last executing test programs: 2m37.05029395s ago: executing program 2 (id=1472): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) set_mempolicy_home_node(&(0x7f0000042000/0x2000)=nil, 0x2000, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x65) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 2m35.772601438s ago: executing program 2 (id=1474): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001fc0)="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", 0x2a6}, {0x0}], 0x2, 0x0, 0x0, 0x900}}, {{&(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000002380)=[{&(0x7f00000006c0)="45c49bc8e5db5d282c108014a670a1f1a3016e6ee4ef87bab8060f6c4c20fdd320b05c203da76d4f8fbb404ae1faecf9eff522cd5bcd626b0f4303ad5447f4ead9b2c6b1c9c8071f1819a290207bfd9669ea502466cf0d970af84e28ec1a5e404182792d6d3dd743355367c680984afad58b1b3cd924720eececab2d6de9a6c3bb61f1a37b8fb4a8c94cbc3a287a5e4379904a2ed8e35170f5fd4229692553f7486599d0d249feffc28e46e1decbd4ef0fe8f1ef01c978163bbe49c36acdcebb751813e8af269284d5d03e49f10a079d24e8c3f91e04a7df8467c785e4", 0xdd}, {&(0x7f0000000880)="1a5e6696c39977acc7c429b03148bcb262873316cc10c964c0fe205443acd49a4b2c632bea8e32aedafc82da13eae453bfade717028cddcb725159a2bae38660d0fabc217869df9696f50da54ca6becc815a8e873f73361b6c695cfef262c570c4a2162195bff80b618f722cbbe2e3f22ebed6f2fb216429dbeb481d9a09ff854e48516056ce90e306b85d", 0x8b}, {&(0x7f0000000a00)="5b1ab18f3df904d967a31355dddea889d4b53192f9d9d759acd7ffaeaac79b9fc5513ab4ff98426c6e86ff5740d300145b98dc10300066709a5c41e2aae11677ef0c5a4d5e5bd4dfbf14664c92e2dbd86c195f12f0d1e2f8d7f0e1b2c16413204b8143adac9bbe9aa43ae9e697c9495d91ac6a53bdcc198e0fb3c2fcaff502a8505eca113d91e32ffc93818bccd6ac890c0fda530f4347a65b804e79411a1fa11b79ca7ce03b6040c29a1b714f67b8091347e63ea227da045a", 0xb9}, {&(0x7f0000000ac0)}, {&(0x7f0000000d40)="661661ae10890b42fd7f87dbde6430d988b6984d3334537cf9ce5d11b81daf8b2feaa4b54a71539e688081e8c9e3d07749c029b6ca86bbce584a913a5b00ef8e3cfba287bdb6354fdd8849e91525aa22f18d7cca0db07aa17129f65e549fbfd89482c3ab546054a63ac5bb1b025cff0e908a9f040166c9604a8b87a0a1e7604ffdaac5832c3497d07408a4548f0a97fc74b7308fd47acb99ac22f567ce13127a25d241a57a4fc9f55406c4dc8cdf2f4dbae407e33550272a73426d87a520c043a8a10b3cb58295b06bff04b10526191b56a098c463e10fdae22ebe21c76daba181781bf7cc", 0xe5}, {&(0x7f0000000e40)="bfbc963f983dace8ed5c9091de", 0xd}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)="6a5aba4072bfa7372fa937c12b82e4de8beb86e742d2f131bf15a64da4b9aa464c048e9679953a182080490063455e8e5c310d605b60c935d018765ce2d1165b7e6ba4f7bb5b9d80d79ee18948ab24bde293febbd3149ccc9c43de2e9f2f731f3ef7ba7250e0be0fd65895efeed78d9660bb5292219e044666c175f5139f45264b8e2f17e1f282b95ddaf461ebc5746772e8bf82694e83", 0x97}, {&(0x7f0000002280)="8c8b6560580e5db291fe50578e69c0ccce7ea50050364a45acbb9b4eda04d49e542723a12c057387547bce120b1fbce3ce939499f942c4c77920d49e407d1b6db6e9064ac740e75ce73c900a62fbe623bfb6ef9af7950bb4aa48830e9bd72ee89d2509e5af9d4801fc51cc346fa03d3e79222a052ead7d0223049d046b128bed75514f3b36a6db3ae189909331bc42fda68a7da04d2cd118db3b1f85a4156c2f", 0xa0}], 0x9, &(0x7f0000002440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x18}}], 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1a0, 0x8, 0x7f02ae, 0x1a0, 0x200, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, '\x00', {0xff}, 0xa, 0x17}}, @common=@inet=@iprange={{0x68}, {@ipv4=@rand_addr=0x4, @ipv6=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@private=0xa010100}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2, [0x0, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x8, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x402, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000240)={0xfffffffa, 0x80000001}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 2m35.064707146s ago: executing program 2 (id=1477): r0 = socket$inet(0x2, 0x80000, 0x3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaace3502590a7f08"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r6 = fsmount(r3, 0x0, 0x0) fchdir(r6) mkdirat(r6, &(0x7f0000000340)='./file1\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) r7 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) fsetxattr$security_capability(r7, 0x0, &(0x7f0000000080)=@v2, 0x14, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c}) close(r1) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r8, 0x118, 0x0, &(0x7f0000000040)=0x4a, 0x4) syz_usb_connect(0x5, 0x24, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673", 0xd}], 0x1}}], 0x1, 0x2090) 2m33.736869801s ago: executing program 2 (id=1484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x4}]}, 0x98}}, 0x0) 2m33.197071223s ago: executing program 2 (id=1486): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) pipe2(0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x23e3, 0x10400) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$RTC_WIE_ON(r1, 0x700f) sendmmsg(0xffffffffffffffff, &(0x7f0000007640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10, 0x29, 0x2}], 0x10}}], 0x1, 0x4040000) name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000080)={@empty}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_USERDATA={0x1a, 0xd, 0x1, 0x0, "7b353068f31c9dfe4d1d637d827096dfbb145852e3db"}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xcc}}, 0x20050800) 2m32.244833169s ago: executing program 2 (id=1488): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x1019c0, 0x83) fcntl$setstatus(r0, 0x4, 0x46400) fadvise64(r0, 0x9, 0x2, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={r1, 0x0, 0x204000, 0x0, 0x4, &(0x7f00000001c0), &(0x7f0000000000)=0xffffffff}) symlinkat(0x0, 0xffffffffffffffff, 0x0) setuid(0xee01) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x80001) readv(r2, 0x0, 0x0) sync() sync() sync() sync() sync() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.\x00\x00\x00\x00\x00'], 0x28}}, 0x0) sync() sync() sync() sync() socket$nl_netfilter(0x10, 0x3, 0xc) 2m17.151115939s ago: executing program 32 (id=1488): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x1019c0, 0x83) fcntl$setstatus(r0, 0x4, 0x46400) fadvise64(r0, 0x9, 0x2, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={r1, 0x0, 0x204000, 0x0, 0x4, &(0x7f00000001c0), &(0x7f0000000000)=0xffffffff}) symlinkat(0x0, 0xffffffffffffffff, 0x0) setuid(0xee01) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x80001) readv(r2, 0x0, 0x0) sync() sync() sync() sync() sync() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.\x00\x00\x00\x00\x00'], 0x28}}, 0x0) sync() sync() sync() sync() socket$nl_netfilter(0x10, 0x3, 0xc) 32.517971641s ago: executing program 4 (id=1854): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) move_pages(0x0, 0x0, 0x0, &(0x7f0000000140), 0xfffffffffffffffe, 0x2) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, 0x0) 30.225811356s ago: executing program 4 (id=1860): ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000a40)={0x0, 0x1, 0x9, 0x1a, 0x153, &(0x7f0000000640)="659b3dcad31799bb9300953fdc30a2846e0c4139f8cf1665017aeba98863ae2c250b3a09b924acde9a3b8710ea3b6e85afbde01df48b69f9c6fa35ccf75e93f895338e3d34c3e29dc9aa050db69d1fdf0ef94de49200b15251bc926a59005d2cd5e40abb6162dc6603c366a6e8b4a4a49b72666aa16cecf0cad5b9baab0031e38381713c81a0e74f9e1167d46ade8063301939e1b969486516c8d0812ec3872c69fc5ead3147ce2e4246512bbe905741c623ba1c29b360a69884d48ac702f39876a7e4cd69ee5dc3ea4c22516ca0b51db8d82ddd4bc7a27f1751eed92e1bec226c3d068dfb7dd14672afbf22358c1488fd393c66e797ade5fc0c805963b05a08e9cbec1e7ff7427e6dd2afdea8129910ee5874bbde98eb3e4733d67e9b4baeb63413edbf60bf90b58fadde62dca6013b2f0b4669eec2ea24e8783f375666822ab0fd4ce935eba069f915ebebe071c501b902d47644caf059627d51d1eb50c84fee25ce14dc97ceef1fdb87249260aabd125dca9dfa6a707c21716a0be8c9c189a2e77640ba710da5509f6c022bc10637334920866ad4f891572d9ccd400daf27396d1bb458d7e8cc9be8de418434964d58f797e1967efdf31d6fb207b869fd643f14d600ef8a2fb8f487823cb1ced6ca526debb6b517872aa1738af6d4a398cab1ab240bbbcd5a2bbd6b0eb94c1d6639690516ef59d532f8098a54f8f305491150138043a20af3005c1d24a015b77c1581d119d1a8385f504d7a34619b36ab0facbc8a62b5ab54f42418e5be93352910285e1a508896798db1f680e1ecf187d9c095b520308637996f131cbee51cdbc9b53fbd19f1ba2e89eafc0cb0da57ad2b9df6cca88dde85835af7bd2d018ed5365b305fc6e3f2fccf6a0a851087418dcfc84d6783c2a6490ab8a9825446564f704683056bcb236ad39f866b6360beb99b6bc18754494c72c13c5c3b536a5fedbe218752adb4092939882d533741e1606c3162b3f94472e500b683169abc5d0d99d6a67e786ddb7bfa8eae422d3ce3b2594bc4a96d579c66253b0947f4d55407c9e4ea8cdd75043370f38eec3d7dd34ad035c7b348372703753e5ab513884a460f350b30a9f703b18b8530a8eba20950f3bd669e83c005fc4a9d6fcba102515463e8da99d52a572b6b4612f213da8058964d2eec16ce5adceb3d7018b56d00798412fdfb9db8de6b34a5f06d806e4024c594a15e3d1134389c5c99dab4c373679b8411b1ab41781dccb630765879b045094949efbf8674a78b7d486d61b6897cbcdb0fb65546accb3183f7e0d8bac980ff6d936d3b576c8c64e98b724cd426c0739e3f37cc1f39a5d43f8d2e27a333afdbe4ef9b2e4483f848151051e698ec9e73c9fc00ad63b5ee0672208ffe637de6b0814de739ea7a80cb99fab06def431ae6a36c4a13414f2ebe53d8d68702857c40"}) r1 = socket(0x18, 0x5, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000f9a000/0x1000)=nil, 0x1000, 0x100000d, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x9, @local, 0x4f1}}}, 0x108) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x88800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, 0x0) socket$unix(0x1, 0x1, 0x0) 29.646121451s ago: executing program 4 (id=1863): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffc}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 29.567516735s ago: executing program 4 (id=1864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r5}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r10 = dup(r9) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r11, &(0x7f0000000040), 0x8) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r12, r11, 0x0, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r10) 28.507997823s ago: executing program 4 (id=1866): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)=ANY=[@ANYBLOB="14f98fcd32297e0aa513a372ecff00bb9f516c00"], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x0, 0x9, &(0x7f0000001b80)=[{&(0x7f0000000440)="44a9fdf06f41e645498308cac85718c56378950968543de549b7e163abc33d3a9a2392acad7fdc13be75a16b68a83b178f60711c2603e64f2a81da5299ea02cb98dd2294991f7d173633792f43a06dd742504a6381f12e6609380d08ac91e7c9f8db5bf7bbb4db8757b7ad56aba28609e999e8d32d5c4e2a3ce46b80826855aaf254b969dcaa5154907204bed580f87cd500a47ff2afccd19030aa3c2d9072b287bb22ab7c1ac4799df7d76f2753d2fed78ca1e90c6565ede2753e842bb9272988c780c227283e2b00fa9a68c1acfa150b4e76a5b2fe3524a1704f8df44d04d9dd6e3240a7519b30cff4", 0xea, 0x10000, 0x5}, {&(0x7f0000000540)="797734c614c80f22531406688a20354644b275883fec31dc74b412fa1927af60448bc484d1c3c243c8ad5bc95909", 0x2e, 0x2, 0xfffffffffffffff8}, {&(0x7f00000005c0)="f0", 0x1, 0x0, 0x6}, {&(0x7f0000000600)="f8fc8564b9228db588e03941311b00ba7575f981fab8a6526022b2d29425a6c6ccba7742bfbd91ebba8ae89d802a8a861bbfdd8c7b7c0f2c526cdffc74cad07f68b50cb714db3c022e12d309289903f74ec6736434902acbe9fe3194dce6fbc2fa54d5286549e8a4cba6d22e48ce0fdb1eda76f875018b747836b9dee10249a698d28486149ac2705b3e9c0258972ad9a837af72881e73b627872960545671394189800334ff60f520f86f9ee7fcb964133f35aac1f4ecbdfa3011366464edaeaa10b616b5f1018204777e0c00b0f2021e78264d28825de1f61e3c00", 0xdc, 0xe, 0x8000000000000001}, {&(0x7f0000000700)="cf07694439299c702faa2f1c4b47be19182cebdf6f8ad5fb8019f0f918077a4dfcb6199531d4fd06d3a087df2626988c00afa3015fb9a27eeb27e838a66c36da5eedfddf921eefd7c925e6289fd39f7ee3d54ec45559011f282a8f08652a549ddf3279ba80456c2830013fe97e3c54e48332edf91a5e5087c8294a490035640e0b299b2fd2962673c9cad9d331b00b3b507ba0c3e8d251546dbd3f50ff8e718c37aeeb2ca2bb1d6fe7c81fbe857b806ed9ba17c73210c7709063d4b1a8e7e33dff5f00fbb1d4619a9fea1f6ab88de90f4f6d", 0xd2, 0x4, 0x7}, {&(0x7f00000008c0)="861a3809e9b4c88d24ee83e371ee8525318749324e76b04adea3968034493c4be3a92909a49f945e1000f7e29ea9600a9b60c4546d1e1697cfb1d7fbca4c1a3b3224fe3d3c2878adf0cc7dfd1f738f3c4061c4c53be845da6591f4d5ce24d99b20ccede0807614cc9d9812d7487c3230bbac21b041a73f7ab930d3debb84b4d81c56fd213e9457494dddf8c30cdd9f82989dbe2a7640e5fe8fb6e5892022bf6d70e43ea762f29b59082e1a8a6cfbd2c98ab4d2f656a71556e404b48464bbce3035c6d79660a0754ece639910ab2ffb023b5db717a1395acff8abeaf731918eac1971d009", 0xe4, 0x4d5, 0x8}, {&(0x7f00000009c0)="c15a55d1da39aa8344b5c53ce7d5b81e2a8ca0926bf1aa6b1a2462b5bce3e7cfc0d0db6d3bdd28e75ede220ef1dd5de0f9d250c12dd7d107", 0x38, 0x0, 0x6}, {&(0x7f0000000a80)="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", 0xf80, 0x8000}, {&(0x7f0000001a80)="4e3fd0639fc18304d3d0f492d84a64e21c99449ea045cdd08a498a7be694032a762b31410b2eeb40145bdc862dd3943a5bcdbc91d286e01013bec9d808b522c9517136c3b14be7e98507d7e77b181a2eeb6ba19a2f7db91dfeae6c6babbeb91f47407cccfdcb55457f15bbdf5b962e7a00ef25593dac100660d2d46514ef39ad7b6d6c631e8c6a4cfb8c9a4b162c6a4e737813a714795ff0433183ea5ccec052a27662d7f957f26dd295e139f905ebc6bba15e01bac828a8482f0b62224a3646429872fd12ed7756c08c6ee46d39787ec8d8b3a696730c66083b7a5636dd4f3b3444fecb729a7e", 0xe7, 0x8, 0x422}], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'dvmrp0\x00', 0x58e425f532bca53c}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r7, 0xc0245720, &(0x7f0000000340)={0x1}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0xffffffffffffffbe, 0x140e, 0x400, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc084}, 0x40) 26.91043435s ago: executing program 4 (id=1870): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x20000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000087d1e242c000000000001090224000100001000090400000903000300092104000c0122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20a109"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000300)={0x739, 0x1, 0x8c, 0x2, &(0x7f00000002c0)=[{}]}) accept(r0, 0x0, 0x0) 14.946313438s ago: executing program 0 (id=1905): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa1", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 13.783121998s ago: executing program 0 (id=1906): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x400000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000540)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) fsopen(&(0x7f0000000300)='erofs\x00', 0x1) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="8d19b21e5d0c9600b6e29ae680d132e4c1fb44687e524a3303", 0x19) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x23, 0x91, {0x91, 0x8, "e1f6fd6ecf2d0866cde4d09a38676f82d49325130402b9a8f29bc84b9b4e05074f407f9b8c01659cb96736fd0cf93896ca9f937bdb9efc7f930b86471f0f7b23af37c5c5f554100403ad458ba2c414942401e4224004b4a97f88c939e01c0c1928bfbfe970f30bd909ddf158efa1e46b7d4cfb5a0700f6c18ccd74c735489beb60bcd073a57987074a35548bb4f1af"}}, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000b00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfc, 0x10, 0x0, 0xe, "b59579f0", "f70d03dc"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x7, 0x0, 0x8, 0x8, 0xa}}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000008300)={0x0, 0x0, &(0x7f00000082c0)={&(0x7f0000001300)=@deltfilter={0x48, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0x8}, {0x1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x10, 0xf9}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000890}, 0x26000084) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x12, 0xb05, 0x0, 0x0, {0xa}}, 0x14}}, 0x800) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r4, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_IFALIASn={0x4}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = getuid() quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, r9, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) 11.990039234s ago: executing program 5 (id=1909): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000040)="2da7d2", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="9b1dd63cb7d6335fbb76f160265f6945b0d42872cf95bb33", 0x18, 0x3b00, 0x0, 0x0) 11.817735443s ago: executing program 5 (id=1910): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f00000000c0)={'netdevsim0\x00', @random="0100012010ff"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000240)={0x2710, 0x4, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x8100000000000000, r6}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000001040)=0x8aa760e3, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000080), 0x4) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x7, 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000010000000800000002", @ANYRES8=r2, @ANYBLOB="517eeed54c182e6ea5976c53dca24cfaad02ce2ffdcd0b506247a8e0de68b705f2c81a558afba08e0b8b4f01381f6830234a9f7e2a5a567c5ae91179091acfcf2002662fd9e4309056569c5221e906e5d956f76e70a7b2549f5ce9b15ab2cb1fe4f4e6c708ad5ade261b908812fd0ae77bfca50fbe978b725ca12985f6b80c381279d338472faa208b35d91c0544180da00e3e7bc076799a4c29d4bbf60ef696dd82453e7404601b2f33cf5c23d4a2dbee", @ANYRES8=r3], 0x50) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write(r1, &(0x7f00000002c0), 0x0) 11.772577229s ago: executing program 33 (id=1870): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x20000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000087d1e242c000000000001090224000100001000090400000903000300092104000c0122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20a109"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000300)={0x739, 0x1, 0x8c, 0x2, &(0x7f00000002c0)=[{}]}) accept(r0, 0x0, 0x0) 8.800114727s ago: executing program 0 (id=1916): ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x18, 0x5, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) write(r2, 0x0, 0x0) mmap(&(0x7f0000f9a000/0x1000)=nil, 0x1000, 0x100000d, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x9, @local, 0x4f1}}}, 0x108) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x88800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, 0x0) socket$unix(0x1, 0x1, 0x0) 8.778824596s ago: executing program 5 (id=1917): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x1c0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905", @ANYRES64], 0x0) 6.949228204s ago: executing program 0 (id=1922): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x48) close(0x3) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) 6.413832927s ago: executing program 5 (id=1925): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) set_mempolicy_home_node(&(0x7f0000042000/0x2000)=nil, 0x2000, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x65) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r1, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0xa, 0x800, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xd0, 0x0, 0x0) close(0x3) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044000) syz_open_procfs(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x20044840) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 6.229749881s ago: executing program 0 (id=1927): io_setup(0x239f, &(0x7f0000000380)) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x100000000000004) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8894}, 0x8040) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, 0x0, 0x20040891) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000100000000300686173683a69702c706f72742c6e65741600000092ff020073797a3200000f00000014000300686173683a69702c706f72742c6970001400078005001500010000000800124000000008"], 0x60}}, 0x0) mount_setattr(r5, &(0x7f0000000080)='./file0/../file0\x00', 0x8800, &(0x7f0000000240)={0x70, 0x0, 0x40000}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 5.588795601s ago: executing program 1 (id=1928): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)='>', 0x1) socket$inet6(0xa, 0x2, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x1000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 3.983193925s ago: executing program 1 (id=1929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000018110c00000000008510000002000000850000000800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 3.55504886s ago: executing program 5 (id=1930): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x48) close(0x3) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) 2.85729438s ago: executing program 3 (id=1931): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback={0x1000000000000000}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (fail_nth: 1) 2.581406765s ago: executing program 1 (id=1932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 2.119942136s ago: executing program 3 (id=1933): syz_open_dev$video4linux(&(0x7f0000000000), 0x1005b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4000, 0x2}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1.930881385s ago: executing program 3 (id=1934): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'nr0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14) sendmsg$inet(r0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000100)="2c117c81eb0b730c7df132fa6e7b02aa6134e7c309111c462e398ddfc3ce4b51c3ec8b4a83d43f750624c5b29e0bc4bce0d1c8d07fe9a6c51bc33cb7739a09b6a01f25789e7bf135d59187cf7d7000473acb422d416e0a62e5fdfa92c450c50babf5de5800e0336c0e54e2763e5dcc08ec1cc082a082e9dca2837641a097586c8f3debe9e6077be0d9c0a5", 