last executing test programs: 18m16.941996151s ago: executing program 3 (id=84): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = gettid() timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x1, @tid=r1}, &(0x7f0000bbdffc)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) read(0xffffffffffffffff, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x100) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r5 = getpid() syz_pidfd_open(r5, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffff0015ff0180c2000003089745000700006600000011907800000000014c20000c901f3fc1eb6f6d47363ff35d9dbd780100000097316ee5e4e2f06c3935e04e818571815f434213b2b6e6557ef8b7ef0ad3dcd221f6093cafd38eff8075592b5029fd0e4749cac1f8ea30b5b7f06bda8831a06b1d7c1a2a3f36f801b2e41c40dc2fa315c3ea8f6f1b1f0a3af1640e00002f2fc71d45abb1f4604723f49c9b0eaba49a477d92b2cff66259584375242baa2820aa3b3dc2e3e9fcf05aa9d226130874e309006343931ab22a4e62882600d1a1065681f838f8f3dc66dd947f946e87590ac415a66fcc2a1bc5"], 0x0) 18m15.881704939s ago: executing program 3 (id=85): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r2, 0x9, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000400)=""/137, 0x89, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000a80)={0x2, 0x0, {&(0x7f0000000900)=""/145, 0x91, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000002dc0)={0x1, {&(0x7f0000000640)=""/144, 0x90, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xac2f}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000080)) 18m15.738641952s ago: executing program 3 (id=86): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000840)={{0x0, 0x5}, {0x10, 0xd7}, 0x1, 0x2, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000040)={0x2, 0x60}) syz_clone(0x2001c00, &(0x7f0000000080)="e3d721493ec98124953f7e7d4fb14656d79f2ce34bf722f2ce82149e75d4cf71245cab15ce20a7f0194845457e14f274ca9120611d8f7e10ad62b73a685693ab530cdb7a49c97ecba346174fe66f6fd70b403f6680e9f6769e800016ca28c0c2dc291a5e59e26f8d33c04ce4f75eaf64c5b8e9f7b85cee7972295dde261f7d64c5a54aedb84e717bbacfe54bc4587499235e57f1057244a5e63f745e7d1e6e38b5dce09b5ef4a481df7859b95f9df2cd0d11e07edfbc13ae7615336c0c6499402a60d5b6961ca466eb6f594599a23047f76c25cd992042a16a765af91ac975f6e430cff121bc6eef584350800d", 0xed, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="ef35581ab889c63ad2a0c3594a8f4772015953645817") 18m15.641789313s ago: executing program 3 (id=88): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) migrate_pages(0x0, 0x9, &(0x7f00000045c0)=0xeeb2, &(0x7f0000004600)=0xcc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000040)={0x30, r8, 0x0, 0x0, 0x0, 0x40000, 0x2b2, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) 18m13.756384817s ago: executing program 3 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="1c00000076001f030000000000000000080000000056760004000d80"], 0x1c}], 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x3, 0x0, 0xff, 0x1, 0x9, 0xd}, 0x20) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) poll(&(0x7f0000000100)=[{r2, 0x6826}], 0x1, 0xd57) poll(0x0, 0x0, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r7, @ANYBLOB="2c0030800500020009000000140004000159d3da07000000c800004e8d16d69d099f5d800801010002000000"], 0x48}}, 0x8004014) r8 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086d04d0348bcb388c93c2000000000001090224000100008000090400000903000100092104000601222b00090581"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) writev(r9, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="474961c530d1c1f96d78fa03031ca913d0dca23872fe9516b4f1e9e0a5cada5d69fc23e11285402a397f54f146adfa6e3621177446dbe04d2321cb28336949fdd8339d77532d9fb9f9bfea3aca66687de2a1909684801ce30cdf5ffb", @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r12, @ANYBLOB="38002f8008000100030000001c0002000203aaaaaaaaaaaa20000380140003800600010001000000080002"], 0x54}}, 0x4800) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001d543eaef316c3b2b9c9a43ce852dc6ea410bda2d2a68bf40705f77d522cfe05d6c15eb84c9b463df1223bb15d0f7c909a748ccaf848c7967bc86f1ee82514653a7eee392a9d47cda640101711e1f8595e8d3fb474b849f3cbb79a921a03d2a86d6b23c68af9ad38fb80322b716307e66a71ad193339b736383782643625687870d8371768657bebec6d981fe841e2e53b400674e3dbc7b1eb319dc4db7935d029680618d01a6e5f443aaeb5c857", @ANYRES16=r6, @ANYBLOB="200029bd7000fbdbdf25160000000c00060002000000000000000c000600020000000000000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="0c0006000300000000000000"], 0x48}}, 0x14) write$sndseq(r9, &(0x7f0000000580)=[{0xa, 0x4, 0x2, 0x0, @tick=0x1000, {0x3, 0x6}, {0x6, 0x7}, @raw8={"a2d7665fb1e4039db0915a95"}}, {0x5, 0x4, 0x3, 0x2, @time={0x7, 0xfffffffb}, {0x10, 0x8f}, {0x4c, 0x2}, @raw8={"5248329a5e921e9dfcc1fc72"}}, {0x5, 0x2, 0xb, 0x8, @time={0x4, 0x3}, {0xf, 0xd2}, {0x94, 0x4f}, @ext={0xc2, &(0x7f0000000480)="1b97cc8a6a87a9dc738017cb0496379c7fd1ec46bae97849c7b943344005bf3027ad04772cddfc63da13ac0227d2de5133cb99a312d78907cf23872c41c413841e80afb9d7c13479762a91022596dd06e188e89e75b9955486bcb3d9b8a511e9311683d5ace6e5d5ab934d5b2f0c0b9f795d15859c806acd37d0bd8ccd2076f7f7e65146ae6757ce57d9257a3c32787124dc4c14e60f57d044802e4000e4e74cd4ba4bc05330f06c05b47b6d283277324d77c09acc93cbea5b6e9149253797ce1d53"}}], 0x54) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r13, 0x10c, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d1c28bd48f8f05d0000120000f708000300", @ANYRES32=r4, @ANYBLOB="0a000600505050505050000010009d00200000000200fcff06000600"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 18m11.92175352s ago: executing program 3 (id=94): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0xf000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 18m11.387741643s ago: executing program 32 (id=94): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0xf000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 15m58.652315704s ago: executing program 2 (id=532): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1d, 0x800, 0x3000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x62) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}]}) syz_emit_vhci(0x0, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getrlimit(0x0, &(0x7f00000000c0)) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) fstat(r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) 15m57.995960221s ago: executing program 2 (id=537): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, 0x0, 0x0) 15m57.365677352s ago: executing program 2 (id=540): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4506db00", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x10004000) syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc01c5868, &(0x7f0000000100)={r3, &(0x7f0000000000)='\x00', 0x200000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0xfffffff9]}, {0xa, 0x9, 0x7, 0x6}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x9}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000040601010000000000000000030000050500010007000000b450f7c0d008df52988ec0472e3e1b7b4c0792424480c425e94557162bc252f84e8a69bff8644653cb7d6ccf231d3e7b3540600f56538bf1"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4506db00", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x10004000) (async) syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc01c5868, &(0x7f0000000100)={r3, &(0x7f0000000000)='\x00', 0x200000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0xfffffff9]}, {0xa, 0x9, 0x7, 0x6}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x9}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000040601010000000000000000030000050500010007000000b450f7c0d008df52988ec0472e3e1b7b4c0792424480c425e94557162bc252f84e8a69bff8644653cb7d6ccf231d3e7b3540600f56538bf1"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)) (async) 15m56.339756972s ago: executing program 2 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2165098, 0x0) mount$tmpfs(0x85860100, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) 15m56.105756287s ago: executing program 2 (id=545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchmod(r0, 0x10) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000500)=0x6e, 0x400) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) r3 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x980915, 0xfffffffe, '\x00', @p_u8=0x0}}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) close(r4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000080)={0x3, 'veth1_to_hsr\x00', {0x57e}, 0xf662}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x5e1f01, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) 15m55.754081377s ago: executing program 2 (id=548): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x2a, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC], 0x0) syz_usb_ep_read(r1, 0x2, 0x2c, &(0x7f0000000000)=""/44) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xcac83, 0x3f) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) 15m55.418203408s ago: executing program 33 (id=548): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x2a, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC], 0x0) syz_usb_ep_read(r1, 0x2, 0x2c, &(0x7f0000000000)=""/44) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xcac83, 0x3f) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) 15m1.073726605s ago: executing program 1 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f57586b3"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xdc0}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x9, 0xeb}}}}}]}}]}}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x105100) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xffff, 0xfffffffc, 0x0, {}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x700, 0x101, 0x8cb8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x68}}, 0x400c004) syz_emit_vhci(0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0xa54, 0xe, 0x4, 0x10, 0x4, {0x0, 0xea60}, {0x2, 0x1, 0x7, 0x4, 0x8, 0x0, "8b7e7c18"}, 0xe36, 0x4, {0xffffffffffffffff}}) close$fd_v4l2_buffer(r7) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x2000000, &(0x7f0000006540)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x32, 0x2d, 0x32, 0x3a, 0x30, 0x2f]}}}, 0x4e}]}) 14m57.957254208s ago: executing program 1 (id=761): r0 = syz_io_uring_setup(0x370a, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2bf}, &(0x7f0000000500), &(0x7f0000000380), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)='F', 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000020, 0x0, 0x1}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) fanotify_init(0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000004540)={0x9, 0xc, 0x3, 0x113, 0x5, 0x2, 0x2, 0xd4}, 0x0, 0x0, &(0x7f0000004600), 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x845}, 0x24008004) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_ep_read(0xffffffffffffffff, 0x5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 14m56.445686819s ago: executing program 1 (id=767): openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xfec00000}) 14m56.22979721s ago: executing program 1 (id=769): socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000300)=0x0) r1 = syz_usbip_server_init(0x1) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902"], 0x0) write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x35) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b40), 0x0, 0xffffffff, r3}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x989042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 14m53.041471328s ago: executing program 1 (id=774): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0xcb) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x28) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16], 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x24800) close(r4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x8, @remote, 0x4}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r10, 0x1, &(0x7f0000000300)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r9, 0x0}]) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000002c0)={0x24, r11, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x48004) splice(r8, 0x0, r7, 0x0, 0x8004, 0x1) writev(r4, &(0x7f0000003700)=[{&(0x7f00000001c0)="37b38ae25f3db5a4b0181fc5ee863987d294b52acdbcb5537cfb5d449e4148b44e52b44963ba79e0c884b1689b525a072a20888007cb63dca7536bc121a7524c61895842e9f342864e119a6728d1fc6fbdf0d72b5f", 0x55}, {&(0x7f0000000380)="5b9a0afccbbb6e09cd27b87990ae6e74f6105704546eaaba60bf466a91649dba0ffb5634683acfde204ddbe28d36d9b1585b6234cdaba4171e16a861dd4be4a4310c8f02098676374e2d07bea7e74ee077660e4f747e1dfe7eb0296cbaee603d01449326124616f13cf79499e80bfbff4a2c7b37ca198ee114c8ebee614a507c93040c88a9067289ce4f0446bdee5e6ec785b219217b49512bdc227252567126a02a333413cf2b407791eb013a3efd8240546a9853e2472dff", 0xb9}, {&(0x7f0000000440)="5107699e24023f6712a2794e85b6b90518", 0x11}, {&(0x7f0000000480)="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", 0x460}], 0x4) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="2d8228bd7000ffdbdf250400000014000600fe80000000000000000000000000002e"], 0x28}, 0x1, 0x0, 0x0, 0x48805}, 0x64040) 14m50.945868459s ago: executing program 1 (id=777): r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) io_uring_setup(0x7d98, 0x0) r2 = open(0x0, 0x345142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000005) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r5 = msgget(0x1, 0x200) msgctl$MSG_STAT_ANY(r5, 0xd, &(0x7f0000001180)=""/150) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000004c0)={0x9, 0x10001, {}, {0xee00}, 0xfffffffffffffffe, 0x3}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0xc) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000700)={{0x0, r6, 0x0, r7, r8, 0x1c2, 0x3}, 0x0, 0x0, 0x2, 0x949, 0x730f, 0x9, 0x300000000, 0x5, 0x24b2, 0x7, r9, r10}) r11 = socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000340), 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 14m50.573980343s ago: executing program 34 (id=777): r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) io_uring_setup(0x7d98, 0x0) r2 = open(0x0, 0x345142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000005) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r5 = msgget(0x1, 0x200) msgctl$MSG_STAT_ANY(r5, 0xd, &(0x7f0000001180)=""/150) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000004c0)={0x9, 0x10001, {}, {0xee00}, 0xfffffffffffffffe, 0x3}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0xc) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000700)={{0x0, r6, 0x0, r7, r8, 0x1c2, 0x3}, 0x0, 0x0, 0x2, 0x949, 0x730f, 0x9, 0x300000000, 0x5, 0x24b2, 0x7, r9, r10}) r11 = socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000340), 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 12m4.3180822s ago: executing program 0 (id=1369): sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_dev$midi(0x0, 0x2, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2003, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x80000000, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x1ff, 0x1, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x9, 0x6f, 0x8, 0x9, 0x1, 0x9001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x7, 0x5], [0x1, 0x2001e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0xa, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xc01, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1040, 0x0, 0x10, 0x4, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x1, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffc, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5da, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x11, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x7, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x200136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0xa0, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0xb, 0x0, 0x1}, {0xae5, 0x0, 0x1}, {0x9}, {0x1}, {0x6}, {0x8, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x7ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x75a}, {0xfff, 0x0, 0x1}, {0x4}, {0xf0001, 0x0, 0x1}, {0x9}, {0xffff}, {}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9}, {0x2}, {0x3ff}, {0x800, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5}, {0xd24a2, 0x0, 0x1}, {0x572a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x200}, {0x1a}]}]}, 0xa0}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0xb, r6, 0x0, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x8, r5, 0x0, &(0x7f000003b000/0x4000)=nil, 0x4000, 0x5}) readv(r2, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) ioctl$UI_DEV_DESTROY(r2, 0x5502) 12m3.763829299s ago: executing program 0 (id=1371): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000017001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x204001, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x27, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x28, 0x0, 0x0, 0xffffff45}, 0x28) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 12m2.665198254s ago: executing program 0 (id=1376): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000580)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r1, 0x1}}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000000)={r0}, 0x1) 12m2.577411106s ago: executing program 0 (id=1377): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000003800010cfcdbdf250900000004000480ee838eb15642fb3be9cdf79e3cb81280101060239edef0d6aa66d86634f3f1ccc7cfb34edbc0b143df98ca73c08c5cfbbce9b9bb32ff67ebcc72e7fbe3fdb90843d4ee99586ded8fe37b7909bcdfcca457b8348a00b55d3262ff1247d41c2e94fbec45e0764c4dcf40db4747e84cf60f968724c13d3e3f98145d41af3303a36ee4b64cd01c47081683e813d3470164ccd48578f7299f6c4de87ee5e468d2f4e952c26e0501056c8a7d6f1336e425c7a646ec9d510c0bda2f48e2f6f78c19393470839065db0af527670e9e2b4f637c187c7393d7524a64a8eb54fee740b22f40c5e4e054396b2396b5ebd74bb4dc9a4bac982e4ca8e7eac6f31e5f02a853e7b89e0060d69a28c699d8e5b1e9602e6a179e317d312944976f829d1c557b3733e335306473288161b67bd65b657361f680ea938ef1e8eee4ffb6027625b93a1b0b7c5e0b5a7cfe75"], 0x18}, 0x1, 0x0, 0x0, 0x24000081}, 0x80d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x6}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) 12m2.035757182s ago: executing program 0 (id=1378): setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) setitimer(0x2, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000001050004000000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) accept$packet(r2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x0, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_HANDLE={0x0, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x0, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x0, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x0, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x881f71650afd704e}, @NFTA_CHAIN_NAME={0x5a, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x0, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x7, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000790080"], 0x18, 0x4008000}, 0x28008841) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r5, 0x0, 