last executing test programs: 2m52.821245485s ago: executing program 0 (id=746): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000004) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xed}) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, 0x0, 0x0) close(r0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaad8be1782cf916761c7db48f3bebb0bfafdd192210800459200280064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50200002907800e7"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, 0x0, 0x80) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700230000000905", @ANYRES32=r2], 0x0) 2m49.101732942s ago: executing program 0 (id=759): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0xdffffffffffffffc, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) memfd_create(0x0, 0x3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r4, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x20, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x200000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x4, 0x2, 0xffff], [0x8000, 0xfc, 0x0, 0xffffffff, 0x80, 0xfffffffc, 0x0, 0x0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x8000004, 0x9, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0xffffffffffffffff) read$msr(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x62, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) 2m48.044611022s ago: executing program 0 (id=761): lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000180)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2000390780003"], 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x210200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='xprtrdma_prepsend_failed\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000200), 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 2m44.977857758s ago: executing program 0 (id=774): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c610faca20180c20000020800450000240000e0000011"], 0x0) syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty=0xb0000000, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "c2feca96bafcd1d342d5ccab876dada3aafd1d8ea9fcaa4cdb926323bab82b32", "0eb9b1253700691f8cca917f3ee70357544881ec58882bcabc80d58f6b3ffbb1784cfb4f989f166ef1ffccb921c7b7dd", "2406e1621f72e1134b5def0bd3a511a573b3b2b6e86292d79087599f", {"bbe26acee821663673c27837b7e45cbd", "63a50a0b0081ab893d06d8ab5e406624"}}}}}}}, 0x0) 2m44.737681069s ago: executing program 0 (id=777): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/15], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0xa4, 0x0, @empty}}]}, 0x110) 2m43.680818305s ago: executing program 0 (id=781): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4009080) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000000), 0x10) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 2m28.444520461s ago: executing program 32 (id=781): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4009080) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000000), 0x10) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 17.53184011s ago: executing program 4 (id=1271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000a40), 0x5d, 0x4000000) (async) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_usb_connect(0x5, 0x0, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) (async) syz_usb_connect$cdc_ecm(0x6, 0x5a, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001200010a27bd7000fdffffff800000001400a800fe80000000000000000000000000ffffad8b19fc299aa4ec222d5ad3651a326a175b2e1ba82e1675d3d0e3b5b008c0570400b4ebf31a585fd14b29242bc92047080de64c5f16d40f5f76c60bf39bdc84eebeaae7f8f1dfbfac48db129321e15c58330d9ad91f2a7cddd8722a32da62c6a3f777558612d20d4f2eb60e345aa09e8fe7b2d6836594b25f2bb7d8a84e6cccee637f5038c90b3a4887c38a7d55000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$inet6(0xa, 0x6, 0x7) sendmsg$inet6(r6, &(0x7f00000005c0)={&(0x7f0000000140)={0xa, 0x4e20, 0xffffffc7, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x49}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000002c0)="90a0df655f851094367272bb47fc31a92d6a899105d64124a414aee11e17fe83a60ee38a78f227f3ae874013ae9a8718566085cdba3966f22ad2830660", 0x3d}, {&(0x7f00000003c0)="d8f757ec85c47388de8639c16e3eac9a6118f1cf9b4f9dff7fc1ccb636dab0374758344ec29dd8526e46ffe01439ac891709d5afac69fd41e2feed7ebb3d5f7a791fee2c9dae651bf745b88e628655ab73bd95bbda27ce2cbd07b340b2b2ea5d3c47ca0e7821cea2af972e58b825d2d9c0aa6dc1", 0x74}, {&(0x7f0000000440)="c2358000ad28ea995f647588eadf007d4763181403230deb4291102500f6889d667dbfbfeab0ede813515b46b7c1986249a68c0dfa4ecbd1559ec1c4471af06dd46399dcbb5f9df95df05529f438287fcbdec3711a9962faedb1c9e331452d1da7553c37df415dedaddeb15f1dc7170894179f1791657aaa6a04899b9c3526ad1978c42a91814aae5c9a60121846b1692e6004caea6c884577724ea6a846bb7bc0d24ae9c8b89d8c754ddeea510f37d51f8d968f157a592077cbb2e733923b02c5f9c4fd4e2b556e5536209fc4099b3b7020bea2400a0a66c0f3dd3fa2ba155501190882d1dccf", 0xe7}, {&(0x7f0000001480)="5fee6e66509e86a5e3fc04f6b18dcdae05477e6a928761317753c4dd367a5b7e52e8793632002d0846712dbbd6354f64cf479a889c3150e817906421d6cd9f4a6b0ee4cce373dd733d6b843391593bde9cd52fa5d99a1ebf321e877b0da6a0cd3de5322872edf3258dfdafc26dd6249af43343766c8d9a07dc93ac12a507898dbc7858df023f25396a0f7a551974e62a8667eec5aeba87ec83098b4d8b3562fa6fded8d45a91f79d39cae17f95eff9147abc93e874f6d0ef421ce450cfc5d61751b3052d5750b132440530c4ea47bae0d770ef28515c79333c78ad2d79ddc686af3c5f25b92eb04d3ad7ace9b36dc4b5bbed59fe708e6542a4c5028c757e3eb74bcac4672e9d338852c9f010896ac312d22e89be034f1e48729a32dea6e8d426e2530a1b42e4f5a7315868fe8ac09164530294e23374e32cf5c42d6b1b51ae6f53fce448eeb82996a1a5f2ea7781405ddf26e90b9b0f30e5267e1d361eef9683a8aa4e51747c49b6ed8bd6ad4de7674a3bfee7e30f342273253a25995bcc3a9922df1344f4b4f1b31be0b6b9fde7999ab3bd6fe17d68bce5f955bf673d2cc642703d298628f86113fa7d58571fe1d324beb7f8c8412ef59079f5297f78f2e04f3e6ef5bc6740d494605cb6464abd77a0fb82f9334bfea5ed6923478db297266b3ff4370630e573194bcedd28d7e3e14f214c7286d2d2a77578cb58f797100725c7d4340b689fef6a0d8f328ad2ecf18d5ef31080e2ee6f7e711b828d9dffb7a2fc243ec19423ddb4d887158cfe1eb4870e16e6451e08debaa58083bd6cdff6b104180c301ea495a1cf36cf38d2db448caef5b6fa9df0d131187382c24c71629f4b4e8c39aa21b514e12a74cec4ec9d9ccb2715e0d8d5adc10ab2690d27a966ba33b5351ae43d3d68e553f5fccfab3009e1bd68af75449c094480018c869d3105a9978a52545adcfa507d8951c1790a6317a0e3022146b7943181f866febfaf1109f1df6bb63453828d29b797559c8dd48382e5614a0248b1270c6f5b4ed44b33195462fb72713810fde479610299c2acd32ebae6c1b7d1f623d71b685d3add502dfa20cc17c96fe040594bede7912482e15bbda801398e3187f1df0150a9044341632168d09320b484a2df6dd557df8f12ec4c8f1d0e561a2c85b48e69c5a464c46e3b9f74ce5619915269372b3195b29f5e177cbe84e63967d1c344b711939056725ce598d17824fb08840c2c108334ced40d9089c96a27ae13091bb7991380f0d54357c5ce7ddf1973b0f3cdb80dbabcc797688ec76a322d12bf104d7e1a8306c60556689eda3dae376a780ec7fa112c92a32562854002786eb4a74158fcb30e66f1577e6afda520072e464e6509ea10f0d4efa0d8a879bcb2c213638f36b0b496c6d9153bb66391dec66c42e86ffef18836df642f563266bd4bb68dc9db33eafcb5e2de23cbcc737c2f3a49315e9c0826c362fa0d5ae8d669d8c4e0c7e163f0d61724e9d6cdee8e3d3729bfc74900c63a966d6676818ad8cc309105fbc31e834af27d749027a1e80aae8c724a15c6b036f40e721b44cee5ea4a014732565c86d3697f1badeff4c8995c9630a89ef18367f23ed30850ea3f7d96210be4b380580c95a1b4677d42afc3a008396b202196d61b6160a488235f9d311cd3c46a11d2c8f8b60d23693968fc4a91ec920bc879bdc0a34639d0f3b031fab7e97066455fb9cb4e461799212ded3d7894def4c7da2346ca2d2c2c0857891455efb4203ca0450ab92cdd408dcdb2af92be9499176d1c463c1eb244fae4926b4c0974ed18967bdb8a3a4129a7aff00f0d30972df3d3cdffd62995b7fc4d6ce22df9f842678de89279974e8fe7128d012d616e9c64e5d63761273187f5fbfd9986fe0afb6254283609de9f867e6e512d332bc7a7964d3d30b43446864b7804720bc64f9b43c1d0030cd8e2fc842830d831936cb538b8437c6bb8aadf76e5a89aad3f35ebdf54a5cfc3d1f4bcd48d1feb6b79ea73c56ca59cb3af0a81aac8645209cdded0e58fd2768f30b6bd1a76c9d45c4e68760970e945b63af45dd00b2b4002a27f22623bd5a25975bf5dcbfc353d26c76da5351a6c4a5417b13e48343608f412a75fe49d1d7a0c99aa0c467b077de20efd6edc0437ae9880970f6da08cc3fc11d918a0dd7373afdaf9eff3324e0b7913038519aa3aa03d0f7a43a215649850652c4b3b59c5257e41263ad8047cb3309303e3535762d732513fc74c9ad4a064bd971f50fbabaf4d9dde9519d3c16adc6e6d09eceb8a079b3834d1ed3bba08bafd06fb929302200fd7ff13fac7a73ebc3d24eca3698433fd1932cbd2ee00f4b9f874cfa50ecf68654286996eb41dd25a748935b119eb123639527f95a0bdb1f0663d09f7105f221143d6ac6ab476f0c454e3a5801c84e0e8ab7484a205c0cb1c8fa5c5fddcd969616429e8266968c171aa4070a6c92e137661c6a99c489256480b7aedfe42af0dfebb95f3ee0cd53f426033c9f5bbb87fdab022ce6ce4ac2350a7780f40a5fceebbbcead07869ea1daf8e1ca1915d9e17b9e8aaeca0242c05f5ea7a49e5d27588e754a99b718f52dd2c2e5af4255e9f9052aa6d2f916218d2a3e4b3408399611b040f92cd94ff49675ff956af8c6d42e7cdffe2d979ac3f0e74515c859f67c61542dc61db81dd4bc838522af9cf6093d849a58ffc6167a9d538b5808c798cfbfeca4ba91add60ef2e562794d9b47b46319097c97c946b4ea3d06470ec8ada4ff4f0d6c0d1ede6cdf0dcb80ed4563540135758ca22256e2782b714ef2666511f90b8caa7f8acd3ddf25e8844dd7d415845210b44a0cdcf041501a6961fc54b99f1e56a1e9a36bb34fed0337e4059a3de63bd083d3fbb525ede0c21301858c83147af906d3c4435b90872b91e827f2aebb329af1abbdca4aaedbf2fb17edd6700f78d784675e8d66153cd628fb063511cca9f9893f2d0a89847efd38e3f9243d9ac2afdb6b4aa98dffbe0a1539044bb47fa9c9b1fff6d20c246783811f68c00e0f1c2c7efd50bc8b7b82177d6762fd9080425bc2004f1e5759b2e659d65529585111970df6700dd1ada693b99d3e3db632e4f0a13f5b4b20154eced47e5d5602b93cf6e2ce35056d62a113e6d5cd815e2ea2c25a7ad0da8ef88eee2b3a168585550eb566bc5e9cdade4bfdc009390eb841caaeb957ae7adc897ebd257e9eb4da9be87a8a5b255eaa15e8a8bdc4839b15dd02b38e9b33bf46d25650d3d7650b8c5f0a694b5a7f432432232efc6b134dca819f3231510410500d597177e1b5e59934c185297412544651b97ffa057470b7a76595322e2be7b2caa5e48508df2135f1b86348b81fea5e7dba8229c84fa4ac3b45c4ccb239856bc30a359b0933641a903b6866b9769583e72d594daa3542b1899da6db390fa37ceaca29cc0bc49a562ef58ce57919444c3a2ca8959c3c4f225d7bc869f71c919afbebf1d7b1c6c45f7673de1d7a7f5fe19604d429cd3521748f993b147a68f8f644a7b6ec30dc49f2a24c68e01288b587127da18dc8201fb319ff57a53cc2c93a3e5993f68791f8ce94f68530572dad6dc1ebf80ab0c65317e395550243a1ea48d71c3fa78662289a54ea6eb09d79a09e549dd73e193ab91cc1c4871b6da161cb4fb3722162d02536d61e49a1cc1e31ff75f5ddbf5fc5cb79eb5585cf36510295967c22e1f66a2e1fd60e177ee599ef379fddedd89aa30d1761c23c37447d35c84f4fcd93af54c2c927244ca881058515f2feac1db30be21f5d2b3d041473b1345fda28612b70a5422a51220e39c665c8a9b0f314c240e666f0188ebc0283a2d8cb27658c8eb079d9e4fd4733b4a0aa914905f12aec0d8b43f93025ce144c8b84592995f3929d432090bc08287526e474786c252e4f3e7cda34fe0e793f20e01f39f8c787e2e18870d4a0fd4e153aa476d0d2133134c5583ba39597b49ba25db2ac80b0665806c91c54da882347490f4ce9fb03157507c0574d2744d9916808992d32b911449ec00e1b773b4369fa7c30173d737b6a6188770174d7a15046fabb6e331b5c5e0490675255dfd0e494fb188e3f39f77591700b12898ca2b2a4d0b18df0a1b53da63f6c11db0d96b6979177fb7e4c38a6fd2f54585955adaca155927f74768dd3a8a526e0d254a12668ca12fddfd42dd5ac385cb7bf93403a2189307e8e45fbf3e376d81f536136cbfce220834d512dcc336ca51fa9ca096d3a1c7dab7ea10a6e50282b7f51a6ef44a9c072a1a2774028d54eccce3787313828a3cf3ea22830e2d9949bcfb1e38782736d1a3be28e63c42213d5ecad1af46ab6c59052c2a9c4f7f914cebf81b31223eb93e3c780ba8dab898b58a58ffef28c303f43e4a0d733e1befa6293b617576246ff1b16deb081416451da0d731c68063324ba89ab340b0d63202d6d86b52edefda4bc97563ddc12b12c840ca7682372deddd234cde6b069ae2bd4f5813a1a2c5343255f652ecaffe6c2f13098e67b381852d12b6d9faf18dc33f562a20b21bbde90db885d23c653af12808c76919b02290e609f10b1da87f3cc1e5acf3e78da2959290e5c66d0aef0fad8aa5b9ab5b401c5216050e100828efc83c96c424b0ef2500f6c479c6416407f7556ac65bb62f5ee204cca03a2c0de27791de045b1079de14d8031c6ea71c93094b45e6df60b354c2841916f1d244dfbf8d333d0cfa515481ea653ed95d2834d0e0ee54fc76ebf6fed1d5d744d1aeeaa2c04ada8642970a4b7a009df16725e892f50922f467852663903ee56a372c9d5267b0ac131a2aaa9f58c9cdc68d0659ed3b3053b40d12cb0513d57bc85e2ebcd715e84daaf6c821bc7cd37d35bb829f5690c3a5acb8224fc605818767359bff4ee687bec5065b4486a1eaee90a109153357a3a435b68a68a0f1ea3a981cae40664e66c57863ffd419c9fc908276bf80eeea7d771e12daaeae719b0019486de6d1ca3b7e2414d4579b09fbc9997fda1d354ed2f09feec6484df73d2d5600cbb775047bb5d8c242d18dbf020f7d95ef92adf38a1207fe280de5fdbd63dbadde8a14ff8159539e2ed55df7592cf3b4080f30ba29d3d4e09b182e39d575e5be5faaebc6fa5c484713f22118f849dad2269ab78538beed08ccd4fe359d84ac1e006ea58e14429b1c9e57c921b92422ac586afc1c395ff2be8684b0cc82661d461f5344e5566276f3c651077e1f7d5581f7e3472f14d8766efabc60078947bb51ab28c892f1381cd128130133f1899c7e7bb9a025184e3e2839a6ed21552b9e66d40cec0bc2f6922591d6321554c8fcc42f768131c5e8fda550dcf865a867961d597dcf46fe1f19e4460c03a4c487af18b49cf9db58a232a59a026952e3f6ba26421a745f6e850c5cd8d401d2ca7a9291f1f4bf3d6e9465fb5328da7fcb1fb7fdd1b1785ae672a0a993ba9dcac32b6dcbbd8b15b9b82db494ba81ec620569341ca3d14bc67f4e84c4069b0ff2b29bb64ac556ff568c561378a6f5f7eeb83275e7b49e2c958a94cf67e7e1ad02520c2bc9b20ab9eb75f3a34e7161dbe337aaf6668c18f8305a455a4313086f150b5cc4457aef33333a53d862eac522dd55634f046b99a3920a9b1a0d78453761a47bafe13a3d1ed2b4e6a0a2f78ba43f195bc0c81ccd2150d12c6869d3d9feb6ef1cb8a5bfc1471d5f7703a4f097ea07911d272a8006", 0xfc0}], 0x4, &(0x7f0000000580)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}], 0x18}, 0x4000001) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000600)) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x40740}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 16.218949389s ago: executing program 4 (id=1273): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x7fffffe, 0x4a8, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0xcb}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x5, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 15.898068723s ago: executing program 4 (id=1275): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 11.488553595s ago: executing program 4 (id=1286): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* '], 0x8) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4e}, @l2cap_cid_signaling={{0x4a}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x40}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x943, 0x3, 0x93}}, @l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0x7, 0x4, 0x3}}, @l2cap_info_rsp={{0xb, 0xe, 0x4}, {0xa, 0x7}}, @l2cap_conn_rsp={{0x3, 0x58, 0x8}, {0x7ff, 0x8, 0x8, 0x5}}, @l2cap_info_req={{0xa, 0x8f, 0x2}, {0x4}}, @l2cap_create_chan_rsp={{0xd, 0x27, 0x8}, {0x0, 0xad4, 0x8, 0x6}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x8, 0x6, 0x3, 0x5}}]}}, 0x53) unshare(0x62040200) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r7 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x2d, 0x2, 0x0) connect$qrtr(r9, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) connect$qrtr(r9, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 10.389465842s ago: executing program 2 (id=1291): openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x1, 0x9192, 0x2, 0xffff}, 'syz0\x00', 0x4f}) (async) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex=0x0, 0x22, 0x4, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff020000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', r1, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'lblc\x00', 0x2, 0x400000, 0x4}, 0x2c) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d962", 0x9, 0x12, 0x0, 0x0) 9.36735565s ago: executing program 2 (id=1293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd26, 0x4, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) unshare(0x4040600) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100001002abd70000200000000000000", @ANYRES32=0x0, @ANYBLOB="400001000000000014000300776c616e300000000000000000000000080004000e04000018001680a0"], 0x54}}, 0x0) 9.314427477s ago: executing program 5 (id=1294): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) shutdown(r0, 0x0) 9.158493682s ago: executing program 5 (id=1295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000005c0), 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000340), 0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r6, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 9.096902175s ago: executing program 2 (id=1296): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x4049a0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket$kcm(0x2, 0x1, 0x2) sendmsg$inet(r6, 0x0, 0x4008804) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x100000000000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x911c00, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x7) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dmm32at\x00', [0x3, 0x3, 0x7ffffff7, 0x884e1, 0x2f, 0x2007, 0x7, 0x401, 0x80ffe, 0x7, 0x4, 0x8500, 0x1001, 0x1000004, 0x5, 0x8, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x8, 0x10, 0x40000, 0x8, 0xe2df, 0x9, 0x9, 0x200, 0x3, 0x0, 0x9, 0x7fff]}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) 8.644398218s ago: executing program 4 (id=1297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000050c346f93d22ec9ad9c00000000900"/38], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000050c346f93d22ec9ad9c00000000900"/38], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000140)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="7a0af8ff7525347cbfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000072000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6993bad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785b1292fcb9c1d3079a00db453620ce72d75946c2b638f91dbef661935839c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33321d1ec72ed311740d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d07815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc3c9731c9a7bb3a4e67056433edf43fba5566a3e02200bae941d34ac81fd48f9b73126992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000480000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e4d6d089ba9b19dbe6431c7bf773634f4aac8c91aef83eaa0951d137f8f91a0a9d54f4347431fa96c0b54a503c39d4da796a0dc4a54cb6d9952feb6d282aa2557037b890dc0cf2ed230571ffafccdef2c2c32d3edbcb5ec2cb723149cbed2fbd5fe7452486401e65abb2966c85ec1fdb74b8a492f83e6dd9f2e2f4f75a18a2117b96217adc5dd29bf9192e4419594d1369c1f25e5965f9c601e47f70b0b35c4367102087b9f00c2651c1b5e3134d45a8c"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000300)=r8, 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000300)=r8, 0x4) write$cgroup_freezer_state(r7, 0x0, 0x0) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000400c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, 