last executing test programs: 9.69643187s ago: executing program 1 (id=2064): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x70}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 9.096101495s ago: executing program 1 (id=2067): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xfa09c4119783e9d) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005ae4c41096050100f505010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xfffffffffffffbff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000300)="baf80c66b80c28838166efbafc0c66b8d6cb69ba66eff30f7fa63b0dbad104ed0f20c06635100000000f22c066b80500000066b9370000000f01c16766c7442400004800006766c7442402020000006766c744240600000000670f0114249a60073e00640f01c30f01cfba430066b80038000066ef", 0x75}], 0x1, 0x48, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x2, 0x81, 0x100000, 0x0, 0x6, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x800) ioperm(0x284, 0x7f, 0xe3) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 7.80830002s ago: executing program 0 (id=2072): socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 7.379644169s ago: executing program 0 (id=2074): syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e340680ffca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe909393fe089393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 7.195370197s ago: executing program 0 (id=2075): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) fsmount(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) fsetxattr$security_ima(r3, 0x0, 0x0, 0x0, 0x23ee3d92e16e0d44) 7.012226569s ago: executing program 3 (id=2078): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="05000000010001", 0x7) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newqdisc={0x0, 0x24, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x23a27b1ae1b9b26c, 0x6}, {0x7, 0xc}, {0xfff3}}, [@TCA_RATE={0x0, 0x5, {0x3}}, @qdisc_kind_options=@q_prio={{}, {0x0, 0x2, {0x8, "9be1f43a4c2b0f8344b0f5c2fe490f21"}}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0xfb}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x8, 0x8, 0x5, 0xbec, 0x1, 0x9de, 0x1}}, {0x0, 0x2, [0x7f, 0x13aa]}}, {{0x0, 0x1, {0x7, 0x6, 0x200, 0xffff, 0x0, 0x101, 0x4}}, {0x0, 0x2, [0x8000]}}, {{0x0, 0x1, {0x4, 0x1, 0x3, 0x2, 0x0, 0x4, 0x9}}, {0x0, 0x2, [0x1e79, 0x7, 0x1ff, 0x3, 0x7, 0x2]}}, {{0x0, 0x1, {0x7, 0x9, 0x7ff, 0x5, 0x2, 0x3, 0x4}}, {0x0, 0x2, [0xfb61, 0x3ff, 0x1, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0xf}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e140200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYRES32=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000140)={@remote, r7}, 0x49) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(r8) 6.618760672s ago: executing program 4 (id=2079): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0xfffffffffffffe63, &(0x7f0000000200)=0xfce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=@ipv6_newroute={0x2c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x6}, [@RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x4}]}, 0x2c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2f9}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) 6.558283806s ago: executing program 2 (id=2080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000130000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020273797a32000000000900010073797a30"], 0xa8}}, 0x0) 6.488891461s ago: executing program 1 (id=2081): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0), &(0x7f00000001c0)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x4, "1e90d83d"}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r3, 0x10000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$unix(0x1, 0x1, 0x0) 6.048316617s ago: executing program 2 (id=2082): socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000009500200c00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x501000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r4 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89ef, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(&(0x7f0000000140)=""/115, 0x73) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 6.015821325s ago: executing program 3 (id=2083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000000a05000000000000000000020000000900010073797a3000000000140003800800014000fff50008000240000000030900020073"], 0x68}}, 0x800) 5.582153386s ago: executing program 0 (id=2084): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001009a"], 0x0) 5.532093554s ago: executing program 3 (id=2085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\f'], 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x1, 0x2, {0x0}, {0xee01}, 0x1293, 0x4}) sched_setscheduler(r5, 0x4, &(0x7f0000000180)=0x8004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f30455afb9fdd672bad09dfb78c7699c74666622a9000000000000000008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5.202012088s ago: executing program 4 (id=2086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="4feab52749c8e489984d23163a68a40a176114060ceb6534a377d318c06d312133855816e2c84eb78cfb640b21de973ae74b11f84c989ecbd172767ce7f4da9901b196e491bed6d662", @ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x138}, 0x1, 0x0, 0x0, 0x4011}, 0x44) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x11, 0xa, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000000)={0x980916, 0x3ff, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) recvmmsg(r6, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000e094369cfcb10000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168024000300e00000020600150006000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) 4.038309833s ago: executing program 2 (id=2087): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES64], 0x52) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x3ffffddc, &(0x7f0000000180), 0x9, 0x5000004}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) ioctl(r3, 0x1, &(0x7f00000005c0)="0f4030f8") mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x8008af26, &(0x7f0000000280)={@my=0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x8, 0x5, 0x0, 0x4}, {0x6d, 0x7, 0x5, 0xffffffff}, {0x5, 0x4, 0x7b, 0x1}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x7, 0x1ff}, &(0x7f0000000040)=0x10) 3.860234899s ago: executing program 2 (id=2088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000018007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3.730415236s ago: executing program 0 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) 3.517994948s ago: executing program 2 (id=2090): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001b00), 0x8a201, 0x0) writev(r3, &(0x7f0000001e80)=[{&(0x7f0000001dc0)='\n', 0x1}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) r4 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x60000) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x9099) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x7, &(0x7f0000000100)={0x0, "fd6d44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300"}}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x1}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x56, 0x0, 0x63, 0x1}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @func={0x8, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x2e, 0x30, 0x30, 0x30, 0x30]}}, &(0x7f00000003c0), 0x58, 0x0, 0x0, 0x0, 0x10000, @value=r5}, 0x28) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000080)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000b3000000850000002200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd00fe05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000000)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 3.035727658s ago: executing program 4 (id=2091): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cdafda, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x409}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x400000) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x6, 0x0) write$UHID_CREATE2(r1, 0x0, 0x11d) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f00000000c0)={0x0}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000600)=@ethtool_eee={0x45, 0x3, 0x200003, 0x5, 0x400, 0x2800, 0x8, 0x9a66, [0x5, 0x7ff]}}) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x310) utimes(&(0x7f0000000000)='./file0\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) 2.092658935s ago: executing program 4 (id=2092): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0x14, {0x2, 0x0, @dev}, 'dummy0\x00'}) ioctl$sock_inet_SIOCSARP(r4, 0x8955, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x3000) syz_open_dev$vbi(0x0, 0x2, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 1.802173094s ago: executing program 0 (id=2093): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2}) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f00000004c0)={{0x8080000, 0x5000, 0x4, 0x5, 0x3, 0x7, 0x2, 0xb9, 0xb, 0x3, 0xb, 0x2}, {0x0, 0x1000, 0xa, 0x1, 0x7, 0x7, 0x2, 0x8, 0xff, 0x3, 0x0, 0xfb}, {0xf000, 0x6000, 0x9, 0x91, 0xfc, 0x8, 0x9, 0x81, 0x5, 0x6, 0x8, 0x6}, {0x1000, 0x0, 0x9, 0x9, 0x4, 0x7, 0x1, 0xc0, 0x6, 0x0, 0x21, 0xc}, {0x1000, 0x1000, 0xd, 0x40, 0x7, 0x5, 0x0, 0x9, 0xff, 0x44, 0x2, 0xde}, {0x3000, 0xdddd0000, 0x0, 0x8, 0x1, 0xf3, 0x0, 0x2, 0x0, 0x9, 0x7, 0x6}, {0xf000, 0x1000, 0x0, 0x6, 0x39, 0x6, 0xa, 0x4, 0x5, 0xff, 0x5, 0x9}, {0xeeef0000, 0x80a0000, 0x8, 0x6, 0x80, 0x6, 0xfa, 0x4, 0x5, 0x6, 0x80, 0xff}, {0xdddd0000, 0x8}, {0x2, 0x7}, 0x2, 0x0, 0xdddd0000, 0x39e22021756a0470, 0xe, 0xf000, 0xeeef0000, 0x1, [0x8000000000000000, 0x4, 0x551, 0x9]}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x2c93a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.652116997s ago: executing program 3 (id=2094): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) dup2(r2, r1) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000200)=""/170) unshare(0x2040400) fallocate(r4, 0x0, 0x0, 0x10fff9) r5 = socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="6880a642beaf34317f0dd3122a90ad0d2b", 0xfffffffffffffd76}], 0x1}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="6880a642beaf34317f0dd3122a90ad0d2b", 0xfffffffffffffd76}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) listen(r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r7}, 0x20) sendmmsg$inet6(r7, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1) (async) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.510019627s ago: executing program 3 (id=2095): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x6000000, 0x0, 0x20}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x4, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200}, {}, {0x0, 0x0, 0x0, 0x3}, {0x7}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.256606039s ago: executing program 1 (id=2096): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x95}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 1.248261138s ago: executing program 3 (id=2097): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[], 0x64}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xffffffff, 0x9, 0x0, 0x100000000, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000016000/0x2000)=nil) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r7 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf25000000000c001000cd0d0800ec0000000000000b00020000002f0e9e23e69c52c67c2e58399264928508cc4898355399ca949bba2b2589393a8803b9b224ae1dd14ef83c6291fee3a439b58129c709242723503f76c32a6d360de69f844b265aae3fc89edb524fde00c2cc7f800fcdefac123b106822ee790d33cf7fa8cb1844e7355960fe4dac0a02c4acb4e1fdaa133cdf0bc52bfbdda20d5d17413ff3802471da6c68d2e1d7cc2da6ebcb79b2095869f468b7bdad8e7241372e0f42db75fa44d20bbf183c79cac352fc65504eda31255187128bc3f28c15d5602328db1456ba1c53543d"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000924000/0x3000)=nil, 0x3000, 0x7000, 0x0, &(0x7f0000597000/0x7000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a00000040000000000000000000000000000000100000000200d73df73ae3ee62c2e71ca7ad7000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9bf1995688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfcc9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238501000000aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b8456931d2ea726ba9609d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1acffa8054e9559dfae4697aa00b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce395285b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e97", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000000), 0x4) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 1.10335859s ago: executing program 1 (id=2098): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x900, 0x8c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = dup(r3) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003e00290200000000000000080a0000005d6fbf6e02c616452c8dfe799985e7cc0c7d3f8245deabbbeb75853b82b6"], 0x14}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x2}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) 1.099591703s ago: executing program 4 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000001ff0600200000060015000400000014001680100008800c000380050001"], 0x38}}, 0x800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)={0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40, 0x1, 0x2b}, 0x18) name_to_handle_at(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x5, 0x5, 0x0, 0x6d, 0x6}}, &(0x7f0000000240), 0x200) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r3, 0x0, 0x80000}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000800)={{r3}, r5, 0x0, @inherit={0x68, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000b1586a1f040000000000000007000000000000000600000000960000010000000000000001004000000000000200000000000000030000000000000000080000000007000000000000000100000001000000060000000000000005000000000000000000"]}, @name="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"}) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 265.616313ms ago: executing program 2 (id=2100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x5) r4 = eventfd(0x3) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r4, 0x1000, 0x0, r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r4, 0x87, 0x2, r3}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000004}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0xf, 0x11, {0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x31, 0x0, 0x4, 0xf}]}}, 0x0, 0x0}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000000100)={0x40, 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 96.039662ms ago: executing program 4 (id=2101): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0x14, {0x2, 0x0, @dev}, 'dummy0\x00'}) ioctl$sock_inet_SIOCSARP(r4, 0x8955, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x3000) syz_open_dev$vbi(0x0, 0x2, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2102): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0x14, {0x2, 0x0, @dev}, 'dummy0\x00'}) ioctl$sock_inet_SIOCSARP(r4, 0x8955, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x3000) syz_open_dev$vbi(0x0, 0x2, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 00:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f5ed038ebe9 code=0x7ffc0000 [ 496.582463][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.612183][ T30] audit: type=1326 audit(1757307604.400:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed038ebe9 code=0x7ffc0000 [ 496.658775][T11540] netlink: 