last executing test programs: 14m58.773736386s ago: executing program 2 (id=111): syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000280), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000300)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000540)=""/208, 0xd0}, {&(0x7f0000000640)=""/115, 0x73}, {&(0x7f0000000440)=""/84, 0x54}], 0x3, &(0x7f0000000700)=""/250, 0xfa}, 0x9}], 0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x7038c0, 0x20d) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000886c000000f40000aaaaaaaaaa18810028000033aa0ed8"], 0x19) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000001c0)='.\x00', 0x4000423) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = syz_open_procfs(r3, &(0x7f00000003c0)='status\x00') read$FUSE(r9, &(0x7f0000002dc0)={0x2020}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 14m58.34047507s ago: executing program 2 (id=112): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x1, 0x97, 0x10, 0x0, 0x3, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000099000/0x2000)=nil, 0x2000, 0x3000002, 0x204030, r2, 0xd9e09000) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r5, &(0x7f0000000040)="fb", 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000000f00)=@ethtool_cmd={0x23, 0x9, 0x1008000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfb, 0x1, 0x1000005, 0x8, 0x2, 0x0, 0x4, 0xfffffffe, [0xeaea]}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket$inet(0x2, 0x2, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="7daad44510df7dc335e66c0e962a5ce64120016d3750175c423665dfd246d084c8e400b6c006f6c74ec8219e7bd29464ba326c26805a2b900e958cf88ed55de49f9400fdcf60ff1066757c78148f12b72720a63042cd274e883c9ccf0169c55d8fdbac47fa9acbfe3178cff055c59f582b1d64628b896898b9734298b75f7d23345e45e62e3a70e77d59a60afa4b543eae17ac165b13f818b7805741425fb718d691dcb6c67f51aae4dcc6875ee298353ecb", 0xb2}, {&(0x7f00000003c0)="1f125f61cc5d556d973ab358911b8772f398c2", 0x13}, {&(0x7f0000000540)="01e7333857514e058627f2728063ef19c4ae3e79916c309a0479f8ee7c0d59d0470b1bb1beaf1e137f1703949a270282100f2033a02a68758473446632e89e2a2ba763e4cebdc13b3a5932ec8ef9cc70fc3e95dae542707b0faac7e95ea957d412785cd4581da30915f4c3f483c96654784b6bdee71c", 0x76}, {&(0x7f00000005c0)="c9a55d180449624f0b6402a42acff9e3f0c00485a2a7132fdde50f6e8c93942ae897d208c32d3a13521b07a0966cf30e357f20dedabec7b1fe9ae2bb0b365700d98b3fca322bc87c0e0ca549a08462c9f810bc966d83b09bf510526ec7d63fc624200f73492ae9472263da89e13c66691ecfc4f9c895b2159c862ac5d3238fd732f6a36635257db0f4abc9f89acc46b46b0e68b0fb0da00a9598f12e761b5eb7fb88ec8cf3eb784b593f2d65", 0xac}], 0x4}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000025c0)='F\a', 0x2}], 0x1}}], 0x3, 0x2090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) recvmsg$can_bcm(r6, &(0x7f00000036c0)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0xfffffffffffffe09, &(0x7f0000003600)=[{&(0x7f0000000200)=""/99, 0x63}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x5, &(0x7f0000003680)=""/62, 0x3e}, 0x40010020) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 14m42.31479899s ago: executing program 2 (id=112): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x1, 0x97, 0x10, 0x0, 0x3, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000099000/0x2000)=nil, 0x2000, 0x3000002, 0x204030, r2, 0xd9e09000) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r5, &(0x7f0000000040)="fb", 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000000f00)=@ethtool_cmd={0x23, 0x9, 0x1008000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfb, 0x1, 0x1000005, 0x8, 0x2, 0x0, 0x4, 0xfffffffe, [0xeaea]}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket$inet(0x2, 0x2, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="7daad44510df7dc335e66c0e962a5ce64120016d3750175c423665dfd246d084c8e400b6c006f6c74ec8219e7bd29464ba326c26805a2b900e958cf88ed55de49f9400fdcf60ff1066757c78148f12b72720a63042cd274e883c9ccf0169c55d8fdbac47fa9acbfe3178cff055c59f582b1d64628b896898b9734298b75f7d23345e45e62e3a70e77d59a60afa4b543eae17ac165b13f818b7805741425fb718d691dcb6c67f51aae4dcc6875ee298353ecb", 0xb2}, {&(0x7f00000003c0)="1f125f61cc5d556d973ab358911b8772f398c2", 0x13}, {&(0x7f0000000540)="01e7333857514e058627f2728063ef19c4ae3e79916c309a0479f8ee7c0d59d0470b1bb1beaf1e137f1703949a270282100f2033a02a68758473446632e89e2a2ba763e4cebdc13b3a5932ec8ef9cc70fc3e95dae542707b0faac7e95ea957d412785cd4581da30915f4c3f483c96654784b6bdee71c", 0x76}, {&(0x7f00000005c0)="c9a55d180449624f0b6402a42acff9e3f0c00485a2a7132fdde50f6e8c93942ae897d208c32d3a13521b07a0966cf30e357f20dedabec7b1fe9ae2bb0b365700d98b3fca322bc87c0e0ca549a08462c9f810bc966d83b09bf510526ec7d63fc624200f73492ae9472263da89e13c66691ecfc4f9c895b2159c862ac5d3238fd732f6a36635257db0f4abc9f89acc46b46b0e68b0fb0da00a9598f12e761b5eb7fb88ec8cf3eb784b593f2d65", 0xac}], 0x4}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000025c0)='F\a', 0x2}], 0x1}}], 0x3, 0x2090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) recvmsg$can_bcm(r6, &(0x7f00000036c0)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0xfffffffffffffe09, &(0x7f0000003600)=[{&(0x7f0000000200)=""/99, 0x63}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x5, &(0x7f0000003680)=""/62, 0x3e}, 0x40010020) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 14m41.365005406s ago: executing program 2 (id=144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44820) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x100000000000006, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000740)={&(0x7f0000000580)=[{0x0, 0x0, 0x6, 0x5069230b, 0x3, 0x8, 0x40, 0x80000000}, {0x2, 0x0, 0xd377, 0xfffffffffffff2f0, 0x28, 0x4, 0xffff}, {0x3, 0x0, 0x0, 0x0, 0x6, 0x3, 0x36d2, 0x101}, {0x0, 0x0, 0x8000000000, 0x8, 0x3, 0x1f80, 0xee, 0x1}, {0x0, 0x0, 0x60, 0x8, 0x8, 0x7ff, 0xfffffffffffffffc, 0x2}, {0x3, 0x0, 0x7, 0x1, 0x81, 0xffff, 0x8, 0x8000000000000000}, {0x1, 0x0, 0x4, 0x81, 0xffff, 0x80, 0xfff, 0x5}, {0x0, 0x0, 0x1, 0x1, 0x101, 0x8000000000000000, 0x4, 0x3}], 0x8, 0x38, 0x1, 0xb}) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x2, 0x1, 0x4, 0x0, 0x4}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 14m38.93440929s ago: executing program 2 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x11, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) 14m38.500869867s ago: executing program 2 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000e000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0xf5, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 14m38.357931449s ago: executing program 32 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000e000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0xf5, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 2m18.219076012s ago: executing program 1 (id=3211): openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0xec, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x101}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mlock2(&(0x7f00008a4000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x0) munlockall() r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0'}, 0x74) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) futex(0x0, 0xd, 0x1, &(0x7f0000000140)={0x77359400}, 0x0, 0x12) r2 = fanotify_init(0xf00, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000300)={0xd, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35006c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc10700000032d0ad7bc946813591bd8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000080)={&(0x7f0000002000/0x3000)=nil}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x14d080, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x40080) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001780)={0x661, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001340)=""/151, 0x97}, {&(0x7f0000001400)=""/99, 0x63}, {&(0x7f0000001480)=""/51, 0x33}, {&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f00000015c0)=""/198, 0xc6}], &(0x7f0000001740)=[0x7, 0x9, 0x95a, 0x1, 0xb], 0x5}, 0x20) fanotify_mark(r2, 0x40, 0x10001043, r5, 0x0) fanotify_init(0x4, 0x2) open$dir(&(0x7f00000001c0)='./file0/../file0\x00', 0x113080, 0x0) 2m18.005517733s ago: executing program 1 (id=3214): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x3}, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 2m17.85235193s ago: executing program 1 (id=3215): recvmsg(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x10043) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) creat(&(0x7f0000000140)='./file0\x00', 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/kernel/address_bits', 0x2000, 0x104) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) write$dsp(r3, 0x0, 0xffda) fcntl$setsig(r2, 0xa, 0x29) fcntl$getflags(r2, 0xb) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xbf50792f624dc275}, 0x4800) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) syz_usb_control_io(r0, 0x0, 0x0) unshare(0x6a040000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0d, &(0x7f0000000040)) 2m14.710017971s ago: executing program 1 (id=3229): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x4) dup(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000900)=[{0x6, 0x80, 0x5, 0x7fffffff}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0xffffffffffffffa8, &(0x7f0000000040)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) write$UHID_INPUT(r1, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r4, 0x40246f4c, &(0x7f00000001c0)={0x30a32c0, 0x0, @vsb={0x1}}) 2m13.725616545s ago: executing program 1 (id=3233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x1000000) 2m12.040968704s ago: executing program 1 (id=3242): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x200008, 0x100008b}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x8) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0}) socketpair(0x18, 0xa, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304030000000000000000000400", @ANYRES32=0x0, @ANYBLOB="08030000000000001c0012800b00010062726964676500000c00028005001693f644d700"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) close(r2) listen(0xffffffffffffffff, 0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00'/316, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x3, 0x0, 0x1, 0x9, 0xc23}, &(0x7f0000000180)=0x20) r5 = getpid() sched_setscheduler(r5, 0x3, &(0x7f0000000200)=0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="85000000020000001835000001000000000000000000000075971d978576ce18d82a73504fbcacea8f22e1acf7e4e34cdee06e954af33c1f9ebd10a821969e83f022eddee07021"], &(0x7f0000000540)='GPL\x00', 0x80000001, 0x6, &(0x7f0000000740)=""/6, 0x1f00, 0x32, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x4, 0xd, 0x100, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000780)=[r0, 0xffffffffffffffff, r0, r0, r0, r2, r0], &(0x7f0000000a00)=[{0x5, 0x3, 0xc, 0x2}, {0x5, 0x1, 0xd}, {0x0, 0x2, 0x1, 0xb}, {0x3, 0x2, 0xe, 0x2}, {0x1, 0x4, 0xb, 0x5}, {0x4, 0x1, 0x2, 0x4}, {0x1, 0x5, 0x203}, {0x1, 0x5, 0x10}, {0x2, 0x2, 0x6, 0xa}, {0x3, 0x2, 0x7, 0x1}], 0x10, 0x6}, 0x94) sendmmsg$unix(r6, &(0x7f0000000d00)=[{{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000c80)="a0e58c3d", 0x4}], 0x1, 0x0, 0x0, 0x4000800}}], 0x1, 0xa8b360c4f7e66149) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000600)={{0x100002, 0x3, 0x9, 0xc}, 0x6, 0xf6, 0xa, r5, 0x8, 0x3, 'syz0\x00', &(0x7f0000000380)=['\x00', '/\t&@[\x00', '{@]:,\x00', '\x00', 'uid', 'mptcp_pm\x00', '0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00', 'tracefs\x00'], 0x151}) 2m11.473964183s ago: executing program 33 (id=3242): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x200008, 0x100008b}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x8) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0}) socketpair(0x18, 0xa, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304030000000000000000000400", @ANYRES32=0x0, @ANYBLOB="08030000000000001c0012800b00010062726964676500000c00028005001693f644d700"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) close(r2) listen(0xffffffffffffffff, 0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00'/316, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x3, 0x0, 0x1, 0x9, 0xc23}, &(0x7f0000000180)=0x20) r5 = getpid() sched_setscheduler(r5, 0x3, &(0x7f0000000200)=0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="85000000020000001835000001000000000000000000000075971d978576ce18d82a73504fbcacea8f22e1acf7e4e34cdee06e954af33c1f9ebd10a821969e83f022eddee07021"], &(0x7f0000000540)='GPL\x00', 0x80000001, 0x6, &(0x7f0000000740)=""/6, 0x1f00, 0x32, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x4, 0xd, 0x100, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000780)=[r0, 0xffffffffffffffff, r0, r0, r0, r2, r0], &(0x7f0000000a00)=[{0x5, 0x3, 0xc, 0x2}, {0x5, 0x1, 0xd}, {0x0, 0x2, 0x1, 0xb}, {0x3, 0x2, 0xe, 0x2}, {0x1, 0x4, 0xb, 0x5}, {0x4, 0x1, 0x2, 0x4}, {0x1, 0x5, 0x203}, {0x1, 0x5, 0x10}, {0x2, 0x2, 0x6, 0xa}, {0x3, 0x2, 0x7, 0x1}], 0x10, 0x6}, 0x94) sendmmsg$unix(r6, &(0x7f0000000d00)=[{{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000c80)="a0e58c3d", 0x4}], 0x1, 0x0, 0x0, 0x4000800}}], 0x1, 0xa8b360c4f7e66149) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000600)={{0x100002, 0x3, 0x9, 0xc}, 0x6, 0xf6, 0xa, r5, 0x8, 0x3, 'syz0\x00', &(0x7f0000000380)=['\x00', '/\t&@[\x00', '{@]:,\x00', '\x00', 'uid', 'mptcp_pm\x00', '0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00', 'tracefs\x00'], 0x151}) 1m41.464362119s ago: executing program 5 (id=3334): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unlink(&(0x7f00000000c0)='./file1\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x13e5d5262c75f670) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) io_uring_enter(r3, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 1m39.381269043s ago: executing program 5 (id=3338): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r5, @ANYBLOB="0400"], 0xc4}}, 0x80) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r6, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x20000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CONFIGURE(r9, 0x8004b706, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) 1m39.197585073s ago: executing program 5 (id=3339): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b", 0xa4, 0x2, 0xd7}, {0x0, 0x0, 0x6, 0x3c}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000001880)={0x0, 0x6, 0x0, 0x8}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=@getchain={0x2c, 0x66, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xd}, {0xfff1, 0xf}, {0xc, 0xd}}, [{0x8, 0xb, 0xf12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x2080, 0x0) read$hiddev(r4, &(0x7f0000000080)=""/134, 0x86) (async) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000880)={'\x00', 0x7, 0x3, 0xeb1}) (async) bind$alg(r3, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a40)}, 0x2002) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace(0x4208, r6) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000002840)="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"/3987, 0xf93}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m38.96949176s ago: executing program 5 (id=3341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x5, 0xffffffff}, 0x0) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000000000000e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async, rerun: 32) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x14e2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) 1m38.808752302s ago: executing program 5 (id=3343): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}, @ib={0x1b, 0xd9, 0xc84d, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x0, 0x200}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) close_range(r1, r1, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) 1m38.625894308s ago: executing program 5 (id=3344): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001280)={0x1, @pix_mp={0x10000, 0x802, 0x20303159, 0x5, 0x5, [{0xff, 0x3}, {0x4944, 0x8bbc043}, {0x8, 0xc}, {0xe, 0xffff}, {0x1, 0xfffffffd}, {0x39, 0x4}, {0x9, 0x2}, {0x400, 0x400}], 0x2, 0x3, 0x2, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x4, 0xd7, 0x32, 0x40, 0x13d8, 0x10, 0xacd9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x0, 0xd, "", [{{0x9, 0x4, 0x45, 0xe, 0x0, 0x2d, 0x27, 0x1c, 0x3}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept$unix(r3, &(0x7f0000000180), &(0x7f0000000240)=0x6e) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x12100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f0000001040)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) 10.000704146s ago: executing program 4 (id=3636): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000006119fcff000000009500000000000000ce235faf3a19b433cf1f9d9f43628d52da5f0ba3278884cfcd4c1016c0f525550b952a5d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) 9.829403752s ago: executing program 6 (id=3637): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r1}, 0x38) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 9.139777007s ago: executing program 4 (id=3638): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x41000000, 0x8010002}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8.614240448s ago: executing program 4 (id=3640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000980)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090401010101022000090501090002030b04082501000040040009040200000102200009040201010102200009240201000f0e07011024010201000400000008b8000000030905820908004006030825018203f30600523d70738138c82e161863edb6d7f054923ee828bbc49b2d6c0b0ce166549e47c7775e39bf0d5ad99253ee157314d9789dfbef8acd5dd705b7d36c364dc97a9840a7af78dfc87958fce4ac13b2089e7e2226512981491242983d8f02291956d7650a8be946960a75cbc8904a5eb2a9c8a3f2f105ecad4770ad3f6b14e3ee342927b0255ef092db61e58e584aa4842cf29d0bc8a4e83699a1a12fe5c0812d62c9"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000140)={0x40, 0xe, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000300)=[{0x4, 0x21, 0x5, 0x7fffffff}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="2b7eeb962285"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x32, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e21, 