0x8}) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000059ace1fee6d003e1a6fb00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000059ace1fee6d003e1a6fb00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x0, 0x0, 0x4}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newchain={0x2c, 0x64, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {0xa, 0x2}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0x78}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x23dae609d0474fce}, 0x40400c0) getpid() (async) r11 = getpid() sched_setscheduler(r11, 0x1, &(0x7f0000000200)=0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r12, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) 8.603570238s ago: executing program 1 (id=1298): socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 7.257638607s ago: executing program 1 (id=1299): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e33002f8d35e35c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fa, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f04) 6.902948826s ago: executing program 3 (id=1300): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0xfe, 0x0, 0x0, 0x0, @tick, {0x0, 0xa}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000004c0)=0xff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3000, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 6.830031868s ago: executing program 2 (id=1301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a050000000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b0100000009000100e22e7a31000000001c000000090a030000000000000000000a00000208000c4000000089140000001100010000000000000000000100000a"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r3, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f0000000340)=""/140) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.517180562s ago: executing program 5 (id=1302): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0'}, 0xb) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000004c0)=0xff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpeername$unix(r0, &(0x7f0000000180), &(0x7f0000000340)=0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000180)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f00000001c0)='hugetlb', &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = syz_open_dev$media(0x0, 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200900) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0xa000000, 0x0) 6.509797761s ago: executing program 4 (id=1303): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @any, 0xff01}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r5, 0x0, 0x0, 0x10122, 0x0) fsopen(&(0x7f0000000080)='cifs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) write$sndseq(r6, 0x0, 0x0) 6.489272889s ago: executing program 3 (id=1304): socket$alg(0x26, 0x5, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f4030000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8000018008000300040000001400020065727370616e30000000000000000000140002006772657461703000000000000000000014", @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x3f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r6 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r5, r6, r5}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 6.473582109s ago: executing program 1 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) listen(0xffffffffffffffff, 0x47) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x2f, @loopback, 0x4e22, 0x1, 'wlc\x00', 0x20, 0x1b57, 0xc}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x3, 0x7, 0x0, 0x2, 0x2, "80593bfd48c86c40"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x3ff) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xdaf}}, './file0\x00'}) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xffffffffffffffff) memfd_create(0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.559089918s ago: executing program 3 (id=1306): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r4 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00000064d85688d32a5c55922cc998"], 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x1f) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000300)) 4.547726785s ago: executing program 1 (id=1307): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0402030c"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x40044) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x0, 0x4, 0x2) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) pread64(r0, &(0x7f0000000240)=""/206, 0xce, 0x6) 3.622232309s ago: executing program 5 (id=1308): syz_usb_connect(0x0, 0x343, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xc4, 0x63, 0xae, 0x10, 0xdb0, 0x871c, 0x1439, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x331, 0x3, 0x0, 0xfa, 0x0, 0x6, [{{0x9, 0x4, 0x13, 0x1, 0x5, 0xfc, 0xe6, 0xe7, 0xd, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f00bc9"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x6, 0x200, 0x1d}, {0x6, 0x24, 0x1a, 0x1, 0x4}}], [{{0x9, 0x5, 0xb, 0x0, 0x268, 0x6, 0x9, 0x7}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xa0, 0x76, 0x6, [@generic={0x82, 0x21, "60e9d5c4b642728c82b516d896177bf93096c90ba1ffade9544be156509d69bbd8b79ffcb90ee3e66cf58a8eed4f185a7c9de4c468f8414eed7baa3307275d13ee3b1e315fb9283218f8196ef8788928cc8e331c903b648f7ebbfe7c0d5518c2e8154d964121e0d2967d89bba8bc089efc4a82e253a7f834c78e0962453ef7fc"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x4, 0x8, 0xd, [@generic={0x5c, 0x6, "87916b9c60675a5ff6a509ddd857d49d6b6fceb37516154247e38a6973fb1b5c4c5bbb49e11cc1d3e0cb46f6c4b0bcc623b8d0a9dc5fe938ec0f4fc365b45cd4740ac27de5012870cb770c93af600a84e762f7f222d33aebba73"}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x75, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x0, 0x4, 0x80, [@generic={0xd1, 0x5, "f0dfc90f15a606749606cd4fc62aac465dc481ea0e9c29a79fffbd19ba7d01f57755daebeb1316d2289685324caee6472f6dfa53fb223773cbf2be3af9092e3d5fd1ebc833b2ffa1b99c46632a427d5bd20d4a48eb0f333ad66085931ba58d7da0db736f560cc527572ce4ae08c371776efc8056111242fc59792cfcf3d7729cd467d8022c31d49d30081fe296149016b5190196aca32081b5072849d9cfb60991e10460c285c0d8f82634080670ee5308476a53949a615b38687aa5faa9a6ed69e1446e435d52a29941ef93e2e3fd"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x6, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9e, 0xe}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x3, 0x95, 0xbf, 0xbd, 0xf9, [], [{{0x9, 0x5, 0x9, 0x3, 0x8, 0x9, 0x9, 0xc, [@generic={0xf, 0x31, "1ef941bd778b69d655e9eabd1d"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xea, 0xb, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x3, 0x2, 0x6, [@generic={0x61, 0x23, "2ee878f2a72f9ba1e466926f76aff0b0c3788c4f53ca4ca63c929522c672ddea38a0a2e97bb8d053d39a6eedb0184b7a6e3148f55c762f1a69046bd4fad47fd536f228dd9608b0f8e030ec55671e55bc49bb1b44a9514db2dd7d66ac829b15"}, @generic={0x78, 0x2, "06c4269840651c53ca5ba5919b3bc0e40ef67353918db8440a1f562e7f1e562fe7780f0664b7d56d16e4fcf86c2d47f7322599fc4574e9e62009e31fb5d488b3ffc6e5263f27b1667db6b2740b6758bc5784ebba91f1bd7948a6871a3b0c54e4f213915c1c4c3bfb59e5ad869d304367823f3818421a"}]}}]}}, {{0x9, 0x4, 0x58, 0xfa, 0x0, 0x10, 0x19, 0x1b, 0x8}}]}}]}}, 0x0) 3.405116493s ago: executing program 1 (id=1309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904"], 0x0) syz_usb_connect$uac1(0x3, 0xa8, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0xc1, 0x48, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x40}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0x1, "f96a9bb7f5d1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x6, 0x8, '5'}, @as_header={0x7, 0x24, 0x1, 0xc, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x9, {0x7, 0x25, 0x1, 0x1, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x63, 0x1, 0x2, 0x8, "2d86f0", "f9b7"}, @as_header={0x7, 0x24, 0x1, 0x23, 0xd, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x3, 0xe, {0x7, 0x25, 0x1, 0x1, 0xd, 0x8001}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x2, 0xb, 0xff, 0x8}, 0xf7, &(0x7f0000000100)=ANY=[@ANYBLOB="050ff70003e110018420696417b19784951a699a36373846dfc1e150452410ba4afc178995e699695d048854992a245d3a58322db6097ba2def6b8ee2a7a45f82a0e1e8f110321d6bc8ec5eb04245d2c7173a98dae1a8e0eb9d616f0dddcb431a084b817286927f6200f01ed325a3c03362a97f28cbc98e3eab2201de1e59dddc4f23706d42d359455429ae14796aca4dded590cea4c79dd71cc4528d69a33b877698db030f6bf01ca7edb24cdce560211c96386542c9ddda3e3deec27f4a71b126bab0d4952ba49744671000000000000000520c89547d60bec0c85a70e9ff80c10f76abcc30a10030000007f02090007100206075a21"], 0xa, [{0xd8, &(0x7f0000000280)=@string={0xd8, 0x3, "ab19d855fb08545093c824970aeae8f5e0a6a97bb1144b0ca88c28eef27c85bead12b4e5c701c52857504cb78c1c25bd079cff171ea7b27c3d782c77778dde245ccc6aef40a4ef3823eb5f1839de3b69e69cf6f4f908fb8861f8a61d573fd7f2ac1715f75f67c69ef944d54167ef4933174848c6e193c27c7991e08d4836f300359b210de44787990e0028c78bcd9fe5ce38d809530cea8c2ad8ed536ec3b84bd7ca10670cb48136946b02b634104c3519a3c72554ba443105d9310e72b39478f1cf14294271c9be88474f1c60f0f37cbbe700891144"}}, {0xb4, &(0x7f0000000380)=@string={0xb4, 0x3, "aba66e097fc2656d47b685eebddcb517485fd66da8c9b609292c27ec56d5dde385533041ccd53e8553eacbc9f1ef3a862f6256b667e698085e44132c22ebb4636609186ff9f8c468065e71d638c62b7f432d9f891d80cb86735c5a6086b54cc9d1d7f6813c6f9f2195318841e8b475be0b3958de23486d87b5eb572d841fbc54bd1cc232d4940afa314c2b35b291dd9b85140f2d026cf10f40057ef6d7a11a1a92cf2cda4d577474ba398a217197089f9a64"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc04}}, {0x2e, &(0x7f0000000480)=@string={0x2e, 0x3, "bad13f0a3c0f34eafe7648c3bcd8068fe0993075a7d55944ba5664ca0057f8cef194ccc648a512aec72f7e7f"}}, {0xd5, &(0x7f00000004c0)=@string={0xd5, 0x3, "6a1224878b92cf21f9b448491a9a3c15c04b12e9125374ca4a514015348e845b30746a8180b36192380f97fe8b8ed063cc6cbdc1af24a647b5eb1cb4ee7260b6e8db75369164e23585b4f8e0885db3e51677c90bde5bb2f6e08bc300824b836ff9a925a3edd23c5c39e81ebfa44f8e83487754fb9f2fe6de3d97fb0fdad2839db04f1c5767245cd40169183e845cb234893c21c282be40a8c14d43545fa705b7137b3d86ac459838dd3ebacb8d019acedb1521d7d742cba64e28eed2a7aff4eae2ea578b9361eb075fe9c38017274283839d47"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x449}}, {0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="0696ea639375b0a94d7717ffb0d7e343e41d1bd0ff08befdf82d8bb74ea69c953331a2525c9af1bfaa9d303159810bedbd1ba2d4bcd5a8cfb9700566cbf025fdc4659305f53eef206bf359e68bac68674c614de2043d0a74f52345e0ed7fc087728533f884ceb5ccdb94218f597d52cec6b45a46c2495ff9715e019f96fbd3f5c40931c96866f125e662a30a61ed353350281cb549b8"]}, {0x8f, &(0x7f0000000640)=@string={0x8f, 0x3, "b1466c073c20e2b49a3a0b6746410108dd148c2938d52b40c05f0cffdaceb9110633326cd2196930f9dd0fd5e83921e3f9241b3d1e3e00f5233f9383f747d033fb85d18e35349826a3124d329bdb067d6f33e2166a69d84d8f1d2a27a206d8a7b8ef9e78022da0becd041541795030a1fd77531c2252d899181b6fa6f15403315f166d5a72c1f939eeff661f7b"}}, {0x3, &(0x7f0000000700)=@string={0x3, 0x3, '}'}}]}) 3.397128737s ago: executing program 2 (id=1310): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x3, @null, 0x8}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf4, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1000000000000000, 0x7, 0x109e93, 0x7fffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0x200000010000, 0x6, 0x5, 0x100020000001], 0xd5d5c004, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x6}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = syz_io_uring_setup(0xac9, &(0x7f0000000600)={0x0, 0x3599, 0x8, 0x1, 0x1421a}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r3, 0x6efc, 0x3900, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8000000000000088}, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0x5, 0x34524742, 0x5, 0x4, [{0x8, 0x9}, {0x7, 0x9}, {0x3, 0x1}, {0xd, 0x8}, {0xd, 0xe0}, {0x200, 0x7ff}, {0x2, 0x3}, {0x3, 0xa}], 0xff, 0x28, 0x8, 0x1, 0x5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1e8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x8, 0x0, 0x0}}, 0x56) r8 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="6c4d2e5ad106dc8cbc347c791641f1c0449a9ce05a2d9ce280fb87a22f71741adb84c454427495a421746dcc6fe8b9cd", 0x30}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}], 0x1, 0x4800) 3.272583154s ago: executing program 3 (id=1311): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff51ae00"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5e8, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0xd3, &(0x7f0000000240)="686254dfb3d7a05cb4e3c385e828251976ceb62128f92cb1f2ac215149bf3ad03f487d212e409e5ae8562a442e9b88f312c1513228d95700b5f401fda749a17c82d54bda5fbbde64ce61082f27ef2fed34b9247501b3559cfa7ce452d00757a76653ab14a767f8d9ac94d026342b4d9d5fab64a7d727b07021ab55072b24ebe46e9aa1eff82076f1d801267332b171ec33a1c7b333eed623d8dfb4c99babf832d936cdbe1961b38b3cdcd46b9387d1353a1cc27dbaa72ff0746f13c994ac9956599f80a0cd8c6c37571cc51a9597b3c947b9f5"}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$read(0xb, r2, &(0x7f0000000100)=""/123, 0x7b) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000480)="930dae12", 0x4}], 0x1) 3.209484464s ago: executing program 3 (id=1312): fanotify_init(0x8, 0x80000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x80, 0x2, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040002) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0x3, 0xc}, {0xfff3, 0xfff1}, {0x10, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000380)) write$binfmt_aout(r1, &(0x7f00000009c0)=ANY=[@ANYRES32=r1, @ANYBLOB="34d1ca42f42f5429cb78ba2ce9188d0e88c24efae41808be47fc5741392d4ddd09986903a69569af9db62f155238ea5b500eeca52ce9d4a929936f92ef42e5e3d03a53e6f251f8d7204ad0024fcc80d242f49b19f98ee8de36df9c57f14d0b3d6ab83665964e17fcb92e94a554e77b1f9ddb98c7bc23ec9aae4a00f2b3770a67e80f7f321ff14e97fda3d1b347b375b54ee574d7164756790930ad450202f73c9fba08e8cba1a3f50b27249e07878252b6bac01c0bb498ae02714fa15c8d8ad329a566fd31622fc337a44ff3e1cba3fb8bb2ea91874c314b3073f3b9cf3952d051c969bc978e", @ANYRESHEX=r0, @ANYRES64=r5, @ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRESDEC=r0], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYRES64], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kvm_dirty_ring_exit\x00', r8, 0x0, 0x3ff}, 0x18) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r9, &(0x7f00000020c0)={0x2020}, 0x2020) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x82, &(0x7f0000000080)={r11}, 0x8) 2.058094395s ago: executing program 1 (id=1313): openat(0xffffffffffffffff, 0x0, 0x40042, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000080)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0xf}) ioctl$int_in(r6, 0x5452, &(0x7f0000002480)=0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$FUSE(r7, &(0x7f0000002240)={0x2020}, 0x2020) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x5e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) 2.002797238s ago: executing program 5 (id=1314): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x6, &(0x7f00000000c0), &(0x7f0000000300)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x11, r4) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x11, r4) ptrace(0x10, r6) ptrace(0x11, r6) r7 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) 1.782651708s ago: executing program 2 (id=1315): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmget(0x3, 0x2000, 0x200, &(0x7f000012f000/0x2000)=nil) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x700000a, 0x12, r4, 0x27c08000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 400.131µs ago: executing program 5 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x134, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9, 0x0, 0x0, 0x3}, {0x8, 0xc}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_TOKEN={0xfffffffffffffcd8, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xd9}, @IFLA_INET6_TOKEN={0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x2f}, @IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x10}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xeb}]}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x3ffe}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x18, 0x0, 0x0, 0x54}]}}]}]}, 0x134}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x7ff, 0x81, {{0x6, 0x4, 0x1, 0x32, 0x18, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000019300)={@local, @empty, 0x0}, &(0x7f0000019340)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000019400)={'syztnl1\x00', &(0x7f0000019380)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x6, 0x4, {{0x11, 0x4, 0x0, 0x12, 0x44, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @cipso={0x86, 0x2f, 0x2, [{0x7, 0xc, "c1e33e9ca60281cfd1aa"}, {0x2, 0xa, "49793481ab81d0ea"}, {0x6, 0x2}, {0x2, 0xb, "18f09c13e2139ac2c8"}, {0x1, 0x6, "828dad1e"}]}]}}}}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x14c, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x7, 0x0, 0x15, 0x6, 0x20, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008030}, 0x3004408c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000194c0)={'ip6gre0\x00', &(0x7f0000019440)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x9, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, 0x8, 0x7800, 0x81, 0xa}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000019780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000019740)={&(0x7f0000019500)={0x204, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa9c89a9f3718ad2f}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r11, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r11, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 0s ago: executing program 3 (id=1317): fcntl$notify(0xffffffffffffffff, 0x402, 0x21) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x21) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000001840)=@udp6}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000085100e896ebbe42a00000c00068008000600ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1725, &(0x7f0000000740)={0x0, 0xbe47, 0x20, 0x0, 0xfffffffc}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, &(0x7f0000000080)=0xffffffffffffff23) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f000000028000", 0x2b}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31f43bd1d62288c403eee7db47d164886c1fbb599665397adefcfe53401743b08ba4a79a7e140e09096a2c2354f66e94015f44215aa79ea38c482f4ec92b3552e7b6232db6f8736300d5845dc948128f60e4c1fd", 