last executing test programs: 48.877743263s ago: executing program 1 (id=588): prlimit64(0x0, 0x1, &(0x7f0000000400)={0x3, 0x4}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x17d) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000ac0)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000940)='./cgroup/../file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000001c0)=@generic={0x7, 0x0, 0x0, "25cf6507"}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000240)={0x0, 0xfff, 0x7, 0x0, 0x1000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r2, 0x5602, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x20, 0xc, 0x8, 0x800, 0x0, 0x4, 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)) 47.250840138s ago: executing program 1 (id=591): syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x6) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1a8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00001f9000/0x1000)=nil, 0x1000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r5, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) 42.836663069s ago: executing program 1 (id=601): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x50) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x52, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) (async) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="000e06000000060ac39aed3c91a348b2d18cdaa42ad83cf6f9e0fb1a4440a81a6cd5f7665f12b54376c9489674a0aaa038eb2c1bbfaf74ad3662684fba9fd4b92b7d746fe42ee33deeb09b92de7e99057f76a4db24ad6d06bd36c90f979dfc62e33a71fea5e9147dd556ae2e88ce1648bc89c84089ea2cfb52fa1aff1b073232f4ba9515281f4b569eaf026b1f95ed44fdd6"], 0x0}, 0x0) (async) syz_usb_control_io$uac3(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) listen(r0, 0x2) (async) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) 39.463420118s ago: executing program 1 (id=608): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) tkill(r4, 0x3b) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) syz_emit_ethernet(0x134, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@void, {0x8100, 0x6}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x122, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10e, 0x0, @gue={{0x2, 0x0, 0x2, 0x1, 0x100}, "5954856e8320e1ca497cf6186b0f444f1019f07a824fa6ad33f20f177a2ab2a7e4e8b201b295fce21485d9ee7dd8f8d2c1f5d5bf9d567abd87206923afe18ebf3843aa01039303f376c816a5053cc75a34fce1be3bb6418917f7069ae77f941e22051d9d4797a57caa6b0c3b4a6d65d9108fe004900844254410c4bc8b3c10281ede0538c856ba3287b531f85c1dbf31c00125590c4150be291bf5577b63d2d5be6a52aa71928e2e0312152a30ccd582a96471f493bc45dc024c6c0f446873bc6d12de31c125a73b67403e43be19631da605c1986f47d92de47808690ae5c19c2a29cdc03c531a33e01d85ae885bf5c0af5cde87318d480388d6ff393f18"}}}}}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96d97d0e162d9873b41b0c6200e0a6feafe2730ded340c08b42300e0cabad29d7ef53d96a53a52bddad1e974cd78a5debf2a750190c4226911d01ae0bc526db9f726bd5072"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r7) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x20020000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="4d7e404f1f8e03012e3e2a000000000000000000f2ffff7f0000d6cc1360b1f49d86edccb588c70af490c245777f5d1c88def35ca59fc6eb372f7110fe84d70c", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x4, 0x700000000000000}, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x3}) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x3bb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000038000000bca3000000000000550305002dfeffff630af0ff0000000071a400fe000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430200000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a0acf30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478b41d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d859f49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f00960298f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2ccb0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab53080d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f982c91ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f098b6367917888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee1ee17da1900004c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f01ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864eeb6511004c1d44d90da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acccbc48d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d29000000003e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa63264648225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4db8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc351bc8a7c040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9dce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac42218301009bbf61e4bba695a41e2109eba8e40c3702bd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843ff3fd404f535be474f456778b5ef85afb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000003f1c0483706db2cb51a9439c2bf24fce70bb9ef9c150397aa1458d9045e9a066c4c07dcb5d3fd47532e6400d78e799e33dda64665388d543741c7440ebdd551ee967b6e2d14a1cc096f18779bc4e34f7de607ec7cbb28efa359d13683d5ef3adc614110f4d8610ebbb5e2d404be76418a0008f12850c49024211b4ea30dc07a52d95989123702f3caab2060f0dbd693ebcf0d5d32b4b76c473d668d63643a162bb4705764fd5656b033c4e49c28c9df7e20bb73ee59205520ad1e2ad93e22231f8251bba43534818baf226082d7d94e9544fe721af383b271d36a43e429ac976ce49ca182f6fcf5f5d1bc6388247669bb217af8c314cf5df36729c23cbcbab2fc7a2fdff67bf87c2651d0c1d87409d1dbef5457ba659111a23ebf03f9b876a03c00ee6b3e29f85321e9b47702f12e3eba8395cbbf7e5e67acc4d20a78ba87899884be807834578d1f2818140ba9facdb716cc8e744c17e5e66ca54b9a243067f85bf63ab86a7bd3bdc7bfd27a5be263205a1f8e2c650e88495fa4b3b6f7176c21c8dc81c9843479f4b14b9a13d8c0fc238e7500a399195373514c3b82efafcc261cfa53944f187ba7ea751a3437c3d4116399d5b65ddf8a641441086bbd30307adc59be211373873ef0fdb10d2c585e07dfd366f256f4b14f7db958cefc154f46bba0893f51acf2f8dd8a19055ffe12661932ac9a648e50683df90d17809e0bd5ec0e0c43f73e85cdc4912ad91b0753bd4561d79906588f9f5d09f56464cc2f56684d287b262b57c23ec78d2eaf96fb17c64f11ead4430c265c28ec02dca4ba38ecfecd4561855adeb2412430abcfa1e0391d0653567bf10827ccc1961743e096dcf2cc2e380b106491ae16d2a1a668de060f838408fbb60bbf017ad4d8dbd7a762c3c0705839f15a3c9f77ebe36bebbd27d98b519f36b12f5153905ed31453958c8c46cb8f974197eb01c819439fd43f43a15920fc1977f2f2a4bdd5d079283e1d6308251a5ae0461e2bd8190284f93f60244101ef8b6541a717a832ddf8aeed5455ed90bdeb9b03dae5481f6cbbf176321fff5e1aeb29840466177af699e84e49d3f9254e557e31a19bbfe55b62e20439710a75bcfa5c8c5f69f5b6cadddfc811fb73b78477688935b00f2f4971ba8c4c7c930e24d9f2fbcc9dc0bd2bf64294e47f02f69b0a84bdd4c0fedac522c7274d74bf367ca6c5441e177fbfc95a56d9490731b1aa1af08aeebb5a9e56d1b50bad5fc3f3ba8eb3095adba4ac1f236580000000000000000000000000000000000000000002e7ec9df3c71f02bb6d639855e3584aafd546739b880ffac40b1292971abc7faa153f90ec46f8c707fdb5b603ce64c155d76aeb8115f54ac9cb6eca976f8026a8bc56392b233a5a661d2e7ee1bbb330cef4da2ec20a4bc1249e45a3c69742ec706a8924bb3ed655137690e951b66fbafe688d98f898fcd545555ed60b3173dc2600f1c6f025dde0629055074e01f79751ba93da933a503a6b928ee43ced85e63996abd88f535bbd6eb7a1f613d2b1bb278341a9a3ed1f0cc81a2b39213ddad2e1e8e94ef639ec16f1d4ba1b89172e8036529d96cb07b409420b8c523103faeadb52341e2adbee1fc90e82924b64e948aea9bf810eb8623263c1dd4d8cc2eef8464f2554a4494a505ef204232f44665eb41c30ad2305056a89255734b3121849af8f6e7348cc9c13c76d285d701c2c078a7b2a41e0c7b2aded6377380e1454c00000000000000000000009355e100fd97c3214075e1ccb353b3e87c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 36.224640602s ago: executing program 1 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f0000001180), 0x0, 0x4000000) sendmsg$nl_route_sched_retired(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x570, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x54, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x1, 0x1a, 0x5, 0xcc6, 0x10001, 0x8, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0x2}, 0x845, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x7, 0x1, 0x3, 0x871}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x3, 0xf, 0x7, 0x3, 0x4, 0xff, 0x4}}]}}, @c_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x0, 0x3, 0x6, 0x1ff, 0x5, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1d, 0x0, 0x1, 0x80, 0x1, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x3bb7, 0x5, 0xef4, 0x30ab}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x6, 0xfc, 0x8, 0x80000001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x5, 0x5, 0x4, 0x4237, 0x400}}, @TCA_CBQ_RATE={0x10, 0x5, {0x16, 0x0, 0x9, 0x2, 0x90e5, 0x7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5e, 0x0, 0x2, 0xfc01, 0x4, 0xfff}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xd}, 0x2, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5768, 0x4, 0x6, 0xf8, 0x40, 0x8, 0x40, 0x80000001, 0x5222, 0x1, 0x4, 0x5, 0x100, 0x2, 0xa6, 0x2, 0xcab5, 0x6, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1, 0x7, 0x5, 0xf, 0x2, 0x0, 0x3d, 0xaf4f, 0x3, 0xe, 0x0, 0x5, 0x8, 0x3, 0x399, 0xc, 0x1ff, 0xc, 0x7, 0x6, 0x6, 0x4, 0x7ff, 0x2c, 0x401, 0x0, 0x4, 0x8, 0x8, 0x356, 0x7fffffff, 0xfc65, 0x6, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x262, 0x6, 0x60b, 0x204, 0x6, 0x2, 0xd, 0x6a71, 0x5, 0x0, 0x5, 0x400, 0x6, 0xb, 0x8001, 0x561, 0x6, 0x2, 0xe, 0xc, 0x0, 0x0, 0x1155, 0x1, 0x7, 0xde1, 0x5, 0x8, 0x0, 0x4, 0x89, 0x7, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0x4, 0xfff, 0x9, 0x401, 0x4, 0x4d, 0xffffffdc, 0x6, 0x9, 0x9, 0x10000000, 0xc, 0x1000, 0x1, 0x9, 0x1, 0x80000001, 0x0, 0x7, 0x1, 0x8, 0x1d, 0x9f, 0x5, 0x88, 0x8, 0x5, 0x8001, 0x6962, 0x800, 0x1000, 0x3, 0x325, 0x8, 0x1, 0xc, 0x8, 0x4, 0x4, 0x5, 0x4, 0x68f1, 0x4de, 0x4, 0xe4, 0x3, 0x7, 0x3, 0x8, 0x69484c88, 0xfffffff8, 0x9, 0x1, 0x1000, 0x9, 0x6, 0x6, 0x5, 0x5abc, 0x275, 0x10001, 0xc787, 0x9, 0xa, 0xd659, 0xfff, 0x10001, 0x7fff, 0x6, 0xfffffffe, 0x7, 0x581, 0x7, 0x4, 0x789, 0xe95d, 0x8, 0x8, 0x8, 0x41d5806b, 0x9, 0xe, 0x10, 0x7ff, 0x4af9, 0x6bf070d4, 0x80000000, 0xcf4, 0xc796, 0x1, 0x2, 0x4, 0x1c4, 0x5, 0x7, 0x8, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x87, 0x0, 0x2, 0x1000, 0x0, 0x297e419b, 0x80000001, 0xffffff39, 0x7, 0x200, 0xb21c, 0x80, 0x4, 0xb, 0x6703, 0xc7b, 0xf48, 0x6, 0x8, 0x1, 0x2, 0x3, 0x101, 0xe0b, 0x1, 0x502f, 0x1, 0x4, 0x9, 0xfffffff7, 0x3, 0x9, 0x3, 0xdfc7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0x10001, 0x4, 0x73f, 0xcfca, 0xd, 0xd3a, 0x9, 0xc2f3, 0x8, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x0, 0x1000, 0x4, 0x2, 0x3}}]}}, @c_cbq={{0x8}, {0x4}}]}, 0x570}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 34.73860879s ago: executing program 1 (id=617): listen(0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = eventfd(0x10000) r5 = dup2(r3, r4) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, 0x0, 0x0) 19.29149397s ago: executing program 32 (id=617): listen(0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = eventfd(0x10000) r5 = dup2(r3, r4) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, 0x0, 0x0) 9.37648712s ago: executing program 4 (id=679): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000110000000000000000000100", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x1000000, &(0x7f0000001380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f2270914d440600726d6973fbdfb97f807425bf9973696f6e732c00"]) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x1, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x39, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0x3, 0x926, 0xa, 0x1, 0x2, 0x407c, 0xea4, 0x0, 0x4, 0x4000022, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0x1, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x4, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fb, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000007, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0xffffffff, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x8, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x5, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xcad, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfff9, 0x4, 0x20002, 0x5, 0xe8a0556, 0x9, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x8, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0xa00007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0xfffffffffffffd01) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) fremovexattr(r7, &(0x7f0000000080)=@known='system.sockprotoname\x00') sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xa, &(0x7f00000000c0)={0x6, 0x3ff}) 7.439796885s ago: executing program 2 (id=684): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f0000000880)=[{0xffffffffffffffff, 0x2000}, {r0, 0x1}, {0xffffffffffffffff, 0x448}, {0xffffffffffffffff, 0x2000}], 0x4, &(0x7f00000008c0), &(0x7f0000000900)={[0xfffffffe]}, 0x8) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x264, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, 0x0, r4}}, [@algo_auth={0x117, 0x1, {{'blake2s-128-x86\x00'}, 0x678, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0xe4, 0x1, {{'blake2s-256-x86\x00'}, 0x4e0, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe9"}}]}, 0x264}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0xdec, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="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", @nested={0xd5, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r4}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r5}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee0665459", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0xdec}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) r6 = getegid() fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setxattr$system_posix_acl(&(0x7f0000000000)='usb0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x1}, [{0x2, 0x7, r4}], {0x4, 0x4}, [{0x8, 0x3, r6}, {0x8, 0x0, 0xee01}, {0x8, 0x4, 0xee01}, {0x8, 0x6, r7}, {0x8, 0x0, r8}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x4}, {0x20, 0x3}}, 0x64, 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000a40)=ANY=[@ANYBLOB="06706572665f6576656e74202d626c6b696f20000000"], 0x19) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0) 6.734674916s ago: executing program 0 (id=685): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0xa, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) io_uring_setup(0x66a, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0x22) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) sendfile(r6, r6, 0x0, 0x200000) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000003380)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') getdents64(r8, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006bc0), 0x0, 0x20b0, 0x0) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x4044810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) 6.657740598s ago: executing program 4 (id=686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f0, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x2000, 0x200da5d85240a79d, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x80, 0x29, 0x0, @empty, @empty}}}}) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1000004, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030322c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030342c6d61783d30303030303030303030303030303030303030312c6d61783d303030000000000000d810cfd0310c0396d52c95e24a5d00003030303030303030342c6d61783d30303030303030303030303030303030303030332c66736d616769633d30783030304ab6896a6de460865a8cc74e5298f842000000000000"]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x2, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x10001043, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000000)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r9, 0x0, r8}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.29207685s ago: executing program 2 (id=687): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2121, &(0x7f0000001440)={0x77359400}) 3.6691196s ago: executing program 4 (id=689): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000400)) r7 = userfaultfd(0x1) ioctl$UFFDIO_POISON(r7, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000662000/0x3000)=nil, 0x3000}}) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0) 3.667927501s ago: executing program 2 (id=690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x5, 0x4, 0x8, 0x2}, 0x50) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x30, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r3, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r4, &(0x7f00000000c0), 0x0}, 0x20) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) 3.655357145s ago: executing program 0 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109d40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FICLONE(r0, 0x40049409, r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 3.44843495s ago: executing program 2 (id=692): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x2, 0x0, 0x255}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0xfe78b36d55c77b99, 0x2100, 0x330, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0xfffffffc, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x3, 0xe0b, 0x0, 0x0}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904"], 0x0) 2.965791453s ago: executing program 0 (id=693): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c20d053ffb1f9c36d84ec61231b290c32b7c06dbaa1e3759ced984923c8c911eb6064c8be845d2f663d49d4a0f2f51b0d4bba2d299a49aa533c24067c4cd73de97f00000005fcd409e7b7973d6ddb124d869ef52ffcd98866217e3311295ca16a43631af4768bb04b4f1867aa36135b7890f0", @ANYRESDEC=0x0]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r3, 0x9, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) listen(0xffffffffffffffff, 0x5) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0x10628, 0x9, 0xba, 0xe88, 0xabe6, 0x0, 0x0, 0x4, 0x8001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r6, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r2, r7, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.949618894s ago: executing program 4 (id=694): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x6, 0x471, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x1, 0x96, 0xba, 0x40, 0x83a, 0xa701, 0xdec1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45f, 0x2, 0xf9, 0x8, 0x40, 0x8, "", [{{0x9, 0x4, 0x57, 0x80, 0x7, 0xe7, 0x3d, 0x2d, 0x0, [], [{{0x9, 0x5, 0xd, 0x1, 0x40, 0x6, 0x0, 0x7, [@generic={0x83, 0xf, "4558b618c946b7b7cb512d902d69c6298fbcebe393ce83cf41c5058c58b934c9086cd7a73fcf6610efc3a73e837d54a855197c3e758e468f32716107c9435d57f6d052ce8eb906fd73c4218d2bd89f7498acc40ac763e32076378cbf696bc9dc4ded201bfa2d2873eda62ef53b4e81648673271109909fe9f6d21f73f1841bccf1"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x214, 