0x4, 'rr\x00', 0x1, 0x9, 0x1f}, 0x2c) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2, 0xffffffffffffffff], 0xeeee8000, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.289185076s ago: executing program 6 (id=3644): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) syz_usb_control_io(r0, 0x0, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', 0x0, 0x10000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000c40)={0x400101000, 0x0, 0x0, &(0x7f0000000480), {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) close(r3) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_bcm(r2, &(0x7f00000001c0)={0x1d, r6}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f0000002480)=ANY=[@ANYBLOB="4700004e7c322670ee46c5afa26f13d4d5bcc512df9d405cf67a76a6f3f7502cca45f22d35219fcac7fda209496371edecadb40bf7e464280d4d8ba1503c0cc6c83e0749eb2af85e74af32fd59e2cb5396cd2b7eec729abff5489ca8d3f729e6b1f856e4fd60be9d48d9fa3caa129c20a845ba59c3da78ad7bdb14983590890a16fcf4b5426b8680fe4b7e0c89bf5f65598655e304c90f9f6aa0d3335ba2568d4e7afe0db3359dc3d28b1400c304ab528ec4ef87da6ac5721a5b2ed444fa95baa9a47e68670b1c365d"]) 6.256044655s ago: executing program 4 (id=3648): prlimit64(0x0, 0x4, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000019400)="1da81ab71f0be9e3519d7d2154d3a4bb234d789ae75e93fd1fd01386b9c7c71989087a0e2d6c9805d5f6eb4eead69033f4bfd7d01c4d7a95196f822a7747f656b0417a6e12de552d2fb7d22485d0059ef074673798874ff2455095b9444e04c1813cbc5965b741e34b90c76c66a73033dade985cef1c2df82170dcda62d811acbbac772f73ecf44ef56d36b60c998dabe8a78b0ddd0836dea9", 0x99}, {&(0x7f00000001c0)="2301b533b00500", 0x7}, {&(0x7f0000000400)='#', 0x1}], 0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x7, 0x1, 0x7, 0x800, 0x14, "c0df77b9cf49ac531326d410d79c8aaf7435fa"}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x3, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) read$usbmon(r0, &(0x7f0000019300)=""/236, 0xec) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000194c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB="5270d8507b6f136065bfff174db0fe0fc59ead8e7f238b44dc20167075a4dcca8b65fc7b3059b235601de2e6ba04ba423a1ac1d6f6f4c895022ecf79e7fce37418621a275b56707ff19f96c2252d8ee2d182d796fcc35343f6e85017fedaa27af6fc4f33ccf65890eaad92d961839c86a0b45c648dee14b2f008693db2a814c552e11b34133c3b7282000302b1c3aa04d1f19d05d0511aa699ea60995ca71ab7a70be971972f88e0cd9e53c9fb1086553f965adfa13fba079100c1413d769b0a7de73b077a83d539e023f54038bd9d529a299c5a073f3c0eedf5fd0681e2"]) chdir(&(0x7f00000000c0)='./file1\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/file0\x00', &(0x7f0000000300)={0x4000, 0x0, 0x11}, 0x18) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, 0x0, 0x4, 0x0) 5.34533169s ago: executing program 6 (id=3652): prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) (async) r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) (async) getpgid(0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181ef3e00000001feffff7f10001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x7041, 0x0) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) signalfd(r2, &(0x7f0000000140)={[0x8000003ff]}, 0x2f) (async) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="513b5a9c0c0000fb4c4241fc", 0xc}, {&(0x7f00000000c0)="0508", 0x2}], 0x2}, 0x40080) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0xc00, 0x0}}], 0x40000cf, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000300)={0x0, "650000ea000000000000000000000000000000000000e2c57e0d00", 0xffffffffffffffff}) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mountinfo\x00') (async) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x3, 0xd3ca, 0xffffff78, "0df9988943aa"}}) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 5.288528669s ago: executing program 4 (id=3653): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0xd, 0x9, {0x9, 0x21, "a5623afbded102"}}, 0x0, 0x0, 0x0}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0x17}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x8}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x4004014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e100dc40030450f846a48502000109021200010000f0000904"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 4.36459443s ago: executing program 6 (id=3655): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unlink(&(0x7f00000000c0)='./file1\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x13e5d5262c75f670) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) io_uring_enter(r2, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 3.821336459s ago: executing program 0 (id=3657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x14852, r1, 0x8000000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) recvmmsg$unix(r3, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1}}], 0x1, 0x400123a0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xcd0b, 0xf, 0x1, 0x3, 0xe, "5d8ad32957d4465574c350847661e25968f8fe"}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x14852, r1, 0x8000000) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6}, 0x8) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)) (async) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) (async) recvmmsg$unix(r3, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1}}], 0x1, 0x400123a0, 0x0) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xcd0b, 0xf, 0x1, 0x3, 0xe, "5d8ad32957d4465574c350847661e25968f8fe"}) (async) 3.644578562s ago: executing program 3 (id=3658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="141600001000010000000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000028000000000a030000000000000000000a00000008000240000000000900010073797a30"], 0x78}}, 0x0) 3.449319405s ago: executing program 3 (id=3659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.255807952s ago: executing program 0 (id=3660): socket(0x10, 0x803, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 3.006216232s ago: executing program 0 (id=3661): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value=0x300}, 0x50) 2.933170247s ago: executing program 0 (id=3662): prlimit64(0x0, 0x4, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000019400)="1da81ab71f0be9e3519d7d2154d3a4bb234d789ae75e93fd1fd01386b9c7c71989087a0e2d6c9805d5f6eb4eead69033f4bfd7d01c4d7a95196f822a7747f656b0417a6e12de552d2fb7d22485d0059ef074673798874ff2455095b9444e04c1813cbc5965b741e34b90c76c66a73033dade985cef1c2df82170dcda62d811acbbac772f73ecf44ef56d36b60c998dabe8a78b0ddd0836dea9", 0x99}, {&(0x7f00000001c0)="2301b533b00500", 0x7}, {&(0x7f0000000400)='#', 0x1}], 0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x7, 0x1, 0x7, 0x800, 0x14, "c0df77b9cf49ac531326d410d79c8aaf7435fa"}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x3, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) read$usbmon(r0, &(0x7f0000019300)=""/236, 0xec) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000194c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB="5270d8507b6f136065bfff174db0fe0fc59ead8e7f238b44dc20167075a4dcca8b65fc7b3059b235601de2e6ba04ba423a1ac1d6f6f4c895022ecf79e7fce37418621a275b56707ff19f96c2252d8ee2d182d796fcc35343f6e85017fedaa27af6fc4f33ccf65890eaad92d961839c86a0b45c648dee14b2f008693db2a814c552e11b34133c3b7282000302b1c3aa04d1f19d05d0511aa699ea60995ca71ab7a70be971972f88e0cd9e53c9fb1086553f965adfa13fba079100c1413d769b0a7de73b077a83d539e023f54038bd9d529a299c5a073f3c0eedf5fd0681e2"]) chdir(&(0x7f00000000c0)='./file1\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/file0\x00', &(0x7f0000000300)={0x4000, 0x0, 0x11}, 0x18) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, 0x0, 0x4, 0x0) 2.900683605s ago: executing program 6 (id=3663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x990000, 0x9, 0x2, r1, 0x0, &(0x7f0000000180)={0x9a091e, 0x43000, '\x00', @ptr=0x2000}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x5070bd28, 0x7f, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc0, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) listen(r4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.619356821s ago: executing program 6 (id=3664): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fe000e0000000000feffffff0d0000001100000018110000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) preadv(r1, &(0x7f00000012c0)=[{0x0}], 0x1, 0x0, 0xfffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x19, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) socket(0x10, 0x1, 0x7fffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 2.420707457s ago: executing program 3 (id=3665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = openat$null(0xffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x68) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) uname(0xfffffffffffffffc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x10, 0x100, 0x3c, 0x41540200}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 1.699562674s ago: executing program 0 (id=3666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = openat$null(0xffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x68) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) uname(0xfffffffffffffffc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x10, 0x100, 0x3c, 0x41540200}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 989.18859ms ago: executing program 3 (id=3667): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000f8fbffff00000000000000008500000036000000180000000400000000000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0x2f, &(0x7f00000000c0)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000280)="94", 0x1}, {0x0}], 0x2) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$tun(r2, 0x0, 0xfdef) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000003c0)=""/22, &(0x7f0000000340)=0xffffffffffffffad) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000ffffffff4c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, 0x0, 0x1ff) mkdirat$cgroup(r4, 0x0, 0x1ff) sendfile(r5, r5, 0x0, 0x9) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x13, 0x0, &(0x7f0000000180)="feed00000900005bdd708ea300000000000000", 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 776.350361ms ago: executing program 3 (id=3668): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setresgid(0xee00, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') (async) r3 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980900}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 674.858651ms ago: executing program 4 (id=3669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x5}}, './cgroup.cpu/cgroup.procs\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r3 = syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_create(0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x40400a0}, 0x40000) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setxattr(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x2) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, &(0x7f0000001300)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) 649.219052ms ago: executing program 0 (id=3670): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r1}, 0x38) socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=3671): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sched_setaffinity(0x0, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2c, 0x800, 0x87) fcntl$getownex(r2, 0x10, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000300)="69b4737e3f5fab55b26f9b1a413380fc48511beb45da75728ac8e292a109158aa79ed37231041cbe998b61409041df322cf1a076a8ff65e4791ad892a48feed0dc8b436bca4e12924234a738fa253e23861c4bdc2843dc158568aba353297d7f7d777bf8aa60f0347d4d56f97ea8c383bf385b", 0x73, 0x4c000, &(0x7f0000000380)={0xa, 0x4e22, 0x2, @local}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f000011a640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000011a840)={0x0, 0x0, "68cccc65e8503761658ad9bbb3301fd9f622b336fc7d5273a1a6dbcbcceb87fcc247b8d80c40a8e6b57b0305af64ece8ee316a1428f5a66ef7c756619489dddedfcccf41c21da2aba64214359cc7214a58fa39ab9ba6b9143b22abe7d66b2c4f1694a02387b440233dcd78234ab7784e82a58532dc180f375b87d95ce78d6c512b9bbdaa2b249c5e44cd50a8ee757c905428e09436722324ae88fa003d0f6a0956c6543f67bfe847b3eca4ed3b451a54e46c31fd960d5c4e38bc2e6d2a7c8949fb314c7cad68b5aee77286101e69ae1f1ed94b37cf733ceed0aa4c0250a37b43cdbfc481af077e2ba1c0f2c2b31c63fdd6ad300fed48f4ecb2d93611c743aceb", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f000011b840)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r9}], 0x4, "ad865992b2ea96"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="8009000100766c616e000000000c00026d81000100020000002da4c85a531bc0bc00597e39708b78d099b00b00"/56, @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) kernel console output (not intermixed with test programs): em tag 0x0 [ 874.294650][T19204] CPU: 1 UID: 0 PID: 19204 Comm: syz.4.3185 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.294680][T19204] Tainted: [L]=SOFTLOCKUP [ 874.294686][T19204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 874.294697][T19204] Call Trace: [ 874.294704][T19204] [ 874.294712][T19204] dump_stack_lvl+0x100/0x190 [ 874.294738][T19204] should_fail_ex.cold+0x5/0xa [ 874.294765][T19204] _copy_from_user+0x2e/0xd0 [ 874.294788][T19204] kstrtouint_from_user+0xd6/0x1d0 [ 874.294816][T19204] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 874.294840][T19204] ? __lock_acquire+0x4a5/0x2630 [ 874.294865][T19204] ? lock_acquire+0x1b1/0x370 [ 874.294891][T19204] proc_fail_nth_write+0x83/0x220 [ 874.294912][T19204] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 874.294939][T19204] vfs_write+0x2aa/0x1070 [ 874.294960][T19204] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 874.294983][T19204] ? __pfx_vfs_write+0x10/0x10 [ 874.295005][T19204] ? __fget_files+0x215/0x3d0 [ 874.295033][T19204] ? __fget_files+0x21f/0x3d0 [ 874.295059][T19204] ksys_write+0x12a/0x250 [ 874.295077][T19204] ? __pfx_ksys_write+0x10/0x10 [ 874.295094][T19204] ? v4l2_ioctl+0x1c5/0x250 [ 874.295120][T19204] ? rcu_is_watching+0x12/0xc0 [ 874.295147][T19204] do_syscall_64+0x115/0x870 [ 874.295168][T19204] ? clear_bhb_loop+0x40/0x90 [ 874.295190][T19204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.295207][T19204] RIP: 0033:0x7f296015d68e [ 874.295223][T19204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 874.295240][T19204] RSP: 002b:00007f2960fb4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 874.295258][T19204] RAX: ffffffffffffffda RBX: 00007f2960fb56c0 RCX: 00007f296015d68e [ 874.295270][T19204] RDX: 0000000000000001 RSI: 00007f2960fb50a0 RDI: 0000000000000004 [ 874.295280][T19204] RBP: 00007f2960fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 874.295290][T19204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.295300][T19204] R13: 00007f2960416038 R14: 00007f2960415fa0 R15: 00007ffed1abc008 [ 874.295326][T19204] [ 874.295570][ T10] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 874.643552][ T10] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 874.656084][ T10] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 874.688930][ T10] cherry 0003:046A:0027.001F: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.3-1/input0 [ 874.785043][T19212] tipc: Enabled bearer , priority 0 [ 874.958779][T19212] syzkaller0: entered promiscuous mode [ 874.993491][T19212] syzkaller0: entered allmulticast mode [ 875.031448][T19212] tipc: Resetting bearer [ 875.449518][ T30] audit: type=1800 audit(1780226193.935:1526): pid=19212 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3188" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 875.497842][T19210] tipc: Resetting bearer [ 875.674409][T19225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3189'. [ 875.779332][ C0] net_ratelimit: 3 callbacks suppressed [ 875.779384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.027953][ T5802] usb 4-1: USB disconnect, device number 108 [ 876.040329][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.347882][T16800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.916557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.090202][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.165989][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.752619][T16800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.032278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.292646][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.015727][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.718589][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 881.422558][ C0] net_ratelimit: 6 callbacks suppressed [ 881.422578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.433992][ T29] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 881.528415][T19210] tipc: Disabling bearer [ 881.536891][ T5818] tipc: Node number set to 3573130824 [ 881.596442][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.629696][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 881.647188][ T29] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 881.660246][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 881.681950][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.696184][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 881.716587][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 881.743024][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 881.753793][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 881.771297][ T29] usb 6-1: Product: syz [ 881.782236][ T29] usb 6-1: Manufacturer: syz [ 881.802909][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 881.814959][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 881.834440][ T29] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 881.844387][T19304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3214'. [ 881.856183][ T29] cdc_wdm 6-1:1.0: Unknown control protocol [ 881.887686][T19304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3214'. [ 882.025401][T19293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.052290][T19293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.267417][ T5714] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 882.440769][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 