last executing test programs: 2m46.601241702s ago: executing program 0 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x55, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="1403032bbd70000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000004a0001002abd0000000000000a"], 0x1c}}, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/48, 0x30) 2m46.409129486s ago: executing program 0 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) write$sndseq(r3, &(0x7f0000000100)=[{0x9, 0xc8, 0xd, 0xd2, @tick=0x8001, {0x9, 0xe}, {0x10, 0x6}, @raw32={[0xbcf, 0x5bd, 0xfffffffb]}}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x2200400}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) 2m43.405473002s ago: executing program 0 (id=829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="1d001738f0020000", 0x8) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x46d) syz_emit_ethernet(0x76, &(0x7f0000000100)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @private2, @local, [@dstopts={0x0, 0x0, '\x00', [@jumbo]}]}}}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32, @ANYBLOB='\b'], 0x84}}, 0x20008040) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) timer_settime(r6, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a0001007175657565000000140002800800044000000010060003401b0300000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 2m40.901085411s ago: executing program 0 (id=832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000002c0)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 2m40.711200278s ago: executing program 0 (id=833): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ab, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r6, 0x309, 0x3, 0x0, {0x1d}}, 0x14}}, 0x20) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000640)={0xffffffffffffffff, 0x4, {0x0, 0x0, 0x0, 0xfffffffffffff6d2, 0x1, 0x0, 0x5, 0x1f, 0x19, "2f88004dad880deaa7762c9cfd9c00a33405b226b47f9421422e64c504c022f3d35545f0363bc4b150c59c687f3de599592aba92869c63c0d61584eb789cf7f5", "cb94fac597658011377852d7c6e7c47d0ae94fe70357cd1ca1e4b520423386279c7934f11692987ad97e3c1a65ad51a79188f38487418877af39f732d7d5cfa6", "f006b44d33185ce7cc54e083715390f6b1d394fbb157035cd0306a713863a1ad", [0x7f, 0x6]}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m39.38893532s ago: executing program 0 (id=839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2m24.3039864s ago: executing program 32 (id=839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 10.393886769s ago: executing program 1 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r1, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}, 0x1, 0xf000, 0x0, 0x20004080}, 0x0) 10.184003262s ago: executing program 2 (id=1288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049e0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 10.183357567s ago: executing program 1 (id=1289): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x4, 0x558, [0x200000000640, 0x0, 0x0, 0x200000000896, 0x20000000096c], 0x0, &(0x7f0000000180), &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, 0x5d0) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f00000003c0)="a8b8e6b409d25f9740b8730a0332a8b6373add70478849224b28fff93450db69cd4fb15aa70b0c", 0x27}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="acecf0783bff9f193b9fee170b242eb99b7e6084ea3acbecd056fe50e38d7db45a37d3345dc50a9791534e172dcdc1b62df49625e420a01cb7abf61706c2c4f7d77a7f7aa6b2375c0ce906aa91c056162fbfba71906e92d9c380e8a7dd71cc71cb8bab3fb23afa03241a05ec7ff2a00e7b249554ebddc84127e435aee17d65259f119518022ef1b5a5fd50ade021fbe821dbf3afd094172f230c0f43192b3af5ccae9965c50d2b3486fe200a7ccbfc6a9025f0453f56201f5180428657e9e8035e460b121fa1f114c995dbf2cc15b07cee48f7425f1211f40bcc419923a34d8fa0c29dfd2c0ec41d4f5c03", 0xeb}, {&(0x7f0000000bc0)="26b7dd47edb09634183d5713f880102e77200365303768551fdbf325586c964db733d51f62781e09ceb3d786748dfa37d13e404584e90c0b359dad3627e4b1e14cad11d3a493ece90a42d22956e9559f8ceedc0e56f8258493459574ec", 0x5d}, {&(0x7f0000002080)="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", 0x1000}], 0x5, &(0x7f0000000fc0)=[@rights={{0x28, 0x1, 0x1, [r3, r4, r2, r5, r5, r7]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, r1, r1, r8, r4, r7, r4, r0, r2]}}], 0x80, 0x40481}}], 0x1, 0x400) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f00000000c0)=0x7a5b, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_REGS(r13, 0x4090ae82, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)={0x14, r15, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x1, 0xdf, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x80, 0x8, 0x1ff, 0x1}}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e990b}) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000100)={0xed, 0x0, 0x1}) 9.543241119s ago: executing program 2 (id=1290): mkdirat(0xffffffffffffff9c, 0x0, 0x81) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=r1], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x9) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000400002000000000fdffffff850000000e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0xc, 0x1, 0xf06b]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0xae, 0x20203152, 0x1, [r6], [0x2ba, 0x100]}) 9.204239805s ago: executing program 4 (id=1291): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) creat(&(0x7f0000000000)='./file0\x00', 0x108) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0xa1188717466c56d}, [{0x2, 0x1}], {0x4, 0x9}, [{0x8, 0x4}, {0x8, 0x1}, {0x8, 0x1}, {0x8, 0x5}, {0x8, 0x4}, {0x8, 0x1}, {}, {0x8, 0x3}, {0x8, 0x1}, {0x8, 0x2}], {0x10, 0x5}}, 0x7c, 0x1) 9.06615777s ago: executing program 2 (id=1293): syz_usb_connect(0x0, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x310, 0xf2, 0xc3, 0x75, 0x8, 0x187f, 0x500, 0xd4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0x3, 0x0, 0x3, [{{0x9, 0x4, 0xd6, 0x6, 0x0, 0xe, 0x14, 0xa2, 0x8}}]}}]}}, 0x0) 8.940084382s ago: executing program 1 (id=1294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000002c0)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 8.200382712s ago: executing program 1 (id=1296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40800181}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x840) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r7, 0x511, 0xfeffffff, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r7, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x46401905ed3ee4d9}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44001) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r5, &(0x7f0000002080)=0x64, 0x21c) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r10, r11, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.737188146s ago: executing program 2 (id=1297): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x1e, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x18001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a3000000000"], 0x104}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x80d0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRESOCT=r5], 0x0) 7.500155295s ago: executing program 5 (id=1298): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) 7.32305193s ago: executing program 4 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x1}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_audit(0x10, 0x3, 0x9) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000280)=0x8000) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x6010, r1, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000d40)="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", 0x2000, &(0x7f0000005380)={&(0x7f0000000240)={0x50, 0x0, 0xf7, {0x7, 0x2b, 0x6, 0x80, 0x6, 0x2, 0x8, 0x6, 0x0, 0x0, 0x8, 0x6}}, &(0x7f0000000040)={0x18, 0x0, 0x3, {0xcc}}, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x829b}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x8}}, &(0x7f0000000340)={0x18, 0x0, 0xfff, {0xffffffff}}, &(0x7f00000003c0)={0x28, 0x0, 0x7, {{0x5, 0x770d, 0x2}}}, &(0x7f0000000400)={0x60, 0x0, 0x8000000000000001, {{0x1, 0xd, 0x3000000, 0xc9c, 0x2, 0xe0d, 0x11, 0x59}}}, &(0x7f0000000480)={0x18, 0xfffffffffffffffe, 0x0, {0x10}}, &(0x7f0000000500)={0x11, 0xfffffffffffffff5, 0x200, {'\x00'}}, &(0x7f0000000540)={0x20, 0x0, 0x7, {0x0, 0x14}}, &(0x7f0000000740)={0x78, 0x95726d9c910d4e7c, 0x7, {0x8, 0xffffffff, 0x0, {0x3, 0x1, 0x2d1, 0x4, 0x4, 0x80000001, 0x4a7, 0x3, 0x1, 0x1000, 0x4, 0x0, 0x0, 0xd, 0x5}}}, &(0x7f0000000a80)={0x90, 0x0, 0x391f, {0x3, 0x3, 0x8, 0x2, 0x47f, 0xb8a, {0x1, 0x400, 0x5, 0x0, 0x6, 0x10000, 0x3, 0x3ff, 0x8, 0x1000, 0x482a, 0x0, 0x0, 0x6, 0x2}}}, &(0x7f0000000b40)={0x60, 0xfffffffffffffffe, 0x9, [{0x6, 0x101, 0x9, 0x7, '\x19!)-+*,!)'}, {0x4, 0x8, 0xa, 0xe3ea, '/dev/fuse\x00'}]}, &(0x7f00000007c0)=ANY=[@ANYBLOB="f0010000f5ffffff05000000000000000500000000000000010000000000000003000000000000000100000000000000000200000080000006000000000000007f020000000000000100000000000000ffff0000000000000800000000000000470b0000000000000400000007000000dd0000000020000002000020", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="07000000eb0000000000000002000000000000009b020000000000000a000000090000002f6465762f6675736500000000000000040000000000000000000000000000000800000000000000010000000000000000020000f0000000020000000000000082f7ffffffffffffdc000000000000000200000000000000070000000000000000000000000000000100000000000000090000000020000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000008005000000000000000100000000000000ff0100000000000001000000010000002100000000000000060000000000000003000000000000000d000000000000002f0800000000000000000000000000000400000000000000f7ffffffffffffff080000000000000006000000000000000f00000000000000000000000000008009000000910700001fcc00000010000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="df0d00000a00000000000000000000000000000000000000000000000900000000000000f4a8712d3bad0eb37c9e3d5a79fcacc9749092e2943571868859c429c83fa5a9663774803989702fcfa46a82b958732a8effa3af7f707318f252af30657f31e2e0cc506f39a6641a7fed6f9887d9e1706359526f9d25d5111a884343ad2a3c4e0284f81308f8a78940575526092c663a785b7dc2bdb677619342422c2843e4fcc3db352473efa6cbf2dc1abb86bb3bf27df4953a6008a41cdcfb7021e504092c9d61a98f45dd7c1e42de74db5a9870ef8115"], &(0x7f0000005100)={0xa0, 0x9, 0x53, {{0x0, 0x3, 0x1, 0x1, 0xe925, 0x80000000, {0x2, 0x18, 0x2, 0xff, 0x7, 0x6, 0xf, 0x169, 0x3, 0x4000, 0x3, 0x0, 0x0, 0xff, 0xc}}, {0x0, 0x8}}}, 0x0, &(0x7f0000005240)={0x130, 0x0, 0x4, {0x3, 0x7, 0x0, '\x00', {0x8, 0x3, 0x7fffffffffffffff, 0xc, r8, r9, 0xf000, '\x00', 0x4a0, 0x3, 0x7, 0xffffffffffff0000, {0x7f}, {0x24a, 0x8}, {0x7, 0x6}, {0x80000000, 0x6}, 0x5, 0xf, 0x0, 0x1}}}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) fchown(r0, r8, r10) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000100)) rmdir(&(0x7f0000000240)='./file0\x00') ioctl$PPPIOCSACTIVE(r11, 0x40107446, &(0x7f0000001000)={0x2, &(0x7f0000000000)=[{0x200, 0xc, 0x0, 0xfffffff5}, {0xfff9, 0x9, 0x6, 0x2a}]}) write(r11, &(0x7f0000000080)="3aa0", 0x2) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') 7.217877395s ago: executing program 5 (id=1301): mkdirat(0xffffffffffffff9c, 0x0, 0x81) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=r1], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x9) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000400002000000000fdffffff850000000e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0xc, 0x1, 0xf06b]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0xae, 0x20203152, 0x1, [r6], [0x2ba, 0x100]}) 5.307904576s ago: executing program 4 (id=1303): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xffffffffffffffd7, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffd30, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x4000090) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000080000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4.973691671s ago: executing program 1 (id=1305): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, r0, 0x0) (async) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf4, 0x45, 0x1b, 0x40, 0x5d1, 0x3011, 0xc771, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xd77438f1b4622487, 0x3, [{{0x9, 0x4, 0x2d, 0x0, 0x0, 0x89, 0xe1, 0x52}}]}}]}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 4.736720257s ago: executing program 5 (id=1306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000002c0)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 4.087634091s ago: executing program 5 (id=1308): mkdirat(0xffffffffffffff9c, 0x0, 0x81) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=r1], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) syz_open_dev$dri(0x0, 0x4, 0x30d000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x9) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000400002000000000fdffffff850000000e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0xc, 0x1, 0xf06b]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0xae, 0x20203152, 0x1, [r5], [0x2ba, 0x100]}) 2.542291043s ago: executing program 1 (id=1310): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xdd, 0xbd, 0x73, 0x10, 0x582, 0x7d, 0xa385, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x97, 0x69, 0x58}}]}}]}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x40, 0x8, 0x6f8, 0xf0ed, {{0x1d, 0x4, 0x3, 0x27, 0x74, 0x65, 0x0, 0x4, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xbf, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@empty, 0x1}, {@broadcast, 0x2c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@empty, 0x9}]}, @lsrr={0x83, 0xf, 0xc6, [@dev={0xac, 0x14, 0x14, 0xf}, @empty, @multicast1]}, @noop, @rr={0x7, 0x17, 0x14, [@local, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x41}]}, @ssrr={0x89, 0xb, 0xd9, [@empty, @local]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @fallback=0x30}, 0x94) r2 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x2327, 0x1, 0x1, 0x2c0}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.52438228s ago: executing program 4 (id=1311): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x74, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x24}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x74}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad4, 0x10, 0x1, 0x7}, &(0x7f00000000c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) epoll_create1(0x80000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.498786243s ago: executing program 2 (id=1312): r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002100)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYBLOB="0800957ce1898c7f3f221b0008000000", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000001ec0)=ANY=[@ANYBLOB="7f000001000000000100000006000000ac1414aae00000010a0101026401010064010100ffffffff85854f83e0eeebb131668fc9800daa609ad0c174d4821ebcb2d40100a69d24dbe4ced21bedf86e93455a8c09ae53ce5108a541e645cfc573a5666997cbb35cf13d38af85c32ac399c565fe9973e3401e276d41027392a14cbc303953c4"], 0x28) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) pwritev(0xffffffffffffffff, &(0x7f0000002080)=[{&(0x7f0000001a40)}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000001fc0)="24db66e225615b3e53fda9cb4bb89c3676821c7a41bf09bdbd48a48cfa8065eb317214a814e52130c5973f59ad118450ca12126200b872b67ec1c3a2242e799e9574e7780c07c2a3654f84d774efa3d73f226c0820", 0x55}, {&(0x7f0000002040)}], 0x4, 0x2, 0xd) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000001d80)=[{0x4, 0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/71, 0x47}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f00000005c0)=""/218, 0xda}], &(0x7f0000000300)=[0x1, 0x9, 0x9, 0x40, 0xfffffffffffff1d6, 0x5, 0xe16f]}, {0x9, 0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/22, 0x16}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/141, 0x8d}, {&(0x7f0000000500)=""/5, 0x5}, {&(0x7f0000000540)=""/24, 0x18}, {&(0x7f0000001840)=""/150, 0x96}, {&(0x7f0000001900)=""/136, 0x88}], &(0x7f0000001a80)=[0x0, 0x65f0, 0x100, 0x8]}, {0x3, 0x1, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001ac0)=""/170, 0xaa}, {&(0x7f0000001b80)=""/166, 0xa6}, {&(0x7f0000001c40)}], &(0x7f0000001cc0)=[0x4]}, {0x0, 0x0, 0x0, &(0x7f0000001d00), &(0x7f0000001d40)=[0x7fff, 0x0, 0x2, 0xffffffffffffffff, 0x4, 0xf9]}], 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 2.403430106s ago: executing program 3 (id=1313): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000380), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x400000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000240)=0x7d75, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, 0x0, 0x0) 1.519463272s ago: executing program 5 (id=1314): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xffffffffffffffd7, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffd30, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x4000090) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000080000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.424438866s ago: executing program 3 (id=1315): mkdirat(0xffffffffffffff9c, 0x0, 0x81) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=r1], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20) r5 = syz_open_dev$dri(0x0, 0x4, 0x30d000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000400002000000000fdffffff850000000e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0xc, 0x1, 0xf06b]}) 854.429571ms ago: executing program 4 (id=1316): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x180, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x6, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xda, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x7ffffffe, 