'syz.3.1489': attribute type 3 has an invalid length. [ 496.668231][T11540] netlink: 'syz.3.1489': attribute type 1 has an invalid length. [ 496.682609][T11540] capability: warning: `syz.3.1489' uses 32-bit capabilities (legacy support in use) [ 496.755361][ T30] audit: type=1326 audit(1757307604.400:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed038ebe9 code=0x7ffc0000 [ 496.809088][T11534] pim6reg: left allmulticast mode [ 497.016639][ T30] audit: type=1326 audit(1757307604.400:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f5ed038ebe9 code=0x7ffc0000 [ 497.123913][ T30] audit: type=1326 audit(1757307604.400:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed038ebe9 code=0x7ffc0000 [ 497.250370][ T30] audit: type=1326 audit(1757307604.400:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ed038ebe9 code=0x7ffc0000 [ 497.276538][T11546] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 497.283052][T11546] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 497.290797][T11546] vhci_hcd vhci_hcd.0: Device attached [ 497.552371][ T92] vhci_hcd: vhci_device speed not set [ 497.559732][ T30] audit: type=1326 audit(1757307604.400:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed038ebe9 code=0x7ffc0000 [ 497.622334][ T92] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 497.625689][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.669220][T11542] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 497.679810][T11542] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 497.687821][T11542] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 497.694685][T11542] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 497.701180][T11542] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 497.775084][ T30] audit: type=1326 audit(1757307604.400:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ed038ebe9 code=0x7ffc0000 [ 497.798551][ T30] audit: type=1326 audit(1757307604.400:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed038ebe9 code=0x7ffc0000 [ 497.822812][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.833501][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.845013][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/93.tmp-b7:1' failed: Read-only file system [ 497.862989][ T6864] udevd[6864]: symlink '../../loop9' '/dev/disk/by-diskseq/91.tmp-b7:9' failed: Read-only file system [ 497.890689][T11542] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 497.914563][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/93.tmp-b7:1' failed: Read-only file system [ 497.968867][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/91.tmp-b7:9' failed: Read-only file system [ 497.999141][T11547] vhci_hcd: connection reset by peer [ 498.005493][ T6531] vhci_hcd: stop threads [ 498.009757][ T6531] vhci_hcd: release socket [ 498.015778][ T6531] vhci_hcd: disconnect device [ 498.020310][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/95.tmp-b7:9' failed: Read-only file system [ 498.071001][T11559] netlink: 'syz.4.1496': attribute type 10 has an invalid length. [ 498.096300][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 498.178681][T11563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.190291][T11563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.200267][T11563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.209983][T11563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.218317][T11563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.237394][T11563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.688550][T11575] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 499.157521][T11584] program syz.2.1504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.172637][T11584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1504'. [ 499.182316][T11584] x_tables: ip_tables: udp match: only valid for protocol 17 [ 499.322731][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 499.557598][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 499.792038][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 499.798963][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 499.805058][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 499.949172][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 500.986849][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.993329][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.246673][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 501.360704][T11606] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 501.374345][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1509'. [ 501.580238][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 501.968995][ T6001] net_ratelimit: 8 callbacks suppressed [ 501.969014][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.006431][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 502.019166][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.167342][T11613] lo speed is unknown, defaulting to 1000 [ 502.330167][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 502.404318][T11621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11621 comm=syz.1.1514 [ 502.623615][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 503.009230][ T92] vhci_hcd: vhci_device speed not set [ 503.050381][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 503.062297][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.093151][T11613] lo speed is unknown, defaulting to 1000 [ 503.183077][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 503.482895][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 503.526233][T11644] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 503.532750][T11644] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 503.540404][T11644] vhci_hcd vhci_hcd.0: Device attached [ 503.830632][ T977] vhci_hcd: vhci_device speed not set [ 503.908012][ T977] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 503.944531][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 503.976306][T11652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.984962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.099000][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.248099][ T6001] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 504.326493][T11646] vhci_hcd: connection reset by peer [ 504.355212][ T3601] vhci_hcd: stop threads [ 504.364713][ T3601] vhci_hcd: release socket [ 504.380004][T11634] tipc: New replicast peer: 255.255.255.254 [ 504.415558][T11634] tipc: Enabled bearer , priority 10 [ 504.421886][ T3601] vhci_hcd: disconnect device [ 504.463055][ T6001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.498609][ T6001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.540842][ T6001] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 504.609923][ T6001] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.818685][ T6535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.832562][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.842994][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.915024][ T6001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.020404][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.055135][ T6001] usb 2-1: config 0 descriptor?? [ 505.529446][T11656] ALSA: mixer_oss: invalid index 40000 [ 505.558791][ T6001] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 505.840993][T11673] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 505.847527][T11673] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 505.856486][T11673] vhci_hcd vhci_hcd.0: Device attached [ 506.046216][ T6001] usb 2-1: USB disconnect, device number 25 [ 506.314579][T11676] vhci_hcd: connection closed [ 506.314837][ T6537] vhci_hcd: stop threads [ 506.354497][T11680] fido_id[11680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 506.468105][ T6537] vhci_hcd: release socket [ 506.476693][ T6537] vhci_hcd: disconnect device [ 507.095114][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 507.296918][ T92] net_ratelimit: 2 callbacks suppressed [ 507.296934][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.856064][T11706] binder: 11701:11706 unknown command 0 [ 507.886301][T11706] binder: 11701:11706 ioctl c0306201 200000000080 returned -22 [ 507.886583][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 507.987431][ T6001] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 508.051281][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 508.144006][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 508.186080][ T92] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 508.216550][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.270764][T11726] openvswitch: netlink: Key type 6406 is out of range max 32 [ 508.289025][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 508.297142][ T6001] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 508.324214][ T6001] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.336083][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.376686][ T6001] usb 1-1: config 0 has no interface number 0 [ 508.381906][ T92] usb 4-1: config 158 has an invalid descriptor of length 56, skipping remainder of the config [ 508.397091][ T6001] usb 1-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=65.c7 [ 508.399585][ T92] usb 4-1: config 158 has 0 interfaces, different from the descriptor's value: 1 [ 508.418595][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 508.418616][ T30] audit: type=1400 audit(1757307872.600:646): avc: denied { create } for pid=11716 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 508.450326][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.460268][ T6001] usb 1-1: Product: syz [ 508.466493][ T6001] usb 1-1: Manufacturer: syz [ 508.471523][ T92] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 508.471539][ T30] audit: type=1400 audit(1757307872.630:647): avc: denied { watch } for pid=11727 comm="syz.1.1548" path="/306/file0" dev="tmpfs" ino=1625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 508.486016][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.517569][ T6001] usb 1-1: SerialNumber: syz [ 508.524252][ T6001] usb 1-1: config 0 descriptor?? [ 508.533439][ T30] audit: type=1400 audit(1757307872.630:648): avc: denied { watch_sb } for pid=11727 comm="syz.1.1548" path="/306/file0" dev="tmpfs" ino=1625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 508.533679][ T92] usb 4-1: Product: syz [ 508.562827][ T6001] usb 1-1: bad CDC descriptors [ 508.569235][ T6001] usb 1-1: unsupported MDLM descriptors [ 508.591032][ T92] usb 4-1: Manufacturer: syz [ 508.600810][ T92] usb 4-1: SerialNumber: syz [ 508.715699][T11415] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 508.775963][T11730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.784756][T11730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.839201][ T92] usb 4-1: USB disconnect, device number 55 [ 508.865584][T11415] usb 2-1: Using ep0 maxpacket: 8 [ 508.880090][T11415] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.891138][T11415] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.994429][T11415] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.015682][T11736] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1549'. [ 509.030234][ T6001] usb 1-1: USB disconnect, device number 23 [ 509.035802][T11415] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.058127][T11415] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 509.068909][T11415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.125430][ T977] vhci_hcd: vhci_device speed not set [ 509.560553][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.571965][T11415] usb 2-1: GET_CAPABILITIES returned 0 [ 509.578205][T11415] usbtmc 2-1:16.0: can't read capabilities [ 509.668139][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 509.679473][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 509.780669][T11415] usb 2-1: USB disconnect, device number 26 [ 510.099097][ T6001] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 510.326431][ T6001] usb 3-1: Using ep0 maxpacket: 32 [ 510.335346][ T6001] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.351555][ T6001] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 510.360906][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.892058][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.902238][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.910998][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.923606][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.938021][ T6001] usb 3-1: Product: syz [ 511.023578][ T6001] usb 3-1: Manufacturer: syz [ 511.379466][ T6001] usb 3-1: SerialNumber: syz [ 511.404346][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.504848][ T6001] usb 3-1: config 0 descriptor?? [ 511.524159][T11766] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 511.530724][T11766] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 511.538544][T11766] vhci_hcd vhci_hcd.0: Device attached [ 511.561300][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 511.613192][T11772] bond0: entered promiscuous mode [ 511.644388][T11772] bond_slave_0: entered promiscuous mode [ 511.683088][T11772] bond_slave_1: entered promiscuous mode [ 511.729683][T11772] batadv0: entered promiscuous mode [ 511.732581][T11772] dummy0: entered promiscuous mode [ 511.733508][T11772] hsr1: entered promiscuous mode [ 511.733542][T11772] hsr1: entered allmulticast mode [ 511.733550][T11772] bond0: entered allmulticast mode [ 511.733557][T11772] bond_slave_0: entered allmulticast mode [ 511.733566][T11772] bond_slave_1: entered allmulticast mode [ 511.733574][T11772] batadv0: entered allmulticast mode [ 511.733586][T11772] dummy0: entered allmulticast mode [ 511.746389][ T92] vhci_hcd: vhci_device speed not set [ 511.750746][T11773] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1562'. [ 511.804168][ T92] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 512.084782][ T6001] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 512.454444][T11768] vhci_hcd: connection reset by peer [ 512.461360][ T6537] vhci_hcd: stop threads [ 512.465818][ T6537] vhci_hcd: release socket [ 512.589686][ T6537] vhci_hcd: disconnect device [ 512.772133][T11779] lo speed is unknown, defaulting to 1000 [ 512.779083][ T6001] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EREMOTEIO) [ 512.973776][T11427] net_ratelimit: 1 callbacks suppressed [ 512.973793][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.051308][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 513.080289][ T5845] udevd[5845]: symlink '../../loop9' '/dev/disk/by-diskseq/95.tmp-b7:9' failed: Read-only file system [ 513.094749][ T6001] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 513.131407][ T6001] usb 3-1: USB disconnect, device number 37 [ 513.200271][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 513.205891][T11779] lo speed is unknown, defaulting to 1000 [ 513.295371][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 513.356978][ T5845] udevd[5845]: symlink '../../loop9' '/dev/disk/by-diskseq/95.tmp-b7:9' failed: Read-only file system [ 513.419879][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 513.622464][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 513.846108][T11415] IPVS: starting estimator thread 0... [ 513.922036][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 514.188105][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.203925][T11799] IPVS: using max 45 ests