882.454215][ T5714] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 882.468812][T19318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.484856][ T5714] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 882.489072][T19318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.511210][ T5714] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 882.538353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.550906][ T5714] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.587661][ T5714] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 882.603144][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.798614][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.876717][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.911628][ T5714] usb 2-1: usb_control_msg returned -32 [ 882.928188][ T5714] usbtmc 2-1:16.0: can't read capabilities [ 883.021938][T19308] wg1 speed is unknown, defaulting to 1000 [ 883.598892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.608138][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.931314][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.300858][ T5714] usb 6-1: USB disconnect, device number 93 [ 884.421305][T19352] netlink: 'syz.4.3225': attribute type 11 has an invalid length. [ 884.522699][T16800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.774245][ T5721] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 884.932105][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 884.942940][ T5721] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 884.954526][ T5721] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 884.978700][ T5721] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 884.989191][ T5721] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 885.000912][ T5721] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 885.011428][ T5721] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.027859][ T5802] usb 2-1: USB disconnect, device number 73 [ 885.032026][ T5721] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 885.043370][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.317297][ T5721] usb 5-1: GET_CAPABILITIES returned 0 [ 885.329759][ T5721] usbtmc 5-1:16.0: can't read capabilities [ 885.375760][T19372] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 885.416042][T19370] bridge3: entered promiscuous mode [ 885.444616][T19370] bridge3: entered allmulticast mode [ 885.528068][T19352] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 885.593646][ T5802] usb 5-1: USB disconnect, device number 111 [ 886.004070][T19379] netlink: 4532 bytes leftover after parsing attributes in process `syz.5.3232'. [ 886.453030][ T30] audit: type=1326 audit(1780226204.393:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.0.3231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc96b9ce59 code=0x0 [ 886.702164][ C0] net_ratelimit: 6 callbacks suppressed [ 886.702183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.729191][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.932656][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.973566][ T30] audit: type=1400 audit(1780226204.890:1528): avc: denied { listen } for pid=19376 comm="syz.0.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 887.030638][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.201021][T19396] team_slave_1: Caught tx_queue_len zero misconfig [ 887.777388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.112707][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.335813][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.375576][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.643100][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 888.660947][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 888.673767][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 888.690274][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.701169][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 888.723343][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 888.865297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.066613][ T30] audit: type=1400 audit(1780226206.885:1529): avc: denied { listen } for pid=19422 comm="syz.5.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 889.202229][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.826807][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.007247][ T5625] Bluetooth: hci1: command tx timeout [ 891.106023][T19440] xt_SECMARK: invalid mode: 2 [ 891.108895][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.376770][ T5714] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 891.639886][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.678989][ T5714] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.706856][ T5714] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 891.732400][ T5714] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 891.761340][ T5714] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 891.788822][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.817757][T19440] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 892.076485][T19440] ip6t_REJECT: ECHOREPLY is not supported [ 892.093548][ T29] net_ratelimit: 4 callbacks suppressed [ 892.093566][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.226226][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.279873][T19415] wg1 speed is unknown, defaulting to 1000 [ 892.483036][ T13] bridge_slave_1: left allmulticast mode [ 892.494757][ T13] bridge_slave_1: left promiscuous mode [ 892.502455][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.518109][ T13] bridge_slave_0: left allmulticast mode [ 892.529362][ T13] bridge_slave_0: left promiscuous mode [ 892.540980][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.667689][T19469] binder: 19468:19469 ioctl 80184151 200000000180 returned -22 [ 892.695827][T19482] xt_bpf: check failed: parse error [ 892.704519][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.800867][ T5714] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 892.808969][T19440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.837645][ T5714] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input69 [ 892.847893][T19440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.900085][T19440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.961367][T19440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.042072][ T30] audit: type=1400 audit(1780226210.643:1530): avc: denied { write } for pid=19467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.099219][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.114646][T19440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.133261][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.134116][T19440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.159871][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.173134][ T13] bond0 (unregistering): Released all slaves [ 893.208424][ T5625] Bluetooth: hci1: command tx timeout [ 893.213892][ T30] audit: type=1400 audit(1780226210.792:1531): avc: denied { write } for pid=19493 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.240385][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.243864][ T5714] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 893.266837][ T5721] usb 6-1: USB disconnect, device number 94 [ 893.266887][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 893.564270][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.581460][ T5714] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 893.799583][ T5714] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.810724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.837698][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 893.865593][ T5714] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 893.875408][ T5714] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 893.884297][ T5714] usb 1-1: Product: syz [ 893.888650][ T5714] usb 1-1: Manufacturer: syz [ 893.902588][ T5714] hub 1-1:4.0: USB hub found [ 894.125295][ T5714] hub 1-1:4.0: 2 ports detected [ 894.340689][T19488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.395108][ T13] hsr_slave_0: left promiscuous mode [ 894.396677][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.406420][T19488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.466478][ T13] hsr_slave_1: left promiscuous mode [ 894.492781][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.514638][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.542406][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.616858][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.719691][ T13] veth1_macvtap: left promiscuous mode [ 894.728866][ T5714] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 894.736193][ T5714] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 894.774010][ T13] veth0_macvtap: left promiscuous mode [ 894.779265][ T5714] usb 1-1: USB disconnect, device number 119 [ 894.813591][ T13] veth1_vlan: left promiscuous mode [ 894.839402][ T13] veth0_vlan: left promiscuous mode [ 894.884512][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.927386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.051947][ T30] audit: type=1400 audit(1780226212.513:1532): avc: denied { write } for pid=19514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.272299][ T5802] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 895.362475][ T30] audit: type=1400 audit(1780226212.801:1533): avc: denied { write } for pid=19547 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.446851][ T5625] Bluetooth: hci1: command tx timeout [ 895.455427][ T5802] usb 1-1: device descriptor read/64, error -71 [ 895.625825][ T13] team0 (unregistering): Port device team_slave_1 removed [ 895.644086][ T13] team0 (unregistering): Port device team_slave_0 removed [ 895.714060][ T5802] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 895.886556][ T5802] usb 1-1: device descriptor read/64, error -71 [ 896.021776][ T5802] usb usb1-port1: attempt power cycle [ 896.028549][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 896.135160][ T3360] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 896.241304][T19415] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.288822][T19415] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.319709][T19415] bridge_slave_0: entered allmulticast mode [ 896.367207][T19415] bridge_slave_0: entered promiscuous mode [ 896.383180][T19415] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.404108][ T5802] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 896.419632][T19415] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.441117][T19415] bridge_slave_1: entered allmulticast mode [ 896.723671][ T5802] usb 1-1: device descriptor read/8, error -71 [ 896.731420][T19415] bridge_slave_1: entered promiscuous mode [ 896.765072][T19415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.780561][T19415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.839810][T19415] team0: Port device team_slave_0 added [ 896.873677][T19415] team0: Port device team_slave_1 added [ 896.961045][T19415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.978758][T19415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.030361][ T5802] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 897.031545][ T30] audit: type=1400 audit(1780226214.349:1534): avc: denied { write } for pid=19560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.078758][ T5802] usb 1-1: device descriptor read/8, error -71 [ 897.085918][T19415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.219843][ T5802] usb usb1-port1: unable to enumerate USB device [ 897.323985][T19415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.389320][T19415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.467882][T19415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.584918][T19415] hsr_slave_0: entered promiscuous mode [ 897.592340][T19415] hsr_slave_1: entered promiscuous mode [ 897.708382][ T30] audit: type=1400 audit(1780226214.970:1535): avc: denied { write } for pid=19578 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.749491][ T5625] Bluetooth: hci1: command tx timeout [ 897.860401][T19579] batadv_slave_0: Caught tx_queue_len zero misconfig [ 897.868200][ T5802] net_ratelimit: 7 callbacks suppressed [ 897.868217][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.040347][T19582] jfs: Unknown parameter 'disrArd' [ 898.070162][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 898.087676][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 898.165744][T19590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.208652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.293746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.298160][ T5802] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 898.413422][T19590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.464179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.485846][T19590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.494552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.506588][ T5802] usb 6-1: Using ep0 maxpacket: 8 [ 898.523873][ T5802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 131, setting to 64 [ 898.549439][T19590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.558134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.570223][ T5802] usb 6-1: config 0 interface 0 has no altsetting 0 [ 898.591936][ T5802] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 898.655688][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.148435][ T29] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 899.160014][ T5802] usb 6-1: Product: syz [ 899.172694][ T5802] usb 6-1: Manufacturer: syz [ 899.181244][ T5802] usb 6-1: SerialNumber: syz [ 899.210879][ T5802] usb 6-1: config 0 descriptor?? [ 899.237627][ T5802] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 899.238480][ T30] audit: type=1400 audit(1780226216.395:1536): avc: denied { write } for pid=19593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 899.284279][T19415] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 899.321509][T19415] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 899.329396][ T29] usb 5-1: too many configurations: 233, using maximum allowed: 8 [ 899.398134][T19415] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 899.420602][ T29] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 899.434363][T19415] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 899.441597][ T29] usb 5-1: can't read configurations, error -61 [ 899.462909][T19415] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 899.489683][T19415] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 899.499269][ T5802] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 899.514372][T19415] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 899.531253][ T5802] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 899.551973][ T30] audit: type=1400 audit(1780226216.607:1537): avc: denied { write } for pid=19610 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 899.593626][T19415] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 899.606769][ T29] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 899.856069][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 900.131304][ T5802] usb 6-1: USB disconnect, device number 95 [ 900.159826][T19625] gtp0: entered allmulticast mode [ 900.218772][ T29] usb 5-1: too many configurations: 233, using maximum allowed: 8 [ 900.230905][T19415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.256628][ T29] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 900.271107][ T29] usb 5-1: can't read configurations, error -61 [ 900.281466][ T29] usb usb5-port1: attempt power cycle [ 900.295095][T19415] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.308454][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.315580][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.410271][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.417472][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.621458][T19635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3282'. [ 900.694537][ T29] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 900.763143][ T29] usb 5-1: too many configurations: 233, using maximum allowed: 8 [ 900.804409][ T29] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 900.804861][T19415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 900.833404][ T29] usb 5-1: can't read configurations, error -61 [ 900.997708][ T29] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 901.031838][ T29] usb 5-1: too many configurations: 233, using maximum allowed: 8 [ 901.050455][ T29] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 901.069849][ T29] usb 5-1: can't read configurations, error -61 [ 901.078659][ T29] usb usb5-port1: unable to enumerate USB device [ 901.764461][T19664] macvtap1: entered promiscuous mode [ 901.845284][T19415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.856546][ T30] audit: type=1400 audit(1780226218.807:1538): avc: denied { read append } for pid=19660 comm="syz.3.3286" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 901.937761][ T30] audit: type=1400 audit(1780226218.807:1539): avc: denied { map } for pid=19660 comm="syz.3.3286" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 902.015806][ T30] audit: type=1400 audit(1780226218.807:1540): avc: denied { execute } for pid=19660 comm="syz.3.3286" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 902.089987][ T29] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 902.287276][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.303745][ T29] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 902.329006][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.343379][T19415] veth0_vlan: entered promiscuous mode [ 902.361779][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 902.364854][T19415] veth1_vlan: entered promiscuous mode [ 902.368157][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 902.425300][ T29] usb 5-1: config 0 descriptor?? [ 902.441640][T19415] veth0_macvtap: entered promiscuous mode [ 902.470494][T19415] veth1_macvtap: entered promiscuous mode [ 902.517586][T19415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.540545][T19415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.588347][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.615997][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.632878][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.664843][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.675986][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 902.709981][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 902.887879][ T29] usb 5-1: USB disconnect, device number 116 [ 902.976041][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.013171][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.048906][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.065521][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.220529][ T30] audit: type=1400 audit(1780226220.073:1541): avc: denied { create } for pid=19684 comm="syz.6.