0xa7}], 0x2}, 0x4) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): 319.712263][ T5881] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 319.753746][ T9149] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 319.845968][ T5881] usb 2-1: device descriptor read/64, error -71 [ 319.914736][ T5861] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 319.956043][ T5861] usb 5-1: device descriptor read/8, error -71 [ 320.022244][ T5881] usb usb2-port1: attempt power cycle [ 320.136315][ T5861] usb usb5-port1: unable to enumerate USB device [ 320.383917][ T5881] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 320.406530][ T5881] usb 2-1: device descriptor read/8, error -71 [ 320.662268][ T5881] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 321.056446][ T5861] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 321.056851][ T5874] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 321.078154][ T9166] syz.4.765 (9166): drop_caches: 2 [ 321.092825][ T5881] usb 2-1: device descriptor read/8, error -71 [ 321.212458][ T5881] usb usb2-port1: unable to enumerate USB device [ 321.223606][ T5874] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 321.232947][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.243233][ T5861] usb 4-1: Invalid ep0 maxpacket: 32 [ 321.250050][ T5874] usb 3-1: config 0 descriptor?? [ 321.372257][ T5861] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 321.507726][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 321.520631][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 321.534479][ T5861] usb 4-1: Invalid ep0 maxpacket: 32 [ 321.544242][ T5861] usb usb4-port1: attempt power cycle [ 321.550843][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 321.893057][ T5861] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 321.954998][ T5861] usb 4-1: Invalid ep0 maxpacket: 32 [ 322.092431][ T5861] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 322.134247][ T5861] usb 4-1: Invalid ep0 maxpacket: 32 [ 322.141143][ T5861] usb usb4-port1: unable to enumerate USB device [ 322.540697][ T9180] qnx6: unable to read the first superblock [ 322.564365][ T9180] qnx6: unable to read the first superblock [ 322.570856][ T9180] qnx6: unable to read the first superblock [ 322.754718][ T5874] usb 3-1: Cannot set autoneg [ 322.760369][ T5874] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 322.784784][ T5874] usb 3-1: USB disconnect, device number 34 [ 323.040272][ T9188] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 323.524873][ T30] audit: type=1400 audit(1767310684.769:493): avc: denied { bind } for pid=9199 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 325.629920][ T9230] [U]  [ 325.639554][ T9230] [U] K{‘ [ 325.642833][ T9230] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 325.749603][ T9230] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 325.842376][ T9230] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 325.965931][ T9230] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 326.007911][ T9230] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 326.033492][ T9217] syz.4.779 (9217): drop_caches: 2 [ 326.173853][ T9230] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 326.211368][ T9230] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 326.223353][ T9230] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/< rejected, failed to enable media [ 330.422386][ T5861] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 330.436296][ T9317] netlink: 44 bytes leftover after parsing attributes in process `syz.3.808'. [ 330.502966][ T9323] netlink: 48 bytes leftover after parsing attributes in process `syz.3.810'. [ 330.594546][ T5861] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 330.602751][ T5861] usb 3-1: config 0 has no interface number 0 [ 330.608899][ T5861] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.619988][ T5861] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 330.630691][ T5861] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 330.642415][ T5861] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 330.653500][ T5861] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 330.664310][ T5861] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.677370][ T5861] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 330.686504][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.696679][ T5861] usb 3-1: config 0 descriptor?? [ 330.702994][ T9315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 330.713485][ T9315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 330.723456][ T5861] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 330.941975][ T30] audit: type=1400 audit(1767310692.179:498): avc: denied { write } for pid=9314 comm="syz.2.807" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 330.966512][ T30] audit: type=1400 audit(1767310692.189:499): avc: denied { open } for pid=9314 comm="syz.2.807" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 330.996346][ T5861] usb 3-1: USB disconnect, device number 35 [ 331.007260][ T5861] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 332.537408][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 332.544140][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 332.716342][ T9337] wireguard0: entered promiscuous mode [ 332.721871][ T9337] wireguard0: entered allmulticast mode [ 332.734411][ T9339] wireguard1: entered promiscuous mode [ 332.739993][ T9339] wireguard1: entered allmulticast mode [ 332.748453][ T9339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9339 comm=syz.3.817 [ 332.760930][ T9337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9337 comm=syz.3.817 [ 333.666816][ T9354] lo speed is unknown, defaulting to 1000 [ 333.991282][ T30] audit: type=1400 audit(1767310695.229:500): avc: denied { append } for pid=9362 comm="syz.2.823" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 334.200787][ T9373] netlink: 44 bytes leftover after parsing attributes in process `syz.2.823'. [ 334.622134][ T9374] lo speed is unknown, defaulting to 1000 [ 334.624306][ T30] audit: type=1400 audit(1767310695.849:501): avc: denied { write } for pid=9368 comm="syz.4.824" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 334.664391][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.824'. [ 334.676798][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.824'. [ 334.732455][ T5926] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 334.966050][ T5926] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 334.987876][ T5926] usb 2-1: config 0 interface 0 has no altsetting 0 [ 335.484951][ T5926] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 335.535134][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 335.548874][ T5926] usb 2-1: Product: syz [ 335.559795][ T5926] usb 2-1: Manufacturer: syz [ 335.576916][ T5926] usb 2-1: SerialNumber: syz [ 335.599870][ T5926] usb 2-1: config 0 descriptor?? [ 335.660758][ T5926] usb 2-1: selecting invalid altsetting 0 [ 335.772265][ T7569] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 335.929253][ T7569] usb 3-1: device descriptor read/64, error -71 [ 336.242297][ T7569] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 336.372271][ T7569] usb 3-1: device descriptor read/64, error -71 [ 336.483577][ T7569] usb usb3-port1: attempt power cycle [ 336.488996][ T30] audit: type=1400 audit(1767310697.729:502): avc: denied { ioctl } for pid=9400 comm="syz.3.831" path="socket:[21368]" dev="sockfs" ino=21368 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 336.853106][ T7569] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 336.882981][ T7569] usb 3-1: device descriptor read/8, error -71 [ 337.233728][ T9407] dlm: Unknown command passed to DLM device : 33 [ 337.233728][ T9407] [ 337.252401][ T7569] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 337.594014][ T7569] usb 3-1: device descriptor read/8, error -71 [ 337.612091][ T5881] usb 2-1: USB disconnect, device number 31 [ 337.703644][ T7569] usb usb3-port1: unable to enumerate USB device [ 337.776228][ T30] audit: type=1400 audit(1767310699.019:503): avc: denied { read } for pid=9412 comm="syz.1.835" path="socket:[21385]" dev="sockfs" ino=21385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 338.470437][ T9433] input input41: cannot allocate more than FF_MAX_EFFECTS effects [ 338.738775][ T9437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.841'. [ 340.181416][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.845'. [ 340.992033][ T9459] FAULT_INJECTION: forcing a failure. [ 340.992033][ T9459] name failslab, interval 1, probability 0, space 0, times 0 [ 341.006246][ T11] block nbd0: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 30 seconds [ 341.018390][ T11] block nbd0: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 30 seconds [ 341.029548][ T11] block nbd0: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 30 seconds [ 341.042267][ T11] block nbd0: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 30 seconds [ 341.060518][ T9459] CPU: 1 UID: 0 PID: 9459 Comm: syz.4.848 Not tainted syzkaller #0 PREEMPT(full) [ 341.060541][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.060550][ T9459] Call Trace: [ 341.060555][ T9459] [ 341.060560][ T9459] dump_stack_lvl+0x16c/0x1f0 [ 341.060586][ T9459] should_fail_ex+0x512/0x640 [ 341.060607][ T9459] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 341.060626][ T9459] should_failslab+0xc2/0x120 [ 341.060646][ T9459] kmem_cache_alloc_node_noprof+0x86/0x800 [ 341.060662][ T9459] ? __alloc_skb+0x156/0x410 [ 341.060685][ T9459] ? __alloc_skb+0x156/0x410 [ 341.060699][ T9459] __alloc_skb+0x156/0x410 [ 341.060713][ T9459] ? __alloc_skb+0x35d/0x410 [ 341.060727][ T9459] ? __pfx___alloc_skb+0x10/0x10 [ 341.060742][ T9459] ? netlink_autobind.isra.0+0x158/0x370 [ 341.060759][ T9459] netlink_alloc_large_skb+0x69/0x140 [ 341.060773][ T9459] netlink_sendmsg+0x698/0xdd0 [ 341.060787][ T9459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.060804][ T9459] ____sys_sendmsg+0xa5d/0xc30 [ 341.060818][ T9459] ? copy_msghdr_from_user+0x10a/0x160 [ 341.060829][ T9459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.060848][ T9459] ___sys_sendmsg+0x134/0x1d0 [ 341.060864][ T9459] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.060890][ T9459] __sys_sendmsg+0x16d/0x220 [ 341.060901][ T9459] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.060920][ T9459] do_syscall_64+0xcd/0xf80 [ 341.060934][ T9459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.060945][ T9459] RIP: 0033:0x7f423fb8f749 [ 341.060953][ T9459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.060963][ T9459] RSP: 002b:00007f4240963038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.060973][ T9459] RAX: ffffffffffffffda RBX: 00007f423fde5fa0 RCX: 00007f423fb8f749 [ 341.060980][ T9459] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 341.060986][ T9459] RBP: 00007f4240963090 R08: 0000000000000000 R09: 0000000000000000 [ 341.060992][ T9459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.060997][ T9459] R13: 00007f423fde6038 R14: 00007f423fde5fa0 R15: 00007ffd7b0fe0d8 [ 341.061011][ T9459] [ 341.061441][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.346715][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.355531][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.363375][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.370924][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.945229][ T9460] lo speed is unknown, defaulting to 1000 [ 342.233550][ T5924] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 342.423773][ T5924] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 342.433077][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.444456][ T5924] usb 3-1: config 0 descriptor?? [ 342.664652][ T9460] chnl_net:caif_netlink_parms(): no params data found [ 342.982374][ T5861] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 343.349890][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.398452][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.412304][ T5819] Bluetooth: hci5: command tx timeout [ 343.419010][ T9460] bridge_slave_0: entered allmulticast mode [ 343.436545][ T9460] bridge_slave_0: entered promiscuous mode [ 343.458769][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.462232][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 343.487100][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.487585][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.506280][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.530784][ T9460] bridge_slave_1: entered allmulticast mode [ 343.533247][ T5861] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 343.549593][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.565423][ T9460] bridge_slave_1: entered promiscuous mode [ 343.649310][ T5861] usb 5-1: config 0 descriptor?? [ 343.664359][ T5924] usb 3-1: Cannot set autoneg [ 343.685012][ T5924] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 343.732479][ T5924] usb 3-1: USB disconnect, device number 40 [ 343.739802][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.912861][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.076168][ T9460] team0: Port device team_slave_0 added [ 344.084656][ T9460] team0: Port device team_slave_1 added [ 344.166634][ T9505] netlink: 'syz.1.859': attribute type 4 has an invalid length. [ 344.174402][ T9505] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.859'. [ 344.220817][ T9506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9506 comm=syz.1.859 [ 344.591120][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.599514][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.625456][ T9460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.640978][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.648922][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.675063][ T9460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.079406][ T9460] hsr_slave_0: entered promiscuous mode [ 345.112308][ T9460] hsr_slave_1: entered promiscuous mode [ 345.156592][ T9460] debugfs: 'hsr0' already exists in 'hsr' [ 345.176293][ T9460] Cannot create hsr debugfs directory [ 345.325475][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 345.493099][ T5819] Bluetooth: hci5: command tx timeout [ 345.838189][ T9460] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 345.858688][ T9460] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 345.896265][ T9460] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 345.905081][ T9460] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 346.001652][ T9460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.036951][ T9460] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.064627][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.064681][ T7925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.066073][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.066116][ T7925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.307456][ T9460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.340663][ T5861] usbhid 5-1:0.0: can't add hid device: -71 [ 346.340748][ T5861] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 346.349028][ T5861] usb 5-1: USB disconnect, device number 34 [ 346.426053][ T9540] netlink: 88 bytes leftover after parsing attributes in process `syz.4.865'. [ 347.524788][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.868'. [ 347.618949][ T5819] Bluetooth: hci5: command tx timeout [ 347.827251][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.866'. [ 347.836552][ T5861] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 347.844895][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.866'. [ 347.970803][ T9460] veth0_vlan: entered promiscuous mode [ 347.988017][ T9460] veth1_vlan: entered promiscuous mode [ 348.076880][ T9565] netlink: 'syz.3.870': attribute type 4 has an invalid length. [ 348.084672][ T9565] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.870'. [ 348.131941][ T9566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9566 comm=syz.3.870 [ 348.602738][ T5861] usb 2-1: Using ep0 maxpacket: 8 [ 348.625402][ T5861] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 348.637592][ T5861] usb 2-1: config 0 has no interface number 0 [ 348.656170][ T5861] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.675607][ T5861] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 348.701736][ T5861] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 348.714401][ T5861] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.822318][ T5861] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 348.835763][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.849206][ T5861] usb 2-1: Product: syz [ 348.857089][ T5861] usb 2-1: Manufacturer: syz [ 348.894382][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 348.930303][ T5861] usb 2-1: SerialNumber: syz [ 348.945934][ T5861] usb 2-1: config 0 descriptor?? [ 349.055217][ T9460] veth0_macvtap: entered promiscuous mode [ 349.071381][ T9460] veth1_macvtap: entered promiscuous mode [ 349.093791][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.114355][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.131558][ T6077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.145423][ T6077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.216272][ T5861] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 349.227406][ T6077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.256974][ T5861] usb 2-1: USB disconnect, device number 32 [ 349.277803][ T9576] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 349.302127][ T6077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.471788][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 349.642699][ T5819] Bluetooth: hci5: command tx timeout [ 349.763054][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.839904][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.229347][ T6077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.272324][ T6077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.315408][ T30] audit: type=1400 audit(1767310711.529:504): avc: denied { mounton } for pid=9460 comm="syz-executor" path="/root/syzkaller.GKkswv/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 350.406040][ T30] audit: type=1400 audit(1767310711.539:505): avc: denied { mounton } for pid=9460 comm="syz-executor" path="/root/syzkaller.GKkswv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 350.492262][ T30] audit: type=1400 audit(1767310711.539:506): avc: denied { mounton } for pid=9460 comm="syz-executor" path="/root/syzkaller.GKkswv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 350.797494][ T30] audit: type=1400 audit(1767310711.609:507): avc: denied { mounton } for pid=9460 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 350.850178][ T30] audit: type=1400 audit(1767310711.909:508): avc: denied { ioctl } for pid=9599 comm="syz.1.878" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 351.105518][ T849] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 351.148885][ T30] audit: type=1400 audit(1767310712.379:509): avc: denied { connect } for pid=9602 comm="syz.5.