0x8, 0xd, 0x3, [@generic={0x79, 0x9, "74529b5f8930273a4ba9629e29c1560e62b25afa830124c1b8fbab07b4986b331b57a9d0c0b6eafdd8e87a68e09df2619c690b4d527315f5356bcf16ef5805fe4ad0670e6e5e8e48af2bb142ef3210f6c3bd8b783b6f1140f29b97d001a89431b284b7b22cd3188b03a745fd8ef186394d8ab59a293a86"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xe}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x0, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0xe, 0x8, 0x3}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0xe5, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}, @generic={0x5a, 0x22, "9458749d805d3d1d2cf42c2c6dc4923a040e49ad55f5ec0c07607564e98adb438d6db9b374a84eb3a3fc56d10649d952092ea41a2a04d4149bdfce95fe07e74f1f0e6650b2143a0f4f88b361ebb992be043918d5429c7ed5"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xb, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf9, 0x1}]}}, {{0x9, 0x5, 0x5, 0x4, 0x50, 0x2, 0xec, 0x4e, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}]}}, {{0x9, 0x4, 0x31, 0x2, 0x9, 0x6b, 0xe4, 0xe3, 0x5, [], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0x5, 0xf, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb8, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x5, 0x0, 0x3, [@generic={0x64, 0x9, "8ccf36c7e13236f1f5d8cbfb6f534ad685ccac7f885e8a8135c14b677eb7ede6c615e2b663aa0d17a28dd6d70935f6d9fb8939b5d5debd5c4ebad56444660c4f0882ee873f807d135b5396f302570867662562cd70e92bbf04e376ffe4265eb353e5"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x9, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x11, 0x1, 0xf7, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x3, 0x29, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xff}, @generic={0x9c, 0x23, "2f80dfc588e4b4279b7f36599954af4ef956f036260f67e583cd50cb93e5b80eafe1206ff96df600ae92ccb2f1b232b6257f905f63e9f2a36db2625690e9944e5129d8ea9a7361db223590b345cf9bd26ae302fc554c18cbc2c278bf56b3d20345c0aaa1f3175c4320f1f29a66c52731b3d816453e490e7272b5850699dbbb0d14e1ad66c0a563da3fcb60c50d39ca7e9416f64cc62755116c8f"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x1, 0x25, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0x4, 0x98}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0xfe, 0xe, [@generic={0xfc, 0x11, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xed, 0xc2cf}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x56, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6ad8}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x110, 0x6, 0x69, 0x0, 0x20, 0x4}, 0x41, &(0x7f0000000840)={0x5, 0xf, 0x41, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x1, 0x3500}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x2, 0x6, 0xbb5, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x1, 0xf00, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "51677769f91a963dd5c5a38e4b86e556"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x406}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfdd9) 2.664296521s ago: executing program 0 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f0000000880)=[{0xffffffffffffffff, 0x2000}, {r0, 0x1}, {0xffffffffffffffff, 0x448}, {0xffffffffffffffff, 0x2000}], 0x4, &(0x7f00000008c0), &(0x7f0000000900)={[0xfffffffe]}, 0x8) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x280, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, 0x0, r4}}, [@algo_auth={0x117, 0x1, {{'blake2s-128-x86\x00'}, 0x678, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0xfe, 0x1, {{'blake2s-256-x86\x00'}, 0x5b0, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc453126447"}}]}, 0x280}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0xdec, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="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", @nested={0xd5, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r4}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r5}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee0665459", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0xdec}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) r6 = getegid() fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setxattr$system_posix_acl(&(0x7f0000000000)='usb0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x1}, [{0x2, 0x7, r4}], {0x4, 0x4}, [{0x8, 0x3, r6}, {0x8, 0x0, 0xee01}, {0x8, 0x4, 0xee01}, {0x8, 0x6, r7}, {0x8, 0x0, r8}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x4}, {0x20, 0x3}}, 0x64, 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000a40)=ANY=[@ANYBLOB="06706572665f6576656e74202d626c6b696f20000000"], 0x19) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1.72465266s ago: executing program 4 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x10000, {0x14, 0xffffffffffff8001, 0xaddb, 0x9, 0x1}}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x6000, 0x0, {}, 0x1, 0xfffffffffffffffe}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fadb00", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe2d1f2b6255614c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.714836361s ago: executing program 2 (id=698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080008000003000001000000000045000028000000000089907800000000e000000100004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="12"], 0x36) 1.540956795s ago: executing program 3 (id=699): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2121, 0x0) 1.35282799s ago: executing program 3 (id=700): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x700000000000000) 1.352266285s ago: executing program 2 (id=701): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848300000005e140602bde200030e000a00100000000a8000001294", 0x2e}], 0x1, 0x0, 0x0, 0x60}, 0x40044) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500050000000000050005000200000005000400000000000900020373797a31000000000c000780080006400000000011000300686173683a69702c6d61726b000000002fc6d449a02acc845e62a868fc37fbcd59273a14f81e11fd0c7ccd7067e7350ed4206317cf6f4dbefc0fcd3695b5699a069e90c810b1eb07a271235b468b49b8aa933221646f828048d832"], 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r4, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002800800040088"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20008040) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r9, 0x4010744d, &(0x7f0000000180)) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120108001964d408861a92e009000000030109022400010200100309041f0202e917f30009050202000202000009058a020002"], 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) creat(&(0x7f00000000c0)='./file0\x00', 0x15) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_usb_control_io$uac3(r10, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="747467a149a3323a31362e313600222f0bc46eb64988bf9a69bb74cce75bfda0da3c838f4819df0000000000000000"], 0x15) 1.34418063s ago: executing program 0 (id=702): userfaultfd(0x801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000400000002000000000000110200000008000000000000000000000400000000000061006d7eb60612d5d3fcd324f5f1e6bd07a244510b207233eaef7a73d2742c65a2d9f93785ee62"], 0x0, 0x38}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xff05, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x10000) close(r7) write(r6, &(0x7f00000002c0)='snd_aloop.0', 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 1.340013029s ago: executing program 3 (id=703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setuid(0xee01) iopl(0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x10, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x1f4, 0x34, 0x1000, 0x4}, 0x9c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="07c17d697046", 0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000040)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000040)=""/247, 0xf7, 0x60, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @private2, 0xffffffff}, 0x1c) 1.262798556s ago: executing program 4 (id=704): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x202502, 0x0) write(r0, &(0x7f0000000240)="62696e6472ed4ac34df9336caee432903dd52f162cb46dd41c0acd09fa5129a66902082b49e6a3b758d82400", 0x2c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback, 0x6}, 0x1c) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000dc0)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003140000003403ffe9e1ff0000000002"], 0x0, 0x0}, 0x0) syz_usb_disconnect(r1) 532.477274ms ago: executing program 3 (id=705): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2080) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)="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", 0xfd) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x8, 0xb, 0x6b6, @vifc_lcl_ifindex=r3, @remote}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xa, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r2, 0xb, 0x10}, 0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@var={0x8, 0x0, 0x0, 0xe, 0x2, 0x1}, @fwd={0x7}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}, @var={0xe, 0x0, 0x0, 0xe, 0x1}, @struct={0x7, 0x8, 0x0, 0x4, 0x0, 0x6, [{0xc, 0x3, 0x6}, {0x6, 0x4, 0x26}, {0x4, 0x0, 0x9124}, {0x7, 0x1, 0xffff0000}, {0x9, 0x2, 0x200}, {0xb, 0x3, 0xa}, {0x3, 0x1, 0x4}, {0xc, 0xfffffbff, 0x8}]}]}, {0x0, [0x61]}}, &(0x7f0000000640)=""/241, 0xbf, 0xf1, 0x1, 0x6df9, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x0, 0x0}, 0x8) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000840), 0x280000, 0x0) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x12, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @generic={0xfe, 0x9, 0x1, 0x9, 0x10000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_val={0x18, 0x7, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000500)='GPL\x00', 0x25, 0x38, &(0x7f0000000540)=""/56, 0x41000, 0x0, '\x00', r3, @fallback=0x20, r8, 0x8, &(0x7f0000000780)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x0, 0x4, 0x9}, 0x10, r9, 0xffffffffffffffff, 0x4, &(0x7f0000000900)=[r10, r0, r11], &(0x7f0000000940)=[{0x3, 0x3, 0x9, 0x7}, {0x0, 0x1, 0x7, 0xa}, {0x0, 0x5, 0xd, 0x7}, {0x5, 0x5, 0xf, 0xa}], 0x10, 0x81}, 0x94) r12 = accept4(r1, &(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000ac0)=0x80, 0x81800) bind$x25(r10, &(0x7f0000000b00)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) write$vga_arbiter(r6, &(0x7f0000000b40)=@other={'unlock', ' ', 'io+mem'}, 0xe) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0), r10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r10, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000c40)=[0x0], &(0x7f0000000c80)=[0x0], 0x0, 0x3e, &(0x7f0000000cc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000001240)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f0000000f00)={0x2fc, r13, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r3}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x40}, 0x800) mq_getsetattr(r10, &(0x7f0000001280)={0x1, 0x2, 0x0, 0x80000000}, 0x0) r15 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r12, {0x0, 0x0}}, './file0\x00'}) fchown(r6, r15, r18) write(r8, &(0x7f0000001300)="1ff066c863925d52a6e0d2c4ca68935fdb9ef51b583ab3232639b043116393b3f10bdd457db54a2a46db9356986c8d8c0b3d81d8b3eb5c956d30937fb9c9ae083b8eed4fba04dd4fe1665cdf1345463076714e255116db32fc33c30c5ea83e1f876adc32bcd6752f855420670b2a86a41e63b8", 0x73) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x188b) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001380)={0x81}, 0x8) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000901, r17, &(0x7f00000013c0)) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000001440)={r16, 0x8, 0x7}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000000) 328.692848ms ago: executing program 3 (id=706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x7214, &(0x7f0000000600)="f3"}) 225.259458ms ago: executing program 3 (id=707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100001a00330600000000fddbdf25000000000000ffffffffff0700000000000080000000000040004e2400ff00008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd70000335000002000500000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210002"], 0x140}, 0x1, 0x0, 0x0, 0x20000090}, 0x200080d4) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "0d19547b06d6d6fc752d343fc04bb52ad5fe3ed3b1a5a0e47872d83ea5d8711bc787f5f0dfc849c903e724b04d69f867fa6473246b9bf1797613a183e2b4d54a", 0x15}, 0x48, 0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r3, 0x1) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 65.505021ms ago: executing program 0 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) lseek(r2, 0x9c79000800000000, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$UBLK_U_CMD_START_DEV(r7, 0xc0207506, &(0x7f0000000300)={r3, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a01040000f0ffffff00000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x32, 0x301, 0x70bd2c, 0xfffffffe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="e800000048000701fefffffffcdbdf2503"], 0xe8}}, 0xc000) ioctl$TCXONC(r9, 0x5453, 0x0) ptrace$cont(0x9, r8, 0xfffffffffffffffe, 0xffffffffffff7fff) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, 0x0, 0x0) syz_ublk_process_io(0x0, 0x0, 0x9, 0x0, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000102, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @reserved}) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='ext2\x00', 0x800a, 0x0) 0s ago: executing program 5 (id=654): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea000905821704"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000700)={&(0x7f0000000640)=[{0x6, 0x6010, 0x7, &(0x7f0000000000)="02d04a0edf3ea2"}, {0x0, 0x400, 0x0, 0x0}], 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x3e, "", [{{0x9, 0x4, 0x0, 0x9, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0xfffe, 0xfc, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r9, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24048000}, 0x14) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1fc7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80000000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x24000004) recvmmsg(r8, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x0, 0x23, 0x25, {0x25, 0x13, "83efb930f0187ff0478fa22a61a54607eb6dd515121100"/35}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) kernel console output (not intermixed with test programs): nfig 1 has 0 interfaces, different from the descriptor's value: 3 [ 240.697945][ T5701] usb 2-1: device descriptor read/64, error -71 [ 240.744599][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.752786][ T30] usb 5-1: Product: syz [ 240.757010][ T30] usb 5-1: Manufacturer: syz [ 240.761988][ T30] usb 5-1: SerialNumber: syz [ 240.995524][ T5701] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 241.057868][ T7742] bond0: option slaves: interface -veth does not exist! [ 241.131222][ T5701] usb 2-1: device descriptor read/64, error -71 [ 241.216190][ T7749] FAULT_INJECTION: forcing a failure. [ 241.216190][ T7749] name failslab, interval 1, probability 0, space 0, times 0 [ 241.216232][ T7749] CPU: 0 UID: 0 PID: 7749 Comm: syz.2.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.216257][ T7749] Tainted: [L]=SOFTLOCKUP [ 241.216263][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 241.216271][ T7749] Call Trace: [ 241.216276][ T7749] [ 241.216283][ T7749] dump_stack_lvl+0x100/0x190 [ 241.216312][ T7749] should_fail_ex.cold+0x5/0xa [ 241.216337][ T7749] should_failslab+0xc2/0x120 [ 241.216366][ T7749] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 241.216387][ T7749] ? __d_alloc+0x35/0xa50 [ 241.216414][ T7749] __d_alloc+0x35/0xa50 [ 241.216438][ T7749] d_alloc_pseudo+0x1c/0xc0 [ 241.216454][ T7749] alloc_file_pseudo+0x118/0x290 [ 241.216477][ T7749] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 241.216500][ T7749] ? alloc_fd+0x471/0x7a0 [ 241.216522][ T7749] sock_alloc_file+0x50/0x210 [ 241.216541][ T7749] __sys_socket+0x1c0/0x260 [ 241.216562][ T7749] ? __pfx___sys_socket+0x10/0x10 [ 241.216590][ T7749] __x64_sys_socket+0x72/0xb0 [ 241.216610][ T7749] ? lockdep_hardirqs_on+0x7d/0x110 [ 241.216629][ T7749] do_syscall_64+0x123/0x790 [ 241.216650][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.216667][ T7749] RIP: 0033:0x7f1f78f9e159 [ 241.216682][ T7749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.216698][ T7749] RSP: 002b:00007f1f79eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 241.216716][ T7749] RAX: ffffffffffffffda RBX: 00007f1f79225fa0 RCX: 00007f1f78f9e159 [ 241.216730][ T7749] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 241.216740][ T7749] RBP: 00007f1f79035024 R08: 0000000000000000 R09: 0000000000000000 [ 241.216750][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.216760][ T7749] R13: 00007f1f79226038 R14: 00007f1f79225fa0 R15: 00007ffd11ed2588 [ 241.216783][ T7749] [ 241.241880][ T5701] usb usb2-port1: attempt power cycle [ 241.581358][ T5701] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 241.602389][ T5701] usb 2-1: device descriptor read/8, error -71 [ 241.752492][ T5786] net_ratelimit: 12 callbacks suppressed [ 241.752538][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.752664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.785249][ T31] audit: type=1400 audit(1788065182.642:672): avc: denied { connect } for pid=7760 comm="syz.0.499" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.831776][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.831923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.849528][ T5701] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 241.862073][ T5701] usb 2-1: device descriptor read/8, error -71 [ 241.915849][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.916864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.972155][ T5701] usb usb2-port1: unable to enumerate USB device [ 242.393634][ T5787] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 242.755282][ T30] usb 5-1: USB disconnect, device number 25 [ 242.773847][ T5787] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 242.778932][ T5787] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 242.778963][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.778980][ T5787] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 242.779008][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.074466][ T7766] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 243.074951][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.075051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.285084][ T31] audit: type=1400 audit(1788065184.142:673): avc: denied { shutdown } for pid=7765 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.305003][ T31] audit: type=1400 