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x4ca68b28, 0x4) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4) r6 = socket(0x3, 0x6, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x6a, 0x5, 0x0, &(0x7f0000000000)=0x29ea2949956312c5) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) ioprio_set$pid(0x2, r7, 0x4004) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r8, &(0x7f0000000380)=[{&(0x7f0000000680)="fefb77fd3b835becee3489363a0b36952f95ab6ce95d0090e7f0e780", 0x1c}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0xb, &(0x7f0000000440)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, 0x0}, 0x94) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r9, r9, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') 12m1.799140863s ago: executing program 0 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x84010780, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0) r5 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1c, 0x2, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x4, 0xfffffffd, 0xfffffffd, 0x200, 0xb, 0x9f, 0x5b0, [0x100, 0xfffffffa]}}) recvmsg$kcm(r5, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x120) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) writev(r0, &(0x7f0000002980)=[{&(0x7f0000000000)="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", 0x167}], 0x1) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$sierra_net(r8, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x20, 0x30, 0xa6, {0xa6, 0x4, "c089be99eaf1b952bfae81f47712088a09a9f3a484580458130e7fcda2fd74e9d785116e1985b9a216a9a5f68be7fb49219a698f9d6ffcab5269cf88dc18f0d591ee8267e371595ad2e8f481364275fa414ac0aa9997ee5d816aa2137d7fce87a929d9c604b183be9b1ad0ca80d257ea8ca8ac9000cf7288e3317cbb0c4c34b027e80f3952f10251399186bc181557f46ed7b69fc2617cb724eb08f1f54821da7f2658c9"}}, &(0x7f0000000340)=ANY=[@ANYBLOB="10210400007540b1dd73"]}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2c, 0x107, 0x3, 0x25dfdbff, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0xc040) 11m46.600569443s ago: executing program 35 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x84010780, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0) r5 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1c, 0x2, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x4, 0xfffffffd, 0xfffffffd, 0x200, 0xb, 0x9f, 0x5b0, [0x100, 0xfffffffa]}}) recvmsg$kcm(r5, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x120) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) writev(r0, &(0x7f0000002980)=[{&(0x7f0000000000)="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", 0x167}], 0x1) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$sierra_net(r8, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x20, 0x30, 0xa6, {0xa6, 0x4, "c089be99eaf1b952bfae81f47712088a09a9f3a484580458130e7fcda2fd74e9d785116e1985b9a216a9a5f68be7fb49219a698f9d6ffcab5269cf88dc18f0d591ee8267e371595ad2e8f481364275fa414ac0aa9997ee5d816aa2137d7fce87a929d9c604b183be9b1ad0ca80d257ea8ca8ac9000cf7288e3317cbb0c4c34b027e80f3952f10251399186bc181557f46ed7b69fc2617cb724eb08f1f54821da7f2658c9"}}, &(0x7f0000000340)=ANY=[@ANYBLOB="10210400007540b1dd73"]}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2c, 0x107, 0x3, 0x25dfdbff, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0xc040) 12.440520825s ago: executing program 7 (id=3478): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0xb}, {0xc, 0x10}, {0xaed7c706b85916f1, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3fc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004914}, 0x4004001) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x802) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000380)=0xa0000) socket$unix(0x1, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 10.979305566s ago: executing program 7 (id=3479): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', 0x0, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000017c0), 0x1, 0x0) writev(r2, &(0x7f0000001a00)=[{&(0x7f0000001800)="4d2e256951a74ed2446dd5da", 0xc}], 0x1) 10.402990643s ago: executing program 4 (id=3484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r1, @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x20004803}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfffe, @remote}, 0x10, 0x0, 0x0, &(0x7f00000014c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x49}, &(0x7f0000000180)=0x7, &(0x7f0000000280)=0x5, 0x2, 0x9, 0x7fffffff, 0xeb3, 0x20}}], 0x58}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5800000002030101000000000000fff8000000040900020000f0ff0302000000080004400000002208000340fffffffa09000200000000810100000008000100010000060900020000000010000000000700054000000012e50fc028cbc6c1dcba5e40d57a79cffed5"], 0x58}, 0x1, 0x0, 0x0, 0x20008021}, 0x20000850) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r10 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffe, r9, 0x0) r11 = syz_clone(0x1000000, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="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") openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) write$P9_RGETLOCK(r8, &(0x7f00000013c0)=ANY=[@ANYBLOB="2600000037010000ff070000000000000900000000000000", @ANYRES32=r11, @ANYBLOB="0044e80000"], 0x26) 9.33701256s ago: executing program 4 (id=3485): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000005c0)={0x79, 0x0, 0xa19}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fc017208030478fa0400000000010902120001000090000904"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x4b4b, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x40000002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00002eb000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x7c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/34, 0x22, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fd}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x10}, @request_death={0x400c630e, 0x2}, @dead_binder_done, @increfs_done], 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) 9.336665748s ago: executing program 8 (id=3486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000280)={'pcmmio\x00', [0x100, 0x6, 0x2, 0x800000c, 0x4, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1001, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x6, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r1, 0x6411) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="3801000010000901feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000e000000200000000000000000000000000080000000000109201000000000000060000000000000000000100000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000002abd700004350000020002002000000000000000480003006465666c61746500"/224], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 9.331306581s ago: executing program 5 (id=3487): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000240)=0x40) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d0502002723010203010902"], 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) inotify_init1(0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) r1 = socket$qrtr(0x2a, 0x2, 0x0) fsetxattr(r1, &(0x7f0000003480)=@random={'user.', '$#\xea@-@&\\^\x00'}, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={r6, 0x4, 0xbb, 0x81, 0x3, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x1, 0x1, 0x5], [0x4, 0x4, 0x6, 0x2000000000000000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 7.905119679s ago: executing program 7 (id=3488): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0xa000, 0x10) mount$9p_virtio(0x0, 0x0, 0x0, 0x1000000, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800008209"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r3, &(0x7f00000000c0)={0x0, 0x5, 0x0, @thr={&(0x7f0000000240)="77752d2f18dbd01a2d7ccac91781fb4852f4008082511f13352802458394d23cdc5b313845b3a4372501434975a0e9704e1f6512aef5f0a24336a70cf21c2876ebff172081b167f5a2fbbfc0844b0ed12ec618b71000", &(0x7f0000000400)="bb4e5416382146b2ff8f4ed36ab83f5e9fc435c977efe1bcc5f3c7b36c12f80de304b92e656fee659405436894b38c0a45d76bb9cb7799130daba4685ba5442901e991772ae060022e0838128ba6dfbee099c97dee0986b75d505f58fec962550fc765fa68cd0f55d8453de2509476871322b81513411d77dea3fcf07cb97309db362987f161d29160707dc212e555ab43da4d9dcd1dfec6fef0b93938a1aab201edbfb91ce55037ca3cc408ee06fcd244955e9eacb8bdae3d27b36348ffa5fa3b956434d4d3d6da30c5b31d7fbaa3d0eee0f786d388f510ea4f31"}}) read$FUSE(r3, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$mixer_OSS_GETVERSION(r4, 0x80044d76, &(0x7f0000000140)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0xa, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) 7.852381062s ago: executing program 8 (id=3489): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) truncate(0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e21, @private=0xa010101}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48044800000000000000dd0810000104000081000000000da5321879d56f000000358a", @ANYRES32=r5, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x20008807}, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 6.113652739s ago: executing program 8 (id=3493): socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0xf1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008", @ANYRES32=r0], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x90}, 0x0) 6.111856675s ago: executing program 6 (id=3494): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xc, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0xe0000000}, 0x1a92189d0dd42cd6) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x4000) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004c810}, 0x804) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)=""/89, 0x51}, {&(0x7f0000000200)=""/72, 0x53}, {&(0x7f00000013c0)=""/234, 0xea}], 0xb}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "eb8b00", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019340)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x6, &(0x7f0000000340)=""/4096) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.031704277s ago: executing program 8 (id=3495): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff0000/0x3000)=nil) getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf5, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x2000008, 0x289}) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 5.272111928s ago: executing program 6 (id=3496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r6, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000240)={{0x0, 0x100000, 0x0, 0xff, 0x8, 0x0, 0x40, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x11301000, 0xd000, 0xc, 0x8, 0xfb, 0x9, 0x0, 0x0, 0x7, 0x7, 0x2f, 0xff}, {0xa000, 0xe000, 0x10, 0x0, 0x7, 0x9, 0x40, 0x0, 0x0, 0x9, 0x7f, 0xfc}, {0xeeef0000, 0xd000, 0x0, 0xff, 0x0, 0xfa, 0xa, 0x40, 0xfe, 0x23}, {0xdddd0000, 0x3000, 0x0, 0x0, 0x81, 0x4, 0x6, 0xb, 0x0, 0x3c, 0x0, 0xff}, {0x25fff, 0x4000, 0x0, 0x42, 0x0, 0x2, 0x5, 0x4, 0x0, 0x0, 0x80, 0x6}, {0x50000, 0xdddd1000, 0x0, 0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xf2}, {0x58000, 0x3000, 0xc, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x96}, {0x1, 0xa}, {0xffff1000, 0xff}, 0x9dfeffdb, 0x0, 0x4000, 0x600, 0x8, 0xd000, 0x2, [0x15, 0x4, 0x1, 0xffffffffffffffff]}) 5.26705088s ago: executing program 5 (id=3497): syz_open_procfs$userns(0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000440)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000380)=ANY=[@ANYBLOB='M\x00\x00']) 5.212424572s ago: executing program 4 (id=3498): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xf91}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.131493374s ago: executing program 8 (id=3499): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffa) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$loop(0x0, 0x8, 0x101002) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, r5, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRES64], 0x60}}, 0x4042) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) io_submit(0x0, 0x1e, &(0x7f0000000540)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 5.121087962s ago: executing program 7 (id=3500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1a4, 0x2a, 0x200, 0x70bd28, 0x25dfdbff, {0xf}, [@generic="faf104fdb313395cabd0eaccbe335c1a53b7cd921738b21747cd726277564d3b0e58960c79b3d3a824640cd9d0b22e265198d633c78b5cf8dc98b32e00fe8e6cb391cecacfa44f9f8d397a36103250e524501141c53f073dc2ab7d7f5bca94ba89eb340df886a082149aea3f8ea220de87367018ab3a366e7013c746e3949a4e72dca674ccd6232405077467ccd7b9532dafa93fd853", @nested={0xf8, 0xfe, 0x0, 0x1, [@typed={0x4, 0x2}, @generic="fb", @generic="c4eddba9b2d8d7c535b0523ed13655b65630502c47a8605920c01004ad3d9e8bb6e8d82735acfada1b34374c59f4a1561ba8dd0ff16b7669ead7618d1a820b956d5f276df9ebf5322d9b490746b13ffff1248934bed213a7628632de18434b3c54e803d4248f195a0d42685748c63d70ba0376", @nested={0x4, 0x26}, @typed={0x70, 0x5b, 0x0, 0x0, @binary="1d8a1c07cc1b5cb2f55cdf04476dc5f5961c0408b645ddb8f99186f3c6319b300452ea5d0a0679040b3820cf6162a1fb4541939da0c3860f4861d0b0d1b8fd4772d6d8746fecb91cd090c20b5190d90265c718d4ff6600cb37b0cd07e9eb00ca375002663747018e12951529"}, @nested={0x4, 0xd1}, @nested={0x4, 0x36}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x6404c014}, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$netlink(r3, &(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) listen(r2, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) r5 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='syz', r1) keyctl$setperm(0x5, r5, 0x2000000) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r8, 0x3dd8e48f1ed7dcc0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x800) write$UHID_CREATE2(r6, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYRES32=r1], 0x119) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x200200, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000040)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="96a8902dc0eedcab0e000000"], 0xc) 3.948590249s ago: executing program 6 (id=3501): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x5, 0x0, 0x0, 0xb6}, 0x94) (async) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x120) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 3.022466507s ago: executing program 7 (id=3502): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000100)={0x1f, 0x0, 0x0}) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)=0x401) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0xc0049364, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7fff, 0x5}}, './file0\x00'}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='1', 0x1}], 0x1}}], 0x1, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) close(r7) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000140)=0x200000, 0x4) socket$unix(0x1, 0x1, 0x0) 2.983744921s ago: executing program 6 (id=3503): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x1, 0x3, 0x20000007}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f0000000000)='+\':&(2@-\x00', 0x402, &(0x7f0000000080)={@align=0x8309, {0xfff4, 0x2, 0x10938, 0x80000001}}, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x2}, {[0x40, 0x6, 0x5, 0x2]}, 0x7ff, 0x57, &(0x7f0000000400)=""/159}) r2 = openat(r1, &(0x7f0000000540)='./file0\x00', 0x20c800, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r3, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x50}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f0000000180)='./file0\x00', 0x0) read$FUSE(r6, &(0x7f0000006280)={0x2020, 0x0, 0x0}, 0x2020) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x4000000, 0xffffffff}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x44, r9, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xff}, @device_b, @device_a, @initial, {0xd, 0x2}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x3f, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000040) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd29, 0x10080, {}, [@IFA_FLAGS={0x8, 0x8, 0x221}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004280)="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", 0x2000, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x60, 0x0, 0x8, {{0x1ff, 0xdc1, 0x0, 0xfffffffffffffffc, 0xfffffffffffffefe, 0x0, 0xe, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 2.835991062s ago: executing program 7 (id=3504): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fanotify_init(0xf00, 0x2) fanotify_mark(r0, 0x40, 0x40009971, r0, 0x0) sendmsg$kcm(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001340)="316b05098b494849dc95a847a573", 0xe}, {&(0x7f0000001380)}, {&(0x7f00000013c0)}, {&(0x7f00000014c0)="b8cfe9a38fc8ca98c63fbf617fe03135954661826b6f7d1a22f92102d55afde87bf528f78a9e7b7dbc5996d5d89779a1d7a03bbc090d4e0f875a22358bedc5a23af6ff5a677d7c6a4d6098fa1c481582078f186c6bedf81ef5a64989912538cec66905d42802b7", 0x67}], 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x40}, 0x8080) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'vlan0\x00', 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000040)={0x0, &(0x7f0000000040), 0x0, 0x0, 0xcccccccc}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) fsmount(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e') 1.995346046s ago: executing program 6 (id=3505): socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0xf1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008", @ANYRES32=r0], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x90}, 0x0) 1.906385119s ago: executing program 4 (id=3506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c000000226cbb0cfaa99f7ff6d8c522430224cbdab979a658f818e4c105debd8245bf6d7202fc7246008571b67766862574b7fbdee3d228339bedcc2d2a83e0a51f01a156c05d020817bb976622e5fb021c710d5589420845b58b9ecbca61900a7679b5e030d04b02c21495a44212372eb4249fbf6cfc869347293cbade67c244834074c1fdc4076b3b7ae0a2136550c334e3037f311164331cde6c3336db0b1c5b2aadbc4f3d786d855872f7892d70f70b34914e4f65acab52acf3ef0a843aceb3936bd239177a10cd9cbbec84bea6978e0f194b68d3ae3de982b0698311e2d6ed911d3b9dc98c24bb3ce363f969b676cefd333a32f8950eeef19c2fb1527700a88131ddef384540daeb90648af6be5b5dec1dd9836ebc54b228de7773e27eec9615bfb4efd86222bc55cf3fb127e61626ced9018e72597e355e41cfa4df93086e", @ANYRES16=r6], 0x4c}}, 0x10004000) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800"], 0x138}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) fanotify_init(0x79, 0x101000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) r7 = socket$kcm(0x21, 0x2, 0xa) syz_emit_ethernet(0x22, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x14, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @broadcast}}}}}, 0x0) sendmsg$kcm(r7, 0x0, 0xfc40) 1.195039074s ago: executing program 6 (id=3507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x20004000) semop(0x0, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x14d080, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x63, 0xa201, 0x0, 0x0}], 0x1}) 1.134738677s ago: executing program 8 (id=3508): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201119b10000f69600000000000011633964ef10ea576db1dd157c0de8667fc6422600017c76701f06a48026ef50a1d8c2a9b09d44b6e0cbd560547d83d58dedf9810aff623770cc65763fb271"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000300)={0x20, 