0x8b}, {&(0x7f00000001c0)="db879d67b5ec57ad206a5aa4d631d5536b1c13918eb1bd4ea03b885fc887a4101c226549f9fa21501fb594757835b88591c17c7d658bb6b76e85092253760a8046125e39c0124ddc96051f721fca07a7c776cd588946905648e3f3b3574c8e47aff6128c227e99eb340e4de66a27d02be90aa0e0b19225f0e2370c", 0x7b}, {&(0x7f0000000240)="d673209c6d263a42d26db17ed217191ea03d8d4dfa75b23ec03fd19c8ed901125e3397a0bb20176883bac72b3a6149227c5a8e1d7c224eb1245b73b5f01fe1f4e69dd07dd66b7950bd4dc4129f4d8eb63d51095397c36f", 0x57}, {&(0x7f00000002c0)="3578f1ec5d7698740fcc14c0fcf37ed1724d2d33b602ed206f5f9e2f84860be93919a9d0208314a9d5697000485ecaa5db0a98c7a51085dfbbf4b834aed771c4a969846f1668a8a681133846b6cdb707739cd24530fc331b2da64cd82e115ca220dcd793311a2a027f525949db1180e5aff498a852b43092d4f0b6f61141c951b4136c8a392e60c8d7bda5f6e7d0b79ac729e071eb1ba7f8d400646b5b3b761262518236f14fe22c89748d4edf2b0c82d106a4df985574742a7610a91a289655424ccf6b983f4e26030d7b", 0xcb}, {&(0x7f00000003c0)="f578ab4b7eb1475a8833f842174a14078b92186cf74b7525d3190b77b695f1ea04e22f2e25e7e27eab1528fc8e53ec645c30594104d147fd313ffb6b887e8679f3801164b27fcb2145e3c6", 0x4b}, {&(0x7f0000000440)="0b80c8be477871f3e6550db1dc503067ff0470b2ae55dce688941e1e5f76899678e6d9bbdbb19c209722818627f6bffb61ef457b278e667f02dbb86db22c09179fb6aeea7381f0b4bc6e5a00241ac20c5bcf94457ec35f4ed5d1b2826e0e904433c119fcc588b43e562a2f0c1971576be368efe9bc0fb842bb0f82cbe5ea4f34a7a41e58d65089a8f98f2bc31a3a4a5d667d8c95c8f7c7fa6ba9d474ed05f2f2", 0xa0}, {&(0x7f0000000500)="7b08da29f856a3d5bb8688afd0bb68052d5a62bfef359fe6169cd066046827a13d5c9fffd5fdd6a2372a0ace39c8aef3bfa0655262724651bd23ab58672816dbe71a3bb4863fb8f2cbb19623c995bfd10eae2c581df0e73abe8df5e03bbc47b8c41da03db3912a54dc8381f3d0098f3a8fea81dabb1562b09bcf59727f18245fe3679e74beda6f31ee9b35e102e735339ecd7afe2bd6d5748adabeba2fddc6ba7af4187ac4f59a4fc739c6ed050a1e882137a1b5a7b7a98fca5fc24a479367b8ce5f279380d1e97a87ebdf0ed8a3fe67f5075e505a4fdb09eb00d1a50643542d9852", 0xe2}, {&(0x7f0000000600)="ab64b503df1d3105025eab91f4a896baa52caa596a6713786fc31fac729f8bf81595ab54c7474fcd045b7b9170a0827bac8736aaab3c7fc01284baba41c7ecf81d9668bdd342c74ed420c169673c10eaf1a4ce76388e762a753ec15511229b43b25572da31b0fa38923498acedbf1b4ddbb32d1c41c23f3df22c14145a7e97f15c3f0d3ecc08177786b1c064109b52840e195e4c1e9bcc08d8942153fce2cc50e1e87bbb1385ef64691d078f128d86573d858459eb2a88ce6743668ddfd14c452907156ff6623c41a9d046ccdea6", 0xce}, {&(0x7f0000000780)="3a7e169af267f986d2ddcf99a9949cfcc45b6c1a90294a4b041a67233b0d1b14ef07dafd757687be7db942a6a37ee77dd06230e1c0cd07f588d05427b9c082a963d16830e835d0bcb0491f13e55d5228002cce732d746e4703089d6fd2ee60c9c7181a62578c828f1e57401a25dfd9a6dc934f1b03a86229016d76c9f90aa808a0624ea823766ff2f27897baf0e5097a1c68e8b082ecdca701d4894dd81c07ed87ca60df23a3d5ce75b0a08717b771f1b16fb3a5f193fba6f75a6f771a6dcd904256aa0f330d809e28ef1c040f714f5ab0508857edd595b7cb54c2b94f443f9632a59f676bec", 0xe6}, {&(0x7f0000000880)="0421cbc713c50f2f5036f00ef31e8e395115ba38ef3d2d63c6a265d79df9886195646d1c5a29713a1702988ec37089c062c7507464aafead5f2ac68d0f416eabe8820597f9", 0x45}], 0xa, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@generic={0x7, 0xa, "67c50352bf4a434f"}, @timestamp_addr={0x44, 0x34, 0xcd, 0x1, 0xa, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@local, 0xd7dd}, {@local}, {@multicast2, 0x7}]}, @timestamp={0x44, 0x20, 0xb6, 0x0, 0x6, [0x80000001, 0x3ff, 0x9, 0x1, 0x9, 0x9, 0x81]}, @timestamp={0x44, 0x20, 0x5b, 0x0, 0x3, [0x1, 0x7fffffff, 0xffff, 0xa9c, 0x8, 0x3, 0x9]}, @timestamp={0x44, 0x10, 0xcc, 0x0, 0x4, [0x1, 0xcba, 0x0]}, @cipso={0x86, 0x6b, 0x2, [{0x1, 0xd, "aedea02380fb5909eaf85c"}, {0x2, 0xf, "7b147ce16b05e864f09b0fc5fe"}, {0x7, 0x6, "89d85725"}, {0x2, 0x2}, {0x1, 0x4, "521e"}, {0x2, 0xe, "39b9021d52fdff17e0a955ee"}, {0x7, 0x3, 'w'}, {0x6, 0x10, "2917be97529da3d38b63f4e900c5"}, {0x0, 0x11, "173999f9b5b23de933b17fc6888a21"}, {0x7, 0xb, "771e9987dba6edd67b"}]}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@end, @noop, @ssrr={0x89, 0x7, 0x66, [@remote]}, @timestamp_prespec={0x44, 0x2c, 0x5d, 0x3, 0x9, [{@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xa71}, {@private=0xa010100, 0xffffd64f}, {@loopback, 0x1}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x91, 0x0, 0x4, [0x6, 0x9, 0xffff, 0xfffffffc, 0x17, 0x8, 0x3, 0x7ff, 0x80, 0x5]}]}}}], 0x238}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000d40)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast1}}}, 0x118) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) socket(0x10, 0x803, 0x0) 1.788306187s ago: executing program 3 (id=1935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x1000000, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.693533374s ago: executing program 1 (id=1936): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpgid(0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf250500000058000780080001000200000008000100040000000800020009000000080002000180ffff0c00030006000000000000000c0003000900000000000000080001000800000008000200050000000cf9296c94420c024efcffff30000180080003000100000008000300070000000d0001007564703a73797a31000000000c000280080001"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000001) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.676571286s ago: executing program 0 (id=1937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000060000000000000002000000850000003000000000000000000000005b09fe29fde7243705bf2dabd78504afb4ce4a69c29acced62e40d8a512db56fbcfb6a70449eed9c55df0231b33595f44de8a510c1e29b9df2e0b6405091f3e61d36d378e6554319f473949baa72532e559a4ed5c9e7092c3c273f219790d68b74a70b5a7d37bc821b2ef924cebc0083e40682a63925fe9314d56e1fa988a61e77ceb680f6a8796a50a6d51ff5d6b42133f9"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) recvmsg(r2, &(0x7f0000002940)={&(0x7f0000000700)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/200, 0xc8}, {&(0x7f0000002880)=""/101, 0x65}], 0x4}, 0x100) sendto$inet(r4, 0x0, 0x0, 0xc04c885, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002a80)={'syztnl1\x00', &(0x7f0000002a00)={'ip6gre0\x00', 0x0, 0x29, 0x7f, 0x9, 0xffff8001, 0x12, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x700, 0x4309edd9, 0x7fffffff}}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0xd0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0xff, 0x4, 0xa, 0x9, 0x80, 0x8, 0x81}, &(0x7f00000001c0)=0x9c) sendto$inet(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab62080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.480260632s ago: executing program 1 (id=1938): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) bind$can_j1939(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaace3502590a7f08"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r5 = fsmount(r2, 0x0, 0x0) fchdir(r5) mkdirat(r5, &(0x7f0000000340)='./file1\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) r6 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) fsetxattr$security_capability(r6, 0x0, &(0x7f0000000080)=@v2, 0x14, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c}) close(r1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000040)=0x4a, 0x4) syz_usb_connect(0x5, 0x24, 0x0, 0x0) getpid() 1.365378508s ago: executing program 3 (id=1939): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) r2 = io_uring_setup(0xb, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) read$FUSE(r6, &(0x7f0000019200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f000001b240)={'\x00', 0x0, 0x800, 0x4, 0x3, 0xc361, r7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000032240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="6ad6c333bece365000f2ae5c48f66f6ab2d0706b3062592cc0459b65c1471e67763836f002875c77b2ac61cfb71e45467950c16608a2f59f21b2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(tea)\x00'}, 0x58) 139.644477ms ago: executing program 1 (id=1940): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) socket$kcm(0x10, 0x2, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0x8, 0x7fff7ffc}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES64=r1, @ANYRESDEC=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="26000000000000000005b864780669b922a3672064aeda9527000000554951151e3d2473e62c4c43e14e8a2b3a4b278cdfde160859d7fa6ff1a643c827133703202d3361f858cd3ffd87260a7c27cd764b244c1ab9fa0c5a771a715a768749f0111743a5e7855c3f15dab18c4ffdc2e704735e77b9ed641337bcd7abe54776a8a9929a9d76c3487efececb8be873fb96e599a11792951221d5c7ec9a4cbba31e3055e13bf076e6afce54a5e575b0d78d3b5086a9270a7609d4b90cf84a05f8c9918f0f0aa0", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="0e0000000800000004200300b2829f28108454fa06ed97fdb42c656cba5edbd6ae9e2bb334b25d79fa7d8b873cbdab5679291dca07daaa1cc6f5f9dff73ee677bc2e7d3140eaa33d667c4a80475f516f2768bf4f0bf19eb331352bdf8f7c2fd12dbc423912dfbc8a6bae1e7c00000000008ef61de2f6fc1744a265d2175f9c4faa8b72e47b8fa5ec5d63980e4fed32d362a0f700000000000000"], 0x6e) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbdf250a8080000000f3"], 0x2c}}, 0x20000050) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000440000000000069078ac1414bbac1414aa441c0d63ac1e010100000800ac14142400000007e0000002000000024e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0200009078000000"], 0x0) 54.834412ms ago: executing program 3 (id=1941): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0x2) r3 = openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0), 0x2042, 0x0) rseq(&(0x7f0000000140), 0x20, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg(r7, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000180)="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", 0xfd}, {&(0x7f0000000800)="27fca5858b5689a6cc8832297149c6aff5016858f0ea3c7cb4fd2c12f93574170bf98d4f4e9e4c8a7e98f82b34e4c89e92cd4c9ebd6b79713765e62dab3965336dc1cedc8f291cedfd93d10468db18a0fba47f35b4cc4af6ff3f1f8d0c24b511e23c55bb652dbfa36842ad3aa9c8891dcb76551c0c7ea310b749409d800933adc765c8aeabb31b19b7a1163a331f861a4cc72f205dd4a1f0e2d2d4dad7f98f6e8a2ac4378e4b8a991e2fd244c6eeed355c1844bd2f3da6d21911b1f16b092066b480e2383c9d15ce6482b3fa90016bb18af1bdbc0b04d8ccc6fffc1d9551abf757c9db614bc6b4ee96e2b8ac88f828ca1fdefaed3f78abeb5d752c43d40c57bc3667856b2a91a061e84ce54fe8773c18fd9043c454dfd04e8fdd7bd21815f056ea1c2eb8a92f098acc077eb15afa45138103e3d9f6dde858991dd81e51e751c1e7aabb98aa4b4e08b74b9dfd800361b48be400b6f4129d55e14182663596d9622e36d9b06730bf7aacaa0e70b4201acfa84ae930bc78a6ceb6d94508e8d02ef1eccb05fd5cc5ffe528ef898874fa37c55faecf151870fa2eb930b7307d327f77522e6c14886345825ae4c34c19a8a15f87dbcd4a396f41b3f6707e69af5d84f4fff7966280e787085fb38c06638f8d3e39199b1327b3e93215261113b67abe22199f05e048825131d57a8a0cbde21ffe81ea9b37cda5fba1f94f5f04b048d69a2895fa41e907bc2da490d2a3eae42c0b4ecc8f6add266a60732f9e6ec0fd35e00e160cf2065f2e6d1bd78cc372100d8c61d2180f800a7305350c2e5395ffdb695bae3cf9810b271579f5235108b7881ab0f5dab687317f089faf9edc9a875089b030698b0d7eb86ade136af3affb46ce63978fca9aa3ad7478d8bd08a5283826c8359938cf08032566af047aedb06ec0be386ac269d537374b0e1d35c1da2da5872d8a5f3e355df8c28a341f0b96d37a1bd26321e0d25a44c17a71cf70cfba849bdc963378f912a9f6a3ab2831387a4f6a5414a2e023f73f52a0500d0f963c54a301c847c643cca1d42b6145333c940be948c063b4e9723304a95462064c51a92846222982583e1ad0cc9426f29e7e32b26c53297f90dad63f56823dac0b4ae18b3004cc08f3f4cee2272a2e6f2cafbfd1ccd318f6df2bf46c17f422141e0864563c3364d634f90ae7eeb9b74cbdc9fa48569b7c712df6858ba638f85e6074bf81356004472893675484fe8753d69f4e1af3f5bd6adecd474759e58308a05230ea925038faa42d797cf7891702ea3bba29ac0f8f16b7619d433fce56613e72566b7ad0150eb8deee83e90c9e38238eb88987e37f71db8b3f3944f06ab6e5f802b1f582cb52a04d06efd0ea25f08a9e62ce850d53ab1ec8c9823bab94f8602a671b6f527167e009202fdc28c407465c9b027316e0b8c17185d18b5bde78b3b4e739565d48c6f96ccd18c8f56e0aa8acd884f5905c98c30c348b4f35438476927d2a48cfd31007983989cb5ce6cd3a4a83fa27442b7ff2260af4f43be0a92e4ec85ed7ac1b9a4811006ff624b104331c8a4ef1740109d1d6f25947f269002257f290429784842e5b9b165d4923dc8a6bc28b11a03e2ab1880697f2f2bf8489b7ae6526e6fc1c984be81fd41c5894162cb30303a2d0436daa6386aa4a1e17de54976866a5919b3dcddb926690d70de959224b453058468dc07d9e22c6a72589ad3fe9f212f1fe2a466952a438a065fcb35c9940c01d6eff15c5deacd8904e29b0679767bedc5baf442f7887b699446721e89f8532bb469f17552f4c11ea9f34ece4c98dd2541515b9331006aa67754b2ed0b99d783d1a203e2e478997653dc52c48b51b280955ab6d02d83677677cfec6fcd13eebaff70846ebd9dad86b7d098fee84c26f0a6f4c93fa35553a6e1d3e3938111e3a61050c7c15aac3582afe56dd44d0701af75a48eca6bfee6de4077e550a5ee36c17145e049af2999bf62f266cf7f38fdda8311f806b2ec12162eb3448897b383edcdb488db70013f630769c7a83f0376778053c7791513f6296dbe1d89ded03e217be91c35881cb5fee3782a8db58ac497880d9f515029ca9197ec4d8c733deb07dcfcb728dc238274140b82d9eefe979bbc29c7991bc67c4db7a89e3da14a7f7d494bd4c876e46dd17d8b6bd8c63709a4073258e9b3f3bea490d2eed756bad0d4430a054f2780070614c6d4ddfc53c68cade68262dfe31af88f0dc27facdc26ed4271e74ef3d83ca6fc7a665e16c24af538f012875c7029fe0b2d9a591619ba327cbe0d265859134b222d125728e6e67005b71d994dda03263d3aa2e613a61ccb3bb667c77f5f432f25b99fb80532db67d1ead988d654e7f68317aa9671e37bb5d9a5729756069a2cb9039fda7602854d925ed48fcad24c5fa649227c8746438704adb2fd1d943a962b933d368e085886645192dd9b6cbee3b79a24434ecf8ea742909e08c08f55b2ea236733dee19dacc161ab39161de90bc576d6b30a191b9bc286d00003c0786dcb9cf204b41ba3892126298dfeefe1deb0131d908d193c8e1ce34a32cbd05e310d3ba6dd7677e9e0b6e760aa796b0a0d65d00c9e620865ad6caf42d04dad7c1fdb1a144bf628b9fca846c4dec76f31d0fd7e88f05679edff6f2a75658c2d8ec3e159ebe6e1f34efb83d8414e26c30f9a9fd50a1df1006ac8120999f201d75067028fff2e47d636a225e286854ad6c5caff12196cdbf3fddae86649871673ebafc72c0682e298e412aa92e525fca9ad8bf09ca710ec69b8a5ae5a103f3c0064fc45041d7f7398f5c92b93681eec04628b1e00f3e314c4c9c9cc549b31f7252c21e62e69938c3caa11b94aa750e4e29574662ebbfef762df6b615a3d1b4a5580f0759d1f05c670809bef9a0fe513f9e9e62bd916c0d4e23d1f724d5bb19aa4ded546daa0c31b41b0b49bac349a5c8661f62d5ab81a1b517fb6dd6e004cce0bef1e18e8a9eb9cf9a411c734385ea6c9fb23c87957c586659603388d1f3bb33540bf5c69474f27602de531c80439693ad22fa6c0313291c2d79205991778ce3dc9146174b30671b78d18be947c79e52cdfef64d4ffac0a6ec389240d318a6d878dc2455570202f16e926dafafda5f74061f6dd61752cac9cdb50d0a7c93d7f1ff4cfb902e3d007c2d9be5ccbf35e093f36a236e7fa31258064217f935ad77e3f239834adc8f915f03caba4a5dd7196ef1bbf3980b4db86f7e273c73be1fd578f0f4e8805f932017ca061ba35e9f7fd96a527399809a64c1a079539a2872d895e900579590fa4c92d78a171051af72e5998967f7b2def82a9f9035539a50519a2494c29848e870ba90e411878a7266ab707b484efabb3f4a89576a897343c2f1f37b6b0ba7e0bd129fec739620b0e2b9503f0d26a09d46853ee3ad87bfad009b77bdf5b4d9da7ba7ba39e79764390d3d84b3ef46e13151ed754f9b7f174ca27514cbb098910f5d4c46b7bcfe8dc08f9af588b40de45c6aa1d165851506079c386045340c948671ffb985f2921f5fff08eba94a4c310e4d0629afbc7f6cdf53569963922261632175c228a140618a5be440a22aa4e1aa4ed03cb1501fe3cf3f5829ee2db3003a7746b1a9d16ac51de96f51affeb3f16e5abba125ebbda6516085292ea3b57178d3f31d33328a1b17321ebd9ae167d4c246992f744f61c47021c4a7b7eb4d91eaa2c3cbbb24dfc8a99e7bf26bf7ae58375e9db146f9b4593f17bebb78d41a3e5723485448500a88c583608f5538fd78b52fe1e4961049513a5b2fa7a5acb732d2526191889e71d1647667bad992a0367a8f93a22810c89c3019cc2f65427ae49a01eb2f92c2de0502b9412751524514ea75b6ad7a3f8ef248f3e3a5ea4f4881d7d26c80258105589c9b495a5ab13720bea29f78dadf8409ac42dc9a31c0957c9929c5d8b49903460a32205590b0e21d220a0dae556974580763d4c164f781a7e49cbd63aa61fffa4343467796c54505cb0444fcbfb44dfe9d0fe9bc4c3f2df0f2eb885786f1aaf287e453f04c9d235883d1d935352c683793fb255841e5bef665224a63eabeac39ddde137f9a4ff79b495a20ea072ee2fe9e228f70dbec5742794f29a3cde95854d81881112e1155b4a218c3c2a8e2797c605a6c61e7ebc9f7c448066bfca761f8c31ff4b80f9d5e962bfcf1f1c6dc38c123ff9afb7d72db89a6351f77b4b09b3a03dc8a4778b33d3524e48b42991c3522c7f3acbc935df926d1fd15a220105f3fd4024422b211efe6c85d114f2dac40b358381207500f8b119b665dd8607243bd17e9c6908978a1c7cd869f157333b150e88047ec062842f17a6e51c56b53f734e7a1585c7571dcdd11856e23e8bf6707967ba48baba359cc77cabdcaee51d3acfda6fa920799713b3df9143813055d8a46de7eb6836fff8779f89402d6758ef393773bc782e5c66845365ffbb309a17c79350702ad4e503112900cc9bc72f400e80d743e6e8edec59c35f04e8f8a90a9b55e41b0b5e483ce879636f7f532fe91af7f1806424fbf8b3e5d777abb5d6bd11a88c6aca35d2e4838eec8ac15a6a5e2609ef106f32bca13e844e766716809da51c197021c92f294596d39d393a3a5faa6278301f590d5af55b2e2abb36962999a04aaeace6a43c13829ee9aed9e7ea529bff3ec99f14606a12f0886e9280e74d6e3182bd3035d3cc8b9b532d75238b3092aa7983e4b3c2c67311bcb04f9454027ca4743acbef3b3b07d0693a5ee1704a2e0d6ff3de3c3186e164398a9725a80efda402c539d150a6403d1c8d1174c67bd67330e67658c229287a6e96b4bce955667389fbf038dab04039a095cb304e4bfbfac9ec7f3531c35568ccb7e09709210d2cac07e9b7fd0b0258c77403a7d188d084e8d4ed83d069f61cc6b235e6a918cd5d759ec004624ad88c16138689749b02e0861fc9af878a359d8d0dbf8a54305f00eccf24a6d446212e7b450c9bde2f3d3d3c614724695ad1d30e1b60c20065513886becbe889af75b1ede52146226b98fbcba872d006ebe2a1ab5762660a1a4c4bb705f757aed3cc1a7bd3684621150602b91df1038812054fc4e4e0d74ffa7b5e73af537720d297cd43cdc643819436cecfa549ba4bb10c1cd333fe6a16f3db5e8260ec8f45f7eccefa30aed30716ab56bc9a4f564e391041844fc836835e804533936a9570790e34c113c637fb537afc4ad109be09e31732682c8c4ba9b60634b584121bfcae7f3207b1c51b66e380a64d259efd6bdc9c55da07d9dc5c3f60bbfd1fc4d5fb6ff3363a3e1b151fd09c79c5a3fb2698b5b0d84746bdae4107fb830b6af4dcc0a08af239542d0f98d51792e7d5bd0100a795360763ee0737240348388aa9740ce2be3142514b49dd0866e1acbbaac4ac6f86ed6d93cbde67cae7f3b6017b576395c86d7305b1c09c13f96caae9c2a88633123271826405eb4d3e8634823d1a491ef5a278ff2f4081a272bb7dccbcae6c7bf0b2887a53efed21ded56bb64985ddde4ff5cbbd2bd8bca2f31a2821755cf968e8752d8cb1962065583e13ecc01312d9d4636f0963436715f8f9c918572d6bf39acae510b81a3a7807ff2706b044f911c3706cb71e0c95d7c3662893b05392ee12a8cc9ee77d2a5487836b86f6ffa3bc09a8d2fb8ca05822b291a2637896ff23ea51ccfeeaf47a76541675c5dcc5d6e8ff516e1286fbfa3cf2b57f7a902690260957ba19fb2620a5f1c3aad19daa0c12f05caa1b0bcf8017b8fc2d261e79ddf2ff74f38837e462aa55ec706cb00d1f84fb9", 0x1000}], 0x2, &(0x7f0000001840)=[{0x48, 0x84, 0x162, "56b329005f0eb14e63bdf9096eea7518d777e2e3225188a6ae77ba6a6652af1f3bdd9b13fb5d2db096a49b5364de23ddea7a9b0764"}, {0x18, 0xff, 0x2, "ffb4d3e2335f30"}, {0x48, 0x103, 0x9, "44895d2e2bb3678114c04e05825281999585fd0b34dd2746ca91c9f77fff3c0ee88bb5439be6136d79470c10bf6053ea6a46b11250"}, {0xa8, 0x11, 0x603, "b71ee93c5bb341daadd4538b3fd9df89b220ffed867e6350d08f9100d58bb758326d657f5629ef78f83e6b8ee1b578dfa6e20a1f071b84991968cd50f6801097f355209a15c4ee939cef976a878ca5483e7580ee0d3a61bf20c19e9c12939a31e9d57c4ff242b807b8358c2c05d42e3be926e3864fda6c9086c81936c9b5ca9883238eb187e0ccbe8d0a13e73dd68f1658565663860c2f"}, {0xf8, 0x11, 0xc, "81cc477b5150e51a5d4cf9b72638828413379e3bbf935e9e63a2df3010efecf49ec659993e2b7ff5732e7f4e6ac9bbe3ff9bcbc93792f39772aca928887a06265c08df23955cb0be3f0b64958ec9b416b9d46928dedf69eda45fafa63d043ddd7f39b5e674c621c6f43e4da998b01a253ebf3cf10ddcde01f0d276c975bee8925f7d230fe8c2a64ecbad84dcc3dad514e5fe49995b7c47cf88c6e781e9bf704087556aa4bf9e5296ae7b824afe0fc5fb69124b7c5d03972b580514bb5e1344f8ab18276199498fb3dd422f6289e0317ce191599e15d416a31b221cb656aba9cab3b2a6d2"}, {0x60, 0x10c, 0x1, "e52deecdc18de5992ecc42ec087740d25157d1f349de9040acda688985fbc9ced96389df934e475221de6a161c08f9f93f192eca18d636cec1783099f99259104ffaa6ed291693489a6a6b"}, {0x58, 0x3a, 0x7fffffff, "4691e887c49b7564540c9f84bee9c18ee21df6df31962e6b79947b471143e685f5a314838870636d6c6adbb6de06092c1e2983d606c7dccd8dc0d3fd40125e30838a67fbc7"}, {0xa8, 0xff, 0xc922, "0f920776bc28527891a56c3ba72273302d32fc0f7852ebb2dcf6f0030a91804819021df801571d54262a3156226b32e49e6e7e12317f297b773228db908868fa8795f645b1d30b81d1965340a584d19afb5c39b6c8d2ce363feb7e6040c0fadcdc49bf6b8042b2bb552ad5319953cf9251b6b6533f640c5508fe51df49edfb24b6e59e4a2855cc989b067cde4ee33e4457f220ddc568"}, {0x78, 0x11, 0x7, "92157d9f008287b9e8a49e5b81a8411c1c4f87a54f9477d5a3517fda8b7b09d63819fe7ff6309c87f1d4a4031edadcd51c17b31a42a317cf3bdb70e24a28d4d3247274650134c60319e25dfc7d5b9e78eda0c2aadb6958890b9033aad0dd2cb3ef75cea6"}], 0x420}, 0x94) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f00000007c0)={{}, 0x40}) 0s ago: executing program 5 (id=1942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x34}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x70bd2b, 0x0, {0xa, 0x0, 0x78}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10224000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): ft [ 593.329974][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.801555][ T30] audit: type=1400 audit(1779177059.866:2370): avc: denied { write } for pid=12133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.989765][T12194] xt_HMARK: spi-set and port-set can't be combined [ 594.012005][ T30] audit: type=1400 audit(1779177060.076:2371): avc: denied { write } for pid=12192 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.457710][T12202] set match dimension is over the limit! [ 595.644080][T12217] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 595.664946][T12217] netlink: 'syz.3.1596': attribute type 21 has an invalid length. [ 595.673183][T12217] netlink: 'syz.3.1596': attribute type 6 has an invalid length. [ 595.681067][T12217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1596'. [ 595.994797][ T30] audit: type=1400 audit(1779177062.046:2372): avc: denied { mount } for pid=12218 comm="syz.5.1597" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 596.020175][T12219] netlink: 'syz.5.1597': attribute type 39 has an invalid length. [ 596.430180][ T29] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 596.437972][ T5732] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 596.602241][T12232] netlink: 'syz.3.1601': attribute type 2 has an invalid length. [ 596.612389][ T5732] usb 5-1: config 4 has an invalid interface number: 74 but max is 0 [ 596.625053][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.648197][ T5732] usb 5-1: config 4 descriptor has 1 excess byte, ignoring [ 596.664316][ T29] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 596.676775][ T5732] usb 5-1: config 4 has no interface number 0 [ 596.686825][ T5732] usb 5-1: config 4 interface 74 altsetting 6 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 596.697776][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.706898][ T5732] usb 5-1: config 4 interface 74 altsetting 6 endpoint 0xF has an invalid bInterval 159, changing to 7 [ 596.718643][ T29] usb 1-1: config 0 descriptor?? [ 596.725711][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 596.733109][ T5732] usb 5-1: config 4 interface 74 has no altsetting 0 [ 596.744529][ T5732] usb 5-1: New USB device found, idVendor=1f7b, idProduct=550c, bcdDevice=46.bd [ 596.756655][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.772687][ T5732] usb 5-1: Product: syz [ 596.777114][ T5732] usb 5-1: Manufacturer: syz [ 596.789918][ T5732] usb 5-1: SerialNumber: syz [ 597.010738][ T5799] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 597.046829][ T5732] usb 5-1: USB disconnect, device number 35 [ 597.141314][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 597.727769][ T5799] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.747452][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 597.771293][ T5799] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 597.792535][ T29] pwc: recv_control_msg error -32 req 02 val 2c00 [ 597.812173][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.822359][ T29] pwc: recv_control_msg error -32 req 04 val 1000 [ 597.838458][ T5799] usb 6-1: config 0 descriptor?? [ 597.860536][ T5799] pwc: Askey VC010 type 2 USB webcam detected. [ 598.002889][T12248] netlink: 'syz.3.1606': attribute type 2 has an invalid length. [ 598.106941][ T805] net_ratelimit: 30 callbacks suppressed [ 598.106959][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.122382][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.284241][ T5799] pwc: recv_control_msg error -32 req 02 val 2b00 [ 598.501266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.509750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.518231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.526580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.534973][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.543357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.551770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.560148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.674906][ T5799] pwc: recv_control_msg error -32 req 02 val 2700 [ 598.718661][ T5799] pwc: recv_control_msg error -32 req 02 val 2c00 [ 598.758658][ T5799] pwc: recv_control_msg error -32 req 04 val 1000 [ 599.042815][ T29] pwc: recv_control_msg error -71 req 04 val 1400 [ 599.070396][ T29] pwc: recv_control_msg error -71 req 02 val 2000 [ 599.090430][ T29] pwc: recv_control_msg error -71 req 02 val 2100 [ 599.124841][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 599.156887][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 599.182955][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 599.202718][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 599.223532][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 599.248460][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 599.271147][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 599.283637][ T5799] pwc: recv_control_msg error -71 req 04 val 1400 [ 599.293244][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 599.301519][ T5799] pwc: recv_control_msg error -71 req 02 val 2000 [ 599.314176][ T5799] pwc: recv_control_msg error -71 req 02 val 2100 [ 599.328733][ T29] pwc: Registered as video103. [ 599.351409][ T5799] pwc: recv_control_msg error -71 req 04 val 1500 [ 599.359756][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 599.380247][ T5799] pwc: recv_control_msg error -71 req 02 val 2500 [ 599.398103][ T29] usb 1-1: USB disconnect, device number 35 [ 599.407473][ T5799] pwc: recv_control_msg error -71 req 02 val 2400 [ 599.421769][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 599.431802][T12262] xt_TCPMSS: Only works on TCP SYN packets [ 599.439612][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 599.448520][T12262] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1604'. [ 599.457459][T12262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1604'. [ 599.466526][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1604'. [ 599.489129][ T5799] pwc: recv_control_msg error -71 req 02 val 2600 [ 599.547441][ T5799] pwc: recv_control_msg error -71 req 02 val 2900 [ 599.574395][ T5799] pwc: recv_control_msg error -71 req 02 val 2800 [ 599.607321][ T5799] pwc: recv_control_msg error -71 req 04 val 1100 [ 599.645222][ T5799] pwc: recv_control_msg error -71 req 04 val 1200 [ 599.754823][ T5799] pwc: Registered as video103. [ 599.795905][ T5799] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 599.870939][ T5799] usb 6-1: USB disconnect, device number 2 [ 599.972061][T12272] : entered promiscuous mode [ 600.012184][ T30] audit: type=1400 audit(1779177066.076:2373): avc: denied { read } for pid=12259 comm="syz.4.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 600.746061][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 601.030838][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 601.039434][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 601.057243][ T9] usb 1-1: config 0 has no interface number 0 [ 601.139585][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 601.287258][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 601.375790][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.558301][ T9] usb 1-1: Product: syz [ 601.675086][ T9] usb 1-1: Manufacturer: syz [ 601.731723][ T9] usb 1-1: SerialNumber: syz [ 601.849277][ T9] usb 1-1: config 0 descriptor?? [ 602.130890][ T5718] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 602.293041][ T5718] usb 4-1: Using ep0 maxpacket: 16 [ 602.334042][ T5718] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 602.500243][ T5718] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 602.587292][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.647720][ T5718] usb 4-1: Product: syz [ 602.690359][ T5718] usb 4-1: Manufacturer: syz [ 602.738995][ T5718] usb 4-1: SerialNumber: syz [ 602.866472][ T5718] r8152-cfgselector 4-1: Unknown version 0x0000 [ 602.953521][ T5718] r8152-cfgselector 4-1: config 0 descriptor?? [ 602.994798][T12302] binder: BINDER_SET_CONTEXT_MGR already set [ 603.003394][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 603.069595][T12302] binder: 12290:12302 ioctl 4018620d 200000000040 returned -16 [ 603.079929][T12305] binder: 12290:12305 ioctl c0306201 2000000003c0 returned -22 [ 603.117679][T12302] binder: 12290:12302 ioctl c0306201 200000000240 returned -11 [ 603.274304][ T9] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 603.411560][ T5718] net_ratelimit: 37 callbacks suppressed [ 603.411576][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.432591][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 603.432607][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 603.432642][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 603.438881][ T9] usb 1-1: USB disconnect, device number 36 [ 603.474523][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 603.493066][T12309] xt_TCPMSS: Only works on TCP SYN packets [ 603.499460][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 603.508332][T12309] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1620'. [ 603.517263][T12309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1620'. [ 603.526195][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 604.057158][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.168353][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.176783][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.189353][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.197528][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.545655][T12326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.553892][T12326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.562172][T12326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.570428][T12326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.807179][ T30] audit: type=1400 audit(1779177071.866:2374): avc: denied { setopt } for pid=12338 comm="syz.0.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 605.928850][ T8407] r8152-cfgselector 4-1: USB disconnect, device number 37 [ 606.831789][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'. [ 607.771082][T12366] FAULT_INJECTION: forcing a failure. [ 607.771082][T12366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.835027][T12366] CPU: 0 UID: 0 PID: 12366 Comm: syz.0.1636 Not tainted syzkaller #0 PREEMPT(full) [ 607.835051][T12366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 607.835061][T12366] Call Trace: [ 607.835067][T12366] [ 607.835074][T12366] dump_stack_lvl+0x100/0x190 [ 607.835098][T12366] should_fail_ex.cold+0x5/0xa [ 607.835120][T12366] _copy_to_user+0x32/0xd0 [ 607.835148][T12366] simple_read_from_buffer+0xcb/0x170 [ 607.835172][T12366] proc_fail_nth_read+0x1af/0x230 [ 607.835192][T12366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.835213][T12366] ? rw_verify_area+0xce/0x6d0 [ 607.835229][T12366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.835248][T12366] vfs_read+0x1e4/0xb30 [ 607.835271][T12366] ? __pfx_vfs_read+0x10/0x10 [ 607.835289][T12366] ? __fget_files+0x215/0x3d0 [ 607.835317][T12366] ? __fget_files+0x21f/0x3d0 [ 607.835346][T12366] ksys_read+0x12a/0x250 [ 607.835364][T12366] ? __pfx_ksys_read+0x10/0x10 [ 607.835385][T12366] ? rcu_is_watching+0x12/0xc0 [ 607.835415][T12366] do_syscall_64+0x10b/0xf80 [ 607.835440][T12366] ? clear_bhb_loop+0x40/0x90 [ 607.835462][T12366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.835480][T12366] RIP: 0033:0x7f79bd75d68e [ 607.835494][T12366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 607.835510][T12366] RSP: 002b:00007f79be59efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.835528][T12366] RAX: ffffffffffffffda RBX: 00007f79be59f6c0 RCX: 00007f79bd75d68e [ 607.835540][T12366] RDX: 000000000000000f RSI: 00007f79be59f0a0 RDI: 0000000000000004 [ 607.835550][T12366] RBP: 00007f79be59f090 R08: 0000000000000000 R09: 0000000000000000 [ 607.835560][T12366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.835570][T12366] R13: 00007f79bda16038 R14: 00007f79bda15fa0 R15: 00007ffdd1733568 [ 607.835595][T12366] [ 608.424682][ T8407] net_ratelimit: 25 callbacks suppressed [ 608.424699][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.439498][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.448478][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.467255][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.486288][ T30] audit: type=1400 audit(1779177074.476:2375): avc: denied { execute } for pid=12367 comm="syz.3.1635" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=38729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 608.576271][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.984008][ T30] audit: type=1400 audit(1779177074.896:2376): avc: denied { getopt } for pid=12374 comm="syz.0.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 609.231847][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.464926][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.473285][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.910764][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.919098][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.764075][T12393] netlink: 'syz.4.1640': attribute type 3 has an invalid length. [ 610.772851][T12393] netlink: 'syz.4.1640': attribute type 3 has an invalid length. [ 611.067677][T12398] binder: 12397:12398 unknown command 1078485781 [ 611.120086][T12398] binder: 12397:12398 ioctl c0306201 200000000540 returned -22 [ 611.137364][T12400] netlink: 'syz.3.1642': attribute type 2 has an invalid length. [ 611.520929][ T29] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 611.706695][T12416] netlink: 'syz.1.1645': attribute type 3 has an invalid length. [ 611.714566][T12416] netlink: 'syz.1.1645': attribute type 3 has an invalid length. [ 611.880879][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 611.909241][ T29] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 611.939323][ T29] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 611.949214][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.957809][ T29] usb 5-1: Product: syz [ 611.962994][ T29] usb 5-1: Manufacturer: syz [ 611.967603][ T29] usb 5-1: SerialNumber: syz [ 612.766671][T12429] netlink: 'syz.1.1650': attribute type 3 has an invalid length. [ 612.774649][T12429] netlink: 'syz.1.1650': attribute type 3 has an invalid length. [ 612.892767][ T29] r8152-cfgselector 5-1: Unknown version 0x0000 [ 612.919625][ T29] r8152-cfgselector 5-1: config 0 descriptor?? [ 613.600456][T12451] netlink: 'syz.5.1654': attribute type 3 has an invalid length. [ 613.608995][T12451] netlink: 'syz.5.1654': attribute type 3 has an invalid length. [ 613.635614][ T5799] net_ratelimit: 20 callbacks suppressed [ 613.635630][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.701303][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.709514][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.717836][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.726133][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.417821][ T30] audit: type=1800 audit(1779177080.466:2377): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1653" name="nullb0" dev="tmpfs" ino=914 res=0 errno=0 [ 614.744034][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.754930][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.778468][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.086367][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.276450][T12460] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 615.295273][T12460] overlayfs: failed to set xattr on upper [ 615.309375][T12460] overlayfs: ...falling back to redirect_dir=nofollow. [ 615.316767][T12460] overlayfs: ...falling back to index=off. [ 615.323234][T12460] overlayfs: ...falling back to uuid=null. [ 615.331319][T12460] overlayfs: ...falling back to xino=off. [ 615.340991][T12460] overlayfs: maximum fs stacking depth exceeded [ 615.781163][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.803584][ T9] r8152-cfgselector 5-1: USB disconnect, device number 36 [ 616.168036][ T30] audit: type=1326 audit(1779177082.216:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.0.1660" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 616.542633][ T30] audit: type=1326 audit(1779177082.216:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.0.1660" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 616.591612][ T30] audit: type=1326 audit(1779177082.216:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.0.1660" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 616.618847][ T30] audit: type=1326 audit(1779177082.216:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.0.1660" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 616.673538][ T30] audit: type=1326 audit(1779177082.216:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.0.1660" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 616.710059][T12483] netlink: 'syz.4.1662': attribute type 2 has an invalid length. [ 616.789465][ T30] audit: type=1326 audit(1779177082.216:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.0.1660" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 616.854138][ T30] audit: type=1326 audit(1779177082.216:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.0.1660" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 617.032527][ T30] audit: type=1326 audit(1779177082.216:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.0.1660" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 617.127007][ T30] audit: type=1326 audit(1779177082.216:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12475 comm="syz.0.1660" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 618.741616][ C1] net_ratelimit: 22 callbacks suppressed [ 618.741634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.758283][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.764621][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.890840][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 619.102356][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.110742][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.122378][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.130852][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.574642][T12527] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 619.666259][T12527] overlayfs: failed to set xattr on upper [ 619.717241][T12527] overlayfs: ...falling back to redirect_dir=nofollow. [ 619.741654][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.749931][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.758175][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.766423][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.785060][T12527] overlayfs: ...falling back to index=off. [ 619.825337][T12527] overlayfs: ...falling back to uuid=null. [ 619.858361][T12527] overlayfs: ...falling back to xino=off. [ 619.872573][ T10] usb 1-1: device descriptor read/64, error -71 [ 619.890914][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 619.890929][ T30] audit: type=1400 audit(1779177085.956:2453): avc: denied { write } for pid=12514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.955974][T12538] fuse: fd is not a fuse device [ 619.965300][T12527] overlayfs: maximum fs stacking depth exceeded [ 620.026383][T12541] netlink: 'syz.5.1669': attribute type 2 has an invalid length. [ 620.189173][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.203051][T12547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12547 comm=syz.1.1672 [ 620.230730][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 620.259202][ T30] audit: type=1400 audit(1779177086.316:2454): avc: denied { write } for pid=12542 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.371555][ T10] usb 1-1: device descriptor read/64, error -71 [ 620.512229][ T10] usb usb1-port1: attempt power cycle [ 620.930705][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 621.082518][ T10] usb 1-1: device descriptor read/8, error -71 [ 621.141405][T12578] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 621.160951][T12578] overlayfs: failed to set xattr on upper [ 621.176136][T12578] overlayfs: ...falling back to redirect_dir=nofollow. [ 621.184887][T12578] overlayfs: ...falling back to index=off. [ 621.192547][T12578] overlayfs: ...falling back to uuid=null. [ 621.205447][T12578] overlayfs: ...falling back to xino=off. [ 621.212626][T12578] overlayfs: maximum fs stacking depth exceeded [ 621.312470][ T5877] block nbd1: Possible stuck request ffff8880286b5080: control (read@0,1024B). Runtime 390 seconds [ 621.325019][ T5877] block nbd1: Possible stuck request ffff8880286b5240: control (read@1024,1024B). Runtime 390 seconds [ 621.336072][ T5877] block nbd1: Possible stuck request ffff8880286b5400: control (read@2048,1024B). Runtime 390 seconds [ 621.991357][ T5877] block nbd1: Possible stuck request ffff8880286b55c0: control (read@3072,1024B). Runtime 390 seconds [ 622.003228][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 622.027329][ T30] audit: type=1400 audit(1779177088.086:2455): avc: denied { write } for pid=12564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.051674][ T10] usb 1-1: device descriptor read/8, error -71 [ 622.171568][ T10] usb usb1-port1: unable to enumerate USB device [ 622.190471][ T30] audit: type=1400 audit(1779177088.246:2456): avc: denied { write } for pid=12592 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.282734][T12595] netlink: 'syz.1.1677': attribute type 3 has an invalid length. [ 622.290540][T12595] netlink: 'syz.1.1677': attribute type 3 has an invalid length. [ 622.618644][ T30] audit: type=1400 audit(1779177088.676:2457): avc: denied { write } for pid=12598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.716241][ T30] audit: type=1400 audit(1779177088.776:2458): avc: denied { write } for pid=12611 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.005335][ T30] audit: type=1400 