0x1, 0x9, 0x2007, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x40010000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x0, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x80000006, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x4, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b2, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xe, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x1, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 791.709294ms ago: executing program 3 (id=1317): openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9f1}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xaf}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="fea09b8980d9d99656e320274497", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000005300)=0x8000000000000000, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001100)={@fallback, 0x16, 0x0, 0x6, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001000)=[0x0], &(0x7f0000001080), &(0x7f00000010c0), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="150000000e00000000000000", @ANYRES32=r4, @ANYBLOB="ebfe8fec5c3793c509e30fa19eff6477372e3bfc50f1ff8fa78cb05f42ecdd3cafe556598bc4d714c371442085404a0321eadd62ea9f857bc98c2d89063224dbe35c8aacd104f76be694c3eb9dcc215953e6da4b8e3d336bf90ff8904e4c94f1f747d6f319545954c533198efdac2eddd2b334190e86f9486d", @ANYRES64=r5], 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1b, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000500000000000000ff0f000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000379a222e7b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000001b8180c2e27085f8000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000002d80fffff0ffffff85200000040000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x6, 0xa5, &(0x7f0000000800)=""/165, 0x41100, 0x18, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xf, 0x24, 0x8385}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000500)=[{0x1, 0x1, 0x207, 0x9}, {0x3, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x5d0, 0xa}, {0x0, 0x5, 0x1, 0x4}, {0x0, 0x3, 0x10, 0x1}, {0x3, 0x4, 0xd, 0x1}, {0x3, 0x4, 0x7}, {0x3, 0x4, 0x2, 0x5}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r0, r3, 0x34, 0x4, 0x0, @void, @value=r6, @void, @void, r5}, 0x20) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2, 0x6, 0x101, 0x6000000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}]}, 0x1c}}, 0x0) r8 = gettid() prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, r8, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) r9 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) (async) sendmsg$inet(r10, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000200)="0c0cd5c37139", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0xffffffffffffffb2) sendfile(r9, r9, &(0x7f0000000080), 0x7f03) 640.321567ms ago: executing program 3 (id=1318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000002c0)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 345.391129ms ago: executing program 2 (id=1319): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x29, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x1c4, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0xf7, 0xc, "20d1776020525f0c2a29b7b2483a65cacbe74df7d6550c8ea440b995a0e35545db6ead430c4c95a427fd9649f4c843ca9d48f66cdd1ef64a6611de82e360be47a7bbea17bfaf3d8ab62691c320702d961406adeaa6949d1be46df0ebd9140be91f43032670b7e81bc83146d4d3d05adb5b65948cb37f66728231baf9f6bef8069ad771f142982b36e360ceb4dd1085824d4cf8fdec512dfc66c81669b9350171a93444416a57cfd687f29cfbf6ff4f07fa74296a08322dbc7cd7b942b6c09fc507ecb07eafcbc1313b578e5ce92063bb1f8c642bb7d2c18f169add807a6991d6f7387bd7c955c71aeae5ee1a8d04d282070e4d"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xab, 0xc, "737eb7a63a0b4950ac0685d866b3d8bffec9a7a95ca95bb396ca920c64b908daafc01fa294c4e6e89467061a1a4857825bbf560b8648c779f0706e7d9533dbe8957047055e91fdfdb6eba9302d19e5e6917b6ab474bde87a02822b0df03d37fe4efc51c630bd9052d0c2063693d11370fb6f4afd77a583222db239ce1da2b79ef28da6b407cfdd53530e3c83f58dd624afd6a881174b8ae03807862752a867687388ea38cf2e2e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1ec}, 0x1, 0x0, 0x0, 0x40048d0}, 0x24000840) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x30, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc048885}, 0x4000) sendmsg$NFC_CMD_START_POLL(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x20008041) r11 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) r13 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r13, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r13, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r13, 0x541b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f0000000000)=[r2, r2, r2, r2, r12, r13], 0x6) 124.351479ms ago: executing program 3 (id=1320): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x486003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="66bad104ed3e3ef3abf083847a00000100080f01cf410f38cadb48b886000000000000000f23d00f21f8352000000f0f23f80f013b360ffc81570000008fc9d0973f0f0132", 0x45}], 0x1, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f0000001400)="2e8bf9780be20971e2d9de14998e3ed1ed0cfa8aee640b94c5ed83d2ecaee923d00d5bcb222f1d42d9f48586965166d6da056fda4073e3a623dd5be18f28bea6c6490bb6486e7c95c149a3df030018a0d2458aa7db07a2e525ed5d8d8e396828554df1d8be01975ceb855d20b635b01ece4b7425df3af78cf3442ca2a0cd2cf08cdf79cb8aad9e84201acee0e3758293746fca69706845a0aab38748cad6c408c7ac840f04202403f662c0fb018502f613ca5798a89bc34ca560f8db8e64d3e09b8b08abf45f44780d9ff6e178b248", &(0x7f0000001500)="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"}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001140), 0x7, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) mount$cgroup(0x0, 0x0, 0x0, 0x84, &(0x7f0000000040)={[{@clone_children}]}) r8 = syz_open_dev$vcsu(0x0, 0x0, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000001200)=ANY=[@ANYRESDEC, @ANYBLOB="1e1c8ddcd38cbde78d6c7ff72f56cc4bfb55ecbaf0861509d8c2defc05b460c736ace9d75b4bd8ad1fef316fcd63ef757c74522e014fbf563614be69b65fe66f4b0ffeb0fd23d27cd3d6833b21c3b778e58c62b713517c92b41ace1d9ee413a1d17e46e1bc4ddd6a7c5ab78eddf458e4e08b506fa5f47d0e573b8582c4d9aa16", @ANYRESOCT=r4, @ANYRESHEX=r0, @ANYRES64=r7, @ANYRES64=r4], 0xa4}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) accept4$alg(r6, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f00000010c0)=0x2168, 0x4) r10 = socket(0x6, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="18000000680001000000000000006d219ec7a800000a"], 0x18}, 0x1, 0x0, 0x0, 0x20004880}, 0x8010) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000021c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 31.840902ms ago: executing program 4 (id=1321): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={0x0, 0x5, 0x3, 0x0, 0x1, [], [0x4, 0x7, 0x7b], [0x7, 0x80000002, 0x2, 0x7], [0x0, 0x2000000, 0x1, 0xfff]}) 31.142489ms ago: executing program 3 (id=1322): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$vbi(&(0x7f00000003c0), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000008c0)={0x4, @sliced={0x9, [0x10, 0x4, 0x7, 0x7, 0x2, 0x4ac, 0x7, 0x7, 0x80, 0x7, 0x1, 0xa, 0xfffd, 0x4, 0xfffb, 0x3, 0x401, 0x0, 0xd, 0x6, 0x7, 0x0, 0xf, 0x6b, 0x6, 0x400, 0x4, 0x7, 0x2, 0xd6c, 0xad9, 0x7, 0x9, 0xfffb, 0xb229, 0x8, 0x7, 0x4, 0x7fff, 0xfff9, 0xa07, 0x9, 0x3, 0x2, 0x9, 0xb]}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) io_setup(0xff, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x80000) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019300)=ANY=[@ANYBLOB="4800000010000305000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000008000002800128008000100687372001c00028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x48}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @pic={0xc, 0x7, 0x17, 0xb0, 0x0, 0xc, 0x7, 0xdc, 0x6, 0xc, 0x2f, 0xc8, 0xe, 0x6, 0x8, 0x81}}) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000c7eaec57668086d4bd3301a0c2d9d671587303fad44ade9c85cb4bac2036139af507cf8be9a953177e36362991ad17"]) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="4e527bfd248ea5752cd8201dce84b20a97632eff24255b0549fe48c91966f33e2b8e3c602ce3a6828549fe92ba3f976f088128666c42911c377cd0ab2434720b85b0e012de22dec0d278d1a1af7a7d620d04f38d", @ANYRES64=0x0], 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r8, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000019340)=""/210, 0xd2}, {&(0x7f0000019440)=""/160, 0xa0}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000019500)=""/106, 0x6a}], 0x4}, 0x1}], 0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 5 (id=1323): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000002000)='xen_mc_extend_args\x00', 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0xa031, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x80080) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r5, 0xc0045103, &(0x7f0000000080)=0x6) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xa5, 0x54, 0xb6, 0x40, 0x102c, 0x6251, 0x4117, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x10, 0xce, [{{0x9, 0x4, 0x5c, 0x4, 0x0, 0x77, 0xb3, 0x6b, 0xf7}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): he interface descriptor's value: 2 [ 640.883023][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 640.890591][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 640.894550][ T9494] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 640.904208][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 640.911980][ T30] audit: type=1400 audit(1762414733.939:884): avc: denied { ioctl } for pid=9479 comm="syz.3.875" path="socket:[24331]" dev="sockfs" ino=24331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 640.937124][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 640.951150][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 640.955048][ T890] usb 3-1: config 0 interface 52 has no altsetting 0 [ 640.998812][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 641.000536][ T9497] vhci_hcd: connection closed [ 641.012896][ T890] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 641.038799][ T5943] vhci_hcd: stop threads [ 641.046513][ T9503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.881'. [ 641.059878][ T5943] vhci_hcd: release socket [ 641.065959][ T30] audit: type=1400 audit(1762414734.029:885): avc: denied { mounton } for pid=9495 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 641.098769][ T5943] vhci_hcd: disconnect device [ 641.103762][ T890] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 641.171335][ T890] usb 3-1: Manufacturer: syz [ 641.187418][ T890] usb 3-1: config 0 descriptor?? [ 641.221745][ T890] hub 3-1:0.52: bad descriptor, ignoring hub [ 641.222390][ T869] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 641.231224][ T890] hub 3-1:0.52: probe with driver hub failed with error -5 [ 641.406920][ T869] usb 5-1: Using ep0 maxpacket: 32 [ 641.422980][ T869] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 641.431141][ T869] usb 5-1: config 0 has no interface number 0 [ 641.452628][ T869] usb 5-1: config 0 interface 184 has no altsetting 0 [ 641.494709][ T869] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 641.502692][ T890] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input9 [ 641.512485][ T869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.615793][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.645447][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.653962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.896938][ T869] usb 5-1: Product: syz [ 641.918468][ T869] usb 5-1: Manufacturer: syz [ 641.931770][ T869] usb 5-1: SerialNumber: syz [ 641.983303][ T869] usb 5-1: config 0 descriptor?? [ 642.016947][ T869] smsc75xx v1.0.0 [ 642.023858][ T9514] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 642.035412][ T890] usb 3-1: USB disconnect, device number 19 [ 642.644567][ T9495] chnl_net:caif_netlink_parms(): no params data found [ 642.661878][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.798220][ T869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 642.809035][ T869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 642.853217][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.871460][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.878727][ T9495] bridge_slave_0: entered allmulticast mode [ 642.887793][ T9495] bridge_slave_0: entered promiscuous mode [ 642.916215][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.011961][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.021617][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.029675][ T9495] bridge_slave_1: entered allmulticast mode [ 643.036789][ T9495] bridge_slave_1: entered promiscuous mode [ 643.052731][ T5861] Bluetooth: hci5: command tx timeout [ 643.552042][ T9536] tipc: Started in network mode [ 643.558021][ T9536] tipc: Node identity , cluster identity 4711 [ 643.565275][ T9536] tipc: Failed to obtain node identity [ 643.570823][ T9536] tipc: Enabling of bearer rejected, failed to enable media [ 643.617224][ T9495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.651271][ T9495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.671450][ T9542] random: crng reseeded on system resumption [ 643.679405][ T30] audit: type=1400 audit(1762414736.719:886): avc: denied { write } for pid=9541 comm="syz.1.890" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 643.695047][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.891'. [ 643.786444][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.804985][ T30] audit: type=1400 audit(1762414736.719:887): avc: denied { open } for pid=9541 comm="syz.1.890" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 643.881700][ T9542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.890'. [ 643.903552][ T9495] team0: Port device team_slave_0 added [ 643.917344][ T9495] team0: Port device team_slave_1 added [ 644.180873][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.392404][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.420506][ T869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 644.433265][ T869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 644.443090][ T869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 644.459457][ T9495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.470754][ T869] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 644.480795][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.486448][ T869] usb 5-1: USB disconnect, device number 26 [ 644.503225][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.529414][ T9495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.878438][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.039940][ T9562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.894'. [ 645.552484][ T5861] Bluetooth: hci5: command tx timeout [ 645.848383][ T9495] hsr_slave_0: entered promiscuous mode [ 645.863576][ T9495] hsr_slave_1: entered promiscuous mode [ 645.869726][ T9495] debugfs: 'hsr0' already exists in 'hsr' [ 645.902390][ T9495] Cannot create hsr debugfs directory [ 645.941258][ T5929] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 645.950494][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.959570][ T5929] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 646.022481][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.189051][ T5858] Bluetooth: hci0: adv larger than maximum supported [ 646.189092][ T5858] Bluetooth: hci0: Malformed LE Event: 0x0d [ 646.279686][ T30] audit: type=1400 audit(1762414739.329:888): avc: denied { getopt } for pid=9577 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 646.305252][ T30] audit: type=1400 audit(1762414739.349:889): avc: denied { write } for pid=9577 comm="syz.1.901" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 646.356767][ T9574] netlink: 48 bytes leftover after parsing attributes in process `syz.4.899'. [ 646.371673][ T30] audit: type=1400 audit(1762414739.409:890): avc: denied { mount } for pid=9573 comm="syz.4.899" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 646.415033][ T30] audit: type=1400 audit(1762414739.469:891): avc: denied { unmount } for pid=5865 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 646.973407][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.002387][ T5906] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 647.200711][ T9495] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 647.208333][ T890] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 647.261845][ T9495] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 647.347179][ T9495] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 647.387780][ T890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 647.433990][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.446474][ T9495] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 647.470962][ T890] usb 4-1: config 8 has an invalid interface number: 92 but max is 0 [ 647.530710][ T890] usb 4-1: config 8 has no interface number 0 [ 647.587716][ T890] usb 4-1: config 8 interface 92 has no altsetting 0 [ 647.612994][ T5858] Bluetooth: hci5: command tx timeout [ 647.641440][ T890] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 647.738819][ T890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.013038][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.022403][ T5861] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 648.264795][ T5906] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 648.274023][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.382007][ T5906] usb 