0x1, 0x3, "73c030"}, 0x0}) 945.43731ms ago: executing program 4 (id=3509): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff0000/0x3000)=nil) getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf5, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x2000008, 0x289}) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 560.328184ms ago: executing program 5 (id=3510): r0 = socket(0x40000000015, 0x5, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) mount$binder(0x2000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@stats}, {@max={'max', 0x3d, 0x3}}, {@stats}, {}, {}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@stats}, {}]}) 398.304226ms ago: executing program 5 (id=3511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='\x00\x00K5?', 0x5}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c000280050001000000000006000340000000000800074000000000040006"], 0x70}}, 0x0) 331.099274ms ago: executing program 5 (id=3512): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/199, 0x11f, 0x8) io_uring_setup(0x30aa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) recvmmsg(r3, &(0x7f00000001c0), 0x0, 0x12122, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) keyctl$session_to_parent(0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x200001, 0x81, 0x100000}, 0x20) 209.618888ms ago: executing program 5 (id=3513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e1221b23bb63f7f77d3df163e75963d", 0x10}, {&(0x7f0000000240)="000001010000", 0x6}], 0x2) 0s ago: executing program 4 (id=3514): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000100)={0x1f, 0x0, 0x0}) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000000)=0x401) write$char_usb(r6, &(0x7f0000000040)="e2", 0xff0f) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0xc0049364, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7fff, 0x5}}, './file0\x00'}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='1', 0x1}], 0x1}}], 0x1, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) close(r8) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000140)=0x200000, 0x4) socket$unix(0x1, 0x1, 0x0) kernel console output (not intermixed with test programs): ed all slaves [ 1087.459194][T13447] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1087.465719][ T6305] bond1 (unregistering): Released all slaves [ 1087.493743][ T6305] bond2 (unregistering): Released all slaves [ 1087.513874][ T6305] bond3 (unregistering): Released all slaves [ 1087.546527][ T6305] bond4 (unregistering): Released all slaves [ 1087.581526][T17980] bridge2: entered promiscuous mode [ 1087.613031][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1087.619753][T13447] usb 9-1: Using ep0 maxpacket: 32 [ 1087.628202][T13447] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1087.637260][T13447] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1087.681641][ T10] usb 7-1: 2:0: failed to get current value for ch 1 (-71) [ 1087.689032][T13447] usb 9-1: string descriptor 0 read error: -22 [ 1087.705867][T13447] usb 9-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 1087.718341][ T6305] : left promiscuous mode [ 1087.734172][T13447] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.844118][ T10] usb 7-1: USB disconnect, device number 93 [ 1089.180650][ T50] Bluetooth: hci6: command tx timeout [ 1089.191544][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.204796][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.213593][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.229131][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.500258][ T6305] tipc: Disabling bearer [ 1089.517597][ T6305] tipc: Left network mode [ 1089.609669][T18013] overlayfs: missing 'workdir' [ 1089.667183][T13447] usbhid 9-1:1.0: can't add hid device: -71 [ 1089.678779][T13447] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1089.747187][T13447] usb 9-1: USB disconnect, device number 75 [ 1089.850311][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.872573][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.881538][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.909942][ T30] audit: type=1400 audit(1780524580.633:1460): avc: denied { write } for pid=18010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.154827][ T30] audit: type=1400 audit(1780524580.883:1461): avc: denied { write } for pid=18035 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.261219][ T30] audit: type=1400 audit(1780524580.963:1462): avc: denied { watch } for pid=18032 comm="syz.7.3196" path="/file1" dev="ramfs" ino=59313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1090.349234][ T30] audit: type=1400 audit(1780524580.963:1463): avc: denied { watch_sb watch_reads } for pid=18032 comm="syz.7.3196" path="/file1" dev="ramfs" ino=59313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1090.406302][ T30] audit: type=1804 audit(1780524581.063:1464): pid=18033 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3196" name="file0" dev="ramfs" ino=59314 res=1 errno=0 [ 1090.544517][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1090.567134][T17945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.581536][T17945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.591461][T17945] bridge_slave_0: entered allmulticast mode [ 1090.599044][T17945] bridge_slave_0: entered promiscuous mode [ 1090.602794][T18050] overlayfs: missing 'workdir' [ 1090.614286][T17945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.632907][T17945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.639341][T13447] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1090.654571][T17945] bridge_slave_1: entered allmulticast mode [ 1090.674270][T17945] bridge_slave_1: entered promiscuous mode [ 1090.795873][T17945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.822130][T13447] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.849285][T13447] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1090.849301][T17945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.907926][T13447] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1090.922684][T13447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.930836][T13447] usb 7-1: Product: syz [ 1090.935016][T13447] usb 7-1: Manufacturer: syz [ 1090.939651][T13447] usb 7-1: SerialNumber: syz [ 1091.151421][T13447] usb 7-1: config 0 descriptor?? [ 1091.209253][ T50] Bluetooth: hci6: command tx timeout [ 1091.351538][T17945] team0: Port device team_slave_0 added [ 1091.379321][T13443] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1091.380830][T17945] team0: Port device team_slave_1 added [ 1091.408988][T13447] usb 7-1: USB disconnect, device number 94 [ 1091.420272][ T6305] hsr_slave_0: left promiscuous mode [ 1091.430079][ T6305] hsr_slave_1: left promiscuous mode [ 1091.436223][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1091.451428][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.559184][T13443] usb 5-1: Using ep0 maxpacket: 8 [ 1091.577113][T13443] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 1091.619258][T13443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.650470][T13443] usb 5-1: config 0 descriptor?? [ 1091.664714][ T30] audit: type=1400 audit(1780524582.393:1465): avc: denied { write } for pid=18057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.716650][T13443] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1092.110745][T18059] warn_alloc: 2 callbacks suppressed [ 1092.110763][T18059] syz.4.3192: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1092.132611][T13443] usb 5-1: Detected SIO [ 1092.160815][T18059] ,cpuset=syz4,mems_allowed=0-1 [ 1092.167266][T18059] CPU: 1 UID: 0 PID: 18059 Comm: syz.4.3192 Tainted: G L syzkaller #0 PREEMPT(full) [ 1092.167297][T18059] Tainted: [L]=SOFTLOCKUP [ 1092.167305][T18059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1092.167318][T18059] Call Trace: [ 1092.167326][T18059] [ 1092.167334][T18059] dump_stack_lvl+0x100/0x190 [ 1092.167369][T18059] warn_alloc.cold+0x95/0x1c1 [ 1092.167394][T18059] ? __pfx_warn_alloc+0x10/0x10 [ 1092.167432][T18059] ? stack_depot_save_flags+0x27/0x9d0 [ 1092.167467][T18059] ? __lock_acquire+0x4a5/0x2630 [ 1092.167491][T18059] ? xskq_create+0xfb/0x1d0 [ 1092.167505][T18059] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1092.167528][T18059] ? xskq_create+0xfb/0x1d0 [ 1092.167545][T18059] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1092.167567][T18059] ? xskq_create+0xfb/0x1d0 [ 1092.167580][T18059] vmalloc_user_noprof+0x9e/0xe0 [ 1092.167596][T18059] ? xskq_create+0xfb/0x1d0 [ 1092.167609][T18059] xskq_create+0xfb/0x1d0 [ 1092.167623][T18059] xsk_setsockopt+0x743/0xab0 [ 1092.167636][T18059] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1092.167648][T18059] ? find_held_lock+0x2b/0x80 [ 1092.167658][T18059] ? __fget_files+0x215/0x3d0 [ 1092.167676][T18059] ? selinux_socket_setsockopt+0x6a/0x80 [ 1092.167708][T18059] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1092.167730][T18059] do_sock_setsockopt+0xf3/0x1d0 [ 1092.167746][T18059] __sys_setsockopt+0x195/0x220 [ 1092.167767][T18059] __x64_sys_setsockopt+0xbd/0x160 [ 1092.167785][T18059] ? do_syscall_64+0x90/0x870 [ 1092.167800][T18059] ? lockdep_hardirqs_on+0x78/0x100 [ 1092.167815][T18059] do_syscall_64+0x115/0x870 [ 1092.167830][T18059] ? clear_bhb_loop+0x40/0x90 [ 1092.167845][T18059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.167857][T18059] RIP: 0033:0x7fd97b39ce59 [ 1092.167868][T18059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.167880][T18059] RSP: 002b:00007fd97c1af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1092.167892][T18059] RAX: ffffffffffffffda RBX: 00007fd97b615fa0 RCX: 00007fd97b39ce59 [ 1092.167901][T18059] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1092.167909][T18059] RBP: 00007fd97b432d6f R08: 0000000000000004 R09: 0000000000000000 [ 1092.167916][T18059] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.167924][T18059] R13: 00007fd97b616038 R14: 00007fd97b615fa0 R15: 00007ffd43031fb8 [ 1092.167941][T18059] [ 1092.168121][T18059] Mem-Info: [ 1092.460695][T13447] net_ratelimit: 3 callbacks suppressed [ 1092.460712][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.493069][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.502125][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.510710][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.532708][T18059] active_anon:19029 inactive_anon:0 isolated_anon:0 [ 1092.532708][T18059] active_file:25734 inactive_file:41153 isolated_file:0 [ 1092.532708][T18059] unevictable:768 dirty:142 writeback:0 [ 1092.532708][T18059] slab_reclaimable:8855 slab_unreclaimable:123212 [ 1092.532708][T18059] mapped:47967 shmem:9907 pagetables:1463 [ 1092.532708][T18059] sec_pagetables:0 bounce:0 [ 1092.532708][T18059] kernel_misc_reclaimable:0 [ 1092.532708][T18059] free:1227690 free_pcp:25270 free_cma:0 [ 1092.583527][T18059] Node 0 active_anon:76160kB inactive_anon:0kB active_file:102900kB inactive_file:164408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:191844kB dirty:572kB writeback:0kB shmem:38096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14560kB pagetables:5768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1092.627963][T13443] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1092.682602][T18059] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1092.686620][ T30] audit: type=1400 audit(1780524583.413:1466): avc: denied { write } for pid=18085 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.754575][T18059] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1092.792303][T18059] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1092.829665][T18059] Node 0 DMA32 free:948024kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76260kB inactive_anon:0kB active_file:102900kB inactive_file:164408kB unevictable:1536kB writepending:572kB zspages:0kB present:3129332kB managed:2537296kB mlocked:0kB bounce:0kB free_pcp:91092kB local_pcp:28480kB free_cma:0kB [ 1092.868187][ T6305] team0 (unregistering): Port device team_slave_1 removed [ 1092.877585][T13447] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1092.890201][T18059] lowmem_reserve[]: 0 0 1 1 1 [ 1092.911249][T18059] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1100kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1092.946943][T18059] lowmem_reserve[]: [ 1092.947306][ T6305] team0 (unregistering): Port device team_slave_0 removed [ 1092.959796][T18059] 0 0 0 0 0 [ 1092.965029][T18059] Node 1 Normal free:3952016kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:0kB free_cma:0kB [ 1093.005658][T18059] lowmem_reserve[]: 0 0 0 0 0 [ 1093.011724][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.039255][T13447] usb 7-1: Using ep0 maxpacket: 16 [ 1093.070877][T13447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.085278][T18059] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1093.098365][T13447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.111741][T18059] Node 0 DMA32: 1912*4kB (UME) 6399*8kB (UME) 3925*16kB (UME) 1968*32kB (UME) 744*64kB (UME) 336*128kB (UME) 142*256kB (UME) 93*512kB (UME) 55*1024kB (UME) 16*2048kB (UME) 122*4096kB (UM) = 948008kB [ 1093.132424][T13447] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1093.141792][T13447] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.185422][T18059] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1093.200463][T13447] usb 7-1: config 0 descriptor?? [ 1093.206472][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1093.223193][T17945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.252790][T18059] Node 1 Normal: 0*4kB 6*8kB (UM) 6*16kB (UM) 4*32kB (U) 8*64kB (UM) 5*128kB (UM) 2*256kB (M) 5*512kB (UM) 1*1024kB (M) 5*2048kB (UM) 961*4096kB (UM) = 3952016kB [ 1093.267466][T17945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.295424][T18059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.319257][T18059] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1093.339162][T17945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.358163][T18059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.368221][T17945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.376187][T18059] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1093.376197][T17945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.412189][T18059] 73941 total pagecache pages [ 1093.418861][T18059] 0 pages in swap cache [ 1093.430518][T18059] Free swap = 124996kB [ 1093.431267][T17945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.460629][T18059] Total swap = 124996kB [ 1093.473702][T18059] 2097051 pages RAM [ 1093.481916][T18059] 0 pages HighMem/MovableOnly [ 1093.488403][T18059] 430837 pages reserved [ 1093.493831][T18059] 0 pages cma reserved [ 1093.515924][T18090] overlayfs: missing 'workdir' [ 1093.540177][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.670823][T16841] usb 5-1: USB disconnect, device number 55 [ 1093.683008][T16841] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1093.696927][T13447] konepure 0003:1E7D:2DB4.001B: unknown main item tag 0x0 [ 1093.722583][T13447] konepure 0003:1E7D:2DB4.001B: unknown main item tag 0x0 [ 1093.763852][T16841] ftdi_sio 5-1:0.0: device disconnected [ 1093.774817][T13447] konepure 0003:1E7D:2DB4.001B: unknown main item tag 0x0 [ 1093.798663][T13447] konepure 0003:1E7D:2DB4.001B: unknown main item tag 0x0 [ 1093.825251][T13447] konepure 0003:1E7D:2DB4.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.6-1/input0 [ 1093.949902][T13447] usb 7-1: USB disconnect, device number 95 [ 1094.025908][T18094] wg1 speed is unknown, defaulting to 1000 [ 1094.294821][T18098] fido_id[18098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1094.356588][T17945] hsr_slave_0: entered promiscuous mode [ 1094.384886][T17945] hsr_slave_1: entered promiscuous mode [ 1094.401720][T17945] debugfs: 'hsr0' already exists in 'hsr' [ 1094.517204][T17945] Cannot create hsr debugfs directory [ 1094.589285][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.674596][T18094] lo speed is unknown, defaulting to 1000 [ 1094.873734][ T30] audit: type=1400 audit(1780524585.603:1467): avc: denied { accept } for pid=18091 comm="syz.7.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1094.924741][ T6305] IPVS: stop unused estimator thread 0... [ 1094.994228][ T30] audit: type=1400 audit(1780524585.723:1468): avc: denied { accept } for pid=18091 comm="syz.7.