last executing test programs: 14.706797701s ago: executing program 2 (id=1409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xfe64, 0x0, &(0x7f0000000040)="b6691c75e657d5aa36b7b20cc058", 0x0, 0x2f, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="5bef35a04261194e36b537a031b9381b36fd75205a0691b060648f7fc20321307a68b37245054ec8c03ceceaf64b140d40476ceedc0df56ca5e950be7f2358e385e43570d6c490f936aae3aab237e9f7c92a11fbcf1daa2a0494c8ba8ca0852610a5098b9e9d063ae491ee88018f33a502e76fe20f6cd864fd839fbf1dba046f798e34b0d892f593dcd06a4189265b20588002219f4a901c27da3ff0f75f8a499efd1188bbbb340a40430a0dd713853ea7373e4b35780bb886ac76546fa9d95d", 0x4}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x200000000000030e, &(0x7f0000000100)}) pivot_root(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff752570757ba1b0000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x840000000002, 0x3, 0x100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060103004000006c94c000000000010000020500010007000000cb44119dd819dffa470ba111b080e611c10b1ff05785d57241fd426f1d2f62bc38eb600d07c341c20642d425"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) getpid() connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 13.520315862s ago: executing program 2 (id=1411): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="d3", 0x1}], 0x1) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r5, 0x68, 0x880}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 10.304316071s ago: executing program 0 (id=1418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600100000206010800000000000000000000fffc0900020073797a30000000000500010006000000050005000a0000000500040000000000140007800800114000000000050015002800000011000300686173683a6e65742c6e6574163bc722e74824e002253b7b903b09fd6fa12e384e0b05692b6177251a621eb803586c7da18fb98a8c65521753725653af49d0ad83d66c975584f9770d75659fc4fe8c66df5ce6efee8aa32d0a659515e3407685b29d44b83a96ef36ae9fd284fc42be3274944b039dcf2a0f4d71b76bd74a20b3d071736ee2e682777051050c7aca0d74f3369ea5d5"], 0x60}}, 0x0) 10.177077867s ago: executing program 2 (id=1419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x844) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x50dc85624ea6cf59, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f00000000c0)=0x4) fsopen(&(0x7f0000000200)='coda\x00', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 9.66477103s ago: executing program 0 (id=1420): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000405f1412020000000000010902000921fd7f000122e301090581038930050a70000000000000"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x7, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20500, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="00fe070e00", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e26, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) ioctl$TCSETS(r3, 0x404c4701, &(0x7f00000002c0)={0x0, 0x0, 0x400000, 0x1a01c5c6, 0x54, "5bcc19a3894df7ecc10d1c8f0000000400"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) r5 = syz_io_uring_setup(0xd03, &(0x7f0000002900)={0x0, 0xf25d, 0x10, 0x0, 0x3}, &(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r5, 0x23, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYRES64=r2], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') process_vm_writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f0000000200)={0x0, {0x80000000, 0x8}}) ioctl$TIOCSTI(r3, 0x5412, 0x0) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) 8.424146423s ago: executing program 3 (id=1426): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000405f1412020000000000010902000921fd7f000122e301090581038930050a70000000000000"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x7, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20500, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="00fe070e00", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e26, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) ioctl$TCSETS(r3, 0x404c4701, &(0x7f00000002c0)={0x0, 0x0, 0x400000, 0x1a01c5c6, 0x54, "5bcc19a3894df7ecc10d1c8f0000000400"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) r5 = syz_io_uring_setup(0xd03, &(0x7f0000002900)={0x0, 0xf25d, 0x10, 0x0, 0x3}, &(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r5, 0x23, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYRES64=r2], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') process_vm_writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f0000000200)={0x0, {0x80000000, 0x8}}) ioctl$TIOCSTI(r3, 0x5412, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r7, 0x0, 0x0, 0x3c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) 8.000806979s ago: executing program 1 (id=1429): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0) r5 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1c, 0x2, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x4, 0xfffffffd, 0xfffffffd, 0x200, 0xb, 0x9f, 0x5b0, [0x100, 0xfffffffa]}}) recvmsg$kcm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/37, 0x25}, {&(0x7f0000001400)=""/119, 0x77}, {&(0x7f0000001480)=""/31, 0x1f}, {&(0x7f00000014c0)=""/172, 0xac}, {&(0x7f0000001580)=""/204, 0xcc}, {&(0x7f0000001680)=""/18, 0x12}, {&(0x7f00000016c0)=""/155, 0x9b}], 0xa}, 0x120) mprotect(&(0x7f0000741000/0x2000)=nil, 0x2000, 0xb) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) writev(r0, &(0x7f0000002980)=[{&(0x7f0000000000)="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", 0x167}], 0x1) 6.905688359s ago: executing program 1 (id=1431): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4d8, @remote, 0x140}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="f48d34561e929127863c187021d00e98406d3c0b8ab3fd44f3999df9c55caed3443c8a829dfe644a15", 0x29}], 0x1}}], 0x1, 0x4004040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000002c0)=""/148, 0x94}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/70, 0x46}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/59, 0x3b}, {&(0x7f0000002b80)=""/64, 0x40}, {&(0x7f0000002bc0)=""/184, 0xb8}, {&(0x7f0000002c80)=""/139, 0x8b}, {&(0x7f0000002d40)=""/25, 0x19}, {&(0x7f0000002d80)=""/103, 0x67}], 0xa, &(0x7f0000002ec0)=""/82, 0x52}, 0x800}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x10000008, 0x8001, 0x5, 0x7, 0x0, 0x1, 0x12, 0xd7}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) syz_open_dev$dri(0x0, 0x1, 0xcc882) 6.749575023s ago: executing program 4 (id=1432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00', 0x6bf1c2d5adba8c32}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080), 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x81, 0x6, @remote}, 0x14) sendmmsg$sock(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0x1, 0x40500f0) r5 = socket$kcm(0x2, 0xa, 0x2) lseek(r5, 0x9, 0x3) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "93278921a47499ccc43236ce69c4662de0d7dc38bef1f8136e9d6f7e307d9e8f", "2be62e7c1b8275d2fd402008a44d69d864e3fe3582ca8414221d3835ec52af78711cb1dbf10ae688f6fe0578e80570d5", "e393aada1ce554400aadc5bc05ecf953a834d6f794a3f367890e9778", {"90b92bf2730eef53dbbdd0bcdbaaa8a7", "43f0a3b21a0d2d97e42f7c6fa67c60ba"}}}}}}}}, 0xc2) 6.571348934s ago: executing program 2 (id=1433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0d0f0808820400000f32c4c15564efb9050000000f01d966ba410066ed0fa80f01c40fc70036f4c4e2fd40db6681ba6100003e9f0000ef", 0x37}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) syz_genetlink_get_family_id$nl802154(&(0x7f0000003440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21411008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.373078269s ago: executing program 4 (id=1434): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0x4142, 0x0) madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000000000000ff9200000a00ff0608000240000000020900010073797a31000000002c008455000000000000000a000107ec72797a3200000000140000001100010000000000000000000000000000008903bbb6b9ad51ad7c39b6ac2ce85bb2d2a278b9fb2a8b03804d27e6d5fc98685c04a29dc46da4f9d76256b53e3c378ac20ed56e44102cfc547a79762ded2fcee300b5c23739f774f8b0f5f405d96b49eab01e30083f4208cfa25c32a99fdfba2cdfee9a75ee23610351c89039774aa573e387851ad35d7724feeaa9ccbb9342cd51162e6db2a46c"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001136d000000000000400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="300000000d0a010800000000000000000a0000010900020073797a310000150046106dbe0900010073797a3100f97200"], 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000000)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 6.306649527s ago: executing program 0 (id=1435): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 6.147269036s ago: executing program 0 (id=1436): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002000)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004598002800020000fe06907800000000fffffffffffd4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) read$FUSE(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = open(&(0x7f0000002040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r4, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000540)={'TPROXY\x00'}, &(0x7f0000000580)=0x1e) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85) write$UHID_INPUT(r5, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1001, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) mq_notify(r4, &(0x7f0000000a80)={0x0, 0xb, 0x4, @thr={&(0x7f0000000900)="0de3dcc7e91ff5e3ac217767c814e8f5badeadf6b08a43ff87e8a842addd139c8a04f46e3d341242e9db80b42e16d3a32f887e3ae7a06419945d67f827ef715a9232d058e79337810c9533ca9b8028ff3521a5a7e8b591eaeb39e70d05a23f464239c64eeeaba3ebb6dc989c41b78e599ed629bece9608429b58c59be11870830b472248139cd8d851cadd6ffe0ab4cb8302c6", &(0x7f00000009c0)="9e1986b06e3b43c7a9c255463a6a1ff3f9a4b6f876f74c63750583b36b65b9bad8c777beb103edb8c2b5e844a0cb529764e62342ad90b5b41510306342dcaee3d071774791ac38cf55368d81c4231ea6216acf7a0071c10978223701f643d8f9411cfd2dde058aee2556fd6b7e5524bfc1963677856f102b9f13aeab290ca0b3da5daddf1a6a8c4e1bc03dbc5b16fd82c82b9e67a1b903214f8a325faaeb1d1cf7f7c8a86a10"}}) 6.12171622s ago: executing program 4 (id=1437): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000440)) 5.986072961s ago: executing program 2 (id=1438): r0 = syz_io_uring_setup(0x49, &(0x7f0000000240)={0x0, 0xb3e5, 0x80, 0x2, 0x1e}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x208500, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r1, 0x2) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x3, 0x7fffffffeffe) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_getparam(0x0, &(0x7f00000000c0)) gettid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) stat(0x0, &(0x7f0000000480)) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r5 = fsmount(r2, 0x1, 0x0) symlinkat(0x0, r5, 0x0) 5.943393965s ago: executing program 1 (id=1439): r0 = socket(0x28, 0x5, 0x6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000c00)={&(0x7f00000000c0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x404, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x853}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x76ec}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "7b8e2511c908f0c8c47beab13041e1554205c8bb43f50688aeaabe6c2a89"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5b5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4800}, @TIPC_NLA_CON_FLAG={0x6f4a61aa3ec697ec, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf518}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10001, @private0, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "cfb85bea46da9a2ff3e33d5e7f226c11e5b7fa573b7b2031aa831dfbbb1bd8205f7e"}}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "2cf6282b1941743369689e95e36091234b8fe5d84e1e1319ab7080dbb3754e709bef9d3729d4484edb38e84e619cff2a9641c7cc9c9b733219abde5381675f5491ae1baeab9c30559eea04fe844758e3fb7960cfb586ecc78f963064fe28e7725a3d71bb359054a42a98c2ebf5c45a6b32e8bb0ae6f37ef9e0dded0a9c7d953d7f80a74457b82ab3673abec95b6aaa8a24c2ea84d35c44cf899192324ed0272c2d64f76ec05a70e5a0be6194b474073421bfa486cf11e859b7a91e8e415180"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "05d88faec59076e0b0155fdec2c569c895d7072e8f9e5ec4a310dc31b70363"}}, @TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "25403cc8289785f04bb42db3301185a909a8574c0cdb04"}}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x84}, 0x20040000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="f00000001a00130700000000fcdbdf25ffffffff000000000000000000000000ac141441000000000000005e00000000000400005421000200000000210000005052d4ec6597e0ed395a2770682df34c4edb4c1e8ed4465e", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000900000000000000fdfffffffeffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd700000350000020000005000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) waitid(0x0, r3, 0x0, 0x2, &(0x7f0000000280)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 5.87551557s ago: executing program 0 (id=1440): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000100000027bf"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) 5.1175759s ago: executing program 4 (id=1441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x7f7241, 0x0) dup(r3) 4.086542353s ago: executing program 4 (id=1442): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600100000206010800000000000000000000fffc0900020073797a30000000000500010006000000050005000a0000000500040000000000140007800800114000000000050015002800000011000300686173683a6e65742c6e6574163bc722e74824e002253b7b903b09fd6fa12e384e0b05692b6177251a621eb803586c7da18fb98a8c65521753725653af49d0ad83d66c975584f9770d75659fc4fe8c66df5ce6efee8aa32d0a659515e3407685b29d44b83a96ef36ae9fd284fc42be3274944b039dcf2a0f4d71b76bd74a20b3d071736ee2e682777051050c7aca0d74f3369ea5d5"], 0x60}}, 0x0) 4.056243816s ago: executing program 3 (id=1443): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000004300000000000000000000001811b900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.65923231s ago: executing program 3 (id=1444): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) r2 = io_uring_setup(0x2f08, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r1}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) preadv2(r2, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/230, 0xe6}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/44, 0x2c}, {0x0}], 0x6, 0x6b3, 0x3ff, 0x41a6988b36f563b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000002040)={0x0, 0x80000000, 0x4, 0x1}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001c40)={r5, 0x5, 0x3, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000003080)={{r4}, 0x0, 0xa, @inherit={0x48, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000e9ffff011a00000000008003000000000000001200000000000000030000000000000405000000000000000900001735fdf400000000d842c543f2e5e60000000058a0a4313dec77c085c755e037c457a49a37ae17cb95c938fd8c8caf30554d9c4cc02155fca9a08aa17cbe11429ab63506c18f2bf542874a746baed7e8055bc0bcba79bfe6d31d186dd291cc05551748d7e6f9260669e2ee04c572fbe0d5"]}, @subvolid}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x5, &(0x7f0000002440)=[{0x2b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0xfffffff9}, {0x28, '\x00', @data, 0x7ff}, {0x26, '\x00', @st={0x4, [{0x3, @svalue=0x6}, {0x2, @svalue=0x775a}, {0x3, @svalue=0xd2}, {0x1, @uvalue=0xfff}]}, 0x7fe}, {0x1a, '\x00', @buffer={"1f29109593e94c1526b8498db6ffd285e263e707871c662b4b273dced21ffb38", 0x20}}, {0x0, '\x00', @data=0x4, 0x4}, {0x38, '\x00', @st={0x4, [{0x1, @uvalue=0x95}, {0x1, @svalue=0x1}, {0x0, @svalue=0x9}, {0x3, @svalue=0x6}]}, 0x1}]}) ftruncate(0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x3, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) 3.603934986s ago: executing program 1 (id=1445): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100)=0xc3, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x12f}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x7d1}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.545147725s ago: executing program 2 (id=1446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x46723000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x7, 0xfff3}, {0xd, 0x3}, {0xfff2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r3, 0x0, 0x0}, 0x10) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) syz_emit_ethernet(0x7c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa861f3400462f00fc000800000000000000000000000000ff020000000000000000000000000001042081000000892f008000000800000086dd88a888be00000000100000000100000000000000080022eb00000000200000fd020000000000000000000000080065580000000098cf2c"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x0) r8 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) bind$nfc_llcp(r8, &(0x7f0000000240)={0x27, r9, 0x1, 0x2, 0x68, 