2-1: config 0 descriptor?? [ 648.507210][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 648.763601][ T5966] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 648.878655][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.986472][ T5966] usb 5-1: unable to get BOS descriptor or descriptor too short [ 649.000933][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 649.068937][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 649.083943][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.098804][ T5966] usb 5-1: config 8 has an invalid interface number: 92 but max is 0 [ 649.159285][ T5966] usb 5-1: config 8 has no interface number 0 [ 649.203192][ T5966] usb 5-1: config 8 interface 92 has no altsetting 0 [ 649.254829][ T5966] usb 5-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 649.662529][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.692519][ T5858] Bluetooth: hci5: command tx timeout [ 650.000441][ T890] usb 4-1: Product: syz [ 650.284450][ T9495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.301140][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.688688][ T890] usb 4-1: Manufacturer: syz [ 650.693519][ T890] usb 4-1: SerialNumber: syz [ 650.732516][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.750780][ T9495] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.771571][ T55] block nbd0: Possible stuck request ffff8880261c7000: control (read@0,4096B). Runtime 180 seconds [ 650.788678][ T5966] usb 5-1: Product: syz [ 650.793680][ T5966] usb 5-1: Manufacturer: syz [ 650.798328][ T5966] usb 5-1: SerialNumber: syz [ 650.815012][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.822129][ T7919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.850024][ T5966] usb 5-1: can't set config #8, error -71 [ 650.868821][ T5966] usb 5-1: USB disconnect, device number 27 [ 650.925376][ T9608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.933875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.942768][ T9608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.977125][ T9608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.987176][ T9608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.995721][ T9608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.356482][ T9510] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.363617][ T9510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.455936][ T5906] pwc: recv_control_msg error -71 req 02 val 2c00 [ 651.488526][ T5906] pwc: recv_control_msg error -71 req 04 val 1000 [ 651.488581][ T890] usb 4-1: can't set config #8, error -71 [ 651.528441][ T890] usb 4-1: USB disconnect, device number 37 [ 651.556255][ T5906] pwc: recv_control_msg error -71 req 04 val 1300 [ 651.649520][ T5906] pwc: recv_control_msg error -71 req 04 val 1400 [ 651.862464][ T5906] pwc: recv_control_msg error -71 req 02 val 2000 [ 651.882222][ T5906] pwc: recv_control_msg error -71 req 02 val 2100 [ 652.153830][ T5906] pwc: recv_control_msg error -71 req 04 val 1500 [ 652.197911][ T5906] pwc: recv_control_msg error -71 req 02 val 2500 [ 652.204925][ T5906] pwc: recv_control_msg error -71 req 02 val 2400 [ 652.211686][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 652.212417][ T5851] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 652.218504][ T5858] Bluetooth: hci4: Malformed LE Event: 0x0d [ 652.232713][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 652.245446][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 652.253321][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 652.260111][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 652.277938][ T5906] pwc: Registered as video103. [ 652.292662][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 652.328526][ T5906] usb 2-1: USB disconnect, device number 28 [ 652.432789][ T5851] usb 5-1: Using ep0 maxpacket: 16 [ 652.459521][ T9495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.464979][ T5851] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 652.481206][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.503081][ T5851] usb 5-1: config 0 descriptor?? [ 652.527314][ T5851] usb 5-1: interface 1 not found [ 652.759155][ T30] audit: type=1400 audit(1762414745.799:892): avc: denied { read } for pid=9631 comm="syz.2.912" path="socket:[24883]" dev="sockfs" ino=24883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 652.987562][ T5906] usb 5-1: USB disconnect, device number 28 [ 653.368899][ T9495] veth0_vlan: entered promiscuous mode [ 653.405552][ T9495] veth1_vlan: entered promiscuous mode [ 653.497993][ T9495] veth0_macvtap: entered promiscuous mode [ 653.585331][ T9495] veth1_macvtap: entered promiscuous mode [ 654.308635][ T5851] net_ratelimit: 98 callbacks suppressed [ 654.308651][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.347877][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.454788][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.539393][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.740385][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.310048][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.319012][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.338234][ T9619] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.372598][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.373805][ T9619] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.813667][ T9664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'. [ 656.077735][ T30] audit: type=1400 audit(1762414749.129:893): avc: denied { create } for pid=9671 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 656.130476][ T30] audit: type=1400 audit(1762414749.149:894): avc: denied { write } for pid=9671 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 656.150233][ T9510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.158759][ T9673] overlayfs: failed to resolve './bus': -2 [ 656.165179][ T30] audit: type=1400 audit(1762414749.149:895): avc: denied { getopt } for pid=9671 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 656.187519][ T9510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.232845][ T9619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.246272][ T9619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.264508][ T30] audit: type=1400 audit(1762414749.309:896): avc: denied { mounton } for pid=9495 comm="syz-executor" path="/root/syzkaller.FuN5Vr/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 656.345881][ T30] audit: type=1400 audit(1762414749.319:897): avc: denied { mounton } for pid=9495 comm="syz-executor" path="/root/syzkaller.FuN5Vr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 656.382442][ T30] audit: type=1400 audit(1762414749.319:898): avc: denied { mounton } for pid=9495 comm="syz-executor" path="/root/syzkaller.FuN5Vr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 656.409900][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.422110][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.522442][ T30] audit: type=1400 audit(1762414749.429:899): avc: denied { mounton } for pid=9495 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 656.522482][ T30] audit: type=1400 audit(1762414749.429:900): avc: denied { mount } for pid=9495 comm="syz-executor" name="/" dev="gadgetfs" ino=6849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 656.522520][ T30] audit: type=1400 audit(1762414749.429:901): avc: denied { mount } for pid=9495 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 656.578203][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.335122][ T9692] Invalid ELF header type: 3 != 1 [ 657.455147][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.802385][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 658.416439][ T9704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.425102][ T9704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.433788][ T9704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.443320][ T9704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.792726][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 658.807666][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 658.816861][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.835975][ T9] usb 4-1: config 0 descriptor?? [ 658.845925][ T9] usb 4-1: interface 1 not found [ 659.892721][ T890] net_ratelimit: 4 callbacks suppressed [ 659.892737][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.973511][ T890] usb 4-1: USB disconnect, device number 38 [ 660.975023][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.673852][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.014012][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.241050][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.275724][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 663.299600][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.142503][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 664.642684][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 664.662423][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.735840][ T9] usb 4-1: config 0 has no interface number 0 [ 664.870512][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 664.970192][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 665.022839][ T5925] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 665.068729][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.327745][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.337479][ T9] usb 4-1: Product: syz [ 665.377208][ T5925] usb 6-1: unable to get BOS descriptor or descriptor too short [ 665.398956][ T9] usb 4-1: Manufacturer: syz [ 665.472432][ T9] usb 4-1: SerialNumber: syz [ 665.580633][ T5925] usb 6-1: config 8 has an invalid interface number: 92 but max is 0 [ 665.893275][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.904755][ T5925] usb 6-1: config 8 has no interface number 0 [ 665.911624][ T9] usb 4-1: config 0 descriptor?? [ 665.949770][ T9] usb 4-1: can't set config #0, error -71 [ 665.957040][ T5925] usb 6-1: config 8 interface 92 has no altsetting 0 [ 666.026043][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 666.026057][ T30] audit: type=1400 audit(1762414759.079:904): avc: denied { mounton } for pid=9755 comm="syz.4.940" path="/syzcgroup/unified/syz4" dev="hugetlbfs" ino=14220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 666.097948][ T5925] usb 6-1: string descriptor 0 read error: -71 [ 666.111779][ T5925] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 666.121023][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.142385][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.284608][ T9766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.941'. [ 666.537743][ T5925] usb 6-1: can't set config #8, error -71 [ 666.544898][ T5925] usb 6-1: USB disconnect, device number 2 [ 666.551631][ T9] usb 4-1: USB disconnect, device number 39 [ 667.060995][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.831161][ T9778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.840261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.857113][ T9778] sp0: Synchronizing with TNC [ 667.884934][ T30] audit: type=1400 audit(1762414760.269:905): avc: denied { connect } for pid=9773 comm="syz.2.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 668.332549][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.376591][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.440086][ T9784] netlink: 20 bytes leftover after parsing attributes in process `syz.5.948'. [ 668.542855][ T9790] netlink: 'syz.5.948': attribute type 1 has an invalid length. [ 669.087843][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 669.356405][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 669.372066][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 669.384311][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.414888][ T9788] veth0_to_hsr: entered promiscuous mode [ 669.421214][ T9788] macvtap1: entered allmulticast mode [ 669.426613][ T9788] veth0_to_hsr: entered allmulticast mode [ 669.440494][ T24] usb 4-1: config 0 descriptor?? [ 669.452523][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.528113][ T24] usb 4-1: interface 1 not found [ 669.632401][ T890] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 669.869984][ T30] audit: type=1400 audit(1762414762.899:906): avc: denied { ioctl } for pid=9799 comm="syz.5.953" path="socket:[26279]" dev="sockfs" ino=26279 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 670.112721][ T890] usb 3-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 670.182649][ T890] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 670.284984][ T890] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 670.352135][ T890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.379357][ T5925] usb 4-1: USB disconnect, device number 40 [ 670.381044][ T890] usb 3-1: Product: syz [ 670.402360][ T890] usb 3-1: Manufacturer: syz [ 670.525915][ T890] usb 3-1: SerialNumber: syz [ 670.536859][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.552005][ T890] usb 3-1: config 0 descriptor?? [ 670.699581][ T30] audit: type=1400 audit(1762414763.749:907): avc: denied { create } for pid=9808 comm="syz.5.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 670.815198][ T30] audit: type=1400 audit(1762414763.749:908): avc: denied { sys_admin } for pid=9808 comm="syz.5.954" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 670.835972][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.468914][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.641413][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.376512][ T890] usb 3-1: USB disconnect, device number 20 [ 672.422244][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 672.658554][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.695839][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.988094][ T30] audit: type=1326 audit(1762414767.039:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9831 comm="syz.3.957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x0 [ 674.538822][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.770457][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.779916][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.788525][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.798445][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.812667][ T30] audit: type=1400 audit(1762414767.849:910): avc: denied { bind } for pid=9846 comm="syz.1.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 675.152369][ T5851] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 675.393215][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 675.428615][ T5851] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 675.457396][ T5851] usb 6-1: config 0 has no interface number 0 [ 675.472402][ T890] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 675.482997][ T5851] usb 6-1: config 0 interface 184 has no altsetting 0 [ 675.515479][ T5851] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 675.626677][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.662356][ T5851] usb 6-1: Product: syz [ 675.672424][ T890] usb 4-1: Using ep0 maxpacket: 32 [ 675.685890][ T5851] usb 6-1: Manufacturer: syz [ 675.705408][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.707365][ T5851] usb 6-1: SerialNumber: syz [ 675.718357][ T890] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 675.744363][ T890] usb 4-1: config 0 has no interface number 0 [ 675.761033][ T5851] usb 6-1: config 0 descriptor?? [ 675.766542][ T890] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 675.778916][ T890] usb 4-1: config 0 interface 85 has no altsetting 0 [ 675.788465][ T5851] smsc75xx v1.0.0 [ 675.842174][ T890] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 675.871128][ T890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.879426][ T890] usb 4-1: Product: syz [ 675.883757][ T890] usb 4-1: Manufacturer: syz [ 675.889226][ T890] usb 4-1: SerialNumber: syz [ 675.939183][ T890] usb 4-1: config 0 descriptor?? [ 676.136020][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.658853][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.705542][ T9878] vivid-004: ================= START STATUS ================= [ 676.737762][ T9878] vivid-004: Radio HW Seek Mode: Bounded [ 676.745155][ T9878] vivid-004: Radio Programmable HW Seek: false [ 676.757274][ T9878] vivid-004: RDS Rx I/O Mode: Block I/O [ 676.763178][ T9878] vivid-004: Generate RBDS Instead of RDS: false [ 676.770228][ T9878] vivid-004: RDS Reception: true [ 676.775743][ T9878] vivid-004: RDS Program Type: 0 inactive [ 676.787292][ T9878] vivid-004: RDS PS Name: inactive [ 676.796948][ T9878] vivid-004: RDS Radio Text: inactive [ 676.867302][ T5851] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 676.899629][ T9878] vivid-004: RDS Traffic Announcement: false inactive [ 676.918055][ T890] appletouch 4-1:0.85: Geyser mode initialized. [ 676.921516][ T9878] vivid-004: RDS Traffic Program: [ 676.927143][ T5851] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 676.930016][ T9878] false [ 676.945483][ T890] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input12 [ 676.985414][ T9878] inactive [ 676.989343][ T9878] vivid-004: RDS Music: false inactive [ 676.995303][ T9878] vivid-004: ================== END STATUS ================== [ 677.202540][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 677.212562][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.353572][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.368495][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.382212][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 