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1095.051968][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.060542][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.069207][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.109032][ T30] audit: type=1400 audit(1780524585.763:1469): avc: denied { ioctl } for pid=18091 comm="syz.7.3207" path="socket:[60481]" dev="sockfs" ino=60481 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1096.353989][ T30] audit: type=1400 audit(1780524587.083:1470): avc: denied { write } for pid=18103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.615779][ T30] audit: type=1400 audit(1780524587.343:1471): avc: denied { write } for pid=18133 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1097.612242][ T48] net_ratelimit: 5 callbacks suppressed [ 1097.612259][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.626901][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.638226][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.785276][ T30] audit: type=1400 audit(1780524588.513:1472): avc: denied { write } for pid=18146 comm="syz.8.3215" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1097.813816][T18150] random: crng reseeded on system resumption [ 1097.864437][ T30] audit: type=1400 audit(1780524588.543:1473): avc: denied { open } for pid=18146 comm="syz.8.3215" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1098.106614][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.254129][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.329282][T16841] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1098.404107][ T30] audit: type=1400 audit(1780524589.133:1474): avc: denied { write } for pid=18148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.540880][T16841] usb 7-1: Using ep0 maxpacket: 32 [ 1098.548614][T16841] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1098.581359][T16841] usb 7-1: config 0 has no interface number 0 [ 1098.602369][T16841] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1098.632373][T16841] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1098.691712][T16841] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1098.711318][ T30] audit: type=1400 audit(1780524589.443:1475): avc: denied { write } for pid=18165 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.734323][T16841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.753402][T16841] usb 7-1: Product: syz [ 1098.759480][T16841] usb 7-1: Manufacturer: syz [ 1098.769266][T16841] usb 7-1: SerialNumber: syz [ 1098.790919][T16841] usb 7-1: config 0 descriptor?? [ 1099.075602][T16841] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1099.098284][T16841] cx231xx 7-1:0.1: Not found matching IAD interface [ 1099.143031][T16841] usb 7-1: USB disconnect, device number 96 [ 1099.289627][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.673255][T18180] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3217'. [ 1099.829959][T16841] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1100.058351][T16841] usb 5-1: Using ep0 maxpacket: 8 [ 1100.077994][T16841] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 1100.097950][T17945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1100.121954][T16841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.154629][T16841] usb 5-1: config 0 descriptor?? [ 1100.167441][T16841] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1100.206409][T16841] usb 5-1: Detected SIO [ 1100.250245][T16841] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1100.315687][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1100.343122][T17945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1100.355149][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.417295][T16841] usb 5-1: USB disconnect, device number 56 [ 1100.524009][ T30] audit: type=1400 audit(1780524591.253:1476): avc: denied { map } for pid=18184 comm="syz.7.3220" path="socket:[61447]" dev="sockfs" ino=61447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1100.548677][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1100.752311][T16841] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1100.843185][ T6305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.850090][T16841] ftdi_sio 5-1:0.0: device disconnected [ 1100.851784][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.865631][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.891835][T17945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1100.982927][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1101.064509][T18190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.071694][T18190] bridge0: port 2(bridge_slave_1) entered listening state [ 1101.078942][T18190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.086266][T18190] bridge0: port 1(bridge_slave_0) entered listening state [ 1101.226224][ T30] audit: type=1400 audit(1780524591.953:1477): avc: denied { read write } for pid=18194 comm="syz.4.3222" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1101.280655][ T30] audit: type=1400 audit(1780524591.953:1478): avc: denied { open } for pid=18194 comm="syz.4.3222" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1101.314149][ T30] audit: type=1400 audit(1780524591.953:1479): avc: denied { ioctl } for pid=18194 comm="syz.4.3222" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1101.487045][T18190] bridge0: port 3(vlan2) entered blocking state [ 1101.493580][T18190] bridge0: port 3(vlan2) entered listening state [ 1101.583412][T17945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1101.723830][ T30] audit: type=1400 audit(1780524592.453:1480): avc: denied { write } for pid=18179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1101.758404][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1101.905693][ T30] audit: type=1400 audit(1780524592.573:1481): avc: denied { create } for pid=18203 comm="syz.4.3223" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1102.219907][T13454] lo speed is unknown, defaulting to 1000 [ 1102.328244][T17945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.827727][T13083] net_ratelimit: 4 callbacks suppressed [ 1102.827745][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.860420][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.869418][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.876739][T17945] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.909184][T13443] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1102.922343][T13077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.929485][T13077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.973280][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.980433][T13077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.070309][T13443] usb 9-1: Using ep0 maxpacket: 8 [ 1103.088748][T13443] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1103.118007][T13443] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.147536][T13443] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1103.170708][T13443] pvrusb2: ********** [ 1103.182567][T13443] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1103.205695][T13443] pvrusb2: Important functionality might not be entirely working. [ 1103.224622][T13443] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1103.247765][T13443] pvrusb2: ********** [ 1103.259651][T13454] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1103.289723][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.348459][ T2358] pvrusb2: Invalid write control endpoint [ 1103.426298][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1103.426314][ T30] audit: type=1400 audit(1780524594.153:1489): avc: denied { write } for pid=18227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1103.449005][T13454] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1103.479923][ T2358] pvrusb2: Invalid write control endpoint [ 1103.492686][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1103.525879][T13454] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1103.544070][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1103.567892][T13454] usb 7-1: string descriptor 0 read error: -22 [ 1103.577705][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1103.587756][ T2358] pvrusb2: Device being rendered inoperable [ 1103.597786][T18201] pvrusb2: Attempted to execute control transfer when device not ok [ 1103.611850][T13443] usb 9-1: USB disconnect, device number 76 [ 1103.613174][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1103.632206][T13454] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 1103.650519][T13454] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.659352][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1103.763057][ T2358] pvrusb2: Attached sub-driver cx25840 [ 1103.785147][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1103.811815][ T30] audit: type=1400 audit(1780524594.543:1490): avc: denied { write } for pid=18249 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1103.833921][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1103.933650][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.135778][T17945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.192452][T13454] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 1104.200779][T13454] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 1104.219718][T13454] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 1104.229487][T13454] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 1104.236630][T13454] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 1104.244134][T13454] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 1104.252483][T13454] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 1104.260060][T13454] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 1104.267236][T13454] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 1104.274489][T13454] glorious 0003:22D4:1503.001C: unknown main item tag 0x0 [ 1104.330662][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.397108][T13454] glorious 0003:22D4:1503.001C: hidraw0: USB HID vff.7f Device [Glorious Model I] on usb-dummy_hcd.6-1/input0 [ 1104.478047][T13454] usb 7-1: USB disconnect, device number 97 [ 1104.584614][T18274] fido_id[18274]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1104.802105][T17945] veth0_vlan: entered promiscuous mode [ 1104.812321][ T30] audit: type=1400 audit(1780524595.543:1491): avc: denied { write } for pid=18257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1104.847980][T17945] veth1_vlan: entered promiscuous mode [ 1104.907516][T17945] veth0_macvtap: entered promiscuous mode [ 1104.928670][T17945] veth1_macvtap: entered promiscuous mode [ 1104.983203][ T30] audit: type=1400 audit(1780524595.713:1492): avc: denied { write } for pid=18284 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1105.029155][T17945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1105.065120][T17945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1105.156093][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.193306][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.221265][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.234104][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.469261][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.329888][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.389550][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.485739][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.489865][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.518361][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.569703][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.602243][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.769416][T13442] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1107.200979][T13442] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1107.274616][ T30] audit: type=1400 audit(1780524597.993:1493): avc: denied { write } for pid=18295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.281768][T13442] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 1107.411436][T13442] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.523302][T13442] usb 7-1: config 63 has no interface number 0 [ 1108.025956][T13444] net_ratelimit: 4 callbacks suppressed [ 1108.025970][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.042445][T13442] usb 7-1: config 63 interface 66 has no altsetting 0 [ 1108.070750][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3239'. [ 1108.105582][T13442] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1108.120877][T13442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.129008][T13442] usb 7-1: Product: syz [ 1108.138678][T13442] usb 7-1: Manufacturer: syz [ 1108.143791][T18327] veth1_macvtap: left promiscuous mode [ 1108.184021][T13442] usb 7-1: SerialNumber: syz [ 1108.448010][T13442] uvcvideo 7-1:63.66: probe with driver uvcvideo failed with error -22 [ 1108.516735][T13442] usb 7-1: USB disconnect, device number 98 [ 1108.578970][ T30] audit: type=1400 audit(1780524599.303:1494): avc: denied { write } for pid=18330 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.049670][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.766607][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.089506][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.137299][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.334781][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3244'. [ 1111.473020][ T30] audit: type=1400 audit(1780524602.203:1495): avc: denied { ioctl } for pid=18362 comm="syz.8.3246" path="socket:[61936]" dev="sockfs" ino=61936 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1111.608344][ T30] audit: type=1400 audit(1780524602.333:1496): avc: denied { write } for pid=18343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.919692][T13454] usb 9-1: new full-speed USB device number 77 using dummy_hcd [ 1112.053246][ T30] audit: type=1400 audit(1780524602.783:1497): avc: denied { write } for pid=18371 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1112.112558][T13454] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.134816][T13454] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1112.168815][T13454] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1112.169550][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.194019][T13454] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.244922][T13454] usb 9-1: Product: syz [ 1112.264708][T13454] usb 9-1: Manufacturer: syz [ 1112.287387][T13454] usb 9-1: SerialNumber: syz [ 1112.316665][T13454] usb 9-1: config 0 descriptor?? [ 1112.341991][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.561296][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.589905][T18387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.614321][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.648796][T18387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.683641][T13454] usb 9-1: USB disconnect, device number 77 [ 1112.789498][T16841] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1113.125218][ T30] audit: type=1400 audit(1780524603.813:1498): avc: denied { write } for pid=18388 comm="syz.5.3254" path="socket:[61147]" dev="sockfs" ino=61147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1113.234449][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.755675][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.935493][T16841] usb 7-1: device descriptor read/64, error -71 [ 1114.251037][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.309232][T16841] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1114.440779][T16841] usb 7-1: device descriptor read/64, error -71 [ 1114.623273][T16841] usb usb7-port1: attempt power cycle [ 1115.337818][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.531778][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.695230][T18411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1116.303292][ T30] audit: type=1326 audit(1780524607.033:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18418 comm="syz.8.3264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833d99ce59 code=0x0 [ 1116.411649][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.422663][T18424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18424 comm=syz.8.3264 [ 1116.513895][T18427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1116.812686][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.919181][T13447] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1117.121042][T13447] usb 9-1: device descriptor read/64, error -71 [ 1117.247348][T18441] netlink: 248 bytes leftover after parsing attributes in process `syz.6.3271'. [ 1117.256678][T18441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3271'. [ 1117.268153][T18441] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3271'. [ 1117.627639][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.710097][T13447] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1117.849550][T13447] usb 9-1: device descriptor read/64, error -71 [ 1117.981519][T13447] usb usb9-port1: attempt power cycle [ 1118.283551][ T30] audit: type=1400 audit(1780524609.013:1500): avc: denied { ioctl } for pid=18449 comm="syz.6.3274" path="mnt:[4026532796]" dev="nsfs" ino=4026532796 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1118.529190][T13447] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1118.573906][T13447] usb 9-1: device descriptor read/8, error -71 [ 1118.654757][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.839183][T13447] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1118.903030][T13447] usb 9-1: device descriptor read/8, error -71 [ 1119.125612][T13447] usb usb9-port1: unable to enumerate USB device [ 1119.697295][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.859546][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.071228][T18476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.096098][T18476] batadv_slave_1: entered promiscuous mode [ 1120.183027][T18479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1120.739430][T18498] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1120.756027][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.789363][T18498] overlayfs: overlapping lowerdir path [ 1121.109362][T16841] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1121.179170][T13447] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1121.431932][T18520] wg1 speed is unknown, defaulting to 1000 [ 1121.447215][T18520] lo speed is unknown, defaulting to 1000 [ 1121.719124][T16841] usb 5-1: Using ep0 maxpacket: 32 [ 1121.773021][T16841] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1121.774244][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.795715][T13447] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.863395][T13447] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1121.873936][T13447] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.886398][T13447] usb 9-1: config 0 descriptor?? [ 1122.269825][T16841] usb 5-1: config 0 has no interface number 0 [ 1122.288700][T16841] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1122.312987][T13447] usbhid 9-1:0.0: can't add hid device: -71 [ 1122.337748][T13447] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1122.350244][T16841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.358345][T16841] usb 5-1: Product: syz [ 1122.377582][T16841] usb 5-1: Manufacturer: syz [ 1122.383134][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.390538][T13447] usb 9-1: USB disconnect, device number 82 [ 1122.399173][T16841] usb 5-1: SerialNumber: syz [ 1122.424296][T16841] usb 5-1: config 0 descriptor?? [ 1122.434829][T16841] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1122.644746][T16841] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1122.699876][T13442] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1122.724887][T16841] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1122.813827][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.849183][T13447] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1122.870840][T13442] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.899860][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.916508][T13442] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1122.949021][T13442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.976153][T13442] usb 7-1: Product: syz [ 1122.989729][T13442] usb 7-1: Manufacturer: syz [ 1123.004293][T13442] usb 7-1: SerialNumber: syz [ 1123.009522][T13443] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1123.020036][T13447] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.063903][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1123.066493][T13447] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1123.102604][T13442] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1123.119776][T13447] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.152405][T16841] usb 5-1: USB disconnect, device number 57 [ 1123.169220][T13443] usb 6-1: device descriptor read/64, error -71 [ 1123.181545][T13447] usb 9-1: config 0 descriptor?? [ 1123.236612][T16841] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1123.314569][T16841] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1123.366639][T16841] quatech2 5-1:0.51: device disconnected [ 1123.409553][T13443] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1123.516627][T13442] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1123.543906][T13442] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1123.552988][T13442] usb 7-1: media controller created [ 