0x40, "2446a8bf1d596fad489799dcb5704fbd3bc0314e67aa9842c78c108d2e582f6eb3a769f9430d08287971e8d1c9649d6876f0741f12fb73cfb8fd0e0259c83a", 0xe}, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x20, 0x0, 0x6bfe}}}, 0x8) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f00000002c0)={0x6, 0x10}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.475510543s ago: executing program 4 (id=1447): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) socket$kcm(0x2a, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) ioctl$TIOCGRS485(r6, 0x5453, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') syz_genetlink_get_family_id$fou(&(0x7f0000019240), r7) pread64(r7, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 2.487322395s ago: executing program 1 (id=1448): socket(0xa, 0x5, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r3, 0x107, 0x2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000004c0)="a6", 0x1, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0x9}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/210, 0xd2, 0x0, 0x0}, &(0x7f0000000400)=0x40) 2.482168722s ago: executing program 0 (id=1449): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@n={0x0, 0xb, @SEQ_NOTEON=@note=0x58, 0x6}) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 2.014015219s ago: executing program 3 (id=1450): syz_open_dev$video4linux(0x0, 0x2, 0x2) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0x7fffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0xcb) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mknod$loop(0x0, 0x8fff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB='>'], 0x1c}}, 0x20024090) 939.109321ms ago: executing program 3 (id=1451): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) fchdir(r0) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) 816.394015ms ago: executing program 3 (id=1452): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000001", @ANYBLOB="0102"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) io_uring_enter(r4, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x7d1}], 0x1}}], 0x1, 0x2090) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 1 (id=1453): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000600)=0x148, 0x4) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x68, {"b8010000000f01c166baf80cb8f80b6280ef66bafc0cb08dee66ba4000b03aee420f2138460f017d0c48b89c000000000000000f23c00f21f835010008000f23f866baa000b88d9a0000ef0f01f2c402d9b64d600f22e4"}}], 0x68}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x3, 0x6, 0x31237648, 0x6, 0x1, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$lan78xx(0x4, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x0, 0x0, 0x6}}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 403.079372][ T803] usb 1-1: string descriptor 0 read error: -22 [ 403.087365][ T803] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.097164][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.126270][ T803] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 403.351296][ T29] audit: type=1400 audit(1778872394.966:834): avc: denied { write } for pid=9549 comm="syz.0.1015" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 403.450842][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.451297][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.459081][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 403.463220][ T9573] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 403.469494][ T4928] Bluetooth: hci4: command 0x0c1a tx timeout [ 403.537342][ T803] net_ratelimit: 1 callbacks suppressed [ 403.537367][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.724656][ T9597] vcan1: entered promiscuous mode [ 403.729910][ T9597] vcan1: entered allmulticast mode [ 403.916184][ T9604] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 403.930522][ T9604] /dev/nullb0: Can't open blockdev [ 403.944555][ T9604] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 404.023112][ T42] usb 1-1: USB disconnect, device number 40 [ 404.183578][ T9610] netlink: 'syz.2.1031': attribute type 2 has an invalid length. [ 404.191518][ T9610] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 404.731511][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.787852][ T9618] SQUASHFS error: Failed to read block 0x0: -5 [ 404.794912][ T9618] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1032'. [ 404.874365][ T9619] /dev/nullb0: Can't open blockdev [ 405.003658][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.099473][ T9620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.530781][ T9595] Bluetooth: hci0: command 0x0c1a tx timeout [ 405.853922][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.863025][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.873256][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.951534][ T9636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.960123][ T9636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.968804][ T9636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.983219][ T9636] netlink: 'syz.4.1037': attribute type 13 has an invalid length. [ 406.758073][ T9643] netlink: 'syz.3.1039': attribute type 2 has an invalid length. [ 406.766034][ T9643] netlink: 'syz.3.1039': attribute type 1 has an invalid length. [ 406.920962][ T5720] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 407.789183][ T5720] usb 3-1: device descriptor read/64, error -71 [ 408.516763][ T934] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 408.524451][ T5720] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 408.556630][ T29] audit: type=1400 audit(1778872400.176:835): avc: denied { mounton } for pid=9651 comm="syz.4.1043" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 408.728312][ T934] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 408.743465][ T934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 408.754726][ T934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 408.791182][ T934] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 408.812697][ T803] net_ratelimit: 8 callbacks suppressed [ 408.812710][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.851842][ T29] audit: type=1400 audit(1778872400.456:836): avc: denied { bind } for pid=9656 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 408.858238][ T934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.912487][ T29] audit: type=1400 audit(1778872400.456:837): avc: denied { read } for pid=9656 comm="syz.3.1044" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 408.938936][ T934] usb 1-1: Product: syz [ 408.943734][ T29] audit: type=1400 audit(1778872400.456:838): avc: denied { open } for pid=9656 comm="syz.3.1044" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 408.969561][ T934] usb 1-1: Manufacturer: syz [ 408.987477][ T934] usb 1-1: SerialNumber: syz [ 409.013247][ T29] audit: type=1400 audit(1778872400.636:839): avc: denied { read write } for pid=9658 comm="syz.2.1045" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 409.014041][ T934] usb 1-1: config 0 descriptor?? [ 409.066428][ T29] audit: type=1400 audit(1778872400.636:840): avc: denied { open } for pid=9658 comm="syz.2.1045" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 409.091098][ T29] audit: type=1400 audit(1778872400.676:841): avc: denied { ioctl } for pid=9658 comm="syz.2.1045" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 409.104622][ T9661] loop2: detected capacity change from 0 to 7 [ 409.123207][ T5073] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 409.140560][ T9661] Dev loop2: unable to read RDB block 7 [ 409.161636][ T9661] loop2: AHDI p1 p2 p3 [ 409.166557][ T9661] loop2: partition table partially beyond EOD, truncated [ 409.175548][ T9661] loop2: p1 start 1818582900 is beyond EOD, truncated [ 409.183861][ T9661] loop2: p3 start 335544320 is beyond EOD, truncated [ 409.310794][ T5073] usb 4-1: Using ep0 maxpacket: 8 [ 409.318273][ T5073] usb 4-1: unable to get BOS descriptor or descriptor too short [ 409.327967][ T5073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 409.339562][ T5073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 409.350310][ T5073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 409.373370][ T5073] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 409.393538][ T5073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 409.414149][ T5073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 409.437121][ T5073] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 409.454833][ T5073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.500635][ T5073] usb 4-1: Product: syz [ 409.522583][ T5073] usb 4-1: Manufacturer: syz [ 409.538607][ T5073] usb 4-1: SerialNumber: syz [ 409.803033][ T29] audit: type=1400 audit(1778872401.276:842): avc: denied { getopt } for pid=9644 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 409.902191][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.926391][ T5073] usb 4-1: config 0 descriptor?? [ 409.937830][ T9657] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 409.950507][ T5073] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.204364][ T9657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.241189][ T9657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.291627][ T29] audit: type=1400 audit(1778872401.916:843): avc: denied { write } for pid=9656 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 410.450239][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.532903][ T29] audit: type=1400 audit(1778872402.156:844): avc: denied { ioctl } for pid=9656 comm="syz.3.1044" path="socket:[26080]" dev="sockfs" ino=26080 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 410.588520][ T9674] lo: Caught tx_queue_len zero misconfig [ 410.750205][ T5073] usb 4-1: USB disconnect, device number 29 [ 410.849095][ T4978] Dev loop2: unable to read RDB block 7 [ 410.860184][ T4978] loop2: AHDI p1 p2 p3 [ 410.869052][ T4978] loop2: partition table partially beyond EOD, truncated [ 410.885257][ T4978] loop2: p1 start 1818582900 is beyond EOD, truncated [ 410.893144][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.910023][ T4978] loop2: p3 start 335544320 is beyond EOD, truncated [ 411.007703][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.286290][ T4978] Dev loop2: unable to read RDB block 7 [ 411.292073][ T4978] loop2: AHDI p1 p2 p3 [ 411.296335][ T4978] loop2: partition table partially beyond EOD, truncated [ 411.303935][ T4978] loop2: p1 start 1818582900 is beyond EOD, truncated [ 411.315157][ T4978] loop2: p3 start 335544320 is beyond EOD, truncated [ 411.372919][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.381951][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.392068][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.560802][ T5804] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 411.660778][ T42] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 411.710785][ T5804] usb 3-1: Using ep0 maxpacket: 16 [ 411.718009][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 411.727143][ T5804] usb 3-1: config 6 has an invalid interface number: 150 but max is 0 [ 411.736168][ T5804] usb 3-1: config 6 has an invalid descriptor of length 24, skipping remainder of the config [ 411.746635][ T5804] usb 3-1: config 6 has no interface number 0 [ 411.752990][ T5804] usb 3-1: config 6 interface 150 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.766350][ T5804] usb 3-1: config 6 interface 150 has no altsetting 0 [ 411.775173][ T5804] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 411.784629][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.792832][ T5804] usb 3-1: Product: syz [ 411.797182][ T5804] usb 3-1: Manufacturer: syz [ 411.801957][ T5804] usb 3-1: SerialNumber: syz [ 411.810785][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 411.821066][ T42] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 411.830177][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.838685][ T42] usb 4-1: Product: syz [ 411.843126][ T42] usb 4-1: Manufacturer: syz [ 411.847818][ T42] usb 4-1: SerialNumber: syz [ 411.855457][ T42] usb 4-1: config 0 descriptor?? [ 411.865240][ T42] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 411.873756][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 411.879621][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 411.889982][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 411.897039][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 411.913462][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.923607][ T42] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 411.931831][ T42] usb 4-1: media controller created [ 411.947697][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.970465][ T42] usb 4-1: selecting invalid altsetting 3 [ 411.976414][ T42] ttusb2: set interface to alts=3 failed [ 412.014611][ T42] DVB: Unable to find symbol tda10086_attach() [ 412.021897][ T5073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.034291][ T42] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 412.045207][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 412.057341][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 412.085685][ T9692] ttusb2: i2c wr len=120 too high [ 412.095578][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 412.106678][ T5804] usb 3-1: USB disconnect, device number 48 [ 412.148023][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 412.196822][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 412.810041][ T42] usb 4-1: USB disconnect, device number 30 [ 412.909448][ T9704] SQUASHFS error: Failed to read block 0x0: -5 [ 413.194277][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.215450][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 413.620922][ T803] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 413.639721][ T9711] vcan1: entered promiscuous mode [ 413.646422][ T9711] vcan1: entered allmulticast mode [ 413.770884][ T803] usb 3-1: Using ep0 maxpacket: 16 [ 413.781488][ T803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 413.792015][ T803] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 413.799617][ T803] usb 3-1: can't read configurations, error -71 [ 413.932750][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.970811][ T42] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 414.123795][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 414.146999][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 414.167365][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 414.183298][ T42] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 414.195379][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.195405][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 414.195418][ T29] audit: type=1400 audit(1778872405.816:848): avc: denied { ioctl } for pid=9714 comm="syz.0.1061" path="socket:[26975]" dev="sockfs" ino=26975 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 414.203751][ T42] usb 4-1: Product: syz [ 414.239333][ T42] usb 4-1: Manufacturer: syz [ 414.244712][ T42] usb 4-1: SerialNumber: syz [ 414.263826][ T5073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.317778][ T42] usb 4-1: config 0 descriptor?? [ 415.714989][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.724764][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.732940][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.741068][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.950308][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.965445][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.274857][ T9735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1066'. [ 418.882675][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.007988][ T9737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1067'. [ 419.438963][ T934] iguanair 1-1:0.0: failed to get version [ 419.535977][ T934] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 419.564705][ T934] usb 1-1: USB disconnect, device number 41 [ 419.696042][ T29] audit: type=1400 audit(1778872411.316:849): avc: denied { setattr } for pid=9741 comm="syz.2.1069" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 419.844650][ T9752] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1073'. [ 419.879136][ T29] audit: type=1400 audit(1778872411.496:850): avc: denied { create } for pid=9753 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 419.912942][ T29] audit: type=1400 audit(1778872411.506:851): avc: denied { write } for pid=9753 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 419.949120][ T29] audit: type=1400 audit(1778872411.536:852): avc: denied { mount } for pid=9755 comm="syz.1.1075" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 420.157576][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.182937][ T9760] FAULT_INJECTION: forcing a failure. [ 420.182937][ T9760] name failslab, interval 1, probability 0, space 0, times 0 [ 420.198254][ T9760] CPU: 0 UID: 0 PID: 9760 Comm: syz.0.1076 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.198281][ T9760] Tainted: [L]=SOFTLOCKUP [ 420.198288][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.198300][ T9760] Call Trace: [ 420.198306][ T9760] [ 420.198315][ T9760] dump_stack_lvl+0x100/0x190 [ 420.198345][ T9760] should_fail_ex.cold+0x5/0xa [ 420.198375][ T9760] ? tomoyo_encode2+0xfb/0x3c0 [ 420.198396][ T9760] should_failslab+0xc2/0x120 [ 420.198412][ T9760] __kmalloc_noprof+0xe0/0x850 [ 420.198432][ T9760] tomoyo_encode2+0xfb/0x3c0 [ 420.198452][ T9760] tomoyo_encode+0x29/0x50 [ 420.198478][ T9760] tomoyo_mount_acl+0x388/0x8b0 [ 420.198502][ T9760] ? is_bpf_text_address+0x8a/0x1a0 [ 420.198529][ T9760] ? bpf_ksym_find+0x128/0x1c0 [ 420.198564][ T9760] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 420.198588][ T9760] ? kernel_text_address+0x8d/0x100 [ 420.198609][ T9760] ? unwind_get_return_address+0x59/0xa0 [ 420.198640][ T9760] ? tomoyo_domain+0xb2/0x150 [ 420.198650][ T9760] ? tomoyo_profile+0x47/0x60 [ 420.198681][ T9760] tomoyo_mount_permission+0x214/0x460 [ 420.198707][ T9760] ? tomoyo_mount_permission+0x1f6/0x460 [ 420.198736][ T9760] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 420.198777][ T9760] security_sb_mount+0xdd/0x270 [ 420.198792][ T9760] path_mount+0x158/0x23d0 [ 420.198811][ T9760] ? __pfx_path_mount+0x10/0x10 [ 420.198826][ T9760] ? lockdep_hardirqs_on+0x78/0x100 [ 420.198856][ T9760] ? putname+0xb1/0x110 [ 420.198881][ T9760] ? kmem_cache_free+0x127/0x6c0 [ 420.198928][ T9760] ? __x64_sys_mount+0x293/0x310 [ 420.198952][ T9760] __x64_sys_mount+0x293/0x310 [ 420.198968][ T9760] ? __pfx___x64_sys_mount+0x10/0x10 [ 420.198989][ T9760] do_syscall_64+0x10b/0xf80 [ 420.199004][ T9760] ? clear_bhb_loop+0x40/0x90 [ 420.199030][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.199050][ T9760] RIP: 0033:0x7f1d10b9ce59 [ 420.199068][ T9760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.199088][ T9760] RSP: 002b:00007f1d11b14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 420.199107][ T9760] RAX: ffffffffffffffda RBX: 00007f1d10e15fa0 RCX: 00007f1d10b9ce59 [ 420.199120][ T9760] RDX: 0000200000000480 RSI: 0000200000000040 RDI: 0000000000000000 [ 420.199127][ T9760] RBP: 00007f1d11b14090 R08: 0000200000000140 R09: 0000000000000000 [ 420.199134][ T9760] R10: 0000000002004888 R11: 0000000000000246 R12: 0000000000000002 [ 420.199140][ T9760] R13: 00007f1d10e16038 R14: 00007f1d10e15fa0 R15: 00007ffda9018038 [ 420.199156][ T9760] [ 420.456791][ T29] audit: type=1400 audit(1778872411.906:853): avc: denied { execute } for pid=9753 comm="syz.2.1074" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 420.547480][ T9763] FAULT_INJECTION: forcing a failure. [ 420.547480][ T9763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.561757][ T9763] CPU: 1 UID: 0 PID: 9763 Comm: syz.0.1078 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.561789][ T9763] Tainted: [L]=SOFTLOCKUP [ 420.561796][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.561807][ T9763] Call Trace: [ 420.561815][ T9763] [ 420.561823][ T9763] dump_stack_lvl+0x100/0x190 [ 420.561852][ T9763] should_fail_ex.cold+0x5/0xa [ 420.561879][ T9763] _copy_from_user+0x2e/0xd0 [ 420.561910][ T9763] snd_seq_oss_write+0x395/0x800 [ 420.561947][ T9763] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 420.561984][ T9763] ? bpf_lsm_file_permission+0x9/0x10 [ 420.562008][ T9763] odev_write+0x51/0xa0 [ 420.562032][ T9763] vfs_write+0x2aa/0x1070 [ 420.562055][ T9763] ? __pfx_odev_write+0x10/0x10 [ 420.562081][ T9763] ? __pfx_vfs_write+0x10/0x10 [ 420.562099][ T9763] ? find_held_lock+0x2b/0x80 [ 420.562119][ T9763] ? __fget_files+0x215/0x3d0 [ 420.562144][ T9763] ? __fget_files+0x215/0x3d0 [ 420.562174][ T9763] ? __fget_files+0x21f/0x3d0 [ 420.562205][ T9763] ksys_write+0x12a/0x250 [ 420.562227][ T9763] ? __pfx_ksys_write+0x10/0x10 [ 420.562251][ T9763] ? rcu_is_watching+0x12/0xc0 [ 420.562287][ T9763] do_syscall_64+0x10b/0xf80 [ 420.562313][ T9763] ? clear_bhb_loop+0x40/0x90 [ 420.562338][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.562359][ T9763] RIP: 0033:0x7f1d10b9ce59 [ 420.562383][ T9763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.562402][ T9763] RSP: 002b:00007f1d11b14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.562423][ T9763] RAX: ffffffffffffffda RBX: 00007f1d10e15fa0 RCX: 00007f1d10b9ce59 [ 420.562436][ T9763] RDX: 000000000000fd85 RSI: 0000200000000080 RDI: 0000000000000003 [ 420.562448][ T9763] RBP: 00007f1d11b14090 R08: 0000000000000000 R09: 0000000000000000 [ 420.562460][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.562472][ T9763] R13: 00007f1d10e16038 R14: 00007f1d10e15fa0 R15: 00007ffda9018038 [ 420.562500][ T9763] [ 420.811171][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.863404][ T29] audit: type=1400 audit(1778872412.486:854): avc: denied { ioctl } for pid=9766 comm="syz.0.1079" path="socket:[27052]" dev="sockfs" ino=27052 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 420.893316][ T9767] netlink: 'syz.0.1079': attribute type 16 has an invalid length. [ 420.910883][ T9767] netlink: 'syz.0.1079': attribute type 17 has an invalid length. [ 420.951746][ T9767] bridge0: port 3(team0) entered blocking state [ 420.958302][ T9767] bridge0: port 3(team0) entered forwarding state [ 420.965095][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.972248][ T9767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.981316][ T9767] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.988462][ T9767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.042236][ T9769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9769 comm=syz.0.1079 [ 421.072253][ T9767] bridge0: left allmulticast mode [ 421.091621][ T9770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.183776][ T29] audit: type=1400 audit(1778872412.796:855): avc: denied { getopt } for pid=9768 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.218056][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.663461][ T9767] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 422.073631][ T5804] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 422.256481][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.273282][ T5804] usb 3-1: Using ep0 maxpacket: 16 [ 422.313674][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 422.335927][ T5804] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.349452][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.360782][ T5804] usb 3-1: Product: syz [ 422.368145][ T5804] usb 3-1: Manufacturer: ᇠ[ 422.378336][ T5804] usb 3-1: SerialNumber: syz [ 422.554552][ T9786] batadv_slave_0: Caught tx_queue_len zero misconfig [ 422.568854][ T9787] CIFS: VFS: UNC: missing share name [ 422.575351][ T9787] CIFS: VFS: Malformed UNC in devname [ 422.937586][ T5804] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 422.985366][ T5804] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 423.271350][ T5804] usb 3-1: USB disconnect, device number 51 [ 423.300391][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.329228][ T29] audit: type=1400 audit(1778872414.946:856): avc: denied { getopt } for pid=9793 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 423.393778][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.419821][ T29] audit: type=1400 audit(1778872414.966:857): avc: denied { append } for pid=9791 comm="syz.3.1085" name="file0" dev="fuse" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 423.608068][ T29] audit: type=1400 audit(1778872415.226:858): avc: denied { read } for pid=9800 comm="syz.1.1088" path="socket:[27172]" dev="sockfs" ino=27172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 423.780979][ T9404] block nbd0: Possible stuck request ffff888028465080: control (read@0,1024B). Runtime 240 seconds [ 423.792298][ T9404] block nbd0: Possible stuck request ffff888028465240: control (read@1024,1024B). Runtime 240 seconds [ 423.803548][ T9404] block nbd0: Possible stuck request ffff888028465400: control (read@2048,1024B). Runtime 240 seconds [ 423.815054][ T9404] block nbd0: Possible stuck request ffff8880284655c0: control (read@3072,1024B). Runtime 240 seconds [ 423.918044][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.910399][ T9595] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 424.916715][ T9595] Bluetooth: hci0: command 0x0c1a tx timeout [ 424.938621][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.958784][ T29] audit: type=1400 audit(1778872416.576:859): avc: denied { connect } for pid=9800 comm="syz.1.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 424.979012][ T29] audit: type=1400 audit(1778872416.576:860): avc: denied { bind } for pid=9800 comm="syz.1.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 425.008850][ T9815] FAULT_INJECTION: forcing a failure. [ 425.008850][ T9815] name failslab, interval 1, probability 0, space 0, times 0 [ 425.039883][ T9815] CPU: 0 UID: 0 PID: 9815 Comm: syz.2.1092 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.039917][ T9815] Tainted: [L]=SOFTLOCKUP [ 425.039924][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.039935][ T9815] Call Trace: [ 425.039942][ T9815] [ 425.039950][ T9815] dump_stack_lvl+0x100/0x190 [ 425.039982][ T9815] should_fail_ex.cold+0x5/0xa [ 425.040006][ T9815] ? tomoyo_encode2+0xfb/0x3c0 [ 425.040022][ T9815] should_failslab+0xc2/0x120 [ 425.040034][ T9815] __kmalloc_noprof+0xe0/0x850 [ 425.040051][ T9815] ? d_absolute_path+0x136/0x1b0 [ 425.040076][ T9815] tomoyo_encode2+0xfb/0x3c0 [ 425.040108][ T9815] tomoyo_encode+0x29/0x50 [ 425.040135][ T9815] tomoyo_realpath_from_path+0x18c/0x690 [ 425.040171][ T9815] tomoyo_path_number_perm+0x23c/0x580 [ 425.040185][ T9815] ? tomoyo_path_number_perm+0x22e/0x580 [ 425.040199][ T9815] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 425.040246][ T9815] ? find_held_lock+0x2b/0x80 [ 425.040267][ T9815] ? __fget_files+0x215/0x3d0 [ 425.040292][ T9815] ? hook_file_ioctl_common+0x149/0x410 [ 425.040321][ T9815] ? __fget_files+0x215/0x3d0 [ 425.040352][ T9815] ? __fget_files+0x21f/0x3d0 [ 425.040377][ T9815] security_file_ioctl+0xd3/0x230 [ 425.040393][ T9815] __x64_sys_ioctl+0xb7/0x210 [ 425.040423][ T9815] do_syscall_64+0x10b/0xf80 [ 425.040450][ T9815] ? clear_bhb_loop+0x40/0x90 [ 425.040477][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.040498][ T9815] RIP: 0033:0x7faf6cd9ce59 [ 425.040515][ T9815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.040526][ T9815] RSP: 002b:00007faf6db92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.040537][ T9815] RAX: ffffffffffffffda RBX: 00007faf6d015fa0 RCX: 00007faf6cd9ce59 [ 425.040545][ T9815] RDX: 0000200000000140 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 425.040552][ T9815] RBP: 00007faf6db92090 R08: 0000000000000000 R09: 0000000000000000 [ 425.040558][ T9815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.040564][ T9815] R13: 00007faf6d016038 R14: 00007faf6d015fa0 R15: 00007ffd567c98b8 [ 425.040588][ T9815] [ 425.040616][ T9815] ERROR: Out of memory at tomoyo_realpath_from_path. [ 425.050876][ T42] iguanair 4-1:0.0: failed to get version [ 425.302988][ T42] iguanair 4-1:0.0: probe with driver iguanair failed with error -110 [ 425.334894][ T42] usb 4-1: USB disconnect, device number 31 [ 425.496603][ T9824] siw: device registration error -23 [ 425.507780][ T803] libceph: connect (1)[c::]:6789 error -101 [ 425.683796][ T9821] ceph: No mds server is up or the cluster is laggy [ 426.323519][ T803] libceph: mon0 (1)[c::]:6789 connect error [ 426.451352][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.771747][ T42] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 426.789974][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 426.950782][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 426.974728][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.981431][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.998402][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 427.017038][ T42] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 427.018858][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.026479][ T42] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 427.037950][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 427.048029][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.073963][ T10] usb 3-1: can't read configurations, error -71 [ 427.189154][ T42] usb 4-1: config 0 descriptor?? [ 427.356122][ T9851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.364967][ T9851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.373806][ T9851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.389784][ T9851] netlink: 'syz.4.1100': attribute type 13 has an invalid length. [ 427.601007][ T29] audit: type=1400 audit(1778872419.206:861): avc: denied { open } for pid=9848 comm="syz.0.1097" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 427.610862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.635131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.648110][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.668309][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.797606][ T29] audit: type=1400 audit(1778872419.416:862): avc: denied { watch } for pid=9848 comm="syz.0.1097" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 428.129509][ T9862] netlink: 'syz.2.1103': attribute type 13 has an invalid length. [ 429.154227][ T10] usb 4-1: USB disconnect, device number 32 [ 429.201585][ T29] audit: type=1326 audit(1778872420.826:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz.1.1109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29d699ce59 code=0x0 [ 429.414021][ T9881] syzkaller0: entered promiscuous mode [ 429.420398][ T9881] syzkaller0: entered allmulticast mode [ 429.696584][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 429.726386][ T9893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64256 sclass=netlink_route_socket pid=9893 comm=syz.2.1113 [ 429.748905][ T29] audit: type=1400 audit(1778872421.366:864): avc: denied { connect } for pid=9892 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 430.078957][ T29] audit: type=1400 audit(1778872421.696:865): avc: denied { shutdown } for pid=9892 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 430.155207][ T9896] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 430.560771][ T29] audit: type=1400 audit(1778872422.166:866): avc: denied { mount } for pid=9900 comm="syz.1.1115" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 430.907374][ T9906] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 430.915232][ T9906] audit: out of memory in audit_log_start [ 431.375510][ T9912] loop5: detected capacity change from 0 to 7 [ 431.435830][ T9912] Dev loop5: unable to read RDB block 7 [ 431.448105][ T9912] loop5: unable to read partition table [ 431.455004][ T9912] loop5: partition table beyond EOD, truncated [ 431.464122][ T9912] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 431.659220][ T9917] netlink: 'syz.1.1118': attribute type 13 has an invalid length. [ 432.351981][ T24] net_ratelimit: 6 callbacks suppressed [ 432.352001][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.484737][ T9922] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1120'. [ 432.499020][ T29] audit: type=1400 audit(1778872424.126:867): avc: denied { mount } for pid=9924 comm="syz.3.1123" name="/" dev="hugetlbfs" ino=27376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 432.528329][ T9923] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1121'. [ 433.358383][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.398086][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.955362][ T9945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1130'. [ 434.101481][ T803] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 434.117304][ T42] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 434.125745][ T29] audit: type=1400 audit(1778872425.706:868): avc: denied { mount } for pid=9942 comm="syz.3.1129" name="/" dev="ramfs" ino=27486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 434.253478][ T29] audit: type=1400 audit(1778872425.866:869): avc: denied { execute } for pid=9942 comm="syz.3.1129" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 434.320861][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 434.328408][ T803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.343717][ T42] usb 1-1: config 8 has an invalid interface number: 241 but max is 1 [ 434.357557][ T803] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 434.369167][ T29] audit: type=1400 audit(1778872425.986:870): avc: denied { getopt } for pid=9950 comm="syz.1.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.369255][ T42] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 434.399954][ T803] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 434.409213][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.419739][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.438571][ T803] usb 3-1: config 0 descriptor?? [ 434.455159][ T42] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 434.479460][ T42] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 434.507564][ T42] usb 1-1: config 8 has an invalid interface number: 239 but max is 1 [ 434.530474][ T42] usb 1-1: config 8 has an invalid interface number: 3 but max is 1 [ 434.544825][ T42] usb 1-1: config 8 has 3 interfaces, different from the descriptor's value: 2 [ 434.560344][ T42] usb 1-1: config 8 has no interface number 0 [ 434.572815][ T42] usb 1-1: config 8 has no interface number 1 [ 434.583904][ T42] usb 1-1: config 8 has no interface number 2 [ 434.600172][ T42] usb 1-1: config 8 interface 241 altsetting 196 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 434.622483][ T42] usb 1-1: config 8 interface 241 altsetting 196 endpoint 0xF has an invalid bInterval 69, changing to 7 [ 434.642373][ T42] usb 1-1: config 8 interface 241 altsetting 196 has a duplicate endpoint with address 0x6, skipping [ 434.663690][ T42] usb 1-1: config 8 interface 241 altsetting 196 endpoint 0x2 has an invalid bInterval 65, changing to 7 [ 434.689669][ T42] usb 1-1: config 8 interface 241 altsetting 196 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 434.712145][ T42] usb 1-1: config 8 interface 241 altsetting 196 has a duplicate endpoint with address 0x7, skipping [ 434.734880][ T42] usb 1-1: config 8 interface 241 altsetting 196 has a duplicate endpoint with address 0x7, skipping [ 434.758337][ T42] usb 1-1: config 8 interface 241 altsetting 196 endpoint 0x3 has an invalid bInterval 128, changing to 7 [ 434.783659][ T42] usb 1-1: config 8 interface 241 altsetting 196 has a duplicate endpoint with address 0x9, skipping [ 434.805514][ T42] usb 1-1: config 8 interface 241 altsetting 196 endpoint 0x5 has invalid maxpacket 479, setting to 64 [ 434.826630][ T42] usb 1-1: config 8 interface 241 altsetting 196 has a duplicate endpoint with address 0x4, skipping [ 434.859942][ T42] usb 1-1: config 8 interface 241 altsetting 196 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 435.158712][ T42] usb 1-1: too many endpoints for config 8 interface 239 altsetting 173: 141, using maximum allowed: 30 [ 435.186393][ T42] usb 1-1: config 8 interface 239 altsetting 173 has a duplicate endpoint with address 0x9, skipping [ 435.208636][ T42] usb 1-1: config 8 interface 239 altsetting 173 has 1 endpoint descriptor, different from the interface descriptor's value: 141 [ 435.261875][ T42] usb 1-1: config 8 interface 3 altsetting 84 has a duplicate endpoint with address 0x6, skipping [ 435.278936][ T42] usb 1-1: config 8 interface 3 altsetting 84 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 435.291812][ T42] usb 1-1: config 8 interface 3 altsetting 84 has an invalid descriptor for endpoint zero, skipping [ 435.307751][ T42] usb 1-1: config 8 interface 3 altsetting 84 has a duplicate endpoint with address 0x9, skipping [ 435.320901][ T42] usb 1-1: config 8 interface 3 altsetting 84 endpoint 0xA has invalid maxpacket 21860, setting to 64 [ 435.419231][ T42] usb 1-1: config 8 interface 3 altsetting 84 has a duplicate endpoint with address 0x6, skipping [ 435.430366][ T42] usb 1-1: config 8 interface 3 altsetting 84 has a duplicate endpoint with address 0x6, skipping [ 435.441684][ T42] usb 1-1: config 8 interface 3 altsetting 84 has a duplicate endpoint with address 0x5, skipping [ 435.452720][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.462591][ T9971] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1135'. [ 435.464979][ T42] usb 1-1: config 8 interface 3 altsetting 84 has a duplicate endpoint with address 0xF, skipping [ 435.482314][ T42] usb 1-1: config 8 interface 241 has no altsetting 0 [ 435.490798][ T42] usb 1-1: config 8 interface 239 has no altsetting 0 [ 435.549647][ T9974] netlink: 'syz.1.1136': attribute type 13 has an invalid length. [ 435.940274][ T42] usb 1-1: config 8 interface 3 has no altsetting 0 [ 435.948973][ T42] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0bce, bcdDevice=e7.3a [ 435.971939][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.995285][ T42] usb 1-1: Product: syz [ 436.007296][ T42] usb 1-1: Manufacturer: Ј [ 436.015863][ T42] usb 1-1: SerialNumber: syz [ 436.287479][ T9982] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 436.295454][ T9982] audit: out of memory in audit_log_start [ 436.340973][ T42] usb 1-1: USB disconnect, device number 42 [ 436.371199][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 436.421731][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.493837][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.540803][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 436.547896][ T9] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 436.560563][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.581122][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.589389][ T9] usb 4-1: config 0 has no interface number 0 [ 436.601548][ T9] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.629082][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 436.704295][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.726065][ T9] usb 4-1: Product: syz [ 436.727455][ T9984] 8021q: VLANs not supported on sit0 [ 436.739206][ T9] usb 4-1: Manufacturer: syz [ 436.751786][ T9] usb 4-1: SerialNumber: syz [ 436.768352][ T9] usb 4-1: config 0 descriptor?? [ 437.037454][ T9] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 437.073489][ T9] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 437.103294][ T10] usb 3-1: USB disconnect, device number 54 [ 437.580870][ T42] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 437.772882][ T9] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 437.780411][ T9] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 437.796440][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.894134][ T9977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.912813][ T9977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.962455][ T42] usb 1-1: config index 0 descriptor too short (expected 33060, got 36) [ 437.971744][ T42] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 437.982502][ T42] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 438.054760][ T42] usb 1-1: New USB device found, idVendor=056a, idProduct=0725, bcdDevice= 0.05 [ 438.089762][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.128492][ T42] usb 1-1: config 0 descriptor?? [ 438.188753][ T29] audit: type=1400 audit(1778872429.806:871): avc: denied { write } for pid=9994 comm="syz.2.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 438.676005][T10008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1142'. [ 439.115416][T10001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 439.306328][ T9] usb 1-1: USB disconnect, device number 43 [ 439.451419][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.783412][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.821240][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.300569][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.500367][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.595482][ T24] usb 4-1: USB disconnect, device number 33 [ 440.681880][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.691916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.998439][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.162544][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1145'. [ 441.204335][T10013] netlink: 'syz.0.1147': attribute type 2 has an invalid length. [ 441.212338][T10013] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 441.265865][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1145'. [ 441.317865][ T9999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.331260][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.517264][ T9999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.136141][T10015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1148'. [ 442.459543][T10022] netlink: 'syz.3.1149': attribute type 2 has an invalid length. [ 442.467613][T10022] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 443.371290][ T934] net_ratelimit: 3 callbacks suppressed [ 443.371307][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.519456][T10025] netlink: 'syz.0.1150': attribute type 13 has an invalid length. [ 443.613871][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.644748][ T29] audit: type=1400 audit(1778872435.256:872): avc: denied { name_bind } for pid=10027 comm="syz.1.1152" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 443.647547][T10030] fuse: fd is not a fuse device [ 443.966708][ T29] audit: type=1400 audit(1778872435.586:873): avc: denied { mount } for pid=10035 comm="syz.3.1154" name="/" dev="autofs" ino=27892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 444.094131][ T29] audit: type=1400 audit(1778872435.626:874): avc: denied { create } for pid=10035 comm="syz.3.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 444.208848][ T29] audit: type=1400 audit(1778872435.676:875): avc: denied { write } for pid=10035 comm="iou-wrk-10036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 444.260889][ T29] audit: type=1400 audit(1778872435.746:876): avc: denied { read } for pid=10035 comm="syz.3.1154" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 444.382976][ T29] audit: type=1400 audit(1778872435.746:877): avc: denied { open } for pid=10035 comm="syz.3.1154" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 444.431449][T10043] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1155'. [ 444.452686][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 444.553186][ T29] audit: type=1400 audit(1778872435.746:878): avc: denied { ioctl } for pid=10035 comm="syz.3.1154" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 444.581380][ T29] audit: type=1400 audit(1778872435.856:879): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 444.623647][ T10] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 444.648680][T10043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10043 comm=syz.3.1155 [ 444.666018][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.722459][ T29] audit: type=1400 audit(1778872436.346:880): avc: denied { ioctl } for pid=10042 comm="syz.3.1155" path="socket:[27906]" dev="sockfs" ino=27906 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 444.724083][T10046] vlan2: entered allmulticast mode [ 444.810984][T10046] bond0: entered allmulticast mode [ 444.825625][T10046] bond_slave_0: entered allmulticast mode [ 445.086856][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 445.115011][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.137479][ T10] usb 3-1: config 0 has no interface number 0 [ 445.150117][T10046] bond_slave_1: entered allmulticast mode [ 445.163011][ T29] audit: type=1400 audit(1778872436.376:881): avc: denied { write } for pid=10042 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 445.164460][ T10] usb 3-1: config 0 interface 2 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 445.183976][T10057] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1157'. [ 445.230216][ T10] usb 3-1: config 0 interface 2 has no altsetting 0 [ 445.239941][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 445.296030][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.317788][T10057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.331307][T10057] bond_slave_0: left allmulticast mode [ 445.344480][ T10] usb 3-1: config 0 descriptor?? [ 445.370251][ T10] usbhid 3-1:0.2: couldn't find an input interrupt endpoint [ 445.378607][T10057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.415942][T10057] bond_slave_1: left allmulticast mode [ 445.444940][T10057] bond0 (unregistering): Released all slaves [ 445.445757][T10063] loop5: detected capacity change from 0 to 7 [ 445.490460][T10063] Dev loop5: unable to read RDB block 7 [ 445.518663][T10063] loop5: unable to read partition table [ 445.526094][T10063] loop5: partition table beyond EOD, truncated [ 445.535408][T10063] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 445.695488][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.916018][T10078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1165'. [ 446.249972][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.410954][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.574537][T10084] binder: 10083:10084 ioctl c0306201 0 returned -14 [ 446.648273][T10089] binder: 10083:10089 ioctl c0306201 0 returned -14 [ 446.821865][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.832513][T10093] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 446.925996][T10096] netlink: 'syz.1.1168': attribute type 13 has an invalid length. [ 447.406965][ T10] usb 3-1: USB disconnect, device number 55 [ 447.926136][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.291362][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 448.571654][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 448.604827][ T24] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 448.667789][ T24] usb 3-1: config 0 has no interface number 0 [ 448.688674][ T24] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 448.730671][ T24] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.771572][ T24] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 448.805844][ T24] usb 3-1: config 0 interface 196 has no altsetting 0 [ 448.844696][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 448.872405][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.888520][ T24] usb 3-1: Product: syz [ 448.903838][ T24] usb 3-1: Manufacturer: syz [ 448.912339][ T24] usb 3-1: SerialNumber: syz [ 449.018960][T10126] /dev/nullb0: Can't open blockdev [ 449.020206][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.164558][ T24] usb 3-1: config 0 descriptor?? [ 449.180920][T10106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 449.285652][T10133] loop5: detected capacity change from 0 to 7 [ 449.317696][T10133] Dev loop5: unable to read RDB block 7 [ 449.331047][T10133] loop5: unable to read partition table [ 450.542754][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 450.542773][ T29] audit: type=1400 audit(1778872441.416:885): avc: denied { setattr } for pid=10134 comm="syz.3.1177" name="" dev="pipefs" ino=5251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 450.561510][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.591895][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.612218][ T24] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 450.641492][ T24] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 450.669998][T10133] loop5: partition table beyond EOD, truncated [ 450.697008][ T24] usb 3-1: USB disconnect, device number 56 [ 450.725042][T10133] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 451.328083][T10154] netlink: 'syz.0.1182': attribute type 13 has an invalid length. [ 451.650858][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.786675][T10158] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1184'. [ 452.307010][T10172] /dev/nullb0: Can't open blockdev [ 452.734124][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.108299][ T934] IPVS: starting estimator thread 0... [ 453.141658][T10190] io-wq is not configured for unbound workers [ 453.214756][ T29] audit: type=1400 audit(1778872444.836:886): avc: denied { name_bind } for pid=10188 comm="syz.4.1192" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 453.245885][T10189] IPVS: using max 39 ests per chain, 93600 per kthread [ 453.333531][ T29] audit: type=1400 audit(1778872444.956:887): avc: denied { map } for pid=10196 comm="syz.3.1195" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 453.611242][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.711487][T10205] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1197'. [ 453.720440][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.727938][T10205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.060657][ T9404] block nbd0: Possible stuck request ffff888028465080: control (read@0,1024B). Runtime 270 seconds [ 454.071674][ T9404] block nbd0: Possible stuck request ffff888028465240: control (read@1024,1024B). Runtime 270 seconds [ 454.082734][ T9404] block nbd0: Possible stuck request ffff888028465400: control (read@2048,1024B). Runtime 270 seconds [ 454.093731][ T9404] block nbd0: Possible stuck request ffff8880284655c0: control (read@3072,1024B). Runtime 270 seconds [ 454.099354][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.113225][T10205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.129850][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.245195][T10208] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 454.283295][T10208] /dev/nullb0: Can't open blockdev [ 455.691330][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.837485][ T29] audit: type=1400 audit(1778872447.436:888): avc: denied { write } for pid=10212 comm="syz.0.1201" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 455.858019][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.930856][ T29] audit: type=1400 audit(1778872447.546:889): avc: denied { create } for pid=10219 comm="syz.4.