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 351.757217][ T849] usb 3-1: unable to get BOS descriptor or descriptor too short [ 351.767069][ T849] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 351.779131][ T849] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 352.347685][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.355740][ T849] usb 3-1: Product: syz [ 352.359875][ T849] usb 3-1: Manufacturer: syz [ 352.364702][ T849] usb 3-1: SerialNumber: syz [ 352.464739][ T30] audit: type=1400 audit(1767310713.709:510): avc: denied { lock } for pid=9619 comm="syz.1.882" path="socket:[22417]" dev="sockfs" ino=22417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 352.732508][ T849] usb 3-1: reset high-speed USB device number 41 using dummy_hcd [ 352.982442][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'. [ 353.328687][ T9632] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 353.335465][ T9632] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 353.548688][ T9632] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 353.554684][ T9632] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 353.562864][ T849] usb 3-1: device descriptor read/64, error -71 [ 353.584408][ T9632] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 353.590331][ T9632] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 353.607592][ T9632] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 353.613799][ T9632] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 353.623454][ T9632] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 353.629371][ T9632] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 353.652854][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 354.332877][ T849] usb 3-1: reset high-speed USB device number 41 using dummy_hcd [ 354.406033][ T9643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53776 sclass=netlink_route_socket pid=9643 comm=syz.3.887 [ 354.872371][ T9654] syzkaller0: entered promiscuous mode [ 354.877874][ T9654] syzkaller0: entered allmulticast mode [ 355.184023][ T849] usb 3-1: USB disconnect, device number 41 [ 355.256157][ T9668] netlink: 'syz.3.894': attribute type 4 has an invalid length. [ 356.732292][ T849] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 356.744214][ T9685] input input43: cannot allocate more than FF_MAX_EFFECTS effects [ 360.876352][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.889754][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.000060][ T849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.060308][ T849] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.147510][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.185153][ T849] usb 5-1: config 0 descriptor?? [ 361.199394][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 361.240581][ T849] usb 5-1: can't set config #0, error -71 [ 361.268079][ T849] usb 5-1: USB disconnect, device number 35 [ 362.363014][ T9716] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.903'. [ 362.434423][ T9715] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.903'. [ 363.644096][ T5926] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 363.942776][ T5926] usb 2-1: device descriptor read/64, error -71 [ 364.182387][ T5926] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 364.283465][ T5861] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 364.363304][ T5926] usb 2-1: device descriptor read/64, error -71 [ 364.454671][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 364.483822][ T5926] usb usb2-port1: attempt power cycle [ 364.512862][ T5861] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 364.542254][ T5861] usb 3-1: can't read configurations, error -22 [ 364.850583][ T5861] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 364.922402][ T5926] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 365.102402][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 365.161986][ T9768] Bluetooth: MGMT ver 1.23 [ 365.192803][ T5861] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 365.236484][ T5861] usb 3-1: can't read configurations, error -22 [ 365.245806][ T9768] CIFS: VFS: Malformed UNC in devname [ 365.286333][ T5861] usb usb3-port1: attempt power cycle [ 365.923775][ T5926] usb 2-1: device descriptor read/8, error -71 [ 366.262275][ T5861] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 366.325984][ T9772] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff0xffffffffffffffff00000000000000000000' [ 366.404694][ T5861] usb 3-1: device descriptor read/8, error -71 [ 366.422238][ T5926] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 366.452580][ T5926] usb 2-1: device descriptor read/8, error -71 [ 366.953261][ T5926] usb usb2-port1: unable to enumerate USB device [ 367.202548][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 368.394901][ T30] audit: type=1400 audit(1767310729.639:511): avc: denied { connect } for pid=9795 comm="syz.3.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 368.532340][ T5926] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 368.694586][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.721717][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 368.744087][ T5926] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 368.765234][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.781421][ T9810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.786754][ T5926] usb 3-1: Product: syz [ 368.805737][ T5926] usb 3-1: Manufacturer: syz [ 368.816310][ T9810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.818126][ T5926] usb 3-1: SerialNumber: syz [ 368.850334][ T5926] usb 3-1: config 0 descriptor?? [ 368.868562][ T5926] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 368.903730][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.936839][ T5926] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 368.959381][ T5926] usb 3-1: media controller created [ 368.993072][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.163302][ T5926] DVB: Unable to find symbol tda10046_attach() [ 369.182249][ T5926] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 369.211224][ T5926] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 369.842262][ T6249] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 370.355639][ T5926] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 370.374715][ T5926] usb 3-1: USB disconnect, device number 46 [ 370.393444][ T6249] usb 2-1: device descriptor read/64, error -71 [ 370.438969][ T9835] bridge_slave_0: left allmulticast mode [ 370.473381][ T9835] bridge_slave_0: left promiscuous mode [ 370.479161][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.527509][ T9835] bridge_slave_1: left allmulticast mode [ 370.555620][ T9835] bridge_slave_1: left promiscuous mode [ 370.561396][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.619282][ T9835] bond0: (slave bond_slave_0): Releasing backup interface [ 370.682462][ T6249] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 370.710753][ T9835] bond_slave_0: left allmulticast mode [ 370.811879][ T9835] bond0: (slave bond_slave_1): Releasing backup interface [ 370.852292][ T6249] usb 2-1: device descriptor read/64, error -71 [ 370.871023][ T9835] bond_slave_1: left allmulticast mode [ 370.919684][ T9835] team0: Port device team_slave_0 removed [ 370.958276][ T9835] team0: Port device team_slave_1 removed [ 370.962504][ T6249] usb usb2-port1: attempt power cycle [ 370.981857][ T9835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.001204][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 371.026263][ T9835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.057152][ T9835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.065525][ T9835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.082502][ T11] block nbd0: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 60 seconds [ 371.094671][ T11] block nbd0: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 60 seconds [ 371.103418][ T9835] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.105670][ T11] block nbd0: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 60 seconds [ 371.132604][ T11] block nbd0: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 60 seconds [ 371.186044][ T9837] team0: Mode changed to "loadbalance" [ 371.212724][ T9840] vlan0: entered promiscuous mode [ 371.258097][ T9840] team0: Port device vlan0 added [ 371.322854][ T6249] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 371.368936][ T6249] usb 2-1: device descriptor read/8, error -71 [ 371.854504][ T6249] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 372.453662][ T9867] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 372.491381][ T6249] usb 2-1: device descriptor read/8, error -71 [ 372.595497][ T9867] Error validating options; rc = [-22] [ 372.622427][ T6249] usb usb2-port1: unable to enumerate USB device [ 373.317951][ T9883] IPv6: Can't replace route, no match found [ 373.948994][ T9887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.940'. [ 374.079639][ T30] audit: type=1400 audit(1767310735.289:512): avc: denied { ioctl } for pid=9885 comm="syz.3.940" path="socket:[23894]" dev="sockfs" ino=23894 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 374.206772][ T9888] syz.2.935 (9888): drop_caches: 2 [ 374.281801][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.941'. [ 375.512274][ T6249] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 375.753266][ T9909] FAULT_INJECTION: forcing a failure. [ 375.753266][ T9909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.766344][ T9909] CPU: 1 UID: 0 PID: 9909 Comm: syz.5.946 Not tainted syzkaller #0 PREEMPT(full) [ 375.766366][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.766376][ T9909] Call Trace: [ 375.766381][ T9909] [ 375.766385][ T9909] dump_stack_lvl+0x16c/0x1f0 [ 375.766402][ T9909] should_fail_ex+0x512/0x640 [ 375.766420][ T9909] _copy_from_user+0x2e/0xd0 [ 375.766436][ T9909] copy_msghdr_from_user+0x98/0x160 [ 375.766447][ T9909] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 375.766464][ T9909] ___sys_sendmsg+0xfe/0x1d0 [ 375.766474][ T9909] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.766500][ T9909] __sys_sendmsg+0x16d/0x220 [ 375.766510][ T9909] ? __pfx___sys_sendmsg+0x10/0x10 [ 375.766529][ T9909] do_syscall_64+0xcd/0xf80 [ 375.766543][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.766554][ T9909] RIP: 0033:0x7ff80298f749 [ 375.766563][ T9909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.766573][ T9909] RSP: 002b:00007ff8038a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.766583][ T9909] RAX: ffffffffffffffda RBX: 00007ff802be5fa0 RCX: 00007ff80298f749 [ 375.766589][ T9909] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 375.766595][ T9909] RBP: 00007ff8038a1090 R08: 0000000000000000 R09: 0000000000000000 [ 375.766601][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.766607][ T9909] R13: 00007ff802be6038 R14: 00007ff802be5fa0 R15: 00007ffcd49c2638 [ 375.766620][ T9909] [ 376.462276][ T6249] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 376.512270][ T6249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.527793][ T9915] fuse: Unknown parameter 'acerPid: 0 [ 376.527793][ T9915] Uid: 0 0 0 0 [ 376.527793][ T9915] Gid: 0 0 0 0 [ 376.527793][ T9915] FDSize: 256 [ 376.527793][ T9915] Groups: 0 10 [ 376.527793][ T9915] NStgid: 707 [ 376.527793][ T9915] NSpid: 708 [ 376.527793][ T9915] NSpgid: 707 [ 376.527793][ T9915] NSsid: 0 [ 376.527793][ T9915] Kthread: 0 [ 376.527793][ T9915] VmPeak: 102032 kB [ 376.527793][ T9915] VmSize: 102032 kB [ 376.527793][ T9915] VmLck: 0 kB [ 376.527793][ T9915] VmPin: 0 kB [ 376.527793][ T9915] VmHWM: 24224 kB [ 376.527793][ T9915] VmRSS: 24224 kB [ 376.527793][ T9915] RssAnon: 1336 kB [ 376.527793][ T9915] RssFile: 22888 kB [ 376.527793][ T9915] RssShmem: 0 kB [ 376.527793][ T9915] VmData: 36588 kB [ 376.527793][ T9915] VmStk: 132 kB [ 376.527793][ T9915] VmExe: 1684 kB [ 376.527793][ T9915] VmLib: 8 kB [ 376.527793][ T9915] VmPTE: 128 kB [ 376.527793][ T9915] VmSwap: 0 kB [ 376.527793][ T9915] HugetlbPages: 0 kB [ 376.527793][ T9915] CoreDumping: 0 [ 376.527793][ T9915] THP_enabled: 1 [ 376.527793][ T9915] untag_mask: 0xffffffffffffffff [ 376.527793][ T9915] Threads: 2 [ 376.527793][ T9915] SigQ: 0/12970 [ 376.527793][ T9915] SigPnd: 0000000000000000 [ 376.527793][ T9915] ShdPnd: 0000000000000000 [ 376.527793][ T9915] SigBlk: 0000000000000000 [ 376.527793][ T9915] SigIgn: fffffffefffaba35 [ 376.527793][ T9915] SigCgt: 0000000100010440 [ 376.527793][ T9915] CapInh: 0000000000000000 [ 376.527793][ T9915] CapPrm: 000001ffff77ffff [ 376.527793][ T9915] CapEff: 000001ffff77ffff [ 376.527793][ T9915] CapBnd: 000001ffffffffff [ 376.527793][ T9915] CapAmb: 0000000000000000 [ 376.527793][ T9915] NoNewPrivs: 0 [ 376.527793][ T9915] Seccomp: 0 [ 376.527793][ T9915] Seccomp_filters: 0 [ 376.527793][ T9915] Speculation_Store_Bypass: thread vulnerable [ 376.527793][ T9915] SpeculationIndirectBranch: conditional enabled [ 376.527793][ T9915] Cpus_allowed: 3 [ 376.536657][ T6249] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 376.743543][ T9913] lo speed is unknown, defaulting to 1000 [ 377.248439][ T9919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.948'. [ 377.481459][ T6249] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 377.489833][ T6249] usb 5-1: Product: syz [ 377.494518][ T6249] usb 5-1: Manufacturer: syz [ 377.499120][ T6249] usb 5-1: SerialNumber: syz [ 377.507182][ T6249] usb 5-1: config 0 descriptor?? [ 377.654374][ T6249] usb 5-1: selecting invalid altsetting 0 [ 377.677963][ T9925] FAULT_INJECTION: forcing a failure. [ 377.677963][ T9925] name failslab, interval 1, probability 0, space 0, times 0 [ 377.704870][ T9925] CPU: 1 UID: 0 PID: 9925 Comm: syz.1.952 Not tainted syzkaller #0 PREEMPT(full) [ 377.704893][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.704903][ T9925] Call Trace: [ 377.704909][ T9925] [ 377.704916][ T9925] dump_stack_lvl+0x16c/0x1f0 [ 377.704942][ T9925] should_fail_ex+0x512/0x640 [ 377.704966][ T9925] ? fs_reclaim_acquire+0xae/0x150 [ 377.704990][ T9925] should_failslab+0xc2/0x120 [ 377.705013][ T9925] __kmalloc_noprof+0xeb/0x910 [ 377.705039][ T9925] ? tomoyo_encode2+0x100/0x3e0 [ 377.705066][ T9925] ? tomoyo_encode2+0x100/0x3e0 [ 377.705092][ T9925] tomoyo_encode2+0x100/0x3e0 [ 377.705118][ T9925] tomoyo_encode+0x29/0x50 [ 377.705138][ T9925] tomoyo_realpath_from_path+0x18f/0x6e0 [ 377.705166][ T9925] tomoyo_path_number_perm+0x245/0x580 [ 377.705184][ T9925] ? tomoyo_path_number_perm+0x237/0x580 [ 377.705204][ T9925] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 377.705224][ T9925] ? find_held_lock+0x2b/0x80 [ 377.705266][ T9925] ? find_held_lock+0x2b/0x80 [ 377.705287][ T9925] ? hook_file_ioctl_common+0x144/0x410 [ 377.705314][ T9925] ? __fget_files+0x20e/0x3c0 [ 377.705340][ T9925] security_file_ioctl+0x9b/0x240 [ 377.705362][ T9925] __x64_sys_ioctl+0xb7/0x210 [ 377.705384][ T9925] do_syscall_64+0xcd/0xf80 [ 377.705403][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.705418][ T9925] RIP: 0033:0x7f4a6478f749 [ 377.705430][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.705443][ T9925] RSP: 002b:00007f4a655f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.705458][ T9925] RAX: ffffffffffffffda RBX: 00007f4a649e5fa0 RCX: 00007f4a6478f749 [ 377.705469][ T9925] RDX: 0000200000000140 RSI: 00000000c01064b5 RDI: 0000000000000003 [ 377.705478][ T9925] RBP: 00007f4a655f8090 R08: 0000000000000000 R09: 0000000000000000 [ 377.705487][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.705495][ T9925] R13: 00007f4a649e6038 R14: 00007f4a649e5fa0 R15: 00007ffc81b9eba8 [ 377.705516][ T9925] [ 377.707056][ T9925] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.982480][ T5926] usb 5-1: USB disconnect, device number 36 [ 378.126794][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.143527][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.402604][ T9939] random: crng reseeded on system resumption [ 379.227894][ T9946] input: syz0 as /devices/virtual/input/input44 [ 380.844193][ T30] audit: type=1400 audit(1767310742.089:513): avc: denied { getopt } for pid=9956 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 381.108539][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 381.383404][ T9970] lo speed is unknown, defaulting to 1000 [ 381.852807][ T5926] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 382.235541][ T5926] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 382.253369][ T5926] usb 2-1: config 0 has no interface number 1 [ 382.287180][ T5926] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.310559][ T5926] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 382.327057][ T5926] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 382.360167][ T5926] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.382326][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 382.395109][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 382.417120][ T5926] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 382.453905][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.496076][ T5926] usb 2-1: Product: syz [ 382.500238][ T5926] usb 2-1: Manufacturer: syz [ 382.505481][ T5926] usb 2-1: SerialNumber: syz [ 382.514894][ T5926] usb 2-1: config 0 descriptor?? [ 382.520724][ T9969] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 382.551953][ T5926] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.564710][ T5926] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.619818][ T5926] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 382.846261][ T6283] usb 2-1: USB disconnect, device number 41 [ 383.361264][ T30] audit: type=1326 audit(1767310744.579:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80298f749 code=0x7ffc0000 [ 383.482609][T10002] udevd[10002]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.652258][ T30] audit: type=1326 audit(1767310744.579:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80298f749 code=0x7ffc0000 [ 384.205193][ T30] audit: type=1326 audit(1767310744.579:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80298f749 code=0x7ffc0000 [ 384.287113][ T30] audit: type=1326 audit(1767310744.579:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80298f749 code=0x7ffc0000 [ 384.582083][ T30] audit: type=1326 audit(1767310744.579:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ff80298f749 code=0x7ffc0000 [ 384.886610][ T30] audit: type=1326 audit(1767310744.579:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80298f749 code=0x7ffc0000 [ 384.886657][ T30] audit: type=1326 audit(1767310744.579:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80298f749 code=0x7ffc0000 [ 384.886695][ T30] audit: type=1326 audit(1767310744.579:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff80298f749 code=0x7ffc0000 [ 384.886732][ T30] audit: type=1326 audit(1767310744.579:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.5.