558 [ 1344.990034][T24198] [ 1346.723945][ T5347] net_ratelimit: 1 callbacks suppressed [ 1346.723965][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.123049][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.518414][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.934979][T24220] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.4347'. [ 1348.672418][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.504903][T11402] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1349.681723][T11402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1349.682588][T14167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.226746][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.235665][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.250024][T11402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.282893][T11402] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1350.320775][T11402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.362819][T11402] usb 2-1: config 0 descriptor?? [ 1350.423042][ T5347] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1350.552971][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.582449][ T5347] usb 3-1: Using ep0 maxpacket: 16 [ 1350.603599][ T5347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1350.638946][ T5347] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1350.642566][T18953] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 1350.696718][ T5347] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1350.752914][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.767803][ T5347] usb 3-1: Product: syz [ 1350.772608][ T5347] usb 3-1: Manufacturer: syz [ 1350.778092][ T5347] usb 3-1: SerialNumber: syz [ 1350.793688][T11402] isku 0003:1E7D:319C.0024: report_id 0 is invalid [ 1350.831332][T11402] isku 0003:1E7D:319C.0024: item 0 0 1 8 parsing failed [ 1350.841267][T24248] fuse: Bad value for 'group_id' [ 1350.853137][T11402] isku 0003:1E7D:319C.0024: parse failed [ 1350.858927][T24248] fuse: Bad value for 'group_id' [ 1350.869632][T11402] isku 0003:1E7D:319C.0024: probe with driver isku failed with error -22 [ 1350.886203][T18953] usb 6-1: device descriptor read/64, error -71 [ 1351.013162][ T5745] usb 2-1: USB disconnect, device number 3 [ 1351.023685][ T5347] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1351.065269][ T5347] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1351.116256][T24252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.136872][T24252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.144736][T18953] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 1351.278308][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.287851][T18953] usb 6-1: device descriptor read/64, error -71 [ 1351.401574][T24239] netlink: 'syz.2.4353': attribute type 3 has an invalid length. [ 1351.409929][T24239] netlink: 'syz.2.4353': attribute type 3 has an invalid length. [ 1351.415685][T18953] usb usb6-port1: attempt power cycle [ 1351.612948][T24257] i2c i2c-0: dtv_property_process_set: SET cmd 0xfdffffff undefined [ 1351.762868][T18953] usb 6-1: new low-speed USB device number 75 using dummy_hcd [ 1351.802101][T24261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1351.814117][T24263] netlink: 'syz.4.4362': attribute type 9 has an invalid length. [ 1351.822850][T24261] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1351.833833][T24263] netlink: 'syz.4.4362': attribute type 7 has an invalid length. [ 1351.847322][T18953] usb 6-1: device descriptor read/8, error -71 [ 1351.860680][T24263] netlink: 'syz.4.4362': attribute type 8 has an invalid length. [ 1352.133334][T18953] usb 6-1: new low-speed USB device number 76 using dummy_hcd [ 1352.702754][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.879251][T18953] usb 6-1: device descriptor read/8, error -71 [ 1352.938749][ T5347] usb 3-1: USB disconnect, device number 3 [ 1353.006728][T18953] usb usb6-port1: unable to enumerate USB device [ 1353.640699][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.016505][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.078995][T24288] fuse: Bad value for 'group_id' [ 1354.091336][T24288] fuse: Bad value for 'group_id' [ 1354.152526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.282423][T24293] atomic_op ffff88807e421198 conn xmit_atomic 0000000000000000 [ 1354.452503][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1354.480479][ T30] audit: type=1400 audit(1782492105.304:1756): avc: denied { ioctl } for pid=24294 comm="syz.5.4372" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1354.782717][ T30] audit: type=1400 audit(1782492105.584:1757): avc: denied { mount } for pid=24298 comm="syz.0.4373" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1354.824918][ T5745] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 1354.853718][ T24] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 1354.890532][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.900624][ T24] usb 3-1: config 0 has no interface number 0 [ 1354.906682][ T24] usb 3-1: config 0 interface 205 has no altsetting 0 [ 1354.913154][T18953] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1354.937713][ T30] audit: type=1400 audit(1782492105.674:1758): avc: denied { search } for pid=24298 comm="syz.0.4373" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1354.992429][ T30] audit: type=1400 audit(1782492105.674:1759): avc: denied { search } for pid=24298 comm="syz.0.4373" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1355.022812][ T30] audit: type=1400 audit(1782492105.674:1760): avc: denied { write search } for pid=24298 comm="syz.0.4373" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1355.062585][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.080977][ T5745] usb 6-1: device descriptor read/64, error -71 [ 1355.124271][ T30] audit: type=1400 audit(1782492105.674:1761): avc: denied { add_name } for pid=24298 comm="syz.0.4373" name="cpuacct.usage_all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1355.172497][ T30] audit: type=1400 audit(1782492105.694:1762): avc: denied { create } for pid=24298 comm="syz.0.4373" name="cpuacct.usage_all" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1355.200037][T18953] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1355.289347][T18953] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.311898][ T30] audit: type=1400 audit(1782492105.694:1763): avc: denied { search } for pid=24298 comm="syz.0.4373" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1355.406790][ T5745] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1355.441518][T24309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4375'. [ 1355.516681][T14178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.600148][ T24] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1355.694973][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.011577][T18953] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1356.023683][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.033012][T18953] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1356.044063][ T30] audit: type=1400 audit(1782492105.694:1764): avc: denied { search } for pid=24298 comm="syz.0.4373" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1356.047593][ T24] usb 3-1: Product: syz [ 1356.066746][ T30] audit: type=1400 audit(1782492105.694:1765): avc: denied { write search } for pid=24298 comm="syz.0.4373" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1356.068256][T18953] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1356.105675][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.115005][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.121904][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.128904][ T24] usb 3-1: Manufacturer: syz [ 1356.142363][ T24] usb 3-1: SerialNumber: syz [ 1356.146942][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.176380][ T5745] usb 6-1: device descriptor read/64, error -71 [ 1356.216703][ T24] usb 3-1: config 0 descriptor?? [ 1356.295275][ T5745] usb usb6-port1: attempt power cycle [ 1356.385932][T18953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.713052][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.720897][T18953] usb 2-1: Product: syz [ 1356.733732][T18953] usb 2-1: Manufacturer: syz [ 1356.750804][T18953] usb 2-1: SerialNumber: syz [ 1357.113112][ T5745] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1357.348881][ T5745] usb 6-1: device descriptor read/8, error -71 [ 1358.331511][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.962559][ T5745] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1359.353490][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.489578][ T24] usb 3-1: can't set config #0, error -71 [ 1359.559190][ T24] usb 3-1: USB disconnect, device number 4 [ 1359.608380][ T5745] usb 6-1: device not accepting address 80, error -71 [ 1359.955335][T18953] usb 2-1: USB disconnect, device number 4 [ 1360.179715][ T5745] usb usb6-port1: unable to enumerate USB device [ 1360.256020][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.417818][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1360.457060][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1360.457075][ T30] audit: type=1400 audit(1782492111.234:1769): avc: denied { bind } for pid=24334 