per chain, 108000 per kthread [ 514.413772][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.452589][ T6543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.583236][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.627672][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.883892][T11809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 515.907408][T11809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 515.942284][T11809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 515.948477][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 515.965388][T11809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 515.977392][T11809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 516.066792][ T6864] udevd[6864]: symlink '../../loop9' '/dev/disk/by-diskseq/95.tmp-b7:9' failed: Read-only file system [ 516.326016][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1579'. [ 516.730227][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.738673][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.747296][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.757284][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.341976][ T92] vhci_hcd: vhci_device speed not set [ 517.669203][T11842] netlink: 'syz.4.1582': attribute type 10 has an invalid length. [ 517.707360][T11835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.851232][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 517.942042][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 517.993797][T11842] batman_adv: batadv0: Interface deactivated: team0 [ 518.015258][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 518.022195][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 518.028182][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 518.322236][T11837] net_ratelimit: 134 callbacks suppressed [ 518.322254][T11837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.386644][T11837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.802706][T11837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.812294][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.850390][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.897957][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 520.492872][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.889940][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.930357][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.129211][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.314751][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.095922][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 523.430436][T11897] netlink: 'syz.1.1597': attribute type 10 has an invalid length. [ 523.454789][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 523.592843][T10313] net_ratelimit: 2 callbacks suppressed [ 523.592860][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.613983][ T30] audit: type=1400 audit(1757307887.598:649): avc: denied { read } for pid=11892 comm="syz.2.1599" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 524.089738][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.256112][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 524.756865][T11912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.765115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.918492][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 525.127610][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.679159][T11925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1607'. [ 526.167028][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.296868][ T92] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 526.443389][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 526.455399][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 526.471876][ T92] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 526.503119][ T92] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.530166][ T92] usb 1-1: config 0 has no interface number 0 [ 526.543603][ T92] usb 1-1: config 0 interface 125 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 526.607429][ T92] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=74.05 [ 526.636726][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.663301][ T92] usb 1-1: Product: syz [ 526.676774][ T92] usb 1-1: Manufacturer: syz [ 526.685483][ T92] usb 1-1: SerialNumber: syz [ 526.701487][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.731703][ T92] usb 1-1: config 0 descriptor?? [ 527.013863][ T30] audit: type=1400 audit(1757307891.200:650): avc: denied { setopt } for pid=11937 comm="syz.3.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 527.206719][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.574926][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 527.933086][T11427] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 527.994429][T10313] usb 1-1: USB disconnect, device number 24 [ 528.251467][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.275613][T11427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 528.319592][T11427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.486040][T11427] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 528.501235][T11427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.518233][T11427] usb 2-1: config 0 descriptor?? [ 528.565448][T11974] @: renamed from vlan0 (while UP) [ 529.295793][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.316223][T11427] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 529.373183][T11982] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1623'. [ 529.836506][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.860456][ T6001] usb 2-1: USB disconnect, device number 27 [ 530.014410][T11983] fido_id[11983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 530.715577][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.100870][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 531.753566][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.814480][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.528497][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 532.544404][T12009] netlink: 'syz.2.1629': attribute type 10 has an invalid length. [ 532.572348][T12009] batman_adv: batadv0: Interface deactivated: team0 [ 532.726239][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 532.929866][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.965483][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.077876][T12016] netlink: 'syz.1.1632': attribute type 6 has an invalid length. [ 533.734307][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 533.972261][T12020] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 533.978813][T12020] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 533.986481][T12020] vhci_hcd vhci_hcd.0: Device attached [ 534.004587][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.183782][T11418] vhci_hcd: vhci_device speed not set [ 534.325535][T11418] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 534.417128][T12024] vhci_hcd: connection reset by peer [ 534.431271][ T6539] vhci_hcd: stop threads [ 534.441674][ T6539] vhci_hcd: release socket [ 534.448265][ T6539] vhci_hcd: disconnect device [ 535.044355][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.066307][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 536.014104][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.082302][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.147513][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 537.144134][ T6531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.158676][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.174288][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.921065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.959127][T12071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 538.001480][T12071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 538.027777][T12071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 538.041324][T12071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 538.064814][T12071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 538.251434][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.946359][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 538.968333][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 539.040657][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.049148][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.431717][T11418] vhci_hcd: vhci_device speed not set [ 539.526998][ T30] audit: type=1400 audit(1757307903.716:651): avc: denied { read } for pid=12095 comm="syz.2.1656" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 539.900794][ T30] audit: type=1400 audit(1757307903.716:652): avc: denied { open } for pid=12095 comm="syz.2.1656" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 539.900822][ T30] audit: type=1400 audit(1757307903.866:653): avc: denied { ioctl } for pid=12095 comm="syz.2.1656" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 540.065331][ T6940] udevd[6940]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 540.090684][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 540.092079][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 540.096704][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 540.103305][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 540.160033][T12108] Bluetooth: hci5: command 0x1003 tx timeout [ 540.167874][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 540.320607][T11418] net_ratelimit: 2 callbacks suppressed [ 540.320617][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.371842][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 540.756912][T12118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1664'. [ 540.798332][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 540.839621][T12122] binder: 12120:12122 unknown command 0 [ 540.848030][T12122] binder: 12120:12122 ioctl c0306201 200000000080 returned -22 [ 541.347869][ T1083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.357660][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.366248][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.381784][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.866060][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'. [ 541.946544][ T30] audit: type=1400 audit(1757307906.137:654): avc: denied { bind } for pid=12132 comm="syz.2.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 541.946599][T12144] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.979257][T12144] batman_adv: batadv0: Interface activated: team0 [ 542.018994][ T30] audit: type=1400 audit(1757307906.137:655): avc: denied { node_bind } for pid=12132 comm="syz.2.1668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 542.082469][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.381687][T12144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.405018][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.570365][ T3601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.609248][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.404162][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 543.788635][ T6001] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 543.968446][ T6001] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.979324][ T6001] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 543.998455][ T6001] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 544.007506][ T6001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.120022][ T6001] usb 2-1: config 0 descriptor?? [ 544.138091][ T6001] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 544.144800][ T6001] dvb-usb: bulk message failed: -22 (3/0) [ 544.167624][ T6001] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 544.179789][T12161] binder: 12159:12161 unknown command 0 [ 544.185375][T12161] binder: 12159:12161 ioctl c0306201 200000000080 returned -22 [ 544.199328][ T6001] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 544.206434][ T6001] usb 2-1: media controller created [ 544.226271][ T6001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.232021][T12162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1678'. [ 544.289122][ T6001] dvb-usb: bulk message failed: -22 (6/0) [ 544.295158][ T6001] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 544.344691][ T6001] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 544.353416][T12164] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 544.367988][ T6001] dvb-usb: schedule remote query interval to 150 msecs. [ 544.376230][ T6001] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 544.385429][T12164] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 544.402545][T12164] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 544.539702][T10313] dvb-usb: bulk message failed: -22 (1/0) [ 544.547166][T10313] dvb-usb: error while querying for an remote control event. [ 544.677613][ T977] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 544.728394][T10313] dvb-usb: bulk message failed: -22 (1/0) [ 544.752351][T10313] dvb-usb: error while querying for an remote control event. [ 544.968553][T10313] dvb-usb: bulk message failed: -22 (1/0) [ 545.014018][T10313] dvb-usb: error while querying for an remote control event. [ 545.287585][T10313] dvb-usb: bulk message failed: -22 (1/0) [ 545.307249][T10313] dvb-usb: error while querying for an remote control event. [ 545.539019][T10313] dvb-usb: bulk message failed: -22 (1/0) [ 545.544864][T10313] dvb-usb: error while querying for an remote control event. [ 545.758863][T11418] net_ratelimit: 6 callbacks suppressed [ 545.758879][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.898727][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 545.911064][ T10] dvb-usb: error while querying for an remote control event. [ 546.086994][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 546.101665][ T10] dvb-usb: error while querying for an remote control event. [ 546.274670][T12186] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 546.281224][T12186] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 546.289003][T12186] vhci_hcd vhci_hcd.0: Device attached [ 546.297035][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 546.302882][ T10] dvb-usb: error while querying for an remote control event. [ 546.698743][ T6944] udevd[6944]: setting mode of /dev/vcs3 to 020660 failed: Read-only file system [ 546.714309][ T6864] udevd[6864]: setting mode of /dev/vcsu3 to 020660 failed: Read-only file system [ 546.724997][ T6864] udevd[6864]: setting owner of /dev/vcsu3 to uid=0, gid=5 failed: Read-only file system [ 546.727415][ T5845] udevd[5845]: setting mode of /dev/vcsa3 to 020660 failed: Read-only file system [ 546.746702][T11418] vhci_hcd: vhci_device speed not set [ 546.749171][ T6944] udevd[6944]: setting owner of /dev/vcs3 to uid=0, gid=5 failed: Read-only file system [ 546.769273][ T10] usb 2-1: USB disconnect, device number 28 [ 546.797787][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.039038][ T6539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.050279][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.148915][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.221432][T12189] vhci_hcd: connection closed [ 547.223739][ T5845] udevd[5845]: setting owner of /dev/vcsa3 to uid=0, gid=5 failed: Read-only file system [ 547.259366][ T6537] vhci_hcd: stop threads [ 547.272579][ T6537] vhci_hcd: release socket [ 547.277196][T11418] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 547.281594][ T6940] udevd[6940]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 547.305655][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 547.357509][ T6537] vhci_hcd: disconnect device [ 547.522058][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.696363][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 547.757125][ T6539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.765828][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.775229][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.866265][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 547.878161][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 547.921981][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.944829][ T10] usb 2-1: config 0 descriptor?? [ 548.301344][ T30] audit: type=1400 audit(1757307912.460:656): avc: denied { read } for pid=12204 comm="syz.2.