1123.560429][T13443] usb 6-1: device descriptor read/64, error -71 [ 1123.592105][T13442] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1123.631511][T13447] usbhid 9-1:0.0: can't add hid device: -71 [ 1123.682504][T13447] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1123.700658][T13443] usb usb6-port1: attempt power cycle [ 1123.749691][T13447] usb 9-1: USB disconnect, device number 83 [ 1123.854592][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.873247][T13442] usb 7-1: USB disconnect, device number 102 [ 1124.079150][T13443] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1124.111427][T13443] usb 6-1: device descriptor read/8, error -71 [ 1124.379142][T13443] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1124.428919][T18550] Bluetooth: MGMT ver 1.23 [ 1124.446947][T13443] usb 6-1: device descriptor read/8, error -71 [ 1124.579595][T13443] usb usb6-port1: unable to enumerate USB device [ 1124.849920][T16841] usb 9-1: new full-speed USB device number 84 using dummy_hcd [ 1124.892207][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.022900][T16841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1125.052195][ T9] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1125.064660][T16841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.094710][T16841] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1125.131758][T16841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.184890][T16841] usb 9-1: config 0 descriptor?? [ 1125.243209][ T9] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1125.273947][ T9] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1125.359786][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1125.394843][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1126.382932][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.400600][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.424939][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.491542][ T9] usb 5-1: config 0 descriptor?? [ 1126.904470][T16841] usbhid 9-1:0.0: can't add hid device: -71 [ 1126.911724][T16841] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1126.930127][T16841] usb 9-1: USB disconnect, device number 84 [ 1127.362289][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1127.381128][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1127.428424][ T9] usb 5-1: USB disconnect, device number 58 [ 1127.463551][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.289888][T18589] netlink: 'syz.6.3316': attribute type 49 has an invalid length. [ 1128.300026][T18589] bond0: (slave bond_slave_0): Releasing backup interface [ 1128.350858][T18589] bond_slave_0: entered promiscuous mode [ 1128.356522][T18589] bond_slave_0: entered allmulticast mode [ 1128.498840][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.049404][T13447] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 1129.270252][T13447] usb 7-1: config index 0 descriptor too short (expected 8475, got 27) [ 1129.329874][T13447] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 1129.404064][T13447] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.446705][T13447] usb 7-1: config 0 has no interface number 0 [ 1129.460680][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.465984][T13447] usb 7-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1129.501577][T13447] usb 7-1: config 0 interface 200 has no altsetting 0 [ 1129.510949][T13447] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 1129.520730][T13447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.535478][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.544005][T13447] usb 7-1: Product: syz [ 1129.548380][T13447] usb 7-1: Manufacturer: syz [ 1129.553422][T13447] usb 7-1: SerialNumber: syz [ 1129.579660][T13447] usb 7-1: config 0 descriptor?? [ 1129.645344][ T30] audit: type=1400 audit(1780524620.373:1501): avc: denied { write } for pid=18603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1129.757351][T18626] ubi: mtd0 is already attached to ubi16 [ 1129.771058][T18626] netlink: 'syz.5.3322': attribute type 10 has an invalid length. [ 1129.778921][T18626] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3322'. [ 1129.789235][T18626] bridge0: port 3(veth1_macvtap) entered blocking state [ 1129.796899][T18626] bridge0: port 3(veth1_macvtap) entered disabled state [ 1129.804894][T18626] veth1_macvtap: entered allmulticast mode [ 1129.819696][T18626] veth1_macvtap: left allmulticast mode [ 1129.830516][T18626] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1130.275655][ T30] audit: type=1400 audit(1780524621.003:1502): avc: denied { write } for pid=18628 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.482740][T13447] usbhid 7-1:0.200: couldn't find an input interrupt endpoint [ 1130.516535][T13447] usb 7-1: USB disconnect, device number 103 [ 1130.577681][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.531841][ C0] bridge0: port 3(vlan2) entered learning state [ 1131.539911][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1131.547660][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1131.557695][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.661252][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.729181][T13447] usb 9-1: new full-speed USB device number 85 using dummy_hcd [ 1131.880943][T13447] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1131.911929][T13447] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.952993][T13447] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1131.980933][T13447] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.011796][T13447] usb 9-1: config 0 descriptor?? [ 1132.942343][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.950467][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.997545][T18652] FAULT_INJECTION: forcing a failure. [ 1132.997545][T18652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.010674][T18652] CPU: 0 UID: 0 PID: 18652 Comm: syz.8.3329 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.010692][T18652] Tainted: [L]=SOFTLOCKUP [ 1133.010697][T18652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1133.010709][T18652] Call Trace: [ 1133.010716][T18652] [ 1133.010725][T18652] dump_stack_lvl+0x100/0x190 [ 1133.010755][T18652] should_fail_ex.cold+0x5/0xa [ 1133.010784][T18652] _copy_from_user+0x2e/0xd0 [ 1133.010800][T18652] bpf_test_init.isra.0+0xaf/0x100 [ 1133.010816][T18652] bpf_prog_test_run_flow_dissector+0x236/0x980 [ 1133.010835][T18652] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1133.010854][T18652] ? find_held_lock+0x2b/0x80 [ 1133.010875][T18652] ? __fget_files+0x215/0x3d0 [ 1133.010908][T18652] ? __fget_files+0x21f/0x3d0 [ 1133.010935][T18652] ? fput+0x79/0x100 [ 1133.010951][T18652] ? __bpf_prog_get+0x97/0x2a0 [ 1133.010965][T18652] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1133.010980][T18652] __sys_bpf+0x1725/0x4b90 [ 1133.011006][T18652] ? __pfx___sys_bpf+0x10/0x10 [ 1133.011036][T18652] ? proc_fail_nth_write+0x9f/0x220 [ 1133.011060][T18652] ? find_held_lock+0x2b/0x80 [ 1133.011081][T18652] ? find_held_lock+0x2b/0x80 [ 1133.011091][T18652] ? ksys_write+0x190/0x250 [ 1133.011103][T18652] ? ksys_write+0x190/0x250 [ 1133.011118][T18652] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1133.011134][T18652] ? kernel_write+0x5f3/0x6c0 [ 1133.011153][T18652] ? __fget_files+0x215/0x3d0 [ 1133.011196][T18652] ? fput+0x79/0x100 [ 1133.011222][T18652] ? ksys_write+0x1ac/0x250 [ 1133.011235][T18652] ? __pfx_ksys_write+0x10/0x10 [ 1133.011250][T18652] __x64_sys_bpf+0x7b/0xc0 [ 1133.011261][T18652] ? lockdep_hardirqs_on+0x78/0x100 [ 1133.011275][T18652] do_syscall_64+0x115/0x870 [ 1133.011295][T18652] ? clear_bhb_loop+0x40/0x90 [ 1133.011323][T18652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.011345][T18652] RIP: 0033:0x7f833d99ce59 [ 1133.011362][T18652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.011376][T18652] RSP: 002b:00007f833e791028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1133.011388][T18652] RAX: ffffffffffffffda RBX: 00007f833dc15fa0 RCX: 00007f833d99ce59 [ 1133.011396][T18652] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 1133.011403][T18652] RBP: 00007f833e791090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.011409][T18652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.011420][T18652] R13: 00007f833dc16038 R14: 00007f833dc15fa0 R15: 00007fffeb556d38 [ 1133.011443][T18652] [ 1133.530671][T13447] usbhid 9-1:0.0: can't add hid device: -71 [ 1133.553469][T13447] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1133.594982][T13447] usb 9-1: USB disconnect, device number 85 [ 1134.265657][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.421052][ T30] audit: type=1400 audit(1780524625.153:1503): avc: denied { write } for pid=18669 comm="syz.4.3334" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1134.480742][T13442] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1134.551701][ T30] audit: type=1400 audit(1780524625.183:1504): avc: denied { open } for pid=18669 comm="syz.4.3334" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1134.660937][T13442] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.686704][T13442] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1134.714939][T13442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.745646][T13442] usb 6-1: Product: syz [ 1134.775947][T13442] usb 6-1: Manufacturer: syz [ 1134.803174][T13442] usb 6-1: SerialNumber: syz [ 1134.843855][T13442] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1135.296502][T13442] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1135.318561][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.339252][T13442] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1135.359321][T13442] usb 6-1: media controller created [ 1135.389587][T13442] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1135.746714][T13442] usb 6-1: USB disconnect, device number 5 [ 1135.960863][T18686] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 1136.010509][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.066059][T18689] binder: 18688:18689 ioctl 4048587b 2000000005c0 returned -22 [ 1136.093606][T18689] vivid-000: ================= START STATUS ================= [ 1136.129105][T18692] FAULT_INJECTION: forcing a failure. [ 1136.129105][T18692] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.143506][T18689] vivid-000: Radio HW Seek Mode: Bounded [ 1136.170442][T18689] vivid-000: Radio Programmable HW Seek: false [ 1136.186984][T18689] vivid-000: RDS Rx I/O Mode: Block I/O [ 1136.196103][T18692] CPU: 0 UID: 0 PID: 18692 Comm: syz.6.3341 Tainted: G L syzkaller #0 PREEMPT(full) [ 1136.196135][T18692] Tainted: [L]=SOFTLOCKUP [ 1136.196142][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1136.196154][T18692] Call Trace: [ 1136.196161][T18692] [ 1136.196169][T18692] dump_stack_lvl+0x100/0x190 [ 1136.196199][T18692] should_fail_ex.cold+0x5/0xa [ 1136.196226][T18692] should_failslab+0xc2/0x120 [ 1136.196249][T18692] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1136.196281][T18692] ? __alloc_skb+0x140/0x710 [ 1136.196304][T18692] ? __alloc_skb+0x5b7/0x710 [ 1136.196331][T18692] __alloc_skb+0x140/0x710 [ 1136.196355][T18692] ? __alloc_skb+0x5b7/0x710 [ 1136.196380][T18692] ? __pfx___alloc_skb+0x10/0x10 [ 1136.196408][T18692] ? __might_fault+0x60/0x140 [ 1136.196437][T18692] pfkey_sendmsg+0x161/0x840 [ 1136.196470][T18692] ____sys_sendmsg+0x9e1/0xb70 [ 1136.196491][T18692] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1136.196520][T18692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.196550][T18692] ___sys_sendmsg+0x190/0x1e0 [ 1136.196574][T18692] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.196622][T18692] __sys_sendmsg+0x170/0x220 [ 1136.196662][T18692] ? __pfx___sys_sendmsg+0x10/0x10 [ 1136.196697][T18692] ? rcu_is_watching+0x12/0xc0 [ 1136.196728][T18692] do_syscall_64+0x115/0x870 [ 1136.196752][T18692] ? clear_bhb_loop+0x40/0x90 [ 1136.196776][T18692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.196795][T18692] RIP: 0033:0x7f3b5659ce59 [ 1136.196812][T18692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.196828][T18692] RSP: 002b:00007f3b574ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.196845][T18692] RAX: ffffffffffffffda RBX: 00007f3b56815fa0 RCX: 00007f3b5659ce59 [ 1136.196860][T18692] RDX: 0000000004008840 RSI: 0000200000000480 RDI: 0000000000000003 [ 1136.196870][T18692] RBP: 00007f3b574ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.196881][T18692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.196891][T18692] R13: 00007f3b56816038 R14: 00007f3b56815fa0 R15: 00007ffcf84d7808 [ 1136.196913][T18692] [ 1136.416182][T18695] binder: 18688:18695 ioctl 400c620e 200000000100 returned -22 [ 1136.416435][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.427344][T18689] vivid-000: Generate RBDS Instead of RDS: false [ 1136.438318][T18689] vivid-000: RDS Reception: true [ 1136.443281][T18689] vivid-000: RDS Program Type: 0 inactive [ 1136.449005][T18689] vivid-000: RDS PS Name: inactive [ 1136.454240][T18689] vivid-000: RDS Radio Text: inactive [ 1136.459709][T18689] vivid-000: RDS Traffic Announcement: false inactive [ 1136.466458][T18689] vivid-000: RDS Traffic Program: false inactive [ 1136.472795][T18689] vivid-000: RDS Music: false inactive [ 1136.478240][T18689] vivid-000: ================== END STATUS ================== [ 1136.559616][T13446] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1136.720076][T13446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.924017][T13446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.996557][T13446] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1137.025379][T13446] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1137.375469][T13446] usb 5-1: Manufacturer: syz [ 1137.401700][T13446] usb 5-1: config 0 descriptor?? [ 1137.453157][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.617070][ T30] audit: type=1400 audit(1780524628.343:1505): avc: denied { ioctl } for pid=18706 comm="syz.8.3335" path="socket:[63822]" dev="sockfs" ino=63822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1137.665256][ T30] audit: type=1400 audit(1780524628.393:1506): avc: denied { watch watch_reads } for pid=18706 comm="syz.8.3335" path="/" dev="ramfs" ino=63823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1137.698257][T18713] syzkaller1: entered promiscuous mode [ 1137.719132][T18713] syzkaller1: entered allmulticast mode [ 1137.752744][T13442] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1137.932469][T13442] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1137.957936][T13442] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 1137.976496][T13442] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.999008][T13442] usb 7-1: config 63 has no interface number 0 [ 1138.029319][T13442] usb 7-1: config 63 interface 66 has no altsetting 0 [ 1138.050762][T13442] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1138.061097][T18693] ªªªªªª: renamed from vlan0 (while UP) [ 1138.069334][ T9] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1138.070531][T13442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.094090][T13446] usbhid 5-1:0.0: can't add hid device: -71 [ 1138.100374][T13446] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1138.108287][T13442] usb 7-1: Product: syz [ 1138.115848][T13446] usb 5-1: USB disconnect, device number 59 [ 1138.143357][T18720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.151563][T18720] batadv_slave_1: entered promiscuous mode [ 1138.164022][T13442] usb 7-1: Manufacturer: syz [ 1138.189677][T13442] usb 7-1: SerialNumber: syz [ 1138.259172][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1138.280861][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.311028][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.330764][ T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1138.349136][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.371417][ T9] usb 9-1: config 0 descriptor?? [ 1138.449727][T13442] uvcvideo 7-1:63.66: probe with driver uvcvideo failed with error -22 [ 1138.465307][T13442] usb 7-1: USB disconnect, device number 104 [ 1138.495145][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.266860][T18723] CIFS mount error: No usable UNC path provided in device string! [ 1139.266860][T18723] [ 1139.277163][T18723] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1139.936372][T13444] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1139.944157][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 1139.954819][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.962926][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.987941][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1140.024094][ T9] usb 9-1: USB disconnect, device number 86 [ 1140.101664][T13444] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.134460][T13444] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1140.155228][T13444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.209926][T13444] usb 6-1: Product: syz [ 1140.234814][T13444] usb 6-1: Manufacturer: syz [ 1140.255403][T13444] usb 6-1: SerialNumber: syz [ 1140.548820][T13444] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1140.815487][T13444] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1140.864475][T13444] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1140.891805][T13444] usb 6-1: media controller created [ 1141.988448][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.996595][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.105888][ T30] audit: type=1400 audit(1780524632.833:1507): avc: denied { write } for pid=18725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1142.137595][T13444] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1143.178689][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.270766][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.613683][T13444] usb 6-1: USB disconnect, device number 6 [ 1143.660051][ T30] audit: type=1400 audit(1780524634.393:1508): avc: denied { write } for pid=18755 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.398491][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.521229][T13444] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1144.550520][T18765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1145.049984][T18767] wg1 speed is unknown, defaulting to 1000 [ 1145.057318][T18767] lo speed is unknown, defaulting to 1000 [ 1145.090043][T13444] usb 6-1: Using ep0 maxpacket: 16 [ 1145.113808][T13444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.131394][T13444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.141625][T13444] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1145.162904][T13444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.194763][T13444] usb 6-1: config 0 descriptor?? [ 1145.950701][T18778] CIFS mount error: No usable UNC path provided in device string! [ 1145.950701][T18778] [ 1145.961173][T18778] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1146.549192][T13444] usbhid 6-1:0.0: can't