677.413556][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.458017][ T24] usb 5-1: config 0 descriptor?? [ 677.617625][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.677300][ T9] usb 4-1: USB disconnect, device number 41 [ 678.397817][ T24] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 678.417337][ T9] appletouch 4-1:0.85: input: appletouch disconnected [ 678.431349][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input13 [ 678.443299][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.543773][ T24] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 678.618017][ T5925] usb 5-1: USB disconnect, device number 29 [ 678.796354][ T5851] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 678.811963][ T5851] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 678.823263][ T5851] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 679.402460][ T5851] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 679.429552][ T5851] usb 6-1: USB disconnect, device number 3 [ 679.591614][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.117583][ T9921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.980'. [ 680.176332][ T6769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.608300][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.644947][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.743179][ T9925] block nbd2: NBD_DISCONNECT [ 680.892786][ T55] block nbd0: Possible stuck request ffff8880261c7000: control (read@0,4096B). Runtime 210 seconds [ 680.903569][ T5966] net_ratelimit: 1 callbacks suppressed [ 680.903580][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.916621][ T9925] block nbd2: Disconnected due to user request. [ 680.928069][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.983'. [ 681.061563][ T9925] block nbd2: shutting down sockets [ 681.855712][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.902500][ T9940] netlink: 56 bytes leftover after parsing attributes in process `syz.1.986'. [ 681.922412][ T5913] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 682.122357][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 682.180356][ T5913] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 682.284500][ T5913] usb 5-1: config 0 has no interface number 0 [ 682.960926][ T5913] usb 5-1: config 0 interface 184 has no altsetting 0 [ 682.975535][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.015769][ T5913] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 683.044529][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.076342][ T5913] usb 5-1: Product: syz [ 683.220082][ T5913] usb 5-1: Manufacturer: syz [ 683.239361][ T5913] usb 5-1: SerialNumber: syz [ 683.261910][ T5913] usb 5-1: config 0 descriptor?? [ 683.278619][ T5913] smsc75xx v1.0.0 [ 683.693794][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.928417][ T5913] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 683.949555][ T5913] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 684.019520][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.082522][ T5966] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 684.744631][ T5966] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 684.774007][ T5966] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 684.792482][ T5966] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 684.828728][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.869273][ T9964] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 684.936975][ T5966] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 684.968587][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 685.003596][ T30] audit: type=1326 audit(1762414778.049:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.3.997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x77fc0000 [ 685.054160][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.143411][ T5966] usb 6-1: USB disconnect, device number 4 [ 685.295775][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.302069][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.369344][ T5913] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 685.390628][ T5913] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 685.425392][ T5913] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 685.455074][ T5913] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 685.501280][ T5913] usb 5-1: USB disconnect, device number 30 [ 685.932644][ T9510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.041033][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.093064][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.348178][ T9984] netlink: 40 bytes leftover after parsing attributes in process `syz.5.999'. [ 686.734485][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.132902][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.513300][ T5925] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 687.692407][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 687.714117][ T5925] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 687.751748][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.781812][ T5925] usb 3-1: Product: syz [ 687.796816][ T5925] usb 3-1: Manufacturer: syz [ 687.814954][ T5925] usb 3-1: SerialNumber: syz [ 687.842908][ T5925] usb 3-1: config 0 descriptor?? [ 687.872565][ T5925] as10x_usb: device has been detected [ 687.900820][ T5925] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 687.954557][ T5925] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 688.039624][ T30] audit: type=1400 audit(1762414781.089:912): avc: denied { firmware_load } for pid=5925 comm="kworker/0:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 688.040227][ T5925] as10x_usb: error during firmware upload part1 [ 688.121230][ T5925] Registered device Sky IT Digital Key (green led) [ 688.178136][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.384306][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.392870][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.404119][ T5851] usb 3-1: USB disconnect, device number 21 [ 688.596439][ T5851] Unregistered device Sky IT Digital Key (green led) [ 688.598064][ T5851] as10x_usb: device has been disconnected [ 689.259106][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.904370][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.057269][ T5966] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 690.351386][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.485435][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.968839][ T5966] usb 6-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 691.093179][ T5966] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 691.103314][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.189820][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 691.650186][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.675304][ T5966] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 691.699804][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.809040][ T5966] usb 6-1: Product: syz [ 691.923123][ T5966] usb 6-1: Manufacturer: syz [ 692.178214][ T5966] usb 6-1: SerialNumber: syz [ 692.270033][ T5966] usb 6-1: config 0 descriptor?? [ 692.489375][T10063] SELinux: failed to load policy [ 692.618411][T10064] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 692.652623][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.662455][T10066] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 692.976463][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.022396][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 693.068034][ T5966] usb 6-1: can't set config #0, error -71 [ 693.099378][ T5966] usb 6-1: USB disconnect, device number 5 [ 693.140733][ T30] audit: type=1400 audit(1762414786.189:913): avc: denied { write } for pid=10077 comm="syz.5.1025" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 693.142904][T10078] FAULT_INJECTION: forcing a failure. [ 693.142904][T10078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.163836][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.184044][ T30] audit: type=1400 audit(1762414786.189:914): avc: denied { open } for pid=10077 comm="syz.5.1025" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 693.184119][T10078] CPU: 1 UID: 0 PID: 10078 Comm: syz.5.1025 Not tainted syzkaller #0 PREEMPT(full) [ 693.184139][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 693.184148][T10078] Call Trace: [ 693.184154][T10078] [ 693.184160][T10078] dump_stack_lvl+0x16c/0x1f0 [ 693.184187][T10078] should_fail_ex+0x512/0x640 [ 693.184208][T10078] _copy_from_user+0x2e/0xd0 [ 693.184228][T10078] memdup_user+0x6b/0xe0 [ 693.184242][T10078] nvram_misc_write+0x92/0xf0 [ 693.184265][T10078] ? __pfx_nvram_misc_write+0x10/0x10 [ 693.184287][T10078] vfs_write+0x2a0/0x11d0 [ 693.184305][T10078] ? __pfx_vfs_write+0x10/0x10 [ 693.184317][T10078] ? find_held_lock+0x2b/0x80 [ 693.184336][T10078] ? __fget_files+0x204/0x3c0 [ 693.184354][T10078] ? __fget_files+0x20e/0x3c0 [ 693.184375][T10078] ksys_write+0x12a/0x250 [ 693.184388][T10078] ? __pfx_ksys_write+0x10/0x10 [ 693.184408][T10078] do_syscall_64+0xcd/0xfa0 [ 693.184437][T10078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.184452][T10078] RIP: 0033:0x7fa99f98f6c9 [ 693.184465][T10078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.184479][T10078] RSP: 002b:00007fa9a07e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 693.184493][T10078] RAX: ffffffffffffffda RBX: 00007fa99fbe5fa0 RCX: 00007fa99f98f6c9 [ 693.184503][T10078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 693.184512][T10078] RBP: 00007fa9a07e7090 R08: 0000000000000000 R09: 0000000000000000 [ 693.184520][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.184528][T10078] R13: 00007fa99fbe6038 R14: 00007fa99fbe5fa0 R15: 00007ffcd3d4d2a8 [ 693.184550][T10078] [ 693.212405][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 693.329408][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.408476][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 693.418206][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 693.427985][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 693.438168][ T24] usb 3-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=43.8e [ 693.447590][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.520331][ T30] audit: type=1400 audit(1762414786.569:915): avc: denied { getopt } for pid=10079 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 693.555065][ T24] usb 3-1: config 0 descriptor?? [ 693.576575][ T24] io_ti 3-1:0.0: required endpoints missing [ 693.692672][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.776579][T10070] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1023'. [ 694.002580][ T5913] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 694.608821][T10070] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1023'. [ 694.801894][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.886350][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short [ 694.913801][ T5913] usb 6-1: config 8 has an invalid interface number: 92 but max is 0 [ 694.931275][ T5913] usb 6-1: config 8 has no interface number 0 [ 694.941561][ T5913] usb 6-1: config 8 interface 92 has no altsetting 0 [ 694.972096][T10093] binder: 10087:10093 unknown command 0 [ 694.977971][T10093] binder: 10087:10093 ioctl c0306201 200000000080 returned -22 [ 694.986793][T10093] binder: BINDER_SET_CONTEXT_MGR already set [ 694.992836][T10093] binder: 10087:10093 ioctl 4018620d 200000000040 returned -16 [ 695.009264][ T30] audit: type=1400 audit(1762414788.059:916): avc: denied { name_bind } for pid=10089 comm="syz.4.1029" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 695.010138][ T5913] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 695.426994][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.442430][ T5913] usb 6-1: Product: syz [ 695.458936][ T5913] usb 6-1: Manufacturer: syz [ 695.491516][ T5913] usb 6-1: SerialNumber: syz [ 695.635664][ T5858] Bluetooth: hci0: unexpected event for opcode 0x202a [ 695.853014][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.984217][ T24] usb 3-1: USB disconnect, device number 22 [ 696.022492][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.846135][ T30] audit: type=1400 audit(1762414789.899:917): avc: denied { create } for pid=10121 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 696.893197][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.922356][ T5966] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 696.998233][ T5899] Bluetooth: hci6: Frame reassembly failed (-84) [ 697.004988][ T30] audit: type=1326 audit(1762414790.009:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 697.057379][ T5913] gspca_main: etoms-2.14.0 probing 102c:6251 [ 697.272762][ T30] audit: type=1326 audit(1762414790.009:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 697.310541][ T5966] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 697.339125][ T30] audit: type=1326 audit(1762414790.009:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 697.377598][ T5966] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 697.396143][ T5913] usb 6-1: USB disconnect, device number 6 [ 697.408061][ T5966] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 697.471692][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.502880][ T30] audit: type=1326 audit(1762414790.009:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 697.767631][ T5966] usb 2-1: Product: syz [ 697.786266][ T5966] usb 2-1: Manufacturer: syz [ 697.841926][ T5966] usb 2-1: SerialNumber: syz [ 697.850100][ T5861] Bluetooth: to_multiplier 54284 > 3200 [ 697.875879][ T30] audit: type=1326 audit(1762414790.009:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 697.899934][ T5966] usb 2-1: config 0 descriptor?? [ 698.242055][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.335447][ T30] audit: type=1326 audit(1762414790.009:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 698.533569][ T30] audit: type=1326 audit(1762414790.019:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 698.580642][ T30] audit: type=1326 audit(1762414790.019:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 698.645375][ T30] audit: type=1326 audit(1762414790.019:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 698.680893][ T30] audit: type=1326 audit(1762414790.019:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 698.714130][ T30] audit: type=1326 audit(1762414790.019:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 698.746518][ T30] audit: type=1326 audit(1762414790.019:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 699.028208][ T30] audit: type=1326 audit(1762414790.019:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 699.052940][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.061271][ T5858] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 699.061802][ T30] audit: type=1326 audit(1762414790.019:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 699.098776][ T30] audit: type=1326 audit(1762414790.029:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10121 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb2b8f6c9 code=0x7ffc0000 [ 699.303557][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.566832][ T5966] usb 2-1: USB disconnect, device number 29 [ 700.002052][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 700.334063][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.704258][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.804157][T10158] comedi comedi3: das16m1: I/O port conflict (0x4f27,16) [ 701.096114][T10165] block nbd2: NBD_DISCONNECT [ 701.102930][T10165] block nbd2: Disconnected due to user request. [ 701.168006][T10167] netlink: 'syz.4.1049': attribute type 10 has an invalid length. [ 701.175930][T10167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1049'. [ 701.696797][T10165] block nbd2: shutting down sockets [ 701.697569][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.121009][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.267115][T10178] block nbd2: NBD_DISCONNECT [ 702.271739][T10178] block nbd2: Disconnected due to user request. [ 702.397688][T10178] block nbd2: shutting down sockets [ 702.763052][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.562459][ T5920] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 703.834388][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.126347][T10211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1060'. [ 704.505728][ T5920] usb 3-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 704.528119][ T5920] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.541579][ T5920] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 704.570392][T10214] overlayfs: missing 'lowerdir' [ 704.604408][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.612757][ T5920] usb 3-1: Product: syz [ 704.621887][ T5920] usb 3-1: Manufacturer: syz [ 704.686942][ T5920] usb 3-1: SerialNumber: syz [ 704.701918][ T5920] usb 3-1: config 0 descriptor?? [ 704.892736][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.132835][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 705.132849][ T30] audit: type=1400 audit(1762414798.179:991): avc: denied { mount } for pid=10217 comm="syz.1.1065" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 705.832347][ T30] audit: type=1400 audit(1762414798.869:992): avc: denied { mounton } for pid=10217 comm="syz.1.1065" path="/233/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 705.865940][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.963261][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.340101][T10239] FAULT_INJECTION: forcing a failure. [ 706.340101][T10239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.353184][T10239] CPU: 0 UID: 0 PID: 10239 Comm: syz.5.1069 Not tainted syzkaller #0 PREEMPT(full) [ 706.353204][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 706.353214][T10239] Call Trace: [ 706.353219][T10239] [ 706.353225][T10239] dump_stack_lvl+0x16c/0x1f0 [ 706.353248][T10239] should_fail_ex+0x512/0x640 [ 706.353263][T10239] strncpy_from_user+0x3b/0x2e0 [ 706.353276][T10239] setxattr_copy+0x8a/0x210 [ 706.353288][T10239] path_setxattrat+0x104/0x2a0 [ 706.353299][T10239] ? __pfx_path_setxattrat+0x10/0x10 [ 706.353319][T10239] ? ksys_write+0x190/0x250 [ 706.353354][T10239] ? fput+0x9b/0xd0 [ 706.353377][T10239] ? ksys_write+0x1ac/0x250 [ 706.353388][T10239] ? __pfx_ksys_write+0x10/0x10 [ 706.353399][T10239] __x64_sys_setxattr+0xc6/0x140 [ 706.353409][T10239] ? do_syscall_64+0x91/0xfa0 [ 706.353425][T10239] ? lockdep_hardirqs_on+0x7c/0x110 [ 706.353441][T10239] do_syscall_64+0xcd/0xfa0 [ 706.353464][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.353481][T10239] RIP: 0033:0x7fa99f98f6c9 [ 706.353493][T10239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.353508][T10239] RSP: 002b:00007fa9a07e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 706.353524][T10239] RAX: ffffffffffffffda RBX: 00007fa99fbe5fa0 RCX: 00007fa99f98f6c9 [ 706.353530][T10239] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000140 [ 706.353536][T10239] RBP: 00007fa9a07e7090 R08: 0000000000000003 R09: 0000000000000000 [ 706.353542][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.353547][T10239] R13: 00007fa99fbe6038 R14: 00007fa99fbe5fa0 R15: 00007ffcd3d4d2a8 [ 706.353561][T10239] [ 706.533950][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.729732][ T30] audit: type=1400 audit(1762414799.779:993): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 707.266857][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.634045][T10248] block nbd1: shutting down sockets [ 707.840864][ T5920] usb 3-1: USB disconnect, device number 23 [ 708.163286][ T5966] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 708.352667][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 708.371869][ T5966] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 708.404163][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.404394][ T5966] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 708.469116][ T5966] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 708.680517][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.746236][T10280] tipc: Started in network mode [ 708.807509][ T5966] usb 5-1: Product: syz [ 708.812239][ T5966] usb 5-1: Manufacturer: 웺䬻ĥﰞࠤ㠼뼐队䖤죞睘㭸DŽ뭽緻ﬞ䛲䥕鯆᫗껸ᷔ鸆ᛲᐽ껛挩囘Ꝧ╖핰᫲ᙿ兔缑貖䙓ﰾ宇崹䙒䦇뺺瓔綠ᛮ๐៥췛娄痴ꮭ䙠䳚盙菻㢳㳊ᔾࡦ㤷ᒔ첩烌랮훈靎澒⪹㩵㱗₎玪칍⃹눶䁒ꏧ [ 708.838859][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.854587][T10280] tipc: Node identity 7ef79c751fdf, cluster identity 4711 [ 708.873565][T10280] tipc: Enabled bearer , priority 0 [ 708.891666][T10283] syzkaller0: entered promiscuous mode [ 708.897554][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.914282][T10283] syzkaller0: entered allmulticast mode [ 708.923327][ T5966] usb 5-1: SerialNumber: syz [ 708.939823][T10280] tmpfs: Unknown parameter 'huge' [ 709.453957][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.617398][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.626293][T10278] tipc: Resetting bearer [ 709.696732][T10278] tipc: Disabling bearer [ 709.897431][ T5966] cdc_ncm 5-1:1.0: bind() failure [ 709.922971][T10298] block nbd1: shutting down sockets [ 709.947586][ T5966] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 709.957711][ T5966] cdc_ncm 5-1:1.1: bind() failure [ 709.975642][ T5966] usb 5-1: USB disconnect, device number 31 [ 710.504291][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.421702][ T5920] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 711.742555][ T55] block nbd0: Possible stuck request ffff8880261c7000: control (read@0,4096B). Runtime 240 seconds [ 711.764373][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.077729][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.092960][ T5920] usb 3-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 712.112610][ T5920] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 712.154272][ T5920] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 712.163420][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.171398][ T5920] usb 3-1: Product: syz [ 712.176465][ T5920] usb 3-1: Manufacturer: syz [ 712.181056][ T5920] usb 3-1: SerialNumber: syz [ 712.233081][ T5920] usb 3-1: config 0 descriptor?? [ 712.272447][T10344] FAULT_INJECTION: forcing a failure. [ 712.272447][T10344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.285664][ T30] audit: type=1400 audit(1762414805.319:994): avc: denied { create } for pid=10341 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 712.305879][T10344] CPU: 1 UID: 0 PID: 10344 Comm: syz.5.1096 Not tainted syzkaller #0 PREEMPT(full) [ 712.305901][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 712.305911][T10344] Call Trace: [ 712.305918][T10344] [ 712.305924][T10344] dump_stack_lvl+0x16c/0x1f0 [ 712.305954][T10344] should_fail_ex+0x512/0x640 [ 712.305979][T10344] copy_fpstate_to_sigframe+0x854/0xaf0 [ 712.306009][T10344] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 712.306040][T10344] ? x86_task_fpu+0x5f/0x90 [ 712.306063][T10344] get_sigframe+0x4a8/0x9c0 [ 712.306088][T10344] ? __pfx_get_sigframe+0x10/0x10 [ 712.306110][T10344] ? _raw_spin_unlock_irq+0x23/0x50 [ 712.306135][T10344] ? siginfo_layout+0x177/0x290 [ 712.306160][T10344] x64_setup_rt_frame+0x12e/0xcf0 [ 712.306188][T10344] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 712.306210][T10344] ? force_sig_fault+0xc4/0x100 [ 712.306237][T10344] arch_do_signal_or_restart+0x5e4/0x7c0 [ 712.306259][T10344] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 712.306296][T10344] irqentry_exit_to_user_mode+0x176/0x310 [ 712.306325][T10344] asm_exc_page_fault+0x26/0x30 [ 712.306348][T10344] RIP: 0033:0x200000000006 [ 712.306366][T10344] Code: Unable to access opcode bytes at 0x1fffffffffdc. [ 712.306374][T10344] RSP: 002b:00007fa9a07e6338 EFLAGS: 00010282 [ 712.306388][T10344] RAX: fffffffffffffff7 RBX: 00007fa99fbe5fa0 RCX: 00007fa99f98f6c9 [ 712.306399][T10344] RDX: 00007fa9a07e6340 RSI: 00007fa9a07e6470 RDI: 000000000000000d [ 712.306409][T10344] RBP: 00007fa9a07e7090 R08: 0000000000000000 R09: 0000000000000000 [ 712.306420][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.306430][T10344] R13: 00007fa99fbe6038 R14: 00007fa99fbe5fa0 R15: 00007ffcd3d4d2a8 [ 712.306455][T10344] [ 712.495575][ T30] audit: type=1400 audit(1762414805.319:995): avc: denied { setopt } for pid=10341 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 712.524264][ T30] audit: type=1400 audit(1762414805.319:996): avc: denied { write } for pid=10341 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 712.544224][ T30] audit: type=1400 audit(1762414805.369:997): avc: denied { ioctl } for pid=10346 comm="syz.3.1098" path="socket:[28925]" dev="sockfs" ino=28925 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 712.825982][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.415607][T10357] FAULT_INJECTION: forcing a failure. [ 713.415607][T10357] name failslab, interval 1, probability 0, space 0, times 0 [ 713.428425][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.1.1099 Not tainted syzkaller #0 PREEMPT(full) [ 713.428448][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 713.428458][T10357] Call Trace: [ 713.428464][T10357] [ 713.428471][T10357] dump_stack_lvl+0x16c/0x1f0 [ 713.428500][T10357] should_fail_ex+0x512/0x640 [ 713.428520][T10357] ? fs_reclaim_acquire+0xae/0x150 [ 713.428546][T10357] should_failslab+0xc2/0x120 [ 713.428566][T10357] __kmalloc_noprof+0xdd/0x880 [ 713.428590][T10357] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 713.428616][T10357] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 713.428635][T10357] tomoyo_realpath_from_path+0xc2/0x6e0 [ 713.428656][T10357] ? tomoyo_profile+0x47/0x60 [ 713.428680][T10357] tomoyo_path_number_perm+0x245/0x580 [ 713.428701][T10357] ? tomoyo_path_number_perm+0x237/0x580 [ 713.428723][T10357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 713.428765][T10357] ? find_held_lock+0x2b/0x80 [ 713.428781][T10357] ? hook_file_ioctl_common+0x145/0x410 [ 713.428803][T10357] ? __fget_files+0x20e/0x3c0 [ 713.428821][T10357] security_file_ioctl+0x9b/0x240 [ 713.428837][T10357] __x64_sys_ioctl+0xb7/0x210 [ 713.428857][T10357] do_syscall_64+0xcd/0xfa0 [ 713.428878][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.428891][T10357] RIP: 0033:0x7f7271b8f6c9 [ 713.428903][T10357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.428916][T10357] RSP: 002b:00007f7272aa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.428929][T10357] RAX: ffffffffffffffda RBX: 00007f7271de6180 RCX: 00007f7271b8f6c9 [ 713.428938][T10357] RDX: 0000200000000080 RSI: 0000000000002284 RDI: 000000000000000a [ 713.428946][T10357] RBP: 00007f7272aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 713.428953][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.428961][T10357] R13: 00007f7271de6218 R14: 00007f7271de6180 R15: 00007ffdadbe3808 [ 713.428980][T10357] [ 713.429005][T10357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 713.821299][ T5920] usb 3-1: USB disconnect, device number 24 [ 713.853568][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.932896][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.187609][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.917129][T10390] FAULT_INJECTION: forcing a failure. [ 715.917129][T10390] name failslab, interval 1, probability 0, space 0, times 0 [ 715.956160][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1105'. [ 715.966356][T10390] CPU: 1 UID: 0 PID: 10390 Comm: syz.3.1107 Not tainted syzkaller #0 PREEMPT(full) [ 715.966377][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 715.966388][T10390] Call Trace: [ 715.966394][T10390] [ 715.966400][T10390] dump_stack_lvl+0x16c/0x1f0 [ 715.966431][T10390] should_fail_ex+0x512/0x640 [ 715.966451][T10390] ? fs_reclaim_acquire+0xae/0x150 [ 715.966473][T10390] should_failslab+0xc2/0x120 [ 715.966493][T10390] __kmalloc_noprof+0xdd/0x880 [ 715.966518][T10390] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 715.966544][T10390] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 715.966563][T10390] tomoyo_realpath_from_path+0xc2/0x6e0 [ 715.966591][T10390] ? tomoyo_profile+0x47/0x60 [ 715.966616][T10390] tomoyo_path_number_perm+0x245/0x580 [ 715.966642][T10390] ? tomoyo_path_number_perm+0x237/0x580 [ 715.966671][T10390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 715.966701][T10390] ? find_held_lock+0x2b/0x80 [ 715.966746][T10390] ? find_held_lock+0x2b/0x80 [ 715.966767][T10390] ? hook_file_ioctl_common+0x145/0x410 [ 715.966797][T10390] ? __fget_files+0x20e/0x3c0 [ 715.966819][T10390] security_file_ioctl+0x9b/0x240 [ 715.966841][T10390] __x64_sys_ioctl+0xb7/0x210 [ 715.966867][T10390] do_syscall_64+0xcd/0xfa0 [ 715.966896][T10390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.966913][T10390] RIP: 0033:0x7efcb2b8f6c9 [ 715.966927][T10390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.966943][T10390] RSP: 002b:00007efcb39f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.966960][T10390] RAX: ffffffffffffffda RBX: 00007efcb2de5fa0 RCX: 00007efcb2b8f6c9 [ 715.966971][T10390] RDX: 0000200000000300 RSI: 00000000c0105502 RDI: 0000000000000003 [ 715.966981][T10390] RBP: 00007efcb39f9090 R08: 0000000000000000 R09: 0000000000000000 [ 715.966991][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.967000][T10390] R13: 00007efcb2de6038 R14: 00007efcb2de5fa0 R15: 00007ffc67d2d4e8 [ 715.967025][T10390] [ 715.967032][T10390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 716.188580][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1105'. [ 716.201806][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.210289][T10390] usb usb8: usbfs: process 10390 (syz.3.1107) did not claim interface 0 before use [ 717.417123][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.519423][ T30] audit: type=1400 audit(1762414810.569:998): avc: denied { getopt } for pid=10411 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 717.614855][ T30] audit: type=1400 audit(1762414810.589:999): avc: denied { override_creds } for pid=10411 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 717.775599][T10400] could not allocate digest TFM handle cryptd(blake2b-160) [ 718.252665][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.215132][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.261091][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.482337][ T5913] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 719.643884][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 719.663309][ T5913] usb 5-1: config 8 has an invalid interface number: 92 but max is 0 [ 719.689198][ T5913] usb 5-1: config 8 has no interface number 0 [ 719.709487][ T5913] usb 5-1: config 8 interface 92 has no altsetting 0 [ 719.737901][ T5913] usb 5-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 719.763626][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.771689][ T5913] usb 5-1: Product: syz [ 719.778342][ T5913] usb 5-1: Manufacturer: syz [ 719.791917][ T5913] usb 5-1: SerialNumber: syz [ 719.874881][T10436] binder: 10433:10436 unknown command 0 [ 719.880478][T10436] binder: 10433:10436 ioctl c0306201 200000000080 returned -22 [ 719.889559][T10436] binder: BINDER_SET_CONTEXT_MGR already set [ 719.895664][T10436] binder: 10433:10436 ioctl 4018620d 200000000040 returned -16 [ 719.992900][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.360830][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.682660][ T5906] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 720.845723][ T5906] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 720.855857][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.880644][ T5906] usb 3-1: config 0 descriptor?? [ 721.125768][ T5913] gspca_main: etoms-2.14.0 probing 102c:6251 [ 721.269257][ T5913] usb 5-1: USB disconnect, device number 32 [ 721.295578][ T5906] ath6kl: Unsupported hardware version: 0x0 [ 721.308434][ T5906] ath6kl: Failed to init ath6kl core: -22 [ 721.336652][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.363633][ T5906] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 721.380988][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.756252][ T30] audit: type=1400 audit(1762414814.619:1000): avc: denied { search } for pid=10458 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.019615][ T30] audit: type=1400 audit(1762414814.789:1001): avc: denied { search } for pid=10458 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.154614][ T30] audit: type=1400 audit(1762414814.789:1002): avc: denied { search } for pid=10458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.229387][T10441] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 722.283253][T10441] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 722.288358][ T30] audit: type=1400 audit(1762414814.789:1003): avc: denied { search } for pid=10458 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.316311][T10441] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 722.347040][T10441] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 722.364177][ T30] audit: type=1400 audit(1762414814.829:1004): avc: denied { read open } for pid=10461 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.414806][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.435645][T10441] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 722.448067][ T30] audit: type=1400 audit(1762414814.829:1005): avc: denied { getattr } for pid=10461 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.484479][T10441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 722.574547][T10441] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 722.596902][T10441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 722.602993][ T30] audit: type=1400 audit(1762414814.829:1006): avc: denied { getattr } for pid=10461 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.603036][ T30] audit: type=1400 audit(1762414815.319:1007): avc: denied { read } for pid=10469 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.603072][ T30] audit: type=1400 audit(1762414815.319:1008): avc: denied { open } for pid=10469 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.697064][T10441] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 722.731554][T10441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 722.739502][T10441] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 722.772105][T10441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 722.788056][T10441] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 722.809736][ T30] audit: type=1400 audit(1762414815.849:1009): avc: denied { add_name } for pid=10458 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.834643][ T30] audit: type=1400 audit(1762414815.849:1010): avc: denied { create } for pid=10458 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.835180][T10483] syzkaller0: entered promiscuous mode [ 722.859431][ T30] audit: type=1400 audit(1762414815.849:1011): avc: denied { write } for pid=10458 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=5564 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.909349][T10483] syzkaller0: entered allmulticast mode [ 722.929275][ T30] audit: type=1400 audit(1762414815.849:1012): avc: denied { append } for pid=10458 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=5564 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.992375][ T30] audit: type=1400 audit(1762414816.039:1013): avc: denied { remove_name } for pid=10494 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=5564 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.025698][ T30] audit: type=1400 audit(1762414816.069:1014): avc: denied { unlink } for pid=10494 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=5564 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 723.508325][T10508] tmpfs: Bad value for 'mpol' [ 723.677414][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.748846][T10441] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 723.761052][T10441] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 723.886701][T10410] usb 3-1: USB disconnect, device number 25 [ 724.040702][T10516] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1128'. [ 724.539743][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1130'. [ 724.557095][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1127'. [ 724.585829][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.810368][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.075683][T10529] netlink: 'syz.5.1128': attribute type 1 has an invalid length. [ 725.878197][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.894043][T10529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 726.858897][T10563] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1138'. [ 726.893026][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.992431][ T5928] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 727.081981][T10536] bond1: (slave veth3): Enslaving as an active interface with a down link [ 727.184212][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 727.196365][ T5928] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 727.222362][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.252748][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.269965][T10578] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 727.277648][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 727.293165][ T5928] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 727.314538][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.335410][ T5928] usb 4-1: config 0 descriptor?? [ 727.347429][ T5928] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 727.426853][ T5170] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 727.592696][T10410] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 727.752758][T10410] usb 2-1: Using ep0 maxpacket: 32 [ 727.754628][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.762855][T10410] usb 2-1: unable to get BOS descriptor or descriptor too short [ 727.812584][ T5170] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 727.832742][ T30] audit: type=1400 audit(1762414820.869:1015): avc: denied { setopt } for pid=10559 comm="syz.3.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 727.890855][ T869] usb 4-1: USB disconnect, device number 42 [ 727.903682][T10582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.923117][T10410] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 727.933482][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.950116][T10410] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 727.958171][T10582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.962569][T10410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.984890][T10410] usb 2-1: Product: ٻ⋶ᆊ펈ꏦ䟻छ툭澭﻽웡ꖖ僂엟깃롮窦꼭专㋻謥扃砲ᶶꘌ噬꒾푿衛⧛侨厸⇝曪Ệ趭㼨藸쳭め뿙䬧튄㣳Ⱐ㩊䁁遉濛夨炓㓼㹦㑿뒩콲材斕켎䀂蓥뽛䂩䢅ᐗ쭱ዢ皕Ꟃ㔙῟슘ᤆ혞榟ᜭ쏄凞㕶剭뮼羹脚熵핑髂ʍ莤女ﱦ鍻෴裗᎑ [ 728.036726][T10410] usb 2-1: Manufacturer: 搒㗮܌멹↞島漿蠽ᚶꥩ᭩⣒켎揹ᓀ톷Áમꮯ늖훍쑦롽ᅊ泥䙂䬞枬貭猚淎⩂䟭屙⍌汆ꢇ㴐⭍ꖏ肕Ϡ㡮▼寒缀坻喨䊤Ṿ韭쥆䂹쿦粠駜Ւ蘜ҁp즉ﶗᱮ遺헙綒Ⴈṧꞹ⺼␙鮲䶦⯕斯㠎９嬬ꕴϬᝦ琀휦是䏩抝칋귶ᗽ齈院꒩㒣滓᫓頋➗砟ꆝ㷧䚿㝂╁磪营ॱ쫭ᄘ [ 728.065442][T10582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.087129][ T6152] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 728.096771][T10595] FAULT_INJECTION: forcing a failure. [ 728.096771][T10595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.102629][T10410] usb 2-1: SerialNumber: 㴗೬o꽯芈䙷㑈稺Ό䏯ᠥ뺩쮜쒉飤盱咿튅흏꾡珮栏䂮㎿釋⟓닯亵Ⲙ豁趎韃箬锇ⵙ哾碑ణ̝칊伐ԥ埸첮ا䛈ꨋ荢뢴年芮脦꽼枽ⱖ鮜蜧놁琗贄虦删᳏뭦嫁侪횉嚳栓恗 [ 728.119525][T10595] CPU: 0 UID: 0 PID: 10595 Comm: syz.5.1143 Not tainted syzkaller #0 PREEMPT(full) [ 728.119544][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 728.119553][T10595] Call Trace: [ 728.119558][T10595] [ 728.119563][T10595] dump_stack_lvl+0x16c/0x1f0 [ 728.119589][T10595] should_fail_ex+0x512/0x640 [ 728.119610][T10595] _copy_from_user+0x2e/0xd0 [ 728.119630][T10595] copy_msghdr_from_user+0x98/0x160 [ 728.119650][T10595] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 728.119680][T10595] ___sys_sendmsg+0xfe/0x1d0 [ 728.119700][T10595] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.119717][T10595] ? __lock_acquire+0x622/0x1c90 [ 728.119766][T10595] __sys_sendmsg+0x16d/0x220 [ 728.119785][T10595] ? __pfx___sys_sendmsg+0x10/0x10 [ 728.119819][T10595] do_syscall_64+0xcd/0xfa0 [ 728.119842][T10595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.119856][T10595] RIP: 0033:0x7fa99f98f6c9 [ 728.119868][T10595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.119882][T10595] RSP: 002b:00007fa9a07c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.119896][T10595] RAX: ffffffffffffffda RBX: 00007fa99fbe6090 RCX: 00007fa99f98f6c9 [ 728.119906][T10595] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 728.119914][T10595] RBP: 00007fa9a07c6090 R08: 0000000000000000 R09: 0000000000000000 [ 728.119923][T10595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.119931][T10595] R13: 00007fa99fbe6128 R14: 00007fa99fbe6090 R15: 00007ffcd3d4d2a8 [ 728.119953][T10595] [ 728.598757][T10410] usb 2-1: Invalid number of CPorts: 0 [ 728.604472][ T30] audit: type=1400 audit(1762414821.659:1016): avc: denied { ioctl } for pid=10604 comm="syz.5.1144" path="socket:[29857]" dev="sockfs" ino=29857 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 728.643763][T10410] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 729.646598][ T24] net_ratelimit: 3 callbacks suppressed [ 729.646612][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.660244][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.733979][T10410] usb 2-1: USB disconnect, device number 30 [ 730.242713][T10618] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1144'. [ 731.124477][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.133105][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.274403][T10643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1153'. [ 731.413167][T10644] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 731.481957][T10644] 8021q: adding VLAN 0 to HW filter on device bond6 [ 731.494235][ T5966] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 731.564926][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1154'. [ 731.647346][T10650] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 731.685238][ T5966] usb 2-1: Using ep0 maxpacket: 16 [ 731.707591][ T5966] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 731.722751][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.758288][T10647] bond6: (slave veth13): Enslaving as an active interface with a down link [ 731.797579][ T5966] usb 2-1: config 0 descriptor?? [ 731.807871][ T5966] usb 2-1: interface 1 not found [ 731.922149][T10650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 731.982007][T10652] bond5: (slave veth9): Enslaving as an active interface with a down link [ 732.172987][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.276025][ T869] usb 2-1: USB disconnect, device number 31 [ 733.321194][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.329998][ T30] audit: type=1400 audit(1762414825.979:1017): avc: denied { map } for pid=10667 comm="syz.2.1156" path="socket:[29919]" dev="sockfs" ino=29919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 734.333572][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.471029][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.800205][T10702] sp0: Synchronizing with TNC [ 735.300676][T10695] usb usb8: usbfs: process 10695 (syz.5.1160) did not claim interface 0 before use [ 735.418000][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.839358][T10711] netlink: 'syz.2.1164': attribute type 10 has an invalid length. [ 735.847280][T10711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1164'. [ 735.856799][T10711] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 736.492554][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.772334][ T869] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 737.044445][ T869] usb 3-1: Using ep0 maxpacket: 8 [ 737.075701][ T869] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 737.092405][ T869] usb 3-1: config 2 has no interface number 0 [ 737.124071][ T869] usb 3-1: config 2 interface 31 has no altsetting 0 [ 737.394187][ T869] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 737.415634][ T869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.448634][ T869] usb 3-1: Product: syz [ 737.468195][ T869] usb 3-1: Manufacturer: syz [ 737.479052][ T869] usb 3-1: SerialNumber: syz [ 737.532619][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.544528][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.587864][T10723] could not allocate digest TFM handle cryptd(blake2b-160) [ 737.796870][T10744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 737.909334][T10747] netlink: 'syz.1.1171': attribute type 1 has an invalid length. [ 738.019126][ T869] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 738.070541][ T869] usb 3-1: USB disconnect, device number 26 [ 738.088666][ T5906] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 738.230506][T10747] 8021q: adding VLAN 0 to HW filter on device bond10 [ 738.331691][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 738.393419][ T5906] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 738.422331][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.607568][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.616908][ T5906] usb 6-1: config 0 descriptor?? [ 738.628308][T10748] bond10: (slave veth19): Enslaving as an active interface with a down link [ 738.737697][T10758] random: crng reseeded on system resumption [ 739.052598][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.079934][ T5906] usb 6-1: interface 1 not found [ 739.344191][T10762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 739.642522][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.738608][ T24] usb 6-1: USB disconnect, device number 7 [ 739.762960][T10765] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1177'. [ 739.857299][T10768] block nbd3: NBD_DISCONNECT [ 740.392296][T10784] netlink: 'syz.5.1183': attribute type 1 has an invalid length. [ 740.573080][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.652667][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.263394][T10083] block nbd0: Possible stuck request ffff8880261c7000: control (read@0,4096B). Runtime 270 seconds [ 742.348914][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.592482][ T5851] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 742.643083][T10802] could not allocate digest TFM handle cryptd(blake2b-160) [ 742.752635][ T5925] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 742.757663][ T5851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 742.768834][ T5851] usb 6-1: config 8 has an invalid interface number: 92 but max is 0 [ 742.777181][ T5851] usb 6-1: config 8 has no interface number 0 [ 742.783505][ T5851] usb 6-1: config 8 interface 92 has no altsetting 0 [ 742.793977][ T5851] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 742.804301][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.813867][ T5851] usb 6-1: Product: syz [ 742.818251][ T5851] usb 6-1: Manufacturer: syz [ 742.823324][ T5851] usb 6-1: SerialNumber: syz [ 742.912713][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 742.920491][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.930908][ T5925] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 742.940796][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.953529][ T5925] usb 4-1: config 0 descriptor?? [ 743.374953][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.403568][ T5925] magicmouse 0003:05AC:0265.0006: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 743.423115][T10819] vivid-007: ================= START STATUS ================= [ 743.430785][T10819] vivid-007: Generate PTS: true [ 743.466758][T10819] vivid-007: Generate SCR: true [ 743.479539][T10819] tpg source WxH: 320x240 (Y'CbCr) [ 743.511421][T10819] tpg field: 1 [ 743.519382][T10819] tpg crop: (0,0)/320x240 [ 743.531100][T10819] tpg compose: (0,0)/320x240 [ 743.542869][T10819] tpg colorspace: 8 [ 743.552587][T10819] tpg transfer function: 0/0 [ 743.560676][T10819] tpg Y'CbCr encoding: 0/0 [ 743.572057][T10819] tpg quantization: 0/0 [ 743.577460][T10819] tpg RGB range: 0/2 [ 743.584010][ T30] audit: type=1400 audit(1762414836.639:1018): avc: denied { relabelfrom } for pid=10818 comm="syz.4.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 743.612895][T10819] vivid-007: ================== END STATUS ================== [ 743.623879][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.666745][ T30] audit: type=1400 audit(1762414836.639:1019): avc: denied { relabelto } for pid=10818 comm="syz.4.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 743.945862][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.955003][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.963603][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.991449][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.000789][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.565672][ T5851] gspca_main: etoms-2.14.0 probing 102c:6251 [ 744.612186][T10839] FAULT_INJECTION: forcing a failure. [ 744.612186][T10839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 744.646490][ T5851] usb 6-1: USB disconnect, device number 8 [ 744.707714][ T5966] usb 4-1: USB disconnect, device number 43 [ 744.753403][T10839] CPU: 1 UID: 0 PID: 10839 Comm: syz.5.1195 Not tainted syzkaller #0 PREEMPT(full) [ 744.753424][T10839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 744.753434][T10839] Call Trace: [ 744.753440][T10839] [ 744.753446][T10839] dump_stack_lvl+0x16c/0x1f0 [ 744.753475][T10839] should_fail_ex+0x512/0x640 [ 744.753499][T10839] should_fail_alloc_page+0xe7/0x130 [ 744.753521][T10839] prepare_alloc_pages+0x3c2/0x610 [ 744.753543][T10839] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 744.753570][T10839] ? finish_task_switch.isra.0+0x221/0xc10 [ 744.753592][T10839] ? lockdep_hardirqs_on+0x7c/0x110 [ 744.753618][T10839] ? finish_task_switch.isra.0+0x221/0xc10 [ 744.753639][T10839] ? rcu_is_watching+0x12/0xc0 [ 744.753661][T10839] ? trace_sched_exit_tp+0xd1/0x120 [ 744.753679][T10839] ? __schedule+0x11a3/0x5de0 [ 744.753705][T10839] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 744.753738][T10839] ? __lock_acquire+0xb8a/0x1c90 [ 744.753768][T10839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 744.753792][T10839] ? policy_nodemask+0xea/0x4e0 [ 744.753814][T10839] alloc_pages_mpol+0x1fb/0x550 [ 744.753835][T10839] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 744.753860][T10839] alloc_pages_noprof+0x131/0x390 [ 744.753880][T10839] get_free_pages_noprof+0x10/0xb0 [ 744.753897][T10839] __pollwait+0x295/0x490 [ 744.753925][T10839] pipe_poll+0x23c/0x660 [ 744.753941][T10839] ? __pfx___pollwait+0x10/0x10 [ 744.753966][T10839] ? __pfx_pipe_poll+0x10/0x10 [ 744.753982][T10839] do_sys_poll+0x55c/0xdf0 [ 744.754016][T10839] ? __pfx_do_sys_poll+0x10/0x10 [ 744.754065][T10839] ? find_held_lock+0x2b/0x80 [ 744.754087][T10839] ? __pfx___pollwait+0x10/0x10 [ 744.754115][T10839] ? __pfx_pollwake+0x10/0x10 [ 744.754142][T10839] ? __pfx_pollwake+0x10/0x10 [ 744.754169][T10839] ? __pfx_pollwake+0x10/0x10 [ 744.754203][T10839] ? __pfx_pollwake+0x10/0x10 [ 744.754230][T10839] ? __pfx_pollwake+0x10/0x10 [ 744.754258][T10839] ? __pfx_pollwake+0x10/0x10 [ 744.754285][T10839] ? __pfx_pollwake+0x10/0x10 [ 744.754313][T10839] ? __pfx_pollwake+0x10/0x10 [ 744.754340][T10839] ? __pfx_pollwake+0x10/0x10 [ 744.754365][T10839] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 744.754385][T10839] ? set_user_sigmask+0x21b/0x2b0 [ 744.754405][T10839] ? __pfx_set_user_sigmask+0x10/0x10 [ 744.754424][T10839] ? __fget_files+0x20e/0x3c0 [ 744.754447][T10839] __x64_sys_ppoll+0x254/0x2d0 [ 744.754465][T10839] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 744.754481][T10839] ? ksys_write+0x1ac/0x250 [ 744.754496][T10839] ? __pfx_ksys_write+0x10/0x10 [ 744.754519][T10839] do_syscall_64+0xcd/0xfa0 [ 744.754547][T10839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.754565][T10839] RIP: 0033:0x7fa99f98f6c9 [ 744.754579][T10839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.754596][T10839] RSP: 002b:00007fa9a07e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 744.754613][T10839] RAX: ffffffffffffffda RBX: 00007fa99fbe5fa0 RCX: 00007fa99f98f6c9 [ 744.754624][T10839] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 744.754635][T10839] RBP: 00007fa9a07e7090 R08: 0000000000000000 R09: 0000000000000000 [ 744.754645][T10839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.754655][T10839] R13: 00007fa99fbe6038 R14: 00007fa99fbe5fa0 R15: 00007ffcd3d4d2a8 [ 744.754679][T10839] [ 745.624278][ T5928] net_ratelimit: 598 callbacks suppressed [ 