audit(1788065184.142:674): avc: denied { connect } for pid=7765 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.357488][ T5602] Bluetooth: hci5: Reading Intel version command failed (-71) [ 243.359369][ T5701] usb 3-1: USB disconnect, device number 27 [ 243.490235][ T30] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 243.710925][ T31] audit: type=1400 audit(1788065184.552:675): avc: denied { write } for pid=7773 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.711451][ T31] audit: type=1400 audit(1788065184.562:676): avc: denied { listen } for pid=7773 comm="syz.0.504" laddr=10.1.1.2 lport=53778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.941337][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 243.947101][ T30] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 243.968364][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.968407][ T30] usb 5-1: Product: syz [ 243.968421][ T30] usb 5-1: Manufacturer: syz [ 243.968433][ T30] usb 5-1: SerialNumber: syz [ 244.266203][ T30] usb 5-1: config 0 descriptor?? [ 244.362858][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.363023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.503348][ T30] gspca_main: se401-2.14.0 probing 047d:5003 [ 244.688871][ T30] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 244.691041][ T7789] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 245.223783][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 245.482749][ T7794] netlink: 'syz.0.508': attribute type 10 has an invalid length. [ 245.482884][ T7794] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 245.508536][ T7794] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 245.531793][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.541927][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 245.541980][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.542002][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.542024][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 245.542046][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.542079][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.552917][ T10] usb 3-1: config 0 descriptor?? [ 245.591752][ T7782] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.811370][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 245.961405][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 245.962077][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 245.976975][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 245.977001][ T9] usb 1-1: config 2 has no interface number 0 [ 245.977048][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [ 245.978070][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.978089][ T9] usb 1-1: SerialNumber: syz [ 246.218259][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 246.218392][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 246.228937][ T10] usb 3-1: USB disconnect, device number 28 [ 246.437694][ T7798] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 246.452884][ T7798] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 246.473455][ T7798] bond1: option mode: invalid value (8) [ 246.483052][ T7798] bond1 (unregistering): Released all slaves [ 246.607786][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 246.620931][ T9] usb 1-1: USB disconnect, device number 26 [ 246.665791][ T5701] kernel write not supported for file /snd/midiC2D0 (pid: 5701 comm: kworker/0:5) [ 246.714958][ T7798] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 246.726479][ T7798] overlayfs: failed to look up (tracing) for ino (-66) [ 246.739167][ T31] audit: type=1400 audit(1788065187.592:677): avc: denied { shutdown } for pid=7801 comm="syz.4.510" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 246.751452][ T31] audit: type=1400 audit(1788065187.602:678): avc: denied { write } for pid=7801 comm="syz.4.510" path="socket:[18610]" dev="sockfs" ino=18610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.689627][ T5787] net_ratelimit: 10 callbacks suppressed [ 247.689670][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.689793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.695215][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.695361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.878349][ T7815] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 247.907942][ T7815] CIFS: Attempting to mount //127.0.0.1/share [ 247.918500][ T7815] FAULT_INJECTION: forcing a failure. [ 247.918500][ T7815] name failslab, interval 1, probability 0, space 0, times 0 [ 247.932567][ T7815] CPU: 0 UID: 0 PID: 7815 Comm: syz.2.513 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.932598][ T7815] Tainted: [L]=SOFTLOCKUP [ 247.932604][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 247.932614][ T7815] Call Trace: [ 247.932623][ T7815] [ 247.932631][ T7815] dump_stack_lvl+0x100/0x190 [ 247.932665][ T7815] should_fail_ex.cold+0x5/0xa [ 247.932696][ T7815] should_failslab+0xc2/0x120 [ 247.932719][ T7815] __kmalloc_cache_noprof+0x91/0x6d0 [ 247.932746][ T7815] ? cifs_get_tcp_session+0x144/0x1f20 [ 247.932776][ T7815] cifs_get_tcp_session+0x144/0x1f20 [ 247.932802][ T7815] ? rcu_is_watching+0x13/0xc0 [ 247.932831][ T7815] cifs_mount_get_session+0xc9/0x460 [ 247.932860][ T7815] dfs_mount_share+0x200/0x1e20 [ 247.932879][ T7815] ? trace_sched_exit_tp+0x120/0x160 [ 247.932904][ T7815] ? __schedule+0x126b/0x6920 [ 247.932926][ T7815] ? __pfx_dfs_mount_share+0x10/0x10 [ 247.932954][ T7815] ? __pfx___schedule+0x10/0x10 [ 247.932977][ T7815] cifs_mount+0xc4/0xdb0 [ 247.933001][ T7815] ? preempt_schedule_common+0x3c/0xb0 [ 247.933021][ T7815] ? preempt_schedule_thunk+0x16/0x40 [ 247.933044][ T7815] ? __pfx_cifs_mount+0x10/0x10 [ 247.933076][ T7815] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 247.933104][ T7815] cifs_smb3_do_mount+0x2c0/0x1b10 [ 247.933138][ T7815] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 247.933170][ T7815] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.933195][ T7815] smb3_get_tree+0x1fd/0x440 [ 247.933220][ T7815] vfs_get_tree+0x92/0x320 [ 247.933247][ T7815] vfs_cmd_create+0xd7/0x2a0 [ 247.933283][ T7815] __do_sys_fsconfig+0x55a/0xcb0 [ 247.933313][ T7815] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 247.933341][ T7815] ? fput+0x7c/0x100 [ 247.933364][ T7815] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 247.933397][ T7815] do_syscall_64+0x123/0x790 [ 247.933420][ T7815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.933440][ T7815] RIP: 0033:0x7f1f78f9e159 [ 247.933457][ T7815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.933475][ T7815] RSP: 002b:00007f1f79e95028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 247.933494][ T7815] RAX: ffffffffffffffda RBX: 00007f1f79226090 RCX: 00007f1f78f9e159 [ 247.933506][ T7815] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 247.933517][ T7815] RBP: 00007f1f79e95090 R08: 0000000000000000 R09: 0000000000000000 [ 247.933528][ T7815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.933538][ T7815] R13: 00007f1f79226128 R14: 00007f1f79226090 R15: 00007ffd11ed2588 [ 247.933564][ T7815] [ 247.964725][ T7815] CIFS: VFS: cifs_mount failed w/return code = -12 [ 248.000881][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.001029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.245431][ T30] gspca_se401: read req failed req 0x06 error -19 [ 248.261955][ T30] usb 5-1: USB disconnect, device number 26 [ 248.732318][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.732468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.805842][ T7820] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 249.751889][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.752026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.114940][ T5787] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 250.256459][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.256533][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.275811][ T5787] usb 1-1: Using ep0 maxpacket: 32 [ 250.277645][ T5787] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 250.290538][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.421863][ T5787] usb 1-1: config 0 descriptor?? [ 250.847544][ T5787] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 250.904119][ T5787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.912377][ T5787] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 250.913504][ T5787] usb 1-1: media controller created [ 251.133162][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.133549][ T7837] ieee802154 phy0 wpan0: encryption failed: -90 [ 251.134653][ T31] audit: type=1400 audit(1788065191.992:679): avc: denied { write } for pid=7830 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.717043][ T5787] az6027: usb out operation failed. (-71) [ 252.723333][ T5787] az6027: usb out operation failed. (-71) [ 252.725073][ T5787] stb0899_attach: Driver disabled by Kconfig [ 252.727584][ T5787] az6027: no front-end attached [ 252.727584][ T5787] [ 252.755869][ T5787] az6027: usb out operation failed. (-71) [ 252.762316][ T5787] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 252.772333][ T5787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 252.792211][ T13] net_ratelimit: 12 callbacks suppressed [ 252.792251][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.792394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.815474][ T5787] dvb-usb: schedule remote query interval to 400 msecs. [ 252.822674][ T5787] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 252.837897][ T5787] usb 1-1: USB disconnect, device number 27 [ 253.012511][ T31] audit: type=1400 audit(1788065193.862:680): avc: denied { mount } for pid=7872 comm="syz.2.525" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 253.247832][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.247980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.281733][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 253.329994][ T5787] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 253.344805][ T7879] netlink: 'syz.1.528': attribute type 10 has an invalid length. [ 253.344915][ T7879] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 253.375408][ T7879] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 253.614901][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 253.793248][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.793284][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.793317][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.825080][ T5787] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 254.001476][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 254.008319][ T5787] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 254.162917][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.163051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.195097][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.195293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.277886][ T5787] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 254.277940][ T5787] usb 2-1: config 2 has no interface number 0 [ 254.278089][ T5787] usb 2-1: config 2 interface 31 has no altsetting 0 [ 254.327822][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.327976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.373275][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 254.373329][ T5787] usb 2-1: SerialNumber: syz [ 254.527887][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.550113][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.002271][ T31] audit: type=1400 audit(1788065195.862:681): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 255.034983][ T7888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.045158][ T7888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.253304][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.263392][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.289602][ T10] hid-picolcd 0003:04D8:C002.0009: reserved main item tag 0xe [ 255.300676][ T10] hid_parser_main: 3 callbacks suppressed [ 255.306538][ T10] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 256.343847][ T5787] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 256.881594][ T5702] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 256.882074][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 257.013704][ T5702] usb 1-1: device descriptor read/64, error -32 [ 257.251109][ T10] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0009/input/input14 [ 257.251346][ T5702] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 257.383521][ T5787] usb 2-1: USB disconnect, device number 38 [ 257.417557][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.428671][ T5702] usb 1-1: not running at top speed; connect to a high speed hub [ 257.437030][ T5702] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 257.534956][ T5702] usb 1-1: config 1 has an invalid descriptor of length 149, skipping remainder of the config [ 257.545879][ T5702] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 257.597844][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.606271][ T5702] usb 1-1: Product: syz [ 257.612425][ T5702] usb 1-1: Manufacturer: syz [ 257.612476][ T5702] usb 1-1: SerialNumber: syz [ 257.883211][ T10] rc_core: IR keymap rc-rc6-mce not found [ 257.883241][ T10] Registered IR keymap rc-empty [ 257.884591][ T10] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0009/rc/rc0 [ 257.889292][ T10] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0009/rc/rc0/input15 [ 257.892314][ T10] hid-picolcd 0003:04D8:C002.0009: No report with id 0x92 found [ 258.577605][ T5812] net_ratelimit: 12 callbacks suppressed [ 258.577653][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.577828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.713919][ T7908] netlink: 'syz.3.532': attribute type 2 has an invalid length. [ 259.193125][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.193301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.428242][ T5702] usb 1-1: USB disconnect, device number 29 [ 259.822195][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.822358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.875978][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.877551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.848095][ T10] usb 5-1: USB disconnect, device number 27 [ 260.873655][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.873804][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.095940][ T7929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.537'. [ 261.196855][ T7929] FAULT_INJECTION: forcing a failure. [ 261.196855][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 261.196895][ T7929] CPU: 0 UID: 0 PID: 7929 Comm: syz.1.537 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.196923][ T7929] Tainted: [L]=SOFTLOCKUP [ 261.196929][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 261.196940][ T7929] Call Trace: [ 261.196947][ T7929] [ 261.196955][ T7929] dump_stack_lvl+0x100/0x190 [ 261.196976][ T7929] should_fail_ex.cold+0x5/0xa [ 261.196993][ T7929] should_failslab+0xc2/0x120 [ 261.197008][ T7929] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 261.197022][ T7929] ? __d_alloc+0x35/0xa50 [ 261.197039][ T7929] __d_alloc+0x35/0xa50 [ 261.197055][ T7929] d_alloc_pseudo+0x1c/0xc0 [ 261.197066][ T7929] alloc_file_pseudo+0x118/0x290 [ 261.197083][ T7929] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 261.197103][ T7929] ? alloc_fd+0x471/0x7a0 [ 261.197119][ T7929] sock_alloc_file+0x50/0x210 [ 261.197132][ T7929] __sys_socket+0x1c0/0x260 [ 261.197150][ T7929] ? __pfx___sys_socket+0x10/0x10 [ 261.197181][ T7929] __x64_sys_socket+0x72/0xb0 [ 261.197203][ T7929] ? lockdep_hardirqs_on+0x7d/0x110 [ 261.197223][ T7929] do_syscall_64+0x123/0x790 [ 261.197245][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.197260][ T7929] RIP: 0033:0x7f85e0f9e159 [ 261.197273][ T7929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.197288][ T7929] RSP: 002b:00007f85e1ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 261.197305][ T7929] RAX: ffffffffffffffda RBX: 00007f85e1225fa0 RCX: 00007f85e0f9e159 [ 261.197316][ T7929] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 261.197326][ T7929] RBP: 00007f85e1035024 R08: 0000000000000000 R09: 0000000000000000 [ 261.197336][ T7929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.197349][ T7929] R13: 00007f85e1226038 R14: 00007f85e1225fa0 R15: 00007ffc03c25c68 [ 261.197371][ T7929] [ 261.820481][ T31] audit: type=1400 audit(1788065202.672:682): avc: denied { ioctl } for pid=7939 comm="syz.3.539" path="socket:[18862]" dev="sockfs" ino=18862 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.059534][ T7939] ima: policy update failed [ 262.061760][ T31] audit: type=1802 audit(1788065202.912:683): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.539" res=0 errno=0 [ 262.075869][ T31] audit: type=1400 audit(1788065202.932:684): avc: denied { bind } for pid=7942 comm="syz.0.540" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.075909][ T31] audit: type=1400 audit(1788065202.932:685): avc: denied { node_bind } for pid=7942 comm="syz.0.540" saddr=fc00::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 262.184508][ T7945] netlink: 'syz.1.541': attribute type 10 has an invalid length. [ 262.192753][ T7945] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 262.243382][ T7945] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 262.391145][ T31] audit: type=1400 audit(1788065203.242:686): avc: denied { create } for pid=7936 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.413803][ T31] audit: type=1400 audit(1788065203.272:687): avc: denied { setopt } for pid=7936 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.414135][ T31] audit: type=1400 audit(1788065203.272:688): avc: denied { ioctl } for pid=7936 comm="syz.4.538" path="socket:[18882]" dev="sockfs" ino=18882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.414446][ T31] audit: type=1400 audit(1788065203.272:689): avc: denied { write } for pid=7936 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.479970][ T30] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 262.552747][ T5702] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 262.611351][ T5787] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 262.641396][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 262.647920][ T30] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 262.657919][ T30] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.657944][ T30] usb 1-1: config 1 interface 0 has no altsetting 1 [ 262.677494][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.677532][ T30] usb 1-1: Product: syz [ 262.677556][ T30] usb 1-1: Manufacturer: syz [ 262.677572][ T30] usb 1-1: SerialNumber: syz [ 262.711388][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 262.717132][ T5702] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 262.729800][ T5702] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 262.729867][ T5702] usb 2-1: config 2 has no interface number 0 [ 262.729906][ T5702] usb 2-1: config 2 interface 31 has no altsetting 0 [ 262.746223][ T7955] syzkaller0: entered promiscuous mode [ 262.746243][ T7955] syzkaller0: entered allmulticast mode [ 262.752941][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.544'. [ 262.758428][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 262.758449][ T5702] usb 2-1: SerialNumber: syz [ 262.786964][ T5787] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 262.788562][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.788588][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.788616][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.039599][ T7951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.047738][ T7951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.254283][ T7951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.254767][ T7951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.408861][ T5702] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 263.412204][ T5702] usb 2-1: USB disconnect, device number 39 [ 263.457821][ T7951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.459393][ T7951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.467337][ T5787] hid-picolcd 0003:04D8:C002.000A: reserved main item tag 0xe [ 263.467367][ T5787] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 263.536589][ T5787] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000A/input/input16 [ 263.641509][ T5787] rc_core: IR keymap rc-rc6-mce not found [ 263.641586][ T5787] Registered IR keymap rc-empty [ 263.657990][ T5787] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000A/rc/rc0 [ 263.668391][ T5787] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000A/rc/rc0/input17 [ 263.874771][ T5787] hid-picolcd 0003:04D8:C002.000A: No report with id 0x92 found [ 263.997937][ T5702] net_ratelimit: 8 callbacks suppressed [ 263.997990][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.998142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.317401][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.317613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.032030][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.032214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.318012][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.318193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.586210][ T5787] usb 3-1: USB disconnect, device number 29 [ 265.594811][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.594953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.647163][ T30] usb 1-1: cannot setup if 0: error -71 [ 265.647491][ T30] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 265.675414][ T30] usb 1-1: cannot setup if 0: error -71 [ 265.681717][ T30] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 265.925233][ T30] usb 1-1: cannot setup if 0: error -71 [ 268.826250][ T30] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 268.842299][ T30] usb 1-1: USB disconnect, device number 30 [ 268.897514][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.434954][ T5812] net_ratelimit: 14 callbacks suppressed [ 269.435014][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.435220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.673362][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.673518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.763523][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 269.861030][ T7993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.552'. [ 269.874928][ T31] audit: type=1400 audit(1788065210.732:690): avc: denied { write } for pid=7994 comm="syz.4.554" name="usb_gadget" dev="configfs" ino=2919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 270.273090][ T7993] FAULT_INJECTION: forcing a failure. [ 270.273090][ T7993] name failslab, interval 1, probability 0, space 0, times 0 [ 270.273130][ T7993] CPU: 0 UID: 0 PID: 7993 Comm: syz.1.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.273155][ T7993] Tainted: [L]=SOFTLOCKUP [ 270.273162][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 270.273171][ T7993] Call Trace: [ 270.273177][ T7993] [ 270.273182][ T7993] dump_stack_lvl+0x100/0x190 [ 270.273212][ T7993] should_fail_ex.cold+0x5/0xa [ 270.273239][ T7993] should_failslab+0xc2/0x120 [ 270.273259][ T7993] kmem_cache_alloc_noprof+0x92/0x6a0 [ 270.273276][ T7993] ? d_instantiate+0x8a/0xb0 [ 270.273299][ T7993] ? alloc_empty_file+0x5b/0x1c0 [ 270.273324][ T7993] alloc_empty_file+0x5b/0x1c0 [ 270.273345][ T7993] alloc_file_pseudo+0x183/0x290 [ 270.273368][ T7993] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 270.273390][ T7993] ? alloc_fd+0x471/0x7a0 [ 270.273412][ T7993] sock_alloc_file+0x50/0x210 [ 270.273431][ T7993] __sys_socket+0x1c0/0x260 [ 270.273453][ T7993] ? __pfx___sys_socket+0x10/0x10 [ 270.273487][ T7993] __x64_sys_socket+0x72/0xb0 [ 270.273508][ T7993] ? lockdep_hardirqs_on+0x7d/0x110 [ 270.273528][ T7993] do_syscall_64+0x123/0x790 [ 270.273549][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.273569][ T7993] RIP: 0033:0x7f85e0f9e159 [ 270.273585][ T7993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.273602][ T7993] RSP: 002b:00007f85e1ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 270.273619][ T7993] RAX: ffffffffffffffda RBX: 00007f85e1225fa0 RCX: 00007f85e0f9e159 [ 270.273630][ T7993] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 270.273641][ T7993] RBP: 00007f85e1035024 R08: 0000000000000000 R09: 0000000000000000 [ 270.273652][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.273664][ T7993] R13: 00007f85e1226038 R14: 00007f85e1225fa0 R15: 00007ffc03c25c68 [ 270.273687][ T7993] [ 270.573175][ T8007] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 270.573294][ T8007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 270.582123][ T8007] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 270.711594][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.711746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.852097][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 270.947976][ T8018] FAULT_INJECTION: forcing a failure. [ 270.947976][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 270.962756][ T8018] CPU: 1 UID: 0 PID: 8018 Comm: syz.4.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.962786][ T8018] Tainted: [L]=SOFTLOCKUP [ 270.962793][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 270.962807][ T8018] Call Trace: [ 270.962813][ T8018] [ 270.962821][ T8018] dump_stack_lvl+0x100/0x190 [ 270.962853][ T8018] should_fail_ex.cold+0x5/0xa [ 270.962880][ T8018] should_failslab+0xc2/0x120 [ 270.962903][ T8018] __kmalloc_noprof+0xfc/0x840 [ 270.962920][ T8018] ? rcu_is_watching+0x13/0xc0 [ 270.962959][ T8018] ? tomoyo_realpath_from_path+0xb6/0x690 [ 270.962984][ T8018] tomoyo_realpath_from_path+0xb6/0x690 [ 270.963009][ T8018] tomoyo_path_number_perm+0x23c/0x580 [ 270.963034][ T8018] ? tomoyo_path_number_perm+0x22e/0x580 [ 270.963061][ T8018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 270.963096][ T8018] ? __lock_acquire+0x4c5/0x1ec0 [ 270.963126][ T8018] ? __fget_files+0x34/0x3d0 [ 270.963147][ T8018] ? find_held_lock+0x2b/0x80 [ 270.963170][ T8018] ? hook_file_ioctl_common+0x140/0x440 [ 270.963196][ T8018] ? __fget_files+0x21f/0x3d0 [ 270.963221][ T8018] security_file_ioctl+0xd3/0x230 [ 270.963249][ T8018] __x64_sys_ioctl+0xb7/0x210 [ 270.963279][ T8018] do_syscall_64+0x123/0x790 [ 270.963302][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.963321][ T8018] RIP: 0033:0x7f8213b9e159 [ 270.963336][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.963353][ T8018] RSP: 002b:00007f8214ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.963372][ T8018] RAX: ffffffffffffffda RBX: 00007f8213e25fa0 RCX: 00007f8213b9e159 [ 270.963384][ T8018] RDX: 0000200000000100 RSI: 00000000c0405668 RDI: 0000000000000003 [ 270.963396][ T8018] RBP: 00007f8214ac2090 R08: 0000000000000000 R09: 0000000000000000 [ 270.963407][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.963418][ T8018] R13: 00007f8213e26038 R14: 00007f8213e25fa0 R15: 00007ffdcd819428 [ 270.963444][ T8018] [ 270.993470][ T8018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.001556][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 271.003592][ T10] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 271.004434][ T10] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 271.004453][ T10] usb 1-1: config 2 has no interface number 0 [ 271.004484][ T10] usb 1-1: config 2 interface 31 has no altsetting 0 [ 271.005282][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.005299][ T10] usb 1-1: SerialNumber: syz [ 271.021321][ T30] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 271.188555][ T5702] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 271.231022][ T30] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 271.244364][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.244392][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.244420][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.352197][ T5702] usb 3-1: device descriptor read/64, error -71 [ 271.352831][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.352993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.431489][ T5701] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 271.498374][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.499285][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.581833][ T5701] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.582823][ T5701] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.582844][ T5701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.582858][ T5701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.582907][ T5701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.584336][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 271.584372][ T5701] usb 5-1: Product: syz [ 271.584384][ T5701] usb 5-1: Manufacturer: syz [ 271.590862][ T5701] cdc_wdm 5-1:1.0: skipping garbage [ 271.590879][ T5701] cdc_wdm 5-1:1.0: skipping garbage [ 271.599188][ T5701] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 271.599206][ T5701] cdc_wdm 5-1:1.0: Unknown control protocol [ 271.620613][ T5702] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 271.624423][ T10] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 271.629448][ T10] usb 1-1: USB disconnect, device number 31 [ 271.707953][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.709019][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.753253][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.753417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.771365][ T5702] usb 3-1: device descriptor read/64, error -71 [ 271.799413][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.802098][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.881606][ T5702] usb usb3-port1: attempt power cycle [ 271.912221][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.918383][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.925071][ T30] hid-picolcd 0003:04D8:C002.000B: reserved main item tag 0xe [ 271.925098][ T30] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 271.985302][ T30] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.000B/input/input18 [ 272.041387][ T30] rc_core: IR keymap rc-rc6-mce not found [ 272.041412][ T30] Registered IR keymap rc-empty [ 272.042464][ T30] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.000B/rc/rc0 [ 272.046610][ T30] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.000B/rc/rc0/input19 [ 272.052464][ T30] hid-picolcd 0003:04D8:C002.000B: No report with id 0x92 found [ 272.125311][ T10] usb 2-1: USB disconnect, device number 40 [ 272.221376][ T5702] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 272.242177][ T5702] usb 3-1: device descriptor read/8, error -71 [ 272.481329][ T5702] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 272.501733][ T5702] usb 3-1: device descriptor read/8, error -71 [ 272.608326][ T8035] FAULT_INJECTION: forcing a failure. [ 272.608326][ T8035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.613274][ T5702] usb usb3-port1: unable to enumerate USB device [ 272.623616][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.0.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.623647][ T8035] Tainted: [L]=SOFTLOCKUP [ 272.623653][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 272.623664][ T8035] Call Trace: [ 272.623670][ T8035] [ 272.623677][ T8035] dump_stack_lvl+0x100/0x190 [ 272.623710][ T8035] should_fail_ex.cold+0x5/0xa [ 272.623735][ T8035] _copy_from_user+0x2e/0xd0 [ 272.623762][ T8035] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 272.623788][ T8035] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 272.623818][ T8035] do_sock_getsockopt+0x530/0x6e0 [ 272.623843][ T8035] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 272.623866][ T8035] ? irqentry_exit+0x24d/0xa10 [ 272.623887][ T8035] ? irqentry_exit+0x24d/0xa10 [ 272.623921][ T8035] __sys_getsockopt+0x148/0x260 [ 272.623959][ T8035] ? __x64_sys_getsockopt+0xbd/0x160 [ 272.623978][ T8035] __x64_sys_getsockopt+0xbd/0x160 [ 272.623994][ T8035] ? do_syscall_64+0xae/0x790 [ 272.624006][ T8035] ? lockdep_hardirqs_on+0x7d/0x110 [ 272.624017][ T8035] do_syscall_64+0x123/0x790 [ 272.624030][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.624042][ T8035] RIP: 0033:0x7f742759e159 [ 272.624053][ T8035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.624064][ T8035] RSP: 002b:00007f74284cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 272.624075][ T8035] RAX: ffffffffffffffda RBX: 00007f7427826090 RCX: 00007f742759e159 [ 272.624082][ T8035] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 272.624089][ T8035] RBP: 00007f74284cc090 R08: 0000200000000340 R09: 0000000000000000 [ 272.624096][ T8035] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 272.624102][ T8035] R13: 00007f7427826128 R14: 00007f7427826090 R15: 00007fff229dcaa8 [ 272.624116][ T8035] [ 273.494330][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.567'. [ 273.586265][ T8042] FAULT_INJECTION: forcing a failure. [ 273.586265][ T8042] name failslab, interval 1, probability 0, space 0, times 0 [ 273.599459][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.0.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.599492][ T8042] Tainted: [L]=SOFTLOCKUP [ 273.599500][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 273.599512][ T8042] Call Trace: [ 273.599520][ T8042] [ 273.599528][ T8042] dump_stack_lvl+0x100/0x190 [ 273.599562][ T8042] should_fail_ex.cold+0x5/0xa [ 273.599590][ T8042] should_failslab+0xc2/0x120 [ 273.599616][ T8042] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 273.599639][ T8042] ? __d_alloc+0x35/0xa50 [ 273.599669][ T8042] __d_alloc+0x35/0xa50 [ 273.599697][ T8042] d_alloc_pseudo+0x1c/0xc0 [ 273.599716][ T8042] alloc_file_pseudo+0x118/0x290 [ 273.599744][ T8042] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 273.599772][ T8042] ? alloc_fd+0x471/0x7a0 [ 273.599800][ T8042] sock_alloc_file+0x50/0x210 [ 273.599822][ T8042] __sys_socket+0x1c0/0x260 [ 273.599848][ T8042] ? __pfx___sys_socket+0x10/0x10 [ 273.599881][ T8042] __x64_sys_socket+0x72/0xb0 [ 273.599905][ T8042] ? lockdep_hardirqs_on+0x7d/0x110 [ 273.599927][ T8042] do_syscall_64+0x123/0x790 [ 273.599957][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.599979][ T8042] RIP: 0033:0x7f742759e159 [ 273.599997][ T8042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.600016][ T8042] RSP: 002b:00007f74284ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 273.600037][ T8042] RAX: ffffffffffffffda RBX: 00007f7427825fa0 RCX: 00007f742759e159 [ 273.600051][ T8042] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 273.600064][ T8042] RBP: 00007f7427635024 R08: 0000000000000000 R09: 0000000000000000 [ 273.600077][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.600090][ T8042] R13: 00007f7427826038 R14: 00007f7427825fa0 R15: 00007fff229dcaa8 [ 273.600117][ T8042] [ 274.207696][ T31] audit: type=1400 audit(1788065215.062:691): avc: denied { write } for pid=8048 comm="syz.1.568" name="functions" dev="configfs" ino=19034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 274.232813][ T8049] file system registered [ 274.279836][ T30] usb 5-1: USB disconnect, device number 28 [ 274.296819][ T31] audit: type=1400 audit(1788065215.152:692): avc: denied { mount } for pid=8048 comm="syz.1.568" name="/" dev="functionfs" ino=19134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 274.312815][ T8049] read descriptors [ 274.472425][ T964] net_ratelimit: 10 callbacks suppressed [ 274.472473][ T964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.472757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.553835][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.554098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.824794][ T8063] tipc: Started in network mode [ 274.824828][ T8063] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 274.954039][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.954266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.052055][ T31] audit: type=1400 audit(1788065215.912:693): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 275.081130][ T5596] ffs_data_put(): freeing [ 275.277004][ T8072] input: syz0 as /devices/virtual/input/input20 [ 275.288569][ T31] audit: type=1400 audit(1788065216.142:694): avc: denied { setopt } for pid=8071 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.548158][ T8078] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 275.549538][ T8078] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 275.549932][ T8078] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 275.598788][ T8078] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 275.624512][ T5716] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 275.716454][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.578'. [ 275.842957][ T8078] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 275.992544][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.992697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.127353][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 276.190574][ T5716] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 276.288411][ T5716] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 276.288455][ T5716] usb 2-1: config 0 has no interface number 0 [ 276.288503][ T5716] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.288530][ T5716] usb 2-1: config 0 interface 85 has no altsetting 0 [ 276.499274][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.499315][ T5716] usb 2-1: Product: syz [ 276.499342][ T5716] usb 2-1: Manufacturer: syz [ 276.499358][ T5716] usb 2-1: SerialNumber: syz [ 276.539301][ T5716] usb 2-1: config 0 descriptor?? [ 276.733253][ T8059] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 276.733283][ T8059] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.766676][ T8059] vhci_hcd vhci_hcd.0: Device attached [ 277.037192][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.037358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.038925][ T5786] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 277.108421][ T5602] Bluetooth: hci4: unexpected event for opcode 0x692f [ 277.327909][ T31] audit: type=1400 audit(1788065218.182:695): avc: denied { read } for pid=8073 comm="syz.1.576" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 277.448713][ T31] audit: type=1326 audit(1788065218.292:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.4.574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8213b9e159 code=0x0 [ 277.485801][ T5716] appletouch 2-1:0.85: Geyser mode initialized. [ 277.487647][ T5716] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input21 [ 277.507960][ T8102] vhci_hcd: connection reset by peer [ 277.525378][ T8085] vhci_hcd vhci_hcd.4: stop threads [ 277.526062][ T8085] vhci_hcd vhci_hcd.4: release socket [ 277.526899][ T8085] vhci_hcd vhci_hcd.4: disconnect device [ 277.739726][ T31] audit: type=1400 audit(1788065218.592:697): avc: denied { read } for pid=8111 comm="syz.0.582" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 277.739794][ T31] audit: type=1400 audit(1788065218.592:698): avc: denied { open } for pid=8111 comm="syz.0.582" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 277.886774][ T5716] usb 2-1: USB disconnect, device number 41 [ 278.146932][ T5716] appletouch 2-1:0.85: input: appletouch disconnected [ 278.440444][ T8123] cgroup: Name too long [ 278.541495][ T5702] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 278.591621][ T30] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 278.609518][ T8126] kvm: user requested TSC rate below hardware speed [ 278.611035][ T8126] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 278.611195][ T8126] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (200000 ns). Using initial count to start timer. [ 278.723011][ T5702] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 278.736036][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.736072][ T5702] usb 3-1: Product: syz [ 278.736102][ T5702] usb 3-1: Manufacturer: syz [ 278.736121][ T5702] usb 3-1: SerialNumber: syz [ 278.760546][ T30] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.775932][ T5702] usb 3-1: config 0 descriptor?? [ 278.781905][ T30] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.781946][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.781980][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.782020][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.828604][ T30] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.828643][ T30] usb 1-1: Product: syz [ 278.828692][ T30] usb 1-1: Manufacturer: syz [ 278.852768][ T30] cdc_wdm 1-1:1.0: skipping garbage [ 278.859288][ T30] cdc_wdm 1-1:1.0: skipping garbage [ 278.863033][ T30] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 278.863052][ T30] cdc_wdm 1-1:1.0: Unknown control protocol [ 278.971340][ T988] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 279.053057][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.053495][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.122524][ T988] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 279.125210][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.125233][ T988] usb 2-1: Product: syz [ 279.125246][ T988] usb 2-1: Manufacturer: syz [ 279.125259][ T988] usb 2-1: SerialNumber: syz [ 279.152872][ T988] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 279.161949][ T30] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 279.252986][ T5702] usb 3-1: Firmware version (0.0) predates our first public release. [ 279.253028][ T5702] usb 3-1: Please update to version 0.2 or newer [ 279.296108][ T5702] usb 3-1: USB disconnect, device number 34 [ 279.314610][ T30] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 279.318368][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.318428][ T30] usb 5-1: Product: syz [ 279.318441][ T30] usb 5-1: Manufacturer: syz [ 279.318454][ T30] usb 5-1: SerialNumber: syz [ 279.401282][ T8138] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 279.670001][ T5702] usb 2-1: USB disconnect, device number 42 [ 279.679616][ T5734] net_ratelimit: 9 callbacks suppressed [ 279.681017][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.681165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.908532][ T5717] usb 5-1: USB disconnect, device number 29 [ 280.151620][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.151792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.159911][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.160002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.303802][ T988] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 280.303945][ T988] ath9k_htc: Failed to initialize the device [ 280.305398][ T5702] usb 2-1: ath9k_htc: USB layer deinitialized [ 280.327405][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.327559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.327877][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.327990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.473305][ T8138] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 280.473468][ T8138] ath9k_htc: Failed to initialize the device [ 280.480331][ T5717] usb 5-1: ath9k_htc: USB layer deinitialized [ 281.897612][ T5702] usb 1-1: USB disconnect, device number 32 [ 281.982643][ T8162] read descriptors [ 282.231347][ T5786] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 282.621008][ T5702] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 283.033766][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 283.115722][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 283.115792][ T5702] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 283.117362][ T5702] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 283.117391][ T5702] usb 1-1: config 0 has no interface number 0 [ 283.117428][ T5702] usb 1-1: config 0 interface 228 has no altsetting 0 [ 283.119268][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.119297][ T5702] usb 1-1: Product: syz [ 283.119327][ T5702] usb 1-1: Manufacturer: syz [ 283.119350][ T5702] usb 1-1: SerialNumber: syz [ 283.202272][ T5702] usb 1-1: config 0 descriptor?? [ 283.419983][ T5603] ffs_data_put(): freeing [ 284.026902][ T8183] batadv1: entered allmulticast mode [ 284.028894][ T8183] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 285.224018][ T5702] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 285.224535][ T5702] usb 1-1: selecting invalid altsetting 0 [ 285.247467][ T2351] pvrusb2: Invalid write control endpoint [ 285.334010][ T5702] usb 1-1: USB disconnect, device number 33 [ 285.431612][ T5786] net_ratelimit: 14 callbacks suppressed [ 285.431651][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.431781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.432435][ T8083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.432527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.704109][ T8197] overlayfs: failed to resolve './file1': -2 [ 285.716158][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 285.757919][ T8200] FAULT_INJECTION: forcing a failure. [ 285.757919][ T8200] name failslab, interval 1, probability 0, space 0, times 0 [ 285.770661][ T8200] CPU: 0 UID: 0 PID: 8200 Comm: syz.4.604 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.770698][ T8200] Tainted: [L]=SOFTLOCKUP [ 285.770706][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 285.770719][ T8200] Call Trace: [ 285.770727][ T8200] [ 285.770735][ T8200] dump_stack_lvl+0x100/0x190 [ 285.770776][ T8200] should_fail_ex.cold+0x5/0xa [ 285.770804][ T8200] should_failslab+0xc2/0x120 [ 285.770829][ T8200] __kmalloc_cache_noprof+0x91/0x6d0 [ 285.770856][ T8200] ? call_usermodehelper_setup+0xaf/0x360 [ 285.770888][ T8200] ? __pfx_free_modprobe_argv+0x10/0x10 [ 285.770913][ T8200] call_usermodehelper_setup+0xaf/0x360 [ 285.770947][ T8200] __request_module+0x3c7/0x6a0 [ 285.770973][ T8200] ? __pfx___request_module+0x10/0x10 [ 285.770996][ T8200] ? rcu_is_watching+0x13/0xc0 [ 285.771027][ T8200] ? __wake_up+0x3f/0x60 [ 285.771055][ T8200] ? rcu_is_watching+0x13/0xc0 [ 285.771081][ T8200] ? lockdep_hardirqs_on+0x7d/0x110 [ 285.771109][ T8200] netlink_create+0x458/0x610 [ 285.771140][ T8200] __sock_create+0x339/0x860 [ 285.771170][ T8200] __sys_socket+0x14d/0x260 [ 285.771198][ T8200] ? __pfx___sys_socket+0x10/0x10 [ 285.771235][ T8200] __x64_sys_socket+0x72/0xb0 [ 285.771257][ T8200] ? lockdep_hardirqs_on+0x7d/0x110 [ 285.771275][ T8200] do_syscall_64+0x123/0x790 [ 285.771296][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.771314][ T8200] RIP: 0033:0x7f8213b9e159 [ 285.771330][ T8200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.771349][ T8200] RSP: 002b:00007f8214ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 285.771370][ T8200] RAX: ffffffffffffffda RBX: 00007f8213e25fa0 RCX: 00007f8213b9e159 [ 285.771381][ T8200] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010 [ 285.771390][ T8200] RBP: 00007f8213c35024 R08: 0000000000000000 R09: 0000000000000000 [ 285.771401][ T8200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.771411][ T8200] R13: 00007f8213e26038 R14: 00007f8213e25fa0 R15: 00007ffdcd819428 [ 285.771431][ T8200] [ 285.847820][ T2351] pvrusb2: Invalid write control endpoint [ 285.847851][ T2351] pvrusb2: Invalid write control endpoint [ 285.847861][ T2351] pvrusb2: Invalid write control endpoint [ 285.847870][ T2351] pvrusb2: Invalid write control endpoint [ 285.847879][ T2351] pvrusb2: Invalid write control endpoint [ 285.847888][ T2351] pvrusb2: Invalid write control endpoint [ 285.847897][ T2351] pvrusb2: Invalid write control endpoint [ 285.847906][ T2351] pvrusb2: Invalid write control endpoint [ 285.847915][ T2351] pvrusb2: Invalid write control endpoint [ 285.847924][ T2351] pvrusb2: Invalid write control endpoint [ 285.847932][ T2351] pvrusb2: Invalid write control endpoint [ 285.847941][ T2351] pvrusb2: Invalid write control endpoint [ 285.847950][ T2351] pvrusb2: Invalid write control endpoint [ 285.847959][ T2351] pvrusb2: Invalid write control endpoint [ 285.847968][ T2351] pvrusb2: Invalid write control endpoint [ 285.847977][ T2351] pvrusb2: Invalid write control endpoint [ 285.847985][ T2351] pvrusb2: Invalid write control endpoint [ 285.847994][ T2351] pvrusb2: Invalid write control endpoint [ 285.848003][ T2351] pvrusb2: Invalid write control endpoint [ 285.848011][ T2351] pvrusb2: Invalid write control endpoint [ 285.848020][ T2351] pvrusb2: Invalid write control endpoint [ 285.848029][ T2351] pvrusb2: Invalid write control endpoint [ 285.848038][ T2351] pvrusb2: Invalid write control endpoint [ 285.848047][ T2351] pvrusb2: Invalid write control endpoint [ 285.848055][ T2351] pvrusb2: Invalid write control endpoint [ 285.848064][ T2351] pvrusb2: Invalid write control endpoint [ 285.848073][ T2351] pvrusb2: Invalid write control endpoint [ 285.848081][ T2351] pvrusb2: Invalid write control endpoint [ 285.848090][ T2351] pvrusb2: Invalid write control endpoint [ 285.848098][ T2351] pvrusb2: Invalid write control endpoint [ 285.848107][ T2351] pvrusb2: Invalid write control endpoint [ 285.848116][ T2351] pvrusb2: Invalid write control endpoint [ 285.893893][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 285.896057][ T2351] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 285.905736][ T8192] CacheFiles: Failed to register: -95 [ 285.911764][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.911898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.917674][ T31] audit: type=1400 audit(1788065226.752:699): avc: denied { read write } for pid=8190 comm="syz.2.602" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 285.917720][ T31] audit: type=1400 audit(1788065226.752:700): avc: denied { open } for pid=8190 comm="syz.2.602" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 285.947626][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.947668][ T10] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 286.026826][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.026862][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 286.026882][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.063765][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.063787][ T10] usb 2-1: Product: syz [ 286.063796][ T10] usb 2-1: Manufacturer: syz [ 286.063804][ T10] usb 2-1: SerialNumber: syz [ 286.085258][ T8083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.085422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.463372][ T10] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 286.468882][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 286.481842][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.481976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.482109][ T8138] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 286.765318][ T8138] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 286.780931][ T8138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.790293][ T10] usb 2-1: 2:1 : invalid Cluster Descriptor size [ 286.837166][ T2351] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 286.894148][ T2351] pvrusb2: Invalid write control endpoint [ 286.919049][ T2351] pvrusb2: Invalid write control endpoint [ 286.920576][ T2351] pvrusb2: Invalid write control endpoint [ 286.920692][ T2351] pvrusb2: Invalid write control endpoint [ 286.925511][ T2351] pvrusb2: Invalid write control endpoint [ 286.925645][ T2351] pvrusb2: Invalid write control endpoint [ 286.925723][ T2351] pvrusb2: Invalid write control endpoint [ 286.994228][ T2351] pvrusb2: Invalid write control endpoint [ 287.000599][ T2351] pvrusb2: Invalid write control endpoint [ 287.000720][ T2351] pvrusb2: Invalid write control endpoint [ 287.000791][ T2351] pvrusb2: Invalid write control endpoint [ 287.000881][ T2351] pvrusb2: Invalid write control endpoint [ 287.000946][ T2351] pvrusb2: Invalid write control endpoint [ 287.001011][ T2351] pvrusb2: Invalid write control endpoint [ 287.001076][ T2351] pvrusb2: Invalid write control endpoint [ 287.001140][ T2351] pvrusb2: Invalid write control endpoint [ 287.001206][ T2351] pvrusb2: Invalid write control endpoint [ 287.003479][ T2351] pvrusb2: Invalid write control endpoint [ 287.003548][ T2351] pvrusb2: Invalid write control endpoint [ 287.003617][ T2351] pvrusb2: Invalid write control endpoint [ 287.003661][ T2351] pvrusb2: Invalid write control endpoint [ 287.211451][ T8138] usb 5-1: config 0 descriptor?? [ 287.262451][ T2351] pvrusb2: Attached sub-driver cs53l32a [ 287.956215][ T2351] pvrusb2: Invalid write control endpoint [ 287.968802][ T2351] pvrusb2: Invalid write control endpoint [ 287.984051][ T2351] pvrusb2: Invalid write control endpoint [ 287.984088][ T2351] pvrusb2: Invalid write control endpoint [ 287.984100][ T2351] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 287.984119][ T2351] pvrusb2: Device being rendered inoperable [ 287.984139][ T2351] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 287.984150][ T2351] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 288.018418][ T8138] usbhid 5-1:0.0: can't add hid device: -71 [ 288.018503][ T8138] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 288.039193][ T5716] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 288.042206][ T8138] usb 5-1: USB disconnect, device number 30 [ 288.102701][ T10] usb 2-1: USB disconnect, device number 43 [ 288.214515][ T5716] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 288.279738][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.294208][ T5716] usb 3-1: Product: syz [ 288.294320][ T5716] usb 3-1: Manufacturer: syz [ 288.294350][ T5716] usb 3-1: SerialNumber: syz [ 288.321684][ T8224] siw: device registration error -23 [ 288.379668][ T8224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'. [ 288.413637][ T5716] usb 3-1: config 0 descriptor?? [ 288.617676][ T8227] siw: device registration error -23 [ 288.686519][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'. [ 288.726552][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.040999][ T5716] usb 3-1: Firmware version (0.0) predates our first public release. [ 290.041041][ T5716] usb 3-1: Please update to version 0.2 or newer [ 290.951744][ T8138] net_ratelimit: 10 callbacks suppressed [ 290.951790][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.951934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.974994][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.975150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.078802][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.078942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.093147][ T5716] usb 3-1: USB disconnect, device number 35 [ 291.191771][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.195038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.196929][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.197104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.237976][ T985] dvb-usb: did not find the firmware file 'af9005.