add hid device: -71 [ 1146.559845][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.568000][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.588667][T18775] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3363'. [ 1146.597863][T13444] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1146.708725][T13444] usb 6-1: USB disconnect, device number 7 [ 1147.227096][T13444] libceph: connect (1)[c::]:6789 error -13 [ 1147.252777][T13444] libceph: mon0 (1)[c::]:6789 connect error [ 1147.603602][T13444] libceph: connect (1)[c::]:6789 error -13 [ 1147.629391][T13444] libceph: mon0 (1)[c::]:6789 connect error [ 1147.650345][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.735347][T18780] ceph: No mds server is up or the cluster is laggy [ 1147.907138][ T30] audit: type=1400 audit(1780524638.633:1509): avc: denied { write } for pid=18781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.866770][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.908582][ T30] audit: type=1400 audit(1780524639.633:1510): avc: denied { write } for pid=18802 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.505710][T18817] fuse: Unknown parameter '' [ 1149.526292][T18817] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1149.609999][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.702410][ T30] audit: type=1400 audit(1780524640.433:1511): avc: denied { lock } for pid=18818 comm="syz.7.3371" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1149.780587][ T30] audit: type=1326 audit(1780524640.473:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.3371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757a19ce59 code=0x7ffc0000 [ 1149.876930][T16850] IPVS: starting estimator thread 0... [ 1149.885572][T18824] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1149.888464][T18827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1149.907884][ T30] audit: type=1326 audit(1780524640.473:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.3371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757a19ce59 code=0x7ffc0000 [ 1149.933437][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.982763][ T30] audit: type=1326 audit(1780524640.473:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.3371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757a19ce59 code=0x7ffc0000 [ 1150.013461][T18826] IPVS: using max 35 ests per chain, 84000 per kthread [ 1151.110059][ T30] audit: type=1326 audit(1780524640.473:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.3371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757a19ce59 code=0x7ffc0000 [ 1151.145189][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.294017][ T30] audit: type=1326 audit(1780524640.473:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.3371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757a19ce59 code=0x7ffc0000 [ 1151.379579][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.411147][ T30] audit: type=1326 audit(1780524640.483:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.3371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f757a19ce59 code=0x7ffc0000 [ 1151.508989][ T30] audit: type=1326 audit(1780524640.483:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.3371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757a19ce59 code=0x7ffc0000 [ 1151.605045][ T30] audit: type=1326 audit(1780524640.483:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.3371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757a19ce59 code=0x7ffc0000 [ 1152.260206][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.383722][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3376'. [ 1153.090593][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.314297][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.534108][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.588693][T18853] binder: 18852:18853 ioctl c0306201 200000000780 returned -14 [ 1154.624323][T18864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.635227][T18864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.742158][T18864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.859946][T18866] netlink: 'syz.7.3381': attribute type 1 has an invalid length. [ 1154.965036][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3382'. [ 1155.354691][T18866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1155.373402][T18871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1155.460462][T18866] bond1: (slave ip6gretap1): making interface the new active one [ 1155.470246][T18866] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1156.072800][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.169960][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.188014][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1156.188031][ T30] audit: type=1800 audit(1780524646.913:1584): pid=18866 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3381" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1156.876353][T18884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3384'. [ 1157.337040][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.359153][T13454] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1157.542587][T13454] usb 9-1: Using ep0 maxpacket: 8 [ 1157.561197][T13454] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1157.590611][T13454] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1157.635982][T13454] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1157.659353][T13454] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 63688, setting to 1024 [ 1157.679918][T13454] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1157.699715][T13454] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1157.709892][T13454] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.765810][T13454] usb 9-1: config 0 descriptor?? [ 1157.796770][T18889] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1157.969169][T16850] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1158.189214][T16850] usb 7-1: Using ep0 maxpacket: 8 [ 1158.202584][T16850] usb 7-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 1158.212034][T16850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.226819][T16850] usb 7-1: config 0 descriptor?? [ 1158.239997][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 1158.241592][T13454] usb 9-1: USB disconnect, device number 87 [ 1158.263845][T16850] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1158.293717][T16850] usb 7-1: Detected SIO [ 1158.326443][T16850] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1158.414374][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.647643][T18908] warn_alloc: 1 callbacks suppressed [ 1158.647702][T18908] syz.6.3390: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1158.668905][T18908] CPU: 0 UID: 0 PID: 18908 Comm: syz.6.3390 Tainted: G L syzkaller #0 PREEMPT(full) [ 1158.668940][T18908] Tainted: [L]=SOFTLOCKUP [ 1158.668947][T18908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1158.668955][T18908] Call Trace: [ 1158.668960][T18908] [ 1158.668965][T18908] dump_stack_lvl+0x100/0x190 [ 1158.668985][T18908] warn_alloc.cold+0x95/0x1c1 [ 1158.669000][T18908] ? __pfx_warn_alloc+0x10/0x10 [ 1158.669018][T18908] ? lockdep_hardirqs_on+0x78/0x100 [ 1158.669035][T18908] ? irqentry_exit+0x24d/0x970 [ 1158.669054][T18908] ? xskq_create+0xfb/0x1d0 [ 1158.669086][T18908] ? xskq_create+0xfb/0x1d0 [ 1158.669111][T18908] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1158.669151][T18908] ? xskq_create+0xfb/0x1d0 [ 1158.669169][T18908] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1158.669192][T18908] ? xskq_create+0xfb/0x1d0 [ 1158.669205][T18908] vmalloc_user_noprof+0x9e/0xe0 [ 1158.669221][T18908] ? xskq_create+0xfb/0x1d0 [ 1158.669235][T18908] xskq_create+0xfb/0x1d0 [ 1158.669249][T18908] xsk_setsockopt+0x743/0xab0 [ 1158.669262][T18908] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1158.669277][T18908] ? security_socket_setsockopt+0x51/0x230 [ 1158.669294][T18908] ? __sanitizer_cov_trace_pc+0x3f/0x70 [ 1158.669308][T18908] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1158.669321][T18908] do_sock_setsockopt+0xf3/0x1d0 [ 1158.669337][T18908] __sys_setsockopt+0x195/0x220 [ 1158.669357][T18908] __x64_sys_setsockopt+0xbd/0x160 [ 1158.669374][T18908] ? do_syscall_64+0x90/0x870 [ 1158.669389][T18908] ? lockdep_hardirqs_on+0x78/0x100 [ 1158.669404][T18908] do_syscall_64+0x115/0x870 [ 1158.669418][T18908] ? clear_bhb_loop+0x40/0x90 [ 1158.669433][T18908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.669445][T18908] RIP: 0033:0x7f3b5659ce59 [ 1158.669457][T18908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.669468][T18908] RSP: 002b:00007f3b5748d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1158.669480][T18908] RAX: ffffffffffffffda RBX: 00007f3b56816090 RCX: 00007f3b5659ce59 [ 1158.669488][T18908] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1158.669495][T18908] RBP: 00007f3b56632d6f R08: 0000000000000004 R09: 0000000000000000 [ 1158.669503][T18908] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.669510][T18908] R13: 00007f3b56816128 R14: 00007f3b56816090 R15: 00007ffcf84d7808 [ 1158.669527][T18908] [ 1158.912798][T18908] Mem-Info: [ 1158.916288][T18908] active_anon:24386 inactive_anon:0 isolated_anon:0 [ 1158.916288][T18908] active_file:27505 inactive_file:41178 isolated_file:0 [ 1158.916288][T18908] unevictable:768 dirty:298 writeback:0 [ 1158.916288][T18908] slab_reclaimable:8794 slab_unreclaimable:124487 [ 1158.916288][T18908] mapped:47159 shmem:15082 pagetables:1475 [ 1158.916288][T18908] sec_pagetables:0 bounce:0 [ 1158.916288][T18908] kernel_misc_reclaimable:0 [ 1158.916288][T18908] free:1227691 free_pcp:17306 free_cma:0 [ 1158.966695][T18908] Node 0 active_anon:87744kB inactive_anon:0kB active_file:109984kB inactive_file:164508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:188600kB dirty:1156kB writeback:0kB shmem:48992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14392kB pagetables:5724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1159.002824][T18908] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:36kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1159.035946][T18908] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.071969][T18908] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1159.078379][T18908] Node 0 DMA32 free:941868kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77656kB inactive_anon:0kB active_file:109984kB inactive_file:164508kB unevictable:1536kB writepending:1156kB zspages:0kB present:3129332kB managed:2537296kB mlocked:0kB bounce:0kB free_pcp:86772kB local_pcp:34880kB free_cma:0kB [ 1159.113034][T18908] lowmem_reserve[]: 0 0 1 1 1 [ 1159.118467][T18908] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1100kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1159.149226][T18908] lowmem_reserve[]: 0 0 0 0 0 [ 1159.154399][T18908] Node 1 Normal free:3956112kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB writepending:36kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.189583][T18908] lowmem_reserve[]: 0 0 0 0 0 [ 1159.194917][T18908] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1159.212673][T18908] Node 0 DMA32: 752*4kB (UM) 5704*8kB (UME) 3280*16kB (UME) 973*32kB (UME) 810*64kB (UME) 403*128kB (UME) 201*256kB (UME) 112*512kB (UME) 59*1024kB (UME) 17*2048kB (UME) 123*4096kB (UM) = 943520kB [ 1159.233961][T18908] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1159.247650][T18908] Node 1 Normal: 0*4kB 6*8kB (UM) 6*16kB (UM) 4*32kB (U) 8*64kB (UM) 5*128kB (UM) 2*256kB (M) 5*512kB (UM) 1*1024kB (M) 5*2048kB (UM) 962*4096kB (UM) = 3956112kB [ 1159.264454][T18908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.274590][T18908] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1159.284289][T18908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.295332][T18908] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1159.304826][T18908] 78602 total pagecache pages [ 1159.310095][T18908] 0 pages in swap cache [ 1159.314466][T18908] Free swap = 124996kB [ 1159.318760][T18908] Total swap = 124996kB [ 1159.323458][T18908] 2097051 pages RAM [ 1159.327494][T18908] 0 pages HighMem/MovableOnly [ 1159.332542][T18908] 430837 pages reserved [ 1159.336870][T18908] 0 pages cma reserved [ 1159.371082][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.459919][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.766557][T13454] usb 7-1: USB disconnect, device number 105 [ 1159.794848][T13454] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1159.852373][T13454] ftdi_sio 7-1:0.0: device disconnected [ 1160.492004][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.099556][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.479379][T13444] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1161.532932][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.599378][T13446] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1161.618128][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.625434][ C0] bridge0: topology change detected, propagating [ 1161.632339][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.639625][ C0] bridge0: topology change detected, propagating [ 1161.647457][ C0] bridge0: port 3(vlan2) entered forwarding state [ 1161.653933][ C0] bridge0: topology change detected, propagating [ 1161.681896][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.728633][T13444] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1161.748856][T13444] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 1161.763410][T13444] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.779201][T13444] usb 7-1: config 63 has no interface number 0 [ 1161.785729][T13444] usb 7-1: config 63 interface 66 has no altsetting 0 [ 1161.826087][T13444] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1161.837791][T13446] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1161.847864][T13444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.856085][T13446] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1161.868951][T13444] usb 7-1: Product: syz [ 1161.874920][T13444] usb 7-1: Manufacturer: syz [ 1161.881334][T13446] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1161.894718][T13444] usb 7-1: SerialNumber: syz [ 1161.916597][T13446] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1161.938722][T13446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1161.947619][T13446] usb 5-1: Product: syz [ 1161.952412][T13446] usb 5-1: Manufacturer: syz [ 1161.957123][T13446] usb 5-1: SerialNumber: syz [ 1162.270454][T13446] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1162.373772][T13444] uvcvideo 7-1:63.66: probe with driver uvcvideo failed with error -22 [ 1162.391402][T13444] usb 7-1: USB disconnect, device number 106 [ 1162.410508][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.469170][T13454] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1162.499346][T13445] usb 5-1: USB disconnect, device number 60 [ 1162.540299][T13445] usblp0: removed [ 1162.570002][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.629896][T13454] usb 6-1: Using ep0 maxpacket: 16 [ 1162.643600][T13454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.674366][T13454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.686621][T18961] : entered promiscuous mode [ 1162.700504][T13454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1162.726955][T13454] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1162.747061][T13454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.776775][T13454] usb 6-1: config 0 descriptor?? [ 1163.105313][T18954] netlink: 'syz.5.3401': attribute type 4 has an invalid length. [ 1163.486100][ T30] audit: type=1400 audit(1780524654.213:1585): avc: denied { map } for pid=18953 comm="syz.5.3401" path="/dev/video4" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1163.564363][T13454] usbhid 6-1:0.0: can't add hid device: -71 [ 1163.573557][T13454] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1163.591123][T13454] usb 6-1: USB disconnect, device number 8 [ 1163.610017][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.811924][ T30] audit: type=1400 audit(1780524654.543:1586): avc: denied { read } for pid=18973 comm="syz.7.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1164.609119][T13445] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1164.651005][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.785518][T13445] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1164.804143][T13445] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 1164.823486][T13445] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.852737][T13445] usb 7-1: config 63 has no interface number 0 [ 1164.869484][T13445] usb 7-1: config 63 interface 66 has no altsetting 0 [ 1164.888804][T13445] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1164.909304][T13445] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.931516][T13445] usb 7-1: Product: syz [ 1164.951524][T13445] usb 7-1: Manufacturer: syz [ 1164.971179][T13445] usb 7-1: SerialNumber: syz [ 1165.619262][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.693054][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.727255][T13445] uvcvideo 7-1:63.66: probe with driver uvcvideo failed with error -22 [ 1165.757580][T13445] usb 7-1: USB disconnect, device number 107 [ 1165.833021][ T30] audit: type=1400 audit(1780524656.563:1587): avc: denied { name_bind 0x1000000 } for pid=18991 comm="syz.4.3413" path="socket:[64526]" dev="sockfs" ino=64526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1165.994526][T18993] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1166.447771][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3415'. [ 1166.494690][T19001] xt_connbytes: Forcing CT accounting to be enabled [ 1166.509517][T19001] set match dimension is over the limit! [ 1166.633678][ T30] audit: type=1400 audit(1780524657.363:1588): avc: denied { append } for pid=19009 comm="syz.5.3419" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1166.730172][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.836749][T19014] netlink: 'syz.5.3420': attribute type 6 has an invalid length. [ 1166.854092][T19014] netlink: 'syz.5.3420': attribute type 6 has an invalid length. [ 1166.869576][T13454] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1167.029291][T19014] wg1 speed is unknown, defaulting to 1000 [ 1167.047861][T19014] lo speed is unknown, defaulting to 1000 [ 1167.198204][ T30] audit: type=1400 audit(1780524657.913:1589): avc: denied { setcurrent } for pid=19020 comm="syz.4.