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 903.259044][ T29] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 903.400250][ T5714] net_ratelimit: 106 callbacks suppressed [ 903.400266][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.454999][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 903.485928][ T29] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 903.512085][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.554105][ T29] usb 5-1: config 0 descriptor?? [ 903.575531][T18282] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 903.581213][ T29] hub 5-1:0.0: USB hub found [ 903.660350][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.767108][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 903.779512][T18282] usb 6-1: Using ep0 maxpacket: 8 [ 903.792362][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 903.802376][ T29] hub 5-1:0.0: 1 port detected [ 903.808425][T18282] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 903.817273][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 903.824609][T18282] usb 6-1: config 0 has no interface number 0 [ 903.831072][T18282] usb 6-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 903.844083][T18282] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 903.855370][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 903.866933][ T30] audit: type=1400 audit(1780226220.655:1542): avc: denied { read } for pid=19693 comm="syz.6.3291" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 903.890777][T18282] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 903.900957][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 903.908200][T18282] usb 6-1: config 0 interface 200 has no altsetting 0 [ 903.910493][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.941219][T18282] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 903.967953][T18282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.976077][T18282] usb 6-1: Product: syz [ 903.980327][T18282] usb 6-1: Manufacturer: syz [ 903.984972][T18282] usb 6-1: SerialNumber: syz [ 903.992495][T18282] usb 6-1: config 0 descriptor?? [ 904.092569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.220182][T19687] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 904.816325][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.168568][T19698] wg1 speed is unknown, defaulting to 1000 [ 905.189931][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.218537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.432747][ T5837] usb 5-1: USB disconnect, device number 117 [ 905.865374][ T30] audit: type=1400 audit(1780226222.419:1543): avc: denied { bind } for pid=19728 comm="syz.3.3296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 905.930579][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.174030][ T5632] Bluetooth: hci5: command tx timeout [ 906.344977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.418082][T19698] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.426647][T19698] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.436173][T19698] bridge_slave_0: entered allmulticast mode [ 906.444414][T19698] bridge_slave_0: entered promiscuous mode [ 906.455459][T19698] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.462985][T19698] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.470903][T19698] bridge_slave_1: entered allmulticast mode [ 906.479223][T19698] bridge_slave_1: entered promiscuous mode [ 906.567886][T18282] usb 6-1: USB disconnect, device number 96 [ 907.470968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.755288][T19698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.794705][T19698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.888327][T19698] team0: Port device team_slave_0 added [ 907.913691][T19698] team0: Port device team_slave_1 added [ 907.956147][T19698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.975170][T19698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.034495][T19698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.081026][T19698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.137128][T19698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.164009][T18282] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 908.231157][T19698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.325711][T19698] hsr_slave_0: entered promiscuous mode [ 908.337702][T18282] usb 6-1: Using ep0 maxpacket: 8 [ 908.339864][T19698] hsr_slave_1: entered promiscuous mode [ 908.346111][T18282] usb 6-1: unable to get BOS descriptor or descriptor too short [ 908.358263][T19698] debugfs: 'hsr0' already exists in 'hsr' [ 908.367915][T18282] usb 6-1: config 1 has an invalid interface number: 8 but max is 0 [ 908.380602][T18282] usb 6-1: config 1 has no interface number 0 [ 908.380726][T19698] Cannot create hsr debugfs directory [ 908.400127][T18282] usb 6-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 908.422046][T18282] usb 6-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1 [ 908.433711][ T5632] Bluetooth: hci5: command tx timeout [ 908.444398][T18282] usb 6-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 908.455511][T18282] usb 6-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 908.467459][T18282] usb 6-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.478827][T18282] usb 6-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 908.493189][T18282] usb 6-1: config 1 interface 8 has no altsetting 0 [ 908.499886][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 908.511085][T18282] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 908.520302][T18282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.529542][T18282] usb 6-1: Product: syz [ 908.541722][T18282] usb 6-1: Manufacturer: syz [ 908.547289][T18282] usb 6-1: SerialNumber: syz [ 908.673636][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 908.689365][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 908.705517][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.724727][ T10] usb 4-1: Product: syz [ 908.737814][ T10] usb 4-1: Manufacturer: syz [ 908.755513][ T10] usb 4-1: SerialNumber: syz [ 908.784016][T19756] binder: 19755:19756 ioctl 89f1 200000000dc0 returned -22 [ 908.977425][ T59] net_ratelimit: 8 callbacks suppressed [ 908.977444][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.796052][T19698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.844993][T19698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.898282][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.966058][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 909.981893][T18282] cxacru 6-1:1.8: send of cm 0x90 failed (-71) [ 910.008019][T18282] cxacru 6-1:1.8: usbatm_usb_probe: invalid endpoint 02! [ 910.017108][ T10] usb 4-1: unit 5 not found! [ 910.031950][ T10] usb 4-1: unit 0 not found! [ 910.036728][T18282] cxacru 6-1:1.8: probe with driver cxacru failed with error -22 [ 910.064155][T18282] usb 6-1: USB disconnect, device number 97 [ 910.106723][ T10] usb 4-1: USB disconnect, device number 109 [ 910.249452][T19698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.298887][T19698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.310762][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.357649][T19788] xfrm0: entered allmulticast mode [ 910.383503][ T30] audit: type=1400 audit(1780226226.685:1544): avc: denied { connect } for pid=19789 comm="syz.4.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 910.433263][ T30] audit: type=1400 audit(1780226226.731:1545): avc: denied { shutdown } for pid=19789 comm="syz.4.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 910.467377][T19698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.477845][T19698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.619097][T19698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.633044][T19698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.676663][ T5632] Bluetooth: hci5: command tx timeout [ 910.948040][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.034658][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.068355][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.079208][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.090399][T18282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.284407][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.615713][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.829077][ T30] audit: type=1400 audit(1780226228.938:1546): avc: denied { write } for pid=19805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 913.035156][ T5632] Bluetooth: hci5: command tx timeout [ 913.443471][ T30] audit: type=1400 audit(1780226229.510:1547): avc: denied { write } for pid=19830 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 913.748981][T19698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 913.787462][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 913.833290][T19698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 913.896139][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 913.923314][T19698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 914.099463][ T5837] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 914.342946][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 914.370787][T19698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 914.403348][ T29] net_ratelimit: 5 callbacks suppressed [ 914.403367][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.417040][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.426332][ T5837] usb 5-1: Using ep0 maxpacket: 8 [ 914.443989][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 914.476271][ T5837] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 914.520924][ T5837] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 914.532314][T19849] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3322'. [ 914.567644][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.602344][ T5837] usb 5-1: Product: syz [ 914.629177][ T5837] usb 5-1: Manufacturer: syz [ 914.651212][ T5837] usb 5-1: SerialNumber: syz [ 914.662709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.747321][ T5837] usb 5-1: config 0 descriptor?? [ 914.793585][ T5837] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 914.821415][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.830693][T19698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.839440][ T5837] usb 5-1: setting power ON [ 914.851411][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 914.924641][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 914.936752][T19698] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.974621][ T5837] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 914.999751][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.006927][ T3360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.007845][ T5837] usb 5-1: media controller created [ 915.121565][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.128757][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.165317][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 915.261019][T19867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3323'. [ 915.296406][ T5837] usb 5-1: selecting invalid altsetting 6 [ 915.328127][ T5837] usb 5-1: digital interface selection failed (-22) [ 915.531652][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.602039][ T5837] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 915.606276][T19698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 915.611650][ T5837] usb 5-1: setting power OFF [ 915.634716][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 915.640888][ T5837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 915.661127][ T5837] (NULL device *): no alternate interface [ 915.742795][ T30] audit: type=1400 audit(1780226231.634:1548): avc: denied { write } for pid=19840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.789094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.137942][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.656871][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.775357][ T5837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 916.916105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.924262][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.999891][ T30] audit: type=1400 audit(1780226232.788:1549): avc: denied { write } for pid=19881 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 917.125635][ T5713] usb 5-1: USB disconnect, device number 118 [ 917.227470][T19898] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3329'. [ 917.273422][T19898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 917.280792][T19898] IPv6: NLM_F_CREATE should be set when creating new route [ 917.381534][ T10] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 918.387577][T19698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.501368][T19698] veth0_vlan: entered promiscuous mode [ 919.514643][ T30] audit: type=1400 audit(1780226235.050:1550): avc: denied { write } for pid=19901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.932931][T19698] veth1_vlan: entered promiscuous mode [ 920.036482][ T5837] net_ratelimit: 8 callbacks suppressed [ 920.036501][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.224134][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.288616][T19698] veth0_macvtap: entered promiscuous mode [ 920.295138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.340126][ T30] audit: type=1400 audit(1780226235.881:1551): avc: denied { write } for pid=19936 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.396576][T19698] veth1_macvtap: entered promiscuous mode [ 920.438453][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.503918][T19698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.527009][ T30] audit: type=1400 audit(1780226236.047:1552): avc: denied { ioctl } for pid=19942 comm="syz.5.3338" path="net:[4026533063]" dev="nsfs" ino=4026533063 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 920.535577][T19698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.680655][ T137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.719599][ T137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.762561][ T137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.798207][ T137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.104703][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.136945][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.166174][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.213079][T16786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.243568][T16786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.421322][ T30] audit: type=1400 audit(1780226236.868:1553): avc: denied { write } for pid=19944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.444691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.670782][T18282] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 921.716342][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.157594][T18282] usb 6-1: config 1 has an invalid interface number: 69 but max is 0 [ 922.241728][T18282] usb 6-1: config 1 has no interface number 0 [ 922.288771][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.314033][T18282] usb 6-1: config 1 interface 69 has no altsetting 0 [ 922.470218][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.544507][ T30] audit: type=1400 audit(1780226237.690:1554): avc: denied { write } for pid=19981 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.548072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.620911][T18282] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=ac.d9 [ 922.689694][T18282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.732421][T18282] usb 6-1: Product: syz [ 922.753950][T18282] usb 6-1: Manufacturer: syz [ 922.772480][T18282] usb 6-1: SerialNumber: syz [ 923.447375][ T30] audit: type=1400 audit(1780226238.650:1555): avc: denied { accept } for pid=19971 comm="syz.5.