audit(1779177089.066:2459): avc: denied { write } for pid=12615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.087371][ T30] audit: type=1400 audit(1779177089.146:2460): avc: denied { write } for pid=12628 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.112776][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 623.120689][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 623.320780][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 623.326130][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 623.333449][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 623.343740][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 623.359508][ T10] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 623.373954][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 623.382841][ T10] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 623.405134][T12631] fuse: fd is not a fuse device [ 623.410128][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 623.430196][ T10] usb 4-1: Product: syz [ 623.434457][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.442559][ T10] usb 4-1: Manufacturer: syz [ 623.455514][ T10] usb 4-1: SerialNumber: syz [ 623.462780][ T9] usb 6-1: Product: syz [ 623.475253][ T9] usb 6-1: Manufacturer: syz [ 623.492187][ T9] usb 6-1: SerialNumber: syz [ 623.536669][ T9] usb 6-1: config 0 descriptor?? [ 623.989615][T12641] bpf: Bad value for 'context' [ 624.377967][T12639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1685'. [ 624.430400][ T10] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 624.582744][T12646] team0: entered allmulticast mode [ 624.610361][T12646] team_slave_0: entered allmulticast mode [ 624.618172][ T29] net_ratelimit: 22 callbacks suppressed [ 624.618188][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.630685][ T10] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 624.633075][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.645836][ T10] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 624.649109][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.656099][ T10] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 624.672559][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.697697][T12646] team_slave_1: entered allmulticast mode [ 625.385424][ T10] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 625.411130][ T10] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 625.420808][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 625.428397][ T9] imon 6-1:0.0: unable to initialize intf0, err -19 [ 625.443370][ T9] imon:imon_probe: failed to initialize context! [ 625.450082][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 625.460077][T12648] team0: left allmulticast mode [ 625.465156][T12648] team_slave_0: left allmulticast mode [ 625.470778][ T9] imon 6-1:0.0: unable to register, err -19 [ 625.478851][T12648] team_slave_1: left allmulticast mode [ 625.484624][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 625.494868][ T9] usb 6-1: USB disconnect, device number 3 [ 625.502526][T12648] pim6reg: left allmulticast mode [ 625.624610][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.648496][T12535] usb 4-1: USB disconnect, device number 38 [ 625.663890][T12535] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 625.696581][T12535] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 625.707451][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.712423][T12535] visor 4-1:1.0: device disconnected [ 625.715718][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.729313][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.746719][T12661] netlink: 'syz.4.1688': attribute type 10 has an invalid length. [ 625.764139][T12661] team0: Port device dummy0 added [ 625.842105][T12663] netlink: 'syz.4.1689': attribute type 2 has an invalid length. [ 625.861209][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.869418][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.158273][T12680] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 627.164813][T12680] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 627.172660][T12680] vhci_hcd vhci_hcd.0: Device attached [ 627.197829][T12680] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1692'. [ 627.443518][T12685] netlink: 'syz.0.1690': attribute type 3 has an invalid length. [ 627.451881][T12685] netlink: 'syz.0.1690': attribute type 3 has an invalid length. [ 628.014073][T12535] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 628.122648][T12681] vhci_hcd: connection closed [ 628.128218][ T12] vhci_hcd vhci_hcd.5: stop threads [ 628.261119][T12535] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 628.399451][ T12] vhci_hcd vhci_hcd.5: release socket [ 628.524616][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 628.907331][ T30] audit: type=1800 audit(1779177094.966:2461): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1691" name="nullb0" dev="tmpfs" ino=914 res=0 errno=0 [ 629.410540][T12699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.718809][ T1234] net_ratelimit: 16 callbacks suppressed [ 629.718829][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.733993][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.742278][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.829519][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.061681][T12705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1696'. [ 630.382506][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.464279][ T30] audit: type=1326 audit(1779177096.506:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 630.746680][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.755423][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.828126][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.900926][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.978395][ T30] audit: type=1326 audit(1779177096.506:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 631.070724][ T30] audit: type=1326 audit(1779177096.506:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 631.184427][ T30] audit: type=1326 audit(1779177096.516:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 631.250206][ T30] audit: type=1326 audit(1779177096.516:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 631.377249][ T30] audit: type=1326 audit(1779177096.516:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 631.524144][ T30] audit: type=1326 audit(1779177096.516:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 631.525763][T12735] netlink: 'syz.1.1703': attribute type 3 has an invalid length. [ 631.558914][T12735] netlink: 'syz.1.1703': attribute type 3 has an invalid length. [ 631.581020][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.353889][ T30] audit: type=1326 audit(1779177096.516:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 632.384533][ T30] audit: type=1326 audit(1779177096.516:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd79ce59 code=0x7ffc0000 [ 633.202333][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1705'. [ 633.430767][T12751] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 633.437299][T12751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 633.445111][T12751] vhci_hcd vhci_hcd.0: Device attached [ 633.473328][T12761] netlink: 'syz.3.1706': attribute type 3 has an invalid length. [ 633.481797][T12761] netlink: 'syz.3.1706': attribute type 3 has an invalid length. [ 633.776337][T12757] vhci_hcd: connection reset by peer [ 633.894459][ T12] vhci_hcd vhci_hcd.5: stop threads [ 634.136428][ T12] vhci_hcd vhci_hcd.5: release socket [ 634.191138][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 634.234564][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 634.234576][ T30] audit: type=1400 audit(1779177100.286:2535): avc: denied { create } for pid=12765 comm="syz.4.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 634.260925][T12535] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 634.355862][ T30] audit: type=1400 audit(1779177100.336:2536): avc: denied { bind } for pid=12765 comm="syz.4.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 634.402170][ T30] audit: type=1400 audit(1779177100.346:2537): avc: denied { bind } for pid=12767 comm="syz.1.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 635.020787][ T990] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 635.030985][ T5799] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 635.038774][ T30] audit: type=1400 audit(1779177101.066:2538): avc: denied { write } for pid=12741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.143890][ T1234] net_ratelimit: 21 callbacks suppressed [ 635.143903][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.157992][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.166478][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.174824][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.221921][ T990] usb 6-1: device descriptor read/64, error -71 [ 635.241345][ T5799] usb 4-1: Using ep0 maxpacket: 32 [ 635.253214][ T5799] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 635.267373][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.290076][ T5799] usb 4-1: config 0 descriptor?? [ 635.321126][ T5799] as10x_usb: device has been detected [ 635.341640][ T5799] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 635.381780][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.389997][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.398216][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.409176][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.439285][ T5799] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 635.509428][ T5799] as10x_usb: error during firmware upload part1 [ 635.540267][ T5799] Registered device nBox DVB-T Dongle [ 635.550755][ T990] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 635.552029][ T30] audit: type=1400 audit(1779177101.616:2539): avc: denied { write } for pid=12798 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.774451][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.780861][ T990] usb 6-1: device descriptor read/64, error -71 [ 635.813717][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.937552][ T990] usb usb6-port1: attempt power cycle [ 636.193035][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.201554][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.880747][ T990] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 636.932077][ T990] usb 6-1: device descriptor read/8, error -71 [ 637.018060][ T30] audit: type=1400 audit(1779177103.076:2540): avc: denied { write } for pid=12824 comm="syz.4.1719" name="file0" dev="tmpfs" ino=1770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 637.024156][T12825] loop3: detected capacity change from 0 to 7 [ 637.065502][ T8407] usb 4-1: USB disconnect, device number 39 [ 637.069844][T12825] Dev loop3: unable to read RDB block 7 [ 637.094211][T12825] loop3: AHDI p1 p2 p3 [ 637.101849][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 637.114481][T12825] loop3: partition table partially beyond EOD, truncated [ 637.156340][ T8407] Unregistered device nBox DVB-T Dongle [ 637.161448][ T8407] as10x_usb: device has been disconnected [ 637.190269][T12825] loop3: p1 start 1601398130 is beyond EOD, truncated [ 637.203158][T12825] loop3: p2 start 1702059890 is beyond EOD, truncated [ 637.221314][ T990] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 637.263195][ T990] usb 6-1: device descriptor read/8, error -71 [ 637.373997][ T990] usb usb6-port1: unable to enumerate USB device [ 637.703786][T12841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1723'. [ 637.717462][T12841] bpf: Bad value for 'context' [ 638.127240][T12833] netlink: 'syz.3.1721': attribute type 3 has an invalid length. [ 638.136127][T12833] netlink: 'syz.3.1721': attribute type 3 has an invalid length. [ 639.392663][T12850] netlink: 'syz.3.1726': attribute type 3 has an invalid length. [ 639.418497][T12850] netlink: 'syz.3.1726': attribute type 3 has an invalid length. [ 640.165028][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 640.372543][ T30] audit: type=1400 audit(1779177106.426:2541): avc: denied { lock } for pid=12872 comm="syz.3.1732" path="socket:[39917]" dev="sockfs" ino=39917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 640.486854][ T1234] net_ratelimit: 24 callbacks suppressed [ 640.486872][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.502978][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.528503][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.541701][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.930129][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 641.159957][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.433042][ T990] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 641.529191][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.537724][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.547030][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.571617][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.580028][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.700884][ T990] usb 6-1: Using ep0 maxpacket: 32 [ 641.707706][ T990] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 641.724217][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.844784][T12918] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1742'. [ 641.870014][T12917] netlink: 'syz.0.1741': attribute type 2 has an invalid length. [ 641.874263][ T990] usb 6-1: config 0 descriptor?? [ 641.889163][ T990] as10x_usb: device has been detected [ 641.988452][ T30] audit: type=1326 audit(1779177108.046:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.1.1742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c69f9ce59 code=0x0 [ 642.125081][ T990] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 642.139724][ T990] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 642.162950][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.179368][ T990] as10x_usb: error during firmware upload part1 [ 642.191081][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.202728][ T990] Registered device nBox DVB-T Dongle [ 642.929848][ T5799] usb 6-1: USB disconnect, device number 8 [ 643.097962][T12953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1745'. [ 643.112445][T12953] bpf: Bad value for 'context' [ 643.392817][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 643.426684][T12954] xt_TCPMSS: Only works on TCP SYN packets [ 643.446660][T12954] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1747'. [ 643.457778][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1747'. [ 643.467114][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1747'. [ 643.500230][T12954] tmpfs: Bad value for 'mpol' [ 643.983345][ T5799] Unregistered device nBox DVB-T Dongle [ 643.984765][ T5799] as10x_usb: device has been disconnected [ 644.068973][ T30] audit: type=1400 audit(1779177110.126:2543): avc: denied { write } for pid=12933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.198603][ T30] audit: type=1400 audit(1779177110.256:2544): avc: denied { write } for pid=12967 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.310839][ T5799] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 644.360744][ T10] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 644.403481][ T30] audit: type=1400 audit(1779177110.466:2545): avc: denied { write } for pid=12972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.431346][ T990] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 644.460740][ T5799] usb 6-1: Using ep0 maxpacket: 16 [ 644.466070][ T30] audit: type=1400 audit(1779177110.526:2546): avc: denied { write } for pid=12983 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.490123][ T5799] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 644.500303][ T5799] usb 6-1: config 0 interface 0 has no altsetting 0 [ 644.511821][ T5799] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 644.521889][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.526881][ T10] usb 1-1: no configurations [ 644.529954][ T5799] usb 6-1: Product: syz [ 644.539750][ T5799] usb 6-1: Manufacturer: syz [ 644.542343][ T10] usb 1-1: can't read configurations, error -22 [ 644.546019][ T5799] usb 6-1: SerialNumber: syz [ 644.557260][ T5799] usb 6-1: config 0 descriptor?? [ 644.590698][ T990] usb 4-1: Using ep0 maxpacket: 16 [ 644.597362][ T990] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 644.607248][ T990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 644.615800][ T990] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 644.625553][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.633586][ T990] usb 4-1: Product: syz [ 644.637798][ T990] usb 4-1: Manufacturer: syz [ 644.642432][ T990] usb 4-1: SerialNumber: syz [ 644.648774][ T990] usb 4-1: config 0 descriptor?? [ 644.680791][ T10] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 644.832433][ T10] usb 1-1: no configurations [ 644.837293][ T10] usb 1-1: can't read configurations, error -22 [ 644.844678][ T10] usb usb1-port1: attempt power cycle [ 644.896551][T12961] syzkaller0: entered promiscuous mode [ 644.902379][T12961] syzkaller0: entered allmulticast mode [ 644.920866][ T5799] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 644.929165][ T5799] imon 6-1:0.0: unable to initialize intf0, err -19 [ 644.936238][ T5799] imon:imon_probe: failed to initialize context! [ 644.942874][ T5799] imon 6-1:0.0: unable to register, err -19 [ 644.956140][ T5799] usb 6-1: USB disconnect, device number 9 [ 645.014725][T12969] syzkaller0: entered promiscuous mode [ 645.020327][T12969] syzkaller0: entered allmulticast mode [ 645.039693][ T990] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 645.055399][ T990] imon 4-1:0.0: unable to initialize intf0, err -19 [ 645.062440][ T990] imon:imon_probe: failed to initialize context! [ 645.068788][ T990] imon 4-1:0.0: unable to register, err -19 [ 645.082847][ T990] usb 4-1: USB disconnect, device number 40 [ 645.192883][ T10] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 645.222787][ T10] usb 1-1: no configurations [ 645.227524][ T10] usb 1-1: can't read configurations, error -22 [ 645.362093][ T10] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 645.392175][ T10] usb 1-1: no configurations [ 645.397894][ T10] usb 1-1: can't read configurations, error -22 [ 645.406319][ T10] usb usb1-port1: unable to enumerate USB device [ 645.905888][ T5799] net_ratelimit: 21 callbacks suppressed [ 645.905905][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.227600][ T6973] Bluetooth: Wrong link type (-71) [ 646.503981][ T10] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 646.609680][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.618238][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.626998][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.727098][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 646.957444][ T10] usb 5-1: config 11 has an invalid interface number: 47 but max is 0 [ 646.965800][ T10] usb 5-1: config 11 has no interface number 0 [ 646.972037][ T10] usb 5-1: config 11 interface 47 has no altsetting 0 [ 646.983075][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=6d.bf [ 646.993123][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.994648][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.011188][ T10] usb 5-1: Product: syz [ 647.030959][ T10] usb 5-1: Manufacturer: syz [ 647.040920][ T10] usb 5-1: SerialNumber: syz [ 647.396643][T13017] netlink: 'syz.3.1759': attribute type 3 has an invalid length. [ 647.405251][T13017] netlink: 'syz.3.1759': attribute type 3 has an invalid length. [ 647.591929][T13019] netlink: 'syz.5.1758': attribute type 3 has an invalid length. [ 647.600297][T13019] netlink: 'syz.5.1758': attribute type 3 has an invalid length. [ 647.621385][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.629802][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.924522][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.979092][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.987746][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.516520][T13024] netlink: 'syz.1.1761': attribute type 2 has an invalid length. [ 648.580018][ T10] usb 5-1: USB disconnect, device number 37 [ 648.678365][ T7815] udevd[7815]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:11.47/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.826883][ T1234] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 649.012389][ T1234] usb 1-1: Using ep0 maxpacket: 16 [ 649.060790][ T1234] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 649.334661][ T1234] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 649.475307][ T1234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.514925][ T1234] usb 1-1: Product: syz [ 649.536834][ T1234] usb 1-1: Manufacturer: syz [ 649.641441][ T1234] usb 1-1: SerialNumber: syz [ 649.676724][ T1234] r8152-cfgselector 1-1: Unknown version 0x0000 [ 649.691520][ T1234] r8152-cfgselector 1-1: config 0 descriptor?? [ 649.971601][T13053] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1766'. [ 