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 456.769650][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.812280][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.823675][T10220] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 456.835820][T10220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10220 comm=syz.2.1202 [ 456.891746][ T29] audit: type=1400 audit(1778872448.506:890): avc: denied { setopt } for pid=10228 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 456.963501][T10216] lo speed is unknown, defaulting to 1000 [ 456.981843][T10216] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.991850][T10216] xfrm0 speed is unknown, defaulting to 1000 [ 457.534484][T10241] input: syz0 as /devices/virtual/input/input28 [ 457.548191][ T29] audit: type=1400 audit(1778872449.166:891): avc: denied { read } for pid=4963 comm="acpid" name="event4" dev="devtmpfs" ino=3227 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.588500][ T29] audit: type=1400 audit(1778872449.166:892): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3227 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.612859][ T29] audit: type=1400 audit(1778872449.166:893): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3227 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.801879][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.838667][T10250] /dev/nullb0: Can't open blockdev [ 458.051684][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 458.197227][T10257] siw: device registration error -23 [ 458.210795][ T9] usb 4-1: device descriptor read/64, error -71 [ 458.864761][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.254568][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.283355][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.339911][T10263] 9p: Could not find request transport: rdma{’t=0x0000000000004e23 [ 459.421689][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 459.522495][ T934] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 459.730818][ T9] usb 4-1: device descriptor read/64, error -71 [ 459.760833][ T934] usb 1-1: Using ep0 maxpacket: 32 [ 459.770299][ T934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.780123][ T934] usb 1-1: config 6 has an invalid interface number: 113 but max is 0 [ 459.788868][ T934] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 459.799734][ T934] usb 1-1: config 6 has no interface number 0 [ 459.806411][ T934] usb 1-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 459.820227][ T934] usb 1-1: config 6 interface 113 has no altsetting 0 [ 459.830093][ T934] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 459.840254][ T934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 459.848684][ T9] usb usb4-port1: attempt power cycle [ 459.855429][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.864569][ T934] usb 1-1: SerialNumber: syz [ 459.908766][ T934] ftdi_sio 1-1:6.113: FTDI USB Serial Device converter detected [ 459.925870][ T934] usb 1-1: Detected SIO [ 459.935866][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.943771][ T934] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 460.110385][ T934] usb 1-1: USB disconnect, device number 44 [ 460.204346][ T934] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 460.214094][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 460.232527][ T934] ftdi_sio 1-1:6.113: device disconnected [ 460.251356][ T9] usb 4-1: device descriptor read/8, error -71 [ 460.550765][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 460.581373][ T9] usb 4-1: device descriptor read/8, error -71 [ 460.691865][ T9] usb usb4-port1: unable to enumerate USB device [ 460.979280][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.884663][ T24] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 462.100117][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.113306][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 462.125322][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 462.135121][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.145820][ T24] usb 1-1: config 0 descriptor?? [ 462.161328][T10288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 462.576752][ T24] hid (null): unknown global tag 0xd [ 462.776052][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.784731][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.919957][ T9] IPVS: starting estimator thread 0... [ 463.009195][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.041148][T10315] FAULT_INJECTION: forcing a failure. [ 463.041148][T10315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.054858][T10315] CPU: 0 UID: 0 PID: 10315 Comm: syz.3.1226 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.054892][T10315] Tainted: [L]=SOFTLOCKUP [ 463.054899][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.054936][T10315] Call Trace: [ 463.054943][T10315] [ 463.054952][T10315] dump_stack_lvl+0x100/0x190 [ 463.054983][T10315] should_fail_ex.cold+0x5/0xa [ 463.055012][T10315] _copy_from_user+0x2e/0xd0 [ 463.055044][T10315] __sys_bpf+0x243/0x4b90 [ 463.055065][T10315] ? rcu_is_watching+0x12/0xc0 [ 463.055098][T10315] ? __pfx___sys_bpf+0x10/0x10 [ 463.055117][T10315] ? __schedule+0x12a7/0x67a0 [ 463.055142][T10315] ? find_held_lock+0x2b/0x80 [ 463.055179][T10315] ? __pfx___schedule+0x10/0x10 [ 463.055230][T10315] __x64_sys_bpf+0x7b/0xc0 [ 463.055252][T10315] do_syscall_64+0x10b/0xf80 [ 463.055279][T10315] ? clear_bhb_loop+0x40/0x90 [ 463.055304][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.055325][T10315] RIP: 0033:0x7f72b359ce59 [ 463.055346][T10315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.055366][T10315] RSP: 002b:00007f72b4381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.055386][T10315] RAX: ffffffffffffffda RBX: 00007f72b3816180 RCX: 00007f72b359ce59 [ 463.055400][T10315] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 463.055412][T10315] RBP: 00007f72b4381090 R08: 0000000000000000 R09: 0000000000000000 [ 463.055424][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.055436][T10315] R13: 00007f72b3816218 R14: 00007f72b3816180 R15: 00007fffd63535f8 [ 463.055464][T10315] [ 463.134806][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.315726][T10321] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 463.358545][T10321] /dev/nullb0: Can't open blockdev [ 463.377570][ T24] hid (null): unknown global tag 0xc [ 463.385267][ T24] hid (null): invalid report_size 1668165699 [ 463.391801][ T24] hid (null): unknown global tag 0xd [ 463.397308][ T24] hid (null): unknown global tag 0xc [ 463.402869][ T24] hid (null): unknown global tag 0xe [ 463.408523][ T24] hid (null): report_id 0 is invalid [ 463.414378][ T24] hid (null): report_id 38086 is invalid [ 463.420385][ T24] hid (null): unknown global tag 0xca [ 463.426574][ T24] hid (null): report_id 0 is invalid [ 463.432318][ T24] hid (null): unknown global tag 0xc [ 463.447022][ T24] hid (null): invalid report_count -868990611 [ 463.472477][T10311] IPVS: using max 36 ests per chain, 86400 per kthread [ 463.543370][ T24] hid (null): report_id 0 is invalid [ 463.618429][ T24] hid (null): unknown global tag 0xc [ 463.701791][ T24] hid (null): unknown global tag 0xd [ 464.214561][ T24] hid_parser_main: 19 callbacks suppressed [ 464.214585][ T24] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 464.281366][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.398663][ T24] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 464.406139][ T24] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 464.429957][ T24] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 464.437210][ T24] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 464.453737][ T24] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 464.485405][ T24] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 465.002428][ T24] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 465.009974][ T24] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 465.064431][ T29] audit: type=1400 audit(1778872456.646:894): avc: denied { write } for pid=10329 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 465.118953][ T24] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 465.312133][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.337463][ T24] wacom 0003:056A:5000.000E: unknown global tag 0xd [ 465.362510][ T24] wacom 0003:056A:5000.000E: item 0 4 1 13 parsing failed [ 465.372217][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.435259][ T29] audit: type=1400 audit(1778872457.056:895): avc: denied { create } for pid=10329 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 465.482335][ T24] wacom 0003:056A:5000.000E: parse failed [ 465.510296][ T24] wacom 0003:056A:5000.000E: probe with driver wacom failed with error -22 [ 465.525099][T10342] tunl0: Caught tx_queue_len zero misconfig [ 465.540214][ T24] usb 1-1: USB disconnect, device number 45 [ 465.562345][T10342] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 465.584855][ T29] audit: type=1400 audit(1778872457.206:896): avc: denied { sys_admin } for pid=10329 comm="syz.3.1229" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 466.290823][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.372073][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.409311][ T29] audit: type=1400 audit(1778872457.276:897): avc: denied { bind } for pid=10348 comm="syz.1.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 466.493715][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 466.588635][T10342] netlink: 'syz.0.1232': attribute type 30 has an invalid length. [ 466.637958][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 467.042098][T10360] /dev/nullb0: Can't open blockdev [ 467.468120][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.582931][T10366] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1239'. [ 467.674865][T10368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1240'. [ 467.686812][ T29] audit: type=1400 audit(1778872459.296:898): avc: denied { setopt } for pid=10367 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 467.738908][ T29] audit: type=1400 audit(1778872459.296:899): avc: denied { write } for pid=10367 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 467.773518][ T29] audit: type=1400 audit(1778872459.396:900): avc: denied { ioctl } for pid=10373 comm="syz.1.1237" path="socket:[28583]" dev="sockfs" ino=28583 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 467.974101][T10381] fuse: Bad value for 'user_id' [ 467.980119][T10381] fuse: Bad value for 'user_id' [ 468.144588][T10386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.757655][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.766210][T10386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.803650][T10386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.853775][ T29] audit: type=1400 audit(1778872460.476:901): avc: denied { create } for pid=10394 comm="syz.1.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 469.162746][T10393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.192228][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'. [ 469.247220][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1249'. [ 469.278040][T10397] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 470.308096][T10420] xt_ecn: cannot match TCP bits for non-tcp packets [ 470.331339][T10393] net_ratelimit: 92 callbacks suppressed [ 470.331354][T10393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.353949][T10397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.400843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.535831][T10393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.546256][T10393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.572657][T10393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.601292][ T29] audit: type=1400 audit(1778872462.216:902): avc: denied { append } for pid=10424 comm="syz.0.1252" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 470.710905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.719674][T10393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.744589][T10393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.797661][T10393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.868940][T10425] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 470.881607][T10393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.594209][ T29] audit: type=1400 audit(1778872464.216:903): avc: denied { write } for pid=10447 comm="syz.3.1261" name="file0" dev="tmpfs" ino=1422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 472.619533][ T29] audit: type=1400 audit(1778872464.246:904): avc: denied { open } for pid=10447 comm="syz.3.1261" path="/256/file0" dev="tmpfs" ino=1422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 472.706233][T10455] No such timeout policy "syz0" [ 473.152288][ T29] audit: type=1400 audit(1778872464.346:905): avc: denied { setopt } for pid=10450 comm="syz.2.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 473.177931][ T803] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 473.248155][T10463] lo: Caught tx_queue_len zero misconfig [ 473.342400][ T803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 473.353717][ T803] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 473.363438][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.387420][ T803] usb 3-1: config 0 descriptor?? [ 473.397020][T10455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 473.429086][ T29] audit: type=1326 audit(1778872465.046:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.3.1265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b359ce59 code=0x7fc00000 [ 473.520863][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 473.670810][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 473.677612][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 473.686025][ T9] usb 1-1: config 0 has no interface number 0 [ 473.692463][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 473.702535][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 474.233352][ T803] hid (null): unknown global tag 0xd [ 474.238772][ T803] hid (null): unknown global tag 0xc [ 474.248049][ T803] hid (null): invalid report_size 1668165699 [ 474.295605][ T803] hid (null): unknown global tag 0xd [ 474.343483][ T803] hid (null): unknown global tag 0xc [ 474.365239][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.374100][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.389429][ T803] hid (null): unknown global tag 0xe [ 474.396663][ T803] hid (null): report_id 0 is invalid [ 474.403808][ T803] hid (null): report_id 38086 is invalid [ 474.409934][ T803] hid (null): unknown global tag 0xca [ 474.424007][ T803] hid (null): report_id 0 is invalid [ 474.433100][ T803] hid (null): unknown global tag 0xc [ 474.438481][ T803] hid (null): invalid report_count -868990611 [ 474.446093][ T803] hid (null): report_id 0 is invalid [ 474.451768][ T803] hid (null): unknown global tag 0xc [ 474.457358][ T803] hid (null): unknown global tag 0xd [ 474.470608][ T803] hid_parser_main: 175 callbacks suppressed [ 474.470628][ T803] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 474.486438][ T803] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 474.493925][ T803] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 474.501166][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 474.510276][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.520117][ T9] usb 1-1: Product: syz [ 474.524962][ T9] usb 1-1: Manufacturer: syz [ 474.529565][ T9] usb 1-1: SerialNumber: syz [ 474.532703][ T803] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 474.537167][ T9] usb 1-1: config 0 descriptor?? [ 474.546701][T10463] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 474.554021][T10463] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 474.577006][ T803] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 474.586320][ T803] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 474.594602][ T803] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 474.605635][ T803] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 474.612651][ T803] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 474.619560][ T29] audit: type=1326 audit(1778872466.246:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.3.1265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72b353e1d9 code=0x7fc00000 [ 474.646196][ T803] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 474.655437][ T803] wacom 0003:056A:5000.000F: unknown global tag 0xd [ 474.662442][ T803] wacom 0003:056A:5000.000F: item 0 4 1 13 parsing failed [ 474.670221][ T803] wacom 0003:056A:5000.000F: parse failed [ 474.678213][ T803] wacom 0003:056A:5000.000F: probe with driver wacom failed with error -22 [ 475.031197][T10463] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 475.040087][T10463] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 475.501629][ T10] net_ratelimit: 38 callbacks suppressed [ 475.501643][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.517169][ T5720] usb 3-1: USB disconnect, device number 57 [ 475.528471][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 475.555240][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 475.566153][ T9] asix 1-1:0.34: probe with driver asix failed with error -61 [ 475.567099][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.349012][T10504] SELinux: failed to load policy [ 476.579207][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.662358][ T29] audit: type=1400 audit(1778872468.286:908): avc: denied { connect } for pid=10517 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 476.693899][T10527] netlink: 'syz.1.1283': attribute type 21 has an invalid length. [ 476.720978][T10527] IPv6: NLM_F_CREATE should be specified when creating new route [ 476.847129][ T29] audit: type=1400 audit(1778872468.466:909): avc: denied { ioctl } for pid=10526 comm="syz.1.1283" path="socket:[29930]" dev="sockfs" ino=29930 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 476.950801][ T803] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 477.105065][ T5720] usb 1-1: USB disconnect, device number 46 [ 477.121395][ T803] usb 4-1: Using ep0 maxpacket: 8 [ 477.144846][ T803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 477.178223][ T803] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 477.208248][ T803] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 477.343673][ T803] usb 4-1: Product: syz [ 477.386401][ T803] usb 4-1: Manufacturer: syz [ 477.422211][ T803] usb 4-1: SerialNumber: syz [ 477.676372][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.727695][ T803] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 477.748439][ T803] usb 4-1: Handspring Visor / Palm OS: port 176, is for unknown use [ 477.757260][ T803] usb 4-1: Handspring Visor / Palm OS: port 218, is for unknown use [ 477.773491][ T803] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 478.102086][ T803] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 478.191075][ T803] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 478.210532][ T803] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 478.352193][ T803] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 478.439707][T10556] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1289'. [ 478.731956][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.750990][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 478.804702][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.317368][T10565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.373968][T10565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.396091][T10577] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1297'. [ 479.419096][T10565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.459465][T10579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.697498][ T29] audit: type=1400 audit(1778872471.316:910): avc: denied { map } for pid=10583 comm="syz.2.1300" path="socket:[30764]" dev="sockfs" ino=30764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 480.487439][ T42] usb 4-1: USB disconnect, device number 38 [ 480.538343][ T42] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 480.555163][ T42] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 480.566678][ T42] visor 4-1:1.0: device disconnected [ 480.603209][T10598] /dev/nullb0: Can't open blockdev [ 481.061446][ T29] audit: type=1400 audit(1778872472.626:911): avc: denied { bind } for pid=10603 comm="syz.3.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 481.514308][ T42] net_ratelimit: 54 callbacks suppressed [ 481.514327][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.611226][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.132975][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.832068][ T9595] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 484.307757][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.572260][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.586770][ T9404] block nbd0: Possible stuck request ffff888028465080: control (read@0,1024B). Runtime 300 seconds [ 484.597606][ T9404] block nbd0: Possible stuck request ffff888028465240: control (read@1024,1024B). Runtime 300 seconds [ 484.610031][ T9404] block nbd0: Possible stuck request ffff888028465400: control (read@2048,1024B). Runtime 300 seconds [ 484.623569][ T9404] block nbd0: Possible stuck request ffff8880284655c0: control (read@3072,1024B). Runtime 300 seconds [ 484.674888][ T29] audit: type=1326 audit(1778872476.296:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.1311" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9ce59 code=0x7ffc0000 [ 484.720602][T10629] netlink: 'syz.1.1312': attribute type 13 has an invalid length. [ 484.753590][ T29] audit: type=1326 audit(1778872476.326:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.1311" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1d10b9ce59 code=0x7ffc0000 [ 484.780476][T10625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 484.792200][T10625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 484.812481][T10625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 484.915101][T10625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 484.935565][T10625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 484.942248][T10629] overlayfs: failed to clone upperpath [ 484.952246][ T29] audit: type=1326 audit(1778872476.326:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.1311" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9ce59 code=0x7ffc0000 [ 485.020900][ T29] audit: type=1326 audit(1778872476.326:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.1311" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9ce59 code=0x7ffc0000 [ 485.049462][T10629] overlayfs: failed to clone lowerpath [ 485.120958][ T29] audit: type=1326 audit(1778872476.326:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.1311" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1d10b9ce59 code=0x7ffc0000 [ 485.200196][ T29] audit: type=1326 audit(1778872476.326:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.1311" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9ce59 code=0x7ffc0000 [ 485.286781][ T29] audit: type=1326 audit(1778872476.326:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.1311" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d10b9ce59 code=0x7ffc0000 [ 485.355132][ T29] audit: type=1326 audit(1778872476.326:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.1311" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d10b9ce59 code=0x7ffc0000 [ 485.382428][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.391332][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.412225][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.445168][ T29] audit: type=1400 audit(1778872476.326:920): avc: denied { append } for pid=10624 comm="syz.0.1311" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 485.691465][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.705940][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.810928][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 486.817130][ T9595] Bluetooth: hci1: command 0x0c1a tx timeout [ 486.901226][ T9595] Bluetooth: hci0: command 0x0c1a tx timeout [ 486.907333][T10625] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 486.970842][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 486.976894][ T9595] Bluetooth: hci4: command 0x0c1a tx timeout [ 487.035603][T10652] /dev/nullb0: Can't open blockdev [ 487.531233][ T42] net_ratelimit: 2 callbacks suppressed [ 487.531253][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.904966][ T9595] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 487.997628][ T29] audit: type=1400 audit(1778872479.616:921): avc: denied { mounton } for pid=10664 comm="syz.4.1322" path="/253/file0" dev="autofs" ino=30935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 488.177980][T10666] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 488.571732][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.590813][ T5804] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 489.050850][ T9595] Bluetooth: hci0: command 0x0c1a tx timeout [ 489.072375][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.072705][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 489.104887][ T5804] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.116250][ T5804] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 489.127853][ T5804] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 96 [ 489.189011][ T5804] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.204198][ T5804] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 489.213588][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.225708][T10682] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.233230][T10682] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.428957][T10682] bridge0: entered allmulticast mode [ 490.279096][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.388402][ T5804] usb 1-1: usb_control_msg returned -71 [ 490.420258][ T5804] usbtmc 1-1:16.0: can't read capabilities [ 490.465214][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1330'. [ 490.510242][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 490.513317][ T5804] usb 1-1: USB disconnect, device number 47 [ 490.795103][ T9595] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 490.981314][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.990672][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.001490][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.151270][T10708] /dev/nullb0: Can't open blockdev [ 491.209605][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 491.258595][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 491.453498][T10716] FAULT_INJECTION: forcing a failure. [ 491.453498][T10716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.466610][T10716] CPU: 0 UID: 0 PID: 10716 Comm: syz.0.1336 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.466628][T10716] Tainted: [L]=SOFTLOCKUP [ 491.466632][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 491.466640][T10716] Call Trace: [ 491.466644][T10716] [ 491.466649][T10716] dump_stack_lvl+0x100/0x190 [ 491.466667][T10716] should_fail_ex.cold+0x5/0xa [ 491.466683][T10716] _copy_from_user+0x2e/0xd0 [ 491.466701][T10716] copy_msghdr_from_user+0x9f/0x4f0 [ 491.466717][T10716] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 491.466738][T10716] ___sys_sendmsg+0x106/0x1e0 [ 491.466754][T10716] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.466786][T10716] __sys_sendmsg+0x170/0x220 [ 491.466797][T10716] ? __pfx___sys_sendmsg+0x10/0x10 [ 491.466815][T10716] ? rcu_is_watching+0x12/0xc0 [ 491.466834][T10716] do_syscall_64+0x10b/0xf80 [ 491.466849][T10716] ? clear_bhb_loop+0x40/0x90 [ 491.466863][T10716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.466874][T10716] RIP: 0033:0x7f1d10b9ce59 [ 491.466885][T10716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.466895][T10716] RSP: 002b:00007f1d11af3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.466907][T10716] RAX: ffffffffffffffda RBX: 00007f1d10e16090 RCX: 00007f1d10b9ce59 [ 491.466914][T10716] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 491.466921][T10716] RBP: 00007f1d11af3090 R08: 0000000000000000 R09: 0000000000000000 [ 491.466928][T10716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.466934][T10716] R13: 00007f1d10e16128 R14: 00007f1d10e16090 R15: 00007ffda9018038 [ 491.466949][T10716] [ 491.744155][ T9840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.843444][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.852424][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.150751][ T934] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 492.680813][ T934] usb 3-1: Using ep0 maxpacket: 32 [ 492.772914][ T934] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 492.801853][ T934] usb 3-1: config 0 has no interface number 0 [ 492.849168][ T934] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 492.898095][ T934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.996218][ T934] usb 3-1: Product: syz [ 493.037698][ T934] usb 3-1: Manufacturer: syz [ 493.050972][ T5804] net_ratelimit: 1 callbacks suppressed [ 493.050989][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.112237][ T934] usb 3-1: SerialNumber: syz [ 493.230242][ T934] usb 3-1: config 0 descriptor?? [ 493.274528][ T934] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 493.487979][ T934] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 493.581153][ T934] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 493.679824][ T9595] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 494.091419][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.114548][T10721] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 494.225417][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.661879][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.673704][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.817563][T10752] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 494.853895][T10752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1337'. [ 494.891938][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.111531][T10762] siw: device registration error -23 [ 495.251449][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 495.358442][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.722650][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 495.797593][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.840721][T10746] bond1: (slave veth3): Enslaving as an active interface with a down link [ 495.882433][ T9] usb 4-1: Product: syz [ 495.909157][ T9] usb 4-1: Manufacturer: syz [ 495.941154][ T9] usb 4-1: SerialNumber: syz [ 496.054090][ T934] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 496.078413][T10752] dummy0: entered promiscuous mode [ 496.120349][ T9] usb 4-1: config 0 descriptor?? [ 496.142039][ T9] ch341 4-1:0.0: ch341-uart converter detected [ 496.221746][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 496.222120][ T42] usb 3-1: USB disconnect, device number 58 [ 496.244939][ T42] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 496.266486][ T934] usb 1-1: config 127 has an invalid interface number: 192 but max is 0 [ 496.301382][ T42] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 496.303998][ T934] usb 1-1: config 127 has no interface number 0 [ 496.385718][ T42] quatech2 3-1:0.51: device disconnected [ 496.411162][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.422594][ T934] usb 1-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06 [ 496.467212][ T934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.802556][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.802628][ T9] usb 4-1: failed to receive control message: -71 [ 496.816998][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.817430][ T934] usb 1-1: Product: syz [ 496.866031][ T9] ch341-uart ttyUSB2: probe with driver ch341-uart failed with error -71 [ 496.882070][ T934] usb 1-1: Manufacturer: syz [ 496.898606][ T934] usb 1-1: SerialNumber: syz [ 496.926093][ T9] usb 4-1: USB disconnect, device number 39 [ 496.955296][ T9] ch341 4-1:0.0: device disconnected [ 497.193349][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.229064][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.248337][T10775] fuse: fd is not a fuse device [ 497.326425][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1355'. [ 498.301414][ T9] net_ratelimit: 1 callbacks suppressed [ 498.301431][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.327482][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.455737][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 498.455755][ T29] audit: type=1326 audit(1778872490.076:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.1.