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 548.479587][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 548.564517][ T10] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 548.625745][ T30] audit: type=1400 audit(1757307912.811:657): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 548.626162][ T10] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 548.667884][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 548.805780][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.308241][T12235] block nbd0: Attempted send on invalid socket [ 549.765614][T12235] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.786552][T12235] isofs_fill_super: bread failed, dev=nbd0, iso_blknum=16, block=32 [ 549.971628][T12235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1697'. [ 550.122307][T12245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12245 comm=syz.4.1699 [ 550.202278][ T30] audit: type=1400 audit(1757307914.391:658): avc: denied { read write } for pid=12246 comm="syz.2.1700" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 550.322769][ T30] audit: type=1400 audit(1757307914.391:659): avc: denied { open } for pid=12246 comm="syz.2.1700" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 550.795887][T10313] net_ratelimit: 1 callbacks suppressed [ 550.795900][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.882732][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.599280][T12263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.226982][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.241136][ T30] audit: type=1400 audit(1757307916.432:660): avc: denied { map } for pid=12264 comm="syz.0.1706" path="socket:[38200]" dev="sockfs" ino=38200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 552.305178][T12263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.318967][ T1083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.328239][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.337114][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.359315][T12270] netlink: 'syz.4.1703': attribute type 10 has an invalid length. [ 552.384948][T12263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.395459][T12263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.520000][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 552.533642][T11418] vhci_hcd: vhci_device speed not set [ 552.572227][ T30] audit: type=1400 audit(1757307916.713:661): avc: denied { remount } for pid=12264 comm="syz.0.1706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 552.592319][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.879402][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 552.912770][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 553.092805][T12283] netem: incorrect ge model size [ 553.112309][T12283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.239198][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 553.368005][T10313] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 553.391061][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 553.453119][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 553.760148][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 553.784439][T10313] usb 4-1: Using ep0 maxpacket: 16 [ 553.825136][T12291] binder: 12290:12291 unknown command 0 [ 553.831277][T10313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.890562][T12291] binder: 12290:12291 ioctl c0306201 200000000080 returned -22 [ 553.899359][T10313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.925590][T10313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.075057][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 554.096804][T10313] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.132149][T10313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.174039][T10313] usb 4-1: config 0 descriptor?? [ 554.243969][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 554.539615][T12304] netlink: 'syz.2.1717': attribute type 10 has an invalid length. [ 554.660757][T10313] HID 045e:07da: Invalid code 65791 type 1 [ 554.686818][T10313] HID 045e:07da: Invalid code 768 type 1 [ 554.701672][T10313] HID 045e:07da: Invalid code 769 type 1 [ 554.715802][T10313] HID 045e:07da: Invalid code 770 type 1 [ 554.729168][T10313] HID 045e:07da: Invalid code 771 type 1 [ 554.748490][T10313] HID 045e:07da: Invalid code 772 type 1 [ 554.761565][T10313] HID 045e:07da: Invalid code 773 type 1 [ 554.777654][T10313] HID 045e:07da: Invalid code 774 type 1 [ 554.790840][T10313] HID 045e:07da: Invalid code 775 type 1 [ 554.811478][T10313] HID 045e:07da: Invalid code 776 type 1 [ 554.883786][T10313] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0015/input/input28 [ 555.332464][T10313] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 555.422808][T10313] usb 4-1: USB disconnect, device number 56 [ 555.465513][T12313] FAULT_INJECTION: forcing a failure. [ 555.465513][T12313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.519707][T12313] CPU: 0 UID: 0 PID: 12313 Comm: syz.4.1720 Not tainted syzkaller #0 PREEMPT(full) [ 555.519731][T12313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.519741][T12313] Call Trace: [ 555.519747][T12313] [ 555.519754][T12313] dump_stack_lvl+0x16c/0x1f0 [ 555.519778][T12313] should_fail_ex+0x512/0x640 [ 555.519803][T12313] _copy_from_user+0x2e/0xd0 [ 555.519828][T12313] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 555.519851][T12313] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 555.519881][T12313] alg_setsockopt+0x3bb/0xdd0 [ 555.519903][T12313] ? __pfx_alg_setsockopt+0x10/0x10 [ 555.519925][T12313] ? selinux_socket_setsockopt+0x6a/0x80 [ 555.519947][T12313] ? __pfx_alg_setsockopt+0x10/0x10 [ 555.519967][T12313] do_sock_setsockopt+0xf3/0x1d0 [ 555.519995][T12313] __sys_setsockopt+0x1a0/0x230 [ 555.520019][T12313] __x64_sys_setsockopt+0xbd/0x160 [ 555.520035][T12313] ? do_syscall_64+0x9a/0x4c0 [ 555.520056][T12313] do_syscall_64+0xcd/0x4c0 [ 555.520079][T12313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.520095][T12313] RIP: 0033:0x7f2be3d8ebe9 [ 555.520114][T12313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.520128][T12313] RSP: 002b:00007f2be4c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 555.520144][T12313] RAX: ffffffffffffffda RBX: 00007f2be3fc6090 RCX: 00007f2be3d8ebe9 [ 555.520154][T12313] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000007 [ 555.520162][T12313] RBP: 00007f2be4c4a090 R08: 0000000000000018 R09: 0000000000000000 [ 555.520171][T12313] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 555.520180][T12313] R13: 00007f2be3fc6128 R14: 00007f2be3fc6090 R15: 00007ffc74c62118 [ 555.520201][T12313] [ 555.700904][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.727303][T12312] fido_id[12312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 556.057549][T12323] input: syz1 as /devices/virtual/input/input29 [ 556.192714][T12317] lo speed is unknown, defaulting to 1000 [ 556.429915][T12328] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 556.436450][T12328] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 556.444162][T12328] vhci_hcd vhci_hcd.0: Device attached [ 556.490281][T12332] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 556.496814][T12332] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 556.504535][T12332] vhci_hcd vhci_hcd.0: Device attached [ 556.632505][ T92] vhci_hcd: vhci_device speed not set [ 556.711833][ T92] usb 39-1: new full-speed USB device number 6 using vhci_hcd [ 556.753206][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 556.821528][T11418] vhci_hcd: vhci_device speed not set [ 556.845296][ T5850] net_ratelimit: 136 callbacks suppressed [ 556.845312][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.890019][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.910728][T11418] usb 35-1: new full-speed USB device number 6 using vhci_hcd [ 557.116455][T12333] vhci_hcd: connection closed [ 557.170221][ T1083] vhci_hcd: stop threads [ 557.196849][ T1083] vhci_hcd: release socket [ 557.210699][T12330] vhci_hcd: connection reset by peer [ 557.221790][ T1083] vhci_hcd: disconnect device [ 557.240563][T12317] lo speed is unknown, defaulting to 1000 [ 557.277258][ T6531] vhci_hcd: stop threads [ 557.281618][ T6531] vhci_hcd: release socket [ 557.286125][ T6531] vhci_hcd: disconnect device [ 557.735410][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 557.913504][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.170096][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.180722][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.191716][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.190902][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.386822][T12364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'. [ 559.920222][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.990217][T12371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.174335][T12376] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 560.180861][T12376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 560.189057][T12376] vhci_hcd vhci_hcd.0: Device attached [ 560.364151][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.374910][ T30] audit: type=1800 audit(1757307924.416:662): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1735" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 560.759265][T12378] vhci_hcd: connection closed [ 560.760494][ T1083] vhci_hcd: stop threads [ 560.799210][ T1083] vhci_hcd: release socket [ 560.839884][ T1083] vhci_hcd: disconnect device [ 560.861696][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 561.099460][T12388] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 561.105999][T12388] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 561.113595][T12388] vhci_hcd vhci_hcd.0: Device attached [ 561.351626][ T5850] vhci_hcd: vhci_device speed not set [ 561.458851][ T5850] usb 37-1: new full-speed USB device number 7 using vhci_hcd [ 561.488229][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.745732][T12390] vhci_hcd: connection reset by peer [ 561.903272][ T1110] vhci_hcd: stop threads [ 561.907545][ T1110] vhci_hcd: release socket [ 561.914852][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/94.tmp-b7:1' failed: Read-only file system [ 561.997071][T12400] netlink: 'syz.3.1743': attribute type 6 has an invalid length. [ 562.336823][ T92] vhci_hcd: vhci_device speed not set [ 562.378918][ T1110] vhci_hcd: disconnect device [ 562.400804][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.407310][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.480630][T11418] vhci_hcd: vhci_device speed not set [ 562.553883][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.362675][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.617013][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.776654][T12417] option changes via remount are deprecated (pid=12405 comm=syz.0.1745) [ 563.787960][ T30] audit: type=1400 audit(1757307927.978:663): avc: denied { remount } for pid=12405 comm="syz.0.1745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 563.857620][T12423] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 563.864142][T12423] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 563.871855][T12423] vhci_hcd vhci_hcd.0: Device attached [ 564.306695][T11418] vhci_hcd: vhci_device speed not set [ 564.387892][T11418] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 564.440298][T12424] vhci_hcd: connection reset by peer [ 564.447616][ T6539] vhci_hcd: stop threads [ 564.451999][ T6539] vhci_hcd: release socket [ 564.546705][ T6539] vhci_hcd: disconnect device [ 564.628316][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.864665][ T30] audit: type=1400 audit(1757307929.069:664): avc: denied { ioctl } for pid=12432 comm="syz.2.1752" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 564.864940][T12433] fuseblk: Bad value for 'rootmode' [ 564.986856][T12437] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 564.993386][T12437] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 565.001193][T12437] vhci_hcd vhci_hcd.0: Device attached [ 565.565003][T12438] vhci_hcd: connection closed [ 565.565220][ T6539] vhci_hcd: stop threads [ 565.577172][ T6539] vhci_hcd: release socket [ 565.986938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.995460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.999676][ T6539] vhci_hcd: disconnect device [ 566.004151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.210749][ T6864] udevd[6864]: symlink '../../loop9' '/dev/disk/by-diskseq/96.tmp-b7:9' failed: Read-only file system [ 566.306155][T12456] netlink: 'syz.3.1757': attribute type 6 has an invalid length. [ 566.696953][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.753101][T12460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1759'. [ 566.756604][ T5850] vhci_hcd: vhci_device speed not set [ 566.771288][ T5852] udevd[5852]: symlink '../../loop1' '/dev/disk/by-diskseq/97.tmp-b7:1' failed: Read-only file system [ 566.958032][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/98.tmp-b7:1' failed: Read-only file system [ 566.983740][ T30] audit: type=1400 audit(1757307931.190:665): avc: denied { read } for pid=12461 comm="syz.0.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 567.024824][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/98.tmp-b7:1' failed: Read-only file system [ 567.036222][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.067919][ T30] audit: type=1400 audit(1757307931.260:666): avc: denied { setattr } for pid=12461 comm="syz.0.1760" name="RAWv6" dev="sockfs" ino=38577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 567.091433][ T6864] udevd[6864]: symlink '../../loop9' '/dev/disk/by-diskseq/96.tmp-b7:9' failed: Read-only file system [ 567.148788][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/98.tmp-b7:1' failed: Read-only file system [ 567.182800][ T6864] udevd[6864]: symlink '../../loop9' '/dev/disk/by-diskseq/96.tmp-b7:9' failed: Read-only file system [ 567.206159][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/100.tmp-b7:9' failed: Read-only file system [ 567.315952][ T30] audit: type=1400 audit(1757307931.520:667): avc: denied { mounton } for pid=12468 comm="syz.2.1763" path="/proc/1178/task" dev="proc" ino=38587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 567.559971][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.176066][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.190561][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.236198][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/101.tmp-b7:9' failed: Read-only file system [ 569.272607][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/102.tmp-b7:1' failed: Read-only file system [ 569.372968][ T30] audit: type=1400 audit(1757307933.571:668): avc: denied { getopt } for pid=12499 comm="syz.4.