last executing test programs: 2m48.502704237s ago: executing program 4 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) io_uring_setup(0x5f6f, &(0x7f0000000000)={0x0, 0x84bf, 0x40, 0x20, 0xfffffffc}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) recvfrom(r3, &(0x7f0000000100)=""/122, 0xffffffffffffff4c, 0x40010121, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2ae) syz_create_resource$binfmt(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x6, 0x7fff, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) 2m46.986701305s ago: executing program 4 (id=1383): r0 = socket(0x2, 0x80805, 0x3) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) getsockopt$bt_hci(r0, 0x84, 0x71, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0800000004000000040000000900000000000000147f316704b2e866e53b9a33acf71bc50b9e4336ad4b0acbce1e3c16c44240dc584de0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004700)=ANY=[@ANYBLOB="0900000004000000070000008000000000000000", @ANYRES32, @ANYBLOB="0021940000001100000000200000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f0000000680)={0x0, 0x0, {0x8, 0x2, 0x3, 0x62d}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0x25) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r3, &(0x7f0000000300), 0x6) recvmmsg(r3, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x10002, 0x0) bind$inet(r1, &(0x7f00000012c0)={0x2, 0x4e21, @multicast2}, 0x10) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1029000, &(0x7f00000010c0)=ANY=[]) read$FUSE(r8, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x20, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x90}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r7, &(0x7f0000000540)={0x90, 0x0, r9, {0x1, 0x2, 0x8, 0x10000, 0x8, 0x5, {0x1, 0x0, 0x0, 0x6b, 0x10001, 0x1a, 0x400, 0xf6, 0x9, 0x6000, 0x1, r10, r11, 0x100, 0x8001}}}, 0x90) 2m46.195961208s ago: executing program 4 (id=1387): creat(0x0, 0xc9028ba210c11f88) socket$netlink(0x10, 0x3, 0x15) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) connect$bt_rfcomm(r7, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) bind$bt_l2cap(r6, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}, 0x1, 0xff00}, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m45.07792992s ago: executing program 4 (id=1389): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$selinux_relabel(0xffffff9c, &(0x7f0000000b40), 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80064d12, &(0x7f0000000000)) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) init_module(&(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x4, 0xfc, 0xffffffffffffffff, 0x3, 0x6, 0x8, 0x190, 0x40, 0x11b, 0x10, 0xa, 0x38, 0x0, 0xe9, 0x8, 0xc}}, 0x40, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc081}, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2m39.739298419s ago: executing program 4 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x4) fanotify_init(0x200, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000000f40)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 2m37.866400197s ago: executing program 4 (id=1414): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000a40)=""/151, 0x97}], 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x63, 0x4200, 0x0, 0x0}], 0x1}) 2m22.284191225s ago: executing program 32 (id=1414): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000a40)=""/151, 0x97}], 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x63, 0x4200, 0x0, 0x0}], 0x1}) 12.9326523s ago: executing program 3 (id=1844): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)=@multiplanar_mmap={0x8, 0x1, 0x4, 0x400, 0x0, {}, {0x5, 0xc, 0xd, 0xff, 0xb, 0x2d, "48cfa348"}, 0x3, 0x1, {0x0}, 0xb}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d46730cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc3a", 0x63}], 0x1}}], 0x1, 0x8004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x3, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x4971, 0x4) recvmmsg(r4, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7b, 0x4, 0xfb, 0x0, 0x7, 0xa, 0x1, 0x2, 0x8a, 0x1, 0x7, 0x1, 0x0, 0xfffffffa, 0x1, 0x40, 0x80, 0xc, 0x8f, '\x00', 0x0, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.727526208s ago: executing program 3 (id=1849): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r5, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2006c08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008", 0x8a) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 8.775920117s ago: executing program 3 (id=1852): r0 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000004580)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000340)="d243e9db49a8af1faf04cb91a55e0cebfcb2ddba02e188e2a0eb02421e1895f8e95eef4f35faf07be847c02c2de43702580c5036818d3c4a1be3cef054de15f971e967e549a9865bafdcaa58d4c6230bd5860da57834e6ff309bd15f1cae4ee121e533ad6ab4f6e3b43afe2f05401b0e79c67c9307fd7414c189d82e67f461cbbe030c083c495ee34337b8643c20499c4071f4bbfd673eb2e101c4817eed791d48462b04c41c1c4bc6a9d47affe0588c39a74803bb0bf74b878b9301dca689e5855abb9199b4b45cbea1a0154229260bd1e61d3764076d805454bcedad9d", 0xde}, {&(0x7f0000000240)="51f20e46d9fd474142f478b552dc50c8d6dd5e8439e7cf11927e4c79bf4d7f08f9852a607c1a115f2510f62ae04f5e537063", 0x32}, {&(0x7f0000000580)="890f49fa408ac74cc44d88ec6951c50a79457ef5575b42385793938d800bf955a890e25097cf3f0749704aa358181587edd6aec3925f945fdd312e8d616b0068ea666f924f2eb149b86759a9bbc6b6fc81a6631395179947c29a7282aa0dd2931f8dfbe0689ca28843d06322af06db321dfa78f9f29f5fb4a1cdead0f64dd148", 0x80}, {&(0x7f0000000640)="b9aef7b5fa21a1678ea67a795337d2e74db3948456f4e3c9f7a7f3d39049f1ca0f4e2999b437df803ebab287e5dd5383f3687315042381516b8c5494b374b97dc2e307353f651ab284c5d7ed8c366c415e0a272c", 0x54}, {&(0x7f0000000480)="f4a397de43908f056b7b1fd2f6a61ebcdee4ca6676b60e", 0x17}, {&(0x7f00000006c0)="eb0d30e805dd79b27e7fe5d2f16280799d0122d1960546b7a9f608fce9e1e6917c08d85444baceb4d4c704023c66", 0x2e}, {&(0x7f0000000700)="734594a84b307cfb687e23c22c1acf1f97e38cc3de52d5621a", 0x19}], 0x7, &(0x7f0000002980)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}], 0x80, 0x40001}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r6, &(0x7f0000000080)=ANY=[], 0xfd85) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @empty}}}}) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) 8.545656644s ago: executing program 1 (id=1854): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x58) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x321140, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509985300000000", 0x57}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff5f) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ct={0x48, 0x1, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x401}, @TCA_CT_LABELS={0x14, 0x7, "5033a44a9bc53b0149979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{r4}, &(0x7f00000001c0), &(0x7f0000001200)='%pI4 \x00'}, 0x20) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000000200), 0x0, 0x2000, 0x0) 8.175372097s ago: executing program 3 (id=1856): unshare(0x68040200) mlock(&(0x7f00006b0000/0x2000)=nil, 0x2000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00006ae000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0xfdffd000) utimes(0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x5, 0xffffbff7, 0x20000004, 0x40, 0x4]}, &(0x7f0000000040)=0x54) unshare(0x68040200) (async) mlock(&(0x7f00006b0000/0x2000)=nil, 0x2000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f00006ae000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0xfdffd000) (async) utimes(0x0, 0xffffffffffffffff) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x5, 0xffffbff7, 0x20000004, 0x40, 0x4]}, &(0x7f0000000040)=0x54) (async) 8.058562835s ago: executing program 0 (id=1857): syz_emit_ethernet(0x6a, &(0x7f0000000480)=ANY=[@ANYBLOB="fd91c405aaaaaaaaaaaaaabb86dd604dd308003406fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYRES8], 0x0) r0 = io_uring_setup(0x1261, &(0x7f0000000000)={0x0, 0x5d20, 0x1, 0x0, 0x8e}) pipe(&(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x48b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x11) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), 0x8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) connect$inet(r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080), 0x1) 8.057545423s ago: executing program 1 (id=1858): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)=@multiplanar_mmap={0x8, 0x1, 0x4, 0x400, 0x0, {}, {0x5, 0xc, 0xd, 0xff, 0xb, 0x2d, "48cfa348"}, 0x3, 0x1, {0x0}, 0xb}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d46730cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc3a", 0x63}], 0x1}}], 0x1, 0x8004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x3, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x4971, 0x4) recvmmsg(r4, 0x0, 0x0, 0x1000000000fe, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.329930369s ago: executing program 0 (id=1861): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x170bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004844}, 0x20004004) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = dup(r0) write$binfmt_script(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000080)) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x7fffffff, 0x7f, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x35}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) iopl(0x3) setfsuid(0xee01) prlimit64(0x0, 0xa, 0x0, 0x0) 5.692663208s ago: executing program 0 (id=1863): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x27, 0x2, 0x0, 0x6, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x40, 0x40, 0xf9, 0x1}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a1905234", 0x25}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000000000203d", 0x15}], 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f00001b4000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006000000640000000900000018120000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x18, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000240)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x5, 0x8c00000}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x3, 0x4, 0xf, 0x2}, {0x2, 0x5}, {0x3, 0x2, 0x6, 0xc}, {0x2, 0x3, 0x6, 0x2}, {0x4, 0x3, 0x1, 0x4}], 0x10, 0x9, @void, @value}, 0x94) ioctl$KVM_RUN(r0, 0xae80, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r10, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r11 = syz_io_uring_setup(0x82f, &(0x7f0000000300)={0x0, 0x6ad3, 0x10100, 0x0, 0x329}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r11, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{&(0x7f0000000780)="ccc3c9a0c735910b3465766dfb26eface0f1d2a3a249ef3e829c252677a4385fa140659391b6cbd3f1da270b0106559ac981553a013b25c7046a1b33095608fe5dd901a68cafa5887c2f764ce0363d8858da3a084354147332aec4c88c1e616c091e1f03acb1773ca848441a0cc764bcec82a452c481621058b1721b50c21efc2094c89fc2e4", 0x86, 0x2}, {&(0x7f0000000900)="889f34044225e6a074df345b47db3a7bf8b33887a06f262a2e6bef1f3f8e1243ef671d5e5476abef6c5848681edf42a872e8062f13d37dafe08b2ba51828b7aa8d2dcddddbaff8c7b32b0d829378a8fe5d3aa4ad6d72743ce69f7dd9727230f2f16312e359ce4be756fd941d1ed28a5a261e701186f59952ce90c22c1e62e4d6871d9fb5dfa80e9966fa757faf4cf74f68ebf92f0e9335a82531b800000000000000000000d935454a76674882d8eb9b9e09e669c0ff2d7351c8d7bf31e48676d5816f00d1", 0xc5, 0x1}]}, 0x2}, 0x1) 5.641539151s ago: executing program 1 (id=1864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000203010400000000020000005c1e0000080001"], 0x1c}, 0x1, 0x300}, 0x0) 5.518765944s ago: executing program 1 (id=1865): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) dup(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0xc804) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x7, @loopback}, 0x1c) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x88, 0x6}, 0x0) setrlimit(0x0, &(0x7f0000000180)={0x52e7e4b5, 0xcf}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000700), 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0), 0x4301, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r6, 0x0) ptrace(0x10, r5) fsopen(&(0x7f0000000000)='ocfs2\x00', 0x1) ptrace$poke(0x5, r5, 0x0, 0x0) 4.693582625s ago: executing program 5 (id=1867): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r1}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200000, 0xa9be, &(0x7f00000003c0)) prlimit64(0x0, 0xe, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000000000000dd0000000000000000", @ANYBLOB="9eaf913451b2ef6d54fc22d35ccd7b18070c9d108c29684e77a3afbd92dd4df8965029134efd31f889c3b9b75d521900a676779ca857457af6452f5b99d72f12d28167d2e4579bfa279f0f30adc160e660e74794f850da14c6b61eab1e1fd82d3bfac1017af44f40e7c29638426bb8f7f46bf1dbe1e30a35778aa00969951395ae6d5bdb0393f13a4732bbc7", @ANYRES64=r1, @ANYBLOB='\x00'/28, @ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="c47415a87b775f1d15128d1800000000000000000000001f00000018110000fbe7de4a125df654e826f5397d592f6b142d44872ab982b948f05ae86f8266ab804d77", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xffffff0e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES16=r5, @ANYRES8=r7, @ANYRESHEX=0x0, @ANYRES8=r7, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@gettaction={0x22c, 0x32, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x837}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffa}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffb55d}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x485}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000020000000028000000280000000400000002000000a116123600008868eb6c0000000000000200000d000000000900000000000000000000000000000000005f00"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xcc83, 0x0) 4.525175123s ago: executing program 1 (id=1868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1a0a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0xee, {0xee, 0xc, "df3755fa147cc76692cbedb9cc82e41981be76308f33c7a0de3e7a8dad1e36622d5a750b0de6c6ca8bcda337374a5c98a6e86a395fd09ad2d4468c6ca0c66458093b9713808308432d749e2124b2be58edfa5c3b1c8597dfef1a85a845e7ad9adaf0683e1c0323330c51371ebee60fd3c9df18b1568208ba841e5fef9c0e8894cbfec2a2140d1549817cb3d4ac68494d43858c987a8706f13c63fe0094ac3be8691ad8c26c13294276c127448aad6ba32e9b43037e56d15654a1773e70078a69373db4a27b6473603b51d09d32cada1c958478ebc6e09266374c4abb55a6961081f10aa2637b27a336eca457"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}, &(0x7f0000000340)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x7, 0x4}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0xfa, 0x1, "08bfb906", "9c8a9cb0"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9c, 0x1, 0x2, 0x0, 0x5, 0x2, 0x6}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x20, 0xf, 0xb2, "ff122ec93a454374fa3c1ac6ca46f16b56615858d6f3794826fd4d8bb9006171484f29f195cc45dab3d0dee0b1ad478632ba9052657a21b95b59e52ea46572d1a680ad1fb7b11314034f27d2be531ee9143e3b4aa15a130066ec942ac1d7423933802f5444a73675709a0ed609015441f91f4208753b87792580382dc5216f86b096773d719842d5c6c4fb15c92ea64fbada24167b7203b691112cd74d3793e53711a96f056ff321c7b2a899ff9ad5eb3450"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x10, 0x8}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0xe8}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000700)={0x40, 0xb, 0x2, "d5d8"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "d122"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x30ed}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0xa, 0x4, "7d470003"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x672}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x0, 0xc, 0x5, "a87dff630f"}, 0x0, 0x0, 0x0, 0x0}) 4.524779773s ago: executing program 5 (id=1869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000"], 0x122}}, 0x4008090) 4.458834328s ago: executing program 0 (id=1870): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)=@multiplanar_mmap={0x8, 0x1, 0x4, 0x400, 0x0, {}, {0x5, 0xc, 0xd, 0xff, 0xb, 0x2d, "48cfa348"}, 0x3, 0x1, {0x0}, 0xb}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40), 0x0, 0x8004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x3, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x4971, 0x4) recvmmsg(r4, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.437543909s ago: executing program 5 (id=1871): pipe2(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = syz_io_uring_setup(0x2239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x7866, 0x4000, 0x0, 0x0, 0x0) (async) r5 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) (async) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[], 0x38) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) (async) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000000)=@v={0x93, 0x0, 0x80}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3ff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0xb, &(0x7f0000000140)=""/11, 0x41100, 0x21, '\x00', r6, @fallback, r2, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x6, 0x5, 0x7f}, 0x10, 0xffffffffffffffff, r0, 0x4, 0x0, &(0x7f00000002c0)=[{0x0, 0x4, 0x10, 0x3}, {0x1, 0x5, 0x10}, {0x0, 0x1, 0xb, 0x3}, {0x5, 0x2, 0xe, 0x2}], 0x10, 0x5fc, @void, @value}, 0x94) splice(r0, 0x0, r5, 0x0, 0x200002, 0x0) 4.210975457s ago: executing program 5 (id=1873): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x170bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004844}, 0x20004004) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = dup(r0) write$binfmt_script(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000080)) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x7fffffff, 