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d699ce59 code=0x7ffc0000 [ 498.495198][ T29] audit: type=1326 audit(1778872490.076:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.1.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d699ce59 code=0x7ffc0000 [ 498.571424][ T29] audit: type=1326 audit(1778872490.116:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.1.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f29d699ce59 code=0x7ffc0000 [ 498.643678][ T29] audit: type=1326 audit(1778872490.116:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.1.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d699ce59 code=0x7ffc0000 [ 498.704139][ T934] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 498.725657][ T29] audit: type=1326 audit(1778872490.116:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.1.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d699ce59 code=0x7ffc0000 [ 498.896604][ T29] audit: type=1326 audit(1778872490.116:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.1.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f29d699ce59 code=0x7ffc0000 [ 498.914927][ T934] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 499.025764][ T29] audit: type=1326 audit(1778872490.116:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.1.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d699ce59 code=0x7ffc0000 [ 499.028752][ T934] pac7311 1-1:127.192: probe with driver pac7311 failed with error -71 [ 499.159898][ T29] audit: type=1326 audit(1778872490.116:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.1.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d699ce59 code=0x7ffc0000 [ 499.322032][ T29] audit: type=1326 audit(1778872490.116:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.1.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d699ce59 code=0x7ffc0000 [ 499.344839][ T934] usb 1-1: USB disconnect, device number 48 [ 499.376332][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.615022][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.809551][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.874610][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.209360][T10809] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 501.579549][T10809] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 501.593929][T10809] overlayfs: failed to look up (tracing) for ino (-66) [ 502.074834][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.083617][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.100578][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.107301][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.340071][ T29] audit: type=1326 audit(1778872490.116:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.1.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d699ce59 code=0x7ffc0000 [ 502.502318][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.494770][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.542986][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.579104][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.796638][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 503.796665][ T29] audit: type=1400 audit(1778872495.416:964): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 504.124164][ T5804] IPVS: starting estimator thread 0... [ 504.214531][T10823] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1367'. [ 504.261113][T10826] IPVS: using max 65 ests per chain, 156000 per kthread [ 504.651231][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.270124][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.733893][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.340880][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 506.354893][T10842] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1371'. [ 506.542478][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 506.565307][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 506.579546][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 506.622835][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 506.671392][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 506.705119][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.716413][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.730728][ T10] usb 4-1: Product: syz [ 506.735007][ T10] usb 4-1: Manufacturer: syz [ 506.753696][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 506.828793][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.861033][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 506.875313][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 506.892054][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 507.475183][T10873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.529152][T10840] netlink: 'syz.0.1369': attribute type 4 has an invalid length. [ 507.597932][T10873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.780645][T10873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.811406][ T5804] net_ratelimit: 2 callbacks suppressed [ 509.811432][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.609510][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.618130][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.626735][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.635227][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.643677][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.652156][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.660610][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.669026][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.677466][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.773563][ T5804] usb 4-1: USB disconnect, device number 40 [ 510.788164][T10902] netlink: 'syz.2.1383': attribute type 2 has an invalid length. [ 510.796125][T10902] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 510.950322][T10908] Cannot find add_set index 2 as target [ 511.065130][T10911] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 511.093646][T10911] /dev/nullb0: Can't open blockdev [ 511.207792][T10911] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 511.284444][T10914] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1388'. [ 513.978579][T10937] netlink: 'syz.0.1394': attribute type 13 has an invalid length. [ 514.825228][T10940] fuse: fd is not a fuse device [ 514.877474][ T9404] block nbd0: Possible stuck request ffff888028465080: control (read@0,1024B). Runtime 330 seconds [ 514.888330][ T9404] block nbd0: Possible stuck request ffff888028465240: control (read@1024,1024B). Runtime 330 seconds [ 514.899917][ T9404] block nbd0: Possible stuck request ffff888028465400: control (read@2048,1024B). Runtime 330 seconds [ 514.912577][ T9404] block nbd0: Possible stuck request ffff8880284655c0: control (read@3072,1024B). Runtime 330 seconds [ 514.929784][ T10] net_ratelimit: 39 callbacks suppressed [ 514.929801][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.102935][T10947] syzkaller0: entered promiscuous mode [ 515.118705][T10947] syzkaller0: entered allmulticast mode [ 515.190105][T10952] loop5: detected capacity change from 0 to 7 [ 515.214238][T10952] Dev loop5: unable to read RDB block 7 [ 515.231122][T10952] loop5: unable to read partition table [ 515.243005][T10952] loop5: partition table beyond EOD, truncated [ 515.254861][T10953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1396'. [ 515.349312][T10952] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 515.730230][ T10] libceph: connect (1)[c::]:6789 error -101 [ 515.738014][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 515.790044][T10961] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1400'. [ 515.911786][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.922513][T10961] overlayfs: failed to clone upperpath [ 516.271103][ T10] libceph: connect (1)[c::]:6789 error -101 [ 516.280916][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 516.462479][ T29] audit: type=1400 audit(1778872507.636:965): avc: denied { write } for pid=10962 comm="syz.4.1399" name="sg0" dev="devtmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 516.505707][T10957] ceph: No mds server is up or the cluster is laggy [ 516.820444][T10969] /dev/nullb0: Can't open blockdev [ 516.970939][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.790797][ T10] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 518.279721][ T5073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.307494][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.393414][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 518.426932][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.208431][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 519.497273][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 519.510266][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 519.515020][ T5073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.519476][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.546392][ T10] usb 1-1: config 0 descriptor?? [ 519.792267][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1410'. [ 519.805162][ T29] audit: type=1400 audit(1778872511.406:966): avc: denied { nlmsg_read } for pid=11002 comm="syz.1.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 520.068303][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 520.242461][T10989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.273316][T10989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.340618][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 520.369161][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 520.416919][ T10] usb 1-1: USB disconnect, device number 49 [ 520.602133][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.124018][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.439538][T11020] SQUASHFS error: Failed to read block 0x0: -5 [ 521.449003][T11020] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1412'. [ 521.463840][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.877392][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.144661][ T934] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 522.435395][T11023] all: renamed from bridge_slave_1 (while UP) [ 522.501020][T11031] input: syz0 as /devices/virtual/input/input29 [ 522.532275][ T934] usb 4-1: Using ep0 maxpacket: 16 [ 522.557555][ T934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.595157][ T934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.636663][ T934] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 522.695120][ T934] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 522.722183][ T934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.756667][ T934] usb 4-1: config 0 descriptor?? [ 522.898032][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.641693][T11047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1422'. [ 523.741387][ T803] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 523.915785][ T803] usb 1-1: config index 0 descriptor too short (expected 2304, got 36) [ 524.052626][ T803] usb 1-1: config 253 has too many interfaces: 33, using maximum allowed: 32 [ 524.080394][ T934] usbhid 4-1:0.0: can't add hid device: -71 [ 524.085053][ T5073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.096253][ T803] usb 1-1: config 253 has an invalid descriptor of length 34, skipping remainder of the config [ 524.104334][ T934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 524.578449][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.640772][ T934] usb 4-1: USB disconnect, device number 41 [ 524.645821][ T803] usb 1-1: config 253 has 0 interfaces, different from the descriptor's value: 33 [ 524.672906][ T803] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 524.694958][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.978687][ T29] audit: type=1400 audit(1778872516.596:967): avc: denied { append } for pid=11042 comm="syz.0.1420" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 525.082748][ T934] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 525.136411][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.275156][ T934] usb 4-1: config index 0 descriptor too short (expected 2304, got 36) [ 525.416510][ T934] usb 4-1: config 253 has too many interfaces: 33, using maximum allowed: 32 [ 525.728120][T11071] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11072] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11071] [ 525.785024][T11071] 9p: Bad value for 'rfdno' [ 525.940742][ T934] usb 4-1: config 253 has an invalid descriptor of length 34, skipping remainder of the config [ 525.977955][ T934] usb 4-1: config 253 has 0 interfaces, different from the descriptor's value: 33 [ 526.013600][ T934] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 526.038378][ T934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.175844][ T5073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.284221][ T29] audit: type=1400 audit(1778872517.896:968): avc: denied { bind } for pid=11074 comm="syz.1.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 526.358364][ T29] audit: type=1400 audit(1778872517.976:969): avc: denied { write } for pid=11077 comm="syz.4.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 526.598569][ T803] usb 1-1: string descriptor 0 read error: -71 [ 526.631726][ T803] usb 1-1: USB disconnect, device number 50 [ 526.785142][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 526.807033][T11088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1434'. [ 527.222522][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.808202][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.857083][ T934] usb 4-1: string descriptor 0 read error: -71 [ 527.874177][ T934] usb 4-1: USB disconnect, device number 42 [ 528.869853][ T5073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.944420][ T29] audit: type=1326 audit(1778872519.796:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.2.1438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6cd9ce59 code=0x7ffc0000 [ 529.042772][ T29] audit: type=1326 audit(1778872520.276:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.2.1438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7faf6cd9ce59 code=0x7ffc0000 [ 529.143745][ T29] audit: type=1326 audit(1778872520.286:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.2.1438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6cd9ce59 code=0x7ffc0000 [ 529.176146][T11106] syz.2.1438 (11106): /proc/11105/oom_adj is deprecated, please use /proc/11105/oom_score_adj instead. [ 529.264171][ T29] audit: type=1326 audit(1778872520.286:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.2.1438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6cd9ce59 code=0x7ffc0000 [ 529.332066][ T29] audit: type=1326 audit(1778872520.306:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.2.1438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faf6cd9ce59 code=0x7ffc0000 [ 529.410829][ T29] audit: type=1326 audit(1778872520.306:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.2.1438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6cd9ce59 code=0x7ffc0000 [ 529.477623][ T29] audit: type=1326 audit(1778872520.306:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.2.1438" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6cd9ce59 code=0x7ffc0000 [ 529.718705][T11128] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 529.789374][T11128] /dev/nullb0: Can't open blockdev [ 529.932233][ T5073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.651734][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.826316][ T934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.060103][ T5073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.121020][T11139] netlink: 'syz.1.1448': attribute type 13 has an invalid length. [ 531.190935][ T5073] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 531.254593][T11141] syz.3.1450: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 531.269536][T11141] CPU: 0 UID: 0 PID: 11141 Comm: syz.3.1450 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.269567][T11141] Tainted: [L]=SOFTLOCKUP [ 531.269571][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.269579][T11141] Call Trace: [ 531.269584][T11141] [ 531.269589][T11141] dump_stack_lvl+0x100/0x190 [ 531.269610][T11141] warn_alloc.cold+0x95/0x1c1 [ 531.269624][T11141] ? __pfx_warn_alloc+0x10/0x10 [ 531.269648][T11141] ? __lock_acquire+0x4a5/0x2630 [ 531.269663][T11141] ? avc_has_extended_perms+0x33a/0x1080 [ 531.269681][T11141] __vmalloc_node_range_noprof+0x136c/0x1630 [ 531.269700][T11141] ? rcu_is_watching+0x12/0xc0 [ 531.269718][T11141] ? trace_contention_end+0x122/0x170 [ 531.269734][T11141] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 