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 291.252371][ T985] dvb_usb_af9005 4-1:1.168: probe with driver dvb_usb_af9005 failed with error -110 [ 291.277202][ T985] af9005: boot packet bulk message failed: -22 (252/0) [ 291.285646][ T985] dvb-usb: found a 'Afatech DVB-T USB1.1 stick' in cold state, will try to load a firmware [ 291.296690][ T985] usb 4-1: Direct firmware load for af9005.fw failed with error -2 [ 291.309599][ T31] audit: type=1400 audit(1788065232.162:701): avc: denied { firmware_load } for pid=985 comm="kworker/1:2" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 291.332166][ T985] usb 4-1: Falling back to sysfs fallback for: af9005.fw [ 291.337405][ T31] audit: type=1400 audit(1788065232.192:702): avc: denied { mounton } for pid=8232 comm="syz.0.612" path="/proc/448/cgroup" dev="proc" ino=20061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 291.641665][ T8241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.766148][ T8255] siw: device registration error -23 [ 292.867576][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.616'. [ 293.141056][ T5716] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 293.356372][ T5716] usb 1-1: Using ep0 maxpacket: 16 [ 293.376337][ T5716] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 293.558071][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 109, changing to 10 [ 293.558119][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25697, setting to 1024 [ 293.662517][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.662557][ T5716] usb 1-1: Product: syz [ 293.662582][ T5716] usb 1-1: Manufacturer: syz [ 293.662599][ T5716] usb 1-1: SerialNumber: syz [ 293.780805][ T5716] usb 1-1: config 0 descriptor?? [ 293.781466][ T8252] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.816364][ T5716] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 293.939458][ T8267] FAULT_INJECTION: forcing a failure. [ 293.939458][ T8267] name failslab, interval 1, probability 0, space 0, times 0 [ 293.953447][ T8267] CPU: 1 UID: 0 PID: 8267 Comm: syz.3.620 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.953483][ T8267] Tainted: [L]=SOFTLOCKUP [ 293.953491][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 293.953504][ T8267] Call Trace: [ 293.953511][ T8267] [ 293.953518][ T8267] dump_stack_lvl+0x100/0x190 [ 293.953551][ T8267] should_fail_ex.cold+0x5/0xa [ 293.953580][ T8267] should_failslab+0xc2/0x120 [ 293.953604][ T8267] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 293.953625][ T8267] ? __d_alloc+0x35/0xa50 [ 293.953654][ T8267] __d_alloc+0x35/0xa50 [ 293.953681][ T8267] d_alloc_pseudo+0x1c/0xc0 [ 293.953700][ T8267] alloc_file_pseudo+0x118/0x290 [ 293.953727][ T8267] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 293.953752][ T8267] ? alloc_fd+0x471/0x7a0 [ 293.953778][ T8267] sock_alloc_file+0x50/0x210 [ 293.953799][ T8267] __sys_socket+0x1c0/0x260 [ 293.953827][ T8267] ? __pfx___sys_socket+0x10/0x10 [ 293.953860][ T8267] __x64_sys_socket+0x72/0xb0 [ 293.953882][ T8267] ? lockdep_hardirqs_on+0x7d/0x110 [ 293.953902][ T8267] do_syscall_64+0x123/0x790 [ 293.953923][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.953945][ T8267] RIP: 0033:0x7f645019e159 [ 293.953964][ T8267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.953982][ T8267] RSP: 002b:00007f6451067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 293.954003][ T8267] RAX: ffffffffffffffda RBX: 00007f6450425fa0 RCX: 00007f645019e159 [ 293.954015][ T8267] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 293.954026][ T8267] RBP: 00007f6450235024 R08: 0000000000000000 R09: 0000000000000000 [ 293.954039][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.954051][ T8267] R13: 00007f6450426038 R14: 00007f6450425fa0 R15: 00007ffe2d368b78 [ 293.954077][ T8267] [ 294.021489][ T5701] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 294.185975][ T5701] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 294.187477][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.218614][ T5701] i2c-tiny-usb 3-1:1.0: version 1.00 found at bus 003 address 036 [ 294.246069][ T8085] usb 1-1: Failed to submit usb control message: -71 [ 294.246679][ T10] usb 1-1: USB disconnect, device number 34 [ 294.267372][ T8085] usb 1-1: unable to send the bmi data to the device: -71 [ 294.279582][ T8085] usb 1-1: unable to get target info from device [ 294.286248][ T8085] usb 1-1: could not get target info (-71) [ 294.292687][ T8085] usb 1-1: could not probe fw (-71) [ 294.698989][ T5701] (null): failure reading functionality [ 294.766024][ T30] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 294.792882][ T30] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 295.735569][ T30] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 296.161689][ T8138] net_ratelimit: 16 callbacks suppressed [ 296.161726][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.161747][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.161877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.162034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.203967][ T30] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 296.358160][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.358198][ T30] usb 1-1: Product: syz [ 296.358224][ T30] usb 1-1: Manufacturer: syz [ 296.358239][ T30] usb 1-1: SerialNumber: syz [ 296.631575][ T30] usb 1-1: config 0 descriptor?? [ 296.792151][ T5701] i2c i2c-1: failure reading functionality [ 296.959495][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.959683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.984201][ T8083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.984403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.201428][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.201592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.287313][ T5701] i2c i2c-1: connected i2c-tiny-usb device [ 297.323020][ T5603] ffs_data_put(): freeing [ 297.364295][ T5701] usb 3-1: USB disconnect, device number 36 [ 297.495546][ T30] usb 1-1: Firmware version (0.0) predates our first public release. [ 297.495583][ T30] usb 1-1: Please update to version 0.2 or newer [ 297.625048][ T30] usb 1-1: USB disconnect, device number 35 [ 297.835618][ T8310] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 298.215531][ T31] audit: type=1326 audit(1788065239.072:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.2.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f78f9e159 code=0x7ffc0000 [ 298.215604][ T31] audit: type=1326 audit(1788065239.072:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.2.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f78f9e159 code=0x7ffc0000 [ 298.242945][ T31] audit: type=1326 audit(1788065239.102:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.2.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f78f9e159 code=0x7ffc0000 [ 298.242994][ T31] audit: type=1326 audit(1788065239.102:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.2.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f78f9e159 code=0x7ffc0000 [ 298.243028][ T31] audit: type=1326 audit(1788065239.102:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.2.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f78f9e159 code=0x7ffc0000 [ 298.247733][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 298.250455][ T31] audit: type=1326 audit(1788065239.102:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.2.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1f78f9e159 code=0x7ffc0000 [ 298.250504][ T31] audit: type=1326 audit(1788065239.102:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.2.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f78f9e159 code=0x7ffc0000 [ 298.250541][ T31] audit: type=1326 audit(1788065239.102:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.2.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f78f9e159 code=0x7ffc0000 [ 298.250578][ T31] audit: type=1326 audit(1788065239.102:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.2.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1f78f9e159 code=0x7ffc0000 [ 298.250615][ T31] audit: type=1326 audit(1788065239.102:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.2.628" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f78f9e159 code=0x7ffc0000 [ 300.368063][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 300.809705][ T8332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.859102][ T5787] net_ratelimit: 10 callbacks suppressed [ 301.859148][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.859302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.334214][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.334370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.411957][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.412149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.669772][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 302.724765][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.725010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.742277][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.742542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.831402][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 302.832382][ T10] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 302.855968][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.856059][ T10] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 302.856120][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 302.909732][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.909804][ T10] usb 5-1: Product: syz [ 302.909880][ T10] usb 5-1: Manufacturer: syz [ 302.909948][ T10] usb 5-1: SerialNumber: syz [ 302.970519][ T10] usb 5-1: config 0 descriptor?? [ 303.856509][ T10] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 303.864102][ T10] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 304.880421][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.899946][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.922081][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.931160][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.964149][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 305.746626][ T8374] cgroup: Name too long [ 305.945273][ T10] usb 5-1: USB disconnect, device number 31 [ 306.151891][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 306.151960][ T31] audit: type=1400 audit(1788065247.012:722): avc: denied { getopt } for pid=8381 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 306.194226][ T31] audit: type=1400 audit(1788065247.052:723): avc: denied { ioctl } for pid=8381 comm="syz.3.645" path="socket:[20359]" dev="sockfs" ino=20359 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 306.392831][ T8387] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 306.504796][ T8387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.542030][ T8389] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 306.599078][ T8389] bond2: entered allmulticast mode [ 306.674075][ T8390] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 307.112316][ T5786] net_ratelimit: 36 callbacks suppressed [ 307.112363][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.112500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.300287][ T31] audit: type=1400 audit(1788065248.152:724): avc: denied { ioctl } for pid=8404 comm="syz.0.652" path="socket:[21141]" dev="sockfs" ino=21141 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.363711][ T8409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.653'. [ 307.582625][ T8408] netlink: 'syz.0.652': attribute type 21 has an invalid length. [ 307.758885][ T8083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.759071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.831454][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.831618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.151490][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.151653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.350600][ T8420] FAULT_INJECTION: forcing a failure. [ 308.350600][ T8420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.350658][ T8420] CPU: 1 UID: 0 PID: 8420 Comm: syz.0.657 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.350681][ T8420] Tainted: [L]=SOFTLOCKUP [ 308.350687][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 308.350695][ T8420] Call Trace: [ 308.350699][ T8420] [ 308.350705][ T8420] dump_stack_lvl+0x100/0x190 [ 308.350733][ T8420] should_fail_ex.cold+0x5/0xa [ 308.350756][ T8420] _copy_from_user+0x2e/0xd0 [ 308.350782][ T8420] copy_msghdr_from_user+0x9f/0x4c0 [ 308.350805][ T8420] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 308.350831][ T8420] ? lock_acquire+0x1d1/0x380 [ 308.350848][ T8420] ? get_pid_task+0x2a/0x250 [ 308.350871][ T8420] ___sys_sendmsg+0x106/0x1e0 [ 308.350892][ T8420] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.350912][ T8420] ? get_pid_task+0x106/0x250 [ 308.350946][ T8420] ? find_held_lock+0x2b/0x80 [ 308.350982][ T8420] __sys_sendmsg+0x160/0x210 [ 308.351007][ T8420] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.351043][ T8420] do_syscall_64+0x123/0x790 [ 308.351065][ T8420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.351081][ T8420] RIP: 0033:0x7f742759e159 [ 308.351095][ T8420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.351110][ T8420] RSP: 002b:00007f74284ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.351126][ T8420] RAX: ffffffffffffffda RBX: 00007f7427825fa0 RCX: 00007f742759e159 [ 308.351136][ T8420] RDX: 0000000004000844 RSI: 0000200000000040 RDI: 0000000000000003 [ 308.351147][ T8420] RBP: 00007f74284ed090 R08: 0000000000000000 R09: 0000000000000000 [ 308.351156][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.351165][ T8420] R13: 00007f7427826038 R14: 00007f7427825fa0 R15: 00007fff229dcaa8 [ 308.351186][ T8420] [ 308.426811][ T4917] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.434253][ T4917] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.434903][ T4917] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.435940][ T4917] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.438550][ T4917] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.476601][ T8090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.476750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.978626][ T8426] netlink: 'syz.2.658': attribute type 12 has an invalid length. [ 309.777159][ T8445] FAULT_INJECTION: forcing a failure. [ 309.777159][ T8445] name failslab, interval 1, probability 0, space 0, times 0 [ 309.778306][ T8445] CPU: 0 UID: 0 PID: 8445 Comm: syz.4.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.778334][ T8445] Tainted: [L]=SOFTLOCKUP [ 309.778341][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 309.778351][ T8445] Call Trace: [ 309.778357][ T8445] [ 309.778364][ T8445] dump_stack_lvl+0x100/0x190 [ 309.778396][ T8445] should_fail_ex.cold+0x5/0xa [ 309.778422][ T8445] should_failslab+0xc2/0x120 [ 309.778444][ T8445] __kmalloc_noprof+0xfc/0x840 [ 309.778462][ T8445] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 309.778502][ T8445] kernfs_fop_write_iter+0x26a/0x5f0 [ 309.778533][ T8445] vfs_write+0x6af/0x1050 [ 309.778562][ T8445] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 309.778592][ T8445] ? __pfx_vfs_write+0x10/0x10 [ 309.778618][ T8445] ? find_held_lock+0x2b/0x80 [ 309.778660][ T8445] ksys_write+0x12a/0x250 [ 309.778675][ T8445] ? __pfx_ksys_write+0x10/0x10 [ 309.778699][ T8445] do_syscall_64+0x123/0x790 [ 309.778723][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.778742][ T8445] RIP: 0033:0x7f8213b9e159 [ 309.778757][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.778774][ T8445] RSP: 002b:00007f8214aa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 309.778792][ T8445] RAX: ffffffffffffffda RBX: 00007f8213e26090 RCX: 00007f8213b9e159 [ 309.778803][ T8445] RDX: 0000000000000011 RSI: 0000200000000a00 RDI: 0000000000000007 [ 309.778815][ T8445] RBP: 00007f8214aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 309.778825][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.778836][ T8445] R13: 00007f8213e26128 R14: 00007f8213e26090 R15: 00007ffdcd819428 [ 309.778862][ T8445] [ 310.123772][ T31] audit: type=1400 audit(1788065250.582:725): avc: denied { setopt } for pid=8442 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 310.123809][ T31] audit: type=1400 audit(1788065250.592:726): avc: denied { write } for pid=8442 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 310.181672][ T8428] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 310.484069][ T4917] Bluetooth: hci5: command tx timeout [ 310.631712][ T4917] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.758776][ T8087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.792383][ T5786] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 310.825188][ T8087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.900632][ T8087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.951539][ T5786] usb 1-1: Using ep0 maxpacket: 16 [ 310.952045][ T5786] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 310.952853][ T5786] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 310.952872][ T5786] usb 1-1: config 0 has no interface number 0 [ 310.952901][ T5786] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 310.952924][ T5786] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 310.954517][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.954538][ T5786] usb 1-1: Product: syz [ 310.954552][ T5786] usb 1-1: Manufacturer: syz [ 310.954565][ T5786] usb 1-1: SerialNumber: syz [ 310.968008][ T5786] usb 1-1: config 0 descriptor?? [ 310.969247][ T8448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.969343][ T8448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.067341][ T8087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.098185][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.098321][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.098582][ T8422] bridge_slave_0: entered allmulticast mode [ 311.099694][ T8422] bridge_slave_0: entered promiscuous mode [ 311.102233][ T8422] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.102337][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.102436][ T8422] bridge_slave_1: entered allmulticast mode [ 311.103637][ T8422] bridge_slave_1: entered promiscuous mode [ 311.143383][ T8422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.145498][ T8422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.172569][ T8448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.172696][ T8448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.199635][ T8422] team0: Port device team_slave_0 added [ 311.202002][ T8422] team0: Port device team_slave_1 added [ 311.221863][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.221898][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.223257][ T8422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.225687][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.225699][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.225718][ T8422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.265016][ T8422] hsr_slave_0: entered promiscuous mode [ 311.265704][ T8422] hsr_slave_1: entered promiscuous mode [ 311.267518][ T8422] debugfs: 'hsr0' already exists in 'hsr' [ 311.267533][ T8422] Cannot create hsr debugfs directory [ 311.382085][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 311.676313][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.677251][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.153595][ T5787] net_ratelimit: 