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1167.219669][ T30] audit: type=1401 audit(1780524657.913:1590): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1167.243779][T13454] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1167.263188][T13454] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1167.284155][T13454] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1167.308746][T13454] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.335961][T19008] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1167.354496][T13454] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1167.789306][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.357024][ T30] audit: type=1400 audit(1780524658.963:1591): avc: denied { read } for pid=19005 comm="syz.8.3418" name="file0" dev="fuse" ino=1073741830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1168.650856][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.878581][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.415677][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.484635][T19042] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[19043] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[19042] [ 1170.515935][T19042] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1170.607665][T19042] overlayfs: missing 'lowerdir' [ 1170.616098][ T9] usb 9-1: USB disconnect, device number 88 [ 1170.818422][ T30] audit: type=1400 audit(1780524661.543:1592): avc: denied { read } for pid=19047 comm="syz.5.3428" path="socket:[65669]" dev="sockfs" ino=65669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1170.865063][T13445] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1171.131898][T13445] usb 7-1: config 0 has no interfaces? [ 1171.142298][T13445] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1171.155966][T13445] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.169114][T13445] usb 7-1: Product: syz [ 1171.174869][T13445] usb 7-1: Manufacturer: syz [ 1171.183197][T13445] usb 7-1: SerialNumber: syz [ 1171.194331][T13445] usb 7-1: config 0 descriptor?? [ 1171.209980][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.293820][T19054] random: crng reseeded on system resumption [ 1171.457974][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.482178][T13446] usb 7-1: USB disconnect, device number 108 [ 1171.496427][ T30] audit: type=1400 audit(1780524662.223:1593): avc: denied { append } for pid=19053 comm="syz.7.3430" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1171.964028][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.984026][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.994721][ T30] audit: type=1400 audit(1780524662.723:1594): avc: denied { ioctl } for pid=19053 comm="syz.7.3430" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1172.595847][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.597081][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3432'. [ 1172.909542][T13446] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1173.052399][T19068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1173.141352][T13446] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1173.160595][T19062] bond1: (slave hsr0): The slave device specified does not support setting the MAC address [ 1173.173154][T13446] usb 9-1: config 63 has an invalid interface number: 66 but max is 0 [ 1173.190600][T13446] usb 9-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.199922][T19062] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1173.218539][T13446] usb 9-1: config 63 has no interface number 0 [ 1173.236790][T13446] usb 9-1: config 63 interface 66 has no altsetting 0 [ 1173.256181][T19062] bond1: (slave hsr0): Error -22 calling dev_set_mtu [ 1173.256495][T13446] usb 9-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1173.269180][ T9] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1173.298499][T13446] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.327474][T13446] usb 9-1: Product: syz [ 1173.338639][T13446] usb 9-1: Manufacturer: syz [ 1173.360128][T13446] usb 9-1: SerialNumber: syz [ 1173.457473][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1173.476598][ T9] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 1173.491566][ T9] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.561820][ T9] usb 7-1: config 63 has no interface number 0 [ 1173.604265][ T9] usb 7-1: config 63 interface 66 has no altsetting 0 [ 1173.617303][T13446] uvcvideo 9-1:63.66: probe with driver uvcvideo failed with error -22 [ 1173.626674][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.665552][T13446] usb 9-1: USB disconnect, device number 89 [ 1173.709374][ T9] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1173.727134][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.850762][ T9] usb 7-1: Product: syz [ 1173.855047][ T9] usb 7-1: Manufacturer: syz [ 1173.860208][ T9] usb 7-1: SerialNumber: syz [ 1174.653768][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.023792][ T9] uvcvideo 7-1:63.66: probe with driver uvcvideo failed with error -22 [ 1175.056011][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.181780][ T9] usb 7-1: USB disconnect, device number 109 [ 1176.020580][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.970813][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.609530][T16841] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1177.636076][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.816888][T19108] netlink: 'syz.6.3442': attribute type 5 has an invalid length. [ 1177.826399][T16841] usb 9-1: Using ep0 maxpacket: 8 [ 1177.847369][T16841] usb 9-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 1177.856812][T16841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.882620][T16841] usb 9-1: config 0 descriptor?? [ 1177.910979][T16841] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1177.933178][T16841] usb 9-1: Detected SIO [ 1177.953520][T16841] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1177.989572][T13446] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1178.089394][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.122363][T13446] usb 6-1: device descriptor read/64, error -71 [ 1178.196281][T19096] syz.8.3439: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 1178.211628][T19096] CPU: 0 UID: 0 PID: 19096 Comm: syz.8.3439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.211659][T19096] Tainted: [L]=SOFTLOCKUP [ 1178.211664][T19096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1178.211672][T19096] Call Trace: [ 1178.211677][T19096] [ 1178.211682][T19096] dump_stack_lvl+0x100/0x190 [ 1178.211702][T19096] warn_alloc.cold+0x95/0x1c1 [ 1178.211716][T19096] ? __pfx_warn_alloc+0x10/0x10 [ 1178.211738][T19096] ? stack_depot_save_flags+0x27/0x9d0 [ 1178.211761][T19096] ? xskq_create+0xfb/0x1d0 [ 1178.211775][T19096] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1178.211797][T19096] ? xskq_create+0xfb/0x1d0 [ 1178.211814][T19096] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1178.211838][T19096] ? xskq_create+0xfb/0x1d0 [ 1178.211851][T19096] vmalloc_user_noprof+0x9e/0xe0 [ 1178.211867][T19096] ? xskq_create+0xfb/0x1d0 [ 1178.211879][T19096] xskq_create+0xfb/0x1d0 [ 1178.211899][T19096] xsk_setsockopt+0x743/0xab0 [ 1178.211914][T19096] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1178.211927][T19096] ? find_held_lock+0x2b/0x80 [ 1178.211939][T19096] ? __fget_files+0x215/0x3d0 [ 1178.211957][T19096] ? selinux_socket_setsockopt+0x6a/0x80 [ 1178.211974][T19096] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1178.211988][T19096] do_sock_setsockopt+0xf3/0x1d0 [ 1178.212003][T19096] __sys_setsockopt+0x195/0x220 [ 1178.212024][T19096] __x64_sys_setsockopt+0xbd/0x160 [ 1178.212041][T19096] ? do_syscall_64+0x90/0x870 [ 1178.212056][T19096] ? lockdep_hardirqs_on+0x78/0x100 [ 1178.212072][T19096] do_syscall_64+0x115/0x870 [ 1178.212087][T19096] ? clear_bhb_loop+0x40/0x90 [ 1178.212102][T19096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.212115][T19096] RIP: 0033:0x7f833d99ce59 [ 1178.212125][T19096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.212138][T19096] RSP: 002b:00007f833e770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1178.212150][T19096] RAX: ffffffffffffffda RBX: 00007f833dc16090 RCX: 00007f833d99ce59 [ 1178.212158][T19096] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1178.212165][T19096] RBP: 00007f833da32d6f R08: 0000000000000004 R09: 0000000000000000 [ 1178.212173][T19096] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.212181][T19096] R13: 00007f833dc16128 R14: 00007f833dc16090 R15: 00007fffeb556d38 [ 1178.212198][T19096] [ 1178.212222][T19096] Mem-Info: [ 1178.439169][T13446] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1178.462048][T19096] active_anon:31065 inactive_anon:0 isolated_anon:0 [ 1178.462048][T19096] active_file:27505 inactive_file:41197 isolated_file:0 [ 1178.462048][T19096] unevictable:772 dirty:330 writeback:0 [ 1178.462048][T19096] slab_reclaimable:8681 slab_unreclaimable:125136 [ 1178.462048][T19096] mapped:53910 shmem:21862 pagetables:1547 [ 1178.462048][T19096] sec_pagetables:0 bounce:0 [ 1178.462048][T19096] kernel_misc_reclaimable:0 [ 1178.462048][T19096] free:1228099 free_pcp:10430 free_cma:0 [ 1178.511703][T19096] Node 0 active_anon:124260kB inactive_anon:0kB active_file:109984kB inactive_file:164584kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:215604kB dirty:1320kB writeback:0kB shmem:85912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14456kB pagetables:6012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1178.546658][T19096] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1178.579716][T19096] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.611014][T19096] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1178.616939][T19096] Node 0 DMA32 free:940924kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:124260kB inactive_anon:0kB active_file:109984kB inactive_file:164584kB unevictable:1552kB writepending:1320kB zspages:0kB present:3129332kB managed:2537296kB mlocked:16kB bounce:0kB free_pcp:41712kB local_pcp:20228kB free_cma:0kB [ 1178.655414][T19096] lowmem_reserve[]: 0 0 1 1 1 [ 1178.659286][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.660629][T19096] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1100kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1178.698283][T19096] lowmem_reserve[]: 0 0 0 0 0 [ 1178.704718][T19096] Node 1 Normal free:3956112kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.736679][T19096] lowmem_reserve[]: 0 0 0 0 0 [ 1178.742053][T19096] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1178.755453][T19096] Node 0 DMA32: 1397*4kB (UM) 4108*8kB (UME) 2318*16kB (UME) 1282*32kB (UME) 911*64kB (UME) 472*128kB (UME) 196*256kB (UME) 114*512kB (UME) 63*1024kB (UME) 14*2048kB (UME) 123*4096kB (UM) = 940820kB [ 1178.775614][T19096] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1178.787493][T19096] Node 1 Normal: 0*4kB 6*8kB (UM) 6*16kB (UM) 4*32kB (U) 8*64kB (UM) 5*128kB (UM) 2*256kB (M) 5*512kB (UM) 1*1024kB (M) 5*2048kB (UM) 962*4096kB (UM) = 3956112kB [ 1178.805704][T19096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1178.815429][T19096] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1178.824880][T19096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1178.834563][T19096] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1178.843993][T19096] 90571 total pagecache pages [ 1178.848682][T19096] 0 pages in swap cache [ 1178.852975][T19096] Free swap = 124996kB [ 1178.857159][T19096] Total swap = 124996kB [ 1178.861373][T19096] 2097051 pages RAM [ 1178.865211][T19096] 0 pages HighMem/MovableOnly [ 1178.870015][T19096] 430837 pages reserved [ 1178.874211][T19096] 0 pages cma reserved [ 1179.302393][T19120] netlink: 392 bytes leftover after parsing attributes in process `syz.7.3446'. [ 1179.402071][T19126] fuse: Bad value for 'rootmode' [ 1179.439749][ T30] audit: type=1400 audit(1780524670.173:1595): avc: denied { remount } for pid=19123 comm="syz.5.3449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1179.488388][ T9] usb 9-1: USB disconnect, device number 90 [ 1179.641054][ T9] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1179.669610][ T9] ftdi_sio 9-1:0.0: device disconnected [ 1179.690662][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.869150][T13446] usb 6-1: device descriptor read/64, error -71 [ 1179.990656][T13446] usb usb6-port1: attempt power cycle [ 1180.350227][T13446] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1180.374813][T13446] usb 6-1: Using ep0 maxpacket: 16 [ 1180.385318][T13446] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.398363][T13446] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1180.407749][T13446] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1180.418942][T13446] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1180.428441][T13446] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1180.438412][T13446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.448109][T13446] usb 6-1: Product: syz [ 1180.455375][T13446] usb 6-1: Manufacturer: syz [ 1180.460564][T13446] usb 6-1: SerialNumber: syz [ 1180.489957][T13445] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1180.660021][T13445] usb 9-1: Using ep0 maxpacket: 8 [ 1180.670699][T13445] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1180.689675][T13445] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.715211][T19124] netlink: 'syz.5.3449': attribute type 1 has an invalid length. [ 1180.719643][T13445] usb 9-1: config 0 has no interface number 0 [ 1180.729618][T13447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.743420][ T30] audit: type=1400 audit(1780524671.473:1596): avc: denied { mount } for pid=19142 comm="syz.6.3455" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1180.760188][T13445] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1180.780793][T19124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1180.791182][T19126] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3449'. [ 1180.831238][ T30] audit: type=1400 audit(1780524671.563:1597): avc: denied { unmount } for pid=8043 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1180.833113][T13445] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.917470][T13445] usb 9-1: Product: syz [ 1180.923566][T19124] bond2: (slave geneve2): making interface the new active one [ 1180.937481][T13445] usb 9-1: Manufacturer: syz [ 1180.944949][T13445] usb 9-1: SerialNumber: syz [ 1180.951280][T19150] binder: 19149:19150 ioctl c0306201 2000000003c0 returned -14 [ 1180.958939][T19124] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1180.976133][T13445] usb 9-1: config 0 descriptor?? [ 1180.985323][T13445] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1180.995195][T13445] uvcvideo 9-1:0.31: Failed to create links for entity 32774 [ 1181.037492][T13446] usb 6-1: selecting invalid altsetting 0 [ 1181.044730][T13445] uvcvideo 9-1:0.31: Failed to register entities (-22). [ 1181.124311][T13446] usb 6-1: USB disconnect, device number 11 [ 1181.196249][T13445] usb 9-1: USB disconnect, device number 91 [ 1181.217352][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.351556][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1181.394389][T19156] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1181.402756][T19156] overlayfs: failed to set xattr on upper [ 1181.408520][T19156] overlayfs: ...falling back to redirect_dir=nofollow. [ 1181.415457][T19156] overlayfs: ...falling back to index=off. [ 1181.421368][T19156] overlayfs: ...falling back to uuid=null. [ 1181.479702][T19157] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1181.489797][ T30] audit: type=1400 audit(1780524672.103:1598): avc: denied { mounton } for pid=19153 comm="syz.6.3459" path="/file0" dev="ramfs" ino=65987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1181.624627][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.657905][T12392] udevd[12392]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1181.700746][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1181.707153][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.719318][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.729405][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1181.738441][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.749036][ T9] usb 5-1: config 0 descriptor?? [ 1181.770722][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.268428][T19162] CIFS mount error: No usable UNC path provided in device string! [ 1182.268428][T19162] [ 1182.279320][T19162] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1183.424547][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1183.440110][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.459280][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1183.485598][ T9] usb 5-1: USB disconnect, device number 61 [ 1183.545092][ T30] audit: type=1400 audit(1780524674.273:1599): avc: denied { map } for pid=19165 comm="syz.6.3462" path="socket:[64744]" dev="sockfs" ino=64744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1183.608175][T19167] xt_hashlimit: size too large, truncated to 1048576 [ 1183.609175][ T30] audit: type=1400 audit(1780524674.273:1600): avc: denied { accept } for pid=19165 comm="syz.6.3462" path="socket:[64744]" dev="sockfs" ino=64744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1184.252453][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.381181][T19169] dvmrp0: entered allmulticast mode [ 1184.515146][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.542121][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.859392][T13454] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1185.944181][ T30] audit: type=1400 audit(1780524676.673:1601): avc: denied { listen } for pid=19196 comm="syz.7.