745.624293][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.210226][ T30] audit: type=1400 audit(1762414839.219:1020): avc: denied { write } for pid=10858 comm="syz.4.1201" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 746.657006][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.729314][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.739506][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.746064][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.412880][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.672357][ T5851] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 747.772779][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.054495][ T5851] usb 6-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 748.072300][ T5851] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 748.110522][ T5851] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 748.144044][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.164338][ T5851] usb 6-1: Product: syz [ 748.170493][ T5851] usb 6-1: Manufacturer: syz [ 748.182710][ T5851] usb 6-1: SerialNumber: syz [ 748.191220][ T30] audit: type=1326 audit(1762414841.239:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1209" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efcb2b8f6c9 code=0x0 [ 748.199309][ T5851] usb 6-1: config 0 descriptor?? [ 748.483012][T10897] netlink: 'syz.1.1207': attribute type 10 has an invalid length. [ 748.490884][T10897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1207'. [ 748.500983][T10897] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 749.075771][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.128904][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.407330][T10902] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1212'. [ 749.692633][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.054245][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.261203][ T5928] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 752.452398][ T5851] usb 6-1: USB disconnect, device number 9 [ 752.487933][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.614974][ T5928] usb 3-1: device descriptor read/all, error -71 [ 752.765538][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.772429][ T5851] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 752.790840][T10920] SELinux: failed to load policy [ 752.944891][ T5851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 753.117187][ T5851] usb 6-1: config 8 has an invalid interface number: 92 but max is 0 [ 753.156547][ T5851] usb 6-1: config 8 has no interface number 0 [ 753.228749][T10927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1217'. [ 753.255447][ T5851] usb 6-1: config 8 interface 92 has no altsetting 0 [ 753.533383][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.635563][ T5851] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 753.658157][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.691551][ T5851] usb 6-1: Product: syz [ 753.733681][ T5851] usb 6-1: Manufacturer: syz [ 753.819786][ T5851] usb 6-1: SerialNumber: syz [ 754.042969][ T5906] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 754.212755][ T30] audit: type=1400 audit(1762414847.259:1022): avc: denied { getopt } for pid=10939 comm="syz.2.1222" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 754.571205][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 754.587090][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.599399][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.659847][T10938] could not allocate digest TFM handle cryptd(blake2b-160) [ 754.669116][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.757170][T10951] jfs: Unknown parameter 'grpquota' [ 754.765647][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.775122][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.783806][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.011859][ T5906] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 755.016731][T10948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.029548][T10948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.032660][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.045723][ T5966] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 755.060162][ T5906] usb 4-1: config 0 descriptor?? [ 755.133254][T10952] block nbd2: shutting down sockets [ 755.202629][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 755.210499][ T5966] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 755.220210][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.238389][ T5966] usb 5-1: config 0 descriptor?? [ 755.575326][ T5966] usb 5-1: interface 1 not found [ 755.735779][ T5851] gspca_main: etoms-2.14.0 probing 102c:6251 [ 755.756300][ T5906] ft260 0003:0403:6030.0007: unknown main item tag 0x7 [ 755.840287][ T5913] usb 5-1: USB disconnect, device number 33 [ 755.864531][ T5851] usb 6-1: USB disconnect, device number 10 [ 755.965030][ T5906] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 756.279696][T10966] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.287939][T10966] net_ratelimit: 2 callbacks suppressed [ 756.287952][T10966] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 756.293893][ T5906] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 756.383312][T10971] netlink: 'syz.1.1232': attribute type 10 has an invalid length. [ 756.391173][T10971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1232'. [ 756.653051][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.815769][T10971] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 757.063966][ T5906] ft260 0003:0403:6030.0007: failed to retrieve status: -71 [ 757.085693][ T5906] ft260 0003:0403:6030.0007: failed to reset I2C controller: -71 [ 757.106674][ T30] audit: type=1400 audit(1762414850.159:1023): avc: denied { setattr } for pid=10982 comm="syz.1.1234" name="controlC0" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 757.120303][ T5906] usb 4-1: USB disconnect, device number 44 [ 757.399431][T10992] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 757.477738][ T30] audit: type=1400 audit(1762414850.439:1024): avc: denied { bind } for pid=10985 comm="syz.1.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 757.532776][ T6769] Bluetooth: hci6: Frame reassembly failed (-84) [ 757.667858][ T30] audit: type=1326 audit(1762414850.589:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.2.1238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45f1b8f6c9 code=0x0 [ 757.723467][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.782771][ T30] audit: type=1400 audit(1762414850.649:1026): avc: denied { read } for pid=10993 comm="syz.2.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 757.876316][T10998] fuse: Bad value for 'fd' [ 758.021507][ T30] audit: type=1326 audit(1762414851.069:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f1b8f6c9 code=0x7ffc0000 [ 758.052335][ T30] audit: type=1326 audit(1762414851.069:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f45f1b8f6c9 code=0x7ffc0000 [ 758.081269][ T30] audit: type=1326 audit(1762414851.069:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f1b8f6c9 code=0x7ffc0000 [ 758.210493][ T30] audit: type=1326 audit(1762414851.069:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f1b8f6c9 code=0x7ffc0000 [ 758.252508][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.402364][T11005] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 758.432328][ T30] audit: type=1326 audit(1762414851.069:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10993 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f45f1b8f6c9 code=0x7ffc0000 [ 758.733650][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.772337][ T5913] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 758.816964][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.933681][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 758.943574][ T5913] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 758.977356][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 759.061861][T11012] random: crng reseeded on system resumption [ 759.284780][ T5913] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 759.302846][ T5913] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 759.312495][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.328729][ T5913] usb 6-1: config 0 descriptor?? [ 759.467363][T11015] random: crng reseeded on system resumption [ 759.534880][ T5861] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 759.629404][ T5913] hdpvr 6-1:0.0: firmware version 0x15 dated &S3;x&X^ wΖ g/ n# [ 759.772632][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.081399][ T5913] hdpvr 6-1:0.0: Could not setup controls [ 760.093605][ T5913] hdpvr 6-1:0.0: registering videodev failed [ 760.112761][ T5913] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 760.123254][ T5913] usb 6-1: USB disconnect, device number 11 [ 760.137698][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 760.137710][ T30] audit: type=1400 audit(1762414853.189:1037): avc: denied { create } for pid=11025 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 760.330795][T11035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'. [ 760.492347][ T5928] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 760.712421][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 761.100727][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.129570][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 761.158246][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.254936][ T5928] usb 2-1: config 0 descriptor?? [ 761.262215][ T5928] usb 2-1: interface 1 not found [ 761.852381][ T5913] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 762.172861][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.605899][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.966657][T11054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1252'. [ 762.984342][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 763.075412][T11056] binder: 11051:11056 unknown command 0 [ 763.081000][T11056] binder: 11051:11056 ioctl c0306201 200000000080 returned -22 [ 763.094132][T11056] binder: BINDER_SET_CONTEXT_MGR already set [ 763.100136][T11056] binder: 11051:11056 ioctl 4018620d 200000000040 returned -16 [ 763.471168][ T5928] usb 2-1: USB disconnect, device number 32 [ 763.481527][ T5913] usb 3-1: config 8 has an invalid interface number: 92 but max is 0 [ 763.498289][ T5913] usb 3-1: config 8 has no interface number 0 [ 763.504673][ T5913] usb 3-1: config 8 interface 92 has no altsetting 0 [ 763.517294][ T5913] usb 3-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 763.526770][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.536832][ T5913] usb 3-1: Product: syz [ 763.541072][ T5913] usb 3-1: Manufacturer: syz [ 763.547990][ T5913] usb 3-1: SerialNumber: syz [ 763.574390][T11057] netlink: 'syz.3.1252': attribute type 1 has an invalid length. [ 763.620444][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.750470][T11057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 764.648539][T11066] random: crng reseeded on system resumption [ 764.986703][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.349764][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.375602][T11059] bond4: (slave veth7): Enslaving as an active interface with a down link [ 765.422456][T11068] block nbd1: shutting down sockets [ 765.579496][ T5913] gspca_main: etoms-2.14.0 probing 102c:6251 [ 765.654754][ T5906] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 765.675025][ T5913] usb 3-1: USB disconnect, device number 29 [ 765.775451][T11080] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 765.883504][T11086] bond11: entered promiscuous mode [ 765.888646][T11086] bond11: entered allmulticast mode [ 765.907867][ T5906] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 765.927638][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.990469][ T5906] usb 6-1: config 0 descriptor?? [ 765.999775][T11086] 8021q: adding VLAN 0 to HW filter on device bond11 [ 766.019744][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.246452][T11080] bridge3: entered promiscuous mode [ 766.273856][T11080] bridge3: entered allmulticast mode [ 766.921976][ T9510] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 767.013975][T11080] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 767.046151][ T5906] kaweth 6-1:0.0: Firmware present in device. [ 767.052985][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.125382][ T9510] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 767.199571][ T5906] kaweth 6-1:0.0: Statistics collection: 0 [ 767.207289][ T5906] kaweth 6-1:0.0: Multicast filter limit: 0 [ 767.238928][ T5906] kaweth 6-1:0.0: MTU: 0 [ 767.252784][ T5906] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 767.989376][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.018548][ T5906] kaweth 6-1:0.0: kaweth interface created at eth1 [ 768.038494][ T30] audit: type=1400 audit(1762414861.069:1038): avc: denied { bind } for pid=11099 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 768.068948][ T5906] usb 6-1: USB disconnect, device number 12 [ 768.100002][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.121818][ T30] audit: type=1400 audit(1762414861.069:1039): avc: denied { node_bind } for pid=11099 comm="syz.1.1265" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 768.412690][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.424551][ T30] audit: type=1400 audit(1762414861.449:1040): avc: denied { ioctl } for pid=11102 comm="syz.4.1267" path="socket:[33077]" dev="sockfs" ino=33077 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 768.575791][ T5966] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 769.412994][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.484223][ T5966] usb 3-1: unable to get BOS descriptor or descriptor too short [ 769.797601][ T5966] usb 3-1: config 8 has an invalid interface number: 92 but max is 0 [ 769.826156][ T5966] usb 3-1: config 8 has no interface number 0 [ 769.880382][ T5966] usb 3-1: config 8 interface 92 has no altsetting 0 [ 769.937238][ T5966] usb 3-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 769.955142][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.969277][ T5966] usb 3-1: Product: syz [ 769.984772][ T5966] usb 3-1: Manufacturer: syz [ 769.993909][ T5966] usb 3-1: SerialNumber: syz [ 770.033567][ T5925] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 770.492702][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.497054][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 770.524979][ T5925] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 770.572761][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.585013][ T869] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 770.619441][ T5925] usb 2-1: config 0 descriptor?? [ 770.636229][ T5925] usb 2-1: interface 1 not found [ 770.755110][ T869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 770.767164][ T869] usb 6-1: config 6 has an invalid interface number: 200 but max is 0 [ 770.775839][ T869] usb 6-1: config 6 has no interface number 0 [ 770.782038][ T869] usb 6-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 771.201636][ T869] usb 6-1: config 6 interface 200 has no altsetting 0 [ 771.212049][ T869] usb 6-1: string descriptor 0 read error: -22 [ 771.218923][ T869] usb 6-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 771.228942][ T869] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 771.385181][ T869] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 771.417122][ T24] usb 2-1: USB disconnect, device number 33 [ 771.455104][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.532465][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.629044][ T5966] gspca_main: etoms-2.14.0 probing 102c:6251 [ 771.636204][ T869] dvb-usb: bulk message failed: -71 (3/0) [ 771.978024][ T869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 772.185970][ T869] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 772.240471][T11162] netlink: 'syz.2.1276': attribute type 10 has an invalid length. [ 772.248649][T11162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1276'. [ 772.259350][T11162] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 772.658256][ T55] block nbd0: Possible stuck request ffff8880261c7000: control (read@0,4096B). Runtime 300 seconds [ 772.669950][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.718872][ T869] usb 6-1: media controller created [ 772.754554][ T869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 772.768877][ T5966] usb 3-1: USB disconnect, device number 30 [ 772.800041][ T869] dvb-usb: bulk message failed: -71 (6/0) [ 772.811942][ T869] dvb-usb: bulk message failed: -71 (6/0) [ 772.835387][ T869] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 772.967136][ T869] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 773.068731][ T30] audit: type=1400 audit(1762414866.119:1041): avc: denied { audit_read } for pid=11173 comm="syz.2.1280" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 773.680743][ T869] dvb-usb: schedule remote query interval to 150 msecs. [ 773.692693][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.720611][T11185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1281'. [ 773.930483][ T869] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 774.112521][ T24] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 774.216312][ T5925] dvb-usb: bulk message failed: -71 (1/0) [ 774.216372][ T5925] dvb-usb: error while querying for an remote control event. [ 