comm="syz.2.4383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1360.488048][T24339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.509701][T24339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.580155][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.017081][T24353] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4386'. [ 1361.051555][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1361.212510][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1361.238069][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1361.263454][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.301558][ T24] usb 3-1: config 0 descriptor?? [ 1361.335531][ T24] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1361.828383][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.053432][T24366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4392'. [ 1362.137666][T24364] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1362.172971][T24366] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4392'. [ 1362.207828][T24366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4392'. [ 1362.635094][ T24] gspca_sq930x: ucbus_write failed -71 [ 1362.641013][ T24] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 1362.659166][ T24] usb 3-1: USB disconnect, device number 5 [ 1362.769699][ T30] audit: type=1400 audit(1782492113.594:1770): avc: denied { map } for pid=24369 comm="syz.5.4393" path="/dev/sg0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1362.862045][ T30] audit: type=1400 audit(1782492113.594:1771): avc: denied { execute } for pid=24369 comm="syz.5.4393" path="/dev/sg0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1362.890670][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.914044][T24376] binder: 24375:24376 ioctl c0306201 2000000000c0 returned -14 [ 1362.939904][T24376] binder: 24375:24376 ioctl c0306201 200000000180 returned -14 [ 1362.958305][ T30] audit: type=1400 audit(1782492113.734:1772): avc: denied { ioctl } for pid=24375 comm="syz.4.4395" path="/dev/binderfs/binder0" dev="binder" ino=15 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1363.079748][ T30] audit: type=1400 audit(1782492113.734:1773): avc: denied { set_context_mgr } for pid=24375 comm="syz.4.4395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1363.139364][ T30] audit: type=1400 audit(1782492113.784:1774): avc: denied { setopt } for pid=24369 comm="syz.5.4393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.239918][ T30] audit: type=1400 audit(1782492113.844:1775): avc: denied { connect } for pid=24369 comm="syz.5.4393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.272891][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.626683][T24385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4396'. [ 1363.926202][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.899135][ T30] audit: type=1400 audit(1782492115.724:1776): avc: denied { ioctl } for pid=24382 comm="syz.1.4398" path="/dev/sg0" dev="devtmpfs" ino=805 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1364.991794][T24384] infiniband syz1: set active [ 1364.996721][T24384] infiniband syz1: added veth1_vlan [ 1365.003862][T24384] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1365.008026][T24384] infiniband syz1: Couldn't open port 1 [ 1365.022953][T24384] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1365.038600][T24384] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1365.056613][T24384] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1365.079879][T24384] RDS/IB: syz1: added [ 1365.084311][T24384] smc: adding ib device syz1 with port count 1 [ 1365.090691][T24384] smc: ib device syz1 port 1 has no pnetid [ 1365.783245][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.792009][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.796217][T24390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4399'. [ 1366.350336][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.938955][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.986587][T24414] syzkaller0: entered promiscuous mode [ 1367.996272][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.007935][T24414] syzkaller0: entered allmulticast mode [ 1368.067616][ T30] audit: type=1326 audit(1782492118.894:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24421 comm="syz.1.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1368.101275][T24423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4408'. [ 1368.126862][T24423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4408'. [ 1368.195469][ T30] audit: type=1326 audit(1782492118.894:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24421 comm="syz.1.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1368.278820][ T30] audit: type=1326 audit(1782492118.894:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24421 comm="syz.1.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1368.706346][ T30] audit: type=1326 audit(1782492118.894:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24421 comm="syz.1.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1368.777092][ T30] audit: type=1326 audit(1782492118.894:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24421 comm="syz.1.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1368.827087][ T30] audit: type=1326 audit(1782492118.924:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24421 comm="syz.1.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1368.898521][ T30] audit: type=1326 audit(1782492118.944:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24421 comm="syz.1.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1368.980628][ T30] audit: type=1326 audit(1782492118.944:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24421 comm="syz.1.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1369.033039][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.061945][ T30] audit: type=1326 audit(1782492118.944:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24421 comm="syz.1.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1369.084507][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1369.096199][ T30] audit: type=1326 audit(1782492118.984:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24421 comm="syz.1.4407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3d9ce59 code=0x7ffc0000 [ 1369.411845][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.550754][ T24] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1369.592165][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1369.649094][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40 [ 1369.667121][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.677213][ T24] usb 3-1: Product: syz [ 1369.693168][ T24] usb 3-1: Manufacturer: syz [ 1369.698314][ T24] usb 3-1: SerialNumber: syz [ 1370.164059][T24429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.176254][T24429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.236338][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input109 [ 1370.239002][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.624597][ T24] usb 3-1: USB disconnect, device number 6 [ 1371.273028][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.445760][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.477266][T24460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=24460 comm=syz.5.4417 [ 1372.211453][ T5745] kernel read not supported for file /dsp (pid: 5745 comm: kworker/0:6) [ 1372.314401][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.543951][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 1373.543985][ T30] audit: type=1800 audit(1782492124.370:1920): pid=24487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4425" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1373.849123][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.475276][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.884273][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.240828][T24484] geneve2: entered promiscuous mode [ 1375.246365][T24484] geneve2: entered allmulticast mode [ 1375.328410][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.352160][T21703] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1375.517302][T21703] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1375.531592][T21703] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1375.720801][T21703] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1376.187148][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.431521][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.440335][T18953] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1377.522975][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.607235][T18953] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 1377.619815][T24527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.630635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.659190][T18953] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1377.678066][T18953] usb 2-1: Manufacturer: syz [ 1377.693398][T18953] usb 2-1: config 0 descriptor?? [ 1377.704811][T24529] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1377.716553][T18953] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1377.731049][T18953] ftdi_sio ttyUSB0: unknown device type: 0xc998 [ 1377.738965][ T30] audit: type=1400 audit(1782492128.570:1921): avc: denied { lock } for pid=24528 comm="syz.5.4436" path="socket:[98413]" dev="sockfs" ino=98413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1377.929769][T18953] usb 2-1: USB disconnect, device number 5 [ 1377.948751][T24515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.963557][T18953] ftdi_sio 2-1:0.0: device disconnected [ 1379.092920][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.775138][T24554] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4441'. [ 1380.629385][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.851388][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.472469][T24583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.484998][T24583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.497843][T24583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.697330][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.886303][ T30] audit: type=1400 audit(1782492132.710:1922): avc: denied { ioctl } for pid=24586 comm="syz.0.4447" path="socket:[98505]" dev="sockfs" ino=98505 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1381.923758][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.046387][T24577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.056844][T24577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.197625][ T30] audit: type=1400 audit(1782492133.020:1923): avc: denied { map } for pid=24590 comm="syz.0.4448" path="/dev/binderfs/binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1382.205605][T24591] binder: 24590:24591 ioctl c0306201 200000000680 returned -14 [ 1382.281793][T24593] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4449'. [ 1382.306010][ T30] audit: type=1400 audit(1782492133.020:1924): avc: denied { call } for pid=24590 comm="syz.0.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1382.593072][ T30] audit: type=1400 audit(1782492133.020:1925): avc: denied { transfer } for pid=24590 comm="syz.0.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1382.958470][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.786091][T24606] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 1386.568299][T18953] net_ratelimit: 4 callbacks suppressed [ 1386.568315][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.905898][T24639] fuse: Unknown parameter 'roog`ode' [ 1386.949605][ T30] audit: type=1400 audit(1782492137.770:1926): avc: denied { ioctl } for pid=24637 comm="syz.0.4462" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1387.144488][T18953] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1387.569343][T24644] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4461'. [ 1387.599436][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.626507][T24640] trusted_key: encrypted_key: insufficient parameters specified [ 1387.639270][T18953] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 1387.649828][T18953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.664335][ T30] audit: type=1400 audit(1782492138.490:1927): avc: denied { create } for pid=24638 comm="syz.5.4461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1387.690969][T18953] usb 3-1: config 0 has no interface number 0 [ 1387.697544][T18953] usb 3-1: config 0 interface 205 has no altsetting 0 [ 1387.714615][T18953] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1387.881401][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.788942][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.800022][T18953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.816467][T18953] usb 3-1: Product: syz [ 1388.820938][T18953] usb 3-1: Manufacturer: syz [ 1388.825613][T18953] usb 3-1: SerialNumber: syz [ 1389.173183][T18953] usb 3-1: config 0 descriptor?? [ 1389.984833][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.252459][ T1220] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1390.298751][T24668] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 1390.434959][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.459196][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.472208][ T1220] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1390.482189][ T1220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.494104][ T1220] usb 6-1: config 0 descriptor?? [ 1390.789047][T24674] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4470'. [ 1391.147393][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.198568][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.599446][T18953] usb 3-1: can't set config #0, error -71 [ 1391.634607][T18953] usb 3-1: USB disconnect, device number 7 [ 1391.646100][ T1220] usb 6-1: language id specifier not provided by device, defaulting to English [ 1391.712525][T18386] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1391.824318][T24688] FAULT_INJECTION: forcing a failure. [ 1391.824318][T24688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1391.838863][T24688] CPU: 1 UID: 0 PID: 24688 Comm: syz.2.4474 Tainted: G L syzkaller #0 PREEMPT(full) [ 1391.838892][T24688] Tainted: [L]=SOFTLOCKUP [ 1391.838898][T24688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1391.838908][T24688] Call Trace: [ 1391.838916][T24688] [ 1391.838924][T24688] dump_stack_lvl+0x100/0x190 [ 1391.838952][T24688] should_fail_ex.cold+0x5/0xa [ 1391.838976][T24688] _copy_to_iter+0x1f3/0x1720 [ 1391.838998][T24688] ? __pfx__copy_to_iter+0x10/0x10 [ 1391.839018][T24688] ? find_held_lock+0x2b/0x80 [ 1391.839040][T24688] copy_page_to_iter+0x285/0x370 [ 1391.839060][T24688] anon_pipe_read+0x47e/0x1200 [ 1391.839084][T24688] ? irqentry_exit+0x24d/0xa00 [ 1391.839105][T24688] ? __pfx_anon_pipe_read+0x10/0x10 [ 1391.839123][T24688] ? inode_has_perm+0x16d/0x1d0 [ 1391.839139][T24688] ? __file_has_perm+0x336/0x460 [ 1391.839154][T24688] ? __pfx___file_has_perm+0x10/0x10 [ 1391.839165][T24688] ? copy_iovec_from_user+0x5b/0x140 [ 1391.839177][T24688] do_iter_readv_writev+0x616/0x930 [ 1391.839194][T24688] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1391.839209][T24688] ? selinux_file_permission+0x8f/0x6d0 [ 1391.839225][T24688] ? bpf_lsm_file_permission+0x9/0x10 [ 1391.839241][T24688] ? security_file_permission+0x76/0x210 [ 1391.839255][T24688] ? rw_verify_area+0xce/0x6d0 [ 1391.839271][T24688] vfs_readv+0x4d3/0x8d0 [ 1391.839290][T24688] ? __pfx_vfs_readv+0x10/0x10 [ 1391.839306][T24688] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1391.839327][T24688] ? __fget_files+0x21f/0x3d0 [ 1391.839341][T24688] ? do_readv+0x28a/0x340 [ 1391.839355][T24688] do_readv+0x28a/0x340 [ 1391.839371][T24688] ? __pfx_do_readv+0x10/0x10 [ 1391.839390][T24688] do_syscall_64+0x115/0x870 [ 1391.839403][T24688] ? clear_bhb_loop+0x40/0x90 [ 1391.839416][T24688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.839427][T24688] RIP: 0033:0x7fc06d19ce59 [ 1391.839437][T24688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.839447][T24688] RSP: 002b:00007fc06e0c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1391.839458][T24688] RAX: ffffffffffffffda RBX: 00007fc06d416090 RCX: 00007fc06d19ce59 [ 1391.839465][T24688] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 1391.839471][T24688] RBP: 00007fc06e0c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.839477][T24688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.839483][T24688] R13: 00007fc06d416128 R14: 00007fc06d416090 R15: 00007ffe5ae29558 [ 1391.839497][T24688] [ 1392.896531][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.023583][T18386] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1393.038156][T18386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.088226][T18386] usb 2-1: Product: syz [ 1393.118569][T18386] usb 2-1: Manufacturer: syz [ 1393.211662][T18386] usb 2-1: SerialNumber: syz [ 1393.270484][ T1220] uclogic 0003:256C:006D.0025: failed retrieving string descriptor #200: -71 [ 1393.330579][ T1220] uclogic 0003:256C:006D.0025: failed retrieving pen parameters: -71 [ 1393.375747][T18386] usb 2-1: config 0 descriptor?? [ 1393.402408][ T1220] uclogic 0003:256C:006D.0025: failed probing pen v2 parameters: -71 [ 1393.476210][ T1220] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 1393.476314][ T1220] uclogic 0003:256C:006D.0025: probe with driver uclogic failed with error -71 [ 1393.495870][ T1220] usb 6-1: USB disconnect, device number 81 [ 1393.619772][T18386] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1393.692696][ T5745] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1393.842286][ T5745] usb 3-1: Using ep0 maxpacket: 32 [ 1393.850543][ T5745] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1393.861178][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.873428][ T5745] usb 3-1: config 0 descriptor?? [ 1393.895917][ T5745] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1393.914524][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.942383][ T1220] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1394.119109][ T1220] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1394.128681][ T1220] usb 6-1: no configurations [ 1394.133954][ T1220] usb 6-1: can't read configurations, error -22 [ 1394.159649][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.307935][T24721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.319408][T24721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.338386][T24721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.349441][T24721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.473049][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.866749][T21424] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1394.887372][T21424] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1394.898628][T21424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1394.913506][T21424] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1394.923702][ T5745] gspca_sq930x: ucbus_write failed -71 [ 1394.932506][T21424] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1394.948533][ T5745] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 1394.964849][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.986667][ T5745] usb 3-1: USB disconnect, device number 8 [ 1394.996013][ T30] audit: type=1400 audit(1782492145.820:1928): avc: denied { mounton } for pid=24723 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1395.068494][T18386] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1395.121218][T18386] usb 2-1: USB disconnect, device number 6 [ 1395.954739][T24738] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 1395.992723][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.092341][ T5745] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1396.357116][ T5745] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 1396.399180][ T5745] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.433750][ T5745] usb 2-1: config 0 has no interface number 0 [ 1396.451642][ T5745] usb 2-1: config 0 interface 205 has no altsetting 0 [ 1396.501566][ T5745] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1396.539923][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.628264][ T5745] usb 2-1: Product: syz [ 1396.648993][ T5745] usb 2-1: Manufacturer: syz [ 1396.660334][ T5745] usb 2-1: SerialNumber: syz [ 1396.710898][ T5745] usb 2-1: config 0 descriptor?? [ 1396.921499][ T5745] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1396.978464][ T5745] dvb-usb: bulk message failed: -22 (3/0) [ 1397.049880][T14177] bond0: (slave netdevsim1): Releasing backup interface [ 1397.083803][T18953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.097405][ T5745] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1397.123162][ T5745] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1397.152496][T21424] Bluetooth: hci4: command tx timeout [ 1397.153214][ T5745] usb 2-1: media controller created [ 1397.165791][ T5745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1397.195029][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.261586][ T5745] dvb-usb: bulk message failed: -22 (6/0) [ 1397.287700][ T5745] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1397.362153][ T5745] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input110 [ 1397.396636][T24734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.425205][ T5745] dvb-usb: schedule remote query interval to 150 msecs. [ 1397.475702][ T5745] dvb-usb: bulk message failed: -22 (3/0) [ 1397.498528][T24734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.513505][ T5745] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1397.632618][ T5745] dvb-usb: bulk message failed: -22 (1/0) [ 1397.641469][ T5745] dvb-usb: error while querying for an remote control event. [ 1397.693427][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1397.802344][ T5745] dvb-usb: bulk message failed: -22 (1/0) [ 1397.819234][ T5745] dvb-usb: error while querying for an remote control event. [ 1397.868501][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1397.912952][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 1397.921690][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.936069][ T9] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1397.952698][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 1397.961886][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.982330][ T5745] dvb-usb: bulk message failed: -22 (1/0) [ 1397.995897][ T5745] dvb-usb: error while querying for an remote control event. [ 1398.010292][ T9] usb 3-1: Product: syz [ 1398.047860][ T9] usb 3-1: Manufacturer: syz [ 1398.095268][ T9] usb 3-1: SerialNumber: syz [ 1398.155397][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.212322][T18954] dvb-usb: bulk message failed: -22 (1/0) [ 1398.220358][T18954] dvb-usb: error while querying for an remote control event. [ 1398.236107][T14177] bridge_slave_1: left allmulticast mode [ 1398.277380][T14177] bridge_slave_1: left promiscuous mode [ 1398.335288][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.442446][T18954] dvb-usb: bulk message failed: -22 (1/0) [ 1398.480307][T14177] bridge_slave_0: left allmulticast mode [ 1398.511696][T14177] bridge_slave_0: left promiscuous mode [ 1398.607365][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.916803][T18954] dvb-usb: error while querying for an remote control event. [ 1398.949688][ T9] snd-usb-6fire 3-1:2.0: unable to receive device firmware state. [ 1398.969048][ T9] snd-usb-6fire 3-1:2.0: probe with driver snd-usb-6fire failed with error -71 [ 1398.995858][T24768] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4487'. [ 1399.032862][ T9] usb 3-1: USB disconnect, device number 9 [ 1399.113424][T18386] kernel read not supported for file /dsp (pid: 18386 comm: kworker/1:5) [ 1399.202033][T21424] Bluetooth: hci4: command tx timeout [ 1399.980328][ T5745] dvb-usb: bulk message failed: -22 (1/0) [ 1399.986497][ T5745] dvb-usb: error while querying for an remote control event. [ 1399.994284][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.154768][T18386] usb 2-1: USB disconnect, device number 7 [ 1400.169464][T18954] dvb-usb: bulk message failed: -22 (1/0) [ 1400.232585][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.373331][T18954] dvb-usb: error while querying for an remote control event. [ 1400.467964][T18386] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1400.668272][T14177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.743689][T14177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.806601][T14177] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1400.820120][ T30] audit: type=1400 audit(1782492151.644:1929): avc: denied { write } for pid=24761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1400.976156][T14177] bond0 (unregistering): Released all slaves [ 1401.000878][T14177] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1401.006959][T14177] bond1 (unregistering): Released all slaves [ 1401.294141][T21424] Bluetooth: hci4: command tx timeout [ 1401.325395][T18954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.497899][T14177] bond2 (unregistering): Released all slaves [ 1401.848423][ T30] audit: type=1400 audit(1782492152.674:1930): avc: denied { write } for pid=24800 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1402.120827][T24820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.152760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.211536][T24822] syzkaller0: entered promiscuous mode [ 1402.265219][T24822] syzkaller0: entered allmulticast mode [ 1402.281301][T24820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.396913][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.598122][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1402.841334][T24723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.878817][T24723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.916669][T24723] bridge_slave_0: entered allmulticast mode [ 1402.964412][T24723] bridge_slave_0: entered promiscuous mode [ 1403.021060][T24723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.060378][T24723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.086069][T24723] bridge_slave_1: entered allmulticast mode [ 1403.175990][T24723] bridge_slave_1: entered promiscuous mode [ 1403.356182][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.368511][T21424] Bluetooth: hci4: command tx timeout [ 1403.483658][T11402] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1404.112956][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.121090][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.220904][T24848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4496'. [ 1404.292628][T11402] usb 3-1: Using ep0 maxpacket: 32 [ 1404.315709][T11402] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1404.340400][T11402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.364098][T14177] hsr_slave_0: left promiscuous mode [ 1404.382959][T14177] hsr_slave_1: left promiscuous mode [ 1404.390637][T11402] usb 3-1: config 0 descriptor?? [ 1404.403865][T14177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.428012][T11402] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1404.440672][T14177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.453187][T14177] virt_wifi0: left promiscuous mode [ 1405.038004][ T30] audit: type=1400 audit(1782492155.864:1931): avc: denied { name_bind } for pid=24862 comm="syz.1.4499" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1405.195320][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.204598][ T30] audit: type=1400 audit(1782492156.024:1932): avc: denied { write } for pid=24850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1405.303534][ T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1405.337668][ T30] audit: type=1400 audit(1782492156.134:1933): avc: denied { write } for pid=24870 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1405.380219][T24723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.400765][T24723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.415164][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1405.453481][T24723] team0: Port device team_slave_0 added [ 1405.476141][T24723] team0: Port device team_slave_1 added [ 1405.554307][T11402] gspca_sq930x: ucbus_write failed -71 [ 1405.566201][T11402] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 1405.603513][T11402] usb 3-1: USB disconnect, device number 10 [ 1405.612638][T24723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.639108][T24723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.694405][T24723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.716562][T24723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.734290][T24723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.778119][T24723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.844458][T24723] hsr_slave_0: entered promiscuous mode [ 1405.851035][T24723] hsr_slave_1: entered promiscuous mode [ 1406.033233][ T30] audit: type=1400 audit(1782492156.834:1934): avc: denied { write } for pid=24879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1406.247464][ T24] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1406.287367][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.287433][ T24] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.323365][ T24] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1406.331096][ T24] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1406.347909][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.394039][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.732084][ T30] audit: type=1400 audit(1782492157.554:1935): avc: denied { write } for pid=24896 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1406.884048][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1407.009420][ T24] elo 0003:04E7:0009.0026: item fetching failed at offset 4/5 [ 1407.025426][ T24] elo 0003:04E7:0009.0026: parse failed [ 1407.043463][ T24] elo 0003:04E7:0009.0026: probe with driver elo failed with error -22 [ 1407.290653][ T9] usb 2-1: USB disconnect, device number 8 [ 1407.351559][ T30] audit: type=1400 audit(1782492158.154:1936): avc: denied { wake_alarm } for pid=24915 comm="syz.4.4508" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1407.389626][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.394957][ T30] audit: type=1400 audit(1782492158.214:1937): avc: denied { write } for pid=24914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1407.532984][ T30] audit: type=1400 audit(1782492158.324:1938): avc: denied { write } for pid=24928 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1407.627589][T24723] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1407.639685][T24723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1407.647331][T24723] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1407.657660][T24723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1407.677498][T24723] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1407.717715][T24723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1407.726290][T24723] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1407.737405][T24723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1408.829300][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.106772][T24723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.146580][T24723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.196385][T14178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.203513][T14178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.212585][T14178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.219676][T14178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.326141][ T30] audit: type=1400 audit(1782492160.064:1939): avc: denied { write } for pid=24937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1409.543107][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.562660][ T30] audit: type=1400 audit(1782492160.284:1940): avc: denied { write } for pid=24967 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1409.626802][T24976] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4516'. [ 1409.729522][T24983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.738263][T24983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.901303][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.113920][ T30] audit: type=1400 audit(1782492160.944:1941): avc: denied { write } for pid=24981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1410.308324][T24723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.328185][ T30] audit: type=1400 audit(1782492161.154:1942): avc: denied { write } for pid=25014 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1410.605670][T18554] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1410.773329][T18554] usb 2-1: Using ep0 maxpacket: 32 [ 1410.798827][T18554] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1410.813612][T18554] usb 2-1: config 6 has an invalid interface number: 191 but max is 1 [ 1410.824524][T18554] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.851252][T18554] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 1410.870583][T18554] usb 2-1: config 6 has no interface number 0 [ 1410.888727][T18554] usb 2-1: config 6 interface 191 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1410.916020][T18554] usb 2-1: config 6 interface 191 has no altsetting 0 [ 1410.934485][T18554] usb 2-1: string descriptor 0 read error: -22 [ 1410.940892][T18554] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1410.951767][T18554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.976561][T18554] ums-jumpshot 2-1:6.191: USB Mass Storage device detected [ 1411.028122][T18554] ums-jumpshot 2-1:6.191: Quirks match for vid 05dc pid 0001: 2 [ 1411.042659][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.146893][ T5347] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1411.393270][T18554] usb 2-1: USB disconnect, device number 9 [ 1411.500189][ T30] audit: type=1400 audit(1782492162.324:1943): avc: denied { write } for pid=25020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1411.535495][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1411.559611][ T5347] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1411.570838][T24723] veth0_vlan: entered promiscuous mode [ 1411.591375][ T5347] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1411.592475][T24723] veth1_vlan: entered promiscuous mode [ 1411.617685][ T5347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.630875][T24723] veth0_macvtap: entered promiscuous mode [ 1411.649557][T24723] veth1_macvtap: entered promiscuous mode [ 1411.665246][T24723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.675729][T24723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1411.693175][ T30] audit: type=1400 audit(1782492162.454:1944): avc: denied { write } for pid=25058 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1411.719133][ T5347] usb 3-1: config 0 descriptor?? [ 1411.773851][T14178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.799615][T14178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.864241][T14178] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.888550][T14178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.889922][T25035] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1412.000130][T21703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.016607][T21703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.072611][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.100371][T21703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.109357][T21703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.120067][ T30] audit: type=1400 audit(1782492162.944:1945): avc: denied { mounton } for pid=25065 comm="syz.4.4534" path="/370/file0" dev="tmpfs" ino=1990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1412.153994][ T30] audit: type=1400 audit(1782492162.944:1946): avc: denied { mounton } for pid=24723 comm="syz-executor" path="/root/syzkaller.uazViM/syz-tmp" dev="sda1" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1412.178511][ T30] audit: type=1400 audit(1782492162.944:1947): avc: denied { mount } for pid=24723 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1412.203966][ T30] audit: type=1400 audit(1782492162.944:1948): avc: denied { mounton } for pid=24723 comm="syz-executor" path="/root/syzkaller.uazViM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1412.230812][ T30] audit: type=1400 audit(1782492162.944:1949): avc: denied { mounton } for pid=24723 comm="syz-executor" path="/root/syzkaller.uazViM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=100623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1412.269558][ T30] audit: type=1400 audit(1782492162.974:1950): avc: denied { mounton } for pid=24723 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1412.292661][ T30] audit: type=1400 audit(1782492162.974:1951): avc: denied { mount } for pid=24723 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1412.315251][ T30] audit: type=1400 audit(1782492162.974:1952): avc: denied { mounton } for pid=24723 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1412.452602][T11402] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1412.471772][ T5347] hid_parser_main: 5 callbacks suppressed [ 1412.471810][ T5347] zeroplus 0003:0C12:0030.0027: unknown main item tag 0x4 [ 1412.486453][ T5347] zeroplus 0003:0C12:0030.0027: reserved main item tag 0xd [ 1412.501633][ T5347] zeroplus 0003:0C12:0030.0027: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0 [ 1412.515557][ T5347] zeroplus 0003:0C12:0030.0027: no inputs found [ 1412.555497][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.602357][T11402] usb 6-1: Using ep0 maxpacket: 32 [ 1412.609343][T11402] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1412.618883][T11402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.635357][T11402] usb 6-1: config 0 descriptor?? [ 1412.648610][T11402] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1412.674929][ T5745] usb 3-1: USB disconnect, device number 11 [ 1413.117546][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.241321][T25081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4538'. [ 1413.255109][T25081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4538'. [ 1413.511090][T25089] fuse: Unknown parameter 'group_id00000000000000000000' [ 1413.671714][T11402] gspca_sq930x: ucbus_write failed -71 [ 1413.673091][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.691489][T11402] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 1413.732618][T11402] usb 6-1: USB disconnect, device number 84 [ 1413.788236][T25094] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4543'. [ 1414.305777][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.615451][T25108] bridge0: entered allmulticast mode [ 1414.643250][T25108] bridge_slave_1: left allmulticast mode [ 1414.675812][T25108] bridge_slave_1: left promiscuous mode [ 1414.689123][T25108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.751973][T25108] bridge_slave_0: left allmulticast mode [ 1414.774779][T25108] bridge_slave_0: left promiscuous mode [ 1414.791815][T25108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.388218][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.447141][T25119] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1415.465693][T25119] syzkaller0: linktype set to 825 [ 1415.593439][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.057787][T25159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1416.392538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.407393][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.912101][ T30] audit: type=1400 audit(1782492167.734:1953): avc: denied { read } for pid=25175 comm="syz.1.4577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1417.473921][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.523023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.530859][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.537387][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1418.271558][ T5347] kernel read not supported for file /dsp (pid: 5347 comm: kworker/1:3) [ 1418.677787][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.192789][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.283423][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.369947][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.919367][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.331680][T25258] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4599'. [ 1422.397509][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.615829][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 1423.278726][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.438477][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.112517][T11402] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1424.295748][T11402] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.306742][T11402] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1424.338989][T11402] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1424.375441][T11402] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1424.385281][T11402] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1424.407752][T11402] usb 6-1: Manufacturer: syz [ 1424.420617][T11402] usb 6-1: config 0 descriptor?? [ 1424.483175][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.505490][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 1424.532900][T11402] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1424.952885][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.412409][T11402] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1425.548298][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.833256][T11402] usb 2-1: Using ep0 maxpacket: 16 [ 1425.842147][T11402] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1425.858435][T11402] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1425.881732][T11402] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1425.905440][T11402] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1425.931701][T11402] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1425.950619][T11402] usb 2-1: config 0 has no interface number 0 [ 1425.972724][T11402] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1426.001539][T11402] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1426.028622][T11402] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1426.055937][T11402] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1426.109544][T11402] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1426.130474][T11402] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1426.156944][T11402] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1426.178327][T11402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.199647][T11402] usb 2-1: Product: syz [ 1426.210485][T11402] usb 2-1: Manufacturer: syz [ 1426.225437][T11402] usb 2-1: SerialNumber: syz [ 1426.239067][T11402] usb 2-1: config 0 descriptor?? [ 1426.259488][T11402] usb 2-1: selecting invalid altsetting 2 [ 1426.552988][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.806857][ T5347] kernel read not supported for file /dsp (pid: 5347 comm: kworker/1:3) [ 1427.145069][T18554] usb 6-1: USB disconnect, device number 85 [ 1427.298698][T11402] get_1284_register timeout [ 1427.315191][ C0] usb 2-1: async_complete: urb error -104 [ 1427.592888][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.672410][T18554] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1428.164381][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.224666][T18554] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.261377][T18554] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1428.313511][T18554] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1428.349293][T18554] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1428.367842][ T5745] usb 2-1: USB disconnect, device number 10 [ 1428.386679][T18554] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1428.410927][T18554] usb 6-1: Manufacturer: syz [ 1428.425672][T18554] usb 6-1: config 0 descriptor?? [ 1428.444185][T18554] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1428.657406][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.167817][ T5745] kernel read not supported for file /dsp (pid: 5745 comm: kworker/0:6) [ 1429.689289][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.926016][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.160004][ T5745] usb 6-1: USB disconnect, device number 86 [ 1431.194670][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.363557][T18383] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1432.247628][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.379126][T18383] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.436633][T18383] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1432.476806][T18383] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1432.514721][T18383] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1432.538781][T18383] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1432.578081][T18383] usb 3-1: Manufacturer: syz [ 1432.601862][T18383] usb 3-1: config 0 descriptor?? [ 1432.685515][T18383] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1432.881107][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.240167][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 1433.675694][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.233218][T18383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.367306][T25389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'. [ 1434.877730][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.287740][T25396] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1435.412838][T25352] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input111 [ 1436.012639][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.037329][T18386] usb 3-1: USB disconnect, device number 12 [ 1437.053769][T18554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.287507][T18386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.625822][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1438.160592][T25420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4641'. [ 1438.318659][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.330701][T11402] kernel read not supported for file /dsp (pid: 11402 comm: kworker/0:4) [ 1438.420435][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1438.489881][ T9] usb 3-1: no configurations [ 1439.635902][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.667612][ T9] usb 3-1: can't read configurations, error -22 [ 