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1185.989165][T16850] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1186.027652][T13454] usb 9-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1186.036889][T13454] usb 9-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1186.045403][T13454] usb 9-1: Product: syz [ 1186.052383][T13454] usb 9-1: config 0 descriptor?? [ 1186.064844][T13454] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1186.074968][T13454] usb 9-1: Detected FT232H [ 1186.141624][T16850] usb 7-1: config 33 has an invalid interface number: 161 but max is 2 [ 1186.150165][T16850] usb 7-1: config 33 has an invalid interface number: 35 but max is 2 [ 1186.158362][T16850] usb 7-1: config 33 has an invalid interface number: 204 but max is 2 [ 1186.167392][T16850] usb 7-1: config 33 has no interface number 0 [ 1186.173842][T16850] usb 7-1: config 33 has no interface number 1 [ 1186.181370][T16850] usb 7-1: config 33 has no interface number 2 [ 1186.187620][T16850] usb 7-1: config 33 interface 161 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1186.199348][T16850] usb 7-1: config 33 interface 204 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1186.210714][T16850] usb 7-1: config 33 interface 204 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1186.221962][T16850] usb 7-1: config 33 interface 204 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 1186.266067][T13454] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 1186.277369][T16850] usb 7-1: config 33 interface 204 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 1186.309414][T16850] usb 7-1: config 33 interface 204 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1186.320541][T16850] usb 7-1: config 33 interface 204 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1186.343653][T16850] usb 7-1: config 33 interface 204 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1186.355254][T16850] usb 7-1: config 33 interface 204 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1186.366301][T16850] usb 7-1: config 33 interface 204 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1186.381714][T16850] usb 7-1: config 33 interface 204 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1186.392987][T16850] usb 7-1: config 33 interface 204 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1186.403819][T16850] usb 7-1: config 33 interface 204 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1186.414782][T16850] usb 7-1: config 33 interface 204 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1186.425611][T16850] usb 7-1: config 33 interface 161 has no altsetting 0 [ 1186.432502][T16850] usb 7-1: config 33 interface 35 has no altsetting 0 [ 1186.439305][T16850] usb 7-1: config 33 interface 204 has no altsetting 0 [ 1186.447686][T16850] usb 7-1: New USB device found, idVendor=07d1, idProduct=3c04, bcdDevice=25.78 [ 1186.458229][T16850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.466287][T16850] usb 7-1: Product: syz [ 1186.470564][T16850] usb 7-1: Manufacturer: syz [ 1186.475169][T16850] usb 7-1: SerialNumber: syz [ 1186.509171][T13444] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1186.578017][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.660527][T13444] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1186.671662][T13445] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1186.679373][T13444] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1186.690662][T13444] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1186.701487][T13444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.713647][T19199] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1186.740898][T16850] usbhid 7-1:33.204: couldn't find an input interrupt endpoint [ 1186.744920][T13444] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1186.748916][T13454] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1186.797706][T16850] usb 7-1: USB disconnect, device number 110 [ 1186.849117][T13445] usb 6-1: Using ep0 maxpacket: 32 [ 1186.863389][T13445] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1186.896798][T13445] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1186.927077][T13454] usb 9-1: USB disconnect, device number 92 [ 1186.935933][T13445] usb 6-1: string descriptor 0 read error: -22 [ 1186.943133][T13445] usb 6-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 1186.952272][T13445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.985130][T13454] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1187.001136][T13454] ftdi_sio 9-1:0.0: device disconnected [ 1187.119052][T19202] syzkaller0: entered allmulticast mode [ 1187.147363][T19202] syzkaller0 (unregistering): left allmulticast mode [ 1187.338549][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.455373][T13445] usbhid 6-1:1.0: can't add hid device: -32 [ 1187.514573][T13445] usbhid 6-1:1.0: probe with driver usbhid failed with error -32 [ 1187.613899][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.753658][T13445] usb 6-1: USB disconnect, device number 12 [ 1188.661288][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.468643][ T30] audit: type=1400 audit(1780524680.193:1602): avc: denied { unmount } for pid=8924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1190.879446][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.898786][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.925229][T16850] usb 5-1: USB disconnect, device number 62 [ 1191.057253][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.165098][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3482'. [ 1191.241745][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1191.739392][T13442] usb 7-1: new full-speed USB device number 111 using dummy_hcd [ 1191.859643][T19239] atomic_op ffff88805416d998 conn xmit_atomic 0000000000000000 [ 1191.868921][T19239] netlink: 'syz.4.3484': attribute type 5 has an invalid length. [ 1191.944833][ T30] audit: type=1400 audit(1780524682.663:1603): avc: granted { setsecparam } for pid=19236 comm="syz.4.3484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1192.258773][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.268220][T13442] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1192.333416][T13442] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1192.342998][T13442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.351381][T13442] usb 7-1: Product: syz [ 1192.357334][T13442] usb 7-1: Manufacturer: syz [ 1192.367430][T13442] usb 7-1: SerialNumber: syz [ 1192.378457][T13442] usb 7-1: config 0 descriptor?? [ 1192.407356][T13442] streamzap 7-1:0.0: streamzap_probe: endpoint doesn't match input device 0206 [ 1192.844822][T16841] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1193.024846][T19249] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3486'. [ 1193.963243][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.971365][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.041534][ T9] usb 6-1: device descriptor read/64, error -71 [ 1194.051279][T19256] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 1194.064175][ T30] audit: type=1400 audit(1780524684.793:1604): avc: denied { firmware_load } for pid=19255 comm="syz.8.3489" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1194.069324][T16841] usb 5-1: Using ep0 maxpacket: 8 [ 1194.086470][T19256] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 1194.109638][T16841] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 1194.368599][T16841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.454815][T13445] usb 7-1: USB disconnect, device number 111 [ 1194.464660][T16841] usb 5-1: config 0 descriptor?? [ 1194.489576][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1194.524663][T16841] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1194.580360][T16841] usb 5-1: Detected SIO [ 1194.667374][T16841] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1194.691950][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1194.767224][ T9] usb 6-1: config 0 has no interfaces? [ 1194.872161][ T9] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1195.000334][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.103464][ T9] usb 6-1: Product: syz [ 1195.164950][ T9] usb 6-1: Manufacturer: syz [ 1195.214994][ T9] usb 6-1: SerialNumber: syz [ 1195.279740][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.321717][ T9] usb 6-1: config 0 descriptor?? [ 1195.706052][ T9] usb 6-1: USB disconnect, device number 14 [ 1195.844155][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3493'. [ 1195.885824][T16841] usb 5-1: USB disconnect, device number 63 [ 1195.894979][T16841] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1195.933217][T16841] ftdi_sio 5-1:0.0: device disconnected [ 1196.228461][ T30] audit: type=1400 audit(1780524686.953:1605): avc: denied { read } for pid=19278 comm="syz.7.3488" name="cgroup.procs" dev="cgroup" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 1196.263030][ T30] audit: type=1400 audit(1780524686.983:1606): avc: denied { open } for pid=19278 comm="syz.7.3488" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 1196.452917][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.891444][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.955300][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.010991][T16841] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1198.607217][ T30] audit: type=1400 audit(1780524689.333:1607): avc: denied { read write } for pid=19288 comm="syz.7.3500" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1198.659163][T16841] usb 5-1: Using ep0 maxpacket: 32 [ 1198.669649][ T30] audit: type=1400 audit(1780524689.333:1608): avc: denied { open } for pid=19288 comm="syz.7.3500" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1198.671818][T16841] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1198.718789][ T30] audit: type=1400 audit(1780524689.333:1609): avc: denied { ioctl } for pid=19288 comm="syz.7.3500" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1198.742770][T19299] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1198.794495][T16841] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1198.817093][T16841] usb 5-1: string descriptor 0 read error: -22 [ 1198.838784][T16841] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 1198.862866][T16841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.973008][T13442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.337290][T16841] usbhid 5-1:1.0: can't add hid device: -32 [ 1199.355842][T16841] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 1199.410201][T16841] usb 5-1: USB disconnect, device number 64 [ 1200.012255][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.203588][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3505'. [ 1200.292657][T19314] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3506'. [ 1200.304309][T19314] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3506'. [ 1200.649681][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.969327][T16850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.057364][T13446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.079158][T16841] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1201.079158][T13444] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1201.232320][T13444] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.264598][T13444] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1201.284084][T13444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.301929][T16841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.325428][T13444] usb 7-1: Product: syz [ 1201.338628][T13444] usb 7-1: Manufacturer: syz [ 1201.338631][T16841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.338670][T16841] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1201.393497][T16841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.409542][T13444] usb 7-1: SerialNumber: syz [ 1201.421274][T16841] usb 9-1: config 0 descriptor?? [ 1201.467674][T13444] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1201.877476][T13444] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1201.888705][T19317] ------------[ cut here ]------------ [ 1201.894696][T19317] usb 7-1: BOGUS control dir, pipe 80007080 doesn't match bRequestType c0 [ 1201.904189][T19317] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#1: syz.6.3507/19317 [ 1201.914619][T19317] Modules linked in: [ 1201.918835][T19317] CPU: 1 UID: 0 PID: 19317 Comm: syz.6.3507 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.930322][T19317] Tainted: [L]=SOFTLOCKUP [ 1201.934814][T19317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1201.944944][T19317] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 1201.952591][T19317] Code: d2 74 5d 48 89 54 24 40 e8 0f aa b0 fa 4c 89 ef e8 c7 99 dd fe 48 89 c6 48 8d 3d ed ec 8b 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 e3 a9 b0 fa 89 ee bf ff 00 00 00 [ 1201.972596][T19317] RSP: 0018:ffffc9000460f918 EFLAGS: 00010287 [ 1201.978692][T19317] RAX: ffffffff8c82dd60 RBX: ffff888027a32700 RCX: 0000000080007080 [ 1201.986971][T19317] RDX: ffff88807d858220 RSI: ffffffff8c82dd60 RDI: ffffffff90e3f350 [ 1201.995085][T19317] RBP: ffff8880640b2058 R08: 00000000000000c0 R09: 0000000000000000 [ 1202.003111][T19317] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802d380940 [ 1202.011146][T19317] R13: ffff8880640b20b0 R14: 0000000080007080 R15: 00000000000000c0 [ 1202.019173][T19317] FS: 00007f3b574ae6c0(0000) GS:ffff888124483000(0000) knlGS:0000000000000000 [ 1202.028101][T19317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1202.028148][T19317] CR2: 000000110c3571b1 CR3: 000000005098e000 CR4: 00000000003526f0 [ 1202.028165][T19317] Call Trace: [ 1202.028174][T19317] [ 1202.028191][T19317] ? __init_swait_queue_head+0xca/0x150 [ 1202.054911][T19317] usb_start_wait_urb+0x10e/0x580 [ 1202.059997][T19317] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1202.065540][T19317] ? __asan_memset+0x23/0x50 [ 1202.070177][T19317] usb_control_msg+0x328/0x4b0 [ 1202.074961][T19317] ? __pfx_usb_control_msg+0x10/0x10 [ 1202.080285][T19317] ? kasan_save_stack+0x3f/0x50 [ 1202.085149][T19317] ? kasan_save_track+0x14/0x30 [ 1202.090286][T19317] ? __kasan_kmalloc+0xaa/0xb0 [ 1202.095039][T19317] ? __kmalloc_noprof+0x301/0x850 [ 1202.100102][T19317] ? i2cdev_ioctl_rdwr+0xcf/0x700 [ 1202.105135][T19317] ? i2cdev_ioctl+0x19d/0x830 [ 1202.109817][T19317] ? look_up_lock_class+0x55/0x120 [ 1202.114912][T19317] gl861_ctrl_msg+0x1a5/0x4a0 [ 1202.119658][T19317] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1202.124845][T19317] ? __lock_acquire+0x4a5/0x2630 [ 1202.129830][T19317] gl861_i2c_master_xfer+0x545/0x690 [ 1202.135147][T19317] __i2c_transfer+0x5e9/0x1780 [ 1202.137407][T16841] usbhid 9-1:0.0: can't add hid device: -71 [ 1202.139984][T19317] ? __pfx___i2c_transfer+0x10/0x10 [ 1202.140023][T19317] ? rt_mutex_slowtrylock+0x93/0x100 [ 1202.140063][T19317] i2c_transfer+0x15f/0x380 [ 1202.160987][T19317] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 1202.165963][T19317] i2cdev_ioctl+0x19d/0x830 [ 1202.170535][T19317] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1202.173896][T16841] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1202.175571][T19317] ? selinux_file_ioctl+0x13b/0x290 [ 1202.175613][T19317] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1202.193537][T19317] __x64_sys_ioctl+0x18e/0x210 [ 1202.198286][T19317] do_syscall_64+0x115/0x870 [ 1202.202915][T19317] ? clear_bhb_loop+0x40/0x90 [ 1202.207576][T19317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.213492][T19317] RIP: 0033:0x7f3b5659ce59 [ 1202.217891][T19317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.237523][T19317] RSP: 002b:00007f3b574ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1202.245936][T19317] RAX: ffffffffffffffda RBX: 00007f3b56815fa0 RCX: 00007f3b5659ce59 [ 1202.254242][T19317] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000007 [ 1202.262246][T19317] RBP: 00007f3b56632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1202.270232][T19317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.278182][T19317] R13: 00007f3b56816038 R14: 00007f3b56815fa0 R15: 00007ffcf84d7808 [ 1202.286173][T19317] [ 1202.289206][T19317] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1202.296462][T19317] CPU: 1 UID: 0 PID: 19317 Comm: syz.6.3507 Tainted: G L syzkaller #0 PREEMPT(full) [ 1202.307375][T19317] Tainted: [L]=SOFTLOCKUP [ 1202.311674][T19317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1202.321723][T19317] Call Trace: [ 1202.324979][T19317] [ 1202.327887][T19317] dump_stack_lvl+0x100/0x190 [ 1202.332542][T19317] vpanic+0x552/0x970 [ 1202.336501][T19317] ? __pfx_vpanic+0x10/0x10 [ 1202.340997][T19317] panic+0xd1/0xe0 [ 1202.344694][T19317] ? __pfx_panic+0x10/0x10 [ 1202.349102][T19317] check_panic_on_warn.cold+0x19/0x34 [ 1202.354472][T19317] ? usb_submit_urb+0x1573/0x1910 [ 1202.359493][T19317] __warn.cold+0x191/0x328 [ 1202.363909][T19317] __report_bug+0x296/0x3d0 [ 1202.368392][T19317] ? usb_submit_urb+0x1573/0x1910 [ 1202.373396][T19317] ? __pfx___report_bug+0x10/0x10 [ 1202.378403][T19317] ? mark_held_locks+0x40/0x70 [ 1202.383149][T19317] ? stack_depot_save_flags+0x479/0x9d0 [ 1202.388679][T19317] report_bug_entry+0xe1/0x290 [ 1202.393421][T19317] ? usb_submit_urb+0x157e/0x1910 [ 1202.398438][T19317] handle_bug+0x1cd/0x2a0 [ 1202.402762][T19317] exc_invalid_op+0x17/0x50 [ 1202.407262][T19317] asm_exc_invalid_op+0x1a/0x20 [ 1202.412093][T19317] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 1202.417707][T19317] Code: d2 74 5d 48 89 54 24 40 e8 0f aa b0 fa 4c 89 ef e8 c7 99 dd fe 48 89 c6 48 8d 3d ed ec 8b 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 e3 a9 b0 fa 89 ee bf ff 00 00 00 [ 1202.437287][T19317] RSP: 0018:ffffc9000460f918 EFLAGS: 00010287 [ 1202.443327][T19317] RAX: ffffffff8c82dd60 RBX: ffff888027a32700 RCX: 0000000080007080 [ 1202.451273][T19317] RDX: ffff88807d858220 RSI: ffffffff8c82dd60 RDI: ffffffff90e3f350 [ 1202.459219][T19317] RBP: ffff8880640b2058 R08: 00000000000000c0 R09: 0000000000000000 [ 1202.467166][T19317] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802d380940 [ 1202.475111][T19317] R13: ffff8880640b20b0 R14: 0000000080007080 R15: 00000000000000c0 [ 1202.483064][T19317] ? usb_submit_urb+0x1569/0x1910 [ 1202.488068][T19317] ? __init_swait_queue_head+0xca/0x150 [ 1202.493594][T19317] usb_start_wait_urb+0x10e/0x580 [ 1202.498595][T19317] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1202.504124][T19317] ? __asan_memset+0x23/0x50 [ 1202.508696][T19317] usb_control_msg+0x328/0x4b0 [ 1202.513439][T19317] ? __pfx_usb_control_msg+0x10/0x10 [ 1202.518698][T19317] ? kasan_save_stack+0x3f/0x50 [ 1202.523522][T19317] ? kasan_save_track+0x14/0x30 [ 1202.528345][T19317] ? __kasan_kmalloc+0xaa/0xb0 [ 1202.533079][T19317] ? __kmalloc_noprof+0x301/0x850 [ 1202.538081][T19317] ? i2cdev_ioctl_rdwr+0xcf/0x700 [ 1202.543084][T19317] ? i2cdev_ioctl+0x19d/0x830 [ 1202.547752][T19317] ? look_up_lock_class+0x55/0x120 [ 1202.552872][T19317] gl861_ctrl_msg+0x1a5/0x4a0 [ 1202.557531][T19317] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1202.562705][T19317] ? __lock_acquire+0x4a5/0x2630 [ 1202.567623][T19317] gl861_i2c_master_xfer+0x545/0x690 [ 1202.572884][T19317] __i2c_transfer+0x5e9/0x1780 [ 1202.577632][T19317] ? __pfx___i2c_transfer+0x10/0x10 [ 1202.582809][T19317] ? rt_mutex_slowtrylock+0x93/0x100 [ 1202.588088][T19317] i2c_transfer+0x15f/0x380 [ 1202.592571][T19317] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 1202.597513][T19317] i2cdev_ioctl+0x19d/0x830 [ 1202.602003][T19317] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1202.607032][T19317] ? selinux_file_ioctl+0x13b/0x290 [ 1202.612213][T19317] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1202.617221][T19317] __x64_sys_ioctl+0x18e/0x210 [ 1202.621961][T19317] do_syscall_64+0x115/0x870 [ 1202.626530][T19317] ? clear_bhb_loop+0x40/0x90 [ 1202.631182][T19317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.637049][T19317] RIP: 0033:0x7f3b5659ce59 [ 1202.641439][T19317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.661021][T19317] RSP: 002b:00007f3b574ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1202.669410][T19317] RAX: ffffffffffffffda RBX: 00007f3b56815fa0 RCX: 00007f3b5659ce59 [ 1202.677357][T19317] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000007 [ 1202.685302][T19317] RBP: 00007f3b56632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1202.693251][T19317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.701470][T19317] R13: 00007f3b56816038 R14: 00007f3b56815fa0 R15: 00007ffcf84d7808 [ 1202.709425][T19317] [ 1202.712651][T19317] Kernel Offset: disabled [ 1202.716956][T19317] Rebooting in 86400 seconds..