12 callbacks suppressed [ 312.153632][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.153803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.312207][ T31] audit: type=1400 audit(1788065253.172:727): avc: denied { read } for pid=5262 comm="dhcpcd" name="n50" dev="tmpfs" ino=4845 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 312.312587][ T31] audit: type=1400 audit(1788065253.172:728): avc: denied { open } for pid=5262 comm="dhcpcd" path="/run/udev/data/n50" dev="tmpfs" ino=4845 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 312.312996][ T31] audit: type=1400 audit(1788065253.172:729): avc: denied { getattr } for pid=5262 comm="dhcpcd" path="/run/udev/data/n50" dev="tmpfs" ino=4845 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 312.452308][ T8470] siw: device registration error -23 [ 312.497268][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.665'. [ 312.551585][ T4917] Bluetooth: hci5: command tx timeout [ 312.952992][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.953167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.201413][ T8138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.201583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.245135][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.666'. [ 313.399572][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 313.399621][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 313.428455][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 313.428502][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 313.487788][ T8087] bridge_slave_1: left allmulticast mode [ 313.496556][ T8087] bridge_slave_1: left promiscuous mode [ 313.497255][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 313.517796][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.529166][ T31] audit: type=1400 audit(1788065254.382:730): avc: denied { listen } for pid=8478 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.529541][ T4917] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 313.530248][ T31] audit: type=1400 audit(1788065254.382:731): avc: denied { accept } for pid=8478 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.586289][ T8087] bridge_slave_0: left allmulticast mode [ 313.592707][ T8087] bridge_slave_0: left promiscuous mode [ 313.598784][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.598923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.627383][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.679367][ T8087] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 313.692237][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.692288][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.694186][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.704147][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.704173][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.708379][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.709091][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.709115][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.727961][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.729546][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.729572][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.733746][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.734411][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.734432][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.737605][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.740925][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.740950][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.741203][ T8484] netlink: 1060 bytes leftover after parsing attributes in process `syz.4.668'. [ 313.742821][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.743146][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.743169][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.747361][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.747706][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.747728][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.749405][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.750191][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.750215][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.753319][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.753891][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.753913][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.759276][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.759579][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.759601][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.761091][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.761608][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.761629][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.763128][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.768990][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.769014][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.776706][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.777027][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.777049][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.780603][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.784495][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.784521][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.786207][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.786541][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.786561][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.788063][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.788362][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.788380][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.791573][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.791886][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.791905][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.793415][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.793935][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.793957][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.795360][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.795661][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.795681][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.797148][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.797454][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.797473][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.798935][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.799228][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.799245][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.800996][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.803339][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.803360][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.805934][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.806242][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.806262][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.809704][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.810014][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.810035][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.813534][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.814231][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.814254][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.815794][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.816090][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.816118][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.818928][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.820536][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.820559][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.822028][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.822399][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.822419][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 313.824528][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.850530][ T5786] asix 1-1:0.34 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 313.850748][ T5786] asix 1-1:0.34: probe with driver asix failed with error -5 [ 313.867538][ T5786] usb 1-1: USB disconnect, device number 36 [ 314.116400][ T8087] batman_adv: batadv0: Removing interface: ip6gretap1 [ 314.245616][ T8086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.245775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.641447][ T4917] Bluetooth: hci5: command tx timeout [ 315.648279][ T8087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.659434][ T8087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.682736][ T8087] bond0 (unregistering): Released all slaves [ 315.757104][ T8499] read descriptors [ 316.156323][ T8422] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 316.185477][ T8422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.248020][ T8422] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 316.271935][ T8422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 316.274383][ T8422] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 316.297092][ T31] audit: type=1400 audit(1788065257.152:732): avc: denied { write } for pid=8501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.297142][ T31] audit: type=1400 audit(1788065257.152:733): avc: denied { create } for pid=8501 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.297174][ T31] audit: type=1400 audit(1788065257.152:734): avc: denied { write } for pid=8501 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=4876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.297204][ T31] audit: type=1400 audit(1788065257.152:735): avc: denied { append } for pid=8501 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=4876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.306198][ T8422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 316.325118][ T8422] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 316.391913][ T8422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 316.449864][ T8087] hsr_slave_0: left promiscuous mode [ 316.455376][ T8087] hsr_slave_1: left promiscuous mode [ 316.455953][ T8087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.455966][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.456904][ T8087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.456917][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.479778][ T31] audit: type=1400 audit(1788065257.332:736): avc: denied { write } for pid=8519 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.488290][ T8087] veth0_macvtap: left promiscuous mode [ 316.488388][ T8087] veth1_vlan: left promiscuous mode [ 316.489284][ T8087] veth0_vlan: left promiscuous mode [ 316.626549][ T5605] ffs_data_put(): freeing [ 316.721309][ T4917] Bluetooth: hci5: command tx timeout [ 317.446929][ T8084] net_ratelimit: 10 callbacks suppressed [ 317.446972][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.447146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.661365][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 317.661442][ T31] audit: type=1326 audit(1788065258.502:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.0.677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742759e159 code=0x7ffc0000 [ 317.661696][ T31] audit: type=1326 audit(1788065258.502:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.0.677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742759e159 code=0x7ffc0000 [ 317.661884][ T31] audit: type=1326 audit(1788065258.512:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.0.677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f742759e159 code=0x7ffc0000 [ 317.668202][ T31] audit: type=1326 audit(1788065258.522:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.0.677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742759e159 code=0x7ffc0000 [ 317.668247][ T31] audit: type=1326 audit(1788065258.522:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.0.677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742759e159 code=0x7ffc0000 [ 317.668280][ T31] audit: type=1326 audit(1788065258.522:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.0.677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f742759e159 code=0x7ffc0000 [ 317.668312][ T31] audit: type=1326 audit(1788065258.522:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.0.677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742759e159 code=0x7ffc0000 [ 317.668344][ T31] audit: type=1326 audit(1788065258.522:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.0.677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742759e159 code=0x7ffc0000 [ 318.106125][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 318.261047][ T31] audit: type=1400 audit(1788065259.112:746): avc: denied { setattr } for pid=8538 comm="syz.4.679" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.450691][ T8546] hpfs: Bad magic ... probably not HPFS [ 318.715668][ T8090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.715862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.939640][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.680'. [ 319.051773][ T8087] team0 (unregistering): Port device team_slave_1 removed [ 319.082229][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 319.123633][ T8087] team0 (unregistering): Port device team_slave_0 removed [ 319.144600][ T31] audit: type=1400 audit(1788065260.002:747): avc: denied { mount } for pid=8552 comm="syz.2.681" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 319.148470][ T8552] ima: policy update failed [ 319.308523][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 319.380324][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.398288][ T8422] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.424690][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.424770][ T8090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.438177][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.438254][ T5812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.481919][ T8555] syzkaller0: entered promiscuous mode [ 319.481960][ T8555] syzkaller0: entered allmulticast mode [ 319.652979][ T8560] siw: device registration error -23 [ 319.703647][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.683'. [ 319.994567][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.994753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.826654][ T8566] read descriptors [ 321.470871][ T8582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.771927][ T8087] IPVS: stop unused estimator thread 0... [ 321.920525][ T8083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.920687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.957557][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.957739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.213916][ T8087] net_ratelimit: 2 callbacks suppressed [ 323.213960][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.214170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.253492][ T5605] ffs_data_put(): freeing [ 323.659289][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 323.659323][ T31] audit: type=1400 audit(1788065264.512:753): avc: denied { write } for pid=8559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.813360][ T8595] read descriptors [ 323.880274][ T8597] bridge_slave_0: left allmulticast mode [ 323.880317][ T8597] bridge_slave_0: left promiscuous mode [ 323.880467][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.926134][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 323.938079][ T31] audit: type=1400 audit(1788065264.792:754): avc: denied { write } for pid=8600 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.209700][ T8597] bridge_slave_1: left allmulticast mode [ 324.209730][ T8597] bridge_slave_1: left promiscuous mode [ 324.210161][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.230975][ T8597] bond0: (slave bond_slave_0): Releasing backup interface [ 324.247484][ T8597] bond0: (slave bond_slave_1): Releasing backup interface [ 324.264042][ T8597] team0: Port device team_slave_0 removed [ 324.275470][ T8597] team0: Port device team_slave_1 removed [ 324.277711][ T8597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.277730][ T8597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.282743][ T8597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.282760][ T8597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.290628][ T8597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 324.293657][ T8138] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 324.296654][ T31] audit: type=1400 audit(1788065265.152:755): avc: denied { relabelfrom } for pid=8598 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 324.296763][ T31] audit: type=1400 audit(1788065265.152:756): avc: denied { relabelto } for pid=8598 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 324.366551][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 324.395665][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.436376][ T8138] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 324.438905][ T8138] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.442056][ T8138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 324.442077][ T8138] usb 3-1: Product: syz [ 324.442090][ T8138] usb 3-1: Manufacturer: syz [ 324.455554][ T8138] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 324.465927][ T8138] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 324.465968][ T8138] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 324.621196][ T8635] fuse: Unknown parameter '' [ 324.659547][ T5787] usb 3-1: USB disconnect, device number 37 [ 324.660690][ T5787] garmin_gps 3-1:1.0: device disconnected [ 324.662979][ T5595] ffs_data_put(): freeing [ 324.690278][ T31] audit: type=1400 audit(1788065265.542:757): avc: denied { load_policy } for pid=8634 comm="syz.4.694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 324.763684][ T8640] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 324.763751][ T8640] SELinux: failed to load policy [ 324.874945][ T8647] siw: device registration error -23 [ 324.913388][ T8647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 325.756947][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.758703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.789142][ T31] audit: type=1400 audit(1788065266.642:758): avc: denied { write } for pid=8629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.803389][ T8654] syzkaller1: entered promiscuous mode [ 325.803409][ T8654] syzkaller1: entered allmulticast mode [ 325.804241][ T31] audit: type=1400 audit(1788065266.642:759): avc: denied { ioctl } for pid=8653 