0x7f, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x35}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) iopl(0x3) setfsuid(0xee01) prlimit64(0x0, 0xa, 0x0, 0x0) 3.383126452s ago: executing program 5 (id=1875): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f00000000c0)=0x5, 0x4) memfd_create(0x0, 0x4) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000023c0), 0x0, 0x14a042) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000804"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfc}], 0x6}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) read$char_usb(r3, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r9, &(0x7f0000000380)={0x2020}, 0x2020) 3.161102104s ago: executing program 0 (id=1876): ioperm(0x284, 0x7f, 0xe3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r1, 0xe, &(0x7f0000000180)={0x907c, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x18, &(0x7f0000000300)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x84) shutdown(r5, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000100)=0x3) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r5) 2.943501893s ago: executing program 3 (id=1878): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="ae6f646706f23a125e1813945fe37671f83e9ccc635adc033c8b618fed", 0x1d}, {&(0x7f0000000280)="a0013973aab35c7a2a90bc7e46b3dcd5d92d2907930299495c13220c3e3999c274d336eba0caa6f7f4972c2866e9d64c37626318b417557be48cb4ff1ebceb399bfa62cd222fa6fad70421d8c5b67379c9071e280c1c65370afdd2b79db57d23a4a1ecc289ca3f8179be7dd603def355d0742896dd", 0x75}, {&(0x7f0000000300)="21d0b0e66f8d2d12c744572cd26b7f807e", 0x11}, {&(0x7f0000000440)="5841436056581d74cff57ab067883f558e7b251e225ade02686f874b12fa7382c073a6b0303c1cb180ba9ed492a731cc84afcb3db17240a8210a5fb55cfa45ae239ec44674c0a12fbe3e2d8a2b13efa829d5dce6a718573955e774b6bfe0b482820288160cec7adaffa78a3e23b4de4b7a41ed63a852109f3e5a0eb8a76e2f99419518fd4b2fef5a885c85e8593b3f", 0x8f}, {&(0x7f0000000500)="432b071b8819913eb218af1c2802e1eb1120699038b4446f96150e405ca0954b6df2191ad4cd260e268f0dff5da38b84444a4dffa5575f68dca3d21836fb9338f1db1b65b3e0c77f8d6a6d53eb58bfe931014ac487877819bced54c7b68f80a446d703abed907d1ac20ffe85edbe837099a579aeacf80f964859534cf008a00c5aa470a24b14dfb2db9e5e2261b027d93a588a52b21fafd9b9fc59d36849c52ec3c07fc42bde88eb9e74c0658f67dbe6ef3f97ee78eefb275b79130d398f04adcb0ddcbd9453df7b7c4dbc549d83e5a1a4cd70a080d8ce9f297d6e9191935ea2ca9e43e1f27b791ca57bc2", 0xeb}], 0x5, &(0x7f0000000700)=[{0x78, 0x6, 0x81, "a2c42831b4559ec896b379d59e5b1b42da450fa55f1759a52106b578483b6f8242fa814ad0e609c090cdf83ea67f81f42e22d5bc840cbc6530b5e737280212631a6e8e4a3e36f9e44c86724f0abbe307338e967caf6f0dcb09456c47e261c9e97e9060299159aca5"}, {0x30, 0x10b, 0x9, "7857f07d3a67c3a2a8d295a69bb2840c7a6eaa349fdc7bcf27b6901f5e"}], 0xa8}, 0x20000000) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0) r1 = io_uring_setup(0x33a3, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020400180a0000000000000000000000020001000000000004000500000000a0030006000000000002000000ac1414aa0000000004000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd2b, 0x4000}, 0x14}}, 0x4040000) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000040), 0x54}}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.867751585s ago: executing program 2 (id=1880): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000007229c0fc5300c900008500000093b985fa1b00000095bbf5b38a152f8683b3053f5d711a90fd4dcc3b44006c233eba98772e4eda6f6bd7f7c27b0e600e8a39dc5b5996cb0034283d1236cd67e667b6ffff5a3ac6025a69bc770fd36939d316000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000040), 0x54}}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="4571b1271405c9e6230702dcd57bf7c0883af82fa6911427aaadb3650c41737a869eaab2202f722e0ffca03bdabe1d239442c17de7ed14a04c64190b702f42966f04fa270287462b0fec5284f79982391a62057a5b19c262dee6c84ad68f37439c3cb8788884b3beb1454023691e920d7ad06da56f25863598cc42e092c7da36ed6ebdeaf69fa1ac53710cb3d7ecc5063e63fefb6b09e576d5ae707cb47baadddaec21f9300d03e8866905185ee0c909129053ce5a0314125b0f0cf72066967b239a08ae05f9f92753bc58087f2fa918d4fc02d59b37dd1828ff00ec773b42c3c592b9d66e3e760a85fa489572d4831bf7640bc9ebe3c4", 0xf7}, {&(0x7f00000004c0)="69a4468690ceeddd8f2beae502aec32bb134db7618dd4fc8ae5fe3fc6ad38241e66ddac73e7a89549e0fe2186b60b36c80caf08a486182c7c4d11573d28cbb459994f50cc146f8c37848e328868160077c8e9b1775f479945a3a03d085fc582d01a23bc0222cc5b4581ec3b48550584be4413c0ef5cf793da73be0902b3516d93e9781aeb058243fbb445e3ee3bc92a1e56a0b6e35533cc0276ba98a5927a76e0580cc8a414059552c7f2fb5ac6f36ea734184df597f953286d6554b190ca83488fcf2c19cbebd9ca68354deb74d51b98026871db463b6679175d144b4919f810b3278", 0xe3}, {&(0x7f0000000900)="4dd9b423816713025892a17dc9a8a8f521b3b8b120f068a0ecb9613de7e348f4fa2e6a174e3f7b872bc220e144f8c0232af5de5dbf71d7b8aad776730f79d813eea21534bbb7539d5597f386c90cc84923d2", 0x52}], 0x3, &(0x7f00000005c0)=[{0xe0, 0x110, 0x7fffffff, "ecab637fd6fc6020bcd5f5469fe0350e97cd3d3f9207387503befae4ea3e8d323ef230ee6cdf56df59e2a6e604ac2742f2a2d64ee670a7d929b4b856d2a85c4f4d36a4d9d5fc8a05de28399e0ae43a2491f3369a73d55229b78ba5814645a3ea3dc540b1a2674a3aab1357c972d3cbbb57590fba652abb6f40cdb6a8045b0ad71e3380ab67bee3ffb0d7db2ffd0bb1f082af887c6d24efc76a53be3a32b61419569ed2449be5bda33273df2f20acac55994e04a55737e72af2efb56814f9f3fc194fc45ca25fcf8899f2178a"}, {0x60, 0x115, 0x0, "aa0e5a0809ca52e957f11a85cf168e2a4216a8db14501a949913ed6154a1d17452881473f10703ac35e31f3df24605d94b766bc99c4667e3ca4a4797883e6bf7f5912ec0bd7bafa5f894ee60d750"}, {0x108, 0x88, 0x1, "35ad99d46d5488748d5bd9520afaa35db5a7729cbbaa4be946431006cce156d395d38a8ff9696b8ed2f8445433bf995279adf8140e2eff7e9e3e0c7baf0f65b0eae970ce942e8f3292351fadc11af42408a6316f365f83148a9e6caaa039eaeac8e49e5cad0aff05cdc6171c378f9c7d5f607bca100b4332f5053a3de4cb08132ea0ccb8f43f379d3b476d0e427d3ab272ebfa77ec0d96159b2ebd3c7c8910fb7d933c1e426fd63a407158c78a9c33628a8b9f853e20a49181d8a0caddf3554a6fa1548b97a8f1fffea58123b49162f9dffb126d9a9876092c026e60fd4b9b31597b2c1838d230db254e2aa0161e0000000000000000"}, {0xa0, 0x118, 0x3e93007d, "1f94ed76692a702f65220f741dbccb4d3824bb1aea5f9f8ee4a97cae8f2d927a3d96fa564b2a6981bf3f2fec9f817eee0ecf66ccaf8fce399bd29fce61107b3654a13537f3a2fd075f994df2e328dba1bc000ee512eb17c693c6c71c67fa4908be1dcf2beeb353240173e24639151a423583078a0babef51bb4273d6a16795b26583e1965bac91e0bf26c0"}], 0x2e8}}, {{&(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x3, 0x4, 0x0, 0x3}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000040)="a2fed29095e856b192ae6a84c043", 0xe}, {&(0x7f0000000b00)="b9ce5d539082a07cfd49f545759b41ec3d22c037237cc3da9604b30907166ffeb91f0558467719c4a514aca112da834f0022115495ec849a7ba4e0640280d5682840ef24d6aa0b2657649558bac4876d87763e768c1ba98a02d8dc4dbc32948d5d59ea0ada31848a160f47e7", 0x6c}], 0x2}}], 0x2, 0x9200000000000000) 767.139256ms ago: executing program 2 (id=1881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000"], 0x122}}, 0x4008090) 667.926281ms ago: executing program 2 (id=1882): r0 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000004580)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000340)="d243e9db49a8af1faf04cb91a55e0cebfcb2ddba02e188e2a0eb02421e1895f8e95eef4f35faf07be847c02c2de43702580c5036818d3c4a1be3cef054de15f971e967e549a9865bafdcaa58d4c6230bd5860da57834e6ff309bd15f1cae4ee121e533ad6ab4f6e3b43afe2f05401b0e79c67c9307fd7414c189d82e67f461cbbe030c083c495ee34337b8643c20499c4071f4bbfd673eb2e101c4817eed791d48462b04c41c1c4bc6a9d47affe0588c39a74803bb0bf74b878b9301dca689e5855abb9199b4b45cbea1a0154229260bd1e61d3764076d805454bcedad9d", 0xde}, {&(0x7f0000000240)="51f20e46d9fd474142f478b552dc50c8d6dd5e8439e7cf11927e4c79bf4d7f08f9852a607c1a115f2510f62ae04f5e5370638b27", 0x34}, {&(0x7f0000000580)="890f49fa408ac74cc44d88ec6951c50a79457ef5575b42385793938d800bf955a890e25097cf3f0749704aa358181587edd6aec3925f945fdd312e8d616b0068ea666f924f2eb149b86759a9bbc6b6fc81a6631395179947c29a7282aa0dd2931f8dfbe0689ca28843d06322af06db321dfa78f9f29f5fb4a1cdead0f64dd148", 0x80}, {&(0x7f0000000640)="b9aef7b5fa21a1678ea67a795337d2e74db3948456f4e3c9f7a7f3d39049f1ca0f4e2999b437df803ebab287e5dd5383f3687315042381516b8c5494b374b97dc2e307353f651ab284c5d7ed8c366c415e0a272c", 0x54}, {&(0x7f0000000480)="f4a397de43908f056b7b1fd2f6a61ebcdee4ca6676b60e", 0x17}, {&(0x7f00000006c0)="eb0d30e805dd79b27e7fe5d2f16280799d0122d1960546b7a9f608fce9e1e6917c08d85444baceb4d4c704023c66", 0x2e}, {&(0x7f0000000700)="734594a84b307cfb687e23c22c1acf1f97e38cc3de52d5621a", 0x19}], 0x7, &(0x7f0000002980)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}], 0x80, 0x40001}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r6, &(0x7f0000000080)=ANY=[], 0xfd85) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @empty}}}}) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) 427.717735ms ago: executing program 1 (id=1883): syz_emit_ethernet(0x6a, &(0x7f0000000480)=ANY=[@ANYBLOB="fd91c405aaaaaaaaaaaaaabb86dd604dd308003406fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYRES8], 0x0) r0 = io_uring_setup(0x1261, &(0x7f0000000000)={0x0, 0x5d20, 0x1, 0x0, 0x8e}) pipe(&(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x48b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x11) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), 0x8) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) connect$inet(r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080), 0x1) 315.929188ms ago: executing program 2 (id=1884): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500005c0000000000119078000000000000000000001b590048907803000000000000004b3f7633015aff9fa5e73369ed3ed4f938752186483ad32914ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"], 0x0) 290.69891ms ago: executing program 5 (id=1885): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f4", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'sha224-avx2\x00'}}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r4, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, r4, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @value=0x4}}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x82000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000780)) 82.932704ms ago: executing program 2 (id=1886): mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, 0x0) 79.956007ms ago: executing program 3 (id=1887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x71}, 0x2c) pipe2(&(0x7f0000000400), 0x800) pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1108006, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) 10.550683ms ago: executing program 0 (id=1888): socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="e010000000000000000007000000"], 0x10}}], 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) clock_getres(0x8957b56da8435663, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x2) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000300)='./file1\x00', 0x8) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1a, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7, @ANYRES64=r4, @ANYRES32], 0x30}}, 0x4090) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)=',.$*$@!$:}))/\x00', &(0x7f0000000200)='\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 2 (id=1889): socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00004ad000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x81, 0x77d, &(0x7f0000000700)="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", 0x4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) kernel console output (not intermixed with test programs): 1.502549][T11392] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 531.531215][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 531.583750][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 531.628005][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.968979][ T10] usb 3-1: config 0 descriptor?? [ 532.218119][ T47] hid-led 0003:0FC5:B080.000F: item fetching failed at offset 0/3 [ 532.235456][ T47] hid-led 0003:0FC5:B080.000F: probe with driver hid-led failed with error -22 [ 532.358693][T11405] can0: slcan on ptm0. [ 532.502841][T11405] can0 (unregistered): slcan off ptm0. [ 532.527005][T11405] sp0: Synchronizing with TNC [ 532.850845][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.106313][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 533.123838][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 533.284013][ T10] usb 3-1: USB disconnect, device number 20 [ 533.363725][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.504022][ T30] audit: type=1400 audit(1747392914.403:564): avc: denied { map } for pid=11407 comm="syz.4.1352" path="socket:[39214]" dev="sockfs" ino=39214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 533.606573][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.616724][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.375594][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.615608][T11423] xt_connbytes: Forcing CT accounting to be enabled [ 534.622760][T11423] Cannot find set identified by id 0 to match [ 534.826530][T11425] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.010356][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.113314][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 536.206691][ T10] usb 4-1: USB disconnect, device number 18 [ 536.422566][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.617670][ T5904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.628718][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.656520][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 536.675899][T11448] erspan0: entered promiscuous mode [ 536.685532][T11448] macvtap1: entered promiscuous mode [ 536.699255][T11448] macvtap1: entered allmulticast mode [ 536.719756][T11448] erspan0: entered allmulticast mode [ 536.846915][T11450] macvtap1: left promiscuous mode [ 536.858524][T11454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1363'. [ 536.864321][T11450] macvtap1: left allmulticast mode [ 536.874144][T11450] erspan0: left allmulticast mode [ 536.985424][T11455] can0: slcan on ptm0. [ 537.517064][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.572761][T11455] can0 (unregistered): slcan off ptm0. [ 537.580819][T11455] sp0: Synchronizing with TNC [ 537.656713][T11464] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.753700][ T5824] Bluetooth: hci1: SCO packet too small [ 537.764066][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 537.780337][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 537.791334][ T30] audit: type=1400 audit(1747392918.693:565): avc: denied { ioctl } for pid=11468 comm="syz.1.1368" path="socket:[39400]" dev="sockfs" ino=39400 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 537.832553][ T5871] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 538.274264][ T5871] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 538.287393][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.308705][ T5871] usb 5-1: config 0 descriptor?? [ 538.483412][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.532959][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.543526][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.556189][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.578297][ T5871] kaweth 5-1:0.0: Firmware present in device. [ 538.593285][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.614507][ T5871] kaweth 5-1:0.0: Statistics collection: 0 [ 538.622651][ T5871] kaweth 5-1:0.0: Multicast filter limit: 0 [ 538.639521][ T5871] kaweth 5-1:0.0: MTU: 0 [ 538.644978][ T5871] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 538.910422][T11492] trusted_key: syz.2.1374 sent an empty control message without MSG_MORE. [ 538.918725][ T5871] kaweth 5-1:0.0: kaweth interface created at eth1 [ 539.102588][ T5888] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 539.236685][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 539.284102][ T5871] usb 5-1: USB disconnect, device number 23 [ 539.424335][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 539.436464][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 539.450505][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.462254][ T10] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 539.467382][ T5888] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 539.474987][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.483573][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.500799][ T5888] usb 2-1: Product: syz [ 539.506103][ T5888] usb 2-1: Manufacturer: syz [ 539.510785][ T5888] usb 2-1: SerialNumber: syz [ 540.051925][ T10] usb 3-1: config 0 descriptor?? [ 540.057890][T11495] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 540.067049][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.087730][ T5888] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 540.098402][ T30] audit: type=1400 audit(1747392920.999:566): avc: denied { firmware_load } for pid=5864 comm="kworker/1:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 540.116891][ T5864] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 540.170075][T11504] slcan: can't register candev [ 540.175892][T11504] Falling back ldisc for ptm0. [ 540.561507][ T10] topre 0003:0853:0148.0010: hidraw0: USB HID v0.05 Device [HID 0853:0148] on usb-dummy_hcd.2-1/input0 [ 540.563995][T11489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.017638][T11489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.118152][ T10] usb 3-1: USB disconnect, device number 21 [ 541.150088][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.161892][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.217616][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.294175][ T5864] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 541.321090][ T5864] ath9k_htc: Failed to initialize the device [ 541.941502][T11522] fido_id[11522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 541.998373][ T5864] usb 2-1: ath9k_htc: USB layer deinitialized [ 542.166862][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.233576][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1385'. [ 542.323507][T11546] Invalid logical block size (254) [ 542.601536][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.222634][ T5904] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 543.335850][ T30] audit: type=1400 audit(1747392924.219:567): avc: denied { connect } for pid=11552 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 543.719376][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.727947][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.873748][T11564] can0: slcan on ptm0. [ 544.216030][ T3449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.226153][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.235587][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.243731][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.254349][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.276695][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 544.349640][ T47] usb 2-1: USB disconnect, device number 24 [ 544.355689][T11564] can0 (unregistered): slcan off ptm0. [ 544.363932][T11564] sp0: Synchronizing with TNC [ 544.412572][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 544.420204][ T5904] usb 3-1: can't read configurations, error -71 [ 545.442539][T11563] Bluetooth: hci4: command 0x0406 tx timeout [ 545.457210][T11582] netlink: 'syz.0.1393': attribute type 29 has an invalid length. [ 545.551744][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 545.804158][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 545.948662][T11589] No source specified [ 546.176076][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.997316][ T3072] net_ratelimit: 3 callbacks suppressed [ 546.997335][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.121953][ T30] audit: type=1400 audit(1747392928.019:568): avc: denied { read } for pid=11616 comm="syz.0.