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80298f749 code=0x7ffc0000 [ 384.996341][ T5931] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 385.223727][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.223754][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 385.223777][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.234509][ T5931] usb 2-1: string descriptor 0 read error: -22 [ 385.234616][ T5931] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 385.234638][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.305466][ T5931] usb 2-1: config 0 descriptor?? [ 385.313498][ T5931] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 385.313529][ T5931] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 385.986546][ T5931] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 385.987055][ T5931] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 385.987549][ T5931] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 385.987563][ T5931] em28xx 2-1:0.0: No AC97 audio processor [ 386.003903][ T5931] usb 2-1: USB disconnect, device number 42 [ 386.296033][ T5931] em28xx 2-1:0.0: Disconnecting em28xx [ 386.318479][ T5931] em28xx 2-1:0.0: Freeing device [ 386.382436][T10029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.973'. [ 386.941831][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 386.941847][ T30] audit: type=1400 audit(1767310748.179:567): avc: denied { mount } for pid=10045 comm="syz.3.978" name="/" dev="autofs" ino=24269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 388.196460][ T5931] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 388.283676][T10060] input input45: cannot allocate more than FF_MAX_EFFECTS effects [ 388.742268][ T5931] usb 6-1: Invalid ep0 maxpacket: 32 [ 388.794641][ T30] audit: type=1400 audit(1767310750.039:568): avc: denied { create } for pid=10049 comm="syz.1.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 388.993867][ T5931] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 389.172214][ T5931] usb 6-1: Invalid ep0 maxpacket: 32 [ 389.192500][ T5931] usb usb6-port1: attempt power cycle [ 389.952268][ T5931] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 390.131968][ T5931] usb 6-1: device descriptor read/8, error -71 [ 391.248907][T10090] pim6reg1: entered promiscuous mode [ 391.254231][T10090] pim6reg1: entered allmulticast mode [ 391.265626][ T30] audit: type=1400 audit(1767310751.949:569): avc: denied { read } for pid=10085 comm="syz.3.990" path="socket:[24327]" dev="sockfs" ino=24327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 394.007365][ T30] audit: type=1400 audit(1767310755.249:570): avc: denied { write } for pid=10115 comm="syz.4.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 394.014183][T10118] 9p: Bad value for 'rfdno' [ 394.525882][ T30] audit: type=1400 audit(1767310755.769:571): avc: denied { connect } for pid=10131 comm="syz.4.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 394.592581][ T5926] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 394.758520][T10138] netlink: 107460 bytes leftover after parsing attributes in process `syz.4.1003'. [ 394.770463][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 394.792061][ T5926] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 394.806883][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.835040][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 394.869017][ T5926] usb 2-1: Product: syz [ 394.886012][ T5926] usb 2-1: Manufacturer: syz [ 394.897389][ T5926] usb 2-1: SerialNumber: syz [ 394.917658][ T5926] usb 2-1: config 0 descriptor?? [ 395.094713][ T5926] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 395.500016][ T849] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 395.746050][T10152] binder_alloc: binder_alloc_mmap_handler: 10129 200000ffc000-200000ffd000 already mapped failed -16 [ 395.986711][ T849] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 396.131062][ T849] usb 3-1: config 0 has no interface number 0 [ 396.145388][ T849] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 396.167943][ T849] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 396.214054][ T849] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 396.231473][ T849] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 396.256639][ T849] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 396.282555][ T849] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.302587][ T849] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 396.311650][ T849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.348070][ T849] usb 3-1: config 0 descriptor?? [ 396.354211][T10146] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 396.361986][T10146] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 396.384968][ T849] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 396.422251][ T6249] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 396.571481][ T30] audit: type=1804 audit(1767310757.809:572): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1010" name="file0" dev="tmpfs" ino=1200 res=1 errno=0 [ 396.595583][ T6249] usb 6-1: config 0 has an invalid interface number: 82 but max is 0 [ 396.614037][ T6249] usb 6-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 396.641051][ T6249] usb 6-1: config 0 has no interface number 0 [ 396.652068][ T6249] usb 6-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=b4.53 [ 396.670577][T10146] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 396.672354][ T6249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.683142][T10146] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1006'. [ 396.692317][ T6249] usb 6-1: Product: syz [ 396.703856][ T6249] usb 6-1: Manufacturer: syz [ 396.708506][ T6249] usb 6-1: SerialNumber: syz [ 396.724776][ T5926] gspca_ov534_9: reg_w failed -110 [ 396.731875][ T6249] usb 6-1: config 0 descriptor?? [ 396.771977][ T6249] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 396.842259][ T5819] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 397.379077][ T6249] gspca_ov534_9: reg_w failed -110 [ 397.525096][ T5926] gspca_ov534_9: Unknown sensor 0000 [ 397.525173][ T5926] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 397.595179][ T5926] usb 2-1: USB disconnect, device number 43 [ 397.799906][ T30] audit: type=1400 audit(1767310759.039:573): avc: denied { bind } for pid=10153 comm="syz.5.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 398.272280][ T6249] gspca_ov534_9: Unknown sensor 0000 [ 398.272358][ T6249] ov534_9 6-1:0.82: probe with driver ov534_9 failed with error -22 [ 398.344640][ T6249] usb 3-1: USB disconnect, device number 47 [ 398.371645][ T6249] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 398.386104][ T5926] usb 6-1: USB disconnect, device number 6 [ 398.662253][ T849] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 398.715409][T10193] fuse: Bad value for 'fd' [ 398.720854][T10193] overlayfs: failed to clone lowerpath [ 398.739942][T10193] netlink: 'syz.3.1017': attribute type 10 has an invalid length. [ 398.761216][T10193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.785456][T10193] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 398.796693][T10195] netlink: 'syz.3.1017': attribute type 10 has an invalid length. [ 398.807805][T10195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1017'. [ 398.823778][ T849] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 398.839672][ T849] usb 2-1: config 0 interface 0 has no altsetting 0 [ 398.840988][T10195] batadv0: entered promiscuous mode [ 398.855010][ T849] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.868560][T10195] batadv0: entered allmulticast mode [ 398.873913][ T849] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 398.888004][ T849] usb 2-1: Product: syz [ 398.897662][T10195] bond0: (slave batadv0): Releasing backup interface [ 398.898164][T10196] SELinux: failed to load policy [ 398.904458][ T849] usb 2-1: Manufacturer: syz [ 398.922031][ T849] usb 2-1: SerialNumber: syz [ 398.957492][ T849] usb 2-1: config 0 descriptor?? [ 399.120485][T10195] bridge0: port 3(batadv0) entered blocking state [ 399.143581][ T849] usb 2-1: selecting invalid altsetting 0 [ 399.162552][T10195] bridge0: port 3(batadv0) entered disabled state [ 400.305503][ T6064] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 400.315110][ T6064] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 401.165939][ T50] block nbd0: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 90 seconds [ 401.176703][ T50] block nbd0: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 90 seconds [ 401.188165][ T50] block nbd0: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 90 seconds [ 401.199053][ T50] block nbd0: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 90 seconds [ 401.698296][ T849] usb 2-1: USB disconnect, device number 44 [ 402.049194][T10222] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1021'. [ 402.539365][ T30] audit: type=1400 audit(1767310763.779:574): avc: denied { call } for pid=10214 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 402.577282][ T30] audit: type=1400 audit(1767310763.799:575): avc: denied { map } for pid=10214 comm="syz.1.1021" path="socket:[24501]" dev="sockfs" ino=24501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 402.762326][ T5926] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 402.955744][T10241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1026'. [ 403.408543][ T5926] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 403.424940][ T5926] usb 5-1: config 0 has no interface number 0 [ 403.437741][ T5926] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 403.460707][ T5926] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 403.509465][ T5926] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 403.537696][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.560676][ T5926] usb 5-1: Product: syz [ 403.572103][ T5926] usb 5-1: Manufacturer: syz [ 403.586911][ T5926] usb 5-1: SerialNumber: syz [ 403.603737][ T5926] usb 5-1: config 0 descriptor?? [ 403.624425][T10225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 403.702538][ T5926] usb-storage 5-1:0.20: USB Mass Storage device detected [ 403.756183][ T5926] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 404.046965][ T5926] scsi host1: usb-storage 5-1:0.20 [ 404.606773][ T5926] usb 5-1: USB disconnect, device number 37 [ 404.737534][T10266] hub 8-0:1.0: USB hub found [ 404.744314][T10266] hub 8-0:1.0: 1 port detected [ 405.356745][ T5931] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 405.536468][ T5931] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 405.561724][ T5931] usb 6-1: config 0 interface 0 has no altsetting 0 [ 405.577657][ T5931] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 405.592766][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 406.038180][ T5931] usb 6-1: Product: syz [ 406.042463][ T5931] usb 6-1: Manufacturer: syz [ 406.047060][ T5931] usb 6-1: SerialNumber: syz [ 406.053812][ T5931] usb 6-1: config 0 descriptor?? [ 406.068304][ T5931] usb 6-1: selecting invalid altsetting 0 [ 406.170943][T10283] syzkaller0: entered promiscuous mode [ 406.177116][T10283] syzkaller0: entered allmulticast mode [ 406.593735][T10296] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 406.638796][ T5931] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 406.772301][ T5931] usb 2-1: device descriptor read/64, error -71 [ 407.042247][ T5931] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 407.182235][ T5931] usb 2-1: device descriptor read/64, error -71 [ 407.292808][ T5931] usb usb2-port1: attempt power cycle [ 407.518519][ T5926] usb 6-1: USB disconnect, device number 7 [ 407.682337][ T5931] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 407.704555][ T5931] usb 2-1: device descriptor read/8, error -71 [ 407.809826][ T30] audit: type=1400 audit(1767310769.049:576): avc: denied { execheap } for pid=10312 comm="syz.5.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 407.932243][ T5926] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 407.963377][ T5931] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 408.911229][ T5931] usb 2-1: device descriptor read/8, error -71 [ 409.026044][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 409.033280][ T5931] usb usb2-port1: unable to enumerate USB device [ 409.041831][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.055000][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.065158][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.078236][ T5926] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.087740][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.098361][ T5926] usb 3-1: config 0 descriptor?? [ 409.417241][ T30] audit: type=1400 audit(1767310770.659:577): avc: denied { map } for pid=10324 comm="syz.1.1049" path="socket:[26646]" dev="sockfs" ino=26646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 409.471204][ T30] audit: type=1400 audit(1767310770.659:578): avc: denied { accept } for pid=10324 comm="syz.1.1049" path="socket:[26646]" dev="sockfs" ino=26646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 409.934967][ T5926] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input47 [ 409.948623][ T5926] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 410.016662][ T5926] usb 3-1: USB disconnect, device number 48 [ 410.246361][T10335] fido_id[10335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 411.500378][T10362] netlink: 'syz.1.1057': attribute type 12 has an invalid length. [ 412.143023][ T849] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 412.465856][ T849] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 412.480689][ T30] audit: type=1400 audit(1767311029.720:579): avc: denied { mount } for pid=10370 comm="syz.1.1059" name="/" dev="ramfs" ino=25696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 412.607184][ T849] usb 3-1: config 0 interface 0 has no altsetting 0 [ 412.611629][T10373] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 412.632509][ T30] audit: type=1400 audit(1767311029.840:580): avc: denied { ioctl } for pid=10368 comm="syz.5.1058" path="socket:[25694]" dev="sockfs" ino=25694 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 413.142476][ T849] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 413.152348][ T849] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 413.192271][ T30] audit: type=1400 audit(1767311029.840:581): avc: denied { mounton } for pid=10368 comm="syz.5.1058" path="/37/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 413.244254][ T30] audit: type=1400 audit(1767311030.360:582): avc: denied { read } for pid=10368 comm="syz.5.1058" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 413.246301][ T849] usb 3-1: Product: syz [ 413.266234][ T30] audit: type=1400 audit(1767311030.360:583): avc: denied { read } for pid=10368 comm="syz.5.1058" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 413.325737][ T849] usb 3-1: Manufacturer: syz [ 413.330364][ T849] usb 3-1: SerialNumber: syz [ 413.372272][ T30] audit: type=1400 audit(1767311030.360:584): avc: denied { open } for pid=10368 comm="syz.5.1058" path="/37/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 413.456174][ T849] usb 3-1: config 0 descriptor?? [ 413.493256][ T30] audit: type=1400 audit(1767311030.360:585): avc: denied { read } for pid=10368 comm="syz.5.1058" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 413.499953][ T849] usb 3-1: selecting invalid altsetting 0 [ 413.607498][ T30] audit: type=1400 audit(1767311030.380:586): avc: denied { getattr } for pid=10368 comm="syz.5.1058" name="saved_tgids" dev="tracefs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 414.547323][ T849] usb 3-1: USB disconnect, device number 49 [ 414.608777][ T7570] udevd[7570]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.208728][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 415.512703][ T30] audit: type=1400 audit(1767311032.750:587): avc: denied { append } for pid=10398 comm="syz.2.1068" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 416.408491][ T5874] kernel read not supported for file /dsp (pid: 5874 comm: kworker/0:4) [ 416.508236][T10415] netlink: 'syz.3.1071': attribute type 4 has an invalid length. [ 416.518555][T10415] netlink: 'syz.3.1071': attribute type 4 has an invalid length. [ 416.606759][ T849] IPVS: starting estimator thread 0... [ 416.674389][T10416] overlayfs: overlapping lowerdir path [ 416.682240][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 416.722313][T10422] IPVS: using max 40 ests per chain, 96000 per kthread [ 416.820262][ T30] audit: type=1400 audit(1767311034.050:588): avc: denied { create } for pid=10424 comm="syz.3.