649.985632][T13053] bpf: Bad value for 'context' [ 650.933598][ T10] net_ratelimit: 14 callbacks suppressed [ 650.933616][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.955758][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.964065][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.981406][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.690687][ T6973] Bluetooth: hci5: link tx timeout [ 651.769765][ T6973] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 651.786982][ T6973] Bluetooth: hci5: link tx timeout [ 651.804051][ T6973] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 651.811979][ T5877] block nbd1: Possible stuck request ffff8880286b5080: control (read@0,1024B). Runtime 420 seconds [ 651.812015][ T5877] block nbd1: Possible stuck request ffff8880286b5240: control (read@1024,1024B). Runtime 420 seconds [ 651.880278][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.888744][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.897429][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.905877][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.000848][ T5877] block nbd1: Possible stuck request ffff8880286b5400: control (read@2048,1024B). Runtime 420 seconds [ 652.021406][ T5877] block nbd1: Possible stuck request ffff8880286b55c0: control (read@3072,1024B). Runtime 420 seconds [ 652.167555][ T5799] r8152-cfgselector 1-1: USB disconnect, device number 45 [ 652.271425][ T5732] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 652.462421][ T5732] usb 5-1: Using ep0 maxpacket: 8 [ 652.507325][ T5732] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 652.597677][ T5732] usb 5-1: config 179 has no interface number 0 [ 652.607136][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.628565][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 652.744265][T13084] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 652.752723][T13084] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 652.921209][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.174480][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 653.199594][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 653.211528][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 653.223042][ T5732] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 653.237231][ T5732] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 653.249308][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.278110][T13074] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 653.562642][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1778'. [ 653.593338][ T5718] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 653.941227][ T6973] Bluetooth: hci5: command 0x0406 tx timeout [ 654.030771][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 654.059394][ T5718] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 654.096034][ T5718] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 654.126432][ T5718] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 654.148984][ T5718] usb 4-1: Product: syz [ 654.162584][ T5718] usb 4-1: Manufacturer: syz [ 654.172360][ T5718] usb 4-1: SerialNumber: syz [ 654.330774][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 654.447559][ T5718] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 654.457798][ T5718] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 654.468314][ T5718] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 654.476817][ T5718] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 654.606293][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 654.622579][ T10] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 654.651866][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 654.676433][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.693391][ T10] usb 1-1: Product: syz [ 654.706028][ T10] usb 1-1: Manufacturer: syz [ 654.716435][ T10] usb 1-1: SerialNumber: syz [ 654.736084][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 654.745833][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 654.756813][ T5718] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 654.784831][ T5718] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 654.817212][ T5718] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 654.854751][ T5718] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 654.882119][ T5718] usb 4-1: USB disconnect, device number 41 [ 654.908506][ T5718] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 654.940066][ T5718] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 654.976018][ T5718] visor 4-1:1.0: device disconnected [ 656.021722][ T6973] Bluetooth: hci5: command 0x0406 tx timeout [ 656.028831][ T8407] net_ratelimit: 17 callbacks suppressed [ 656.028848][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.242870][T13139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1786'. [ 656.259822][T13139] bpf: Bad value for 'context' [ 656.506476][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.514944][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.523836][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.899939][ T8407] usb 5-1: USB disconnect, device number 38 [ 656.905976][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 656.906023][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 657.061978][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.072078][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.072247][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.089082][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.132265][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1790'. [ 657.431243][ T5799] r8152-cfgselector 1-1: USB disconnect, device number 46 [ 657.551107][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.561363][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.641225][ T8407] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 657.718506][T13156] netlink: 'syz.0.1791': attribute type 3 has an invalid length. [ 657.727581][T13156] netlink: 'syz.0.1791': attribute type 3 has an invalid length. [ 657.830748][ T8407] usb 5-1: Using ep0 maxpacket: 16 [ 657.841591][ T8407] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 657.851701][ T8407] usb 5-1: config 0 interface 0 has no altsetting 0 [ 657.956283][ T8407] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 657.967054][ T8407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.975319][ T8407] usb 5-1: Product: syz [ 657.979489][ T8407] usb 5-1: Manufacturer: syz [ 657.984573][ T8407] usb 5-1: SerialNumber: syz [ 657.992904][ T8407] usb 5-1: config 0 descriptor?? [ 658.100714][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 658.373121][T13169] syzkaller0: entered promiscuous mode [ 658.384205][ T5732] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 658.408910][T13169] syzkaller0: entered allmulticast mode [ 658.510910][ T8407] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 658.549830][ T8407] imon 5-1:0.0: unable to initialize intf0, err -19 [ 658.570800][ T5732] usb 1-1: Using ep0 maxpacket: 32 [ 658.578805][ T8407] imon:imon_probe: failed to initialize context! [ 658.597937][ T5732] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 658.609878][ T8407] imon 5-1:0.0: unable to register, err -19 [ 658.633189][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.649382][ T8407] usb 5-1: USB disconnect, device number 39 [ 658.812817][ T5732] usb 1-1: config 0 descriptor?? [ 658.837778][ T5732] as10x_usb: device has been detected [ 658.855285][ T5732] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 658.949545][ T5732] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 658.963755][ T5732] as10x_usb: error during firmware upload part1 [ 658.970468][ T5732] Registered device nBox DVB-T Dongle [ 659.180136][T13181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.239701][T13181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.103192][ T5799] usb 1-1: USB disconnect, device number 47 [ 660.177500][ T5799] Unregistered device nBox DVB-T Dongle [ 660.183035][ T5799] as10x_usb: device has been disconnected [ 660.317379][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 660.320771][ T8407] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 661.145255][ T8407] usb 5-1: Using ep0 maxpacket: 16 [ 661.159265][ T8407] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 661.172424][ T8407] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 661.182026][ T8407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.190241][ T8407] usb 5-1: Product: syz [ 661.194604][ T8407] usb 5-1: Manufacturer: syz [ 661.200247][ T8407] usb 5-1: SerialNumber: syz [ 661.220994][ T5799] net_ratelimit: 27 callbacks suppressed [ 661.221012][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.239785][ T8407] r8152-cfgselector 5-1: Unknown version 0x0000 [ 661.246554][ T8407] r8152-cfgselector 5-1: config 0 descriptor?? [ 661.342593][T13214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1808'. [ 661.356788][T13214] bpf: Bad value for 'context' [ 661.365841][ T5732] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 661.566529][ T5732] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.578130][ T5732] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 661.681587][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1809'. [ 661.703518][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.176505][ T8407] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 662.789736][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.797941][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.806226][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.814678][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.823227][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.833991][ T5732] usb 6-1: config 0 descriptor?? [ 662.849589][ T5732] pwc: Askey VC010 type 2 USB webcam detected. [ 662.970757][ T8407] usb 4-1: Using ep0 maxpacket: 16 [ 662.980986][ T8407] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 662.991429][ T8407] usb 4-1: config 0 interface 0 has no altsetting 0 [ 663.003192][ T8407] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 663.012703][ T8407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.027239][ T8407] usb 4-1: Product: syz [ 663.047119][ T8407] usb 4-1: Manufacturer: syz [ 663.070474][ T8407] usb 4-1: SerialNumber: syz [ 663.104928][ T8407] usb 4-1: config 0 descriptor?? [ 663.141020][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.149310][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.157952][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.258899][ T5732] pwc: recv_control_msg error -32 req 02 val 2b00 [ 663.270161][ T5732] pwc: recv_control_msg error -32 req 02 val 2700 [ 663.280073][ T5615] Bluetooth: hci0: unexpected event for opcode 0x203d [ 663.282444][ T5732] pwc: recv_control_msg error -32 req 02 val 2c00 [ 663.294908][ T5732] pwc: recv_control_msg error -32 req 04 val 1000 [ 663.452381][T13224] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 663.461946][T13224] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 663.478617][T13224] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 663.529061][ T30] audit: type=1400 audit(1779177129.536:2547): avc: denied { firmware_load } for pid=13221 comm="syz.0.1810" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 663.541026][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.372295][ T1234] r8152-cfgselector 5-1: USB disconnect, device number 40 [ 664.472173][ T5732] pwc: recv_control_msg error -71 req 04 val 1300 [ 664.503983][ T5732] pwc: recv_control_msg error -71 req 04 val 1400 [ 664.530222][ T5732] pwc: recv_control_msg error -71 req 02 val 2000 [ 664.538692][T13212] syzkaller0: entered promiscuous mode [ 664.561592][ T5732] pwc: recv_control_msg error -71 req 02 val 2100 [ 664.568410][T13212] syzkaller0: entered allmulticast mode [ 664.583434][ T5732] pwc: recv_control_msg error -71 req 04 val 1500 [ 664.600723][ T5732] pwc: recv_control_msg error -71 req 02 val 2500 [ 664.619805][ T5732] pwc: recv_control_msg error -71 req 02 val 2400 [ 664.641256][ T5732] pwc: recv_control_msg error -71 req 02 val 2600 [ 664.648214][ T5732] pwc: recv_control_msg error -71 req 02 val 2900 [ 664.656692][ T5732] pwc: recv_control_msg error -71 req 02 val 2800 [ 664.666727][ T8407] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 664.675349][ T8407] imon 4-1:0.0: unable to initialize intf0, err -19 [ 664.698710][ T5732] pwc: recv_control_msg error -71 req 04 val 1100 [ 664.714168][ T8407] imon:imon_probe: failed to initialize context! [ 664.716010][T13241] netlink: 'syz.4.1814': attribute type 2 has an invalid length. [ 664.724028][ T5732] pwc: recv_control_msg error -71 req 04 val 1200 [ 664.738498][ T8407] imon 4-1:0.0: unable to register, err -19 [ 664.756506][ T8407] usb 4-1: USB disconnect, device number 42 [ 664.774524][ T5732] pwc: Registered as video103. [ 664.795503][ T5732] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 664.853262][ T5732] usb 6-1: USB disconnect, device number 10 [ 664.990963][ T5799] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 665.150851][ T5799] usb 1-1: Using ep0 maxpacket: 16 [ 665.157830][ T5799] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 665.166120][ T5799] usb 1-1: config 1 has no interface number 0 [ 665.172288][ T5799] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 665.182279][ T5732] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 665.189890][ T5799] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 665.200046][ T5799] usb 1-1: config 1 interface 105 has no altsetting 0 [ 665.210419][ T5799] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 665.219752][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 665.227993][ T5799] usb 1-1: Product: syz [ 665.232185][ T5799] usb 1-1: Manufacturer: syz [ 665.236780][ T5799] usb 1-1: SerialNumber: syz [ 665.249789][T13244] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 665.264210][T13244] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 665.360693][ T5732] usb 6-1: Using ep0 maxpacket: 8 [ 665.367675][ T5732] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 665.379080][ T5732] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 665.391073][ T5732] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 665.399184][ T5732] usb 6-1: Product: syz [ 665.403458][ T5732] usb 6-1: Manufacturer: syz [ 665.408080][ T5732] usb 6-1: SerialNumber: syz [ 665.686438][T13244] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 665.693950][T13244] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 665.704392][ T5732] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 665.714672][ T5732] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 665.722853][ T5732] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 665.731133][ T5732] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 666.051377][ T5732] usb 6-1: palm_os_3_probe - error -110 getting bytes available request [ 666.061763][ T5732] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 666.090430][ T5732] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 666.112720][ T5799] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 666.137434][ T5732] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 666.146409][ T5799] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 666.177466][ T5799] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 666.990965][ T8407] net_ratelimit: 29 callbacks suppressed [ 666.990983][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.005160][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.061340][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.069589][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.301165][ T5615] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 667.313444][ T5615] Bluetooth: hci0: Injecting HCI hardware error event [ 667.331424][ T5615] Bluetooth: hci0: hardware error 0x00 [ 667.805820][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.892441][ T5799] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, aa:9a:d2:f4:c5:5d [ 667.939476][ T5799] usb 1-1: USB disconnect, device number 48 [ 667.950188][T13272] netlink: 'syz.4.1821': attribute type 2 has an invalid length. [ 667.959855][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1820'. [ 668.087395][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.087476][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.104197][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.108924][ T5718] usb 6-1: USB disconnect, device number 11 [ 668.112664][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.126876][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.135731][ T5799] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 668.235199][ T5718] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 668.336740][ T5718] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 668.348326][ T5718] visor 6-1:1.0: device disconnected [ 668.621193][T13293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1822'. [ 668.634628][T13293] bpf: Bad value for 'context' [ 668.748231][ T5799] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 668.817557][ T5799] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 668.928467][ T5799] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 669.315341][ T30] audit: type=1400 audit(1779177135.376:2548): avc: denied { write } for pid=13297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.350916][ T5799] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 669.451187][ T30] audit: type=1400 audit(1779177135.506:2549): avc: denied { write } for pid=13312 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.461571][ T5615] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 669.494145][ T5732] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 669.520784][ T5799] usb 1-1: Using ep0 maxpacket: 16 [ 669.549691][ T5799] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 669.593907][ T5799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 669.624128][ T5799] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 669.650789][ T5732] usb 6-1: device descriptor read/64, error -71 [ 669.662405][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.694397][ T5799] usb 1-1: Product: syz [ 669.708332][ T5799] usb 1-1: Manufacturer: syz [ 669.730181][ T5799] usb 1-1: SerialNumber: syz [ 669.760077][ T5799] usb 1-1: config 0 descriptor?? [ 669.889691][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1827'. [ 669.911661][ T5732] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 670.994113][ T5732] usb 6-1: device descriptor read/64, error -71 [ 671.028455][ T5799] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 671.046634][T13329] netlink: 'syz.1.1828': attribute type 3 has an invalid length. [ 671.054546][T13329] netlink: 'syz.1.1828': attribute type 3 has an invalid length. [ 671.065145][ T5799] imon 1-1:0.0: unable to initialize intf0, err -19 [ 671.073159][ T5799] imon:imon_probe: failed to initialize context! [ 671.082229][ T5799] imon 1-1:0.0: unable to register, err -19 [ 671.099676][ T5799] usb 1-1: USB disconnect, device number 49 [ 671.131619][ T5732] usb usb6-port1: attempt power cycle [ 671.531197][ T5732] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 671.634060][ T5732] usb 6-1: device descriptor read/8, error -71 [ 671.991397][ T5732] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 672.052627][ T5732] usb 6-1: device descriptor read/8, error -71 [ 672.243782][ T5732] usb usb6-port1: unable to enumerate USB device [ 672.263789][ T5718] net_ratelimit: 20 callbacks suppressed [ 672.263807][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.364147][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.658473][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.981426][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.018513][T13353] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1834'. [ 673.031449][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.039740][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.053104][ T5732] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 673.170203][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.171394][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.216591][ T30] audit: type=1400 audit(1779177139.266:2550): avc: denied { write } for pid=13317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.320853][ T5732] usb 5-1: Using ep0 maxpacket: 8 [ 673.354536][ T30] audit: type=1400 audit(1779177139.416:2551): avc: denied { write } for pid=13362 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.408324][ T5732] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 673.444470][ T5732] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 673.459472][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1838'. [ 673.474681][ T5732] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 673.539066][ T5732] usb 5-1: Product: syz [ 673.582727][ T5732] usb 5-1: Manufacturer: syz [ 673.622762][ T5732] usb 5-1: SerialNumber: syz [ 673.940859][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.014119][ T5732] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 674.024690][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.035109][ T5732] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 674.044974][ T5732] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 674.053539][ T5732] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 674.303109][ T5732] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 674.329657][ T5732] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 674.330785][ T5718] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 674.385784][ T5732] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 674.424176][ T5719] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 674.440032][ T5732] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 674.520882][ T5718] usb 1-1: Using ep0 maxpacket: 16 [ 674.561164][ T5732] usb 5-1: USB disconnect, device number 41 [ 674.581881][ T5732] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 674.590799][ T5719] usb 6-1: Using ep0 maxpacket: 32 [ 674.596276][ T5732] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 674.611840][ T5718] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 674.612136][ T5732] visor 5-1:1.0: device disconnected [ 674.641836][ T5719] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 674.657454][ T5718] usb 1-1: config 0 interface 0 has no altsetting 0 [ 674.669487][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.691633][ T5718] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 674.713080][ T5719] usb 6-1: config 0 descriptor?? [ 674.723277][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.746012][ T5719] as10x_usb: device has been detected [ 674.754085][ T5718] usb 1-1: Product: syz [ 675.281344][ T5719] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 675.299542][ T5718] usb 1-1: Manufacturer: syz [ 675.317849][ T5718] usb 1-1: SerialNumber: syz [ 675.355050][ T5718] usb 1-1: config 0 descriptor?? [ 675.361580][ T5719] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 675.420010][ T5719] as10x_usb: error during firmware upload part1 [ 675.422498][T13375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.483230][T13375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.504518][ T5719] Registered device nBox DVB-T Dongle [ 675.612861][ T5718] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 675.654181][ T5718] imon 1-1:0.0: unable to initialize intf0, err -19 [ 675.678356][ T5718] imon:imon_probe: failed to initialize context! [ 675.704147][ T5718] imon 1-1:0.0: unable to register, err -19 [ 675.748995][ T5718] usb 1-1: USB disconnect, device number 50 [ 675.911672][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 675.922046][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 675.928686][ T10] libceph: connect (1)[c::]:6789 error -101 [ 675.943969][ T30] audit: type=1400 audit(1779177142.006:2552): avc: denied { map } for pid=13391 comm="syz.4.1845" path="socket:[43019]" dev="sockfs" ino=43019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 676.013244][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 676.057114][ T5711] usb 6-1: USB disconnect, device number 16 [ 676.064172][ T10] libceph: connect (1)[c::]:6789 error -101 [ 676.100122][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 676.101835][ T5711] Unregistered device nBox DVB-T Dongle [ 676.117840][ T5711] as10x_usb: device has been disconnected [ 676.243327][ T5732] libceph: connect (1)[c::]:6789 error -101 [ 676.254943][ T5732] libceph: mon0 (1)[c::]:6789 connect error [ 676.395328][ T5718] libceph: connect (1)[c::]:6789 error -101 [ 676.789545][ T5732] libceph: connect (1)[c::]:6789 error -101 [ 676.872203][ T5732] libceph: mon0 (1)[c::]:6789 connect error [ 676.879235][ T5718] libceph: mon0 (1)[c::]:6789 connect error [ 676.951715][T13392] ceph: No mds server is up or the cluster is laggy [ 676.960266][T13394] ceph: No mds server is up or the cluster is laggy [ 677.387309][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1849'. [ 677.576077][T13415] net_ratelimit: 18 callbacks suppressed [ 677.576107][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.591184][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.600666][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.609826][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.619108][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.628580][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.638000][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.647112][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.656312][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.665515][T13415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.131478][T13415] set match dimension is over the limit! [ 678.724086][T13427] netlink: 'syz.4.1850': attribute type 3 has an invalid length. [ 678.732417][T13427] netlink: 'syz.4.1850': attribute type 3 has an invalid length. [ 678.838379][ T30] audit: type=1326 audit(1779177144.826:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.1.1851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 679.220739][ T30] audit: type=1326 audit(1779177144.826:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.1.1851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 679.494861][T13431] netlink: 'syz.5.1853': attribute type 2 has an invalid length. [ 679.520394][ T30] audit: type=1326 audit(1779177144.826:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.1.1851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 679.583492][ T30] audit: type=1326 audit(1779177144.826:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.1.1851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 679.655641][ T30] audit: type=1326 audit(1779177144.826:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.1.1851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 679.718228][ T30] audit: type=1326 audit(1779177144.826:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.1.1851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 679.740707][ T5719] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 679.778819][ T30] audit: type=1326 audit(1779177144.826:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.1.1851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 679.903935][ T30] audit: type=1326 audit(1779177144.826:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.1.1851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 680.005062][ T5719] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 680.011354][ T30] audit: type=1326 audit(1779177144.826:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13420 comm="syz.1.1851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 680.127648][ T5719] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 680.195481][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.202055][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.210099][ T5719] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 680.265965][ T5719] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 680.334743][ T5719] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 680.383196][ T5719] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 680.420786][ T5719] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 680.436900][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 680.473152][ T5719] usb 5-1: Product: syz [ 680.523559][ T5719] usb 5-1: Manufacturer: syz [ 680.584883][T13433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 680.596847][ T5719] cdc_wdm 5-1:1.0: skipping garbage [ 680.621521][ T5719] cdc_wdm 5-1:1.0: skipping garbage [ 680.664666][ T5719] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 680.689865][ T5719] cdc_wdm 5-1:1.0: Unknown control protocol [ 680.830196][ C0] wdm_int_callback: 432 callbacks suppressed [ 680.830222][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 680.842812][ C0] wdm_int_callback: 432 callbacks suppressed [ 680.842832][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 680.855268][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 680.861872][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 680.868192][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 680.874795][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 680.881482][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 680.888078][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 680.895445][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 680.902027][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 680.909069][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 680.915677][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 680.922454][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 680.929055][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 680.935532][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 680.942130][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 680.948745][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 680.955343][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 680.961610][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 680.968204][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 681.029527][ T5719] usb 5-1: USB disconnect, device number 42 [ 681.052870][T13461] netlink: 'syz.1.1855': attribute type 3 has an invalid length. [ 681.061588][T13461] netlink: 'syz.1.1855': attribute type 3 has an invalid length. [ 681.383761][ T5711] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 681.521379][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 681.521394][ T30] audit: type=1400 audit(1779177147.586:2623): avc: denied { write } for pid=13456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.570708][ T5719] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 681.580727][ T5711] usb 6-1: Using ep0 maxpacket: 8 [ 681.587114][ T5711] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 681.599630][ T5711] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 681.609150][ T5711] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 681.618735][ T5711] usb 6-1: Product: syz [ 681.624101][ T5711] usb 6-1: Manufacturer: syz [ 681.628859][ T5711] usb 6-1: SerialNumber: syz [ 681.678670][ T30] audit: type=1400 audit(1779177147.736:2624): avc: denied { write } for pid=13487 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.732895][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 681.742270][ T5719] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 681.775743][ T5719] usb 4-1: config 0 interface 0 has no altsetting 0 [ 681.955790][ T5719] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 682.101922][ T5711] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 682.102010][ T5877] block nbd1: Possible stuck request ffff8880286b5080: control (read@0,1024B). Runtime 450 seconds [ 682.121093][ T5877] block nbd1: Possible stuck request ffff8880286b5240: control (read@1024,1024B). Runtime 450 seconds [ 682.132790][ T5711] visor 6-1:1.0: probe with driver visor failed with error -110 [ 682.133153][ T5877] block nbd1: Possible stuck request ffff8880286b5400: control (read@2048,1024B). Runtime 450 seconds [ 682.152403][ T5877] block nbd1: Possible stuck request ffff8880286b55c0: control (read@3072,1024B). Runtime 450 seconds [ 682.187409][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.212170][ T5719] usb 4-1: Product: syz [ 682.216436][ T5719] usb 4-1: Manufacturer: syz [ 682.222089][ T5719] usb 4-1: SerialNumber: syz [ 682.232589][ T5719] usb 4-1: config 0 descriptor?? [ 682.342025][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 682.569385][ T5719] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 682.582920][ T5719] imon 4-1:0.0: unable to initialize intf0, err -19 [ 682.589606][ T5719] imon:imon_probe: failed to initialize context! [ 682.596983][ T5719] imon 4-1:0.0: unable to register, err -19 [ 682.617709][ T5719] usb 4-1: USB disconnect, device number 43 [ 682.861502][ T10] net_ratelimit: 395 callbacks suppressed [ 682.861521][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.914812][ T7816] udevd[7816]: setting owner of /dev/bus/usb/004/043 to uid=0, gid=0 failed: No such file or directory [ 683.027775][ T5732] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 683.061218][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.070920][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.079231][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.180675][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 683.187170][ T5732] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 683.197622][ T5732] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 683.206765][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.214805][ T5732] usb 1-1: Product: syz [ 683.218983][ T5732] usb 1-1: Manufacturer: syz [ 683.228461][ T5732] usb 1-1: SerialNumber: syz [ 683.250398][ T5732] r8152-cfgselector 1-1: Unknown version 0x0000 [ 683.259895][ T5732] r8152-cfgselector 1-1: config 0 descriptor?? [ 683.285975][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.295166][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.668439][ T30] audit: type=1326 audit(1779177149.676:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.1.1865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 683.844503][ T30] audit: type=1326 audit(1779177149.676:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.1.1865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 684.007172][ T30] audit: type=1326 audit(1779177149.676:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.1.1865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 684.186007][T13520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1867'. [ 684.201889][T13520] bpf: Bad value for 'context' [ 684.407007][ T30] audit: type=1326 audit(1779177149.676:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.1.1865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 684.437917][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.446453][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.461136][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.477638][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.512417][ T30] audit: type=1326 audit(1779177149.686:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.1.1865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 684.539790][ T30] audit: type=1326 audit(1779177149.686:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.1.1865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 684.573195][ T30] audit: type=1326 audit(1779177149.686:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.1.1865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 684.602857][ T30] audit: type=1326 audit(1779177149.686:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.1.1865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8c69f9ce59 code=0x7ffc0000 [ 684.645668][ T8407] usb 6-1: USB disconnect, device number 17 [ 684.915633][T13529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1869'. [ 685.341390][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 685.356995][ T5732] r8152-cfgselector 1-1: Unknown version 0x0000 [ 685.363780][ T5732] r8152-cfgselector 1-1: No union descriptors [ 685.386036][ T5732] r8152-cfgselector 1-1: USB disconnect, device number 51 [ 685.472495][ T10] usb 5-1: device descriptor read/64, error -71 [ 686.391278][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 686.460953][ T5732] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 686.650834][ T10] usb 5-1: device descriptor read/64, error -71 [ 686.729587][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 686.729604][ T30] audit: type=1400 audit(1779177152.736:2697): avc: denied { ioctl } for pid=13538 comm="syz.5.1873" path="socket:[42690]" dev="sockfs" ino=42690 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 686.807098][ T5732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.838393][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1874'. [ 686.847801][ T5732] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 686.872185][ T10] usb usb5-port1: attempt power cycle [ 686.874923][ T5732] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 686.909270][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 686.931246][ T5732] usb 1-1: Product: syz [ 686.943018][ T5732] usb 1-1: Manufacturer: syz [ 686.957463][ T5732] usb 1-1: SerialNumber: syz [ 686.976685][ T5732] usb 1-1: config 0 descriptor?? [ 687.210766][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 687.235186][ T8407] usb 1-1: USB disconnect, device number 52 [ 687.401330][ T10] usb 5-1: device descriptor read/8, error -71 [ 687.650713][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 687.687754][ T10] usb 5-1: device descriptor read/8, error -71 [ 687.800936][ T10] usb usb5-port1: unable to enumerate USB device [ 687.919005][ T8407] net_ratelimit: 16 callbacks suppressed [ 687.919022][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.932982][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.942934][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.955493][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.144094][T13568] netlink: 'syz.1.1880': attribute type 2 has an invalid length. [ 688.180949][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.230714][ T5732] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 688.404312][ T5732] usb 1-1: Using ep0 maxpacket: 8 [ 688.427158][ T5732] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 688.484233][ T5732] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 688.527125][ T5732] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 688.580282][ T5732] usb 1-1: Product: syz [ 688.600668][ T5732] usb 1-1: Manufacturer: syz [ 688.620333][ T5732] usb 1-1: SerialNumber: syz [ 689.234584][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.235478][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.242872][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.259839][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.268125][ T5732] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 689.277950][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.310104][ T5732] visor 1-1:1.0: probe with driver visor failed with error -110 [ 690.407461][T13595] netlink: 'syz.1.1884': attribute type 2 has an invalid length. [ 690.853691][ T5718] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 691.015815][ T29] usb 1-1: USB disconnect, device number 53 [ 691.022259][ T5718] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 691.065547][ T5718] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 691.090681][ T5718] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 691.110379][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.138936][T13597] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 691.186350][ T5718] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 691.595637][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1887'. [ 691.801104][ T5718] usb 6-1: USB disconnect, device number 18 [ 692.375297][ T30] audit: type=1326 audit(1779177158.426:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02419ce59 code=0x7ffc0000 [ 692.510987][ T30] audit: type=1326 audit(1779177158.426:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02419ce59 code=0x7ffc0000 [ 692.558415][ T30] audit: type=1326 audit(1779177158.426:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02415d68e code=0x7ffc0000 [ 692.628216][ T30] audit: type=1326 audit(1779177158.426:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02415d68e code=0x7ffc0000 [ 692.687740][ T30] audit: type=1326 audit(1779177158.426:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02415d68e code=0x7ffc0000 [ 692.757717][ T30] audit: type=1326 audit(1779177158.436:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02415d68e code=0x7ffc0000 [ 692.814183][ T30] audit: type=1326 audit(1779177158.436:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02415d68e code=0x7ffc0000 [ 692.880736][ T30] audit: type=1326 audit(1779177158.436:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02415d68e code=0x7ffc0000 [ 692.938990][ T30] audit: type=1326 audit(1779177158.436:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02415d68e code=0x7ffc0000 [ 693.050740][ T30] audit: type=1326 audit(1779177158.436:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff02415d68e code=0x7ffc0000 [ 693.111272][ T5718] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 693.295406][ T5718] usb 6-1: Using ep0 maxpacket: 32 [ 693.314873][ T5718] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 693.350050][ T5718] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 693.361042][ T5711] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 693.383178][ T29] net_ratelimit: 18 callbacks suppressed [ 693.383191][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.398121][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.406349][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.424111][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.457274][ T5718] usb 6-1: Product: syz [ 693.471041][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.492148][ T5718] usb 6-1: Manufacturer: syz [ 693.535073][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 693.544120][ T5718] usb 6-1: SerialNumber: syz [ 693.545815][ T5711] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 693.581937][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.603402][ T5718] usb 6-1: config 0 descriptor?? [ 693.611444][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.631812][ T5711] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 693.661496][T13619] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 693.670326][ T5711] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 693.690275][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.701845][ T5718] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 693.714058][ T5711] usb 4-1: config 0 descriptor?? [ 693.780866][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.789148][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.848207][T13629] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 693.875648][T13629] overlayfs: failed to set xattr on upper [ 693.940293][T13629] overlayfs: ...falling back to redirect_dir=nofollow. [ 694.739077][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.754164][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.779235][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.788342][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.816829][T13629] overlayfs: ...falling back to index=off. [ 694.828516][ T5711] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0004/input/input20 [ 694.844769][T13629] overlayfs: ...falling back to uuid=null. [ 694.860842][T13629] overlayfs: ...falling back to xino=off. [ 694.872807][T13629] overlayfs: maximum fs stacking depth exceeded [ 694.956355][T13623] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 694.979985][T13623] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 695.004190][ T5711] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0004/input/input21 [ 695.035343][ T29] usb 6-1: USB disconnect, device number 19 [ 695.184840][ T5711] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 695.208287][ T5711] usb 4-1: USB disconnect, device number 44 [ 695.288264][T13638] fido_id[13638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 695.613876][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'. [ 696.117441][T13650] netlink: 'syz.3.1898': attribute type 3 has an invalid length. [ 696.127463][T13650] netlink: 'syz.3.1898': attribute type 3 has an invalid length. [ 696.248094][ T5615] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 696.265509][T13657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1899'. [ 697.120754][ T5711] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 698.130703][ T5711] usb 6-1: Using ep0 maxpacket: 16 [ 698.138177][ T5711] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 698.163063][ T5711] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 698.177665][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.191034][ T5711] usb 6-1: Product: syz [ 698.195363][ T5711] usb 6-1: Manufacturer: syz [ 698.199968][ T5711] usb 6-1: SerialNumber: syz [ 698.210570][ T5711] r8152-cfgselector 6-1: Unknown version 0x0000 [ 698.222572][ T5711] r8152-cfgselector 6-1: config 0 descriptor?? [ 698.500845][ T5718] net_ratelimit: 19 callbacks suppressed [ 698.500865][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.601123][ T29] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 698.750959][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.772666][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 698.793013][ T29] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 698.812704][ T29] usb 1-1: config 179 has no interface number 0 [ 698.828083][ T29] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 698.856038][ T29] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 698.893098][ T29] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 698.921403][ T29] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 698.952438][ T29] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 698.990488][ T29] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 699.056591][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.141606][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.144867][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.161940][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.170178][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.183126][ T8407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.193066][T11755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.288051][T13677] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 699.861170][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.869420][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.902687][ T5711] r8152-cfgselector 6-1: Unknown version 0x0000 [ 699.964421][ T5711] r8152-cfgselector 6-1: No union descriptors [ 700.001764][ T5711] r8152-cfgselector 6-1: USB disconnect, device number 20 [ 700.271665][T13691] netlink: 'syz.1.1912': attribute type 2 has an invalid length. [ 700.468775][ T6973] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 700.480925][T12535] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 700.492475][ T6973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 700.505854][ T6973] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 700.514648][ T6973] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 700.525122][ T6973] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 700.671220][T12535] usb 6-1: Using ep0 maxpacket: 8 [ 700.700050][T12535] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 700.752349][T12535] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 700.796236][T12535] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 700.848043][T12535] usb 6-1: Product: syz [ 700.875229][T12535] usb 6-1: Manufacturer: syz [ 700.903641][T12535] usb 6-1: SerialNumber: syz [ 701.277974][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 701.301357][T13708] xt_TCPMSS: Only works on TCP SYN packets [ 701.315792][T13708] tmpfs: Bad value for 'mpol' [ 701.569386][T12535] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 702.088815][T12535] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 702.132080][T12535] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 702.148520][T12535] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 702.187807][T13695] wlan1 speed is unknown, defaulting to 1000 [ 702.198196][T12535] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 702.238568][T12535] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 702.388707][T12535] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 702.644526][ T5615] Bluetooth: hci6: command tx timeout [ 703.094093][T12535] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 703.098918][ T29] usb 1-1: USB disconnect, device number 54 [ 703.102506][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 703.102547][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 703.248229][T12535] usb 6-1: USB disconnect, device number 21 [ 703.285381][T13720] ip6t_rpfilter: unknown options [ 703.338779][T12535] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 703.421389][T12535] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 703.465863][T12535] visor 6-1:1.0: device disconnected [ 703.610757][ T29] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 703.793466][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.815369][T12535] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 703.820695][ T29] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 703.861023][ T5719] net_ratelimit: 30 callbacks suppressed [ 703.861041][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.891660][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.984590][ T29] usb 4-1: config 0 descriptor?? [ 704.015543][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 704.030685][T12535] usb 6-1: Using ep0 maxpacket: 16 [ 704.066695][T12535] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 704.104824][T12535] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 704.181024][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.192870][T12535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 704.230568][T12535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 704.274509][T12535] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 704.286686][T13695] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.298371][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 704.312415][T12535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.323744][T13695] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.337828][T12535] usb 6-1: Product: syz [ 704.342435][T13695] bridge_slave_0: entered allmulticast mode [ 704.364421][T12535] usb 6-1: Manufacturer: syz [ 704.375018][T13695] bridge_slave_0: entered promiscuous mode [ 704.381347][T12535] usb 6-1: SerialNumber: syz [ 704.406899][T12535] usb 6-1: config 0 descriptor?? [ 704.414012][T13695] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.429311][T13720] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 704.437600][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 704.464757][T13695] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.477600][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 704.500983][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.509323][T11755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.519719][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.534130][ T29] pwc: recv_control_msg error -32 req 02 val 2c00 [ 704.541110][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.549357][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.569801][T13695] bridge_slave_1: entered allmulticast mode [ 704.588735][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.603358][T13695] bridge_slave_1: entered promiscuous mode [ 704.613339][ T29] pwc: recv_control_msg error -32 req 04 val 1000 [ 704.661322][ T5615] Bluetooth: hci6: command tx timeout [ 704.669594][T12535] appledisplay 6-1:0.0: Error while getting initial brightness: -71 [ 704.744309][T12535] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -71 [ 704.819771][T12535] usb 6-1: USB disconnect, device number 22 [ 704.888499][T13695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.972073][T13695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.458580][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.463097][T13695] team0: Port device team_slave_0 added [ 705.542343][T13695] team0: Port device team_slave_1 added [ 705.551009][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.668181][T13753] netlink: 'syz.5.1925': attribute type 2 has an invalid length. [ 705.759841][T13695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.784001][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.911775][T13695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.025494][ T29] pwc: recv_control_msg error -71 req 04 val 1400 [ 706.141648][T13769] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1927'. [ 706.401258][T13695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.423128][T12535] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 706.466041][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.673138][T12535] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 706.715169][T13695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.765715][ T6973] Bluetooth: hci6: command tx timeout [ 706.777069][T12535] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 706.859280][T12535] usb 1-1: Product: syz [ 706.918376][T12535] usb 1-1: SerialNumber: syz [ 707.081798][T12535] usb 1-1: config 0 descriptor?? [ 707.358935][ T29] pwc: recv_control_msg error -71 req 02 val 2000 [ 707.492870][T13773] netlink: 'syz.1.1928': attribute type 3 has an invalid length. [ 707.551826][T13773] netlink: 'syz.1.1928': attribute type 3 has an invalid length. [ 708.022476][ T5615] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 708.033800][ T6973] Bluetooth: hci7: command 0x1003 tx timeout [ 708.282698][ T29] pwc: recv_control_msg error -71 req 02 val 2100 [ 708.289569][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 708.296429][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 708.303299][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 708.310119][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 708.317089][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 708.324024][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 708.341194][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 708.348101][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 708.403071][ T29] pwc: Registered as video103. [ 708.411423][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 708.550877][ T29] usb 4-1: USB disconnect, device number 45 [ 708.981274][ T5719] net_ratelimit: 26 callbacks suppressed [ 708.981295][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.984096][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.011991][ T5615] Bluetooth: hci6: command tx timeout [ 709.019332][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.036666][T12535] usb 1-1: USB disconnect, device number 55 [ 709.036838][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.044320][T13695] hsr_slave_0: entered promiscuous mode [ 709.087974][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.159457][T13695] hsr_slave_1: entered promiscuous mode [ 709.208566][T13695] debugfs: 'hsr0' already exists in 'hsr' [ 709.237449][T13791] FAULT_INJECTION: forcing a failure. [ 709.237449][T13791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.238730][T13695] Cannot create hsr debugfs directory [ 709.326206][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.337903][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.377709][T13791] CPU: 1 UID: 0 PID: 13791 Comm: syz.3.1931 Not tainted syzkaller #0 PREEMPT(full) [ 709.377736][T13791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 709.377747][T13791] Call Trace: [ 709.377759][T13791] [ 709.377766][T13791] dump_stack_lvl+0x100/0x190 [ 709.377795][T13791] should_fail_ex.cold+0x5/0xa [ 709.377819][T13791] _copy_from_user+0x2e/0xd0 [ 709.377848][T13791] copy_msghdr_from_user+0x9f/0x4f0 [ 709.377881][T13791] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 709.377922][T13791] ___sys_sendmsg+0x106/0x1e0 [ 709.377948][T13791] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.378001][T13791] __sys_sendmsg+0x170/0x220 [ 709.378021][T13791] ? __pfx___sys_sendmsg+0x10/0x10 [ 709.378049][T13791] ? rcu_is_watching+0x12/0xc0 [ 709.378078][T13791] do_syscall_64+0x10b/0xf80 [ 709.378103][T13791] ? clear_bhb_loop+0x40/0x90 [ 709.378125][T13791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.378142][T13791] RIP: 0033:0x7ff02419ce59 [ 709.378158][T13791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.378176][T13791] RSP: 002b:00007ff0250aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.378194][T13791] RAX: ffffffffffffffda RBX: 00007ff024415fa0 RCX: 00007ff02419ce59 [ 709.378205][T13791] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000000000000004 [ 709.378216][T13791] RBP: 00007ff0250aa090 R08: 0000000000000000 R09: 0000000000000000 [ 709.378226][T13791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.378236][T13791] R13: 00007ff024416038 R14: 00007ff024415fa0 R15: 00007fff0b9f12e8 [ 709.378259][T13791] [ 710.031321][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.039523][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.090511][T13805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.704923][T13815] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 710.745768][ T30] kauditd_printk_skb: 374 callbacks suppressed [ 710.745816][ T30] audit: type=1400 audit(1779177176.756:3082): avc: denied { write } for pid=13778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.795453][T13815] overlayfs: failed to set xattr on upper [ 710.843969][T13815] overlayfs: ...falling back to redirect_dir=nofollow. [ 710.894332][T13815] overlayfs: ...falling back to index=off. [ 710.936675][T13815] overlayfs: ...falling back to uuid=null. [ 710.974429][T13815] overlayfs: ...falling back to xino=off. [ 711.047144][T13815] overlayfs: maximum fs stacking depth exceeded [ 711.686064][T13695] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 711.712214][ T30] audit: type=1400 audit(1779177177.766:3083): avc: denied { write } for pid=13825 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.739800][T13695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 711.769557][T13695] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 711.863998][T13695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 711.916838][T13695] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 712.114341][T13695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.135065][T13695] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 712.367910][ T5877] block nbd1: Possible stuck request ffff8880286b5080: control (read@0,1024B). Runtime 480 seconds [ 712.378848][ T5877] block nbd1: Possible stuck request ffff8880286b5240: control (read@1024,1024B). Runtime 480 seconds [ 712.444087][ T5877] block nbd1: Possible stuck request ffff8880286b5400: control (read@2048,1024B). Runtime 480 seconds [ 712.459350][ T5877] block nbd1: Possible stuck request ffff8880286b55c0: control (read@3072,1024B). Runtime 480 seconds [ 712.490459][ T31] INFO: task syz.2.1488:11721 blocked for more than 143 seconds. [ 712.552657][ T31] Not tainted syzkaller #0 [ 712.568552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 712.598216][ T31] task:syz.2.1488 state:D stack:26536 pid:11721 tgid:11720 ppid:5628 task_flags:0x400140 flags:0x00080002 [ 712.639262][ T31] Call Trace: [ 712.653333][ T31] [ 712.659086][ T31] __schedule+0x1295/0x67a0 [ 712.669443][ T31] ? __pfx___schedule+0x10/0x10 [ 712.680741][ T31] ? find_held_lock+0x2b/0x80 [ 712.690903][ T31] ? schedule+0x2bf/0x390 [ 712.699689][ T31] schedule+0xdd/0x390 [ 712.708427][ T31] schedule_preempt_disabled+0x13/0x30 [ 712.730093][ T31] __mutex_lock+0xced/0x1b10 [ 712.739578][ T31] ? sync_bdevs+0x153/0x480 [ 712.837709][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 712.870709][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 712.876407][ T31] ? iput.part.0+0x1a0/0xf50 [ 712.890008][ T31] ? sync_bdevs+0x153/0x480 [ 712.902612][ T31] sync_bdevs+0x153/0x480 [ 712.912417][ T31] ksys_sync+0xb0/0xf0 [ 712.912872][ T30] audit: type=1400 audit(1779177178.976:3084): avc: denied { write } for pid=13829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.920907][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 712.980679][ T31] ? rcu_is_watching+0x12/0xc0 [ 712.985542][ T31] ? do_syscall_64+0x90/0xf80 [ 713.000705][ T31] __do_sys_sync+0xe/0x20 [ 713.005099][ T31] do_syscall_64+0x10b/0xf80 [ 713.009702][ T31] ? clear_bhb_loop+0x40/0x90 [ 713.018439][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.030995][ T31] RIP: 0033:0x7f34e539ce59 [ 713.041126][ T31] RSP: 002b:00007f34e6266028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 713.062260][ T31] RAX: ffffffffffffffda RBX: 00007f34e5615fa0 RCX: 00007f34e539ce59 [ 713.074882][ T30] audit: type=1400 audit(1779177179.136:3085): avc: denied { write } for pid=13853 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.080249][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 713.120665][ T31] RBP: 00007f34e5615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 713.142174][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.157763][ T31] R13: 00007f34e5616038 R14: 00007f34e5615fa0 R15: 00007ffe71d05798 [ 713.165914][ T31] [ 713.169706][ T31] INFO: task syz.2.1488:11723 blocked for more than 144 seconds. [ 713.182065][T13695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 713.189171][ T31] Not tainted syzkaller #0 [ 713.212891][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.222953][ T31] task:syz.2.1488 state:D stack:26216 pid:11723 tgid:11720 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 713.235090][ T31] Call Trace: [ 713.238370][ T31] [ 713.242214][ T31] __schedule+0x1295/0x67a0 [ 713.246770][ T31] ? __pfx___schedule+0x10/0x10 [ 713.251694][ T31] ? find_held_lock+0x2b/0x80 [ 713.256377][ T31] ? schedule+0x2bf/0x390 [ 713.260758][ T31] schedule+0xdd/0x390 [ 713.264295][T13844] syzkaller0: entered promiscuous mode [ 713.264821][ T31] schedule_preempt_disabled+0x13/0x30 [ 713.275923][ T31] __mutex_lock+0xced/0x1b10 [ 713.276819][T13844] syzkaller0: entered allmulticast mode [ 713.280528][ T31] ? sync_bdevs+0x153/0x480 [ 713.280555][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 713.295805][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 713.301868][ T31] ? iput.part.0+0x1a0/0xf50 [ 713.306474][ T31] ? sync_bdevs+0x153/0x480 [ 713.311008][ T31] sync_bdevs+0x153/0x480 [ 713.315327][ T31] ksys_sync+0xb0/0xf0 [ 713.319376][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 713.324441][ T31] ? rcu_is_watching+0x12/0xc0 [ 713.329338][ T31] ? do_syscall_64+0x90/0xf80 [ 713.334426][ T31] __do_sys_sync+0xe/0x20 [ 713.338773][ T31] do_syscall_64+0x10b/0xf80 [ 713.343436][ T31] ? clear_bhb_loop+0x40/0x90 [ 713.348117][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.354076][ T31] RIP: 0033:0x7f34e539ce59 [ 713.358491][ T31] RSP: 002b:00007f34e6245028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 713.367005][ T31] RAX: ffffffffffffffda RBX: 00007f34e5616090 RCX: 00007f34e539ce59 [ 713.375051][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 713.383195][ T31] RBP: 00007f34e5616090 R08: 0000000000000000 R09: 0000000000000000 [ 713.391214][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.399193][ T31] R13: 00007f34e5616128 R14: 00007f34e5616090 R15: 00007ffe71d05798 [ 713.407362][ T31] [ 713.410509][ T31] INFO: task syz.2.1488:11725 blocked for more than 144 seconds. [ 713.418667][ T31] Not tainted syzkaller #0 [ 713.442055][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.451570][ T31] task:syz.2.1488 state:D stack:27608 pid:11725 tgid:11720 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 713.463727][ T31] Call Trace: [ 713.467135][ T31] [ 713.470098][ T31] __schedule+0x1295/0x67a0 [ 713.474686][ T31] ? __pfx___schedule+0x10/0x10 [ 713.479552][ T31] ? find_held_lock+0x2b/0x80 [ 713.484323][ T31] ? schedule+0x2bf/0x390 [ 713.488664][ T31] schedule+0xdd/0x390 [ 713.492784][ T31] schedule_preempt_disabled+0x13/0x30 [ 713.498249][ T31] __mutex_lock+0xced/0x1b10 [ 713.502852][ T31] ? sync_bdevs+0x153/0x480 [ 713.507347][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 713.512424][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 713.518072][ T31] ? iput.part.0+0x1a0/0xf50 [ 713.522744][ T31] ? sync_bdevs+0x153/0x480 [ 713.527256][ T31] sync_bdevs+0x153/0x480 [ 713.531669][ T31] ksys_sync+0xb0/0xf0 [ 713.535747][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 713.540548][ T31] ? x64_sys_call+0xc33/0x1530 [ 713.545340][ T31] __do_sys_sync+0xe/0x20 [ 713.549670][ T31] do_syscall_64+0x10b/0xf80 [ 713.554421][ T31] ? clear_bhb_loop+0x40/0x90 [ 713.559105][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.565071][ T31] RIP: 0033:0x7f34e539ce59 [ 713.569484][ T31] RSP: 002b:00007f34e6224028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 713.577955][ T31] RAX: ffffffffffffffda RBX: 00007f34e5616180 RCX: 00007f34e539ce59 [ 713.585965][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 713.594054][ T31] RBP: 00007f34e5616180 R08: 0000000000000000 R09: 0000000000000000 [ 713.602124][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.610107][ T31] R13: 00007f34e5616218 R14: 00007f34e5616180 R15: 00007ffe71d05798 [ 713.618141][ T31] [ 713.623435][ T31] INFO: task syz.2.1488:11738 blocked for more than 144 seconds. [ 713.646145][ T31] Not tainted syzkaller #0 [ 713.658982][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.676121][ T31] task:syz.2.1488 state:D stack:29016 pid:11738 tgid:11720 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 713.690334][ T31] Call Trace: [ 713.694029][ T31] [ 713.697036][ T31] __schedule+0x1295/0x67a0 [ 713.702813][ T31] ? __pfx___schedule+0x10/0x10 [ 713.707740][ T31] ? find_held_lock+0x2b/0x80 [ 713.712976][ T31] ? schedule+0x2bf/0x390 [ 713.717388][ T31] schedule+0xdd/0x390 [ 713.721792][ T31] schedule_preempt_disabled+0x13/0x30 [ 713.727361][ T31] __mutex_lock+0xced/0x1b10 [ 713.733684][ T31] ? sync_bdevs+0x153/0x480 [ 713.738293][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 713.743780][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 713.749531][ T31] ? iput.part.0+0x1a0/0xf50 [ 713.754461][ T31] ? sync_bdevs+0x153/0x480 [ 713.759014][ T31] sync_bdevs+0x153/0x480 [ 713.763681][ T31] ksys_sync+0xb0/0xf0 [ 713.767805][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 713.772715][ T31] ? kcov_ioctl+0x16a/0x720 [ 713.777242][ T31] ? rcu_is_watching+0x12/0xc0 [ 713.782434][ T31] ? do_syscall_64+0x90/0xf80 [ 713.787187][ T31] __do_sys_sync+0xe/0x20 [ 713.792333][ T31] do_syscall_64+0x10b/0xf80 [ 713.796939][ T31] ? clear_bhb_loop+0x40/0x90 [ 713.801664][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.807550][ T31] RIP: 0033:0x7f34e539ce59 [ 713.812006][ T31] RSP: 002b:00007f34e6203028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 713.820412][ T31] RAX: ffffffffffffffda RBX: 00007f34e5616270 RCX: 00007f34e539ce59 [ 713.828520][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 713.836545][ T31] RBP: 00007f34e5616270 R08: 0000000000000000 R09: 0000000000000000 [ 713.844781][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.852802][ T31] R13: 00007f34e5616308 R14: 00007f34e5616270 R15: 00007ffe71d05798 [ 713.860876][ T31] [ 713.863912][ T31] INFO: task syz.2.1488:11739 blocked for more than 145 seconds. [ 713.872136][ T31] Not tainted syzkaller #0 [ 713.877098][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.885930][ T31] task:syz.2.1488 state:D stack:28456 pid:11739 tgid:11720 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 713.898028][ T31] Call Trace: [ 713.901372][ T31] [ 713.904310][ T31] __schedule+0x1295/0x67a0 [ 713.908838][ T31] ? __pfx___schedule+0x10/0x10 [ 713.913760][ T31] ? find_held_lock+0x2b/0x80 [ 713.918432][ T31] ? schedule+0x2bf/0x390 [ 713.923066][ T31] schedule+0xdd/0x390 [ 713.927128][ T31] schedule_preempt_disabled+0x13/0x30 [ 713.932685][ T31] __mutex_lock+0xced/0x1b10 [ 713.937287][ T31] ? sync_bdevs+0x153/0x480 [ 713.941942][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 713.947110][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 713.953442][ T31] ? iput.part.0+0x1a0/0xf50 [ 713.958085][ T31] ? sync_bdevs+0x153/0x480 [ 713.962627][ T31] sync_bdevs+0x153/0x480 [ 713.966945][ T31] ksys_sync+0xb0/0xf0 [ 713.971057][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 713.975820][ T31] ? kcov_ioctl+0x16a/0x720 [ 713.980299][ T31] ? rcu_is_watching+0x12/0xc0 [ 713.985092][ T31] ? do_syscall_64+0x90/0xf80 [ 713.990042][ T31] __do_sys_sync+0xe/0x20 [ 713.994435][ T31] do_syscall_64+0x10b/0xf80 [ 713.999025][ T31] ? clear_bhb_loop+0x40/0x90 [ 714.003753][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.009637][ T31] RIP: 0033:0x7f34e539ce59 [ 714.014066][ T31] RSP: 002b:00007f34e61e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 714.022554][ T31] RAX: ffffffffffffffda RBX: 00007f34e5616360 RCX: 00007f34e539ce59 [ 714.030535][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 714.038549][ T31] RBP: 00007f34e5616360 R08: 0000000000000000 R09: 0000000000000000 [ 714.046600][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.054865][ T31] R13: 00007f34e56163f8 R14: 00007f34e5616360 R15: 00007ffe71d05798 [ 714.063047][ T31] [ 714.066103][ T31] INFO: task syz.2.1488:11740 blocked for more than 145 seconds. [ 714.074600][ T31] Not tainted syzkaller #0 [ 714.079555][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 714.089365][ T31] task:syz.2.1488 state:D stack:26344 pid:11740 tgid:11720 ppid:5628 task_flags:0x400140 flags:0x00080002 [ 714.101633][ T31] Call Trace: [ 714.104919][ T31] [ 714.107830][ T31] __schedule+0x1295/0x67a0 [ 714.112412][ T31] ? __pfx___schedule+0x10/0x10 [ 714.117273][ T31] ? find_held_lock+0x2b/0x80 [ 714.122079][ T31] ? schedule+0x2bf/0x390 [ 714.126425][ T31] schedule+0xdd/0x390 [ 714.130491][ T31] schedule_preempt_disabled+0x13/0x30 [ 714.136521][ T31] __mutex_lock+0xced/0x1b10 [ 714.141200][ T31] ? sync_bdevs+0x153/0x480 [ 714.145718][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 714.150749][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 714.156467][ T31] ? iput.part.0+0x1a0/0xf50 [ 714.161475][ T31] ? sync_bdevs+0x153/0x480 [ 714.165995][ T31] sync_bdevs+0x153/0x480 [ 714.170328][ T31] ksys_sync+0xb0/0xf0 [ 714.174579][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 714.179377][ T31] ? rcu_is_watching+0x12/0xc0 [ 714.185506][ T31] ? do_syscall_64+0x90/0xf80 [ 714.190198][ T31] __do_sys_sync+0xe/0x20 [ 714.192595][ T5799] net_ratelimit: 135 callbacks suppressed [ 714.192607][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.194731][ T31] do_syscall_64+0x10b/0xf80 [ 714.200545][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.209391][ T31] ? clear_bhb_loop+0x40/0x90 [ 714.225732][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.231664][ T31] RIP: 0033:0x7f34e539ce59 [ 714.236065][ T31] RSP: 002b:00007f34e61c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 714.244591][ T31] RAX: ffffffffffffffda RBX: 00007f34e5616450 RCX: 00007f34e539ce59 [ 714.252721][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 714.261085][ T31] RBP: 00007f34e5616450 R08: 0000000000000000 R09: 0000000000000000 [ 714.271170][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.279262][ T31] R13: 00007f34e56164e8 R14: 00007f34e5616450 R15: 00007ffe71d05798 [ 714.287327][ T31] [ 714.290407][ T31] INFO: task syz.2.1488:11741 blocked for more than 145 seconds. [ 714.298310][ T31] Not tainted syzkaller #0 [ 714.303407][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 714.312841][ T31] task:syz.2.1488 state:D stack:28136 pid:11741 tgid:11720 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 714.325031][ T31] Call Trace: [ 714.328340][ T31] [ 714.331320][ T31] __schedule+0x1295/0x67a0 [ 714.335852][ T31] ? __pfx___schedule+0x10/0x10 [ 714.340950][ T31] ? find_held_lock+0x2b/0x80 [ 714.345609][ T31] ? schedule+0x2bf/0x390 [ 714.349918][ T31] schedule+0xdd/0x390 [ 714.354021][ T31] schedule_preempt_disabled+0x13/0x30 [ 714.359557][ T31] __mutex_lock+0xced/0x1b10 [ 714.364296][ T31] ? sync_bdevs+0x153/0x480 [ 714.368804][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 714.373855][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 714.379504][ T31] ? iput.part.0+0x1a0/0xf50 [ 714.384206][ T31] ? sync_bdevs+0x153/0x480 [ 714.388713][ T31] sync_bdevs+0x153/0x480 [ 714.393083][ T31] ksys_sync+0xb0/0xf0 [ 714.397152][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 714.402098][ T31] ? kcov_ioctl+0x16a/0x720 [ 714.406635][ T31] ? rcu_is_watching+0x12/0xc0 [ 714.411463][ T31] ? do_syscall_64+0x90/0xf80 [ 714.416136][ T31] __do_sys_sync+0xe/0x20 [ 714.420448][ T31] do_syscall_64+0x10b/0xf80 [ 714.425142][ T31] ? clear_bhb_loop+0x40/0x90 [ 714.429829][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.435763][ T31] RIP: 0033:0x7f34e539ce59 [ 714.440171][ T31] RSP: 002b:00007f34e61a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 714.448653][ T31] RAX: ffffffffffffffda RBX: 00007f34e5616540 RCX: 00007f34e539ce59 [ 714.456658][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 714.464787][ T31] RBP: 00007f34e5616540 R08: 0000000000000000 R09: 0000000000000000 [ 714.472775][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.480830][ T31] R13: 00007f34e56165d8 R14: 00007f34e5616540 R15: 00007ffe71d05798 [ 714.488810][ T31] [ 714.491948][ T31] INFO: task syz.2.1488:11748 blocked for more than 145 seconds. [ 714.499677][ T31] Not tainted syzkaller #0 [ 714.504938][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 714.513675][ T31] task:syz.2.1488 state:D stack:28136 pid:11748 tgid:11720 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 714.525728][ T31] Call Trace: [ 714.529015][ T31] [ 714.532004][ T31] __schedule+0x1295/0x67a0 [ 714.536529][ T31] ? __pfx___schedule+0x10/0x10 [ 714.541434][ T31] ? find_held_lock+0x2b/0x80 [ 714.546158][ T31] ? schedule+0x2bf/0x390 [ 714.550489][ T31] schedule+0xdd/0x390 [ 714.554604][ T31] schedule_preempt_disabled+0x13/0x30 [ 714.560057][ T31] __mutex_lock+0xced/0x1b10 [ 714.564851][ T31] ? sync_bdevs+0x153/0x480 [ 714.569354][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 714.574448][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 714.580092][ T31] ? iput.part.0+0x1a0/0xf50 [ 714.584837][ T31] ? sync_bdevs+0x153/0x480 [ 714.589332][ T31] sync_bdevs+0x153/0x480 [ 714.593763][ T31] ksys_sync+0xb0/0xf0 [ 714.597845][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 714.602796][ T31] ? kcov_ioctl+0x16a/0x720 [ 714.607311][ T31] ? rcu_is_watching+0x12/0xc0 [ 714.612116][ T31] ? do_syscall_64+0x90/0xf80 [ 714.616886][ T31] __do_sys_sync+0xe/0x20 [ 714.621349][ T31] do_syscall_64+0x10b/0xf80 [ 714.625928][ T31] ? clear_bhb_loop+0x40/0x90 [ 714.630588][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.636516][ T31] RIP: 0033:0x7f34e539ce59 [ 714.640967][ T31] RSP: 002b:00007f34e617f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 714.649454][ T31] RAX: ffffffffffffffda RBX: 00007f34e5616630 RCX: 00007f34e539ce59 [ 714.657492][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 714.665883][ T31] RBP: 00007f34e5616630 R08: 0000000000000000 R09: 0000000000000000 [ 714.674000][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.677477][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.682024][ T31] R13: 00007f34e56166c8 R14: 00007f34e5616630 R15: 00007ffe71d05798 [ 714.690242][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.698061][ T31] [ 714.709265][ T31] [ 714.709265][ T31] Showing all locks held in the system: [ 714.709438][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.727374][ T31] 1 lock held by khungtaskd/31: [ 714.733092][ T31] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 714.744089][ T31] 3 locks held by kworker/u8:6/149: [ 714.749321][ T31] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 714.760540][ T31] #1: ffffc90002f3fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 714.771133][ T31] #2: ffffffff9060dd60 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 714.780195][ T31] 3 locks held by kworker/u8:9/3344: [ 714.785558][ T31] #0: ffff8880334a8140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 714.796668][ T31] #1: ffffc9000fc77d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 714.809004][ T31] #2: ffffffff9060dd60 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 714.818531][ T31] 2 locks held by kworker/u9:1/4931: [ 714.824427][ T31] #0: ffff88802860a940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 714.835874][ T31] #1: ffffc9000780fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 714.847146][ T31] 1 lock held by klogd/4968: [ 714.851814][ T31] #0: ffff8880b853b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 714.861798][ T31] 2 locks held by getty/5366: [ 714.866458][ T31] #0: ffff888038e9e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 714.876363][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 714.886508][ T31] 2 locks held by kworker/u9:4/5616: [ 714.891788][ T31] #0: ffff88802860a940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 714.902578][ T31] #1: ffffc9000317fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 714.913839][ T31] 1 lock held by udevd/6514: [ 714.918403][ T31] #0: ffff88802863f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 714.927737][ T31] 1 lock held by syz.2.1488/11721: [ 714.932870][ T31] #0: ffff88802863f350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 714.942423][ T31] 1 lock held by syz.2.1488/11723: [ 714.947568][ T31] #0: ffff88802863f350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 714.957044][ T31] 1 lock held by syz.2.1488/11725: [ 714.962161][ T31] #0: ffff88802863f350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 714.971705][ T31] 1 lock held by syz.2.1488/11738: [ 714.976797][ T31] #0: ffff88802863f350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 714.987331][ T31] 1 lock held by syz.2.1488/11739: [ 714.992487][ T31] #0: ffff88802863f350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 715.001910][ T31] 1 lock held by syz.2.1488/11740: [ 715.007014][ T31] #0: ffff88802863f350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 715.016524][ T31] 1 lock held by syz.2.1488/11741: [ 715.021644][ T31] #0: ffff88802863f350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 715.031054][ T31] 1 lock held by syz.2.1488/11748: [ 715.036143][ T31] #0: ffff88802863f350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 715.045549][ T31] 1 lock held by syz.4.1870/13531: [ 715.050761][ T31] #0: ffffffff9060dd60 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 715.059745][ T31] 1 lock held by syz-executor/13695: [ 715.065657][ T31] #0: ffffffff9060dd60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 715.075309][ T31] 2 locks held by syz.5.1942/13835: [ 715.080492][ T31] #0: ffffffff9060dd60 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 715.089574][ T31] #1: ffffffff8e7f1168 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 715.099662][ T31] [ 715.102201][ T31] ============================================= [ 715.102201][ T31] [ 715.110669][ T31] NMI backtrace for cpu 0 [ 715.110684][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 715.110703][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 715.110713][ T31] Call Trace: [ 715.110719][ T31] [ 715.110726][ T31] dump_stack_lvl+0x100/0x190 [ 715.110753][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 715.110774][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 715.110796][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 715.110819][ T31] sys_info+0x141/0x190 [ 715.110833][ T31] watchdog+0xcb1/0x1030 [ 715.110856][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 715.110880][ T31] ? __pfx_watchdog+0x10/0x10 [ 715.110900][ T31] ? __kthread_parkme+0x18c/0x230 [ 715.110920][ T31] ? kthread+0x13a/0x450 [ 715.110937][ T31] ? __pfx_watchdog+0x10/0x10 [ 715.110954][ T31] kthread+0x370/0x450 [ 715.110968][ T31] ? __pfx_kthread+0x10/0x10 [ 715.110982][ T31] ret_from_fork+0x72b/0xd50 [ 715.110997][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 715.111012][ T31] ? __switch_to+0x800/0x1100 [ 715.111030][ T31] ? __pfx_kthread+0x10/0x10 [ 715.111044][ T31] ret_from_fork_asm+0x1a/0x30 [ 715.111066][ T31] [ 715.111074][ T31] Sending NMI from CPU 0 to CPUs 1: [ 715.236404][ C1] NMI backtrace for cpu 1 [ 715.236419][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 715.236435][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 715.236443][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 715.236467][ C1] Code: 76 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 81 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 715.236479][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 715.236492][ C1] RAX: 0000000003d9c87b RBX: ffff88801e2ba500 RCX: ffffffff8b8b1095 [ 715.236501][ C1] RDX: 0000000000000000 RSI: ffffffff8df22fb1 RDI: ffffffff8c1c4180 [ 715.236510][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 715.236519][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 715.236527][ C1] R13: ffffed1003c574a0 R14: 0000000000000001 R15: ffffffff90d7d650 [ 715.236536][ C1] FS: 0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 715.236551][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.236560][ C1] CR2: 000055557033e4e8 CR3: 000000007e9cf000 CR4: 00000000003526f0 [ 715.236569][ C1] Call Trace: [ 715.236574][ C1] [ 715.236579][ C1] default_idle+0x9/0x10 [ 715.236593][ C1] default_idle_call+0x6c/0xb0 [ 715.236605][ C1] do_idle+0x464/0x590 [ 715.236619][ C1] ? __pfx_do_idle+0x10/0x10 [ 715.236635][ C1] cpu_startup_entry+0x4f/0x60 [ 715.236648][ C1] start_secondary+0x21d/0x2d0 [ 715.236664][ C1] ? __pfx_start_secondary+0x10/0x10 [ 715.236681][ C1] common_startup_64+0x13e/0x148 [ 715.236704][ C1] [ 715.402160][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.402203][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 715.402218][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 715.402236][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 715.402246][ T31] Call Trace: [ 715.402252][ T31] [ 715.402260][ T31] dump_stack_lvl+0x100/0x190 [ 715.402284][ T31] vpanic+0x552/0x970 [ 715.402300][ T31] ? __pfx_vpanic+0x10/0x10 [ 715.402316][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 715.402336][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 715.402357][ T31] panic+0xd1/0xe0 [ 715.402372][ T31] ? __pfx_panic+0x10/0x10 [ 715.402390][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 715.402408][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 715.402426][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 715.402443][ T31] ? watchdog.cold+0x1ec/0x234 [ 715.402460][ T31] ? watchdog+0xcc1/0x1030 [ 715.402480][ T31] watchdog.cold+0x1fd/0x234 [ 715.402502][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 715.402523][ T31] ? __pfx_watchdog+0x10/0x10 [ 715.402542][ T31] ? __kthread_parkme+0x18c/0x230 [ 715.402562][ T31] ? kthread+0x13a/0x450 [ 715.402578][ T31] ? __pfx_watchdog+0x10/0x10 [ 715.402596][ T31] kthread+0x370/0x450 [ 715.402613][ T31] ? __pfx_kthread+0x10/0x10 [ 715.402633][ T31] ret_from_fork+0x72b/0xd50 [ 715.402655][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 715.402676][ T31] ? __switch_to+0x800/0x1100 [ 715.402700][ T31] ? __pfx_kthread+0x10/0x10 [ 715.402720][ T31] ret_from_fork_asm+0x1a/0x30 [ 715.402753][ T31] [ 715.410404][ T31] Kernel Offset: disabled