1439.724037][T14172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.738888][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.748146][T18383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.329805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.886512][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1552.893486][ C0] rcu: 1-...!: (1 GPs behind) idle=cb0c/1/0x4000000000000000 softirq=149502/149503 fqs=0 [ 1552.904800][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25413/1:b..l [ 1552.912816][ C0] rcu: (detected by 0, t=10505 jiffies, g=163581, q=455 ncpus=2) [ 1552.920608][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1552.920634][ C1] NMI backtrace for cpu 1 [ 1552.920648][ C1] CPU: 1 UID: 0 PID: 18022 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1552.920668][ C1] Tainted: [L]=SOFTLOCKUP [ 1552.920674][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1552.920686][ C1] RIP: 0010:rb_insert_color+0x2a/0x810 [ 1552.920709][ C1] Code: f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 48 89 fa 41 56 48 c1 ea 03 41 55 41 54 49 89 fc 55 53 48 83 ec 08 80 3c 02 00 <0f> 85 af 05 00 00 49 be 00 00 00 00 00 fc ff df 49 8b 1c 24 48 85 [ 1552.920722][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00000046 [ 1552.920734][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000003 [ 1552.920743][ C1] RDX: 1ffff1100565e860 RSI: ffff8880b8528698 RDI: ffff88802b2f4300 [ 1552.920753][ C1] RBP: ffff8880b8528698 R08: 0000000000000005 R09: 000000000000001f [ 1552.920761][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802b2f4300 [ 1552.920770][ C1] R13: ffff88802b2f4318 R14: ffff8880b8528648 R15: ffff8880b8528698 [ 1552.920780][ C1] FS: 0000555584cd3500(0000) GS:ffff8881243e7000(0000) knlGS:0000000000000000 [ 1552.920794][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1552.920803][ C1] CR2: 00007fbcf6b456b8 CR3: 00000000530db000 CR4: 00000000003526f0 [ 1552.920812][ C1] Call Trace: [ 1552.920819][ C1] [ 1552.920826][ C1] timerqueue_linked_add+0x236/0x430 [ 1552.920847][ C1] enqueue_hrtimer+0x1ad/0x2f0 [ 1552.920868][ C1] __hrtimer_run_queues+0x6ed/0x9c0 [ 1552.920891][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1552.920908][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1552.920930][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1552.920946][ C1] [ 1552.920951][ C1] [ 1552.920956][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1552.920971][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 1552.920987][ C1] Code: 05 3b 80 2e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 76 f6 0e 0f 82 ac 02 00 00 8b 35 4e aa f6 0e 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 7f 2e 12 0f 85 ec 02 00 00 48 83 c4 [ 1552.920999][ C1] RSP: 0018:ffffc90002eb7358 EFLAGS: 00000206 [ 1552.921010][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1552.921019][ C1] RDX: 0000000000000000 RSI: ffffffff8df34f31 RDI: ffffffff8c1e7f80 [ 1552.921028][ C1] RBP: ffffffff8e7e60c0 R08: 000000005b336a06 R09: 0000000000000007 [ 1552.921037][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1552.921046][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1552.921060][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1552.921074][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1552.921088][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1552.921103][ C1] unwind_next_frame+0xd1/0x2090 [ 1552.921116][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1552.921129][ C1] ? __do_sys_clone+0xd9/0x120 [ 1552.921147][ C1] ? do_syscall_64+0x115/0x870 [ 1552.921163][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1552.921178][ C1] arch_stack_walk+0x94/0xf0 [ 1552.921194][ C1] ? __do_sys_clone+0xd9/0x120 [ 1552.921213][ C1] stack_trace_save+0x8e/0xc0 [ 1552.921227][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1552.921242][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1552.921258][ C1] kasan_save_stack+0x30/0x50 [ 1552.921274][ C1] ? kasan_save_stack+0x30/0x50 [ 1552.921288][ C1] ? kasan_save_track+0x14/0x30 [ 1552.921302][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1552.921317][ C1] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1552.921332][ C1] ? vm_area_dup+0x27/0x8e0 [ 1552.921350][ C1] ? dup_mmap+0x6f6/0x21b0 [ 1552.921367][ C1] ? copy_process+0x4588/0x8030 [ 1552.921384][ C1] ? kernel_clone+0x176/0x9d0 [ 1552.921400][ C1] ? __do_sys_clone+0xd9/0x120 [ 1552.921429][ C1] kasan_save_track+0x14/0x30 [ 1552.921444][ C1] __kasan_slab_alloc+0x89/0x90 [ 1552.921460][ C1] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1552.921476][ C1] ? vm_area_dup+0x27/0x8e0 [ 1552.921497][ C1] vm_area_dup+0x27/0x8e0 [ 1552.921516][ C1] dup_mmap+0x6f6/0x21b0 [ 1552.921538][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1552.921554][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1552.921571][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1552.921587][ C1] ? find_held_lock+0x2b/0x80 [ 1552.921599][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1552.921628][ C1] copy_process+0x4588/0x8030 [ 1552.921651][ C1] ? __pfx_copy_process+0x10/0x10 [ 1552.921668][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1552.921695][ C1] kernel_clone+0x176/0x9d0 [ 1552.921713][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1552.921734][ C1] ? find_held_lock+0x2b/0x80 [ 1552.921746][ C1] ? __might_fault+0xc5/0x140 [ 1552.921760][ C1] __do_sys_clone+0xd9/0x120 [ 1552.921777][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1552.921803][ C1] do_syscall_64+0x115/0x870 [ 1552.921818][ C1] ? clear_bhb_loop+0x40/0x90 [ 1552.921833][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.921846][ C1] RIP: 0033:0x7fbcf5dc58d2 [ 1552.921858][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1552.921870][ C1] RSP: 002b:00007ffd1e09df20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1552.921883][ C1] RAX: ffffffffffffffda RBX: 00007ffd1e09df20 RCX: 00007fbcf5dc58d2 [ 1552.921892][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1552.921900][ C1] RBP: 00007ffd1e09e0ac R08: 0000000000000000 R09: 0000000000000001 [ 1552.921908][ C1] R10: 0000555584cd37d0 R11: 0000000000000246 R12: 0000000000000001 [ 1552.921917][ C1] R13: 00000000000927c0 R14: 000000000015fa63 R15: 00007ffd1e09e100 [ 1552.921931][ C1] [ 1552.922629][ C0] task:syz.0.4638 state:R running task stack:26776 pid:25413 tgid:25408 ppid:19897 task_flags:0x40044c flags:0x00080001 [ 1553.486115][ C0] Call Trace: [ 1553.489381][ C0] [ 1553.492303][ C0] __schedule+0x125c/0x6730 [ 1553.496813][ C0] ? __pfx___schedule+0x10/0x10 [ 1553.501656][ C0] ? rcu_is_watching+0x12/0xc0 [ 1553.506420][ C0] preempt_schedule_irq+0x50/0x90 [ 1553.511435][ C0] irqentry_exit+0x205/0xa00 [ 1553.516022][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1553.521993][ C0] RIP: 0010:lock_acquire+0x166/0x370 [ 1553.527270][ C0] Code: bd 00 00 00 65 8b 05 c9 c5 2e 12 85 c0 0f 85 ae 00 00 00 65 48 8b 05 01 7f 2e 12 8b 90 9c 0b 00 00 85 d2 0f 85 98 00 00 00 9c <8f> 04 24 fa 48 c7 c7 1d db 04 8e e8 3a ca b6 09 45 89 e8 44 89 e1 [ 1553.546863][ C0] RSP: 0018:ffffc900041df0c0 EFLAGS: 00000246 [ 1553.552919][ C0] RAX: ffff888027b1ca80 RBX: 0000000000000000 RCX: 0000000000000001 [ 1553.560877][ C0] RDX: 0000000000000000 RSI: ffffffff8284869d RDI: fffffbfff1cfcc18 [ 1553.568837][ C0] RBP: ffffffff8e7e60c0 R08: 0000000000000000 R09: 0000000000000000 [ 1553.576794][ C0] R10: 00000000070e02d4 R11: 000000000000c7a3 R12: 0000000000000002 [ 1553.584751][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1553.592715][ C0] ? __update_page_owner_free_handle.isra.0+0x4d/0x4d0 [ 1553.599563][ C0] ? shmem_evict_inode+0x3a5/0xbe0 [ 1553.604663][ C0] ? evict+0x3c2/0xad0 [ 1553.608723][ C0] ? iput.part.0+0x989/0x1050 [ 1553.613393][ C0] ? iput+0x35/0x40 [ 1553.617192][ C0] ? dentry_unlink_inode+0x284/0x470 [ 1553.622468][ C0] ? dentry_kill+0x25d/0xc20 [ 1553.627055][ C0] __update_page_owner_free_handle.isra.0+0x4d/0x4d0 [ 1553.633723][ C0] ? __update_page_owner_free_handle.isra.0+0x3c/0x4d0 [ 1553.640571][ C0] __reset_page_owner+0x93/0x190 [ 1553.645504][ C0] free_unref_folios+0xa44/0x1710 [ 1553.650532][ C0] folios_put_refs+0x585/0xaa0 [ 1553.655296][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1553.660584][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1553.666906][ C0] shmem_undo_range+0x5e5/0x1570 [ 1553.671841][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1553.677226][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1553.682181][ C0] ? find_held_lock+0x2b/0x80 [ 1553.686845][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1553.692036][ C0] ? percpu_counter_add_batch+0xb9/0x230 [ 1553.697669][ C0] shmem_evict_inode+0x3a5/0xbe0 [ 1553.702600][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 1553.708319][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1553.713766][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1553.719835][ C0] ? find_held_lock+0x2b/0x80 [ 1553.724500][ C0] ? evict+0x37e/0xad0 [ 1553.728564][ C0] ? evict+0x37e/0xad0 [ 1553.732629][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1553.738078][ C0] evict+0x3c2/0xad0 [ 1553.741969][ C0] ? __pfx_evict+0x10/0x10 [ 1553.746381][ C0] ? iput.part.0+0x981/0x1050 [ 1553.751056][ C0] iput.part.0+0x989/0x1050 [ 1553.755558][ C0] iput+0x35/0x40 [ 1553.759189][ C0] dentry_unlink_inode+0x284/0x470 [ 1553.764293][ C0] dentry_kill+0x25d/0xc20 [ 1553.768707][ C0] dput.part.0+0xd7/0x240 [ 1553.773032][ C0] dput+0x1f/0x30 [ 1553.776658][ C0] __fput+0x519/0xb50 [ 1553.780633][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1553.785822][ C0] task_work_run+0x150/0x240 [ 1553.790402][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1553.795504][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1553.800701][ C0] do_exit+0x951/0x2ae0 [ 1553.804851][ C0] ? __pfx___might_resched+0x10/0x10 [ 1553.810132][ C0] ? __pfx_do_exit+0x10/0x10 [ 1553.814713][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1553.819734][ C0] ? find_held_lock+0x2b/0x80 [ 1553.824400][ C0] ? get_signal+0x7e0/0x21e0 [ 1553.828990][ C0] do_group_exit+0xd5/0x2a0 [ 1553.833484][ C0] get_signal+0x1ec7/0x21e0 [ 1553.837992][ C0] ? __pfx_get_signal+0x10/0x10 [ 1553.842844][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1553.848383][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1553.854535][ C0] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 1553.859737][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 1553.865104][ C0] ? rcu_is_watching+0x12/0xc0 [ 1553.869868][ C0] do_syscall_64+0x666/0x870 [ 1553.874450][ C0] ? clear_bhb_loop+0x40/0x90 [ 1553.879124][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.885007][ C0] RIP: 0033:0x7fe19ad9ce59 [ 1553.889409][ C0] RSP: 002b:00007fe19bce8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1553.897809][ C0] RAX: 0000000000010106 RBX: 00007fe19b016180 RCX: 00007fe19ad9ce59 [ 1553.905766][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1553.913724][ C0] RBP: 00007fe19ae32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1553.921684][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1553.929640][ C0] R13: 00007fe19b016218 R14: 00007fe19b016180 R15: 00007ffe7b3be558 [ 1553.937612][ C0] [ 1553.940621][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g163581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1553.951886][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1553.961837][ C0] rcu: RCU grace-period kthread stack dump: [ 1553.967710][ C0] task:rcu_preempt state:R running task stack:26856 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1553.981186][ C0] Call Trace: [ 1553.984451][ C0] [ 1553.987373][ C0] __schedule+0x125c/0x6730 [ 1553.991881][ C0] ? __pfx___schedule+0x10/0x10 [ 1553.996721][ C0] ? find_held_lock+0x2b/0x80 [ 1554.001388][ C0] ? schedule+0x225/0x2c0 [ 1554.005712][ C0] schedule+0xdd/0x2c0 [ 1554.009771][ C0] schedule_timeout+0x127/0x280 [ 1554.014620][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1554.019989][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1554.025267][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1554.031064][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1554.036519][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1554.041275][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1554.046554][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1554.051484][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1554.056677][ C0] rcu_gp_kthread+0x179/0x230 [ 1554.061346][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1554.066536][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1554.072335][ C0] ? __kthread_parkme+0x18c/0x230 [ 1554.077356][ C0] ? kthread+0x13a/0x450 [ 1554.081587][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1554.086775][ C0] kthread+0x370/0x450 [ 1554.090833][ C0] ? __pfx_kthread+0x10/0x10 [ 1554.095412][ C0] ret_from_fork+0x72b/0xd50 [ 1554.100000][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1554.105106][ C0] ? __switch_to+0x800/0x10f0 [ 1554.109772][ C0] ? __pfx_kthread+0x10/0x10 [ 1554.114352][ C0] ret_from_fork_asm+0x1a/0x30 [ 1554.119116][ C0] [ 1554.122127][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1554.128437][ C0] CPU: 0 UID: 0 PID: 14177 Comm: kworker/u8:27 Tainted: G L syzkaller #0 PREEMPT(full) [ 1554.139621][ C0] Tainted: [L]=SOFTLOCKUP [ 1554.143928][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1554.153985][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 1554.159976][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 1554.166644][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 1554.186237][ C0] RSP: 0018:ffffc90003b26820 EFLAGS: 00000293 [ 1554.192293][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fcea0d [ 1554.200252][ C0] RDX: ffff8880562c8000 RSI: ffffffff81fce9e7 RDI: ffff8880562c8000 [ 1554.208209][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 1554.216169][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1554.224125][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 1554.232085][ C0] FS: 0000000000000000(0000) GS:ffff8881242e7000(0000) knlGS:0000000000000000 [ 1554.241004][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1554.247575][ C0] CR2: 0000200000035030 CR3: 000000007e5c5000 CR4: 00000000003526f0 [ 1554.255537][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1554.263496][ C0] DR3: 00000000fda3b69a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1554.271455][ C0] Call Trace: [ 1554.274719][ C0] [ 1554.277638][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1554.283000][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1554.288198][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1554.294514][ C0] ? pte_offset_map_lock+0x174/0x320 [ 1554.299794][ C0] ? lock_acquire+0x1b9/0x370 [ 1554.304464][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1554.309657][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1554.315020][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1554.320126][ C0] flush_tlb_mm_range+0x45f/0x16f0 [ 1554.325236][ C0] ? page_table_check_clear+0x47e/0x8f0 [ 1554.330775][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 1554.336747][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1554.342290][ C0] ? find_held_lock+0x2b/0x80 [ 1554.346955][ C0] ptep_clear_flush+0x148/0x170 [ 1554.351799][ C0] page_vma_mkclean_one.constprop.0+0x3a2/0x7b0 [ 1554.358040][ C0] ? __pfx_page_vma_mkclean_one.constprop.0+0x10/0x10 [ 1554.364795][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 1554.370008][ C0] page_mkclean_one+0x1cd/0x2b0 [ 1554.374853][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 1554.380223][ C0] ? __pfx___might_resched+0x10/0x10 [ 1554.385505][ C0] __rmap_walk_file+0x383/0x680 [ 1554.390357][ C0] rmap_walk_file+0x1d8/0x2a0 [ 1554.395031][ C0] folio_mkclean+0x2af/0x4e0 [ 1554.399617][ C0] ? __pfx_folio_mkclean+0x10/0x10 [ 1554.404723][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 1554.410088][ C0] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 1554.415716][ C0] folio_clear_dirty_for_io+0x1ba/0x960 [ 1554.421255][ C0] mpage_submit_folio+0x84/0x330 [ 1554.426191][ C0] mpage_process_page_bufs+0x473/0x8d0 [ 1554.431650][ C0] mpage_prepare_extent_to_map+0xb50/0x1920 [ 1554.437550][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 1554.443896][ C0] ? ext4_init_io_end+0x24/0x170 [ 1554.448834][ C0] ext4_do_writepages+0x9f9/0x3ed0 [ 1554.453943][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1554.459304][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 1554.464762][ C0] ? neigh_resolve_output+0x550/0x8f0 [ 1554.470125][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1554.475683][ C0] ? ext4_writepages+0x347/0x750 [ 1554.480609][ C0] ext4_writepages+0x347/0x750 [ 1554.485360][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 1554.490654][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 1554.495936][ C0] do_writepages+0x278/0x600 [ 1554.500519][ C0] ? __pfx_do_writepages+0x10/0x10 [ 1554.505626][ C0] __writeback_single_inode+0x164/0x1300 [ 1554.511254][ C0] ? find_held_lock+0x2b/0x80 [ 1554.515924][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 1554.521985][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1554.527183][ C0] writeback_sb_inodes+0x766/0x1c50 [ 1554.532387][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1554.538044][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1554.542882][ C0] ? move_expired_inodes+0x5ea/0x8f0 [ 1554.548172][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 1554.553370][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 1554.559174][ C0] ? queue_io+0x287/0x530 [ 1554.563500][ C0] wb_writeback+0x6f6/0xb50 [ 1554.567999][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 1554.573013][ C0] ? get_nr_inodes+0x100/0x150 [ 1554.577767][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1554.582958][ C0] wb_workfn+0x93f/0xc80 [ 1554.587191][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1554.592988][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 1554.597746][ C0] ? rcu_is_watching+0x12/0xc0 [ 1554.602510][ C0] process_one_work+0xa23/0x1940 [ 1554.607446][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1554.612814][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 1554.617569][ C0] worker_thread+0x5ef/0xe50 [ 1554.622160][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1554.627262][ C0] ? kthread+0x13a/0x450 [ 1554.631491][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1554.636589][ C0] kthread+0x370/0x450 [ 1554.640644][ C0] ? __pfx_kthread+0x10/0x10 [ 1554.645225][ C0] ret_from_fork+0x72b/0xd50 [ 1554.649811][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1554.654921][ C0] ? __switch_to+0x800/0x10f0 [ 1554.659587][ C0] ? __pfx_kthread+0x10/0x10 [ 1554.664170][ C0] ret_from_fork_asm+0x1a/0x30 [ 1554.668942][ C0]