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 923.543019][T18282] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 923.569513][T18282] usbduxfast 6-1:1.69: driver 'usbduxfast' failed to auto-configure device. [ 923.739053][T18282] usb 6-1: USB disconnect, device number 99 [ 924.184828][ T5713] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 924.299356][T20021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.350069][T20021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.370197][ T5713] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 924.393937][ T5713] usb 1-1: config 0 has no interface number 0 [ 924.423830][ T5713] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.477131][ T5713] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.492316][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 924.510315][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 924.521384][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 924.531922][T18282] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 924.536855][ T5713] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 924.545222][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 924.556952][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 924.616631][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.690538][ T5713] usb 1-1: config 0 descriptor?? [ 924.707837][T18282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 4 [ 924.730481][T18282] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 924.740455][T18282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.749207][T18282] usb 5-1: Product: syz [ 924.753404][T18282] usb 5-1: Manufacturer: syz [ 924.758204][T18282] usb 5-1: SerialNumber: syz [ 924.769214][T18282] usb 5-1: config 0 descriptor?? [ 925.101225][ T5818] usb 5-1: USB disconnect, device number 119 [ 925.132708][ T5713] usbhid 1-1:0.1: can't add hid device: -71 [ 925.173856][ T5713] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 925.217180][ T5713] usb 1-1: USB disconnect, device number 124 [ 925.755587][ T5818] net_ratelimit: 8 callbacks suppressed [ 925.755604][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.799681][T20023] wg1 speed is unknown, defaulting to 1000 [ 925.927730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.938539][T18282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.461768][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.794373][ T5625] Bluetooth: hci2: command tx timeout [ 927.020657][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.054141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.496113][ T30] audit: type=1400 audit(1780226242.481:1556): avc: denied { write } for pid=20034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.843497][ T30] audit: type=1400 audit(1780226242.777:1557): avc: denied { write } for pid=20062 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 928.072564][T16800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.180856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.205814][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.310852][ T5802] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 928.484234][ T5802] usb 1-1: Using ep0 maxpacket: 8 [ 928.727029][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.771907][T20023] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.774395][ T5802] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 928.801368][T20023] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.808681][T20023] bridge_slave_0: entered allmulticast mode [ 928.816492][T20023] bridge_slave_0: entered promiscuous mode [ 928.825983][T20023] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.834641][T20023] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.845735][T20023] bridge_slave_1: entered allmulticast mode [ 928.854943][T20023] bridge_slave_1: entered promiscuous mode [ 928.865521][ T5802] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 928.889402][T20023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.909453][T20023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.918852][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.958376][ T5802] usb 1-1: config 0 descriptor?? [ 929.038968][T20023] team0: Port device team_slave_0 added [ 929.072896][T20023] team0: Port device team_slave_1 added [ 929.114207][T20023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.123366][T20023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.151790][T20023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.177903][T20086] overlayfs: overlapping lowerdir path [ 929.290332][T18282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.301064][ T5802] usbhid 1-1:0.0: can't add hid device: -71 [ 929.305138][T20023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.314151][T20023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.349387][ T5802] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 929.353934][T20023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.377911][ T5802] usb 1-1: USB disconnect, device number 125 [ 929.396038][ T5625] Bluetooth: hci2: command tx timeout [ 929.441699][T20023] hsr_slave_0: entered promiscuous mode [ 929.448322][T20023] hsr_slave_1: entered promiscuous mode [ 929.455991][T20023] debugfs: 'hsr0' already exists in 'hsr' [ 929.462994][T20023] Cannot create hsr debugfs directory [ 929.805635][ T5837] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 929.969419][ T5837] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 929.982387][ T5837] usb 7-1: config 1 has no interface number 0 [ 929.995146][ T5837] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 930.009947][ T5837] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 930.022190][ T5837] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.035934][ T5837] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 930.051936][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.062152][ T5837] usb 7-1: Product: syz [ 930.117889][ T5837] usb 7-1: Manufacturer: syz [ 930.124571][ T5837] usb 7-1: SerialNumber: syz [ 930.133886][T20093] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 930.363854][T20093] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 930.719798][ T5837] usb 7-1: Incompatible driver and firmware versions [ 930.780796][ T3360] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 931.108350][ T5736] usb 7-1: USB disconnect, device number 2 [ 931.560467][ C1] net_ratelimit: 6 callbacks suppressed [ 931.560488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.679359][ T5625] Bluetooth: hci2: command tx timeout [ 931.716661][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.604024][T18282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.686734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.913847][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.940785][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.526256][T20165] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3388'. [ 933.580917][T20167] syzkaller0: entered promiscuous mode [ 933.601398][T20167] syzkaller0: entered allmulticast mode [ 933.813234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.899857][ T5625] Bluetooth: hci2: command tx timeout [ 934.236500][T16800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.348581][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.940338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.222454][ T10] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 935.286474][ T5736] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 935.406841][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 86, changing to 4 [ 935.417940][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51814, setting to 1023 [ 935.431376][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 935.440623][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.449761][ T5736] usb 4-1: Invalid ep0 maxpacket: 32 [ 935.455106][ T10] usb 5-1: Product: syz [ 935.459260][ T10] usb 5-1: Manufacturer: syz [ 935.464656][ T10] usb 5-1: SerialNumber: syz [ 935.473048][ T10] usb 5-1: config 0 descriptor?? [ 935.480844][ T10] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 935.490030][ T10] em28xx 5-1:0.0: Device initialization failed. [ 935.496327][ T10] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 935.611397][ T5736] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 935.917534][ T5736] usb 4-1: Invalid ep0 maxpacket: 32 [ 935.937396][ T5736] usb usb4-port1: attempt power cycle [ 936.189674][T20197] overlayfs: failed lookup in lower (newroot/31, name='file0', err=-40): overlapping layers [ 936.212597][ T30] audit: type=1400 audit(1780226250.532:1558): avc: denied { map } for pid=20198 comm="syz.0.3400" path="socket:[90232]" dev="sockfs" ino=90232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 936.327718][ T5736] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 936.383433][ T5736] usb 4-1: Invalid ep0 maxpacket: 32 [ 936.536240][ T30] audit: type=1400 audit(1780226250.532:1559): avc: denied { accept } for pid=20198 comm="syz.0.3400" path="socket:[90232]" dev="sockfs" ino=90232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 936.629616][ T5736] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 936.663580][ T5736] usb 4-1: Invalid ep0 maxpacket: 32 [ 936.669331][ T5736] usb usb4-port1: unable to enumerate USB device [ 936.832686][T20211] netlink: 'syz.0.3403': attribute type 40 has an invalid length. [ 937.192800][ C1] net_ratelimit: 8 callbacks suppressed [ 937.192833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.681853][T20221] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 937.688403][T20221] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 937.699841][T20221] vhci_hcd vhci_hcd.0: Device attached [ 937.713085][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.929419][ T5736] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 937.984255][ T5837] usb 46-1: SetAddress Request (2) to port 0 [ 937.990593][ T5837] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 938.102794][ T5736] usb 1-1: Using ep0 maxpacket: 16 [ 938.110288][ T5736] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 938.123381][ T5736] usb 1-1: config 0 interface 0 has no altsetting 0 [ 938.131988][ T5736] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 938.141601][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.150449][ T5736] usb 1-1: Product: syz [ 938.154741][ T5736] usb 1-1: Manufacturer: syz [ 938.159409][ T5736] usb 1-1: SerialNumber: syz [ 938.166343][ T5736] usb 1-1: config 0 descriptor?? [ 938.187203][ T10] usb 5-1: USB disconnect, device number 120 [ 938.233037][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.319722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.588673][ T5736] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input71 [ 938.643011][T20223] vhci_hcd: connection reset by peer [ 938.656778][ T3408] vhci_hcd vhci_hcd.6: stop threads [ 938.662926][ T3408] vhci_hcd vhci_hcd.6: release socket [ 938.670479][ T3408] vhci_hcd vhci_hcd.6: disconnect device [ 938.720096][ T10] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 938.841296][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.883966][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 938.892065][ T10] usb 5-1: config 0 has no interface number 0 [ 938.898333][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 938.909393][ T5736] rc_core: IR keymap rc-imon-pad not found [ 938.916721][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 938.928586][ T5736] Registered IR keymap rc-empty [ 938.933569][ T5736] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 938.943868][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 938.953034][ T5736] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 938.962401][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.973157][ T10] usb 5-1: config 0 descriptor?? [ 938.992663][T20226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 939.111048][ T5736] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 939.186587][T18282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.445825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.609769][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.974392][T20240] 9p: Bad value for 'wfdno' [ 939.983881][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.005690][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 940.318110][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 940.572332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.634437][ T5736] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input72 [ 940.646352][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 940.674722][ T5736] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:126> initialized [ 940.686763][ T5736] usb 1-1: USB disconnect, device number 126 [ 940.819279][ T5802] usb 5-1: USB disconnect, device number 121 [ 941.005985][ T5713] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 941.169633][ T5713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 941.182019][ T5713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.193360][ T5713] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 941.202714][ T5713] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 941.211573][ T5713] usb 7-1: Manufacturer: syz [ 941.217576][ T5713] usb 7-1: config 0 descriptor?? [ 941.675784][T20243] befs: (nullb0): invalid magic header [ 943.009556][ C0] net_ratelimit: 6 callbacks suppressed [ 943.009575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.776985][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.785572][ T5837] usb 46-1: device descriptor read/8, error -110 [ 943.869884][T20263] netlink: 5812 bytes leftover after parsing attributes in process `syz.3.3416'. [ 943.910303][T16792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.046286][ T5713] usbhid 7-1:0.0: can't add hid device: -71 [ 944.062114][ T5713] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 944.081307][ T5713] usb 7-1: USB disconnect, device number 3 [ 944.126209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.213159][ T5837] usb usb46-port1: attempt power cycle [ 944.879277][ T5837] usb usb46-port1: unable to enumerate USB device [ 944.917169][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.143707][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.258958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.772530][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.893268][ T5752] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 946.043076][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.095041][ T5752] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 946.107729][ T5752] usb 7-1: config 0 has no interface number 0 [ 946.113878][ T5752] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 946.130882][ T5752] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 946.194144][ T5752] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 946.207215][ T5752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.230605][ T5752] usb 7-1: Product: syz [ 946.236462][ T5752] usb 7-1: Manufacturer: syz [ 946.254270][ T5752] usb 7-1: SerialNumber: syz [ 946.262347][ T5752] usb 7-1: config 0 descriptor?? [ 946.281641][T20280] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 946.292020][ T5752] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 946.345443][ T5752] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 946.378220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.542578][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 946.760807][ T5752] usb 7-1: USB disconnect, device number 4 [ 946.817938][ T5752] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 946.854227][ T5752] cyberjack 7-1:0.69: device disconnected [ 948.631459][ C0] net_ratelimit: 5 callbacks suppressed [ 948.631478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.798903][T16791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.068295][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.432205][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.757754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.752410][ T30] audit: type=1400 audit(1780226263.530:1560): avc: denied { read } for pid=20303 comm="syz.0.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 950.858293][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.885206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.944076][ T3333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.010954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.019084][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.337242][T20336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'. [ 952.796454][ T30] audit: type=1326 audit(1780226265.838:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20349 comm="syz.3.3440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc60d9ce59 code=0x7ffc0000 [ 952.827832][ T30] audit: type=1326 audit(1780226265.875:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20349 comm="syz.3.3440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc60d9ce59 code=0x7ffc0000 [ 952.864045][ T30] audit: type=1326 audit(1780226265.875:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20349 comm="syz.3.3440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc60d9ce59 code=0x7ffc0000 [ 952.941673][ T30] audit: type=1326 audit(1780226265.903:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20349 comm="syz.3.3440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc60d9ce59 code=0x7ffc0000 [ 952.972400][ T30] audit: type=1326 audit(1780226265.903:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20349 comm="syz.3.3440" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc60d9ce59 code=0x7ffc0000 [ 954.263871][ C0] net_ratelimit: 4 callbacks suppressed [ 954.263891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.566523][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.796465][T16792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.913102][T20377] trusted_key: encrypted_key: insufficient parameters specified [ 954.997597][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3447'. [ 955.391560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.429619][T20382] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3448'. [ 955.726266][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.804322][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.828914][ T5818] IPVS: starting estimator thread 0... [ 955.881743][T20386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3445'. [ 955.942971][T20392] IPVS: using max 85 ests per chain, 204000 per kthread [ 956.116905][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.516841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.631683][ T5736] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 956.813096][ T5736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.835788][ T5736] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 956.864709][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.881138][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.141806][ T5736] usb 1-1: config 0 descriptor?? [ 957.301359][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3460'. [ 957.317174][T20420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3460'. [ 957.330428][T20418] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 957.380022][T20402] fuse: Bad value for 'group_id' [ 957.386456][T20402] fuse: Bad value for 'group_id' [ 957.543389][T16800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.629164][T20440] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3461'. [ 