comm="syz.2.698" path="socket:[22780]" dev="sockfs" ino=22780 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 325.935577][ T31] audit: type=1400 audit(1788065266.792:760): avc: denied { write } for pid=8656 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.026901][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 326.177603][ T8422] veth0_vlan: entered promiscuous mode [ 326.220744][ T8422] veth1_vlan: entered promiscuous mode [ 326.277077][ T8674] netlink: 'syz.2.701': attribute type 10 has an invalid length. [ 326.277200][ T8674] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 326.319215][ T8674] netlink: 'syz.2.701': attribute type 1 has an invalid length. [ 326.344303][ T8422] veth0_macvtap: entered promiscuous mode [ 326.571314][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 326.593817][ T8422] veth1_macvtap: entered promiscuous mode [ 326.744560][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.756565][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.763947][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 326.769499][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 326.779632][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.787780][ T10] usb 5-1: config 0 has no interface number 0 [ 326.794509][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.805522][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.815403][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.827182][ T10] usb 5-1: config 0 descriptor?? [ 326.842395][ T8085] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.842476][ T5787] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 326.884013][ T8085] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.885637][ T8085] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.892932][ T8085] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.992663][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 326.995309][ T5787] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 327.000924][ T5787] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 327.000948][ T5787] usb 3-1: config 2 has no interface number 0 [ 327.000979][ T5787] usb 3-1: config 2 interface 31 has no altsetting 0 [ 327.002434][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.002454][ T5787] usb 3-1: SerialNumber: syz [ 327.079679][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.079738][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.167538][ T31] audit: type=1400 audit(1788065268.022:761): avc: denied { ioctl } for pid=8694 comm="syz.3.706" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 327.198260][ T8085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.198300][ T8085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.314500][ T31] audit: type=1400 audit(1788065268.162:762): avc: denied { unmount } for pid=8422 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 327.417686][ T8701] openvswitch: netlink: Message has 8 unknown bytes. [ 327.484348][ T10] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000D/input/input22 [ 327.555992][ T8706] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 327.556039][ T8706] netlink: 'syz.0.708': attribute type 4 has an invalid length. [ 327.556057][ T8706] netlink: 'syz.0.708': attribute type 2 has an invalid length. [ 327.556068][ T8706] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 327.556079][ T8706] netlink: 88 bytes leftover after parsing attributes in process `syz.0.708'. [ 327.614415][ T8711] EXT4-fs (loop0): unable to read superblock [ 327.622246][ T10] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000D/input/input23 [ 327.642349][ T10] uclogic 0003:28BD:0071.000D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 327.671385][ T32] INFO: task kworker/0:2:921 blocked for more than 143 seconds. [ 327.671421][ T32] Tainted: G L syzkaller #0 [ 327.671443][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.671452][ T32] task:kworker/0:2 state:D stack:20512 pid:921 tgid:921 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 327.671511][ T32] Workqueue: events request_firmware_work_func [ 327.671549][ T32] Call Trace: [ 327.671558][ T32] [ 327.671571][ T32] __schedu ** replaying previous printk message ** [ 327.671571][ T32] __schedule+0x1259/0x6920 [ 327.671601][ T32] ? mark_held_locks+0x40/0x70 [ 327.671624][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.671658][ T32] ? __pfx___schedule+0x10/0x10 [ 327.671676][ T32] ? find_held_lock+0x2b/0x80 [ 327.671705][ T32] ? schedule+0x225/0x2c0 [ 327.671728][ T32] schedule+0xdd/0x2c0 [ 327.671748][ T32] schedule_preempt_disabled+0x13/0x30 [ 327.671769][ T32] __mutex_lock+0xcbf/0x1bc0 [ 327.671792][ T32] ? ath9k_hif_usb_firmware_cb+0x39e/0x510 [ 327.671829][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 327.671863][ T32] ? mark_held_locks+0x40/0x70 [ 327.671887][ T32] ? ath9k_hif_usb_firmware_cb+0x39e/0x510 [ 327.671916][ T32] ath9k_hif_usb_firmware_cb+0x39e/0x510 [ 327.671944][ T32] ? reacquire_held_locks+0xdd/0x1f0 [ 327.671968][ T32] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 327.671999][ T32] request_firmware_work_func+0x13f/0x440 [ 327.672028][ T32] ? process_one_work+0xa2c/0x1b10 [ 327.672058][ T32] ? __pfx_request_firmware_work_func+0x10/0x10 [ 327.672089][ T32] ? process_one_work+0x906/0x1b10 [ 327.672117][ T32] ? process_one_work+0x906/0x1b10 [ 327.672149][ T32] process_one_work+0xac7/0x1b10 [ 327.672190][ T32] ? __pfx_process_one_work+0x10/0x10 [ 327.672227][ T32] ? lock_acquire+0x1d1/0x380 [ 327.672256][ T32] ? __pfx_request_firmware_work_func+0x10/0x10 [ 327.672289][ T32] worker_thread+0x5ef/0xe50 [ 327.672326][ T32] ? __pfx_worker_thread+0x10/0x10 [ 327.672357][ T32] ? kthread+0x13a/0x450 [ 327.672383][ T32] ? __pfx_worker_thread+0x10/0x10 [ 327.672410][ T32] kthread+0x373/0x450 [ 327.672437][ T32] ? __pfx_kthread+0x10/0x10 [ 327.672466][ T32] ret_from_fork+0x730/0xd60 [ 327.672490][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 327.672524][ T32] ? __switch_to+0x800/0x10f0 [ 327.672552][ T32] ? __pfx_kthread+0x10/0x10 [ 327.672581][ T32] ret_from_fork_asm+0x1a/0x30 [ 327.672617][ T32] [ 327.672739][ T32] [ 327.672739][ T32] Showing all locks held in the system: [ 327.672751][ T32] locks held by kworker/0:1/10: 5, last CPU#0: [ 327.672767][ T32] #0: ffff888024288d40 ((wq_completion)usb_hub_wq [ 327.677861][ T8085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.679510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.679970][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.680076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.695932][ T32] ){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 327.695979][ T32] #1: ffffc900000f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 327.702836][ T32] #2: ffff88802adea1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 327.702911][ T32] #3: ffff8880369881d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 327.702950][ T32] #4: ffff88801d2bf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0xaa0 [ 327.702996][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 327.703025][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 327.703067][ T32] #1: ffffffff9bc60c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 327.703112][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 327.703123][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 327.703193][ T32] locks held by kworker/0:2/921: 3, on CPU#0: [ 327.703204][ T32] #0: ffff88801c057140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 327.703249][ T32] #1: ffffc90004d3fd08 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 327.703311][ T32] #2: ffff88802b2041d8 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x39e/0x510 [ 327.703360][ T32] locks held by kworker/1:2/985: 6, on CPU#1: [ 327.703370][ T32] #0: ffff888024288d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 327.703415][ T32] #1: ffffc90004f97d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 327.703486][ T32] #2: ffff88802b2041d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 327.703526][ T32] #3: ffff88807bb641d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 327.703562][ T32] #4: ffff888037ea81a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 327.703615][ T32] #5: ffffffff8ec8fce8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 327.703679][ T32] locks held by acpid/4952: 4, on CPU#1: [ 327.703690][ T32] #0: ffff8880546b5158 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x23/0x140 [ 327.703756][ T32] #1: ffff888037c7c2b8 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x4f/0x660 [ 327.703801][ T32] #2: ffff88807438de70 (&hdev->ll_open_lock){+.+.}-{4:4}, at: hid_hw_open+0x27/0x200 [ 327.703839][ T32] #3: ffff8880337868e8 (&usbhid->mutex){+.+.}-{4:4}, at: usbhid_open+0x5b/0x3d0 [ 327.703896][ T32] locks held by udevd/4967: 2, last CPU#1: [ 327.703907][ T32] #0: ffffffff8f905df8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 327.703951][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 327.703997][ T32] locks held by getty/5356: 2, on CPU#0: [ 327.704025][ T32] #0: ffff888033e660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 327.704070][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 327.704113][ T32] locks held by syz-executor/5595: 1, last CPU#1: [ 327.704124][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 327.704184][ T32] locks held by udevd/5613: 4, on CPU#1: [ 327.704195][ T32] #0: ffff8880380a62d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 327.704233][ T32] #1: ffff888066450c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 327.704298][ T32] #2: ffff88807b36c5a8 (kn->active#34){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 327.704349][ T32] #3: ffff8880243aa1d8 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 327.704392][ T32] locks held by udevd/5621: 4, on CPU#1: [ 327.704403][ T32] #0: ffff8880362e2f38 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 327.707722][ T32] #1: ffff88802c925880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 327.707774][ T32] #2: ffff8880383c44b8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 327.707823][ T32] #3: ffff88807bb641d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 327.707892][ T32] locks held by kworker/0:5/5701: 6, on CPU#0: [ 327.707903][ T32] #0: ffff888024288d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 327.707948][ T32] #1: ffffc9000465fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 327.708010][ T32] #2: ffff88802aa661d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 327.708049][ T32] #3: ffff88802ad7f568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 327.708087][ T32] #4: ffff88802ac3c860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 327.708127][ T32] #5: ffffffff9027dc08 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1bd0 [ 327.708182][ T32] locks held by kworker/0:7/5716: 2, last CPU#0: [ 327.708194][ T32] #0: ffff88801c055d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 327.708239][ T32] #1: ffffc90003e0fd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 327.708302][ T32] locks held by kworker/1:6/5786: 3, on CPU#1: [ 327.708314][ T32] #0: ffff88801c057140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 327.708359][ T32] #1: ffffc90003d7fd08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 327.708403][ T32] #2: ffff88807e892250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 327.708464][ T32] locks held by kworker/1:7/5787: 5, on CPU#1: [ 327.708475][ T32] #0: ffff888024288d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 327.708520][ T32] #1: ffffc90003c2fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 327.708579][ T32] #2: ffff88802b1d81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 327.708618][ T32] #3: ffff8880243aa1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 327.708654][ T32] #4: ffff8880494b11a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 327.711210][ T32] locks held by udevd/5919: 1, on CPU#1: [ 327.714602][ T32] #0: ffff88801d2bf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xa5/0x7e0 [ 327.714677][ T32] locks held by udevd/6955: 1, on CPU#1: [ 327.714689][ T32] #0: ffff88801d2bf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xa5/0x7e0 [ 327.714745][ T32] locks held by syz.2.701/8673: 2, on CPU#1: [ 327.714756][ T32] #0: ffff88801d2bf2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 327.714820][ T32] #1: ffff88801d2bf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 327.714867][ T32] locks held by syz.4.704/8681: 2, on CPU#0: [ 327.714878][ T32] #0: ffff88801d2bf2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 327.714923][ T32] #1: ffff88801d2bf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 327.718809][ T32] locks held by syz.0.708/8706: 1, last CPU#1: [ 327.718824][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __fget_files+0x34/0x3d0 [ 327.718889][ T32] locks held by rm/8712: 2, last CPU#0: [ 327.718901][ T32] #0: ffff888076f8e9b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 327.718941][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 327.719003][ T32] [ 327.719007][ T32] ============================================= [ 327.719007][ T32] [ 327.719014][ T32] NMI backtrace for cpu 1 [ 327.719027][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 327.719049][ T32] Tainted: [L]=SOFTLOCKUP [ 327.719055][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 327.719064][ T32] Call Trace: [ 327.719070][ T32] [ 327.719076][ T32] dump_stack_lvl+0x100/0x190 [ 327.719102][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 327.719130][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.719148][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 327.719174][ T32] sys_info+0x141/0x190 [ 327.719195][ T32] watchdog+0xcb1/0x1030 [ 327.719217][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 327.719243][ T32] ? __pfx_watchdog+0x10/0x10 [ 327.719261][ T32] ? __kthread_parkme+0x18f/0x230 [ 327.719282][ T32] ? kthread+0x13a/0x450 [ 327.719301][ T32] ? __pfx_watchdog+0x10/0x10 [ 327.719317][ T32] kthread+0x373/0x450 [ 327.719337][ T32] ? __pfx_kthread+0x10/0x10 [ 327.719359][ T32] ret_from_fork+0x730/0xd60 [ 327.719377][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 327.719396][ T32] ? __switch_to+0x800/0x10f0 [ 327.719418][ T32] ? __pfx_kthread+0x10/0x10 [ 327.719440][ T32] ret_from_fork_asm+0x1a/0x30 [ 327.719466][ T32] [ 327.719487][ T32] Sending NMI from CPU 1 to CPUs 0: [ 327.719508][ C0] NMI backtrace for cpu 0 [ 327.719519][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.719539][ C0] Tainted: [L]=SOFTLOCKUP [ 327.719544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 327.719551][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 327.719573][ C0] Code: 1f 5c fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 d8 30 cf fc eb a2 e8 61 31 [ 327.719586][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 327.719598][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 327.719607][ C0] RDX: 00000000000003fd RSI: ffffffff85afc780 RDI: ffffffff9bc60ca0 [ 327.719617][ C0] RBP: ffffffff9bc60c60 R08: 0000000000000001 R09: 000000000000001f [ 327.719628][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 327.719637][ C0] R13: 0000000000000020 R14: fffffbfff378c1e9 R15: dffffc0000000000 [ 327.719646][ C0] FS: 0000000000000000(0000) GS:ffff888123b64000(0000) knlGS:0000000000000000 [ 327.719661][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.719670][ C0] CR2: 00007f83266c0286 CR3: 000000005a242000 CR4: 00000000003526f0 [ 327.719680][ C0] Call Trace: [ 327.719684][ C0] [ 327.719690][ C0] wait_for_lsr+0x13a/0x210 [ 327.719705][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 327.719720][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 327.719735][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 327.719756][ C0] serial8250_console_write+0xf46/0x1330 [ 327.719776][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 327.719792][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 327.719816][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 327.719839][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 327.719861][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 327.719881][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 327.719903][ C0] ? do_raw_spin_lock+0x90/0x260 [ 327.719922][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 327.719939][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 327.719960][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 327.719979][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 327.720001][ C0] nbcon_kthread_func+0x613/0x7d0 [ 327.720025][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 327.720050][ C0] ? __kthread_parkme+0x18f/0x230 [ 327.720066][ C0] ? kthread+0x13a/0x450 [ 327.720082][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 327.720101][ C0] kthread+0x373/0x450 [ 327.720118][ C0] ? __pfx_kthread+0x10/0x10 [ 327.720135][ C0] ret_from_fork+0x730/0xd60 [ 327.720150][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 327.720165][ C0] ? __switch_to+0x800/0x10f0 [ 327.720183][ C0] ? __pfx_kthread+0x10/0x10 [ 327.720201][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.720224][ C0] [ 327.726872][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 329.091786][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 329.102482][ T32] Tainted: [L]=SOFTLOCKUP [ 329.106812][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 329.116897][ T32] Call Trace: [ 329.120173][ T32] [ 329.123098][ T32] dump_stack_lvl+0x100/0x190 [ 329.127787][ T32] vpanic+0x553/0x970 [ 329.131768][ T32] ? __pfx_vpanic+0x10/0x10 [ 329.136277][ T32] panic+0xd1/0xe0 [ 329.140000][ T32] ? __pfx_panic+0x10/0x10 [ 329.144404][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 329.150559][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 329.156708][ T32] ? watchdog.cold+0x1ec/0x234 [ 329.161461][ T32] watchdog.cold+0x1fd/0x234 [ 329.166041][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 329.171845][ T32] ? __pfx_watchdog+0x10/0x10 [ 329.176520][ T32] ? __kthread_parkme+0x18f/0x230 [ 329.181536][ T32] ? kthread+0x13a/0x450 [ 329.185800][ T32] ? __pfx_watchdog+0x10/0x10 [ 329.190467][ T32] kthread+0x373/0x450 [ 329.194528][ T32] ? __pfx_kthread+0x10/0x10 [ 329.199131][ T32] ret_from_fork+0x730/0xd60 [ 329.203724][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 329.208820][ T32] ? __switch_to+0x800/0x10f0 [ 329.213487][ T32] ? __pfx_kthread+0x10/0x10 [ 329.218071][ T32] ret_from_fork_asm+0x1a/0x30 [ 329.222830][ T32] [ 329.226033][ T32] Kernel Offset: disabled [ 329.230334][ T32] Rebooting in 86400 seconds..