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 569.416015][T12502] binder: 12498:12502 unknown command 0 [ 569.422052][T12502] binder: 12498:12502 ioctl c0306201 200000000080 returned -22 [ 569.505712][T11418] vhci_hcd: vhci_device speed not set [ 569.569415][T12509] netlink: 'syz.0.1775': attribute type 2 has an invalid length. [ 569.765024][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.116053][T12523] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1781'. [ 570.225740][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.176710][T12533] SELinux: policydb magic number 0x5f676903 does not match expected magic number 0xf97cff8c [ 571.187038][T12533] SELinux: failed to load policy [ 571.213394][ T30] audit: type=1400 audit(1757307935.412:669): avc: denied { ioctl } for pid=12535 comm="syz.1.1785" path="socket:[39475]" dev="sockfs" ino=39475 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 571.505768][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.262328][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 572.544303][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.783679][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.313283][T10313] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 573.386583][T12562] netlink: 'syz.1.1789': attribute type 10 has an invalid length. [ 573.560551][T10313] usb 5-1: Using ep0 maxpacket: 32 [ 573.598382][T10313] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 573.643474][T10313] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 573.659778][T10313] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 573.668241][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.678575][T10313] usb 5-1: Product: syz [ 573.682741][T10313] usb 5-1: Manufacturer: syz [ 573.837002][T10313] usb 5-1: SerialNumber: syz [ 573.919401][T10313] usb 5-1: config 0 descriptor?? [ 573.968903][T12572] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 574.187419][T10313] usb 5-1: USB disconnect, device number 12 [ 574.352521][ T5845] udevd[5845]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 574.740411][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.061756][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 575.361660][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 575.392845][T12590] lo speed is unknown, defaulting to 1000 [ 575.407265][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 575.742324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.751757][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.876990][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.989137][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 576.050970][T12609] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 576.058580][T12609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 576.059279][T12609] vhci_hcd vhci_hcd.0: Device attached [ 576.201308][T12610] vhci_hcd: connection closed [ 576.205070][ T6531] vhci_hcd: stop threads [ 576.233826][ T6531] vhci_hcd: release socket [ 576.281912][ T6531] vhci_hcd: disconnect device [ 576.296311][T10313] vhci_hcd: vhci_device speed not set [ 576.662772][T12590] lo speed is unknown, defaulting to 1000 [ 576.828039][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.911008][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 577.556360][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.823439][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.871202][ T30] audit: type=1400 audit(1757307942.045:670): avc: denied { relabelfrom } for pid=12624 comm="syz.4.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 577.990972][ T30] audit: type=1400 audit(1757307942.065:671): avc: denied { relabelto } for pid=12624 comm="syz.4.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 578.783751][ T30] audit: type=1326 audit(1757307942.996:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12643 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7d78ebe9 code=0x7ffc0000 [ 578.860677][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.869961][ T30] audit: type=1326 audit(1757307943.016:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12643 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c7d78ebe9 code=0x7ffc0000 [ 578.947569][ T30] audit: type=1326 audit(1757307943.016:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12643 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7d78ebe9 code=0x7ffc0000 [ 578.950546][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.024313][ T30] audit: type=1326 audit(1757307943.016:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12643 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7d78ebe9 code=0x7ffc0000 [ 579.056766][ T30] audit: type=1326 audit(1757307943.016:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12643 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c7d78ebe9 code=0x7ffc0000 [ 579.133581][ T30] audit: type=1326 audit(1757307943.016:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12643 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7d78ebe9 code=0x7ffc0000 [ 579.340778][T12653] atomic_op ffff888029458198 conn xmit_atomic 0000000000000000 [ 579.349039][T12653] FAULT_INJECTION: forcing a failure. [ 579.349039][T12653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.362225][T12653] CPU: 1 UID: 0 PID: 12653 Comm: syz.4.1814 Not tainted syzkaller #0 PREEMPT(full) [ 579.362247][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.362257][T12653] Call Trace: [ 579.362263][T12653] [ 579.362270][T12653] dump_stack_lvl+0x16c/0x1f0 [ 579.362298][T12653] should_fail_ex+0x512/0x640 [ 579.362325][T12653] _copy_to_user+0x32/0xd0 [ 579.362353][T12653] simple_read_from_buffer+0xcb/0x170 [ 579.362375][T12653] proc_fail_nth_read+0x197/0x240 [ 579.362397][T12653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 579.362418][T12653] ? rw_verify_area+0xcf/0x6c0 [ 579.362445][T12653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 579.362465][T12653] vfs_read+0x1e1/0xcf0 [ 579.362485][T12653] ? __pfx___mutex_lock+0x10/0x10 [ 579.362508][T12653] ? __pfx_vfs_read+0x10/0x10 [ 579.362533][T12653] ? __fget_files+0x20e/0x3c0 [ 579.362550][T12653] ? file_seek_cur_needs_f_lock+0x60/0xc0 [ 579.362579][T12653] ksys_read+0x12a/0x250 [ 579.362596][T12653] ? __pfx_ksys_read+0x10/0x10 [ 579.362622][T12653] do_syscall_64+0xcd/0x4c0 [ 579.362646][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.362663][T12653] RIP: 0033:0x7f2be3d8d5fc [ 579.362677][T12653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 579.362700][T12653] RSP: 002b:00007f2be4c29030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 579.362717][T12653] RAX: ffffffffffffffda RBX: 00007f2be3fc6180 RCX: 00007f2be3d8d5fc [ 579.362727][T12653] RDX: 000000000000000f RSI: 00007f2be4c290a0 RDI: 0000000000000008 [ 579.362737][T12653] RBP: 00007f2be4c29090 R08: 0000000000000000 R09: 0000000000000000 [ 579.362748][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.362758][T12653] R13: 00007f2be3fc6218 R14: 00007f2be3fc6180 R15: 00007ffc74c62118 [ 579.362783][T12653] [ 579.674454][ T30] audit: type=1326 audit(1757307943.016:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12643 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9c7d78ebe9 code=0x7ffc0000 [ 579.787654][T12657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.810072][ T30] audit: type=1326 audit(1757307943.016:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12643 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7d78ebe9 code=0x7ffc0000 [ 579.844336][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 579.900301][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.934418][T12657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.211754][T12666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.779275][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 580.943028][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.104968][T12682] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 581.111509][T12682] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 581.119151][T12682] vhci_hcd vhci_hcd.0: Device attached [ 581.299632][T10313] vhci_hcd: vhci_device speed not set [ 581.363311][T10313] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 581.478812][T12686] netlink: 'syz.1.1822': attribute type 10 has an invalid length. [ 581.480361][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'. [ 581.981278][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.272589][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.279323][T12687] vhci_hcd: connection reset by peer [ 582.292844][ T6537] vhci_hcd: stop threads [ 582.301463][ T6537] vhci_hcd: release socket [ 582.370339][ T6537] vhci_hcd: disconnect device [ 582.951775][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 582.951789][ T30] audit: type=1400 audit(1757307947.158:685): avc: denied { accept } for pid=12703 comm="syz.2.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 583.349162][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.380031][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.440904][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 584.461932][T12731] openvswitch: netlink: Key type 12294 is out of range max 32 [ 584.788589][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 585.097974][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.211750][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 585.420819][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.426425][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 586.106243][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 586.456831][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.526643][T10313] vhci_hcd: vhci_device speed not set [ 586.527986][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 586.800923][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.024408][T12764] netlink: 'syz.3.1849': attribute type 1 has an invalid length. [ 587.042419][T12764] netlink: 'syz.3.1849': attribute type 2 has an invalid length. [ 587.093216][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 587.171657][T12766] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 587.226374][T12766] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 587.273951][T12766] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 587.276598][ T30] audit: type=1400 audit(1757308463.482:686): avc: denied { create } for pid=12767 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 587.307670][T12768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1851'. [ 587.374953][T12773] netlink: 'syz.1.1851': attribute type 11 has an invalid length. [ 587.469615][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 587.490621][ T30] audit: type=1400 audit(1757308463.582:687): avc: denied { write } for pid=12767 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 587.510862][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.520349][T12773] netlink: 'syz.1.1851': attribute type 4 has an invalid length. [ 587.522913][ T30] audit: type=1400 audit(1757308463.742:688): avc: denied { map } for pid=12774 comm="syz.3.1853" path="socket:[41049]" dev="sockfs" ino=41049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 587.567129][T12773] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1851'. [ 587.587928][T12775] lo speed is unknown, defaulting to 1000 [ 587.669663][T12775] lo speed is unknown, defaulting to 1000 [ 587.889530][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 588.146131][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.255965][ T30] audit: type=1400 audit(1757308464.453:689): avc: denied { ioctl } for pid=12786 comm="syz.3.1859" path="socket:[40789]" dev="sockfs" ino=40789 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 588.307377][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 588.639801][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.721747][T12798] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 588.728280][T12798] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 588.737317][T12798] vhci_hcd vhci_hcd.0: Device attached [ 588.831712][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 588.925450][ T92] vhci_hcd: vhci_device speed not set [ 589.013885][ T92] usb 37-1: new full-speed USB device number 8 using vhci_hcd [ 589.235351][ T30] audit: type=1400 audit(1757308465.443:690): avc: denied { append } for pid=12801 comm="syz.0.1863" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 589.442737][T12799] vhci_hcd: connection reset by peer [ 589.448388][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 589.476671][ T1083] vhci_hcd: stop threads [ 589.483272][ T1083] vhci_hcd: release socket [ 589.488483][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 589.511090][ T1083] vhci_hcd: disconnect device [ 589.557817][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 589.581772][T12810] netlink: 'syz.1.1865': attribute type 11 has an invalid length. [ 589.603976][T12810] netlink: 'syz.1.1865': attribute type 13 has an invalid length. [ 589.655271][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.688600][T12810] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.696680][T12810] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.709286][T12801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.762848][ T6944] udevd[6944]: symlink '../../loop7' '/dev/disk/by-diskseq/106.tmp-b7:7' failed: Read-only file system [ 589.841580][T12810] bridge0: entered allmulticast mode [ 589.874691][ T51] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 589.912605][T12816] bridge_slave_1: left allmulticast mode [ 589.973455][T12816] bridge_slave_1: left promiscuous mode [ 590.013379][T12816] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.057084][T12816] bridge_slave_0: left allmulticast mode [ 590.065277][T12816] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.572422][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 590.694710][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.046653][T12838] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 591.053181][T12838] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 591.060829][T12838] vhci_hcd vhci_hcd.0: Device attached [ 591.939499][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.947697][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.953923][ T30] audit: type=1400 audit(1757308467.984:691): avc: denied { read } for pid=12839 comm="syz.2.1874" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 592.019804][T10313] vhci_hcd: vhci_device speed not set [ 592.088618][T12845] : renamed from bridge_slave_0 (while UP) [ 592.100825][T12842] vhci_hcd: connection closed [ 592.121193][ T6543] vhci_hcd: stop threads [ 592.133815][T10313] usb 33-1: new full-speed USB device number 7 using vhci_hcd [ 592.151843][ T6543] vhci_hcd: release socket [ 592.181056][ T6543] vhci_hcd: disconnect device [ 592.486265][T12857] netlink: 'syz.3.1877': attribute type 10 has an invalid length. [ 592.504502][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1877'. [ 592.604951][T12852] siw: device registration error -23 [ 592.630088][T12852] lo speed is unknown, defaulting to 1000 [ 