958.889348][ T5713] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 959.246579][ T5713] usb 5-1: Using ep0 maxpacket: 8 [ 959.253592][T20465] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3471'. [ 959.254806][ T5713] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 959.272890][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.286045][ T5713] usb 5-1: Product: syz [ 959.294560][ T5713] usb 5-1: Manufacturer: syz [ 959.300065][ T5713] usb 5-1: SerialNumber: syz [ 959.353514][ T5713] usb 5-1: config 0 descriptor?? [ 959.442701][T18282] usb 1-1: USB disconnect, device number 127 [ 959.896798][ C0] net_ratelimit: 6 callbacks suppressed [ 959.896818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.946053][ T5713] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 960.165236][ T5713] usb write operation failed. (-71) [ 960.256192][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.264324][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.594016][ T5713] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 960.626280][ T5713] dvbdev: DVB: registering new adapter (Terratec H7) [ 960.646205][ T5713] usb 5-1: media controller created [ 960.666412][ T5713] usb read operation failed. (-71) [ 960.684626][ T5713] usb write operation failed. (-71) [ 960.700838][ T5713] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 960.725989][ T5713] usb 5-1: USB disconnect, device number 122 [ 961.022930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.109898][ T5818] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 961.250614][ T5713] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 961.304944][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 961.312651][ T5818] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.323040][ T5818] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 961.332731][ T5818] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 961.347608][ T5818] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 961.359690][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.367826][ T5818] usb 1-1: Product: syz [ 961.374986][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.383883][ T5818] usb 1-1: Manufacturer: syz [ 961.388547][ T5818] usb 1-1: SerialNumber: syz [ 961.423782][ T5713] usb 5-1: Using ep0 maxpacket: 8 [ 961.430796][ T5713] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 961.442085][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 961.453286][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 961.466416][ T5713] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 961.476202][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.487396][ T5713] usb 5-1: config 0 descriptor?? [ 961.493519][T20488] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 961.532510][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.084269][T20498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3481'. [ 962.160453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.475065][ T5713] hid (null): global environment stack underflow [ 962.722451][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.733999][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.771027][ T5713] uclogic 0003:145F:0212.0020: interface is invalid, ignoring [ 962.866836][ T5818] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 962.874571][ T5818] usb 1-1: 0:2 : does not exist [ 962.926390][ T5818] usb 1-1: USB disconnect, device number 2 [ 962.999569][T18393] udevd[18393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.275982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.601462][T18282] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 964.097162][T18282] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 964.158569][T18282] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 964.316580][ T5752] usb 5-1: USB disconnect, device number 123 [ 965.529135][ C0] net_ratelimit: 4 callbacks suppressed [ 965.529156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.531687][ T137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 965.903603][T18282] usb 7-1: Product: syz [ 965.929967][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.152722][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.161546][T18282] usb 7-1: config 0 descriptor?? [ 966.180953][T18282] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 966.531529][T18282] usb 7-1: Detected FT232H [ 966.534734][ T3333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.580703][T18282] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 966.624921][T18282] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 966.650919][T18282] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 966.657730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.684045][T18282] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 966.750057][T18282] usb 7-1: USB disconnect, device number 5 [ 966.793951][T18282] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 967.090558][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.123380][T18282] ftdi_sio 7-1:0.0: device disconnected [ 967.782137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.934832][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.047969][T20565] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3498'. [ 968.093079][T20565] bond5: (slave bond0): Releasing active interface [ 968.196639][T18282] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 968.216618][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.464636][T20565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.493084][T20565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.515935][T20565] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 968.528531][T20565] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 968.551354][T20565] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.558799][T20565] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.570071][T20565] bond0 (unregistering): Released all slaves [ 968.583593][T18282] usb 1-1: Using ep0 maxpacket: 16 [ 968.591927][T18282] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 968.608025][T18282] usb 1-1: config 0 interface 0 has no altsetting 0 [ 968.619688][T18282] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 968.629130][T18282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.637233][T18282] usb 1-1: Product: syz [ 968.651887][T18282] usb 1-1: Manufacturer: syz [ 968.664753][T18282] usb 1-1: SerialNumber: syz [ 968.679431][T18282] usb 1-1: config 0 descriptor?? [ 968.923486][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.931219][T18282] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input74 [ 968.938584][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 968.951477][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 969.385673][T18282] rc_core: IR keymap rc-imon-pad not found [ 969.392996][T18282] Registered IR keymap rc-empty [ 969.481849][ T5713] IPVS: starting estimator thread 0... [ 969.602675][T20600] IPVS: using max 49 ests per chain, 117600 per kthread [ 969.953499][T18282] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 969.964632][T18282] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 970.006963][T18282] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 970.026249][T18282] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input75 [ 970.040272][T18282] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:3> initialized [ 970.508993][T18282] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 970.667484][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 970.816209][T18282] usb 4-1: unable to get BOS descriptor or descriptor too short [ 970.869285][T18282] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 971.008092][T18282] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 971.023916][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 971.050429][ T5721] usb 1-1: USB disconnect, device number 3 [ 971.093387][T18282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.161547][ C0] net_ratelimit: 6 callbacks suppressed [ 971.161565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.194153][T18282] usb 4-1: Product: syz [ 971.203682][T18282] usb 4-1: Manufacturer: syz [ 971.216641][T18282] usb 4-1: SerialNumber: syz [ 971.458188][T18282] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 971.548625][T20624] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3514'. [ 971.571456][T20624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3514'. [ 971.587384][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.598037][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.698970][T20629] binder: 20628:20629 ioctl c00c6211 0 returned -14 [ 972.722190][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.863022][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.071578][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.496043][ T30] audit: type=1326 audit(1780226284.949:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.6.3514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a199ce59 code=0x7fc00000 [ 973.637806][T18282] usb 4-1: failed to enable PITCH for EP 0x82 [ 973.647358][T18282] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 973.656840][T18282] usb 4-1: clock source 0 is not valid, cannot use [ 973.666939][T18282] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 973.676832][T18282] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 973.813509][T18282] usb 4-1: USB disconnect, device number 114 [ 973.849379][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.885942][T18320] udevd[18320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 973.909835][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.194507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.974627][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.781693][ T30] audit: type=1400 audit(1780226287.977:1567): avc: denied { mounton } for pid=20666 comm="syz.4.3528" path="/proc/2002/cgroup" dev="proc" ino=92371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 976.855956][ T30] audit: type=1400 audit(1780226288.023:1568): avc: denied { mounton } for pid=20666 comm="syz.4.3528" path="/proc/2002/cgroup" dev="nsfs" ino=4026533722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 976.918927][T20668] 9pnet_fd: Insufficient options for proto=fd [ 976.960567][ T50] net_ratelimit: 4 callbacks suppressed [ 976.960587][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.228796][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.531210][ T5713] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 977.574026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.716617][ T5713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9026, setting to 1024 [ 977.728302][ T5713] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 977.737889][ T5713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.748752][ T5713] usb 7-1: config 0 descriptor?? [ 977.831740][T20680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3533'. [ 977.848657][T20680] openvswitch: netlink: Flow key attr not present in new flow. [ 978.532815][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.700576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.711236][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.456390][ T3360] Bluetooth: Error in BCSP hdr checksum [ 979.480721][T18282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.678035][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.827320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.022051][T18282] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 981.116297][ T5625] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 982.623315][ T29] net_ratelimit: 3 callbacks suppressed [ 982.623333][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.692565][ T5713] usbhid 7-1:0.0: can't add hid device: -71 [ 982.699440][ T5713] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 982.708865][T18282] usb 4-1: Using ep0 maxpacket: 8 [ 982.713539][ T5713] usb 7-1: USB disconnect, device number 6 [ 982.719839][T16800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.755825][T18282] usb 4-1: unable to get BOS descriptor or descriptor too short [ 982.807391][T18282] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 982.831518][T18282] usb 4-1: can't read configurations, error -71 [ 982.846017][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.209290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.722552][T20730] vlan0: entered promiscuous mode [ 983.734656][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.769718][T20730] hsr0: entered promiscuous mode [ 983.826577][T20730] vlan0: entered allmulticast mode [ 983.839451][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3550'. [ 983.858226][T20730] hsr0: entered allmulticast mode [ 983.893586][T20730] hsr_slave_0: entered allmulticast mode [ 983.952503][T20730] hsr_slave_1: entered allmulticast mode [ 983.962174][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.105750][ T5713] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 984.138632][T20735] hsr_slave_1 (unregistering): left promiscuous mode [ 984.333196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.625441][ T5713] usb 7-1: Using ep0 maxpacket: 16 [ 984.795706][ T5713] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.807606][ T5713] usb 7-1: config 0 interface 0 has no altsetting 0 [ 984.816620][ T5713] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 984.827527][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.836010][ T5713] usb 7-1: Product: syz [ 984.843057][ T5713] usb 7-1: Manufacturer: syz [ 984.847684][ T5713] usb 7-1: SerialNumber: syz [ 984.854389][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.865654][ T5713] usb 7-1: config 0 descriptor?? [ 985.205725][T16792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.237036][ T5713] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input76 [ 985.470485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.572295][ T5713] rc_core: IR keymap rc-imon-pad not found [ 985.580903][ T5713] Registered IR keymap rc-empty [ 985.600181][ T5713] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 985.613914][ T5713] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 985.698519][ T5837] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 985.838028][ T5713] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 985.889930][ T5713] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input77 [ 985.912542][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 985.970973][ T5837] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 986.059832][ T5837] usb 1-1: config 0 interface 0 has no altsetting 0 [ 986.085102][ T5713] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:7> initialized [ 986.101278][ T5837] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 986.118506][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.131975][ T5837] usb 1-1: Product: syz [ 986.140791][ T5837] usb 1-1: Manufacturer: syz [ 986.177454][ T5837] usb 1-1: SerialNumber: syz [ 986.198165][ T5837] usb 1-1: config 0 descriptor?? [ 986.282382][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 986.453359][ T5837] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input78 [ 986.514789][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 986.522578][T19964] usb 7-1: USB disconnect, device number 7 [ 986.707836][T20768] can0: slcan on ttyS3. [ 986.726028][T20768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3559'. [ 986.738508][T20768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3559'. [ 986.740085][ T5837] rc_core: IR keymap rc-imon-pad not found [ 986.770368][ T5837] Registered IR keymap rc-empty [ 986.781917][ T5837] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 986.809438][ T5837] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 987.009364][ T5837] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 987.061867][ T5837] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input79 [ 987.143070][T20787] NILFS (nullb0): couldn't find nilfs on the device [ 987.348433][ T5837] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:4> initialized [ 987.456943][T20789] (syz.4.3562,20789,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 987.504501][T20775] can0 (unregistered): slcan off ttyS3. [ 987.518506][T20789] (syz.4.3562,20789,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 987.567360][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 987.567647][ T5752] usb 1-1: USB disconnect, device number 4 [ 987.715464][ T30] audit: type=1400 audit(1780226298.086:1569): avc: denied { write } for pid=20774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 987.862622][T20803] netlink: 'syz.4.3564': attribute type 1 has an invalid length. [ 987.916420][ T30] audit: type=1400 audit(1780226298.261:1570): avc: denied { write } for pid=20805 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 987.965290][T20803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.402756][T20803] gretap1: entered promiscuous mode [ 988.473162][T20803] bond0: (slave gretap1): making interface the new active one [ 988.513824][T20803] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 988.868903][T20809] macvlan0: entered promiscuous mode [ 988.902096][ T30] audit: type=1400 audit(1780226299.157:1571): avc: denied { setattr } for pid=20819 comm="syz.0.3567" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 988.932332][T20809] macvlan0: entered allmulticast mode [ 988.958750][T20809] bond0: entered promiscuous mode [ 988.999845][T20809] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 989.029325][T20809] bond0: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 989.108738][T20809] bond0: left promiscuous mode [ 989.289065][ T30] audit: type=1400 audit(1780226299.535:1572): avc: denied { read } for pid=20814 comm="syz.3.3566" name="/" dev="configfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 989.408636][ T30] audit: type=1400 audit(1780226299.535:1573): avc: denied { read open } for pid=20814 comm="syz.3.3566" path="/" dev="configfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 