531.269754][T11141] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 531.269770][T11141] ? find_held_lock+0x2b/0x80 [ 531.269785][T11141] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 531.269799][T11141] ? __pfx___mutex_lock+0x10/0x10 [ 531.269820][T11141] ? futex_wait+0x11e/0x370 [ 531.269837][T11141] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 531.269855][T11141] __vmalloc_node_noprof+0xad/0xf0 [ 531.269869][T11141] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 531.269889][T11141] dvb_dvr_do_ioctl+0x15d/0x270 [ 531.269909][T11141] dvb_usercopy+0x167/0x340 [ 531.269927][T11141] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 531.269945][T11141] ? __pfx_dvb_usercopy+0x10/0x10 [ 531.269969][T11141] ? selinux_file_ioctl+0x13b/0x290 [ 531.269985][T11141] ? selinux_file_ioctl+0xb6/0x290 [ 531.270002][T11141] dvb_dvr_ioctl+0x29/0x40 [ 531.270018][T11141] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 531.270036][T11141] __x64_sys_ioctl+0x18e/0x210 [ 531.270050][T11141] do_syscall_64+0x10b/0xf80 [ 531.270066][T11141] ? clear_bhb_loop+0x40/0x90 [ 531.270080][T11141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.270092][T11141] RIP: 0033:0x7f72b359ce59 [ 531.270103][T11141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.270115][T11141] RSP: 002b:00007f72b43a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.270127][T11141] RAX: ffffffffffffffda RBX: 00007f72b3816090 RCX: 00007f72b359ce59 [ 531.270135][T11141] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007 [ 531.270142][T11141] RBP: 00007f72b3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 531.270150][T11141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.270157][T11141] R13: 00007f72b3816128 R14: 00007f72b3816090 R15: 00007fffd63535f8 [ 531.270174][T11141] [ 531.270194][T11141] Mem-Info: [ 531.529738][T11141] active_anon:43842 inactive_anon:0 isolated_anon:275 [ 531.529738][T11141] active_file:22695 inactive_file:40913 isolated_file:0 [ 531.529738][T11141] unevictable:768 dirty:370 writeback:0 [ 531.529738][T11141] slab_reclaimable:13244 slab_unreclaimable:100074 [ 531.529738][T11141] mapped:42902 shmem:34273 pagetables:1533 [ 531.529738][T11141] sec_pagetables:0 bounce:0 [ 531.529738][T11141] kernel_misc_reclaimable:0 [ 531.529738][T11141] free:1251467 free_pcp:8480 free_cma:0 [ 531.577595][T11141] Node 0 active_anon:175368kB inactive_anon:0kB active_file:90780kB inactive_file:163460kB unevictable:1536kB isolated(anon):1100kB isolated(file):0kB mapped:171608kB dirty:1480kB writeback:0kB shmem:135556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12924kB pagetables:5976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 531.612947][T11141] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 531.645710][T11141] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.675677][T11141] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 531.681462][T11141] Node 0 DMA32 free:1051704kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:175368kB inactive_anon:0kB active_file:90780kB inactive_file:163460kB unevictable:1536kB writepending:1480kB zspages:0kB present:3129332kB managed:2537052kB mlocked:0kB bounce:0kB free_pcp:33676kB local_pcp:14120kB free_cma:0kB [ 531.714954][T11141] lowmem_reserve[]: 0 0 1 1 1 [ 531.719946][T11141] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1088kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.749557][T11141] lowmem_reserve[]: 0 0 0 0 0 [ 531.754301][T11141] Node 1 Normal free:3938552kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.785883][T11141] lowmem_reserve[]: 0 0 0 0 0 [ 531.790590][T11141] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 531.803311][T11141] Node 0 DMA32: 2002*4kB (UME) 1896*8kB (UE) 1799*16kB (UM) 921*32kB (UM) 597*64kB (UME) 207*128kB (UM) 82*256kB (UM) 61*512kB (UM) 27*1024kB (UME) 3*2048kB (ME) 200*4096kB (UM) = 1051352kB [ 531.822146][T11141] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 531.833659][T11141] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 7*16kB (UM) 8*32kB (UM) 7*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (UM) = 3938552kB [ 531.850469][T11141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.860012][T11141] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.869323][T11141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.878866][T11141] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.888145][T11141] 97877 total pagecache pages [ 531.892828][T11141] 0 pages in swap cache [ 531.896963][T11141] Free swap = 124996kB [ 531.901111][T11141] Total swap = 124996kB [ 531.905249][T11141] 2097051 pages RAM [ 531.909039][T11141] 0 pages HighMem/MovableOnly [ 531.913716][T11141] 430901 pages reserved [ 531.917852][T11141] 0 pages cma reserved [ 531.940862][ T5073] usb 1-1: Using ep0 maxpacket: 16 [ 531.949268][ T5073] usb 1-1: unable to get BOS descriptor or descriptor too short [ 531.967688][ T5073] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 532.096081][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.108887][ T5073] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 532.135911][ T5073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.171320][ T5073] usb 1-1: Product: syz [ 532.191917][ T5073] usb 1-1: Manufacturer: syz [ 532.210240][ T5073] usb 1-1: SerialNumber: syz [ 532.444106][ T5073] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 533.097580][ T5073] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 533.133007][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.161025][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 533.161241][ T29] audit: type=1400 audit(1778872524.776:999): avc: denied { read } for pid=11155 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 533.213157][ T30] INFO: task udevd:5906 blocked in I/O wait for more than 143 seconds. [ 533.222999][ T30] Tainted: G L syzkaller #0 [ 533.232767][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.247497][ T30] task:udevd state:D stack:23528 pid:5906 tgid:5906 ppid:4978 task_flags:0x400140 flags:0x00080002 [ 533.267118][ T30] Call Trace: [ 533.272107][ T30] [ 533.276242][ T30] __schedule+0x1295/0x67a0 [ 533.284185][ T30] ? __pfx___schedule+0x10/0x10 [ 533.290789][ T30] ? find_held_lock+0x2b/0x80 [ 533.297836][ T30] ? schedule+0x2bf/0x390 [ 533.309330][ T30] schedule+0xdd/0x390 [ 533.318139][ T30] io_schedule+0x8a/0xf0 [ 533.326742][ T30] folio_wait_bit_common+0x414/0xa70 [ 533.336664][ T30] ? folio_wait_bit_common+0x2a0/0xa70 [ 533.348328][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 533.358930][ T5073] usb 1-1: 2:1 : bogus bTerminalLink 6 [ 533.370764][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 533.382513][ T30] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 533.395531][ T30] do_read_cache_folio+0x3bc/0x6b0 [ 533.407363][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 533.420087][ T30] read_part_sector+0xd1/0x370 [ 533.431712][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 533.444240][ T30] adfspart_check_POWERTEC+0x8a/0x630 [ 533.456526][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 533.470893][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 533.483603][ T30] bdev_disk_changed+0x7a3/0x1250 [ 533.491157][ T30] ? nbd_open+0x320/0x700 [ 533.496276][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 533.502487][ T30] blkdev_get_whole+0x187/0x290 [ 533.507511][ T30] bdev_open+0x2c7/0xe40 [ 533.512486][ T30] blkdev_open+0x34e/0x4f0 [ 533.517071][ T30] do_dentry_open+0x6d8/0x1660 [ 533.522506][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 533.527617][ T30] vfs_open+0x82/0x3f0 [ 533.532461][ T30] path_openat+0x208c/0x31a0 [ 533.537318][ T30] ? __pfx_path_openat+0x10/0x10 [ 533.542996][ T30] do_file_open+0x20e/0x430 [ 533.547653][ T30] ? __pfx_do_file_open+0x10/0x10 [ 533.554038][ T30] ? alloc_fd+0x476/0x790 [ 533.558542][ T30] ? do_getname+0x191/0x390 [ 533.568902][ T30] do_sys_openat2+0x10d/0x1e0 [ 533.579481][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 533.621291][ T30] ? __sys_recvmsg+0x18c/0x220 [ 533.631931][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 533.647926][ T30] __x64_sys_openat+0x12d/0x210 [ 533.670192][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 533.676118][ T5073] usb 1-1: USB disconnect, device number 51 [ 533.682565][ T30] ? rcu_is_watching+0x12/0xc0 [ 533.696549][ T30] do_syscall_64+0x10b/0xf80 [ 533.715181][ T30] ? clear_bhb_loop+0x40/0x90 [ 533.728722][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.750820][ T30] RIP: 0033:0x7f6cc11da407 [ 533.765690][ T30] RSP: 002b:00007ffe25e36dd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 533.787396][ T30] RAX: ffffffffffffffda RBX: 00007f6cc114e880 RCX: 00007f6cc11da407 [ 533.811142][ T30] RDX: 00000000000a0800 RSI: 000055d1fff07610 RDI: ffffffffffffff9c [ 533.820097][ T30] RBP: 000055d1ffcc22c0 R08: 0000000000000000 R09: 0000000000000000 [ 533.829472][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d1fff03340 [ 533.846367][ T30] R13: 000055d1ffefd8d0 R14: 0000000000000000 R15: 000055d1fff03340 [ 533.856316][ T30] [ 533.859469][ T30] [ 533.859469][ T30] Showing all locks held in the system: [ 533.867386][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.875636][ T30] 1 lock held by khungtaskd/30: [ 533.880632][ T30] #0: ffffffff8e7e57a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 533.891419][ T30] 3 locks held by kworker/1:3/5073: [ 533.896644][ T30] #0: ffff88801f6b7140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 533.907951][ T30] #1: ffffc90004d8fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 533.919651][ T30] #2: ffff88802ba521d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 533.929090][ T30] 2 locks held by getty/5364: [ 533.934817][ T30] #0: ffff8880389000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 533.944902][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 533.955450][ T30] 1 lock held by udevd/5906: [ 533.960079][ T30] #0: ffff8880283d3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 533.970923][ T30] 3 locks held by syz.2.1433/11089: [ 533.976157][ T30] 3 locks held by syz.2.1446/11126: [ 533.981739][ T30] #0: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_release+0x1f/0x7b0 [ 533.991725][ T30] #1: ffffffff90612300 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x38/0xa50 [ 534.003357][ T30] #2: ffffffff8e7f12e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 534.013789][ T30] [ 534.017611][ T30] ============================================= [ 534.017611][ T30] [ 534.038835][ T30] NMI backtrace for cpu 1 [ 534.038855][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 534.038883][ T30] Tainted: [L]=SOFTLOCKUP [ 534.038889][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.038900][ T30] Call Trace: [ 534.038906][ T30] [ 534.038914][ T30] dump_stack_lvl+0x100/0x190 [ 534.038944][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 534.038973][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 534.039000][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 534.039025][ T30] sys_info+0x141/0x190 [ 534.039054][ T30] watchdog+0xcb1/0x1030 [ 534.039083][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 534.039110][ T30] ? __pfx_watchdog+0x10/0x10 [ 534.039135][ T30] ? __kthread_parkme+0x18c/0x230 [ 534.039159][ T30] ? kthread+0x13a/0x450 [ 534.039181][ T30] ? __pfx_watchdog+0x10/0x10 [ 534.039203][ T30] kthread+0x370/0x450 [ 534.039226][ T30] ? __pfx_kthread+0x10/0x10 [ 534.039251][ T30] ret_from_fork+0x72b/0xd50 [ 534.039279][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 534.039306][ T30] ? __switch_to+0x800/0x1100 [ 534.039337][ T30] ? __pfx_kthread+0x10/0x10 [ 534.039362][ T30] ret_from_fork_asm+0x1a/0x30 [ 534.039404][ T30] [ 534.039411][ T30] Sending NMI from CPU 1 to CPUs 0: [ 534.171775][ C0] NMI backtrace for cpu 0 [ 534.171793][ C0] CPU: 0 UID: 0 PID: 11089 Comm: syz.2.1433 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.171819][ C0] Tainted: [L]=SOFTLOCKUP [ 534.171825][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.171836][ C0] RIP: 0010:__tlb_remove_folio_pages_size.isra.0+0xac/0x550 [ 534.171867][ C0] Code: 00 00 00 fc ff df 4c 8b 6b 28 49 8d 7d 08 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e ca 03 00 00 45 8b 7d 08 <44> 89 e6 bf 01 00 00 00 45 8d 77 01 e8 83 99 a9 ff 41 83 fc 01 0f [ 534.171885][ C0] RSP: 0018:ffffc9000edb7548 EFLAGS: 00000246 [ 534.171899][ C0] RAX: dffffc0000000000 RBX: ffffc9000edb7a88 RCX: 1ffff11006bb7401 [ 534.171911][ C0] RDX: 0000000000000000 RSI: ffffffff825effaa RDI: ffff888035dba008 [ 534.171922][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 534.171933][ C0] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000001 [ 534.171944][ C0] R13: ffff888035dba000 R14: ffffffffffffffff R15: 000000000000000e [ 534.171955][ C0] FS: 0000000000000000(0000) GS:ffff888124370000(0000) knlGS:0000000000000000 [ 534.171972][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.171984][ C0] CR2: 00007f1d10dea2f8 CR3: 00000000257a2000 CR4: 00000000003526f0 [ 534.171995][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 534.172005][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 534.172016][ C0] Call Trace: [ 534.172021][ C0] [ 534.172031][ C0] __zap_vma_range+0x1536/0x4bf0 [ 534.172063][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 534.172094][ C0] ? find_held_lock+0x2b/0x80 [ 534.172115][ C0] unmap_vmas+0x299/0x5f0 [ 534.172137][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 534.172156][ C0] ? mas_next_slot+0x10a3/0x1960 [ 534.172191][ C0] exit_mmap+0x1ef/0xa10 [ 534.172213][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 534.172232][ C0] ? rcu_is_watching+0x12/0xc0 [ 534.172262][ C0] ? uprobe_clear_state+0x5f/0x260 [ 534.172287][ C0] ? uprobe_clear_state+0x5f/0x260 [ 534.172319][ C0] ? __lock_acquire+0x4a5/0x2630 [ 534.172347][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 534.172375][ C0] __mmput+0x12a/0x410 [ 534.172402][ C0] mmput+0x67/0x80 [ 534.172426][ C0] do_exit+0x8b2/0x2af0 [ 534.172447][ C0] ? __pfx_do_exit+0x10/0x10 [ 534.172464][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 534.172493][ C0] do_group_exit+0xd5/0x2a0 [ 534.172513][ C0] get_signal+0x20ff/0x2210 [ 534.172544][ C0] ? __pfx_get_signal+0x10/0x10 [ 534.172575][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 534.172605][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 534.172639][ C0] ? rcu_is_watching+0x12/0xc0 [ 534.172668][ C0] irqentry_exit+0x410/0x7e0 [ 534.172694][ C0] asm_exc_page_fault+0x26/0x30 [ 534.172711][ C0] RIP: 0033:0x7faf6cd9ce61 [ 534.172724][ C0] Code: Unable to access opcode bytes at 0x7faf6cd9ce37. [ 534.172732][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 534.172745][ C0] RAX: 0000000000000000 RBX: 00007faf6d016090 RCX: 00007faf6cd9ce59 [ 534.172756][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 534.172767][ C0] RBP: 00007faf6ce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 534.172777][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 534.172787][ C0] R13: 00007faf6d016128 R14: 00007faf6d016090 R15: 00007ffd567c98b8 [ 534.172806][ C0] [ 534.508786][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 534.515651][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 534.526307][ T30] Tainted: [L]=SOFTLOCKUP [ 534.530602][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.540632][ T30] Call Trace: [ 534.543888][ T30] [ 534.546793][ T30] dump_stack_lvl+0x100/0x190 [ 534.551449][ T30] vpanic+0x552/0x970 [ 534.555405][ T30] ? __pfx_vpanic+0x10/0x10 [ 534.559878][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 534.566020][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 534.572154][ T30] panic+0xd1/0xe0 [ 534.575850][ T30] ? __pfx_panic+0x10/0x10 [ 534.580240][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 534.586368][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 534.592495][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 534.598622][ T30] ? watchdog.cold+0x1ec/0x234 [ 534.603359][ T30] ? watchdog+0xcc1/0x1030 [ 534.607750][ T30] watchdog.cold+0x1fd/0x234 [ 534.612317][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 534.618101][ T30] ? __pfx_watchdog+0x10/0x10 [ 534.622752][ T30] ? __kthread_parkme+0x18c/0x230 [ 534.627748][ T30] ? kthread+0x13a/0x450 [ 534.631966][ T30] ? __pfx_watchdog+0x10/0x10 [ 534.636614][ T30] kthread+0x370/0x450 [ 534.640656][ T30] ? __pfx_kthread+0x10/0x10 [ 534.645222][ T30] ret_from_fork+0x72b/0xd50 [ 534.649790][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 534.654875][ T30] ? __switch_to+0x800/0x1100 [ 534.659529][ T30] ? __pfx_kthread+0x10/0x10 [ 534.664090][ T30] ret_from_fork_asm+0x1a/0x30 [ 534.668837][ T30] [ 534.672158][ T30] Kernel Offset: disabled [ 534.676458][ T30] Rebooting in 86400 seconds..