593.014107][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.197314][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.054279][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.112904][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 594.274360][T12852] lo speed is unknown, defaulting to 1000 [ 594.302740][ T92] vhci_hcd: vhci_device speed not set [ 594.530904][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 594.547271][T12875] bond0: entered promiscuous mode [ 594.552379][T12875] bond_slave_0: entered promiscuous mode [ 594.560031][T12875] bond_slave_1: entered promiscuous mode [ 594.577570][T12875] dummy0: entered promiscuous mode [ 594.592099][T12875] dummy0: left promiscuous mode [ 594.599636][T12875] bond0: left promiscuous mode [ 594.604604][T12875] bond_slave_0: left promiscuous mode [ 594.610344][T12875] bond_slave_1: left promiscuous mode [ 594.768582][T12886] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 595.078474][ T30] audit: type=1400 audit(1757308471.286:692): avc: denied { audit_write } for pid=12888 comm="syz.2.1888" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 595.101673][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.106909][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 595.156884][T12886] bond2: entered promiscuous mode [ 595.231559][T12886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.872657][T12886] overlayfs: failed lookup in lower (newroot/370, name='bus', err=-40): overlapping layers [ 595.910680][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/108.tmp-b7:9' failed: Read-only file system [ 595.958008][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 596.051630][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/108.tmp-b7:9' failed: Read-only file system [ 596.137559][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.226065][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.238099][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/108.tmp-b7:9' failed: Read-only file system [ 596.304463][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.374442][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.393007][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.568206][T12904] geneve2: entered promiscuous mode [ 596.575087][T12904] geneve2: entered allmulticast mode [ 596.665434][T12923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.679542][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 596.830212][T12919] netlink: 'syz.3.1893': attribute type 2 has an invalid length. [ 596.831746][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 596.861143][T12923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.888935][ T6531] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.900473][ T6531] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 597.022040][T12923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.046522][T12923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.067919][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.315946][T10313] vhci_hcd: vhci_device speed not set [ 597.333686][T12940] netlink: 'syz.1.1897': attribute type 10 has an invalid length. [ 597.347434][ T30] audit: type=1400 audit(1757308473.457:693): avc: denied { bind } for pid=12934 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 597.411435][ T6531] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.411457][ T30] audit: type=1400 audit(1757308473.457:694): avc: denied { listen } for pid=12934 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 597.440020][ T6531] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 597.467177][T12938] netlink: 'syz.2.1896': attribute type 10 has an invalid length. [ 597.477077][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'. [ 597.490794][T12918] lo speed is unknown, defaulting to 1000 [ 597.592609][ T6531] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.619819][ T6531] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 597.635199][ T6531] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.655354][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 597.740961][ T6531] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 598.273571][T12918] lo speed is unknown, defaulting to 1000 [ 598.531976][T12949] atomic_op ffff88807b3ab198 conn xmit_atomic 0000000000000000 [ 599.273847][T10313] net_ratelimit: 130 callbacks suppressed [ 599.273878][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.425412][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.033777][T12967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.102014][ T30] audit: type=1400 audit(1757308476.329:695): avc: denied { ioctl } for pid=12966 comm="syz.0.1906" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 600.173588][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 600.196877][ T30] audit: type=1400 audit(1757308476.329:696): avc: denied { map } for pid=12966 comm="syz.0.1906" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 600.248685][T12974] netem: incorrect ge model size [ 600.254506][T12974] netem: change failed [ 600.397044][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 600.452293][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.003143][T12989] netlink: 'syz.2.1914': attribute type 10 has an invalid length. [ 601.013324][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'. [ 601.506182][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.977698][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 602.192607][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 602.274880][ T30] audit: type=1400 audit(1757308478.480:697): avc: denied { setopt } for pid=13012 comm="syz.1.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 602.299880][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.529071][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.330816][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.437671][T13024] binder: 13023:13024 unknown command 0 [ 603.460904][T13024] binder: 13023:13024 ioctl c0306201 200000000080 returned -22 [ 603.507152][T13024] i2c i2c-0: Invalid block write size 33 [ 603.568474][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.862588][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 604.252252][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 605.021740][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.579398][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.611161][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.619446][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.078250][T13066] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 607.084972][T13066] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 607.092723][T13066] vhci_hcd vhci_hcd.0: Device attached [ 607.277061][T11415] vhci_hcd: vhci_device speed not set [ 607.376826][T11415] usb 37-1: new full-speed USB device number 9 using vhci_hcd [ 607.551795][T13074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.675366][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.689458][T13071] vhci_hcd: connection reset by peer [ 607.705318][ T6539] vhci_hcd: stop threads [ 607.710805][ T6539] vhci_hcd: release socket [ 607.745782][ T6539] vhci_hcd: disconnect device [ 607.996174][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 609.129727][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.543365][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 609.846471][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.908200][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 610.451934][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.461029][T13105] binder: 13104:13105 unknown command 0 [ 610.467658][T13106] team0: Device gtp1 is of different type [ 610.477082][T13105] binder: 13104:13105 ioctl c0306201 200000000080 returned -22 [ 610.846839][T13113] syzkaller0: entered promiscuous mode [ 610.936675][T13113] syzkaller0: entered allmulticast mode [ 610.937068][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 611.014458][ T30] audit: type=1400 audit(1757308487.204:698): avc: denied { mount } for pid=13112 comm="syz.0.1947" name="/" dev="rpc_pipefs" ino=43102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 611.048500][T13117] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1948'. [ 611.239010][ T30] audit: type=1400 audit(1757308487.464:699): avc: denied { write } for pid=13119 comm="syz.4.1949" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 611.319799][ T30] audit: type=1400 audit(1757308487.484:700): avc: denied { ioctl } for pid=13119 comm="syz.4.1949" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 611.363778][ T92] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 611.494800][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.544089][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 611.550974][ T92] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 611.559929][ T5850] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 611.567607][ T92] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 611.577898][ T92] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 611.589473][ T92] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 611.600687][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.618083][ T92] usb 1-1: Product: syz [ 611.626436][ T92] usb 1-1: Manufacturer: syz [ 611.636225][ T92] usb 1-1: SerialNumber: syz [ 611.734588][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 611.749646][ T5850] usb 3-1: config 11 has an invalid interface number: 28 but max is 0 [ 611.758436][ T5850] usb 3-1: config 11 has no interface number 0 [ 611.764781][ T5850] usb 3-1: config 11 interface 28 altsetting 1 bulk endpoint 0xA has invalid maxpacket 16 [ 611.791348][ T5850] usb 3-1: config 11 interface 28 has no altsetting 0 [ 611.814984][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 611.815759][ T5850] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=a8.08 [ 611.863160][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.881825][ T5850] usb 3-1: Product: syz [ 611.891793][ T5850] usb 3-1: Manufacturer: syz [ 611.983725][ T5850] usb 3-1: SerialNumber: syz [ 611.990719][T13125] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 612.059376][ T92] usb 1-1: 0:2 : does not exist [ 612.408910][T10313] usb 1-1: USB disconnect, device number 26 [ 612.468526][ T6944] udevd[6944]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.524668][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.667977][T13139] binder: 13138:13139 unknown command 0 [ 612.733833][T13139] binder: 13138:13139 ioctl c0306201 200000000080 returned -22 [ 612.784500][T11415] vhci_hcd: vhci_device speed not set [ 612.974044][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.306512][T13149] atomic_op ffff88802ae4f198 conn xmit_atomic 0000000000000000 [ 613.439427][T13158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.463770][T13158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.491856][T13158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.503314][T13158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.560923][T13158] netlink: 'syz.4.1960': attribute type 10 has an invalid length. [ 613.577595][T13158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.586015][T13158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.624835][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 613.711400][ T10] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 614.079266][ T30] audit: type=1400 audit(1757308490.306:701): avc: denied { ioctl } for pid=13162 comm="syz.0.1964" path="socket:[43275]" dev="sockfs" ino=43275 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 614.144353][ T5845] udevd[5845]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 614.179875][ T10] usb 2-1: USB disconnect, device number 29 [ 614.361463][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 614.575171][ T5850] usbserial_generic 3-1:11.28: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 614.604452][T13168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.653419][ T5850] usbserial_generic 3-1:11.28: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 614.688590][T13168] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.701500][ T5850] usbserial_generic 3-1:11.28: generic converter detected [ 614.736680][ T5850] usb 3-1: generic converter now attached to ttyUSB0 [ 614.777574][ T5850] usb 3-1: USB disconnect, device number 38 [ 614.829701][ T5850] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 614.839210][T13168] batman_adv: batadv0: Interface activated: team0 [ 614.866499][ T5850] usbserial_generic 3-1:11.28: device disconnected [ 615.189991][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 615.815878][ T5850] net_ratelimit: 154 callbacks suppressed [ 615.815892][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.042330][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.283857][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 616.841638][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.881302][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.463147][T13226] binder: 13223:13226 unknown command 0 [ 618.482364][T13226] binder: 13223:13226 ioctl c0306201 200000000080 returned -22 [ 618.564664][ T30] audit: type=1400 audit(1757308494.798:702): avc: denied { ioctl } for pid=13231 comm="syz.3.1985" path="socket:[43366]" dev="sockfs" ino=43366 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 618.647127][ T30] audit: type=1400 audit(1757308494.868:703): avc: denied { connect } for pid=13231 comm="syz.3.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 618.749201][ T30] audit: type=1400 audit(1757308494.868:704): avc: denied { map } for pid=13231 comm="syz.3.1985" path="socket:[43363]" dev="sockfs" ino=43363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 618.856458][T10313] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 619.101019][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.203325][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.214266][ T30] audit: type=1400 audit(1757308494.868:705): avc: denied { read } for pid=13231 comm="syz.3.1985" path="socket:[43363]" dev="sockfs" ino=43363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 619.241032][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 619.600090][T10313] usb 5-1: Using ep0 maxpacket: 16 [ 619.608382][T10313] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 619.617469][T10313] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 619.625644][T10313] usb 5-1: Product: syz [ 619.629780][T10313] usb 5-1: Manufacturer: syz [ 619.662560][T10313] usb 5-1: SerialNumber: syz [ 619.724242][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 619.741597][T10313] usb 5-1: config 0 descriptor?? [ 619.796227][ T30] audit: type=1400 audit(1757308495.938:706): avc: denied { mount } for pid=13244 comm="syz.2.1989" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 620.177972][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.261866][T13225] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1983'. [ 620.276830][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 620.342590][ T30] audit: type=1400 audit(1757308495.938:707): avc: denied { watch watch_reads } for pid=13244 comm="syz.2.1989" path="/388/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 620.388730][T13255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13255 comm=syz.1.1992 [ 621.546268][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.596389][ T30] audit: type=1400 audit(1757308497.069:708): avc: denied { execute } for pid=13224 comm="syz.4.1983" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 621.734399][ T5852] udevd[5852]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 622.159081][T11415] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 622.270985][ T30] audit: type=1400 audit(1757308498.420:709): avc: denied { execmem } for pid=13266 comm="syz.0.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 622.285596][T13270] binder: 13269:13270 unknown command 0 [ 622.290527][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.297885][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 622.599479][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.788062][T13270] binder: 13269:13270 ioctl c0306201 200000000080 returned -22 [ 622.866806][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 622.878651][T11415] usb 4-1: Using ep0 maxpacket: 16 [ 622.910231][T11415] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.931765][T11415] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.947067][ T6001] usb 5-1: USB disconnect, device number 13 [ 622.964660][T11415] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.118900][T11415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.148336][T11415] usb 4-1: Product: syz [ 623.152534][T11415] usb 4-1: Manufacturer: syz [ 623.373963][T11415] usb 4-1: SerialNumber: syz [ 623.619697][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.645927][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.866893][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.876013][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.897337][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.958872][T13286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.984460][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 624.027652][T13286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.056401][T13286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.068594][T13286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.078563][T13287] netlink: 'syz.4.2002': attribute type 10 has an invalid length. [ 624.404112][T11415] usb 4-1: 0:2 : does not exist [ 624.540406][T13260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.549224][T13260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.638514][T13294] netlink: 'syz.2.2004': attribute type 6 has an invalid length. [ 624.663636][T13295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.672510][T13295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.933827][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 625.245403][ T5850] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 625.397368][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 625.404071][ T5850] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 625.416363][ T5850] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 625.426840][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 625.444931][ T5850] usb 3-1: Product: syz [ 625.462588][ T5850] usb 3-1: Manufacturer: syz [ 625.480955][ T5850] usb 3-1: SerialNumber: syz [ 625.502646][ T5850] usb 3-1: config 0 descriptor?? [ 625.599417][T13299] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 625.748464][T11415] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 625.796108][T11415] usb 4-1: USB disconnect, device number 57 [ 625.872736][T10313] usb 3-1: USB disconnect, device number 39 [ 626.093172][ T6944] udevd[6944]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.760862][T11415] net_ratelimit: 132 callbacks suppressed [ 626.760876][T11415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.990888][ T30] audit: type=1400 audit(1757308503.222:710): avc: denied { create } for pid=13313 comm="syz.4.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 627.000887][T13316] binder: 13314:13316 unknown command 0 [ 627.066647][T13316] binder: 13314:13316 ioctl c0306201 200000000080 returned -22 [ 627.103302][T13318] binder: 13317:13318 unknown command 0 [ 627.117862][T13318] binder: 13317:13318 ioctl c0306201 200000000080 returned -22 [ 627.151669][ T30] audit: type=1400 audit(1757308503.232:711): avc: denied { write } for pid=13313 comm="syz.4.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 627.288755][ T30] audit: type=1400 audit(1757308503.232:712): avc: denied { nlmsg_write } for pid=13313 comm="syz.4.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 627.422507][T13329] netlink: 'syz.0.2015': attribute type 6 has an invalid length. [ 627.796694][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.352645][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 628.358317][T13345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.370692][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.439650][T13351] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 628.568349][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 628.836167][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.036583][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 629.841293][T13369] netlink: 'syz.4.2027': attribute type 6 has an invalid length. [ 629.943467][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.994560][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.041277][T10313] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 631.204589][T10313] usb 5-1: Using ep0 maxpacket: 32 [ 631.226048][T10313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.244258][T10313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.273500][T10313] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.290791][T10313] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.376829][T10313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.385161][T10313] usb 5-1: Product: syz [ 631.394610][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.404240][T10313] usb 5-1: Manufacturer: syz [ 631.418314][T10313] usb 5-1: SerialNumber: syz [ 631.444757][T10313] cdc_ncm 5-1:1.0: skipping garbage [ 631.453341][T10313] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 631.498370][T10313] cdc_ncm 5-1:1.0: bind() failure [ 631.684434][ T5850] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 632.039554][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.084001][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 632.113301][ T5850] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 632.196039][ T5850] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 632.233852][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 632.683932][ T5850] usb 4-1: Product: syz [ 632.689312][ T5850] usb 4-1: Manufacturer: syz [ 632.707417][ T5850] usb 4-1: SerialNumber: syz [ 632.721640][T13401] netlink: 'syz.2.2035': attribute type 10 has an invalid length. [ 632.794860][ T5850] usb 4-1: config 0 descriptor?? [ 632.800254][T13395] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 632.833597][T13404] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 632.840120][T13404] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 632.847795][T13404] vhci_hcd vhci_hcd.0: Device attached [ 633.538560][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.547208][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.620909][ T92] usb 4-1: USB disconnect, device number 58 [ 633.671860][ T5850] vhci_hcd: vhci_device speed not set [ 633.687378][T13405] vhci_hcd: connection closed [ 633.689572][ T1083] vhci_hcd: stop threads [ 633.740138][T10313] usb 5-1: USB disconnect, device number 14 [ 633.775171][ T1083] vhci_hcd: release socket [ 633.779737][ T1083] vhci_hcd: disconnect device [ 633.814394][ T5850] usb 33-1: new full-speed USB device number 8 using vhci_hcd [ 633.821920][ T5850] usb 33-1: enqueue for inactive port 0 [ 633.830399][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 633.903638][ T5850] vhci_hcd: vhci_device speed not set [ 634.072813][ T6001] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 634.236749][ T6001] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.246114][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.267216][ T6001] usb 2-1: Product: syz [ 634.272882][ T6001] usb 2-1: Manufacturer: syz [ 634.277995][ T6001] usb 2-1: SerialNumber: syz [ 634.432950][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.623351][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.957612][T13420] netlink: 'syz.4.2039': attribute type 6 has an invalid length. [ 634.994023][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2037'. [ 635.269281][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'. [ 635.324711][T13411] erspan0: entered promiscuous mode [ 635.344859][T13411] gretap0: entered promiscuous mode [ 635.363736][T13411] debugfs: 'hsr1' already exists in 'hsr' [ 635.385193][T13411] Cannot create hsr debugfs directory [ 635.434830][T13411] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 635.576516][T13411] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 635.633001][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.780258][ T6001] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 635.792102][ T6001] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 635.983107][ T6001] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 636.031011][ T6001] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 636.281081][ T6001] usb 2-1: USB disconnect, device number 30 [ 636.320036][ T6001] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 636.672691][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.986870][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 637.106051][ T30] audit: type=1400 audit(1757308769.344:713): avc: denied { read write } for pid=13437 comm="syz.3.2044" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 637.188829][ T30] audit: type=1400 audit(1757308769.344:714): avc: denied { open } for pid=13437 comm="syz.3.2044" path="/401/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 637.387684][ T30] audit: type=1400 audit(1757308769.614:715): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 637.472062][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.751165][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.899449][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 638.251334][T13468] loop9: detected capacity change from 0 to 7 [ 638.270149][T13468] buffer_io_error: 9 callbacks suppressed [ 638.270182][T13468] Buffer I/O error on dev loop9, logical block 0, async page read [ 638.288223][T13468] Buffer I/O error on dev loop9, logical block 0, async page read [ 638.298712][T13468] Buffer I/O error on dev loop9, logical block 0, async page read [ 638.308535][T13468] Buffer I/O error on dev loop9, logical block 0, async page read [ 638.318667][T13468] Buffer I/O error on dev loop9, logical block 0, async page read [ 638.328395][T13468] Buffer I/O error on dev loop9, logical block 0, async page read [ 638.338304][T13468] Buffer I/O error on dev loop9, logical block 0, async page read [ 638.347502][T13468] ldm_validate_partition_table(): Disk read failed. [ 638.354974][T13468] Buffer I/O error on dev loop9, logical block 0, async page read [ 638.364434][T13468] Buffer I/O error on dev loop9, logical block 0, async page read [ 638.374225][T13468] Buffer I/O error on dev loop9, logical block 0, async page read [ 638.384976][T13468] Dev loop9: unable to read RDB block 0 [ 638.393932][T13468] loop9: unable to read partition table [ 638.401522][T13468] loop9: partition table beyond EOD, truncated [ 638.407941][T13468] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 638.407941][T13468] ) failed (rc=-5) [ 638.578633][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/111.tmp-b7:9' failed: Read-only file system [ 638.765371][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/111.tmp-b7:9' failed: Read-only file system [ 638.830907][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.892174][T13466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2050'. [ 638.904395][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 638.926269][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/111.tmp-b7:9' failed: Read-only file system [ 639.293778][T13481] netlink: 'syz.3.2053': attribute type 6 has an invalid length. [ 640.509975][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.570775][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.078520][T13500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.102341][T13500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.424262][T13500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.433458][T13503] netlink: 'syz.4.2060': attribute type 10 has an invalid length. [ 641.434139][T13500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.549266][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.398451][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 642.608599][ T92] net_ratelimit: 129 callbacks suppressed [ 642.608617][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.991207][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.053021][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/104.tmp-b7:1' failed: Read-only file system [ 643.363383][T13524] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 643.371017][ T30] audit: type=1400 audit(1757308775.607:716): avc: denied { ioctl } for pid=13513 comm="syz.4.2066" path="socket:[45138]" dev="sockfs" ino=45138 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 643.396753][T13524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.428245][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.436863][ T92] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 643.631743][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.639882][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.650923][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 643.680678][ T92] usb 2-1: config 0 has no interfaces? [ 643.707650][ T92] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 643.729465][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.737773][ T92] usb 2-1: Product: syz [ 643.765188][ T92] usb 2-1: Manufacturer: syz [ 643.772063][ T92] usb 2-1: SerialNumber: syz [ 643.817843][ T92] usb 2-1: config 0 descriptor?? [ 644.063244][T13534] netlink: 'syz.0.2069': attribute type 4 has an invalid length. [ 644.107901][T13534] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2069'. [ 644.125770][T13534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.180211][ T6535] bond0: (slave batadv0): link status definitely down, disabling slave [ 644.261012][ T6944] udevd[6944]: symlink '../../loop9' '/dev/disk/by-diskseq/113.tmp-b7:9' failed: Read-only file system [ 644.344014][ T6864] udevd[6864]: symlink '../../loop1' '/dev/disk/by-diskseq/114.tmp-b7:1' failed: Read-only file system [ 644.513631][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/115.tmp-b7:1' failed: Read-only file system [ 644.597854][T13548] netlink: 'syz.2.2073': attribute type 6 has an invalid length. [ 644.694028][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.954153][ T92] usb 2-1: USB disconnect, device number 31 [ 645.023496][T13563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.651573][T13577] IPv6: NLM_F_REPLACE set, but no existing node found! [ 645.708010][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.902412][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/115.tmp-b7:1' failed: Read-only file system [ 645.908936][ T6864] udevd[6864]: symlink '../../loop9' '/dev/disk/by-diskseq/113.tmp-b7:9' failed: Read-only file system [ 