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 547.278905][T11619] ieee802154 phy0 wpan0: encryption failed: -22 [ 547.296317][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.012877][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.624305][T11637] can0: slcan on ptm0. [ 549.114064][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.243635][T11637] can0 (unregistered): slcan off ptm0. [ 549.253482][T11637] sp0: Synchronizing with TNC [ 549.464054][T11646] syz.4.1406: attempt to access beyond end of device [ 549.464054][T11646] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 549.478580][T11646] syz.4.1406: attempt to access beyond end of device [ 549.478580][T11646] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 549.491610][T11646] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 549.501829][T11646] syz.4.1406: attempt to access beyond end of device [ 549.501829][T11646] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 549.514879][T11646] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 549.524742][T11646] syz.4.1406: attempt to access beyond end of device [ 549.524742][T11646] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 549.537769][T11646] syz.4.1406: attempt to access beyond end of device [ 549.537769][T11646] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 549.550835][T11646] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 549.560420][T11646] syz.4.1406: attempt to access beyond end of device [ 549.560420][T11646] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 549.573496][T11646] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 549.583445][T11646] syz.4.1406: attempt to access beyond end of device [ 549.583445][T11646] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 549.596818][T11646] syz.4.1406: attempt to access beyond end of device [ 549.596818][T11646] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 549.612102][T11646] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 549.622758][T11646] syz.4.1406: attempt to access beyond end of device [ 549.622758][T11646] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 549.636117][T11646] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 549.645613][T11646] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 549.722353][T11647] syz.4.1406: attempt to access beyond end of device [ 549.722353][T11647] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 549.854371][T11647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 549.933058][T11647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 550.015251][ T3449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.045422][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.103518][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'. [ 550.113318][T11658] netlink: 'syz.1.1408': attribute type 5 has an invalid length. [ 550.121110][T11658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1408'. [ 550.166354][T11658] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 550.175505][T11658] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 550.184259][T11658] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 550.193186][T11658] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 550.202319][T11658] geneve2: entered promiscuous mode [ 550.207652][T11658] geneve2: entered allmulticast mode [ 550.487782][T11647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 550.562593][T11647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 550.563933][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.580707][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.593470][T11647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 550.607284][T11647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 550.638448][T11647] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 551.521280][ T30] audit: type=1400 audit(1747392932.419:569): avc: denied { ioctl } for pid=11671 comm="syz.2.1413" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 551.546236][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.612765][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 551.616931][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.767615][ T5904] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 551.822847][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 551.840374][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 551.853655][ T5867] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 551.861919][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 551.983000][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 552.055279][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 552.075217][ T5904] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 552.103568][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 552.116275][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.128012][ T5904] usb 5-1: Product: syz [ 552.132276][ T5904] usb 5-1: Manufacturer: syz [ 552.137529][ T5904] usb 5-1: SerialNumber: syz [ 552.142576][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 552.149422][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 552.160810][ T5867] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 552.180200][ T5904] usb 5-1: config 0 descriptor?? [ 552.187582][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 552.199214][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 552.211923][ T10] usb 4-1: Product: syz [ 552.227698][ T5904] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 552.240984][ T5867] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 552.256459][ T10] usb 4-1: Manufacturer: syz [ 552.263236][ T5904] usb 5-1: setting power ON [ 552.318516][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 552.325896][ T5904] dvb-usb: bulk message failed: -22 (2/0) [ 552.335777][ T5867] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 552.343601][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 552.350422][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 552.391431][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 552.428236][ T5867] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 552.441487][ T30] audit: type=1400 audit(1747392933.329:570): avc: denied { mounton } for pid=11675 comm="syz.4.1414" path=2F3236302FE91F7189591E9233614B dev="tmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 552.466406][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.992840][ T5904] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 553.006189][T11687] can0: slcan on ptm0. [ 553.012014][T11688] dvb-usb: bulk message failed: -22 (3/0) [ 553.014690][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 553.027501][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.038741][ T5904] usb 5-1: media controller created [ 553.048524][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 553.055933][ T5867] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 553.080570][ T5867] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 553.103042][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 553.113979][ T5867] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 553.128102][T11687] can0 (unregistered): slcan off ptm0. [ 553.138373][ T5867] usb 3-1: string descriptor 0 read error: -22 [ 553.145174][ T5867] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 553.159693][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.171389][T11687] sp0: Synchronizing with TNC [ 553.226573][ T5867] adutux 3-1:168.0: interrupt endpoints not found [ 553.234090][ T5904] usb 5-1: selecting invalid altsetting 6 [ 553.241950][ T5904] usb 5-1: digital interface selection failed (-22) [ 553.264047][ T5904] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 553.293106][ T5904] usb 5-1: setting power OFF [ 553.298128][ T5904] dvb-usb: bulk message failed: -22 (2/0) [ 553.307668][ T5904] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 553.317657][ T5904] (NULL device *): no alternate interface [ 553.439317][ T5867] usb 3-1: USB disconnect, device number 24 [ 553.604209][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.843611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.970726][T11716] FAULT_INJECTION: forcing a failure. [ 553.970726][T11716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.983897][T11716] CPU: 1 UID: 0 PID: 11716 Comm: syz.1.1420 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 553.983921][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 553.983932][T11716] Call Trace: [ 553.983940][T11716] [ 553.983948][T11716] dump_stack_lvl+0x16c/0x1f0 [ 553.983990][T11716] should_fail_ex+0x512/0x640 [ 553.984025][T11716] _copy_to_user+0x32/0xd0 [ 553.984057][T11716] simple_read_from_buffer+0xcb/0x170 [ 553.984090][T11716] proc_fail_nth_read+0x197/0x270 [ 553.984121][T11716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.984150][T11716] ? rw_verify_area+0xcf/0x680 [ 553.984176][T11716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.984203][T11716] vfs_read+0x1e1/0xc70 [ 553.984233][T11716] ? __pfx___mutex_lock+0x10/0x10 [ 553.984263][T11716] ? __pfx_vfs_read+0x10/0x10 [ 553.984296][T11716] ? __fget_files+0x20e/0x3c0 [ 553.984322][T11716] ksys_read+0x12a/0x240 [ 553.984348][T11716] ? __pfx_ksys_read+0x10/0x10 [ 553.984382][T11716] do_syscall_64+0xcd/0x260 [ 553.984412][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.984433][T11716] RIP: 0033:0x7fdfd278d37c [ 553.984448][T11716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 553.984464][T11716] RSP: 002b:00007fdfd3592030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 553.984482][T11716] RAX: ffffffffffffffda RBX: 00007fdfd29b6160 RCX: 00007fdfd278d37c [ 553.984494][T11716] RDX: 000000000000000f RSI: 00007fdfd35920a0 RDI: 0000000000000005 [ 553.984505][T11716] RBP: 00007fdfd3592090 R08: 0000000000000000 R09: 0000000000000000 [ 553.984515][T11716] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 553.984526][T11716] R13: 0000000000000000 R14: 00007fdfd29b6160 R15: 00007ffc32831558 [ 553.984570][T11716] [ 554.132699][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.179008][T11714] tty tty1: ldisc open failed (-12), clearing slot 0 [ 554.239944][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.584607][ T5864] usb 4-1: USB disconnect, device number 19 [ 554.824912][T11729] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.120623][T11686] Process accounting resumed [ 555.315338][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.762729][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.773694][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.784987][ T7961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.803106][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.864607][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.203946][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'. [ 556.333085][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.224490][T11751] can0: slcan on ptm0. [ 557.525006][T11751] can0 (unregistered): slcan off ptm0. [ 557.535865][T11751] sp0: Synchronizing with TNC [ 557.646744][T11757] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 557.842714][ T5867] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 558.011521][ T5867] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 558.066913][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 558.124166][ T5867] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 558.178078][T11764] netlink: 'syz.2.1433': attribute type 29 has an invalid length. [ 558.190785][ T5867] usb 4-1: New USB device strings: Mfr=23, Product=2, SerialNumber=3 [ 558.216361][ T5867] usb 4-1: Product: syz [ 558.220723][ T5867] usb 4-1: Manufacturer: syz [ 558.254460][ T5867] usb 4-1: SerialNumber: syz [ 558.276859][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 558.282026][ T5867] usb 4-1: config 0 descriptor?? [ 558.375186][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 558.464183][ T5867] usb 4-1: selecting invalid altsetting 0 [ 558.473110][ T5864] net_ratelimit: 1 callbacks suppressed [ 558.473128][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.028582][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.050981][ T5865] usb 4-1: USB disconnect, device number 20 [ 559.573361][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.651999][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.085395][ T30] audit: type=1400 audit(1747392941.989:571): avc: denied { nlmsg_read } for pid=11788 comm="syz.2.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 561.348430][T11796] can0: slcan on ptm0. [ 561.526047][ T7961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.592117][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.612653][T11796] can0 (unregistered): slcan off ptm0. [ 561.645691][T11796] sp0: Synchronizing with TNC [ 561.723069][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.731564][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.015306][T11805] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1443'. [ 562.371531][T11814] syz.2.1444 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 562.435850][ T5888] hid-generic 0009:0003:B368.0011: reserved main item tag 0xe [ 562.487284][ T5888] hid-generic 0009:0003:B368.0011: item fetching failed at offset 12/13 [ 562.566849][ T5888] hid-generic 0009:0003:B368.0011: probe with driver hid-generic failed with error -22 [ 562.807794][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.443583][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.463887][T11844] fuse: Bad value for 'group_id' [ 563.471272][T11844] fuse: Bad value for 'group_id' [ 563.762953][ T5888] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 563.873149][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.964810][ T5888] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 563.980590][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.017836][ T5888] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 564.050345][ T5888] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 564.075292][ T5888] usb 2-1: Manufacturer: syz [ 564.089981][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.090248][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.113010][ T5888] usb 2-1: config 0 descriptor?? [ 564.133838][ T5888] igorplugusb 2-1:0.0: incorrect number of endpoints [ 564.334466][T11843] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1452'. [ 564.468908][T11857] can0: slcan on ptm0. [ 564.989467][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.000959][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.028684][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 565.070484][T11843] Invalid ELF header magic: != ELF [ 565.078290][ T30] audit: type=1400 audit(1747392945.969:572): avc: denied { module_load } for pid=11841 comm="syz.1.1452" path="/299/bus" dev="tmpfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 565.114625][ T3072] usb 2-1: USB disconnect, device number 25 [ 565.120630][T11857] can0 (unregistered): slcan off ptm0. [ 565.130828][T11857] sp0: Synchronizing with TNC [ 565.373017][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.005968][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.347058][ T30] audit: type=1400 audit(1747392947.239:573): avc: denied { mount } for pid=11869 comm="syz.2.1456" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 566.735202][ T7961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.751879][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.760847][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.835401][ T30] audit: type=1400 audit(1747392947.739:574): avc: denied { ioctl } for pid=11885 comm="syz.1.1460" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xaea4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 567.102091][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.304475][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 567.315545][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 567.386465][T11903] FAULT_INJECTION: forcing a failure. [ 567.386465][T11903] name failslab, interval 1, probability 0, space 0, times 0 [ 567.399577][T11903] CPU: 0 UID: 0 PID: 11903 Comm: syz.3.1463 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 567.399605][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.399616][T11903] Call Trace: [ 567.399623][T11903] [ 567.399631][T11903] dump_stack_lvl+0x16c/0x1f0 [ 567.399690][T11903] should_fail_ex+0x512/0x640 [ 567.399719][T11903] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 567.399753][T11903] should_failslab+0xc2/0x120 [ 567.399775][T11903] __kmalloc_cache_noprof+0x6a/0x3e0 [ 567.399801][T11903] ? lockdep_hardirqs_on+0x7c/0x110 [ 567.399826][T11903] ? shrinker_alloc+0xf5/0xbf0 [ 567.399854][T11903] shrinker_alloc+0xf5/0xbf0 [ 567.399879][T11903] ? pcpu_memcg_post_alloc_hook+0x1e/0x740 [ 567.399904][T11903] ? __pfx_shrinker_alloc+0x10/0x10 [ 567.399929][T11903] ? lockdep_init_map_type+0x5c/0x280 [ 567.399951][T11903] ? __raw_spin_lock_init+0x3a/0x110 [ 567.399969][T11903] ? __init_rwsem+0x12d/0x1b0 [ 567.399992][T11903] alloc_super+0x7c8/0xbd0 [ 567.400025][T11903] ? __pfx_super_s_dev_test+0x10/0x10 [ 567.400047][T11903] sget_fc+0x116/0xc20 [ 567.400074][T11903] ? __pfx_super_s_dev_set+0x10/0x10 [ 567.400099][T11903] get_tree_bdev_flags+0x1ba/0x620 [ 567.400124][T11903] ? __pfx_jfs_fill_super+0x10/0x10 [ 567.400156][T11903] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 567.400188][T11903] ? bpf_lsm_capable+0x9/0x10 [ 567.400206][T11903] ? security_capable+0x7e/0x260 [ 567.400234][T11903] vfs_get_tree+0x8e/0x340 [ 567.400258][T11903] path_mount+0x14d4/0x1f20 [ 567.400281][T11903] ? kmem_cache_free+0x2d4/0x4d0 [ 567.400307][T11903] ? __pfx_path_mount+0x10/0x10 [ 567.400330][T11903] ? putname+0x154/0x1a0 [ 567.400354][T11903] __x64_sys_mount+0x28d/0x310 [ 567.400375][T11903] ? __pfx___x64_sys_mount+0x10/0x10 [ 567.400403][T11903] do_syscall_64+0xcd/0x260 [ 567.400431][T11903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.400450][T11903] RIP: 0033:0x7f39b018e969 [ 567.400467][T11903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.400483][T11903] RSP: 002b:00007f39adff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 567.400501][T11903] RAX: ffffffffffffffda RBX: 00007f39b03b6160 RCX: 00007f39b018e969 [ 567.400512][T11903] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000200000000300 [ 567.400524][T11903] RBP: 00007f39adff6090 R08: 0000200000000400 R09: 0000000000000000 [ 567.400535][T11903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 567.400545][T11903] R13: 0000000000000000 R14: 00007f39b03b6160 R15: 00007fff54687888 [ 567.400570][T11903] [ 567.674789][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 567.686004][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 567.693517][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 568.163244][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.010964][T11919] can0: slcan on ptm1. [ 569.113307][T11921] can0 (unregistered): slcan off ptm1. [ 569.127752][T11921] sp0: Synchronizing with TNC [ 569.271332][ T30] audit: type=1400 audit(1747392950.139:575): avc: denied { create } for pid=11927 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 569.292145][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.320843][ T30] audit: type=1400 audit(1747392950.139:576): avc: denied { setopt } for pid=11927 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 569.342851][ T5864] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 569.463035][ T30] audit: type=1400 audit(1747392950.359:577): avc: denied { bind } for pid=11927 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 569.522817][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 569.547230][ T5864] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 569.569662][ T5864] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 569.602336][ T5864] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 569.613281][ T5864] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 569.624692][ T5864] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 569.635073][ T5864] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.648159][ T5864] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 569.658142][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.660525][T11945] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.769414][ T5824] Bluetooth: hci5: command tx timeout [ 569.817983][T11895] chnl_net:caif_netlink_parms(): no params data found [ 569.842790][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.899833][ T5864] usb 4-1: GET_CAPABILITIES returned 0 [ 569.909153][ T30] audit: type=1400 audit(1747392950.819:578): avc: denied { map } for pid=11948 comm="syz.0.1475" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 569.957254][ T5864] usbtmc 4-1:16.0: can't read capabilities [ 569.964817][T11895] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.972005][T11895] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.983066][T11895] bridge_slave_0: entered allmulticast mode [ 569.994258][T11895] bridge_slave_0: entered promiscuous mode [ 570.192046][T11895] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.199611][T11895] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.280517][T11895] bridge_slave_1: entered allmulticast mode [ 570.349853][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.353820][T11895] bridge_slave_1: entered promiscuous mode [ 570.830143][ T5865] usb 4-1: USB disconnect, device number 21 [ 570.848518][ T30] audit: type=1400 audit(1747392950.819:579): avc: denied { execute } for pid=11948 comm="syz.0.1475" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 570.998567][T11895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.068296][T11895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.252046][T11895] team0: Port device team_slave_0 added [ 571.279474][T11895] team0: Port device team_slave_1 added [ 571.308333][T11980] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.363064][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.572257][T11895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.579709][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.605805][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.873329][ T5824] Bluetooth: hci5: command tx timeout [ 572.266210][T11895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.267580][T11990] slcan: can't register candev [ 572.278907][T11895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.282960][T11990] Falling back ldisc for ptm0. [ 572.288602][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.408239][T11895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.457594][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.510019][ T3449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.537619][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.635909][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.795867][T12000] netlink: 'syz.3.1483': attribute type 63 has an invalid length. [ 572.880278][T12004] team0: Device gtp1 is of different type [ 572.984062][T11895] hsr_slave_0: entered promiscuous mode [ 573.005820][T11895] hsr_slave_1: entered promiscuous mode [ 573.020509][T11895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.067717][T11895] Cannot create hsr debugfs directory [ 573.250879][T12008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.258219][T12008] IPv6: NLM_F_CREATE should be set when creating new route [ 573.265549][T12008] IPv6: NLM_F_CREATE should be set when creating new route [ 573.772628][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.794011][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.922740][ T5824] Bluetooth: hci5: command tx timeout [ 574.352887][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.784709][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 575.068136][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.084849][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.943235][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.964840][T12049] can0: slcan on ptm0. [ 576.002563][ T5824] Bluetooth: hci5: command tx timeout [ 576.054836][T12052] can0 (unregistered): slcan off ptm0. [ 576.060665][T11895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 576.067882][T12052] slcan: can't register candev [ 576.072751][T12052] Falling back ldisc for ptm0. [ 576.129663][T11895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 576.163868][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.183162][T11895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 576.207706][T11895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 576.259121][ T30] audit: type=1400 audit(1747392957.159:580): avc: denied { recv } for pid=12056 comm="syz.1.1493" saddr=10.128.0.169 src=30006 daddr=10.128.0.184 dest=45128 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 576.428922][T11895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.473571][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 576.486924][T11895] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.518890][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.526118][ T7975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.566616][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.573837][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.613016][ T30] audit: type=1400 audit(1747392957.489:581): avc: denied { egress } for pid=5864 comm="kworker/1:3" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 576.726625][ T30] audit: type=1400 audit(1747392957.489:582): avc: denied { sendto } for pid=5864 comm="kworker/1:3" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 576.739159][T11895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 576.759409][T11895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.284887][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.285996][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 577.314815][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.358423][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 577.388641][ T10] usb 3-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 577.412497][ T10] usb 3-1: Manufacturer: syz [ 577.433176][ T10] usb 3-1: config 0 descriptor?? [ 577.476663][ T10] hub 3-1:0.0: USB hub found [ 577.598900][ T30] audit: type=1326 audit(1747392958.499:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.0.1500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f716498e969 code=0x0 [ 577.602914][T12082] netlink: 'syz.3.1501': attribute type 32 has an invalid length. [ 577.634146][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 577.657248][T12082] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 577.680719][ T10] hub 3-1:0.0: 1 port detected [ 577.753788][T11895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.176436][ T3449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.198637][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.212174][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.292750][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1502'. [ 578.327344][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.375811][ T10] hub 3-1:0.0: activate --> -90 [ 579.350679][T12104] slcan: can't register candev [ 579.355745][T12104] Falling back ldisc for ptm0. [ 579.496519][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.682723][ T10] usb 3-1-port1: cannot reset (err = -110) [ 579.693756][ T10] usb 3-1-port1: cannot reset (err = -32) [ 579.732476][ T10] usb 3-1-port1: Cannot enable. Maybe the USB cable is bad? [ 579.756830][T11895] veth0_vlan: entered promiscuous mode [ 579.760193][ T10] usb 3-1-port1: cannot disable (err = -32) [ 579.799877][T11895] veth1_vlan: entered promiscuous mode [ 579.800662][ T10] usb 3-1-port1: cannot reset (err = -32) [ 579.833668][ T10] usb 3-1-port1: cannot reset (err = -32) [ 579.839455][ T10] usb 3-1-port1: Cannot enable. Maybe the USB cable is bad? [ 579.889263][ T10] usb 3-1-port1: cannot disable (err = -32) [ 579.902631][ T10] usb 3-1-port1: attempt power cycle [ 579.941433][T11895] veth0_macvtap: entered promiscuous mode [ 579.989142][T11895] veth1_macvtap: entered promiscuous mode [ 580.083100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.086357][T11895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.187761][T11895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.224747][T11895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.251318][T11895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.265539][ T10] usb 3-1-port1: cannot reset (err = -32) [ 580.272520][ T10] usb 3-1-port1: cannot reset (err = -32) [ 580.273888][T11895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.298564][ T10] usb 3-1-port1: Cannot enable. Maybe the USB cable is bad? [ 580.301863][T11895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.333936][ T10] usb 3-1-port1: cannot disable (err = -32) [ 580.365099][ T10] usb 3-1-port1: cannot reset (err = -32) [ 580.401770][ T10] usb 3-1-port1: cannot reset (err = -32) [ 580.411608][ T10] usb 3-1-port1: Cannot enable. Maybe the USB cable is bad? [ 580.437452][ T5888] usb 3-1: USB disconnect, device number 25 [ 580.453635][ T10] usb 3-1-port1: unable to enumerate USB device [ 580.544696][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.564734][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.565723][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.586729][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.596100][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.600831][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.624121][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.634661][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.670809][ T30] audit: type=1400 audit(1747392961.569:584): avc: denied { mounton } for pid=11895 comm="syz-executor" path="/root/syzkaller.dQJRwv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 580.771915][ T30] audit: type=1400 audit(1747392961.569:585): avc: denied { mounton } for pid=11895 comm="syz-executor" path="/root/syzkaller.dQJRwv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 580.896620][ T30] audit: type=1400 audit(1747392961.639:586): avc: denied { mount } for pid=11895 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 580.944536][T12144] ieee802154 phy0 wpan0: encryption failed: -22 [ 580.967719][ T30] audit: type=1400 audit(1747392961.639:587): avc: denied { mounton } for pid=11895 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 581.175597][T12156] dvmrp0: entered allmulticast mode [ 581.194920][ T30] audit: type=1400 audit(1747392962.069:588): avc: denied { setopt } for pid=12145 comm="syz.0.