989.468404][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 989.484504][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 989.497790][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 989.519449][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 989.528121][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 989.585254][ T30] audit: type=1400 audit(1780226299.581:1574): avc: denied { write } for pid=20812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 989.741854][ T30] audit: type=1400 audit(1780226299.923:1575): avc: denied { write } for pid=20841 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.537778][T20838] wg1 speed is unknown, defaulting to 1000 [ 991.790033][ T5632] Bluetooth: hci3: command tx timeout [ 991.857746][ T30] audit: type=1326 audit(1780226301.899:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20861 comm="syz.3.3574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc60d9ce59 code=0x0 [ 992.198600][T20878] FAULT_INJECTION: forcing a failure. [ 992.198600][T20878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.246733][T20878] CPU: 0 UID: 0 PID: 20878 Comm: syz.6.3577 Tainted: G L syzkaller #0 PREEMPT(full) [ 992.246762][T20878] Tainted: [L]=SOFTLOCKUP [ 992.246767][T20878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 992.246773][T20878] Call Trace: [ 992.246777][T20878] [ 992.246782][T20878] dump_stack_lvl+0x100/0x190 [ 992.246799][T20878] should_fail_ex.cold+0x5/0xa [ 992.246820][T20878] _copy_to_user+0x32/0xd0 [ 992.246835][T20878] simple_read_from_buffer+0xcb/0x170 [ 992.246850][T20878] proc_fail_nth_read+0x1af/0x230 [ 992.246863][T20878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 992.246875][T20878] ? rw_verify_area+0xce/0x6d0 [ 992.246886][T20878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 992.246897][T20878] vfs_read+0x1e4/0xb30 [ 992.246911][T20878] ? __pfx_vfs_read+0x10/0x10 [ 992.246922][T20878] ? __fget_files+0x215/0x3d0 [ 992.246938][T20878] ? __fget_files+0x21f/0x3d0 [ 992.246955][T20878] ksys_read+0x12a/0x250 [ 992.246967][T20878] ? __pfx_ksys_read+0x10/0x10 [ 992.246978][T20878] ? ovl_dir_llseek+0x2b2/0x4d0 [ 992.246989][T20878] ? rcu_is_watching+0x12/0xc0 [ 992.247008][T20878] do_syscall_64+0x115/0x870 [ 992.247022][T20878] ? clear_bhb_loop+0x40/0x90 [ 992.247035][T20878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.247046][T20878] RIP: 0033:0x7fa8a195d68e [ 992.247057][T20878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 992.247068][T20878] RSP: 002b:00007fa8a28ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 992.247079][T20878] RAX: ffffffffffffffda RBX: 00007fa8a28de6c0 RCX: 00007fa8a195d68e [ 992.247086][T20878] RDX: 000000000000000f RSI: 00007fa8a28de0a0 RDI: 0000000000000004 [ 992.247093][T20878] RBP: 00007fa8a28de090 R08: 0000000000000000 R09: 0000000000000000 [ 992.247099][T20878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.247105][T20878] R13: 00007fa8a1c16038 R14: 00007fa8a1c15fa0 R15: 00007ffe758a8848 [ 992.247120][T20878] [ 993.095281][T20838] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.424657][ T5837] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 993.753956][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 993.836305][ T5837] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 993.924452][ T5837] usb 4-1: config 0 has an invalid interface number: 98 but max is 1 [ 993.983849][ T5837] usb 4-1: config 0 has no interface number 0 [ 994.019997][ T5837] usb 4-1: config 0 has no interface number 1 [ 994.110706][ T5837] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 994.169613][ T5632] Bluetooth: hci3: command tx timeout [ 994.187880][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.234006][ T5837] usb 4-1: Product: syz [ 994.256863][ T5837] usb 4-1: Manufacturer: syz [ 994.286298][ T5837] usb 4-1: SerialNumber: syz [ 994.420830][T20838] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.449394][T20838] bridge_slave_0: entered allmulticast mode [ 994.466315][ T5837] usb 4-1: config 0 descriptor?? [ 994.537389][T20838] bridge_slave_0: entered promiscuous mode [ 994.686824][T20838] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.778264][T20838] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.859046][T20838] bridge_slave_1: entered allmulticast mode [ 994.918883][T20838] bridge_slave_1: entered promiscuous mode [ 994.957582][ T5837] viperboard 4-1:0.61: version 0.00 found at bus 004 address 117 [ 995.016152][T20838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.034254][T20838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.043838][ T5837] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 995.060846][ T5837] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 995.094671][T20838] team0: Port device team_slave_0 added [ 995.104592][ T5837] viperboard 4-1:0.98: version 0.00 found at bus 004 address 117 [ 995.113915][T20838] team0: Port device team_slave_1 added [ 995.157254][T20838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.172254][ T5837] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 995.199372][T20838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.229137][ T5837] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 995.245984][ T5837] usb 4-1: USB disconnect, device number 117 [ 995.273760][T20838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.303807][T20904] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 995.315086][T20838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.326065][T20904] SELinux: failed to load policy [ 995.346548][T20838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.429912][T20838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.781212][ T30] audit: type=1400 audit(1780226305.518:1577): avc: denied { accept } for pid=20902 comm="syz.0.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 996.380298][ T5632] Bluetooth: hci3: command tx timeout [ 996.692967][ T5837] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 996.740691][T20838] hsr_slave_0: entered promiscuous mode [ 996.785436][T20838] hsr_slave_1: entered promiscuous mode [ 996.813742][T20838] debugfs: 'hsr0' already exists in 'hsr' [ 996.837440][T20838] Cannot create hsr debugfs directory [ 996.887767][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 996.902105][ T5837] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 996.912144][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.934051][ T5837] usb 4-1: config 0 has no interface number 0 [ 996.959010][ T5837] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 996.992346][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.006148][ T5837] usb 4-1: Product: syz [ 997.023949][ T5837] usb 4-1: Manufacturer: syz [ 997.037333][ T5837] usb 4-1: SerialNumber: syz [ 997.048385][ T5837] usb 4-1: config 0 descriptor?? [ 997.063714][ T5837] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 997.071288][ T5837] uvcvideo 4-1:0.105: No valid video chain found. [ 997.244970][ T5752] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 997.816210][T20916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.845915][T20916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.863816][T20940] ªªªªªª: renamed from vlan0 (while UP) [ 997.877693][T20940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.884634][T20916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.888109][T20940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.901903][ T5752] usb 7-1: device descriptor read/64, error -71 [ 997.909507][T20940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.917622][T20940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.920288][T20916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.284770][ T5752] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 998.287300][T19964] usb 4-1: USB disconnect, device number 118 [ 998.404667][T20945] bridge_slave_0: left allmulticast mode [ 998.411247][T20945] bridge_slave_0: left promiscuous mode [ 998.420238][T20945] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.438949][T20945] bridge_slave_1: left allmulticast mode [ 998.449022][ T5752] usb 7-1: device descriptor read/64, error -71 [ 998.457177][T20945] bridge_slave_1: left promiscuous mode [ 998.472995][T20945] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.518065][T20945] team0: Port device team_slave_0 removed [ 998.539694][T20945] team0: Port device team_slave_1 removed [ 998.611296][ T5752] usb usb7-port1: attempt power cycle [ 998.631940][ T5632] Bluetooth: hci3: command tx timeout [ 998.643820][T20945] net_ratelimit: 7 callbacks suppressed [ 998.643846][T20945] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 999.621757][T20956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3598'. [ 999.635451][T20956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3598'. [ 1000.081166][T19964] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1000.107259][T16786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1000.263729][T19964] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1000.272783][T19964] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1000.296390][T19964] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1000.308493][T19964] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1000.320236][T20961] vivid-003: disconnect [ 1000.338681][T20961] vivid-003: reconnect [ 1000.347511][T19964] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1000.382555][T19964] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1000.403796][T19964] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1000.428005][T19964] usb 5-1: Product: syz [ 1000.438235][T19964] usb 5-1: Manufacturer: syz [ 1000.720130][T19964] cdc_wdm 5-1:1.0: skipping garbage [ 1000.749884][T19964] cdc_wdm 5-1:1.0: skipping garbage [ 1000.783763][T19964] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1000.823314][T19964] cdc_wdm 5-1:1.0: Unknown control protocol [ 1001.455853][T20981] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20981 comm=syz.3.3606 [ 1001.534490][T18282] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1001.712513][T18282] usb 1-1: Using ep0 maxpacket: 32 [ 1001.763554][T18282] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1001.778573][T18282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.788237][T18282] usb 1-1: Product: syz [ 1001.797840][T18282] usb 1-1: Manufacturer: syz [ 1001.808892][T18282] usb 1-1: SerialNumber: syz [ 1002.197322][T18282] snd-ua101 1-1:1.1: sample format descriptor not found [ 1002.209776][T18282] snd-ua101 1-1:1.0: invalid num_altsetting [ 1002.305832][T18282] usb 1-1: USB disconnect, device number 5 [ 1003.197999][ T5752] usb 5-1: USB disconnect, device number 124 [ 1004.089483][ T5752] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1004.279863][ T5752] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 1004.302172][ T5752] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.344088][ T5752] usb 4-1: config 0 has no interface number 0 [ 1004.378284][ T5752] usb 4-1: config 0 interface 244 has no altsetting 0 [ 1004.392924][T21015] netpci0: tun_chr_ioctl cmd 1074025672 [ 1004.399687][T21015] netpci0: ignored: set checksum enabled [ 1004.407262][T21015] comedi comedi3: bad chanlist[0]=0x80001000 chan=4096 range length=1 [ 1004.425899][ T5752] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1004.429684][T21019] fuse: Unknown parameter 'gid’#‚Æ00000000000000000000' [ 1004.448870][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.506756][ T5752] usb 4-1: config 0 descriptor?? [ 1004.533467][ T30] audit: type=1400 audit(1780226313.605:1578): avc: denied { ioctl } for pid=21016 comm="syz.6.3615" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1004.897987][ T30] audit: type=1400 audit(1780226313.937:1579): avc: denied { mount } for pid=21022 comm="syz.0.3617" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1004.898053][ T5752] usb 4-1: string descriptor 0 read error: -71 [ 1004.967489][T21024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 1004.977261][ T5752] hub 4-1:0.244: bad descriptor, ignoring hub [ 1004.989943][ T5752] hub 4-1:0.244: probe with driver hub failed with error -5 [ 1005.030430][ T30] audit: type=1400 audit(1780226314.057:1580): avc: denied { unmount } for pid=19698 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1005.074603][ T5752] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1005.082342][ T13] usb 4-1: Failed to submit usb control message: -71 [ 1005.101830][ T13] usb 4-1: unable to send the bmi data to the device: -71 [ 1005.121625][ T5752] usb 4-1: USB disconnect, device number 119 [ 1005.253404][ T13] usb 4-1: unable to get target info from device [ 1005.282395][ T13] usb 4-1: could not get target info (-71) [ 1005.288701][ T13] usb 4-1: could not probe fw (-71) [ 1006.939865][ T5713] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1007.389307][ T5713] usb 5-1: config 0 has no interfaces? [ 1007.402436][ T5713] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1007.434814][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.471860][ T5713] usb 5-1: config 0 descriptor?? [ 1007.730176][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1008.201760][T21046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3623'. [ 1008.374537][ T5713] usb 5-1: USB disconnect, device number 125 [ 1008.932044][ T30] audit: type=1800 audit(1780226317.658:1581): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3629" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1009.022023][T21076] macvlan2: entered promiscuous mode [ 1009.032904][T21076] bridge0: entered promiscuous mode [ 1011.355881][T21098] wg1 speed is unknown, defaulting to 1000 [ 1011.500442][ T5837] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1011.597039][ T5713] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1011.663704][ T5837] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1011.672500][ T5837] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1011.685911][ T5837] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1011.695091][T19964] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1011.703499][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.712616][ T5837] usb 5-1: Product: syz [ 1011.717131][ T5837] usb 5-1: Manufacturer: syz [ 1011.721918][ T5837] usb 5-1: SerialNumber: syz [ 1011.771375][ T5713] usb 4-1: Using ep0 maxpacket: 8 [ 1011.779483][ T5713] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1011.789014][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.797235][ T5713] usb 4-1: Product: syz [ 1011.801429][ T5713] usb 4-1: Manufacturer: syz [ 1011.806096][ T5713] usb 4-1: SerialNumber: syz [ 1011.835341][ T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1011.857002][T19964] usb 1-1: Using ep0 maxpacket: 32 [ 1011.866863][T19964] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1011.876195][T19964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.884587][T19964] usb 1-1: Product: syz [ 1011.888769][T19964] usb 1-1: Manufacturer: syz [ 1011.893539][T19964] usb 1-1: SerialNumber: syz [ 1011.899823][T19964] usb 1-1: config 0 descriptor?? [ 1011.950347][ T5837] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1011.997935][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1012.004616][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.015984][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1012.024716][ T29] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1012.034021][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.042599][ T29] usb 7-1: Product: syz [ 1012.047442][ T29] usb 7-1: Manufacturer: syz [ 1012.052967][ T29] usb 7-1: SerialNumber: syz [ 1012.122659][ T29] usb 7-1: config 0 descriptor?? [ 1012.234154][T19964] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 006 [ 1012.554568][ T29] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input80 [ 1012.779760][ T29] rc_core: IR keymap rc-imon-pad not found [ 1012.785647][ T29] Registered IR keymap rc-empty [ 1012.790990][ T29] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1012.801224][ T29] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1012.835392][ T30] audit: type=1400 audit(1780226321.267:1582): avc: denied { setattr } for pid=21095 comm="syz.4.3640" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1012.936830][ T5837] usb 5-1: failed to enable PITCH for EP 0x82 [ 1012.945952][ T5837] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1012.955542][ T5837] usb 5-1: clock source 0 is not valid, cannot use [ 1012.963030][ T5837] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 1012.970199][ T5837] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1012.996130][ T29] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1013.020547][ T29] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input81 [ 1013.037375][ T5713] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1013.049242][ T5837] usb 5-1: USB disconnect, device number 126 [ 1013.056899][ T5713] usb 4-1: unit 0 not found! [ 1013.062116][ T29] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:11> initialized [ 1013.253709][T21103] fuse: Bad value for 'user_id' [ 1013.281021][T21103] fuse: Bad value for 'user_id' [ 1013.303534][ T5713] usb 4-1: USB disconnect, device number 120 [ 1013.446553][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1013.468324][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1013.484730][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1013.584472][T21121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3643'. [ 1013.587155][T21122] FAULT_INJECTION: forcing a failure. [ 1013.587155][T21122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.608188][T21122] CPU: 0 UID: 0 PID: 21122 Comm: syz.3.3647 Tainted: G L syzkaller #0 PREEMPT(full) [ 1013.608215][T21122] Tainted: [L]=SOFTLOCKUP [ 1013.608221][T21122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1013.608230][T21122] Call Trace: [ 1013.608235][T21122] [ 1013.608242][T21122] dump_stack_lvl+0x100/0x190 [ 1013.608269][T21122] should_fail_ex.cold+0x5/0xa [ 1013.608293][T21122] _copy_from_user+0x2e/0xd0 [ 1013.608313][T21122] memdup_user+0x6b/0xe0 [ 1013.608333][T21122] strndup_user+0x78/0xe0 [ 1013.608351][T21122] __do_sys_fsconfig+0x7ec/0xcb0 [ 1013.608371][T21122] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1013.608387][T21122] ? fput+0x79/0x100 [ 1013.608413][T21122] ? rcu_is_watching+0x12/0xc0 [ 1013.608439][T21122] do_syscall_64+0x115/0x870 [ 1013.608459][T21122] ? clear_bhb_loop+0x40/0x90 [ 1013.608480][T21122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.608498][T21122] RIP: 0033:0x7efc60d9ce59 [ 1013.608510][T21122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.608526][T21122] RSP: 002b:00007efc61c19028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1013.608543][T21122] RAX: ffffffffffffffda RBX: 00007efc61015fa0 RCX: 00007efc60d9ce59 [ 1013.608555][T21122] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 0000000000000003 [ 1013.608565][T21122] RBP: 00007efc61c19090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.608576][T21122] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1013.608586][T21122] R13: 00007efc61016038 R14: 00007efc61015fa0 R15: 00007ffebf3338f8 [ 1013.608607][T21122] [ 1013.780325][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1013.781263][T18282] usb 7-1: USB disconnect, device number 11 [ 1014.714157][T21137] netlink: 'syz.6.3652': attribute type 39 has an invalid length. [ 1014.734857][ T30] audit: type=1400 audit(1780226322.994:1583): avc: denied { getopt } for pid=21136 comm="syz.6.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1015.449930][T18282] usb 1-1: USB disconnect, device number 6 [ 1015.689501][T21144] FAULT_INJECTION: forcing a failure. [ 1015.689501][T21144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.710603][ T5721] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1015.720801][T21144] CPU: 0 UID: 0 PID: 21144 Comm: syz.0.3654 Tainted: G L syzkaller #0 PREEMPT(full) [ 1015.720830][T21144] Tainted: [L]=SOFTLOCKUP [ 1015.720837][T21144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.720848][T21144] Call Trace: [ 1015.720854][T21144] [ 1015.720862][T21144] dump_stack_lvl+0x100/0x190 [ 1015.720889][T21144] should_fail_ex.cold+0x5/0xa [ 1015.720915][T21144] _copy_to_user+0x32/0xd0 [ 1015.720941][T21144] simple_read_from_buffer+0xcb/0x170 [ 1015.720967][T21144] proc_fail_nth_read+0x1af/0x230 [ 1015.720988][T21144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1015.721010][T21144] ? rw_verify_area+0xce/0x6d0 [ 1015.721028][T21144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1015.721048][T21144] vfs_read+0x1e4/0xb30 [ 1015.721071][T21144] ? __pfx_vfs_read+0x10/0x10 [ 1015.721090][T21144] ? __fget_files+0x215/0x3d0 [ 1015.721119][T21144] ? __fget_files+0x21f/0x3d0 [ 1015.721149][T21144] ksys_read+0x12a/0x250 [ 1015.721169][T21144] ? __pfx_ksys_read+0x10/0x10 [ 1015.721187][T21144] ? trace_irq_enable.constprop.0+0x31/0x160 [ 1015.721215][T21144] ? rcu_is_watching+0x12/0xc0 [ 1015.721245][T21144] do_syscall_64+0x115/0x870 [ 1015.721268][T21144] ? clear_bhb_loop+0x40/0x90 [ 1015.721291][T21144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.721311][T21144] RIP: 0033:0x7f7d3515d68e [ 1015.721328][T21144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1015.721346][T21144] RSP: 002b:00007f7d3607ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1015.721366][T21144] RAX: ffffffffffffffda RBX: 00007f7d360806c0 RCX: 00007f7d3515d68e [ 1015.721378][T21144] RDX: 000000000000000f RSI: 00007f7d360800a0 RDI: 0000000000000003 [ 1015.721388][T21144] RBP: 00007f7d36080090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.721399][T21144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.721410][T21144] R13: 00007f7d35416038 R14: 00007f7d35415fa0 R15: 00007ffd23ffc018 [ 1015.721435][T21144] [ 1016.132123][T21150] bridge1: entered promiscuous mode [ 1016.140335][T21150] bridge1: entered allmulticast mode [ 1016.179138][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 1016.186152][ T5721] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1016.195640][ T5721] usb 5-1: config 0 has no interface number 0 [ 1016.202652][ T5721] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1016.215556][ T5721] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1016.225729][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.234016][ T5721] usb 5-1: Product: syz [ 1016.240827][ T5721] usb 5-1: Manufacturer: syz [ 1016.249241][ T5721] usb 5-1: SerialNumber: syz [ 1016.262730][T21152] bridge2: entered promiscuous mode [ 1016.270223][ T5721] usb 5-1: config 0 descriptor?? [ 1016.289470][ T5721] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1016.292137][T21152] bridge2: entered allmulticast mode [ 1016.311242][ T5721] em28xx 5-1:0.132: Video interface 132 found: [ 1016.753454][ T5721] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1017.549099][T21174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.557970][T21174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.128966][ T5721] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1018.417337][ T5721] em28xx 5-1:0.132: board has no eeprom [ 1018.778675][ T5721] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1018.806623][ T5721] em28xx 5-1:0.132: analog set to bulk mode. [ 1018.825873][T18282] em28xx 5-1:0.132: Registering V4L2 extension [ 1018.931465][ T30] audit: type=1400 audit(1780226326.899:1584): avc: denied { getopt } for pid=21187 comm="syz.3.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1019.039410][T18282] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1019.120293][ T5714] usb 5-1: USB disconnect, device number 127 [ 1019.140785][ T5714] em28xx 5-1:0.132: Disconnecting em28xx [ 1019.476487][ T30] audit: type=1400 audit(1780226327.397:1585): avc: denied { write } for pid=21176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.675913][ T30] audit: type=1400 audit(1780226327.582:1586): avc: denied { write } for pid=21212 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.740206][T18282] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1019.771895][T18282] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1019.795654][T18282] em28xx 5-1:0.132: No AC97 audio processor [ 1019.890087][T18282] usb 5-1: Decoder not found [ 1019.904314][T18282] em28xx 5-1:0.132: failed to create media graph [ 1019.929826][T18282] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1020.016092][T21198] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3669'. [ 1020.038944][T21217] ================================================================== [ 1020.047007][T21217] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 1020.054193][T21217] Read of size 4 at addr ffff88807940c860 by task v4l_id/21217 [ 1020.061715][T21217] [ 1020.064021][T21217] CPU: 0 UID: 0 PID: 21217 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1020.064038][T21217] Tainted: [L]=SOFTLOCKUP [ 1020.064042][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1020.064049][T21217] Call Trace: [ 1020.064054][T21217] [ 1020.064060][T21217] dump_stack_lvl+0x100/0x190 [ 1020.064075][T21217] print_report+0x13d/0x4b0 [ 1020.064092][T21217] ? __virt_addr_valid+0x239/0x430 [ 1020.064104][T21217] ? v4l2_open+0x351/0x490 [ 1020.064119][T21217] kasan_report+0xdf/0x1d0 [ 1020.064131][T21217] ? v4l2_open+0x351/0x490 [ 1020.064146][T21217] v4l2_open+0x351/0x490 [ 1020.064165][T21217] ? __pfx_v4l2_open+0x10/0x10 [ 1020.064182][T21217] chrdev_open+0x234/0x6a0 [ 1020.064196][T21217] ? __pfx_chrdev_open+0x10/0x10 [ 1020.064209][T21217] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1020.064226][T21217] do_dentry_open+0x6ab/0x14d0 [ 1020.064238][T21217] ? __pfx_chrdev_open+0x10/0x10 [ 1020.064252][T21217] vfs_open+0x82/0x3f0 [ 1020.064267][T21217] path_openat+0x208c/0x31a0 [ 1020.064283][T21217] ? __pfx_path_openat+0x10/0x10 [ 1020.064299][T21217] do_file_open+0x20e/0x430 [ 1020.064313][T21217] ? __pfx_do_file_open+0x10/0x10 [ 1020.064337][T21217] ? alloc_fd+0x476/0x790 [ 1020.064351][T21217] ? do_getname+0x191/0x390 [ 1020.064367][T21217] do_sys_openat2+0x10d/0x1e0 [ 1020.064382][T21217] ? __pfx_do_sys_openat2+0x10/0x10 [ 1020.064400][T21217] __x64_sys_openat+0x12d/0x210 [ 1020.064415][T21217] ? __pfx___x64_sys_openat+0x10/0x10 [ 1020.064432][T21217] ? rcu_is_watching+0x12/0xc0 [ 1020.064448][T21217] do_syscall_64+0x115/0x870 [ 1020.064474][T21217] ? clear_bhb_loop+0x40/0x90 [ 1020.064486][T21217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.064498][T21217] RIP: 0033:0x7fb1014a7407 [ 1020.064508][T21217] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1020.064518][T21217] RSP: 002b:00007ffea2545b90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1020.064529][T21217] RAX: ffffffffffffffda RBX: 00007fb101c27880 RCX: 00007fb1014a7407 [ 1020.064536][T21217] RDX: 0000000000000000 RSI: 00007ffea2547f1b RDI: ffffffffffffff9c [ 1020.064543][T21217] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1020.064549][T21217] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1020.064555][T21217] R13: 00007ffea2545de0 R14: 00007fb101d8e000 R15: 0000564fe9a044d8 [ 1020.064566][T21217] [ 1020.064570][T21217] [ 1020.305807][T21217] Allocated by task 18282: [ 1020.310202][T21217] kasan_save_stack+0x30/0x50 [ 1020.314862][T21217] kasan_save_track+0x14/0x30 [ 1020.319516][T21217] __kasan_kmalloc+0xaa/0xb0 [ 1020.324081][T21217] em28xx_v4l2_init.cold+0x94/0x3a40 [ 1020.329341][T21217] em28xx_init_extension+0x13a/0x200 [ 1020.334610][T21217] request_module_async+0x61/0x80 [ 1020.339609][T21217] process_one_work+0xa0e/0x1980 [ 1020.344525][T21217] worker_thread+0x5ef/0xe50 [ 1020.349092][T21217] kthread+0x370/0x450 [ 1020.353139][T21217] ret_from_fork+0x72b/0xd50 [ 1020.357712][T21217] ret_from_fork_asm+0x1a/0x30 [ 1020.362551][T21217] [ 1020.364851][T21217] Freed by task 18282: [ 1020.368889][T21217] kasan_save_stack+0x30/0x50 [ 1020.373556][T21217] kasan_save_track+0x14/0x30 [ 1020.378208][T21217] kasan_save_free_info+0x3b/0x70 [ 1020.383245][T21217] __kasan_slab_free+0x5f/0x80 [ 1020.387982][T21217] kfree+0x223/0x6c0 [ 1020.391855][T21217] kref_put.isra.0+0x53/0x75 [ 1020.396861][T21217] em28xx_v4l2_init.cold+0x280/0x3a40 [ 1020.402207][T21217] em28xx_init_extension+0x13a/0x200 [ 1020.407472][T21217] request_module_async+0x61/0x80 [ 1020.412489][T21217] process_one_work+0xa0e/0x1980 [ 1020.417405][T21217] worker_thread+0x5ef/0xe50 [ 1020.421974][T21217] kthread+0x370/0x450 [ 1020.426029][T21217] ret_from_fork+0x72b/0xd50 [ 1020.430601][T21217] ret_from_fork_asm+0x1a/0x30 [ 1020.435355][T21217] [ 1020.437655][T21217] The buggy address belongs to the object at ffff88807940c000 [ 1020.437655][T21217] which belongs to the cache kmalloc-8k of size 8192 [ 1020.451688][T21217] The buggy address is located 2144 bytes inside of [ 1020.451688][T21217] freed 8192-byte region [ffff88807940c000, ffff88807940e000) [ 1020.465635][T21217] [ 1020.467939][T21217] The buggy address belongs to the physical page: [ 1020.474323][T21217] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79408 [ 1020.483058][T21217] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1020.491529][T21217] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1020.499048][T21217] page_type: f5(slab) [ 1020.503006][T21217] raw: 00fff00000000040 ffff88813fe2f280 dead000000000100 dead000000000122 [ 1020.511567][T21217] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1020.520170][T21217] head: 00fff00000000040 ffff88813fe2f280 dead000000000100 dead000000000122 [ 1020.528822][T21217] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1020.537494][T21217] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1020.546147][T21217] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1020.554794][T21217] page dumped because: kasan: bad access detected [ 1020.561180][T21217] page_owner tracks the page as allocated [ 1020.566870][T21217] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6842, tgid 6842 (syz-executor), ts 132533697627, free_ts 130414932485 [ 1020.588214][T21217] post_alloc_hook+0xfd/0x120 [ 1020.592892][T21217] get_page_from_freelist+0x11a6/0x3410 [ 1020.598420][T21217] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1020.604311][T21217] new_slab+0xa6/0x6c0 [ 1020.608360][T21217] refill_objects+0x277/0x420 [ 1020.613037][T21217] __pcs_replace_empty_main+0x375/0x650 [ 1020.618567][T21217] __kvmalloc_node_noprof+0x7da/0xa00 [ 1020.623920][T21217] pfifo_fast_init+0x177/0x3b0 [ 1020.628667][T21217] qdisc_create_dflt+0x128/0x4b0 [ 1020.633589][T21217] dev_activate+0x64f/0xce0 [ 1020.638081][T21217] __dev_open+0x490/0x8f0 [ 1020.642388][T21217] __dev_change_flags+0x596/0x850 [ 1020.647394][T21217] netif_change_flags+0x8d/0x160 [ 1020.652311][T21217] do_setlink.isra.0+0x1ac4/0x3e60 [ 1020.657426][T21217] rtnl_newlink+0x11c2/0x2380 [ 1020.662079][T21217] rtnetlink_rcv_msg+0x95e/0xe90 [ 1020.666999][T21217] page last free pid 6842 tgid 6842 stack trace: [ 1020.673297][T21217] __free_frozen_pages+0x794/0x10a0 [ 1020.678474][T21217] qlist_free_all+0x47/0xf0 [ 1020.682967][T21217] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1020.688409][T21217] __kasan_slab_alloc+0x69/0x90 [ 1020.693234][T21217] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1020.699128][T21217] __alloc_skb+0x140/0x710 [ 1020.703527][T21217] netlink_ack+0x117/0xb80 [ 1020.707922][T21217] netlink_rcv_skb+0x333/0x420 [ 1020.712663][T21217] netlink_unicast+0x585/0x850 [ 1020.717407][T21217] netlink_sendmsg+0x8b0/0xda0 [ 1020.722162][T21217] __sys_sendto+0x468/0x4b0 [ 1020.726645][T21217] __x64_sys_sendto+0xe0/0x1c0 [ 1020.731388][T21217] do_syscall_64+0x115/0x870 [ 1020.735959][T21217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.741831][T21217] [ 1020.744133][T21217] Memory state around the buggy address: [ 1020.749734][T21217] ffff88807940c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1020.757774][T21217] ffff88807940c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1020.765811][T21217] >ffff88807940c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1020.773854][T21217] ^ [ 1020.781022][T21217] ffff88807940c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1020.789058][T21217] ffff88807940c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1020.797094][T21217] ================================================================== [ 1020.817576][T18282] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1020.853188][ T5714] em28xx 5-1:0.132: Closing input extension [ 1021.214146][T21225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3671'. [ 1021.225627][ T5625] Bluetooth: hci1: command 0x0405 tx timeout [ 1021.258276][ T30] audit: type=1400 audit(1780226329.031:1587): avc: denied { read } for pid=4970 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1021.284937][ T5714] em28xx 5-1:0.132: Freeing device [ 1021.297398][ T30] audit: type=1400 audit(1780226329.031:1588): avc: denied { search } for pid=4970 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.322044][ T30] audit: type=1400 audit(1780226329.031:1589): avc: denied { write search } for pid=4970 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.344458][ T30] audit: type=1400 audit(1780226329.031:1590): avc: denied { add_name } for pid=4970 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.368230][ T30] audit: type=1400 audit(1780226329.031:1591): avc: denied { create } for pid=4970 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1021.393571][ T30] audit: type=1400 audit(1780226329.031:1592): avc: denied { append open } for pid=4970 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1021.398663][T21217] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1021.398682][T21217] CPU: 1 UID: 0 PID: 21217 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.398705][T21217] Tainted: [L]=SOFTLOCKUP [ 1021.398711][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1021.398721][T21217] Call Trace: [ 1021.398727][T21217] [ 1021.398733][T21217] dump_stack_lvl+0x100/0x190 [ 1021.398755][T21217] vpanic+0x552/0x970 [ 1021.398770][T21217] ? __pfx_vpanic+0x10/0x10 [ 1021.398787][T21217] ? v4l2_open+0x351/0x490 [ 1021.398807][T21217] panic+0xd1/0xe0 [ 1021.398821][T21217] ? __pfx_panic+0x10/0x10 [ 1021.398836][T21217] ? v4l2_open+0x351/0x490 [ 1021.398855][T21217] ? preempt_schedule_common+0x42/0xc0 [ 1021.398877][T21217] ? check_panic_on_warn+0x1f/0x90 [ 1021.398895][T21217] check_panic_on_warn.cold+0x19/0x34 [ 1021.398911][T21217] end_report.part.0+0x3a/0x90 [ 1021.398936][T21217] kasan_report.cold+0xe/0x18 [ 1021.398957][T21217] ? v4l2_open+0x351/0x490 [ 1021.398978][T21217] v4l2_open+0x351/0x490 [ 1021.398998][T21217] ? __pfx_v4l2_open+0x10/0x10 [ 1021.399018][T21217] chrdev_open+0x234/0x6a0 [ 1021.399037][T21217] ? __pfx_chrdev_open+0x10/0x10 [ 1021.399056][T21217] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1021.399080][T21217] do_dentry_open+0x6ab/0x14d0 [ 1021.399097][T21217] ? __pfx_chrdev_open+0x10/0x10 [ 1021.399117][T21217] vfs_open+0x82/0x3f0 [ 1021.399139][T21217] path_openat+0x208c/0x31a0 [ 1021.399161][T21217] ? __pfx_path_openat+0x10/0x10 [ 1021.399184][T21217] do_file_open+0x20e/0x430 [ 1021.399203][T21217] ? __pfx_do_file_open+0x10/0x10 [ 1021.399229][T21217] ? alloc_fd+0x476/0x790 [ 1021.399249][T21217] ? do_getname+0x191/0x390 [ 1021.399272][T21217] do_sys_openat2+0x10d/0x1e0 [ 1021.399293][T21217] ? __pfx_do_sys_openat2+0x10/0x10 [ 1021.399317][T21217] __x64_sys_openat+0x12d/0x210 [ 1021.399339][T21217] ? __pfx___x64_sys_openat+0x10/0x10 [ 1021.399362][T21217] ? rcu_is_watching+0x12/0xc0 [ 1021.399386][T21217] do_syscall_64+0x115/0x870 [ 1021.399405][T21217] ? clear_bhb_loop+0x40/0x90 [ 1021.399422][T21217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.399443][T21217] RIP: 0033:0x7fb1014a7407 [ 1021.399456][T21217] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1021.399471][T21217] RSP: 002b:00007ffea2545b90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1021.399487][T21217] RAX: ffffffffffffffda RBX: 00007fb101c27880 RCX: 00007fb1014a7407 [ 1021.399497][T21217] RDX: 0000000000000000 RSI: 00007ffea2547f1b RDI: ffffffffffffff9c [ 1021.399507][T21217] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1021.399516][T21217] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1021.399526][T21217] R13: 00007ffea2545de0 R14: 00007fb101d8e000 R15: 0000564fe9a044d8 [ 1021.399541][T21217] [ 1021.417023][T21217] Kernel Offset: disabled