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 416.853375][ T30] audit: type=1400 audit(1767311034.080:589): avc: denied { ioctl } for pid=10424 comm="syz.3.1074" path="socket:[26847]" dev="sockfs" ino=26847 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 416.884412][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 416.902301][ T5874] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 416.944326][ T24] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 416.951580][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 416.963284][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 416.965036][T10438] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 417.033131][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.043691][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 417.074535][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.085678][ T5874] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 417.095265][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.113769][ T5874] usb 3-1: config 0 descriptor?? [ 417.125983][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 417.141252][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.158331][ T24] usb 2-1: Product: syz [ 417.168932][ T24] usb 2-1: Manufacturer: syz [ 417.178832][ T24] usb 2-1: SerialNumber: syz [ 417.183822][ T849] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 417.199231][ T24] usb 2-1: config 0 descriptor?? [ 417.210446][T10414] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.238298][ T24] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 417.253755][ T24] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 417.323878][ T24] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90 [ 417.354710][ T849] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 417.370403][ T849] usb 6-1: config 0 interface 0 has no altsetting 0 [ 417.397691][ T849] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 417.431582][ T849] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 417.440477][ T849] usb 6-1: Product: syz [ 417.445003][ T849] usb 6-1: Manufacturer: syz [ 417.449867][ T849] usb 6-1: SerialNumber: syz [ 417.471829][ T5926] usb 2-1: USB disconnect, device number 49 [ 417.494519][ T849] usb 6-1: config 0 descriptor?? [ 417.509454][ T849] usb 6-1: selecting invalid altsetting 0 [ 417.594668][ T30] audit: type=1400 audit(1767311034.820:590): avc: denied { ioctl } for pid=10420 comm="syz.2.1072" path="socket:[26871]" dev="sockfs" ino=26871 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 417.716218][ T5874] usbhid 3-1:0.0: can't add hid device: -71 [ 417.809938][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.810265][ T5874] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 417.829676][ T5874] usb 3-1: USB disconnect, device number 50 [ 417.834881][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.966208][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.290352][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 418.687528][ T849] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 419.038877][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.341388][ T849] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 419.361006][ T849] usb 2-1: config 0 has no interface number 0 [ 419.362398][T10475] Set syz1 is full, maxelem 1023 reached [ 419.452229][ T849] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.463615][ T849] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 419.474548][ T849] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 419.486853][ T849] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 419.509813][ T849] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 419.531094][ T849] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 419.545998][ T849] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 419.556911][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.567997][ T849] usb 2-1: config 0 descriptor?? [ 419.574720][T10459] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.582010][T10459] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.594194][ T849] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 419.644903][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.654884][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.664072][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.815686][T10459] netlink: 'syz.1.1082': attribute type 1 has an invalid length. [ 419.829968][T10459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1082'. [ 420.449085][T10485] syz.2.1089 (10485): drop_caches: 2 [ 420.464941][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.482384][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.498702][ T849] usb 6-1: USB disconnect, device number 8 [ 421.580059][ T24] usb 2-1: USB disconnect, device number 50 [ 421.605840][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 422.507472][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 422.507517][ T30] audit: type=1800 audit(1767311039.720:592): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1096" name="bus" dev="overlay" ino=1206 res=0 errno=0 [ 423.568348][ T6064] net_ratelimit: 5 callbacks suppressed [ 423.568365][ T6064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.587958][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.596603][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.500012][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.508543][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.516855][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.526245][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.534693][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.622613][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.745729][T10538] input input50: cannot allocate more than FF_MAX_EFFECTS effects [ 425.069646][ T30] audit: type=1804 audit(1767311042.290:593): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1101" name="/newroot/223/file1" dev="tmpfs" ino=1213 res=1 errno=0 [ 425.680651][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.830247][T10550] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1103'. [ 426.349785][ T30] audit: type=1400 audit(1767311043.580:594): avc: denied { bind } for pid=10555 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 427.813451][ T30] audit: type=1400 audit(1767311045.050:595): avc: denied { create } for pid=10575 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 427.872817][ T5874] lo speed is unknown, defaulting to 1000 [ 428.546627][ T30] audit: type=1400 audit(1767311045.780:596): avc: denied { mount } for pid=10603 comm="syz.3.1119" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 428.728638][ T30] audit: type=1400 audit(1767311045.960:597): avc: denied { append } for pid=10610 comm="syz.1.1121" name="pfkey" dev="proc" ino=4026533257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 428.763043][ T5924] net_ratelimit: 10 callbacks suppressed [ 428.763061][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.784195][ T6249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.929570][ T30] audit: type=1400 audit(1767311045.960:598): avc: denied { mounton } for pid=10610 comm="syz.1.1121" path="/227/file0" dev="tmpfs" ino=1237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 429.046081][ T5924] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 429.115950][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 429.272269][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 429.316165][ T30] audit: type=1400 audit(1767311046.550:599): avc: denied { bind } for pid=10622 comm="syz.5.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 429.335890][ T1678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.664423][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.691593][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.702162][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.717435][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.732235][ T6249] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 429.754743][ T5924] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 429.773341][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 429.796091][ T5924] usb 3-1: config 0 has no interface number 0 [ 429.812365][ T24] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 429.840890][ T5924] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 429.853413][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.887722][ T5924] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 429.903567][ T24] usb 5-1: config 0 descriptor?? [ 429.926107][ T5924] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 429.944359][ T5924] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 429.957752][ T5924] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 429.969543][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.994331][ T5924] usb 3-1: config 0 descriptor?? [ 430.029231][ T5924] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 430.147153][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 430.153944][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 430.219720][ T5874] usb 3-1: USB disconnect, device number 51 [ 430.254062][ T5874] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 430.284923][ T24] usb 5-1: USB disconnect, device number 38 [ 430.868412][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.286116][ T50] block nbd0: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 120 seconds [ 431.297688][ T50] block nbd0: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 120 seconds [ 431.318764][ T50] block nbd0: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 120 seconds [ 431.329807][ T50] block nbd0: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 120 seconds [ 431.498324][T10640] syz.5.1125 (10640): drop_caches: 2 [ 431.754239][T10652] 9p: Bad value for 'wfdno' [ 431.807558][ T6249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.042348][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.569800][ T6249] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 432.904490][ T6249] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 432.925677][ T6249] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 433.010325][ T6249] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.052197][ T6249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.085317][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.122477][T10656] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 433.170245][ T6249] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.594125][T10662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.603294][ T849] usb 5-1: USB disconnect, device number 39 [ 434.342549][ T849] net_ratelimit: 1 callbacks suppressed [ 434.342561][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.449448][T10673] input input51: cannot allocate more than FF_MAX_EFFECTS effects [ 434.529711][T10666] syz.1.1132 (10666): drop_caches: 2 [ 435.116144][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.127729][ T6301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.136506][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.145653][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.173182][ T849] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 435.483354][ T849] usb 6-1: unable to get BOS descriptor or descriptor too short [ 436.182398][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.194861][ T849] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 436.205081][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.253964][ T849] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 436.263045][ T849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.271048][ T849] usb 6-1: Product: syz [ 436.275224][ T849] usb 6-1: Manufacturer: syz [ 436.279812][ T849] usb 6-1: SerialNumber: syz [ 436.541578][T10691] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1139'. [ 437.092269][ T849] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 437.341271][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.372820][T10706] tmpfs: Bad value for 'mpol' [ 437.392228][ T5874] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 437.441334][ T30] audit: type=1400 audit(1767311054.650:600): avc: denied { map } for pid=10700 comm="syz.4.1143" path="socket:[26127]" dev="sockfs" ino=26127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 437.539058][ T30] audit: type=1400 audit(1767311054.650:601): avc: denied { read } for pid=10700 comm="syz.4.1143" path="socket:[26127]" dev="sockfs" ino=26127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 437.698281][ T849] usb 6-1: device descriptor read/64, error -71 [ 437.719837][ T5874] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 437.729832][ T5874] usb 3-1: config 0 interface 0 has no altsetting 0 [ 437.773681][ T5874] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 437.792197][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 437.801506][ T5874] usb 3-1: Product: syz [ 437.806005][ T5874] usb 3-1: Manufacturer: syz [ 437.812161][ T5874] usb 3-1: SerialNumber: syz [ 437.821320][ T5874] usb 3-1: config 0 descriptor?? [ 437.842888][ T5874] usb 3-1: selecting invalid altsetting 0 [ 437.982472][ T849] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 438.123566][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.200752][ T849] usb 6-1: unable to get BOS descriptor or descriptor too short [ 438.215672][ T849] usb 6-1: device firmware changed [ 438.340533][ T849] usb 6-1: USB disconnect, device number 10 [ 438.375364][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.945015][ T6283] usb 3-1: USB disconnect, device number 52 [ 439.352289][T10725] overlayfs: failed to clone lowerpath [ 439.425576][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.456759][T10723] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1147'. [ 439.566379][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.572765][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.641100][T10728] input input52: cannot allocate more than FF_MAX_EFFECTS effects [ 439.969393][T10734] overlayfs: overlapping lowerdir path [ 440.357249][ T1678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.366254][ T1678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.391975][T10741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.535873][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.853034][ T2894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.862538][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.870878][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.162394][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.510805][ T30] audit: type=1400 audit(1767311058.740:602): avc: denied { write } for pid=10755 comm="syz.4.1159" path="socket:[27389]" dev="sockfs" ino=27389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 441.732234][ T5874] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 441.859845][ T30] audit: type=1400 audit(1767311059.040:603): avc: denied { connect } for pid=10773 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 442.125443][T10760] tipc: Enabling of bearer rejected, already enabled [ 442.139676][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.183459][ T5874] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 442.207533][ T5874] usb 6-1: config 0 interface 0 has no altsetting 0 [ 442.225913][ T5874] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 442.248336][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 442.283704][ T5874] usb 6-1: Product: syz [ 442.331804][ T5874] usb 6-1: Manufacturer: syz [ 442.343114][ T5874] usb 6-1: SerialNumber: syz [ 442.356829][ T5874] usb 6-1: config 0 descriptor?? [ 442.381105][ T5874] usb 6-1: selecting invalid altsetting 0 [ 443.194998][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.381543][ T849] usb 6-1: USB disconnect, device number 11 [ 444.203122][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.298310][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.721508][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.780707][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.445746][T10810] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1173'. [ 446.781661][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.251631][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.805320][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.887578][T10818] binder: 10817:10818 ioctl c0306201 200000000cc0 returned -14 [ 447.895366][T10818] binder: 10817:10818 ioctl 8901 2000000000c0 returned -22 [ 448.247313][T10828] overlayfs: failed to clone upperpath [ 448.289572][ T30] audit: type=1400 audit(1767311065.520:604): avc: denied { create } for pid=10827 comm="syz.3.1179" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 448.443208][ T5931] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 448.512344][ T9] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 448.594905][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 448.603864][ T5931] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 448.612024][ T5931] usb 2-1: config 6 has no interface number 0 [ 448.628473][ T5931] usb 2-1: config 6 interface 200 has no altsetting 0 [ 448.642021][ T5931] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 448.651351][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.660007][ T5931] usb 2-1: Product: syz [ 448.664627][ T5931] usb 2-1: Manufacturer: syz [ 448.673882][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 448.690421][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.703015][ T5931] usb 2-1: SerialNumber: syz [ 448.715057][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 448.728610][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 448.742217][ T9] usb 3-1: Product: syz [ 448.746478][ T9] usb 3-1: Manufacturer: syz [ 448.751175][ T9] usb 3-1: SerialNumber: syz [ 448.769189][ T9] usb 3-1: config 0 descriptor?? [ 448.791899][ T9] usb 3-1: selecting invalid altsetting 0 [ 448.842797][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.165463][ T24] usb 3-1: USB disconnect, device number 53 [ 449.354065][ T30] audit: type=1400 audit(1767311066.580:605): avc: denied { bind } for pid=10838 comm="syz.3.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 449.800238][ T30] audit: type=1400 audit(1767311066.580:606): avc: denied { name_bind } for pid=10838 comm="syz.3.1181" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 449.801677][ T5931] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 449.839489][ T30] audit: type=1400 audit(1767311066.580:607): avc: denied { node_bind } for pid=10838 comm="syz.3.1181" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 449.882817][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.485940][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.528381][ T5931] dvb-usb: bulk message failed: -71 (3/0) [ 450.605781][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 450.628537][ T5931] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 450.643131][ T5931] usb 2-1: media controller created [ 450.668001][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.714655][ T5931] dvb-usb: bulk message failed: -71 (6/0) [ 450.728095][ T5931] dvb-usb: bulk message failed: -71 (6/0) [ 450.734844][ T5931] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 450.745732][ T5931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53 [ 450.753110][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.756984][ T5874] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 450.772892][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.781592][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.781670][ T5931] dvb-usb: schedule remote query interval to 150 msecs. [ 450.781685][ T5931] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 450.800453][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.814287][ T5931] usb 2-1: USB disconnect, device number 51 [ 450.820558][T10856] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1183'. [ 450.821502][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.862165][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.879007][ T5931] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 450.923743][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.934055][ T5874] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 450.958130][ T5874] usb 5-1: config 0 has no interface number 0 [ 450.991246][ T5874] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 451.007273][ T5874] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 451.018893][ T5874] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 451.030984][ T5874] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 451.049214][ T5874] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 451.065161][T10865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2070 sclass=netlink_route_socket pid=10865 comm=syz.5.1189 [ 451.078252][ T5874] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 451.093808][ T5874] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 451.103712][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.122401][ T5874] usb 5-1: config 0 descriptor?? [ 451.128542][T10849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 451.136223][T10849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 451.146628][T10866] fuse: Unknown parameter '0x000000000000000b' [ 451.159917][ T5874] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 451.232286][ T5931] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 451.382230][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 451.415347][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 451.425806][T10849] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 451.427764][ T5931] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 451.442782][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.450769][ T5931] usb 2-1: Product: syz [ 451.455188][T10849] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1180'. [ 451.455276][ T5931] usb 2-1: Manufacturer: syz [ 451.475136][ T5931] usb 2-1: SerialNumber: syz [ 451.592024][ T5931] usb 2-1: config 0 descriptor?? [ 451.970707][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.383118][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.393829][ T5881] usb 2-1: USB disconnect, device number 52 [ 453.618294][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.029487][T10884] tipc: Enabling of bearer rejected, failed to enable media [ 454.221152][ T5881] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 454.475842][ T5881] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 454.521779][ T5881] usb 6-1: config 0 interface 0 has no altsetting 0 [ 454.572631][ T6283] usb 5-1: USB disconnect, device number 40 [ 454.583919][ T5881] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.622782][ T6283] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 454.641898][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 454.692209][ T5881] usb 6-1: Product: syz [ 454.696418][ T5881] usb 6-1: Manufacturer: syz [ 454.701012][ T5881] usb 6-1: SerialNumber: syz [ 454.816909][ T5881] usb 6-1: config 0 descriptor?? [ 454.923475][ T5881] usb 6-1: selecting invalid altsetting 0 [ 455.733368][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1200'. [ 455.754490][ T30] audit: type=1400 audit(1767311072.950:608): avc: denied { accept } for pid=10908 comm="syz.4.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 455.846663][ T5881] usb 6-1: USB disconnect, device number 12 [ 456.137741][T10920] FAULT_INJECTION: forcing a failure. [ 456.137741][T10920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.150799][T10920] CPU: 0 UID: 0 PID: 10920 Comm: syz.1.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.150816][T10920] Tainted: [L]=SOFTLOCKUP [ 456.150820][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.150826][T10920] Call Trace: [ 456.150830][T10920] [ 456.150834][T10920] dump_stack_lvl+0x16c/0x1f0 [ 456.150851][T10920] should_fail_ex+0x512/0x640 [ 456.150870][T10920] _copy_to_iter+0x463/0x1710 [ 456.150888][T10920] ? __pfx__copy_to_iter+0x10/0x10 [ 456.150904][T10920] ? __skb_recv_datagram+0x1b2/0x220 [ 456.150924][T10920] simple_copy_to_iter+0x46/0x90 [ 456.150938][T10920] __skb_datagram_iter+0x129/0x900 [ 456.150951][T10920] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 456.150966][T10920] ? skb_recv_datagram+0x88/0xc0 [ 456.150983][T10920] skb_copy_datagram_iter+0xa6/0x220 [ 456.150998][T10920] netlink_recvmsg+0x27e/0xa90 [ 456.151011][T10920] ? __pfx_netlink_recvmsg+0x10/0x10 [ 456.151023][T10920] ? is_bpf_text_address+0x94/0x1a0 [ 456.151034][T10920] ? iovec_from_user+0x108/0x140 [ 456.151054][T10920] sock_recvmsg+0x1f9/0x250 [ 456.151068][T10920] ____sys_recvmsg+0x218/0x6b0 [ 456.151083][T10920] ? __pfx_____sys_recvmsg+0x10/0x10 [ 456.151101][T10920] ? __lock_acquire+0x436/0x2890 [ 456.151120][T10920] ___sys_recvmsg+0x114/0x1a0 [ 456.151131][T10920] ? __pfx____sys_recvmsg+0x10/0x10 [ 456.151142][T10920] ? find_held_lock+0x2b/0x80 [ 456.151165][T10920] do_recvmmsg+0x2fe/0x750 [ 456.151178][T10920] ? __pfx_do_recvmmsg+0x10/0x10 [ 456.151186][T10920] ? find_held_lock+0x2b/0x80 [ 456.151200][T10920] ? __might_fault+0xe3/0x190 [ 456.151210][T10920] ? __might_fault+0x13b/0x190 [ 456.151225][T10920] ? __pfx_get_timespec64+0x10/0x10 [ 456.151237][T10920] ? __fget_files+0x20e/0x3c0 [ 456.151255][T10920] __x64_sys_recvmmsg+0x199/0x280 [ 456.151267][T10920] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 456.151281][T10920] do_syscall_64+0xcd/0xf80 [ 456.151296][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.151306][T10920] RIP: 0033:0x7f4a6478f749 [ 456.151315][T10920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.151325][T10920] RSP: 002b:00007f4a655d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 456.151335][T10920] RAX: ffffffffffffffda RBX: 00007f4a649e6090 RCX: 00007f4a6478f749 [ 456.151341][T10920] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000006 [ 456.151347][T10920] RBP: 00007f4a655d7090 R08: 0000200000003700 R09: 0000000000000000 [ 456.151352][T10920] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 456.151358][T10920] R13: 00007f4a649e6128 R14: 00007f4a649e6090 R15: 00007ffc81b9eba8 [ 456.151371][T10920] [ 456.417580][ T30] audit: type=1400 audit(1767311073.440:609): avc: denied { create } for pid=10916 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.497332][T10926] 9p: Bad value for 'wfdno' [ 456.629082][T10935] 9p: Bad value for 'rfdno' [ 456.670925][ T30] audit: type=1800 audit(1767311073.900:610): pid=10937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1207" name="nullb0" dev="tmpfs" ino=848 res=0 errno=0 [ 456.698102][ T9] net_ratelimit: 3 callbacks suppressed [ 456.698117][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.712152][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.743448][ T30] audit: type=1400 audit(1767311073.980:611): avc: denied { listen } for pid=10936 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 457.064148][T10945] overlay: ./bus is not a directory [ 457.073962][T10949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1211'. [ 457.142210][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 457.475833][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 457.733367][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.750408][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.804325][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 457.822977][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.838935][ T9] usb 3-1: config 0 descriptor?? [ 458.065633][T10939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.093459][T10939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.307374][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 458.314890][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 458.329026][ T9] usb 3-1: USB disconnect, device number 54 [ 458.412221][ T6283] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 458.572218][ T6283] usb 2-1: Using ep0 maxpacket: 8 [ 458.578945][ T6283] usb 2-1: unable to get BOS descriptor or descriptor too short [ 458.587832][ T6283] usb 2-1: config 4 interface 0 has no altsetting 0 [ 458.597242][ T6283] usb 2-1: string descriptor 0 read error: -22 [ 458.605102][ T6283] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 458.606425][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 458.622984][ T6283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.655320][ T6283] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 458.675818][ T6283] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.700132][ T6283] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 458.707492][ T6283] usb 2-1: media controller created [ 458.723748][T10979] syzkaller0: entered promiscuous mode [ 458.731867][ T6283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.743539][T10979] syzkaller0: entered allmulticast mode [ 458.768153][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.786416][T10981] input input54: cannot allocate more than FF_MAX_EFFECTS effects [ 458.794884][ T30] audit: type=1400 audit(1767311076.030:612): avc: denied { setopt } for pid=10980 comm="syz.4.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 458.816530][ T30] audit: type=1400 audit(1767311076.050:613): avc: denied { bind } for pid=10980 comm="syz.4.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 458.926290][ T6283] zl10353_read_register: readreg error (reg=127, ret==0) [ 459.181698][ T6283] usb 2-1: USB disconnect, device number 53 [ 459.981653][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 459.982414][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.060797][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.146024][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'. [ 460.204179][ T24] usb 5-1: device descriptor read/64, error -71 [ 460.435852][T11001] netlink: 822 bytes leftover after parsing attributes in process `syz.1.1230'. [ 460.703459][T11008] netlink: 'syz.1.1230': attribute type 4 has an invalid length. [ 461.196065][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 461.363307][ T50] block nbd0: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 150 seconds [ 461.374176][ T50] block nbd0: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 150 seconds [ 461.463053][ T50] block nbd0: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 150 seconds [ 461.474301][ T50] block nbd0: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 150 seconds [ 461.518259][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.662246][ T24] usb 5-1: device descriptor read/64, error -71 [ 461.882579][ T24] usb usb5-port1: attempt power cycle [ 461.888562][T11015] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 461.898203][T11015] SELinux: failed to load policy [ 462.039888][T11021] lo speed is unknown, defaulting to 1000 [ 462.198299][ T30] audit: type=1400 audit(1767311079.390:614): avc: denied { ioctl } for pid=11023 comm="syz.5.1229" path="socket:[27821]" dev="sockfs" ino=27821 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.212253][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 462.443471][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 462.472215][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.624345][ T9] usb 3-1: config 0 descriptor?? [ 462.634805][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.822484][ T24] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 463.002213][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 463.002542][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.053591][ T9] usb 3-1: Cannot read MAC address [ 463.059088][ T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 463.081429][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 463.115247][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 463.177084][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.185357][ T24] usb 5-1: Product: syz [ 463.189569][ T24] usb 5-1: Manufacturer: syz [ 463.194270][ T24] usb 5-1: SerialNumber: syz [ 463.201564][ T24] usb 5-1: config 0 descriptor?? [ 463.259363][ T9] usb 3-1: USB disconnect, device number 55 [ 463.262367][ T24] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 463.425803][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.441315][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.564038][ T24] pwc: send_video_command error -71 [ 463.582930][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 463.590445][ T24] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 464.057160][T11043] lo speed is unknown, defaulting to 1000 [ 464.440264][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.544853][ T24] usb 5-1: USB disconnect, device number 44 [ 464.545769][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.718684][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 464.809156][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 464.963308][T11055] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 465.733428][T11063] vivid-000: disconnect [ 465.747408][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.826328][T11063] vivid-000: reconnect [ 465.892224][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 465.922634][ T30] audit: type=1400 audit(1767311083.160:615): avc: denied { bind } for pid=11071 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 465.945068][ T30] audit: type=1400 audit(1767311083.180:616): avc: denied { listen } for pid=11071 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 466.042319][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.062285][ T24] usb 2-1: device descriptor read/64, error -71 [ 466.891821][ T849] kernel read not supported for file /dsp (pid: 849 comm: kworker/1:2) [ 466.938366][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.032210][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 467.162783][ T24] usb 2-1: device descriptor read/64, error -71 [ 467.274113][ T24] usb usb2-port1: attempt power cycle [ 467.652766][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 467.707803][T11111] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 468.136836][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.163103][ T24] usb 2-1: device descriptor read/8, error -71 [ 468.462339][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 468.842473][ T24] usb 2-1: device descriptor read/8, error -71 [ 468.955173][ T24] usb usb2-port1: unable to enumerate USB device [ 469.041839][T11133] hfs: can't find a HFS filesystem on dev nullb0 [ 469.108136][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.327168][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.400374][ T24] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 469.442433][T11137] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004 [ 469.551472][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 469.565225][ T30] audit: type=1400 audit(1767311086.780:617): avc: denied { setopt } for pid=11139 comm="syz.4.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 469.617678][ T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 469.628525][ T24] usb 2-1: config 0 has no interface number 0 [ 469.655111][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.670922][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 469.687688][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 469.704081][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 469.804714][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 469.804735][ T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 469.804763][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 469.804775][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.808443][ T24] usb 2-1: config 0 descriptor?? [ 469.812055][T11125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 469.812252][T11125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 469.814585][ T24] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 470.031229][T11125] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 470.065383][T11125] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1262'. [ 470.284656][T11158] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 470.612697][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.631073][T11149] netlink: 'syz.5.1267': attribute type 11 has an invalid length. [ 470.640265][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1267'. [ 471.644335][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.122533][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.244303][ T9] usb 2-1: USB disconnect, device number 58 [ 472.296425][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 472.422729][T11176] batadv_slave_0: entered promiscuous mode [ 472.454283][T11176] batman_adv: batadv0: Adding interface: macsec0 [ 472.473133][T11176] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.631746][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.787006][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.058510][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.101460][T11176] batman_adv: batadv0: Interface activated: macsec0 [ 473.144694][T11182] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 473.342202][ T6283] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 474.402193][ T6283] usb 6-1: Using ep0 maxpacket: 16 [ 475.218650][ T6249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.251962][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.262523][ T6249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.274542][ T6283] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.351873][ T6283] usb 6-1: config 0 has no interface number 0 [ 475.449742][ T6283] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 475.465885][ T6283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.477285][ T6283] usb 6-1: Product: syz [ 475.483977][ T6283] usb 6-1: Manufacturer: syz [ 475.489160][ T6283] usb 6-1: SerialNumber: syz [ 475.500144][ T6283] usb 6-1: config 0 descriptor?? [ 475.513265][ T6283] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 475.730164][ T6283] gspca_spca1528: reg_w err -71 [ 475.763771][ T849] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 475.782327][ T6283] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 475.802957][ T6283] usb 6-1: USB disconnect, device number 13 [ 475.833807][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1283'. [ 475.853279][ T6249] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 475.910494][T11210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.919188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.965910][ T849] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 475.996170][ T849] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 476.037970][ T6249] usb 2-1: Using ep0 maxpacket: 32 [ 476.046592][ T849] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.060177][ T6249] usb 2-1: device descriptor read/all, error -71 [ 476.081113][ T849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.085736][T11213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1285'. [ 476.104485][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1285'. [ 476.147010][T11200] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 476.168738][T11200] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 476.287393][ T6283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.838371][ T849] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 477.058025][T11218] tipc: Enabled bearer , priority 0 [ 477.077249][T11218] syzkaller0: entered promiscuous mode [ 477.102669][T11218] syzkaller0: entered allmulticast mode [ 477.239984][ T849] usb 3-1: USB disconnect, device number 56 [ 477.252885][T11217] tipc: Resetting bearer [ 477.311740][T11217] tipc: Disabling bearer [ 477.341700][T11196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.624276][T11231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.632884][T11231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.650409][T11231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.854504][T11248] lo speed is unknown, defaulting to 1000 [ 480.859864][ T849] net_ratelimit: 5 callbacks suppressed [ 480.859881][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.952058][T11226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.717959][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.650427][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.705429][T11296] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 483.306874][T11284] sp0: Synchronizing with TNC [ 483.324673][T11297] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.1301'. [ 483.364144][T11297] netlink: Conntrack attr has 4 unknown bytes [ 483.393380][ T30] audit: type=1400 audit(1767311100.620:618): avc: denied { write } for pid=11285 comm="syz.2.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.718546][T11283] [U] è` [ 483.751373][ T30] audit: type=1400 audit(1767311100.680:619): avc: denied { read } for pid=11285 comm="syz.2.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 484.111117][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.362720][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.762648][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.000581][ T5874] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 485.132242][ T5926] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 485.152220][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 485.152224][ T849] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 485.166077][ T5874] usb 6-1: config 0 has an invalid interface number: 19 but max is 2 [ 485.174307][ T5874] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 485.175790][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.183040][ T5874] usb 6-1: config 0 has an invalid interface number: 88 but max is 2 [ 485.199224][ T5874] usb 6-1: config 0 has no interface number 1 [ 485.208766][ T5874] usb 6-1: config 0 has no interface number 2 [ 485.215992][ T5874] usb 6-1: config 0 interface 19 altsetting 1 endpoint 0xB has invalid maxpacket 616, setting to 64 [ 485.227260][ T5874] usb 6-1: config 0 interface 19 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 485.238191][ T5874] usb 6-1: config 0 interface 19 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 485.248963][ T5874] usb 6-1: config 0 interface 19 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 485.259827][ T5874] usb 6-1: config 0 interface 19 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 485.272906][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 485.283523][ T5874] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1023 [ 485.293427][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 485.304007][ T5874] usb 6-1: config 0 interface 19 has no altsetting 0 [ 485.310697][ T5874] usb 6-1: config 0 interface 88 has no altsetting 0 [ 485.313559][ T849] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 485.320465][ T5874] usb 6-1: New USB device found, idVendor=0db0, idProduct=871c, bcdDevice=14.39 [ 485.331498][ T849] usb 3-1: config 0 has no interface number 0 [ 485.341043][ T849] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.341181][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.352207][ T849] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 485.362272][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.372813][ T849] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 485.380668][ T5926] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 485.392380][ T849] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 485.402245][ T5874] usb 6-1: Product: syz [ 485.414547][ T849] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 485.416433][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.418260][ T5926] usb 2-1: config 0 descriptor?? [ 485.427711][ T849] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.427752][ T849] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 485.427771][ T849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.473152][ T5874] usb 6-1: Manufacturer: syz [ 485.473231][ T849] usb 3-1: config 0 descriptor?? [ 485.477749][ T5874] usb 6-1: SerialNumber: syz [ 485.480955][ T5926] smsusb:smsusb_probe: board id=8, interface number 0 [ 485.494934][ T5874] usb 6-1: config 0 descriptor?? [ 485.495087][T11325] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 485.500840][T11320] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 485.512511][T11325] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 485.516536][ T5926] smsusb:smsusb_probe: Device initialized with return code -19 [ 485.537502][ T849] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 485.680502][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.689388][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.697813][ T849] usb 2-1: USB disconnect, device number 61 [ 485.749515][T11325] netlink: 'syz.2.1310': attribute type 1 has an invalid length. [ 485.757345][T11325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1310'. [ 485.760356][ T5874] usb 6-1: USB disconnect, device number 14 [ 485.866750][ T5926] usb 3-1: USB disconnect, device number 57 [ 485.878428][ T5926] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 486.204473][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.303280][ T30] audit: type=1400 audit(1767311103.540:620): avc: denied { mounton } for pid=11335 comm="syz.1.1313" path="/proc/952/cgroup" dev="proc" ino=29354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 486.334512][ T30] audit: type=1400 audit(1767311103.570:621): avc: denied { mounton } for pid=11335 comm="syz.1.1313" path="/proc/952/cgroup" dev="nsfs" ino=4026532796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 487.729277][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.222391][ T31] INFO: task syz.0.781:9234 blocked for more than 143 seconds. [ 488.230950][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 488.292540][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.362204][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.370896][ T31] task:syz.0.781 state:D stack:29064 pid:9234 tgid:9226 ppid:5809 task_flags:0x400140 flags:0x00080002 [ 488.415733][ T30] audit: type=1400 audit(1767311105.650:622): avc: denied { watch watch_reads } for pid=11352 comm="syz.3.1317" path="/309" dev="tmpfs" ino=1658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 488.586446][ T31] Call Trace: [ 488.589751][ T31] [ 488.612531][ T31] ? __schedule+0x10b9/0x6150 [ 488.617232][ T31] __schedule+0x1139/0x6150 [ 488.631699][ T31] ? __pfx___schedule+0x10/0x10 [ 488.638839][ T31] ? find_held_lock+0x2b/0x80 [ 488.645787][ T31] ? schedule+0x2d7/0x3a0 [ 488.650141][ T31] schedule+0xe7/0x3a0 [ 488.656469][ T31] schedule_preempt_disabled+0x13/0x30 [ 488.663713][ T31] __mutex_lock+0xc69/0x1ca0 [ 488.668791][ T31] ? bdev_open+0xa2/0xe40 [ 488.673715][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 488.678958][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 488.686557][ T31] ? bdev_open+0xa2/0xe40 [ 488.691716][ T31] bdev_open+0xa2/0xe40 [ 488.696786][ T31] ? iput+0x35/0x40 [ 488.701562][ T31] bdev_file_open_by_dev+0x182/0x210 [ 488.707774][ T31] setup_bdev_super+0x39b/0x730 [ 488.715771][ T31] get_tree_bdev_flags+0x363/0x620 [ 488.721772][ T31] ? __pfx_qnx6_fill_super+0x10/0x10 [ 488.727559][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 488.733928][ T31] ? rcu_is_watching+0x12/0xc0 [ 488.740293][ T31] ? bpf_lsm_capable+0x9/0x10 [ 488.745769][ T31] ? security_capable+0x7e/0x260 [ 488.751007][ T31] vfs_get_tree+0x8e/0x330 [ 488.756057][ T31] path_mount+0x7bf/0x23a0 [ 488.760474][ T31] ? rcu_is_watching+0x12/0xc0 [ 488.767769][ T31] ? __pfx_path_mount+0x10/0x10 [ 488.773329][ T31] ? kmem_cache_free+0x2d8/0x770 [ 488.773477][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.778298][ T31] ? putname+0xf5/0x1a0 [ 488.790920][ T31] ? putname+0xf5/0x1a0 [ 488.795155][ T31] ? putname+0xf5/0x1a0 [ 488.801718][ T31] ? __x64_sys_mount+0x293/0x310 [ 488.808953][ T31] __x64_sys_mount+0x293/0x310 [ 488.814379][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 488.821411][ T31] do_syscall_64+0xcd/0xf80 [ 488.827770][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.835769][ T31] RIP: 0033:0x7f3b36b8f749 [ 488.841076][ T31] RSP: 002b:00007f3b37a06038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 488.851773][ T31] RAX: ffffffffffffffda RBX: 00007f3b36de6270 RCX: 00007f3b36b8f749 [ 488.860033][ T31] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 488.869211][ T31] RBP: 00007f3b36c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 488.877768][ T31] R10: 0000000000208800 R11: 0000000000000246 R12: 0000000000000000 [ 488.891768][ T31] R13: 00007f3b36de6308 R14: 00007f3b36de6270 R15: 00007ffc5550f668 [ 488.901628][ T31] [ 488.905578][ T31] [ 488.905578][ T31] Showing all locks held in the system: [ 488.972363][ T31] 1 lock held by khungtaskd/31: [ 488.977221][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 489.002183][ T31] 2 locks held by kworker/1:2/849: [ 489.032178][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 489.068675][ T31] #1: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 [ 489.102433][ T31] 2 locks held by getty/5568: [ 489.112808][ T31] #0: ffff8880327fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 489.132311][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 489.142756][ T31] 1 lock held by udevd/5827: [ 489.147397][ T31] #0: ffff888026b66358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 489.157142][ T31] 3 locks held by kworker/1:4/5881: [ 489.162414][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 489.173189][ T31] #1: ffffc90003427c90 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 489.183140][ T31] #2: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 489.193489][ T31] 2 locks held by syz.0.781/9234: [ 489.198551][ T31] #0: ffff888079c2e0e0 (&type->s_umount_key#73/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd00 [ 489.217298][ T31] #1: ffff888026b66358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 489.226920][ T31] 2 locks held by syz-executor/9460: [ 489.232337][ T31] #0: ffffffff90141ce8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 489.241529][ T31] #1: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 489.251785][ T31] 1 lock held by syz.3.1317/11353: [ 489.256968][ T31] #0: ffffffff90141ce8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 489.323033][ T31] [ 489.325385][ T31] ============================================= [ 489.325385][ T31] [ 489.357916][ T31] NMI backtrace for cpu 0 [ 489.357936][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 489.357952][ T31] Tainted: [L]=SOFTLOCKUP [ 489.357956][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.357961][ T31] Call Trace: [ 489.357965][ T31] [ 489.357970][ T31] dump_stack_lvl+0x116/0x1f0 [ 489.357986][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 489.358003][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 489.358016][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 489.358033][ T31] sys_info+0x133/0x180 [ 489.358047][ T31] watchdog+0xe66/0x1180 [ 489.358062][ T31] ? rcu_is_watching+0x12/0xc0 [ 489.358072][ T31] ? __pfx_watchdog+0x10/0x10 [ 489.358082][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.358098][ T31] ? __kthread_parkme+0x19e/0x250 [ 489.358109][ T31] ? __pfx_watchdog+0x10/0x10 [ 489.358120][ T31] kthread+0x3c5/0x780 [ 489.358132][ T31] ? __pfx_kthread+0x10/0x10 [ 489.358144][ T31] ? rcu_is_watching+0x12/0xc0 [ 489.358153][ T31] ? __pfx_kthread+0x10/0x10 [ 489.358165][ T31] ret_from_fork+0x983/0xb10 [ 489.358177][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 489.358189][ T31] ? __switch_to+0x7af/0x10d0 [ 489.358202][ T31] ? __pfx_kthread+0x10/0x10 [ 489.358214][ T31] ret_from_fork_asm+0x1a/0x30 [ 489.358235][ T31] [ 489.358239][ T31] Sending NMI from CPU 0 to CPUs 1: [ 489.499614][ C1] NMI backtrace for cpu 1 [ 489.499631][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.499648][ C1] Tainted: [L]=SOFTLOCKUP [ 489.499652][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.499659][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 489.499679][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 489.499691][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 489.499701][ C1] RAX: 0000000001f1ecbf RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 489.499709][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf79 RDI: ffffffff8bf2b400 [ 489.499717][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 489.499724][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 489.499732][ C1] R13: ffff88801dac24c0 R14: ffffffff9088b6d0 R15: 0000000000000000 [ 489.499739][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 489.499752][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.499760][ C1] CR2: 0000200000028000 CR3: 000000000e184000 CR4: 00000000003526f0 [ 489.499767][ C1] Call Trace: [ 489.499772][ C1] [ 489.499776][ C1] default_idle+0x13/0x20 [ 489.499793][ C1] default_idle_call+0x6c/0xb0 [ 489.499808][ C1] do_idle+0x38d/0x510 [ 489.499827][ C1] ? __pfx_do_idle+0x10/0x10 [ 489.499846][ C1] cpu_startup_entry+0x4f/0x60 [ 489.499863][ C1] start_secondary+0x21d/0x2d0 [ 489.499876][ C1] ? __pfx_start_secondary+0x10/0x10 [ 489.499889][ C1] common_startup_64+0x13e/0x148 [ 489.499909][ C1] [ 489.675085][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 489.681954][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 489.692635][ T31] Tainted: [L]=SOFTLOCKUP [ 489.696949][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.706998][ T31] Call Trace: [ 489.710269][ T31] [ 489.713182][ T31] dump_stack_lvl+0x3d/0x1f0 [ 489.717758][ T31] vpanic+0x640/0x6f0 [ 489.721721][ T31] panic+0xca/0xd0 [ 489.725422][ T31] ? __pfx_panic+0x10/0x10 [ 489.729818][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 489.735779][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 489.741915][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 489.748050][ T31] ? watchdog+0xe83/0x1180 [ 489.752445][ T31] ? watchdog+0xe76/0x1180 [ 489.756841][ T31] watchdog+0xe94/0x1180 [ 489.761065][ T31] ? rcu_is_watching+0x12/0xc0 [ 489.765808][ T31] ? __pfx_watchdog+0x10/0x10 [ 489.770460][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.775650][ T31] ? __kthread_parkme+0x19e/0x250 [ 489.780675][ T31] ? __pfx_watchdog+0x10/0x10 [ 489.785341][ T31] kthread+0x3c5/0x780 [ 489.789395][ T31] ? __pfx_kthread+0x10/0x10 [ 489.793968][ T31] ? rcu_is_watching+0x12/0xc0 [ 489.798714][ T31] ? __pfx_kthread+0x10/0x10 [ 489.803287][ T31] ret_from_fork+0x983/0xb10 [ 489.807982][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 489.813126][ T31] ? __switch_to+0x7af/0x10d0 [ 489.817803][ T31] ? __pfx_kthread+0x10/0x10 [ 489.822385][ T31] ret_from_fork_asm+0x1a/0x30 [ 489.827162][ T31] [ 489.830439][ T31] Kernel Offset: disabled [ 489.834738][ T31] Rebooting in 86400 seconds..