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 581.682767][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.837748][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.924073][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.291837][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.636731][ T30] audit: type=1400 audit(1747392964.519:589): avc: denied { ioctl } for pid=12173 comm="syz.0.1513" path="socket:[42920]" dev="sockfs" ino=42920 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 583.885722][T12196] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.923079][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.934414][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.943393][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.951651][ T5865] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 585.067610][ T5865] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 585.076625][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 585.088674][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 585.242321][ T5865] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 585.251448][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.267267][ T5865] usb 3-1: Product: syz [ 585.271567][ T5865] usb 3-1: Manufacturer: syz [ 585.277088][ T5865] usb 3-1: SerialNumber: syz [ 585.489585][ T5865] usb 3-1: config 0 descriptor?? [ 585.887539][T12191] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 585.981890][ T5865] hub 3-1:0.0: bad descriptor, ignoring hub [ 586.005151][ T5865] hub 3-1:0.0: probe with driver hub failed with error -5 [ 586.017218][ T5865] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 586.112650][ T3072] net_ratelimit: 3 callbacks suppressed [ 586.112670][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.718250][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.726413][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.714111][ T5888] usb 3-1: USB disconnect, device number 30 [ 588.714454][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 588.727951][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.682715][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.740627][ T7961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.741185][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.763288][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.789754][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.799945][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.612604][ T30] audit: type=1400 audit(1747392971.509:590): avc: denied { mount } for pid=12241 comm="syz.1.1530" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 590.753477][ T30] audit: type=1400 audit(1747392971.659:591): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 590.806866][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.870267][T12254] netlink: 'syz.1.1533': attribute type 29 has an invalid length. [ 590.880585][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 591.208879][T12260] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.453455][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.885027][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.893776][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.827922][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.268583][ T5865] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.689584][T12290] netlink: 'syz.0.1540': attribute type 29 has an invalid length. [ 594.704630][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'. [ 594.854896][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'. [ 594.890273][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.899797][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.913138][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.935080][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.444989][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.281678][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.073522][T12306] netlink: 'syz.0.1544': attribute type 1 has an invalid length. [ 597.134519][T12306] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1544'. [ 597.144199][T12306] netlink: 'syz.0.1544': attribute type 1 has an invalid length. [ 597.282982][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.164540][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.323032][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.498227][T12322] netlink: 'syz.5.1548': attribute type 29 has an invalid length. [ 598.523850][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1548'. [ 598.574343][ T30] audit: type=1400 audit(1747392979.479:592): avc: denied { listen } for pid=12300 comm="syz.2.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 598.593846][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.695324][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1548'. [ 599.117048][ T30] audit: type=1400 audit(1747392979.479:593): avc: denied { accept } for pid=12300 comm="syz.2.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 599.869066][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.612824][ T7975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.636259][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.672799][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.925114][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.987201][T12345] ieee802154 phy0 wpan0: encryption failed: -22 [ 601.054369][ T30] audit: type=1400 audit(1747392981.949:594): avc: denied { load_policy } for pid=12346 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 601.084265][T12347] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 601.099351][T12347] SELinux: failed to load policy [ 601.207773][ T7975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 601.762845][T12334] Bluetooth: hci5: command 0x0405 tx timeout [ 602.083625][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.693461][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.186920][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.022895][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.089096][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 604.252104][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.261422][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.302640][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 604.309618][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 604.342204][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 604.361372][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 604.374017][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.415184][ T10] usb 6-1: Product: syz [ 604.507543][ T10] usb 6-1: Manufacturer: syz [ 605.155872][ T10] usb 6-1: SerialNumber: syz [ 605.214014][ T10] usb 6-1: config 0 descriptor?? [ 605.258238][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 605.290717][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 605.295367][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.319875][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.336516][T12416] Invalid logical block size (117440512) [ 606.043483][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.093222][ T7961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.102122][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.176196][ T10] em28xx 6-1:0.0: chip ID is em2874 [ 606.213327][ T3072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.363272][ T7961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.393806][T12428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1573'. [ 608.012972][ T3072] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 608.120962][ T5910] usb 6-1: USB disconnect, device number 2 [ 608.151441][ T5910] em28xx 6-1:0.0: Disconnecting em28xx [ 608.176304][ T5910] em28xx 6-1:0.0: Freeing device [ 608.178760][ T3072] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 608.330044][ T3072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.339225][ T3072] usb 2-1: Product: syz [ 608.343858][ T3072] usb 2-1: Manufacturer: syz [ 608.348625][ T3072] usb 2-1: SerialNumber: syz [ 608.377491][ T3072] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 608.779248][ T5864] net_ratelimit: 5 callbacks suppressed [ 608.779264][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.794234][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.838476][ T5888] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 609.282836][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.527381][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.813935][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.848121][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.895648][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.903832][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.916095][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.953675][ T5888] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 610.008662][ T5888] ath9k_htc: Failed to initialize the device [ 610.164194][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.295948][ T30] audit: type=1400 audit(1747392991.139:595): avc: denied { create } for pid=12450 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 610.389485][T12432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.653818][ T30] audit: type=1400 audit(1747392991.149:596): avc: denied { bind } for pid=12450 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 610.737209][T12432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.930939][ T30] audit: type=1400 audit(1747392991.609:597): avc: denied { accept } for pid=12452 comm="syz.2.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 611.031927][ T5888] usb 2-1: ath9k_htc: USB layer deinitialized [ 611.117487][T12461] FAULT_INJECTION: forcing a failure. [ 611.117487][T12461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.193048][T12461] CPU: 1 UID: 0 PID: 12461 Comm: syz.5.1580 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 611.193084][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 611.193093][T12461] Call Trace: [ 611.193098][T12461] [ 611.193105][T12461] dump_stack_lvl+0x16c/0x1f0 [ 611.193145][T12461] should_fail_ex+0x512/0x640 [ 611.193175][T12461] _copy_from_user+0x2e/0xd0 [ 611.193201][T12461] input_event_from_user+0x133/0x3b0 [ 611.193229][T12461] ? __pfx_input_event_from_user+0x10/0x10 [ 611.193258][T12461] evdev_write+0x37b/0x750 [ 611.193285][T12461] ? __pfx_evdev_write+0x10/0x10 [ 611.193306][T12461] ? bpf_lsm_file_permission+0x9/0x10 [ 611.193332][T12461] ? security_file_permission+0x71/0x210 [ 611.193360][T12461] ? rw_verify_area+0xcf/0x680 [ 611.193389][T12461] vfs_write+0x25f/0x1180 [ 611.193411][T12461] ? __pfx_evdev_write+0x10/0x10 [ 611.193433][T12461] ? __pfx_vfs_write+0x10/0x10 [ 611.193454][T12461] ? find_held_lock+0x2b/0x80 [ 611.193474][T12461] ? __fget_files+0x204/0x3c0 [ 611.193491][T12461] ? __fget_files+0x20e/0x3c0 [ 611.193510][T12461] ksys_write+0x205/0x240 [ 611.193531][T12461] ? __pfx_ksys_write+0x10/0x10 [ 611.193567][T12461] ? rcu_is_watching+0x12/0xc0 [ 611.193594][T12461] do_syscall_64+0xcd/0x260 [ 611.193618][T12461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.193635][T12461] RIP: 0033:0x7f249ed8e969 [ 611.193648][T12461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.193661][T12461] RSP: 002b:00007f249fc0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.193676][T12461] RAX: ffffffffffffffda RBX: 00007f249efb6080 RCX: 00007f249ed8e969 [ 611.193685][T12461] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000006 [ 611.193694][T12461] RBP: 00007f249fc0c090 R08: 0000000000000000 R09: 0000000000000000 [ 611.193702][T12461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.193709][T12461] R13: 0000000000000000 R14: 00007f249efb6080 R15: 00007ffed92ee718 [ 611.193729][T12461] [ 611.483274][ T5864] usb 2-1: USB disconnect, device number 26 [ 612.102184][T12482] ieee802154 phy0 wpan0: encryption failed: -22 [ 612.696987][ T30] audit: type=1400 audit(1747392993.599:598): avc: denied { name_bind } for pid=12485 comm="syz.3.1588" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 613.042812][ T30] audit: type=1400 audit(1747392993.739:599): avc: denied { name_connect } for pid=12485 comm="syz.3.1588" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 613.097113][T12490] ieee802154 phy0 wpan0: encryption failed: -22 [ 613.363635][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.754642][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.165547][ T24] net_ratelimit: 12 callbacks suppressed [ 614.165563][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.191292][T12498] bio_check_eod: 8 callbacks suppressed [ 614.191311][T12498] syz.0.1591: attempt to access beyond end of device [ 614.191311][T12498] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 614.264334][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.265322][T12498] SQUASHFS error: Failed to read block 0x0: -5 [ 614.299506][T12498] unable to read squashfs_super_block [ 614.582341][T12512] 9pnet_fd: Insufficient options for proto=fd [ 614.600971][ T5888] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 615.195844][T12510] team0: Device gtp1 is of different type [ 615.363580][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.499131][ T7975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.887477][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.174090][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 617.424740][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.433974][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.444923][ T5888] usb 4-1: device descriptor read/all, error -71 [ 617.515646][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.545820][T12526] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 617.552354][T12526] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 617.559909][T12526] vhci_hcd vhci_hcd.0: Device attached [ 617.586113][T12531] vhci_hcd: cannot find the pending unlink 2047 [ 618.060169][T12531] vhci_hcd: connection closed [ 618.072035][ T3449] vhci_hcd: stop threads [ 618.088816][ T3449] vhci_hcd: release socket [ 618.093713][ T47] vhci_hcd: vhci_device speed not set [ 618.109788][ T3449] vhci_hcd: disconnect device [ 618.254991][ T47] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 618.271314][ T47] usb 37-1: enqueue for inactive port 0 [ 618.916020][ T47] vhci_hcd: vhci_device speed not set [ 618.992456][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.062118][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.136297][ T3449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 619.458948][T12551] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1604'. [ 619.763764][ T5910] net_ratelimit: 1 callbacks suppressed [ 619.763797][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.888232][T12499] syz.0.1591 (12499): drop_caches: 2 [ 620.063080][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.084439][T12562] netlink: 'syz.5.1607': attribute type 1 has an invalid length. [ 620.090651][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.175634][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.467418][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.198328][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.330485][T12572] input: syz1 as /devices/virtual/input/input23 [ 621.357156][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.562048][T12571] bond1 (unregistering): Released all slaves [ 621.934391][T12581] team0: Device gtp1 is of different type [ 622.031019][T12584] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 622.062540][ T30] audit: type=1400 audit(1747393002.929:600): avc: denied { shutdown } for pid=12583 comm="syz.3.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 622.063697][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.299913][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.315732][ T30] audit: type=1400 audit(1747393005.219:601): avc: denied { validate_trans } for pid=12612 comm="syz.1.1620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 624.353643][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.820600][ T30] audit: type=1400 audit(1747393005.719:602): avc: denied { read write } for pid=12612 comm="syz.1.1620" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 625.529613][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.694481][ T5865] net_ratelimit: 7 callbacks suppressed [ 625.694500][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.697010][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.716420][ T30] audit: type=1400 audit(1747393005.749:603): avc: denied { open } for pid=12612 comm="syz.1.1620" path="/330/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 625.716634][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.831479][T12639] FAULT_INJECTION: forcing a failure. [ 625.831479][T12639] name failslab, interval 1, probability 0, space 0, times 0 [ 625.884175][T12639] CPU: 0 UID: 0 PID: 12639 Comm: syz.5.1625 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 625.884208][T12639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.884219][T12639] Call Trace: [ 625.884225][T12639] [ 625.884232][T12639] dump_stack_lvl+0x16c/0x1f0 [ 625.884272][T12639] should_fail_ex+0x512/0x640 [ 625.884300][T12639] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 625.884331][T12639] should_failslab+0xc2/0x120 [ 625.884353][T12639] __kmalloc_cache_noprof+0x6a/0x3e0 [ 625.884380][T12639] ? rtnl_newlink+0x11b/0x2000 [ 625.884410][T12639] ? __pfx_rtnl_newlink+0x10/0x10 [ 625.884430][T12639] rtnl_newlink+0x11b/0x2000 [ 625.884475][T12639] ? __pfx_rtnl_newlink+0x10/0x10 [ 625.884494][T12639] ? find_held_lock+0x2b/0x80 [ 625.884520][T12639] ? avc_has_perm_noaudit+0x117/0x3b0 [ 625.884546][T12639] ? avc_has_perm_noaudit+0x149/0x3b0 [ 625.884572][T12639] ? __lock_acquire+0x5ca/0x1ba0 [ 625.884613][T12639] ? find_held_lock+0x2b/0x80 [ 625.884633][T12639] ? __pfx_rtnl_newlink+0x10/0x10 [ 625.884653][T12639] ? __pfx_rtnl_newlink+0x10/0x10 [ 625.884672][T12639] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 625.884694][T12639] ? __pfx_rtnl_newlink+0x10/0x10 [ 625.884715][T12639] rtnetlink_rcv_msg+0x95e/0xe90 [ 625.884739][T12639] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 625.884773][T12639] netlink_rcv_skb+0x16d/0x440 [ 625.884800][T12639] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 625.884823][T12639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.884859][T12639] ? netlink_deliver_tap+0x1ae/0xd30 [ 625.884886][T12639] netlink_unicast+0x53a/0x7f0 [ 625.884917][T12639] ? __pfx_netlink_unicast+0x10/0x10 [ 625.884947][T12639] netlink_sendmsg+0x8d1/0xdd0 [ 625.884974][T12639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.885007][T12639] ____sys_sendmsg+0xa95/0xc70 [ 625.885036][T12639] ? copy_msghdr_from_user+0x10a/0x160 [ 625.885057][T12639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.885093][T12639] ___sys_sendmsg+0x134/0x1d0 [ 625.885115][T12639] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.885173][T12639] __sys_sendmsg+0x16d/0x220 [ 625.885195][T12639] ? __pfx___sys_sendmsg+0x10/0x10 [ 625.885223][T12639] ? rcu_is_watching+0x12/0xc0 [ 625.885254][T12639] do_syscall_64+0xcd/0x260 [ 625.885285][T12639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.885304][T12639] RIP: 0033:0x7f249ed8e969 [ 625.885321][T12639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.885338][T12639] RSP: 002b:00007f249fc2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.885355][T12639] RAX: ffffffffffffffda RBX: 00007f249efb5fa0 RCX: 00007f249ed8e969 [ 625.885367][T12639] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 625.885377][T12639] RBP: 00007f249fc2d090 R08: 0000000000000000 R09: 0000000000000000 [ 625.885387][T12639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.885397][T12639] R13: 0000000000000000 R14: 00007f249efb5fa0 R15: 00007ffed92ee718 [ 625.885421][T12639] [ 626.333361][T12644] program syz.0.1624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.344558][T12644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1624'. [ 626.840030][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.851708][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.198859][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.207561][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.473966][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 627.517039][T12655] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.316279][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.324985][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.402186][T12669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1630'. [ 628.470872][T12670] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.1630'. [ 628.746931][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.048612][T12674] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.022313][T12206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.152810][ T5910] net_ratelimit: 5 callbacks suppressed [ 631.152828][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.542318][T12693] vcan0: tx address claim with dest, not broadcast [ 631.667486][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.693161][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.863965][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.662480][T12705] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.704848][T12707] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1642'. [ 632.756873][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.766714][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.792326][T12710] loop2: detected capacity change from 0 to 7 [ 632.843222][T12710] Dev loop2: unable to read RDB block 7 [ 632.903047][T12710] loop2: unable to read partition table [ 633.014914][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.020598][T12710] loop2: partition table beyond EOD, truncated [ 633.041934][T12710] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 633.205445][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.348731][ T7961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.416852][ T5187] Dev loop2: unable to read RDB block 7 [ 633.435440][ T5187] loop2: unable to read partition table [ 633.458900][ T5187] loop2: partition table beyond EOD, truncated [ 633.655596][T12728] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1646'. [ 633.681794][T12728] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1646'. [ 633.720742][T12728] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1646'. [ 633.822807][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.873011][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.641595][ T5910] IPVS: starting estimator thread 0... [ 634.762706][T12738] IPVS: using max 52 ests per chain, 124800 per kthread [ 634.816204][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 634.883940][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.141633][T12207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 635.648602][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1654'. [ 635.755701][T12757] binder: 12754:12757 ioctl c0306201 2000000001c0 returned -22 [ 635.771791][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.747238][ T9] net_ratelimit: 5 callbacks suppressed [ 636.747258][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.963249][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.980460][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.000134][T12774] FAULT_INJECTION: forcing a failure. [ 637.000134][T12774] name failslab, interval 1, probability 0, space 0, times 0 [ 637.013522][T12774] CPU: 1 UID: 0 PID: 12774 Comm: syz.1.1662 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 637.013564][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 637.013575][T12774] Call Trace: [ 637.013582][T12774] [ 637.013589][T12774] dump_stack_lvl+0x16c/0x1f0 [ 637.013624][T12774] should_fail_ex+0x512/0x640 [ 637.013650][T12774] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 637.013676][T12774] should_failslab+0xc2/0x120 [ 637.013697][T12774] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 637.013723][T12774] ? vfs_parse_fs_string+0xc3/0x150 [ 637.013749][T12774] kmemdup_nul+0x49/0xf0 [ 637.013772][T12774] vfs_parse_fs_string+0xc3/0x150 [ 637.013790][T12774] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 637.013816][T12774] ? shmem_next_opt+0xbc/0x120 [ 637.013843][T12774] ? __pfx_shmem_next_opt+0x10/0x10 [ 637.013865][T12774] vfs_parse_monolithic_sep+0x16f/0x1f0 [ 637.013884][T12774] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 637.013902][T12774] ? shmem_init_fs_context+0x222/0x2b0 [ 637.013927][T12774] ? __pfx_shmem_init_fs_context+0x10/0x10 [ 637.013950][T12774] ? alloc_fs_context+0x59b/0x9c0 [ 637.013973][T12774] path_mount+0x148d/0x1f20 [ 637.013995][T12774] ? kmem_cache_free+0x2d4/0x4d0 [ 637.014022][T12774] ? __pfx_path_mount+0x10/0x10 [ 637.014045][T12774] ? putname+0x154/0x1a0 [ 637.014070][T12774] __x64_sys_mount+0x28d/0x310 [ 637.014090][T12774] ? __pfx___x64_sys_mount+0x10/0x10 [ 637.014108][T12774] ? xfd_validate_state+0x5d/0x180 [ 637.014137][T12774] do_syscall_64+0xcd/0x260 [ 637.014166][T12774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.014185][T12774] RIP: 0033:0x7fdfd278e969 [ 637.014201][T12774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.014218][T12774] RSP: 002b:00007fdfd35d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 637.014236][T12774] RAX: ffffffffffffffda RBX: 00007fdfd29b5fa0 RCX: 00007fdfd278e969 [ 637.014248][T12774] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 637.014259][T12774] RBP: 00007fdfd35d4090 R08: 0000200000000100 R09: 0000000000000000 [ 637.014270][T12774] R10: 0000000001000040 R11: 0000000000000246 R12: 0000000000000002 [ 637.014280][T12774] R13: 0000000000000001 R14: 00007fdfd29b5fa0 R15: 00007ffc32831558 [ 637.014306][T12774] [ 637.379373][T12780] input: syz1 as /devices/virtual/input/input24 [ 637.922771][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.007537][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.016398][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.802813][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.975020][T12207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.059028][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.068642][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.236401][T12793] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 639.248090][T12793] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 640.088433][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.146582][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.244761][ T5888] net_ratelimit: 5 callbacks suppressed [ 642.244778][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.306639][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.335078][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.055476][T12819] Bluetooth: (null): Invalid header checksum [ 643.096717][T12206] Bluetooth: (null): Invalid header checksum [ 643.228435][T12206] Bluetooth: (null): Invalid header checksum [ 643.364241][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.809155][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.824726][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.085187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.104873][T12833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.290849][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.322458][ T7975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.402786][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.895212][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.952734][ T5867] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 645.124980][ T5867] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 645.145235][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.180012][ T5867] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 645.237792][ T5867] usb 2-1: config 1 has no interface number 1 [ 645.262978][ T5867] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 645.304358][ T5867] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.340044][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 645.368280][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.391128][ T5867] usb 2-1: Product: syz [ 645.397905][ T5867] usb 2-1: Manufacturer: syz [ 645.424209][ T5867] usb 2-1: SerialNumber: syz [ 645.454680][ T30] audit: type=1400 audit(1747393026.359:604): avc: denied { setattr } for pid=12856 comm="syz.0.1687" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 645.528744][ T30] audit: type=1400 audit(1747393026.399:605): avc: denied { ioctl } for pid=12856 comm="syz.0.1687" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 645.553242][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.562780][T12334] Bluetooth: hci5: command 0x0405 tx timeout [ 646.677689][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.930540][ T30] audit: type=1400 audit(1747393027.829:606): avc: denied { create } for pid=12879 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 646.950077][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.140904][ T30] audit: type=1400 audit(1747393027.979:607): avc: denied { read write } for pid=12879 comm="syz.3.1692" dev="sockfs" ino=46441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 647.363282][ T5871] net_ratelimit: 6 callbacks suppressed [ 647.363302][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.368451][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.369450][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.463684][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.520774][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.642126][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.670764][T12891] veth0: entered promiscuous mode [ 648.836868][T12894] IPVS: Unknown mcast interface: vcan0 [ 648.940329][T12898] veth0: left promiscuous mode [ 648.959203][ T5867] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 648.984252][ T5867] usb 2-1: MIDIStreaming interface descriptor not found [ 649.128616][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.175844][ T5867] usb 2-1: USB disconnect, device number 27 [ 649.427954][ T7975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.543084][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.543314][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.559716][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.114315][ T9524] udevd[9524]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.972387][ T7975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.402728][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 652.472445][ T5867] net_ratelimit: 9 callbacks suppressed [ 652.472462][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.567648][T12135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.668987][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 652.684975][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 652.700166][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 652.719717][T12940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.728790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.737545][T12940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.748641][T12940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.832960][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.841304][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.861026][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 653.028093][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 653.123226][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.814462][T12135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.894082][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 653.991858][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 654.040726][ T24] usb 6-1: Product: syz [ 654.045762][ T24] usb 6-1: Manufacturer: syz [ 654.084414][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 654.108576][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 654.140938][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 654.149881][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 654.259637][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'. [ 654.691002][ T30] audit: type=1400 audit(1747393035.589:608): avc: denied { read write } for pid=12930 comm="syz.5.1705" name="cdc-wdm0" dev="devtmpfs" ino=3145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 654.733254][ T30] audit: type=1400 audit(1747393035.589:609): avc: denied { open } for pid=12930 comm="syz.5.1705" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 655.494446][T12958] set match dimension is over the limit! [ 655.712713][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 656.484622][T12964] team0: Device gtp0 is of different type [ 657.609197][ T24] net_ratelimit: 19 callbacks suppressed [ 657.609217][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.623807][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.663983][T12206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.693642][T12135] usb 6-1: USB disconnect, device number 3 [ 657.736087][T12975] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 657.741400][ T30] audit: type=1400 audit(1747393038.639:610): avc: denied { create } for pid=12974 comm="syz.2.1715" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 657.937824][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.118225][ T30] audit: type=1400 audit(1747393038.639:611): avc: denied { associate } for pid=12974 comm="syz.2.1715" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 658.119297][ T30] audit: type=1400 audit(1747393038.799:612): avc: denied { map } for pid=12974 comm="syz.2.1715" path="/366/file0" dev="tmpfs" ino=1973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 658.155694][T12981] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 658.397015][ T30] audit: type=1400 audit(1747393038.949:613): avc: denied { rmdir } for pid=5820 comm="syz-executor" name="bus" dev="tmpfs" ino=1974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 658.440513][T12988] team0: Device gtp1 is of different type [ 658.704070][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.963492][T12135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.268675][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.321753][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.455427][ T47] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 659.501212][T12135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.510698][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.649435][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 659.697996][ T47] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 659.712501][ T47] usb 2-1: config 0 has no interface number 0 [ 659.848543][ T47] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 659.862548][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.870707][ T47] usb 2-1: Product: syz [ 660.482269][ T47] usb 2-1: Manufacturer: syz [ 660.497520][ T47] usb 2-1: SerialNumber: syz [ 660.572749][ T47] usb 2-1: config 0 descriptor?? [ 660.595019][ T47] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 660.615829][ T47] usb 2-1: selecting invalid altsetting 1 [ 660.621620][ T47] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 660.681466][ T47] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 660.693587][ T47] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 660.736681][ T47] usb 2-1: media controller created [ 661.363334][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 661.398062][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 661.520341][ T47] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 661.731042][ T47] zl10353_read_register: readreg error (reg=127, ret==-71) [ 661.751331][ T47] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 662.219998][ T47] usb 2-1: USB disconnect, device number 28 [ 663.095927][T12135] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 663.783814][ T5865] net_ratelimit: 12 callbacks suppressed [ 663.783844][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.822706][ T47] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 663.826045][T12207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 663.831026][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.912774][T12135] usb 4-1: Using ep0 maxpacket: 8 [ 663.942254][T13047] bridge_slave_0: left allmulticast mode [ 663.948101][T13047] bridge_slave_0: left promiscuous mode [ 663.956285][T13047] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.172708][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.182448][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.202295][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.204021][T12135] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 664.220636][T12135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.236141][T12135] usb 4-1: Product: syz [ 664.240572][T12135] usb 4-1: Manufacturer: syz [ 664.246209][T12135] usb 4-1: SerialNumber: syz [ 664.249777][T13047] bridge_slave_1: left allmulticast mode [ 664.280262][T13047] bridge_slave_1: left promiscuous mode [ 664.296894][ T47] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 664.298179][T12135] usb 4-1: config 0 descriptor?? [ 664.312732][T13047] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.320180][ T47] usb 2-1: config 0 has no interface number 0 [ 664.329196][ T47] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 664.353558][ T47] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 664.421501][ T47] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 664.433954][ T47] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 664.461667][T13047] bond0: (slave bond_slave_0): Releasing backup interface [ 664.521626][ T47] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 664.652364][ T47] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 664.742854][ T47] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 664.743016][T12135] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 664.751928][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.772998][T13047] bond0: (slave bond_slave_1): Releasing backup interface [ 664.816084][ T47] usb 2-1: config 0 descriptor?? [ 664.838124][T13034] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 664.848033][T13034] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 664.867093][ T47] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 665.002326][T13047] team0: Port device team_slave_0 removed [ 665.014758][T13047] team0: Port device team_slave_1 removed [ 665.021159][T13047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.029478][T13047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.038392][T13047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.047254][T13047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.094467][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.112243][T13053] team0: Device gtp0 is of different type [ 665.184651][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.220654][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.228864][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.242861][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.271031][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.299204][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.337181][T13034] bridge_slave_0: left allmulticast mode [ 665.343507][T13034] bridge_slave_0: left promiscuous mode [ 665.349383][T13034] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.470281][T13034] bridge_slave_1: left allmulticast mode [ 665.480107][T13034] bridge_slave_1: left promiscuous mode [ 665.488175][T13034] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.507906][T13034] bond0: (slave bond_slave_0): Releasing backup interface [ 665.556823][T13034] bond0: (slave bond_slave_1): Releasing backup interface [ 665.683540][T13034] team0: Port device team_slave_0 removed [ 665.746414][T13034] team0: Port device team_slave_1 removed [ 665.772378][T13034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.789777][T13034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.821885][T13034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.847679][T13034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.974536][ T5865] usb 2-1: USB disconnect, device number 29 [ 666.008163][ T5865] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 666.071378][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 666.084342][T13072] ieee802154 phy0 wpan0: encryption failed: -22 [ 666.485012][ T6510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.125438][T12135] usb write operation failed. (-71) [ 667.135488][T12135] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 667.154361][T12135] dvbdev: DVB: registering new adapter (Terratec H7) [ 667.161511][T12135] usb 4-1: media controller created [ 667.178162][T12135] usb read operation failed. (-71) [ 667.185911][T12135] usb write operation failed. (-71) [ 667.204190][T12135] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 667.250458][T12135] usb 4-1: USB disconnect, device number 24 [ 668.765438][T13098] team0: Mode changed to "loadbalance" [ 668.803832][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1749'. [ 668.860173][ T5888] net_ratelimit: 20 callbacks suppressed [ 668.860198][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.903865][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.141970][ T3427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.262589][ T5888] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 669.440403][T12135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.449520][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.617880][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 669.716312][ T3427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.739435][ T5888] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf [ 669.748986][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.757741][ T5888] usb 4-1: Product: syz [ 669.762806][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.771727][ T5888] usb 4-1: Manufacturer: syz [ 669.781373][ T5888] usb 4-1: SerialNumber: syz [ 669.923660][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.932651][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.234439][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.244151][ T5888] usb 4-1: config 0 descriptor?? [ 670.263409][ T5888] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now attached [ 670.297436][T13120] ieee802154 phy0 wpan0: encryption failed: -22 [ 670.807636][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.846055][T13124] veth0_virt_wifi: entered promiscuous mode [ 671.672444][ T6510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 671.765191][ T10] usb 4-1: USB disconnect, device number 25 [ 671.771782][ T10] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now disconnected [ 672.124723][ T30] audit: type=1400 audit(1747393052.919:614): avc: denied { recv } for pid=12207 comm="kworker/u8:6" saddr=10.128.0.169 src=47320 daddr=10.128.0.184 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 673.926393][ T5888] net_ratelimit: 12 callbacks suppressed [ 673.926413][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.102362][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.111407][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.147576][T13175] ieee802154 phy0 wpan0: encryption failed: -22 [ 674.154521][T13171] binder: 13170:13171 ioctl c018620c 0 returned -14 [ 674.912714][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.920970][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.929359][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.000507][ T7961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.038435][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.129103][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.138638][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.249487][T13183] ieee802154 phy0 wpan0: encryption failed: -22 [ 675.274343][T13186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.841939][ T30] audit: type=1400 audit(1747393057.739:615): avc: denied { create } for pid=13199 comm="syz.5.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 676.896371][ T30] audit: type=1400 audit(1747393057.769:616): avc: denied { bind } for pid=13199 comm="syz.5.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 676.920279][T13202] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 676.987821][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1776'. [ 677.252822][T13206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1778'. [ 677.362971][T12207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.397361][T13204] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 677.498598][T13208] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 677.511040][T13208] bond1 (unregistering): Released all slaves [ 677.791275][ T5871] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 677.808353][T13224] ieee802154 phy0 wpan0: encryption failed: -22 [ 677.992881][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 678.014679][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 678.142298][ T5871] usb 4-1: config 2 has an invalid interface number: 9 but max is 0 [ 678.299045][ T5871] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 678.342439][ T5871] usb 4-1: config 2 has no interface number 0 [ 678.350727][ T5871] usb 4-1: config 2 interface 9 altsetting 10 endpoint 0x9 has invalid wMaxPacketSize 0 [ 678.453021][ T5871] usb 4-1: config 2 interface 9 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 678.735676][ T30] audit: type=1326 audit(1747393059.369:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.5.1782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f249ed8e969 code=0x0 [ 678.754303][ T5871] usb 4-1: config 2 interface 9 has no altsetting 0 [ 678.769376][ T5871] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 678.788797][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.843435][ T5871] usb 4-1: Product: syz [ 678.863945][ T5871] usb 4-1: Manufacturer: syz [ 678.882861][ T5871] usb 4-1: SerialNumber: syz [ 679.579458][T12207] net_ratelimit: 16 callbacks suppressed [ 679.579479][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.599164][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.599846][ T5871] pn533_usb 4-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint [ 679.632058][ T5871] usb 4-1: USB disconnect, device number 26 [ 679.773330][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.781728][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.792044][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.302736][ T5871] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 680.566623][ T7961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 680.602260][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 680.618795][ T5871] usb 3-1: config 0 has an invalid interface number: 232 but max is 0 [ 680.657491][ T5871] usb 3-1: config 0 has no interface number 0 [ 680.686603][ T5871] usb 3-1: config 0 interface 232 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 680.700386][ T5871] usb 3-1: config 0 interface 232 has no altsetting 0 [ 680.709651][ T5871] usb 3-1: New USB device found, idVendor=0543, idProduct=1923, bcdDevice=6c.14 [ 680.719316][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.739508][ T5871] usb 3-1: Product: syz [ 680.783438][ T5871] usb 3-1: Manufacturer: syz [ 680.788089][ T5871] usb 3-1: SerialNumber: syz [ 680.796528][ T5871] usb 3-1: config 0 descriptor?? [ 680.807369][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.815895][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.855695][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.907648][ T30] audit: type=1400 audit(1747393061.809:618): avc: denied { append } for pid=13257 comm="syz.3.1791" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 680.925922][T13260] random: crng reseeded on system resumption [ 680.960897][ T30] audit: type=1400 audit(1747393061.809:619): avc: denied { open } for pid=13257 comm="syz.3.1791" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 681.296229][ T30] audit: type=1400 audit(1747393062.179:620): avc: denied { setopt } for pid=13262 comm="syz.5.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 681.367675][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.390683][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.587972][T13274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=13274 comm=syz.0.1796 [ 681.664180][T13274] veth2: entered promiscuous mode [ 681.680095][T13274] veth3: entered promiscuous mode [ 682.665437][T13287] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20003 [ 682.675508][T13288] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20003 [ 682.762066][ T7961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.789715][ T7961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.804470][T13287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.860162][T13288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.125401][ T3449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 683.518876][ T47] usb 3-1: USB disconnect, device number 31 [ 684.206631][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 684.243650][T13312] block device autoloading is deprecated and will be removed. [ 684.396545][T13312] input: syz0 as /devices/virtual/input/input25 [ 684.572578][ T47] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 684.788914][T13326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1806'. [ 685.481868][ T10] net_ratelimit: 14 callbacks suppressed [ 685.481887][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.498493][ T7975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.523350][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.531722][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.567936][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.585452][ T47] usb 3-1: no configurations [ 685.600438][ T47] usb 3-1: can't read configurations, error -22 [ 685.745206][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.794508][ T47] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 686.005486][ T47] usb 3-1: no configurations [ 686.322837][ T7975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 686.335065][ T47] usb 3-1: can't read configurations, error -22 [ 686.363904][ T47] usb usb3-port1: attempt power cycle [ 686.377731][ T30] audit: type=1400 audit(1747393067.279:621): avc: denied { read } for pid=13335 comm="syz.3.1811" path="socket:[48190]" dev="sockfs" ino=48190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 686.564089][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.572642][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.785555][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.940037][ T30] audit: type=1400 audit(1747393067.839:622): avc: denied { mounton } for pid=13340 comm="syz.2.1813" path="/proc/1487/task" dev="proc" ino=47331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 686.967187][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.223390][ T5867] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 688.063955][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.196830][ T5867] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 688.221739][ T5867] usb 6-1: config 0 has no interface number 0 [ 688.228497][ T5867] usb 6-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 688.240359][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.258983][ T5867] usb 6-1: config 0 descriptor?? [ 688.270208][ T5867] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 688.278793][ T5867] usb 6-1: setting power ON [ 688.285660][ T5867] dvb-usb: bulk message failed: -22 (2/0) [ 688.349991][T13317] syz.1.1808 (13317): drop_caches: 2 [ 688.433103][ T5867] dvb-usb: bulk message failed: -22 (1/0) [ 688.491734][T13339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.522910][T13339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.562935][T12206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 688.583140][ T5867] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 688.779529][ T5867] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 688.798112][ T5867] dvb_usb_cxusb 6-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 689.110630][ T30] audit: type=1400 audit(1747393070.009:623): avc: denied { getopt } for pid=13338 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 689.211926][T13375] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.270691][T13366] Process accounting resumed [ 689.849228][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 690.719686][ T5867] usb 6-1: USB disconnect, device number 4 [ 690.847852][T12207] net_ratelimit: 12 callbacks suppressed [ 690.847876][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.551193][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.559676][T12135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.607151][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.724719][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.792694][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.424903][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.445714][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.520319][T12207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 692.714012][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.737239][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.828051][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.861658][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.972722][ T5888] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 693.213980][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.233628][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.264018][ T30] audit: type=1400 audit(1747393074.149:624): avc: denied { execute } for pid=13414 comm="syz.5.1834" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=47441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 693.343476][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 694.353987][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 694.483118][T12334] Bluetooth: hci5: command 0x0405 tx timeout [ 694.595075][T13441] overlay: filesystem on ./bus not supported as upperdir [ 694.659702][ T7961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.037000][ T5888] net_ratelimit: 13 callbacks suppressed [ 696.037019][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.308057][T13464] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.413154][T13464] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.592172][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.981016][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.989423][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.777331][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.837214][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.846623][T12135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.265821][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.290838][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.538164][ T3427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.551146][T12135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.402840][T12206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 700.666409][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 701.133296][ T7503] net_ratelimit: 13 callbacks suppressed [ 701.133313][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.603390][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.616853][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.671878][T13519] can0: slcan on ptm0. [ 701.957053][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.991364][ T30] audit: type=1400 audit(1747393082.889:625): avc: denied { bind } for pid=13518 comm="syz.2.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 702.014786][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.045150][T13522] ieee802154 phy0 wpan0: encryption failed: -22 [ 702.115754][T13519] can0 (unregistered): slcan off ptm0. [ 702.125671][T13519] sp0: Synchronizing with TNC [ 702.172002][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.614236][T13530] FAULT_INJECTION: forcing a failure. [ 702.614236][T13530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.717422][T13530] CPU: 0 UID: 0 PID: 13530 Comm: syz.5.1860 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 702.717451][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 702.717461][T13530] Call Trace: [ 702.717468][T13530] [ 702.717475][T13530] dump_stack_lvl+0x16c/0x1f0 [ 702.717513][T13530] should_fail_ex+0x512/0x640 [ 702.717550][T13530] _copy_from_user+0x2e/0xd0 [ 702.717577][T13530] memdup_user+0x6b/0xe0 [ 702.717601][T13530] strndup_user+0x78/0xe0 [ 702.717621][T13530] __x64_sys_mount+0x137/0x310 [ 702.717642][T13530] ? __pfx___x64_sys_mount+0x10/0x10 [ 702.717659][T13530] ? rcu_is_watching+0x12/0xc0 [ 702.717690][T13530] do_syscall_64+0xcd/0x260 [ 702.717718][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.717737][T13530] RIP: 0033:0x7f249ed8e969 [ 702.717753][T13530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.717769][T13530] RSP: 002b:00007f249fc2d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 702.717787][T13530] RAX: ffffffffffffffda RBX: 00007f249efb5fa0 RCX: 00007f249ed8e969 [ 702.717799][T13530] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 702.717809][T13530] RBP: 00007f249fc2d090 R08: 0000200000000740 R09: 0000000000000000 [ 702.717820][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.717831][T13530] R13: 0000000000000000 R14: 00007f249efb5fa0 R15: 00007ffed92ee718 [ 702.717855][T13530] [ 703.067305][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.075633][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.229148][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.237576][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.578139][T13561] binder: 13559:13561 ioctl c0306201 200000000280 returned -14 [ 704.592034][T13565] ieee802154 phy0 wpan0: encryption failed: -22 [ 704.884251][ T5865] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 705.543560][ T3427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 705.587263][ T30] audit: type=1400 audit(1747393086.489:626): avc: denied { bind } for pid=13580 comm="syz.2.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 705.610552][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 705.642897][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.664054][ T30] audit: type=1400 audit(1747393086.569:627): avc: denied { ioctl } for pid=13580 comm="syz.2.1874" path="socket:[48736]" dev="sockfs" ino=48736 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 705.725510][ T5865] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 705.743628][ T5871] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 705.753884][ T5865] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 705.782585][ T5865] usb 2-1: Manufacturer: syz [ 705.801002][ T5871] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 705.815831][ T5865] usb 2-1: config 0 descriptor?? [ 705.839309][ T5865] hub 2-1:0.0: USB hub found [ 706.042657][ T5865] hub 2-1:0.0: 1 port detected [ 706.165388][T12206] net_ratelimit: 11 callbacks suppressed [ 706.165410][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.754191][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.762680][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.763975][ T5865] hub 2-1:0.0: activate --> -90 [ 706.776994][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.784667][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.030044][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.038615][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.072036][T12135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.072122][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.080498][ T5865] usb 2-1: USB disconnect, device number 30 [ 708.095700][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.097391][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.510029][ T5867] usb 2-1-port1: config error [ 708.828588][T13625] can0: slcan on ptm0. [ 708.893581][T13625] can0 (unregistered): slcan off ptm0. [ 708.904454][T13625] sp0: Synchronizing with TNC [ 710.132523][ T31] INFO: task kworker/0:5:5904 blocked for more than 144 seconds. [ 710.206732][ T31] Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 [ 710.230532][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 710.279684][ T31] task:kworker/0:5 state:D stack:21944 pid:5904 tgid:5904 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 710.298557][ T31] Workqueue: usb_hub_wq hub_event [ 710.304233][ T31] Call Trace: [ 710.307653][ T31] [ 710.310635][ T31] __schedule+0x116f/0x5de0 [ 710.319037][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 710.324461][ T31] ? __pfx___schedule+0x10/0x10 [ 710.342516][ T31] ? find_held_lock+0x2b/0x80 [ 710.347269][ T31] ? schedule+0x2d7/0x3a0 [ 710.354498][ T31] schedule+0xe7/0x3a0 [ 710.358915][ T31] schedule_timeout+0x257/0x290 [ 710.365425][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 710.370928][ T31] ? mark_held_locks+0x49/0x80 [ 710.375967][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 710.381273][ T31] __wait_for_common+0x2ff/0x4e0 [ 710.386393][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 710.391866][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 710.397570][ T31] ? __pfx_device_del+0x10/0x10 [ 710.402614][ T31] ? kobject_put+0xab/0x5a0 [ 710.407254][ T31] i2c_del_adapter+0x546/0x6f0 [ 710.412047][ T31] ? usb_free_stream_buffers.isra.0+0x1b8/0x2b0 [ 710.418491][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 710.423856][ T31] ? rcu_is_watching+0x12/0xc0 [ 710.428805][ T31] ? kfree+0x252/0x4d0 [ 710.433080][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 710.437763][ T31] dvb_usb_device_exit+0x334/0x580 [ 710.443139][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 710.448768][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 710.454358][ T31] cxusb_probe+0x1c9/0x7d0 [ 710.458778][ T31] ? mark_held_locks+0x49/0x80 [ 710.463642][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 710.469513][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.474906][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 710.480837][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 710.486664][ T31] usb_probe_interface+0x300/0x9c0 [ 710.491886][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 710.497672][ T31] really_probe+0x23e/0xa90 [ 710.502290][ T31] __driver_probe_device+0x1de/0x440 [ 710.507692][ T31] driver_probe_device+0x4c/0x1b0 [ 710.513001][ T31] __device_attach_driver+0x1df/0x310 [ 710.518424][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 710.524519][ T31] bus_for_each_drv+0x156/0x1e0 [ 710.529508][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 710.535097][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.540295][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 710.546217][ T31] __device_attach+0x1e4/0x4b0 [ 710.551159][ T31] ? __pfx___device_attach+0x10/0x10 [ 710.556650][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 710.561993][ T31] bus_probe_device+0x17f/0x1c0 [ 710.567139][ T31] device_add+0x1148/0x1a70 [ 710.572641][ T31] ? __pfx_device_add+0x10/0x10 [ 710.577620][ T31] ? mark_held_locks+0x49/0x80 [ 710.582503][ T31] usb_set_configuration+0x1187/0x1e20 [ 710.588077][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 710.594336][ T31] usb_generic_driver_probe+0xb1/0x110 [ 710.599805][ T31] usb_probe_device+0xec/0x3e0 [ 710.604860][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 710.610278][ T31] really_probe+0x23e/0xa90 [ 710.614968][ T31] __driver_probe_device+0x1de/0x440 [ 710.620400][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 710.625987][ T31] driver_probe_device+0x4c/0x1b0 [ 710.631124][ T31] __device_attach_driver+0x1df/0x310 [ 710.636687][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 710.642864][ T31] bus_for_each_drv+0x156/0x1e0 [ 710.647832][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 710.653381][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.654588][T12206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.658697][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 710.677224][ T31] __device_attach+0x1e4/0x4b0 [ 710.682005][ T31] ? __pfx___device_attach+0x10/0x10 [ 710.687454][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 710.692991][ T31] bus_probe_device+0x17f/0x1c0 [ 710.697846][ T31] device_add+0x1148/0x1a70 [ 710.702335][ T31] ? __pfx_device_add+0x10/0x10 [ 710.707526][ T31] ? add_device_randomness+0xb7/0xf0 [ 710.712993][ T31] ? _dev_info+0xe4/0x120 [ 710.717419][ T31] usb_new_device+0xd07/0x1a20 [ 710.722178][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 710.727454][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 710.732841][ T31] ? mark_held_locks+0x49/0x80 [ 710.737602][ T31] hub_event+0x2eb7/0x4fa0 [ 710.742017][ T31] ? __pfx_hub_event+0x10/0x10 [ 710.746859][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 710.752649][ T31] ? rcu_is_watching+0x12/0xc0 [ 710.757406][ T31] process_one_work+0x9cf/0x1b70 [ 710.762330][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 710.767771][ T31] ? __pfx_process_one_work+0x10/0x10 [ 710.774238][ T31] ? assign_work+0x1a0/0x250 [ 710.778845][ T31] worker_thread+0x6c8/0xf10 [ 710.783519][ T31] ? __kthread_parkme+0x19e/0x250 [ 710.788552][ T31] ? __pfx_worker_thread+0x10/0x10 [ 710.793827][ T31] kthread+0x3c2/0x780 [ 710.797902][ T31] ? __pfx_kthread+0x10/0x10 [ 710.802817][ T31] ? __pfx_kthread+0x10/0x10 [ 710.807418][ T31] ? __pfx_kthread+0x10/0x10 [ 710.812018][ T31] ? __pfx_kthread+0x10/0x10 [ 710.816797][ T31] ? rcu_is_watching+0x12/0xc0 [ 710.821572][ T31] ? __pfx_kthread+0x10/0x10 [ 710.826199][ T31] ret_from_fork+0x45/0x80 [ 710.830612][ T31] ? __pfx_kthread+0x10/0x10 [ 710.835379][ T31] ret_from_fork_asm+0x1a/0x30 [ 710.840168][ T31] [ 710.843493][T13643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'. [ 710.843546][ T31] [ 710.843546][ T31] Showing all locks held in the system: [ 710.862729][ T31] 1 lock held by khungtaskd/31: [ 710.867596][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 710.906038][ T31] 1 lock held by udevd/5187: [ 710.910671][ T31] 2 locks held by getty/5581: [ 710.925637][ T31] #0: ffff8880368aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 710.976347][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 710.988940][ T31] 5 locks held by kworker/0:5/5904: [ 710.994528][ T31] #0: ffff888021a9b148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 711.005919][ T31] #1: ffffc90002fe7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 711.018007][ T31] #2: ffff888145749198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 711.027394][ T31] #3: ffff888035f24198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 711.037170][ T31] #4: ffff88805d07c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 711.047496][ T31] 3 locks held by syz.1.1883/13619: [ 711.053189][ T31] #0: ffff888048cf50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x153/0x2e0 [ 711.071661][ T31] #1: ffff888048cf60a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x17d/0x2e0 [ 711.083498][ T31] #2: ffffffff8e3cb000 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 711.093691][ T31] [ 711.096300][ T31] ============================================= [ 711.096300][ T31] [ 711.105400][ T31] NMI backtrace for cpu 1 [ 711.105417][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 711.105438][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.105448][ T31] Call Trace: [ 711.105455][ T31] [ 711.105462][ T31] dump_stack_lvl+0x116/0x1f0 [ 711.105502][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 711.105527][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 711.105551][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 711.105573][ T31] watchdog+0xf70/0x12c0 [ 711.105599][ T31] ? __pfx_watchdog+0x10/0x10 [ 711.105615][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 711.105644][ T31] ? __kthread_parkme+0x19e/0x250 [ 711.105672][ T31] ? __pfx_watchdog+0x10/0x10 [ 711.105689][ T31] kthread+0x3c2/0x780 [ 711.105707][ T31] ? __pfx_kthread+0x10/0x10 [ 711.105721][ T31] ? __pfx_kthread+0x10/0x10 [ 711.105736][ T31] ? __pfx_kthread+0x10/0x10 [ 711.105751][ T31] ? __pfx_kthread+0x10/0x10 [ 711.105766][ T31] ? rcu_is_watching+0x12/0xc0 [ 711.105798][ T31] ? __pfx_kthread+0x10/0x10 [ 711.105814][ T31] ret_from_fork+0x45/0x80 [ 711.105831][ T31] ? __pfx_kthread+0x10/0x10 [ 711.105848][ T31] ret_from_fork_asm+0x1a/0x30 [ 711.105889][ T31] [ 711.105895][ T31] Sending NMI from CPU 1 to CPUs 0: [ 711.239814][ C0] NMI backtrace for cpu 0 [ 711.239831][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 711.239849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.239857][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 711.239884][ C0] Code: e5 61 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 cf 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 711.239896][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 711.239908][ C0] RAX: 0000000002ecc045 RBX: 0000000000000000 RCX: ffffffff8b6d2419 [ 711.239916][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe291d RDI: ffffffff8bf48aa0 [ 711.239923][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 711.239936][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 711.239943][ C0] R13: ffffffff8e097740 R14: ffffffff90850010 R15: 0000000000000000 [ 711.239951][ C0] FS: 0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 711.239965][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 711.239973][ C0] CR2: 0000001b2f418ff8 CR3: 00000000125e9000 CR4: 00000000003526f0 [ 711.239982][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 711.239989][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 711.239997][ C0] Call Trace: [ 711.240001][ C0] [ 711.240006][ C0] default_idle+0x13/0x20 [ 711.240018][ C0] default_idle_call+0x6d/0xb0 [ 711.240029][ C0] do_idle+0x391/0x510 [ 711.240053][ C0] ? __pfx_do_idle+0x10/0x10 [ 711.240068][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 711.240088][ C0] cpu_startup_entry+0x4f/0x60 [ 711.240103][ C0] rest_init+0x16b/0x2b0 [ 711.240115][ C0] ? acpi_subsystem_init+0x133/0x180 [ 711.240137][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 711.240156][ C0] start_kernel+0x3e9/0x4d0 [ 711.240178][ C0] x86_64_start_reservations+0x18/0x30 [ 711.240198][ C0] x86_64_start_kernel+0xb0/0xc0 [ 711.240216][ C0] common_startup_64+0x13e/0x148 [ 711.240239][ C0] [ 711.454286][ T5865] net_ratelimit: 10 callbacks suppressed [ 711.454308][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.476429][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.484918][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.485043][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.502635][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.511182][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 711.518050][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 711.529860][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.539904][ T31] Call Trace: [ 711.543166][ T31] [ 711.546082][ T31] dump_stack_lvl+0x3d/0x1f0 [ 711.550664][ T31] panic+0x71c/0x800 [ 711.554561][ T31] ? __pfx_panic+0x10/0x10 [ 711.558960][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 711.564334][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 711.570319][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 711.575674][ T31] ? watchdog+0xdda/0x12c0 [ 711.580085][ T31] ? watchdog+0xdcd/0x12c0 [ 711.584492][ T31] watchdog+0xdeb/0x12c0 [ 711.588717][ T31] ? __pfx_watchdog+0x10/0x10 [ 711.593392][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 711.598585][ T31] ? __kthread_parkme+0x19e/0x250 [ 711.603613][ T31] ? __pfx_watchdog+0x10/0x10 [ 711.608271][ T31] kthread+0x3c2/0x780 [ 711.612321][ T31] ? __pfx_kthread+0x10/0x10 [ 711.616900][ T31] ? __pfx_kthread+0x10/0x10 [ 711.621482][ T31] ? __pfx_kthread+0x10/0x10 [ 711.626062][ T31] ? __pfx_kthread+0x10/0x10 [ 711.630635][ T31] ? rcu_is_watching+0x12/0xc0 [ 711.635393][ T31] ? __pfx_kthread+0x10/0x10 [ 711.639967][ T31] ret_from_fork+0x45/0x80 [ 711.644372][ T31] ? __pfx_kthread+0x10/0x10 [ 711.648955][ T31] ret_from_fork_asm+0x1a/0x30 [ 711.653732][ T31] [ 711.656963][ T31] Kernel Offset: disabled [ 711.661270][ T31] Rebooting in 86400 seconds..