645.955998][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/115.tmp-b7:1' failed: Read-only file system [ 646.101114][T13586] netlink: 'syz.3.2083': attribute type 2 has an invalid length. [ 646.175184][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/116.tmp-b7:1' failed: Read-only file system [ 646.179742][ T6864] udevd[6864]: symlink '../../loop9' '/dev/disk/by-diskseq/113.tmp-b7:9' failed: Read-only file system [ 646.235310][ T6864] udevd[6864]: symlink '../../loop9' '/dev/disk/by-diskseq/117.tmp-b7:9' failed: Read-only file system [ 646.303953][T13591] netlink: 'syz.2.2082': attribute type 10 has an invalid length. [ 646.314105][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 646.426616][ T6001] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 646.656748][ T6001] usb 2-1: Using ep0 maxpacket: 32 [ 646.667249][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.675902][ T6001] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 646.693470][ T6001] usb 2-1: config 0 has no interface number 0 [ 646.708937][ T6001] usb 2-1: config 0 interface 184 has no altsetting 0 [ 646.895585][ T6001] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 646.916386][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 646.926975][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.426372][ T6001] usb 2-1: Product: syz [ 647.430579][ T6001] usb 2-1: Manufacturer: syz [ 647.435191][ T6001] usb 2-1: SerialNumber: syz [ 647.494392][ T6001] usb 2-1: config 0 descriptor?? [ 647.508021][ T6001] smsc75xx v1.0.0 [ 647.696049][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 647.706408][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.743012][ T10] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 647.775916][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.794206][ T92] net_ratelimit: 1 callbacks suppressed [ 647.794223][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.825153][ T10] usb 4-1: config 0 descriptor?? [ 648.223517][T13623] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2088'. [ 648.248561][ T10] megaworld 0003:07B5:0312.0016: unknown main item tag 0x0 [ 648.263654][ T10] megaworld 0003:07B5:0312.0016: unknown main item tag 0x0 [ 648.272115][T13623] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.279325][T13623] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.297254][ T10] megaworld 0003:07B5:0312.0016: unknown main item tag 0x0 [ 648.304563][ T10] megaworld 0003:07B5:0312.0016: unknown main item tag 0x0 [ 648.377860][ T10] megaworld 0003:07B5:0312.0016: unknown main item tag 0x0 [ 648.393520][ T10] megaworld 0003:07B5:0312.0016: unknown main item tag 0x0 [ 648.409702][ T10] megaworld 0003:07B5:0312.0016: unknown main item tag 0x0 [ 648.426860][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 648.451821][ T10] megaworld 0003:07B5:0312.0016: unknown main item tag 0x0 [ 648.537013][T13628] lo: entered promiscuous mode [ 648.541807][T13628] lo: entered allmulticast mode [ 648.584913][ T6001] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 648.645497][ T10] megaworld 0003:07B5:0312.0016: unknown main item tag 0x0 [ 648.746451][ T10] megaworld 0003:07B5:0312.0016: unknown main item tag 0x0 [ 648.765991][ T10] megaworld 0003:07B5:0312.0016: collection stack underflow [ 648.771255][T13628] tunl0: entered promiscuous mode [ 648.773463][ T10] megaworld 0003:07B5:0312.0016: item 0 0 0 12 parsing failed [ 648.826558][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.050182][ T10] megaworld 0003:07B5:0312.0016: parse failed [ 649.061156][ T10] megaworld 0003:07B5:0312.0016: probe with driver megaworld failed with error -22 [ 649.063590][T13583] netlink: 'syz.1.2081': attribute type 1 has an invalid length. [ 649.085507][T13628] tunl0: entered allmulticast mode [ 649.094804][T13628] gre0: entered promiscuous mode [ 649.113278][T13628] gre0: entered allmulticast mode [ 649.196248][T13628] gretap0: entered promiscuous mode [ 649.201496][T13628] gretap0: entered allmulticast mode [ 649.577756][T13628] erspan0: entered promiscuous mode [ 649.596102][T13628] erspan0: entered allmulticast mode [ 649.614049][T13643] netlink: 'syz.2.2090': attribute type 6 has an invalid length. [ 649.628026][T13628] ip_vti0: entered promiscuous mode [ 649.645060][T13628] ip_vti0: entered allmulticast mode [ 649.668568][T13628] ip6_vti0: entered promiscuous mode [ 649.687040][T13628] ip6_vti0: entered allmulticast mode [ 649.693656][T13628] sit0: entered promiscuous mode [ 649.706193][T13628] sit0: entered allmulticast mode [ 649.712216][T13628] ip6tnl0: entered promiscuous mode [ 649.718197][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.728704][T13628] ip6tnl0: entered allmulticast mode [ 649.734645][T13628] ip6gre0: entered promiscuous mode [ 649.741484][T13628] ip6gre0: entered allmulticast mode [ 649.749624][T13628] ip6gretap0: entered promiscuous mode [ 649.755824][T13628] ip6gretap0: entered allmulticast mode [ 649.761958][T13628] bridge0: entered promiscuous mode [ 649.768654][T13628] bridge0: entered allmulticast mode [ 649.775964][T13628] vcan0: entered promiscuous mode [ 649.781320][T13628] vcan0: entered allmulticast mode [ 649.788075][T13628] team0: entered promiscuous mode [ 649.795286][T13628] team_slave_0: entered promiscuous mode [ 649.801276][T13628] team_slave_1: entered promiscuous mode [ 649.810479][T13628] team0: entered allmulticast mode [ 649.822326][T13628] team_slave_0: entered allmulticast mode [ 649.828482][T13628] team_slave_1: entered allmulticast mode [ 649.836198][T13628] nlmon0: entered promiscuous mode [ 649.841418][T13628] nlmon0: entered allmulticast mode [ 649.855669][T13628] caif0: entered promiscuous mode [ 649.865241][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.873696][T13628] caif0: entered allmulticast mode [ 649.892800][T13628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 650.293347][ T10] usb 4-1: USB disconnect, device number 59 [ 650.437089][T13654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.490241][T13583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.724710][ T6001] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 650.750395][T13666] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88803942bdc0 pfn:0x3942b [ 650.774427][ T6001] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 650.784106][ T6001] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 650.840238][T13666] memcg:ffff888031d08d00 [ 650.878728][ T6001] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 650.906993][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.915782][ T5845] udevd[5845]: symlink '../../loop1' '/dev/disk/by-diskseq/116.tmp-b7:1' failed: Read-only file system [ 650.921488][ T6001] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 650.934738][T13666] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 651.024204][ T6001] usb 2-1: USB disconnect, device number 32 [ 651.061118][T13675] sctp: [Deprecated]: syz.3.2097 (pid 13675) Use of int in maxseg socket option. [ 651.061118][T13675] Use struct sctp_assoc_value instead [ 651.076813][T13666] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 651.131530][T13666] raw: ffff88803942bdc0 0000000000000000 00000001ffffffff ffff888031d08d00 [ 651.233736][T13666] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 651.498615][T13666] page_owner tracks the page as allocated [ 651.505243][T13666] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 13666, tgid 13653 (syz.0.2093), ts 650746004892, free_ts 650745238219 [ 651.524056][ T30] audit: type=1400 audit(1757308783.761:717): avc: denied { read } for pid=5202 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 651.604213][T13666] post_alloc_hook+0x1c0/0x230 [ 651.632710][T13666] get_page_from_freelist+0x132b/0x38e0 [ 651.662922][T13666] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 651.810814][T13666] alloc_pages_mpol+0x1fb/0x550 [ 651.814034][ T30] audit: type=1400 audit(1757308783.761:718): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.841063][T13666] folio_alloc_noprof+0x20/0x2d0 [ 651.844278][ T30] audit: type=1400 audit(1757308783.761:719): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.867541][T13666] filemap_alloc_folio_noprof+0x3a1/0x470 [ 651.867671][T13666] page_cache_ra_order+0x4e1/0xd70 [ 651.867690][T13666] filemap_fault+0x152e/0x2930 [ 651.867711][T13666] __do_fault+0x10d/0x490 [ 651.867727][T13666] do_pte_missing+0xf50/0x3ba0 [ 651.867753][T13666] __handle_mm_fault+0x152a/0x2a50 [ 651.867776][T13666] handle_mm_fault+0x589/0xd10 [ 651.867799][T13666] __get_user_pages+0x551/0x34a0 [ 651.867821][T13666] populate_vma_page_range+0x267/0x3f0 [ 651.944169][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.955627][T13666] __mm_populate+0x1d8/0x380 [ 651.979308][ T30] audit: type=1400 audit(1757308783.761:720): avc: denied { add_name } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.013982][ T30] audit: type=1400 audit(1757308783.761:721): avc: denied { create } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 652.034795][T13666] vm_mmap_pgoff+0x37f/0x470 [ 652.039419][T13666] page last free pid 23 tgid 23 stack trace: [ 652.048377][T13666] __free_frozen_pages+0x7d5/0x10f0 [ 652.060870][T13666] rcu_core+0x799/0x1530 [ 652.092834][T13666] handle_softirqs+0x219/0x8e0 [ 652.105378][ T6944] udevd[6944]: symlink '../../loop1' '/dev/disk/by-diskseq/116.tmp-b7:1' failed: Read-only file system [ 652.122853][T13666] run_ksoftirqd+0x3a/0x60 [ 652.135260][ T30] audit: type=1400 audit(1757308783.761:722): avc: denied { append open } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 652.158743][T13666] smpboot_thread_fn+0x3f7/0xae0 [ 652.187914][T13666] kthread+0x3c2/0x780 [ 652.192066][T13666] ret_from_fork+0x5d4/0x6f0 [ 652.450714][T13666] ret_from_fork_asm+0x1a/0x30 [ 652.467155][T13666] ------------[ cut here ]------------ [ 652.472666][T13666] kernel BUG at mm/filemap.c:867! [ 652.615230][T13666] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 652.621684][T13666] CPU: 1 UID: 0 PID: 13666 Comm: syz.0.2093 Not tainted syzkaller #0 PREEMPT(full) [ 652.631047][T13666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 652.641078][T13666] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 652.647036][T13666] Code: 77 c8 ff 48 c7 c6 60 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 a5 77 c8 ff 48 c7 c6 c0 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 8e 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 80 77 c8 ff 48 [ 652.666615][T13666] RSP: 0018:ffffc9001b367460 EFLAGS: 00010246 [ 652.672662][T13666] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000c4d9000 [ 652.680614][T13666] RDX: 0000000000080000 RSI: ffffffff81f3173a RDI: ffff8880361a8444 [ 652.688581][T13666] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 652.696539][T13666] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: 0000000000000002 [ 652.704490][T13666] R13: ffffea0000e50ac0 R14: 0000000000000000 R15: 000000000002c928 [ 652.712441][T13666] FS: 00007f894ce576c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 652.721370][T13666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.727937][T13666] CR2: 000020000000d000 CR3: 0000000046eca000 CR4: 00000000003526f0 [ 652.735889][T13666] Call Trace: [ 652.739147][T13666] [ 652.742058][T13666] ? rcu_is_watching+0x12/0xc0 [ 652.746807][T13666] ? __pfx___filemap_add_folio+0x10/0x10 [ 652.752423][T13666] filemap_add_folio+0x10e/0x220 [ 652.757339][T13666] ? __pfx_filemap_add_folio+0x10/0x10 [ 652.762793][T13666] ? css_rstat_updated+0x1c2/0x510 [ 652.767889][T13666] page_cache_ra_order+0x5a7/0xd70 [ 652.772980][T13666] filemap_fault+0x152e/0x2930 [ 652.777730][T13666] ? __pfx_filemap_fault+0x10/0x10 [ 652.782828][T13666] ? __pfx_filemap_map_pages+0x10/0x10 [ 652.788265][T13666] __do_fault+0x10d/0x490 [ 652.792576][T13666] ? __pfx_filemap_map_pages+0x10/0x10 [ 652.798013][T13666] do_pte_missing+0xf50/0x3ba0 [ 652.802760][T13666] ? mtree_range_walk+0x718/0xc00 [ 652.807764][T13666] ? find_held_lock+0x2b/0x80 [ 652.812420][T13666] __handle_mm_fault+0x152a/0x2a50 [ 652.817518][T13666] ? __pfx___handle_mm_fault+0x10/0x10 [ 652.822993][T13666] handle_mm_fault+0x589/0xd10 [ 652.827762][T13666] __get_user_pages+0x551/0x34a0 [ 652.832697][T13666] ? __pfx___get_user_pages+0x10/0x10 [ 652.838067][T13666] populate_vma_page_range+0x267/0x3f0 [ 652.843516][T13666] ? __pfx_populate_vma_page_range+0x10/0x10 [ 652.849480][T13666] ? __pfx_find_vma_intersection+0x10/0x10 [ 652.855266][T13666] ? do_mmap+0x69c/0x1210 [ 652.859577][T13666] __mm_populate+0x1d8/0x380 [ 652.864151][T13666] ? __pfx___mm_populate+0x10/0x10 [ 652.869243][T13666] ? up_write+0x1b2/0x520 [ 652.873551][T13666] vm_mmap_pgoff+0x37f/0x470 [ 652.878124][T13666] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 652.883214][T13666] ? __fget_files+0x20e/0x3c0 [ 652.887872][T13666] ksys_mmap_pgoff+0x32c/0x5c0 [ 652.892616][T13666] __x64_sys_mmap+0x125/0x190 [ 652.897270][T13666] do_syscall_64+0xcd/0x4c0 [ 652.901757][T13666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.907628][T13666] RIP: 0033:0x7f894bf8ebe9 [ 652.912022][T13666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.931609][T13666] RSP: 002b:00007f894ce57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 652.939999][T13666] RAX: ffffffffffffffda RBX: 00007f894c1c6090 RCX: 00007f894bf8ebe9 [ 652.947946][T13666] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 652.955894][T13666] RBP: 00007f894c011e19 R08: 0000000000000006 R09: 000000002c93a000 [ 652.963844][T13666] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 652.971793][T13666] R13: 00007f894c1c6128 R14: 00007f894c1c6090 R15: 00007fff45ad5ae8 [ 652.979746][T13666] [ 652.982741][T13666] Modules linked in: [ 652.987492][T13666] ---[ end trace 0000000000000000 ]--- [ 652.996047][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.004463][ T30] audit: type=1400 audit(1757308783.761:723): avc: denied { getattr } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 653.153438][T13666] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 653.163299][T13666] Code: 77 c8 ff 48 c7 c6 60 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 a5 77 c8 ff 48 c7 c6 c0 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 8e 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 80 77 c8 ff 48 [ 653.183824][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.192017][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.212288][T13666] RSP: 0018:ffffc9001b367460 EFLAGS: 00010246 [ 653.241344][T13666] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000c4d9000 [ 653.271523][T13666] RDX: 0000000000080000 RSI: ffffffff81f3173a RDI: ffff8880361a8444 [ 653.292312][T13666] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 653.300610][T13666] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: 0000000000000002 [ 653.311936][T13666] R13: ffffea0000e50ac0 R14: 0000000000000000 R15: 000000000002c928 [ 653.344122][T13666] FS: 00007f894ce576c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 653.356845][T13666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.363516][T13666] CR2: 00005555742fd5c8 CR3: 0000000046eca000 CR4: 00000000003526f0 [ 653.371683][T13666] DR0: 0000000000000002 DR1: 0000000000000002 DR2: 0000000000000000 [ 653.384281][T13666] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 653.397369][T13666] Kernel panic - not syncing: Fatal exception [ 653.403677][T13666] Kernel Offset: disabled [ 653.407980][T13666] Rebooting in 86400 seconds..