774.282842][ T869] usb 6-1: USB disconnect, device number 13 [ 774.339882][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 774.339899][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.339910][ T24] usb 5-1: Product: syz [ 774.339919][ T24] usb 5-1: Manufacturer: syz [ 774.339927][ T24] usb 5-1: SerialNumber: syz [ 774.341107][ T24] usb 5-1: config 0 descriptor?? [ 774.464321][ T869] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 774.495446][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.732770][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.758262][T11185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1281'. [ 774.787567][ T24] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 774.844732][ T24] airspy 5-1:0.0: Could not detect board [ 774.934760][T11212] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1285'. [ 775.036006][ T24] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 775.049015][ T24] usb 5-1: USB disconnect, device number 34 [ 775.603624][ T5928] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 775.772710][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.912368][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 775.936585][ T5928] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 775.945934][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1292'. [ 775.991021][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.017425][ T5928] usb 4-1: config 0 descriptor?? [ 776.142528][ T5913] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 776.406598][ T5928] usb 4-1: interface 1 not found [ 776.466196][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 776.479373][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 776.491190][ T5913] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 776.507277][T11233] kvm: pic: single mode not supported [ 776.507961][T11233] kvm: pic: non byte write [ 776.518199][T11233] kvm: pic: non byte write [ 776.522855][T11233] kvm: pic: non byte write [ 776.527286][T11233] kvm: pic: non byte write [ 776.536475][ T5913] usb 3-1: can't read configurations, error -71 [ 776.543326][T11233] kvm: pic: non byte read [ 776.547753][T11233] kvm: pic: non byte write [ 776.552344][T11233] kvm: pic: non byte write [ 776.557900][T11233] kvm: pic: non byte read [ 776.813069][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.832564][ T24] usb 4-1: USB disconnect, device number 45 [ 776.919511][T11239] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 776.919511][T11239] program syz.1.1296 not setting count and/or reply_len properly [ 777.468943][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.477759][ T7919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.486336][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.502553][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.552442][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.487692][ T5913] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 778.826359][ T5913] usb 3-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 778.934825][ T5851] net_ratelimit: 1 callbacks suppressed [ 778.934841][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.949574][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 779.215372][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 779.516874][ T5913] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 779.577034][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.641189][ T5913] usb 3-1: Product: syz [ 779.644430][T11239] syz.1.1296 (11239): drop_caches: 2 [ 779.652312][ T5913] usb 3-1: Manufacturer: syz [ 779.707765][T11266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1303'. [ 779.762344][ T5913] usb 3-1: SerialNumber: syz [ 779.858010][T11268] netlink: 'syz.4.1303': attribute type 1 has an invalid length. [ 779.953957][ T5913] usb 3-1: config 0 descriptor?? [ 780.179050][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.584611][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.612449][T10410] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 780.737948][T11268] 8021q: adding VLAN 0 to HW filter on device bond7 [ 780.824938][T10410] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 780.865891][T10410] usb 2-1: config 0 has no interface number 0 [ 780.881356][T10410] usb 2-1: New USB device found, idVendor=05d1, idProduct=3011, bcdDevice=c7.71 [ 780.890853][T10410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.900097][T10410] usb 2-1: Product: syz [ 781.005213][T10410] usb 2-1: Manufacturer: syz [ 781.009841][T10410] usb 2-1: SerialNumber: syz [ 781.024284][T10410] usb 2-1: config 0 descriptor?? [ 781.096158][T10410] ftdi_sio 2-1:0.45: FTDI USB Serial Device converter detected [ 781.205448][T10410] ftdi_sio ttyUSB0: unknown device type: 0xc771 [ 781.215487][T11272] bond7: (slave veth15): Enslaving as an active interface with a down link [ 781.224725][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.248073][T10410] usb 2-1: USB disconnect, device number 34 [ 781.274246][T10410] ftdi_sio 2-1:0.45: device disconnected [ 781.316490][T11283] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 781.580603][T11286] infiniband syz2: set down [ 781.586192][T11286] infiniband syz2: added ipvlan0 [ 781.592176][T11286] syz2: rxe_create_cq: returned err = -12 [ 781.598170][T11286] infiniband syz2: Couldn't create ib_mad CQ [ 781.604403][T11286] infiniband syz2: Couldn't open port 1 [ 781.627561][T11286] RDS/IB: syz2: added [ 781.631790][T11286] smc: adding ib device syz2 with port count 1 [ 781.638319][T11286] smc: ib device syz2 port 1 has no pnetid [ 782.342183][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.394503][ T5913] usb 3-1: USB disconnect, device number 33 [ 782.708305][T11302] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 782.742619][ T5851] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 783.381440][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.397255][ T6769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.407262][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.429907][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.517316][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1314'. [ 783.542945][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 783.802413][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.884121][T11311] netlink: 'syz.5.1314': attribute type 1 has an invalid length. [ 783.975362][T11311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 784.036426][ T5851] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 784.062036][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.074374][ T5851] usb 2-1: config 0 descriptor?? [ 784.092845][ T5851] usb 2-1: interface 1 not found [ 784.124146][T11316] input: syz1 as /devices/virtual/input/input16 [ 784.546992][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.638928][T11313] bond2: (slave veth5): Enslaving as an active interface with a down link [ 784.820956][ T5851] usb 2-1: USB disconnect, device number 35 [ 785.009678][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1322'. [ 785.132493][ T31] INFO: task syz.0.839:9338 blocked for more than 143 seconds. [ 785.140055][ T31] Not tainted syzkaller #0 [ 785.153655][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 785.163505][ T31] task:syz.0.839 state:D stack:26936 pid:9338 tgid:9337 ppid:5859 task_flags:0x400140 flags:0x00080002 [ 785.177157][ T31] Call Trace: [ 785.180471][ T31] [ 785.185707][ T31] __schedule+0x1190/0x5de0 [ 785.190484][ T31] ? look_up_lock_class+0x6b/0x150 [ 785.199753][ T31] ? __lock_acquire+0x622/0x1c90 [ 785.206517][ T31] ? __pfx___schedule+0x10/0x10 [ 785.211591][ T31] ? find_held_lock+0x2b/0x80 [ 785.309379][ T31] ? schedule+0x2d7/0x3a0 [ 785.316423][ T31] ? bdev_open+0x41a/0xe40 [ 785.323637][ T31] schedule+0xe7/0x3a0 [ 785.329958][ T31] schedule_preempt_disabled+0x13/0x30 [ 785.335790][ T31] __mutex_lock+0x818/0x1060 [ 785.340402][ T31] ? bdev_open+0x41a/0xe40 [ 785.350582][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 785.355689][ T31] ? bdev_open+0x41a/0xe40 [ 785.360130][ T31] bdev_open+0x41a/0xe40 [ 785.364666][ T31] ? iput+0x35/0x40 [ 785.368476][ T31] blkdev_open+0x34e/0x4f0 [ 785.372970][ T31] do_dentry_open+0x982/0x1530 [ 785.378074][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 785.385815][ T31] vfs_open+0x82/0x3f0 [ 785.389949][ T31] path_openat+0x1de4/0x2cb0 [ 785.394897][ T31] ? __pfx_path_openat+0x10/0x10 [ 785.399834][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 785.404828][ T31] do_filp_open+0x20b/0x470 [ 785.409339][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 785.414435][ T31] ? alloc_fd+0x471/0x7d0 [ 785.418763][ T31] do_sys_openat2+0x11b/0x1d0 [ 785.423741][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 785.428939][ T31] ? __fput+0x68d/0xb70 [ 785.433129][ T31] __x64_sys_openat+0x174/0x210 [ 785.437990][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 785.443387][ T31] do_syscall_64+0xcd/0xfa0 [ 785.447893][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.454149][ T31] RIP: 0033:0x7f9fbd58df10 [ 785.458584][ T31] RSP: 002b:00007f9fbe385b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 785.467052][ T31] RAX: ffffffffffffffda RBX: 0000000000000200 RCX: 00007f9fbd58df10 [ 785.475056][ T31] RDX: 0000000000000200 RSI: 00007f9fbe385c10 RDI: 00000000ffffff9c [ 785.483256][ T31] RBP: 00007f9fbe385c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 785.491236][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 785.499328][ T31] R13: 00007f9fbd7e6038 R14: 00007f9fbd7e5fa0 R15: 00007ffc7c3192b8 [ 785.507417][ T31] [ 785.510586][ T31] [ 785.510586][ T31] Showing all locks held in the system: [ 785.518653][ T31] 1 lock held by khungtaskd/31: [ 785.523557][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 785.533907][ T31] 2 locks held by getty/5579: [ 785.538613][ T31] #0: ffff88814d8bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 785.548787][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 785.559075][ T31] 6 locks held by kworker/1:1/5851: [ 785.564388][ T31] #0: ffff888143eed148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 785.575493][ T31] #1: ffffc90003a97d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 785.586749][ T31] #2: ffff888145347198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 785.595753][ T31] #3: ffff888029442518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 785.605987][ T31] #4: ffff88802928d468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 785.622341][ T31] #5: ffffffff8f6af9b0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1cb0 [ 785.624553][ T5851] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 785.633223][ T31] 3 locks held by kworker/u8:5/5957: [ 785.650188][ T31] 1 lock held by udevd/7016: [ 785.656055][ T31] #0: ffff88802612c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 785.662877][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.673707][ T31] 1 lock held by syz.0.839/9338: [ 785.679075][ T31] #0: ffff88802612c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 785.688577][ T31] 2 locks held by syz.3.1322/11340: [ 785.699136][ T31] #0: ffffffff908430a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 785.708936][ T31] #1: ffffffff8e3cfbc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 785.719027][ T31] [ 785.721417][ T31] ============================================= [ 785.721417][ T31] [ 785.735213][ T31] NMI backtrace for cpu 0 [ 785.735225][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 785.735244][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 785.735254][ T31] Call Trace: [ 785.735259][ T31] [ 785.735266][ T31] dump_stack_lvl+0x116/0x1f0 [ 785.735298][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 785.735319][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 785.735344][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 785.735367][ T31] watchdog+0xf3f/0x1170 [ 785.735393][ T31] ? rcu_is_watching+0x12/0xc0 [ 785.735415][ T31] ? __pfx_watchdog+0x10/0x10 [ 785.735434][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 785.735461][ T31] ? __kthread_parkme+0x19e/0x250 [ 785.735486][ T31] ? __pfx_watchdog+0x10/0x10 [ 785.735507][ T31] kthread+0x3c5/0x780 [ 785.735524][ T31] ? __pfx_kthread+0x10/0x10 [ 785.735542][ T31] ? rcu_is_watching+0x12/0xc0 [ 785.735563][ T31] ? __pfx_kthread+0x10/0x10 [ 785.735580][ T31] ret_from_fork+0x675/0x7d0 [ 785.735595][ T31] ? __pfx_kthread+0x10/0x10 [ 785.735611][ T31] ret_from_fork_asm+0x1a/0x30 [ 785.735647][ T31] [ 785.735653][ T31] Sending NMI from CPU 0 to CPUs 1: [ 785.856636][ C1] NMI backtrace for cpu 1 [ 785.856649][ C1] CPU: 1 UID: 0 PID: 5957 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 785.856666][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 785.856675][ C1] Workqueue: iou_exit io_ring_exit_work [ 785.856697][ C1] RIP: 0010:arch_stack_walk+0x73/0x100 [ 785.856714][ C1] Code: 00 49 8b b6 80 00 00 00 4c 89 ef 2e e8 06 34 9d 1e 84 c0 74 50 49 8b 8e 98 00 00 00 4c 89 f2 4c 89 fe 48 89 df e8 dd 57 09 00 <8b> 95 70 ff ff ff 85 d2 75 21 eb 2f 4c 89 ef 2e e8 dc 33 9d 1e 84 [ 785.856727][ C1] RSP: 0018:ffffc900054af618 EFLAGS: 00000292 [ 785.856737][ C1] RAX: 1ffff92000a95eca RBX: ffffc900054af618 RCX: ffffc900054af6b0 [ 785.856746][ C1] RDX: ffffc900054b0000 RSI: ffffffff8da0571e RDI: ffff888030170484 [ 785.856755][ C1] RBP: ffffc900054af6a8 R08: 0000000000000001 R09: 0000000000000000 [ 785.856763][ C1] R10: 0000000000000000 R11: 00000000000062dd R12: ffffffff81a80530 [ 785.856772][ C1] R13: ffffc900054af6d8 R14: 0000000000000000 R15: ffff888030170000 [ 785.856781][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 785.856795][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 785.856804][ C1] CR2: 00005555706355c8 CR3: 0000000027df6000 CR4: 00000000003526f0 [ 785.856813][ C1] Call Trace: [ 785.856817][ C1] [ 785.856825][ C1] ? stack_trace_save+0x8e/0xc0 [ 785.856845][ C1] stack_trace_save+0x8e/0xc0 [ 785.856862][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 785.856881][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 785.856901][ C1] kasan_save_stack+0x33/0x60 [ 785.856930][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 785.856947][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 785.856967][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 785.856984][ C1] kmem_cache_free+0x171/0x6c0 [ 785.856995][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 785.857012][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 785.857031][ C1] __io_req_caches_free+0x19e/0x5c0 [ 785.857047][ C1] io_ring_exit_work+0x387/0x10f0 [ 785.857065][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 785.857081][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 785.857098][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 785.857118][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 785.857138][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 785.857162][ C1] ? rcu_is_watching+0x12/0xc0 [ 785.857179][ C1] process_one_work+0x9cf/0x1b70 [ 785.857198][ C1] ? __pfx_process_one_work+0x10/0x10 [ 785.857214][ C1] ? assign_work+0x1a0/0x250 [ 785.857227][ C1] worker_thread+0x6c8/0xf10 [ 785.857245][ C1] ? __pfx_worker_thread+0x10/0x10 [ 785.857259][ C1] kthread+0x3c5/0x780 [ 785.857271][ C1] ? __pfx_kthread+0x10/0x10 [ 785.857284][ C1] ? rcu_is_watching+0x12/0xc0 [ 785.857300][ C1] ? __pfx_kthread+0x10/0x10 [ 785.857313][ C1] ret_from_fork+0x675/0x7d0 [ 785.857324][ C1] ? __pfx_kthread+0x10/0x10 [ 785.857336][ C1] ret_from_fork_asm+0x1a/0x30 [ 785.857359][ C1] [ 786.197479][ T5851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 786.206263][ T5851] usb 6-1: config 8 has an invalid interface number: 92 but max is 0 [ 786.214622][ T5851] usb 6-1: config 8 has no interface number 0 [ 786.220694][ T5851] usb 6-1: config 8 interface 92 has no altsetting 0 [ 786.230317][ T5851] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 786.239405][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.247426][ T5851] usb 6-1: Product: syz [ 786.251567][ T5851] usb 6-1: Manufacturer: syz [ 786.256173][ T5851] usb 6-1: SerialNumber: syz [ 786.733825][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.812415][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.773809][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.012456][ T5851] gspca_main: etoms-2.14.0 probing 102c:6251 [ 788.041525][ T5851] usb 6-1: USB disconnect, device number 14 [ 788.813071][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.972796][ T7919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.983291][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.991899][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.853013][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.865913][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.874519][ T9510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.883087][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.891456][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.894039][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.100757][ T5185] udevd[5185]: worker [7016] /devices/virtual/block/nbd0 timeout; kill it [ 791.109448][ T5185] udevd[5185]: seq 13715 '/devices/virtual/block/nbd0' killed [ 791.934289][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.972899][ T869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.980990][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.013263][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.056145][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog