last executing test programs: 3m10.744223699s ago: executing program 3 (id=3483): semctl$SETVAL(0x0, 0xff7f0000, 0x10, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x9, 0x652, 0xc, 0x8000009657, 0xffffffffffffffff, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9}) socket(0x22, 0x1, 0x800000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010325bd7000feffffff0200000503fb00000000000008000e000e00"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x0, 0x2, 0x81, 0x10, 0x5, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0x1, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x3, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf101, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000004) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r7, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r6, 0x3ba0, &(0x7f0000000580)={0x48, 0x11, r8, 0x0, 0x3, 0x0, 0x0}) mprotect(&(0x7f0000185000/0x4000)=nil, 0x4000, 0x3000006) socket$inet_tcp(0x2, 0x1, 0x0) dup(r4) 3m7.805347798s ago: executing program 3 (id=3490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m7.370997788s ago: executing program 3 (id=3491): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0xfffffffd, 0x1, 0x6, 0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfb}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x52}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ab}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xae}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x80400c0}, 0x4040080) r7 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x17}}) 3m6.746323303s ago: executing program 3 (id=3493): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$fuse(0xfffffff6, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 3m6.244444006s ago: executing program 3 (id=3495): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0xffffffffffffff88, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x34, @lang_id={0x0, 0x3, 0x44e}}, 0x0, 0x0, 0x0}, 0x0) r1 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='W', 0x1, 0xfffffffffffffffb) keyctl$describe(0x6, r1, &(0x7f0000000680)=""/21, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000079a11cc1be39b0e24864e", @ANYRES32=0x1, @ANYRES16=r1, @ANYRES64=r1, @ANYRESOCT=r1, @ANYBLOB='\x00'/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x4edb, 0x6, 0x1, 0xffff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000500000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m5.180214041s ago: executing program 3 (id=3498): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000724fc", 0x13}], 0x1}, 0x0) 3m4.335933637s ago: executing program 32 (id=3498): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000724fc", 0x13}], 0x1}, 0x0) 2m25.44851355s ago: executing program 5 (id=3619): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0xfffffffd, 0x1, 0x6, 0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfb}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x52}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ab}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xae}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x80400c0}, 0x4040080) r7 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x17}}) 2m24.563140755s ago: executing program 5 (id=3621): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = io_uring_setup(0xf09, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000580)}, 0x10) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0xffffffd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10010, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000100)={0x4, 0x7, 0x101, 0xa, 0x40, 0x6, 0x401c}, 0xc) 2m23.904191886s ago: executing program 5 (id=3624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x25, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) 2m23.425388905s ago: executing program 5 (id=3626): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m22.406019868s ago: executing program 5 (id=3630): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r3, @ANYBLOB, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x50, &(0x7f0000000100)={0x0, 0x57}, 0x8) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x10000001, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000001240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r5, 0x401070c9, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x24043, 0x0) 2m21.869193531s ago: executing program 5 (id=3632): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0x6, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x0, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x1000008, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x1, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x6, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1fd, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x8, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x8, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x4, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x3, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x1c910dd1, 0x100, 0xa4, 0x8, 0x9, 0x9, 0x1, 0x6, 0x1, 0xfffffff3, 0x0, 0x3, 0x3, 0x200, 0x3, 0xdf, 0x7, 0x4, 0xf, 0xc, 0x6, 0x7fff, 0xc, 0x1000, 0x3e5, 0x8, 0x90, 0x3, 0x6, 0x4, 0x8001, 0x8, 0x0, 0x7, 0x16301c8, 0x80, 0x1, 0x1c59, 0xfff, 0x8, 0x1, 0x0, 0xb, 0x9, 0x800, 0x3, 0x5, 0x3, 0x4, 0x7fff, 0x0, 0x90, 0xb0b, 0x2, 0x8, 0x4000, 0x6, 0x2, 0x9, 0x5, 0x0, 0x3, 0xb49, 0x4, 0x0, 0xb430, 0x3, 0x3, 0xd, 0x4000000, 0x12, 0xf, 0x280000, 0x7, 0x2, 0x6, 0x9, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0xfffffffd, 0x3, 0x5, 0x5, 0x9, 0x40, 0x4, 0x2, 0xffffff00, 0x4, 0x6, 0xa25, 0x40, 0x81, 0x8, 0x72243b5d, 0x7, 0xb, 0xfff, 0x6, 0x9, 0xc840, 0x5de9244a, 0x993, 0xfffffffa, 0x8, 0xfffffff9, 0x5, 0x7fffffff, 0x9, 0x3, 0xffffffff, 0x401, 0xfffffffa, 0xc, 0xd5a8, 0x8000, 0x8002, 0x8000, 0x143b, 0x1, 0x0, 0x0, 0x0, 0x657, 0x8, 0x4, 0x8, 0x8000, 0xfffffffd, 0x6, 0x8, 0x1ff, 0x72, 0x1, 0x4, 0x26aa, 0x8, 0xaa6, 0x9, 0x8, 0xffffffff, 0x84, 0xc, 0x3, 0x10000, 0xc4, 0xd, 0x3, 0xf7, 0x7, 0x8, 0x5, 0x5f42, 0x6, 0x5, 0x10, 0x3, 0x17, 0x7f, 0x2, 0x0, 0x8001, 0x13e, 0xffffffff, 0xfa86, 0xf, 0x100, 0xe7d6, 0xbc, 0x2, 0x3, 0x101, 0x0, 0x890, 0x3, 0x2, 0x6, 0xffffffff, 0xdc6, 0x7, 0x0, 0x1, 0x4, 0x6, 0x0, 0xffffffff, 0x0, 0xe3b, 0x5, 0x4, 0x1, 0x2bf, 0x1, 0x8137, 0x4, 0x1ff, 0x9, 0x0, 0xffff, 0x1ff, 0x1, 0x7, 0x4, 0x1, 0x7ff, 0x4, 0xffff, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x6, 0xb, 0x85b, 0x8, 0x80000001, 0x7f, 0x10, 0x1, 0xb, 0x5, 0x7, 0x7, 0x4, 0x401, 0x81, 0x401, 0x4, 0x7, 0x9, 0x3ff, 0x4, 0x8, 0x6, 0x5, 0x9, 0x1, 0x7, 0xbb05, 0x4, 0x101, 0xffffff2e, 0x1, 0x417, 0x80000000, 0x4, 0xb, 0x100, 0xfffffff5, 0x100, 0x874, 0x7]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 2m21.546997925s ago: executing program 33 (id=3632): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0x6, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x0, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x1000008, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x1, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x6, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1fd, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x8, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x8, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x4, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x3, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x1c910dd1, 0x100, 0xa4, 0x8, 0x9, 0x9, 0x1, 0x6, 0x1, 0xfffffff3, 0x0, 0x3, 0x3, 0x200, 0x3, 0xdf, 0x7, 0x4, 0xf, 0xc, 0x6, 0x7fff, 0xc, 0x1000, 0x3e5, 0x8, 0x90, 0x3, 0x6, 0x4, 0x8001, 0x8, 0x0, 0x7, 0x16301c8, 0x80, 0x1, 0x1c59, 0xfff, 0x8, 0x1, 0x0, 0xb, 0x9, 0x800, 0x3, 0x5, 0x3, 0x4, 0x7fff, 0x0, 0x90, 0xb0b, 0x2, 0x8, 0x4000, 0x6, 0x2, 0x9, 0x5, 0x0, 0x3, 0xb49, 0x4, 0x0, 0xb430, 0x3, 0x3, 0xd, 0x4000000, 0x12, 0xf, 0x280000, 0x7, 0x2, 0x6, 0x9, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0xfffffffd, 0x3, 0x5, 0x5, 0x9, 0x40, 0x4, 0x2, 0xffffff00, 0x4, 0x6, 0xa25, 0x40, 0x81, 0x8, 0x72243b5d, 0x7, 0xb, 0xfff, 0x6, 0x9, 0xc840, 0x5de9244a, 0x993, 0xfffffffa, 0x8, 0xfffffff9, 0x5, 0x7fffffff, 0x9, 0x3, 0xffffffff, 0x401, 0xfffffffa, 0xc, 0xd5a8, 0x8000, 0x8002, 0x8000, 0x143b, 0x1, 0x0, 0x0, 0x0, 0x657, 0x8, 0x4, 0x8, 0x8000, 0xfffffffd, 0x6, 0x8, 0x1ff, 0x72, 0x1, 0x4, 0x26aa, 0x8, 0xaa6, 0x9, 0x8, 0xffffffff, 0x84, 0xc, 0x3, 0x10000, 0xc4, 0xd, 0x3, 0xf7, 0x7, 0x8, 0x5, 0x5f42, 0x6, 0x5, 0x10, 0x3, 0x17, 0x7f, 0x2, 0x0, 0x8001, 0x13e, 0xffffffff, 0xfa86, 0xf, 0x100, 0xe7d6, 0xbc, 0x2, 0x3, 0x101, 0x0, 0x890, 0x3, 0x2, 0x6, 0xffffffff, 0xdc6, 0x7, 0x0, 0x1, 0x4, 0x6, 0x0, 0xffffffff, 0x0, 0xe3b, 0x5, 0x4, 0x1, 0x2bf, 0x1, 0x8137, 0x4, 0x1ff, 0x9, 0x0, 0xffff, 0x1ff, 0x1, 0x7, 0x4, 0x1, 0x7ff, 0x4, 0xffff, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x6, 0xb, 0x85b, 0x8, 0x80000001, 0x7f, 0x10, 0x1, 0xb, 0x5, 0x7, 0x7, 0x4, 0x401, 0x81, 0x401, 0x4, 0x7, 0x9, 0x3ff, 0x4, 0x8, 0x6, 0x5, 0x9, 0x1, 0x7, 0xbb05, 0x4, 0x101, 0xffffff2e, 0x1, 0x417, 0x80000000, 0x4, 0xb, 0x100, 0xfffffff5, 0x100, 0x874, 0x7]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 16.939095861s ago: executing program 1 (id=4053): syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x0, 0x824ff) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000004000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r5, r5, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r5, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 16.324527735s ago: executing program 1 (id=4055): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = fsopen(0x0, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x9) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0xf9) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80130002800c0001"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)={r1}) 10.205261749s ago: executing program 1 (id=4070): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$BLKPG(r2, 0x80104d12, &(0x7f0000000640)={0x1, 0x0, 0x98, &(0x7f0000000580)={0x646e, 0x20003, 0x12}}) 9.420252838s ago: executing program 6 (id=4073): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x20000000000008, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x1}}, &(0x7f00000003c0)={0x0, 0xfffffffffffffff8, 0x30}}}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101600, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8.827473946s ago: executing program 1 (id=4075): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000224fc60", 0x14}], 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3, 0x3}, 0xfffffffd, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0xd37, 0x4, 0x0, 0xfffffffb}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) 8.204166348s ago: executing program 4 (id=4080): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x40000}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_fd={0x10, 0x1, 0x4, 0x0, 0x3, {}, {0x1, 0x8, 0x3, 0x7, 0x5, 0x79, "994bb014"}, 0x100, 0x4, {0x0}, 0x9}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.07665819s ago: executing program 2 (id=4081): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x20) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000d80)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x340, r1, 0x0, 0x500, 0x9, 0x0, 0x0, r0}]) 8.075087875s ago: executing program 0 (id=4082): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x2) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x8) 7.718072961s ago: executing program 2 (id=4083): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x121100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000004000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r4, 0x40045201, 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, &(0x7f0000001780)=0x4, 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000ac14140f000000000000000000000000000004d60a002b00ac1e000100000000000000000000000003000000073500001c0017c6d24a23885216f4275000000000002cbd700028bd70002cbd700027bd7000080000000c0015005d07350003000000"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0xa4, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfe, 0xb, 0x42, 0x840bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xaa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0xfffffffc, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x6, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x4, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x5, 0x4, 0xe000, 0xfffffff5, {0x0, 0xea60}, {0x4, 0x1, 0x8, 0x2, 0x4, 0xf, "a1a6c13c"}, 0xe, 0x1, {0x0}, 0x6}) 7.630555716s ago: executing program 0 (id=4084): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x121100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40045201, 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000ac14140f000000000000000000000000000004d60a002b00ac1e000100000000000000000000000003000000073500001c0017c6d24a23885216f4275000000000002cbd700028bd70002cbd700027bd7000080000000c0015005d07350003000000"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0xa4, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfe, 0xb, 0x42, 0x840bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xaa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0xfffffffc, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x6, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x4, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x5, 0x4, 0xe000, 0xfffffff5, {0x0, 0xea60}, {0x4, 0x1, 0x8, 0x2, 0x4, 0xf, "a1a6c13c"}, 0xe, 0x1, {0x0}, 0x6}) 6.777268959s ago: executing program 4 (id=4085): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$BLKPG(r2, 0x80104d12, &(0x7f0000000640)={0x1, 0x0, 0x98, &(0x7f0000000580)={0x646e, 0x20003, 0x12}}) 6.753369098s ago: executing program 1 (id=4086): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000000060500004182f760e0a6c200100000010000000000001930f105000400000000000900020073797a3000000000ef0005000000000005000100060000000d000300686173683a"], 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r3 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x7d95, 0x212583) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) clock_settime(0x7, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000018140100020000000300000008000700030000000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000000010000000000000000000000b97055b0fee1b227"], 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc00000009"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_connect(0x2, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) 6.479886913s ago: executing program 6 (id=4087): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000040)="d84f7390", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5a4, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x101, 0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0x2f00, 0x5, 0xd09d, 0xfff7ffff, 0x2d4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1001, 0x9, 0x1, 0xfffc, 0x6, 0x8, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xc, 0x7, 0x3, 0x4, 0x5, 0x70f]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000200001002dbd7000fcdb0a0080000900ffffffff000000000200fc0200000000000000000000000000000000c3b4d4d31d5f363c377e48e943f655b8e7ec81d71fa02f"], 0x30}}, 0x480d0) write$P9_RSETATTR(r3, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) splice(r5, 0x0, r2, 0x0, 0xffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5ac", 0x54}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871", 0x78}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.240478882s ago: executing program 0 (id=4088): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) read(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000700)={'sit0\x00', 0x0}) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000100)={'ip6gretap0\x00'}) bind$xdp(r4, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x1c}, 0x10) syz_genetlink_get_family_id$devlink(0x0, r4) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x1, 0x2, 0x188f, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r8, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 5.700146842s ago: executing program 4 (id=4089): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 6) 4.983399499s ago: executing program 6 (id=4090): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f00000007c0)="ba66168f026b30a8ede709f4f939dddfd4d771ab936a4c5927b7de65f2ccf3f2809409aa5d3e96d82ae5e2aa84f945480000f42c2dab250f50908ab1906ab9f5ef1e5a26ce5136c76d08163c1faf04c2b8a49aa329cf455b3dcad140cdb056bf6480d741fdfba7bb28abf1f76931ff102dd582552b4d599c16741512ffb2433757a79a01e55d896ec8873b96da968508940ae9c2138e95aee170bfdf1e05fd80de9272cd2b5ece8500ad06adaf28f051827e59e7576df98b38c61f78b8d9e8", 0xfffffffffffffeea, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) recvmmsg(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/225, 0xe1}}, {{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x2c, &(0x7f0000005c40), 0x1}, 0x8}], 0x3, 0x0, &(0x7f0000005ec0)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, 0x0) unshare(0x62000280) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) mount$9p_tcp(&(0x7f00000002c0), 0x0, &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) socket$alg(0x26, 0x5, 0x0) 4.527436403s ago: executing program 2 (id=4091): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="f14eec61ad153102ce1d0fddc7c7cd282fc9f7b7a8b288847984943fe32db0462e35ecb8b3b3df114df2d35f96c206eaebe337f720f54ee624e0c456630c8e", 0x3f}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0xac, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1f, 0xba, [@remote, @remote, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @broadcast, @remote]}, @timestamp={0x44, 0x18, 0x94, 0x0, 0x0, [0x0, 0x5, 0x4, 0x0, 0xc3f7]}, @lsrr={0x83, 0x13, 0x67, [@multicast2, @private=0xa010102, @empty, @multicast1]}, @rr={0x7, 0x1f, 0x3c, [@rand_addr=0x64010100, @multicast1, @remote, @private=0xa010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @cipso={0x86, 0xa, 0x3, [{0x1, 0x4, "7f5a"}]}, @end, @timestamp_prespec={0x44, 0x24, 0xf3, 0x3, 0x3, [{@private=0xa010101, 0x5}, {@broadcast, 0xcd06}, {@local, 0x9}, {@rand_addr=0x64010100, 0xd}]}]}}}, @ip_retopts={{0x14c, 0x0, 0x7, {[@cipso={0x86, 0x72, 0x0, [{0x5, 0x11, "5f12112d33a46d190f89b92b51f068"}, {0x5, 0x5, "6c2c92"}, {0x1, 0xc, "e1d435fa61bdd5bc4cfd"}, {0x1, 0xb, "862cbc953e0a1711c6"}, {0x7, 0x6, "93891a46"}, {0x1, 0x8, "8e536f5c30af"}, {0x2, 0x11, "8a78f4c456753a10523742e73d1a32"}, {0x6, 0x11, "332988a5d0fd40412d14f2f6d60a97"}, {0x7, 0xf, "f81fc82789557fdad5c3f5a0c7"}]}, @timestamp_prespec={0x44, 0xc, 0xb8, 0x3, 0xe, [{@broadcast, 0x80}]}, @generic={0x89, 0x9, "c58a85db6cd8ab"}, @timestamp={0x44, 0x1c, 0xfa, 0x0, 0x8, [0x58, 0x8, 0xf5, 0x5, 0xc, 0x8]}, @noop, @ssrr={0x89, 0xb, 0x0, [@empty, @remote]}, @timestamp_addr={0x44, 0x44, 0x57, 0x1, 0x6, [{@empty, 0x10}, {@private=0xa010101, 0x10}, {@local, 0x9}, {@broadcast, 0xf}, {@remote, 0x2}, {@private=0xa010102}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xce6}]}, @noop, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x6, 0x11, "decec26f15baa45c5ff1168ea5f3cb"}, {0x6, 0x8, "1ea9a610dcc7"}, {0x5, 0x4, "22d7"}, {0x6, 0x8, "5d42ec655263"}, {0x0, 0x12, "39dbc2ba00d83143494774f42348c6f7"}, {0x0, 0xa, "10ac80452eefc8ed"}]}]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @rr={0x7, 0x27, 0xfe, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}]}, @noop]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "d9e65f18acf18bea7e"}]}, @end]}}}], 0x268}, 0x4004814) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x5, 0x800) (async, rerun: 32) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) (rerun: 32) timer_create(0x7, &(0x7f00000003c0)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000000400)) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000440)=""/176) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000540)=0xb) (async, rerun: 64) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000580)=""/18) (async, rerun: 64) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000005c0)=""/62) r4 = socket$inet_sctp(0x2, 0x0, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000600)={0x0, 0x5, 0x4}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000680)={r5, 0x3}, &(0x7f00000006c0)=0x8) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000700), 0x40d80, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@newneigh={0x38, 0x1c, 0x25, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r7, 0x80, 0xa0, 0x5}, [@NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_LLADDR={0xa}, @NDA_PORT={0x6, 0x6, 0x4e24}]}, 0x38}, 0x1, 0x0, 0x0, 0x200090d1}, 0x4000) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={0x0}, &(0x7f0000000900)=0xc) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940), 0x250c00, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000980)={0x7, 0x3, 0x1, 0x5, 0x4, 0x0, [{0x246e, 0x200, 0x0, '\x00', 0x4}, {0xffffffffffff747d, 0x0, 0x401, '\x00', 0x1}, {0x4, 0xae28, 0x2, '\x00', 0x2200}, {0x9, 0x9, 0x7, '\x00', 0x6}]}) (async, rerun: 32) ioctl$KDGETLED(r6, 0x4b31, &(0x7f0000000a80)) (rerun: 32) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000ac0)={0x18, "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"}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r6) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x90, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1e892c0fb5740170aa5165933fca3223"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6c5cc0f70c951392"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e9c5e3054d530d40"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "311b9f19357adcb3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="00281efbf4a89e12100a02683f4be697"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x40c4010) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000ec0)=@gcm_128={{0x304}, "c6ce81cd93aba1ea", "02e8813f448fd70733ead8c72e321457", "f755cc3b", "c9006f4f80cd8196"}, 0x28) (async) r11 = mq_open(&(0x7f0000000f00)='-/!\x00', 0x1, 0x81, &(0x7f0000000f40)={0x8, 0xfdf, 0x10001, 0x2}) fcntl$F_GET_FILE_RW_HINT(r11, 0x40d, &(0x7f0000000f80)) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000fc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) sched_setscheduler(r8, 0x5, &(0x7f0000001200)=0x7) 4.468101044s ago: executing program 4 (id=4092): mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d00000000000000000000001004000000000000000000000903000000000000006100d2f09e9896c0ebf283efc3"], 0x0, 0x52}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000f3ffffffffffffff0080000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x5f) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2", 0x1a}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000003c0)=@secondary) keyctl$get_persistent(0x16, 0x0, r2) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="7ea5265699f22fa48b708cb6aab3866036bbaecba5ef54b7fa8aa7e445cc744c3e8cff628d3fb80f107a84e37cdfc681c25859552de612a885ae358b885acacf1ac0979975e548a47aeb9d96682b8dddd5de5a4313b2d8ae35496ef153ec7e1b7fa0dc6f2d7d08f26712208f4022178fdc48ef8588ea00f02e744270728a41", 0x7f, 0x10, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="010000000800"}) stat(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x2, 0x200}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) userfaultfd(0x801) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4814}, 0x24000080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r3, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r5, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000800) 4.210550946s ago: executing program 4 (id=4093): socket$inet6(0xa, 0x5, 0x80000ff) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c009900110000025100000028005a800c0001800500020065000000180003800a0001000c3002026b0000000500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000000}, 0x4004000) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x4) fcntl$setsig(r4, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000400), 0x0) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) 4.154042718s ago: executing program 0 (id=4094): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 3.156185429s ago: executing program 2 (id=4095): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_fd={0x10, 0x1, 0x4, 0x0, 0x3, {}, {0x1, 0x8, 0x3, 0x7, 0x5, 0x79, "994bb014"}, 0x100, 0x4, {0x0}, 0x9}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.914349396s ago: executing program 1 (id=4096): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000180)={0x0, 0xd9d}, 0x8) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.893071334s ago: executing program 0 (id=4097): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000044) syz_open_dev$vim2m(0x0, 0x7, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af"}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000380)=@userptr={0x0, 0x1, 0x4, 0x800000, 0x26f3, {}, {0x1, 0xc, 0x4, 0x6, 0x0, 0x1, "bfec287c"}, 0x0, 0x2, {0x0}, 0xe1}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r6]) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x9e, 0x245b1f2a, 0x81, 0xfffff5df}, 0x18, 0x1000) 1.880744819s ago: executing program 0 (id=4098): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x121100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40045201, 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000ac14140f000000000000000000000000000004d60a002b00ac1e000100000000000000000000000003000000073500001c0017c6d24a23885216f4275000000000002cbd700028bd70002cbd700027bd7000080000000c0015005d07350003000000"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0xa4, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfe, 0xb, 0x42, 0x840bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xaa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0xfffffffc, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x6, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x4, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x5, 0x4, 0xe000, 0xfffffff5, {0x0, 0xea60}, {0x4, 0x1, 0x8, 0x2, 0x4, 0xf, "a1a6c13c"}, 0xe, 0x1, {0x0}, 0x6}) 1.733272512s ago: executing program 2 (id=4099): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$BLKPG(r2, 0x80104d12, &(0x7f0000000640)={0x1, 0x0, 0x98, &(0x7f0000000580)={0x646e, 0x20003, 0x12}}) 1.412143592s ago: executing program 6 (id=4100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0xff010000) 925.840267ms ago: executing program 4 (id=4101): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x121100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000004000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r4, 0x40045201, 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, &(0x7f0000001780)=0x4, 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000ac14140f000000000000000000000000000004d60a002b00ac1e000100000000000000000000000003000000073500001c0017c6d24a23885216f4275000000000002cbd700028bd70002cbd700027bd7000080000000c0015005d07350003000000"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0xa4, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfe, 0xb, 0x42, 0x840bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xaa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0xfffffffc, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x6, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x4, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000180)=@multiplanar_mmap={0x6, 0x5, 0x4, 0xe000, 0xfffffff5, {0x0, 0xea60}, {0x4, 0x1, 0x8, 0x2, 0x4, 0xf, "a1a6c13c"}, 0xe, 0x1, {0x0}, 0x6}) 801.250083ms ago: executing program 6 (id=4102): mmap$IORING_OFF_CQ_RING(&(0x7f0000bf1000/0x4000)=nil, 0x4000, 0x1, 0xa2131, 0xffffffffffffffff, 0x8000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) pipe(&(0x7f0000000440)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x132, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) socket$can_bcm(0x1d, 0x2, 0x2) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, &(0x7f0000001200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'}) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendto(r2, 0x0, 0x20, 0x60ec, &(0x7f00000004c0)=@phonet={0x23, 0x6, 0x2, 0xf}, 0x80) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x1e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, 0x0, 0x0) 284.1µs ago: executing program 2 (id=4103): ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001900)={0x0, [{0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x3010, 0x4, &(0x7f0000002080)="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"}, {0x0, 0x0, 0x7f, 0x0}, {0x0, 0x0, 0xd94, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xd03, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x47d, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xdd, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0xe7c, 0x0}]}) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x51, 0x0, 0x1, 0x2}, 0x28) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7d) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0xc0049364, &(0x7f0000000180)) 0s ago: executing program 6 (id=4104): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0x2f00, 0x5, 0xd09d, 0xfff7ffff, 0x2d4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1001, 0x9, 0x1, 0xfffc, 0x6, 0x8, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xc, 0x7, 0x3, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x1000008}) kernel console output (not intermixed with test programs): e, screwing up backlog [ 1178.754980][T20293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.765797][T20528] netlink: 'syz.0.3677': attribute type 11 has an invalid length. [ 1178.816731][ T8456] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.846042][ T8456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.890384][T14175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.965676][ T8456] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.030649][T20525] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1179.125177][ T8456] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.373737][T20537] overlayfs: missing 'lowerdir' [ 1179.559479][ T8456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.576774][ T8456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.609024][ T8456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.619156][ T8456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.738184][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'. [ 1179.840106][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.860102][T17929] Bluetooth: hci5: unexpected event for opcode 0x200b [ 1179.919974][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.980116][T20560] xt_hashlimit: size too large, truncated to 1048576 [ 1180.860496][T20568] FAULT_INJECTION: forcing a failure. [ 1180.860496][T20568] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.873543][T20568] CPU: 0 UID: 0 PID: 20568 Comm: syz.0.3685 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.873565][T20568] Tainted: [L]=SOFTLOCKUP [ 1180.873569][T20568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1180.873576][T20568] Call Trace: [ 1180.873580][T20568] [ 1180.873585][T20568] dump_stack_lvl+0x100/0x190 [ 1180.873606][T20568] should_fail_ex.cold+0x5/0xa [ 1180.873622][T20568] should_failslab+0xc2/0x120 [ 1180.873634][T20568] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1180.873651][T20568] ? __alloc_skb+0x140/0x710 [ 1180.873669][T20568] __alloc_skb+0x140/0x710 [ 1180.873682][T20568] ? __alloc_skb+0x5b7/0x710 [ 1180.873697][T20568] ? __pfx___alloc_skb+0x10/0x10 [ 1180.873716][T20568] __neigh_notify+0xe6/0x350 [ 1180.873733][T20568] ? neigh_managed_work+0x210/0x260 [ 1180.873744][T20568] __neigh_update+0xd3e/0x3220 [ 1180.873765][T20568] arp_ioctl+0x4a2/0xcb0 [ 1180.873780][T20568] ? __pfx_arp_ioctl+0x10/0x10 [ 1180.873794][T20568] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1180.873805][T20568] ? update_se+0x94/0x760 [ 1180.873816][T20568] ? __schedule+0x2fd3/0x6120 [ 1180.873832][T20568] ? __schedule+0x2fd3/0x6120 [ 1180.873851][T20568] inet_ioctl+0x1a4/0x3f0 [ 1180.873863][T20568] ? __pfx_inet_ioctl+0x10/0x10 [ 1180.873883][T20568] ? preempt_schedule_irq+0x7b/0x90 [ 1180.873901][T20568] ? irqentry_exit+0x180/0x670 [ 1180.873912][T20568] sock_do_ioctl+0x118/0x280 [ 1180.873925][T20568] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1180.873940][T20568] ? sock_do_ioctl+0x24/0x280 [ 1180.873954][T20568] sock_ioctl+0x599/0x6b0 [ 1180.873967][T20568] ? __pfx_sock_ioctl+0x10/0x10 [ 1180.873983][T20568] ? selinux_file_ioctl+0x139/0x290 [ 1180.874000][T20568] ? selinux_file_ioctl+0xb4/0x290 [ 1180.874019][T20568] ? __pfx_sock_ioctl+0x10/0x10 [ 1180.874032][T20568] __x64_sys_ioctl+0x18e/0x210 [ 1180.874050][T20568] do_syscall_64+0x106/0xf80 [ 1180.874062][T20568] ? clear_bhb_loop+0x40/0x90 [ 1180.874075][T20568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.874086][T20568] RIP: 0033:0x7f572959c819 [ 1180.874096][T20568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.874107][T20568] RSP: 002b:00007f57277d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1180.874118][T20568] RAX: ffffffffffffffda RBX: 00007f5729816090 RCX: 00007f572959c819 [ 1180.874125][T20568] RDX: 00002000000003c0 RSI: 0000000000008955 RDI: 0000000000000005 [ 1180.874132][T20568] RBP: 00007f57277d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.874138][T20568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.874144][T20568] R13: 00007f5729816128 R14: 00007f5729816090 R15: 00007ffe61122388 [ 1180.874158][T20568] [ 1181.300481][T14175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.349299][ T30] audit: type=1400 audit(2000001144.359:1651): avc: denied { read } for pid=20572 comm="syz.6.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1181.405614][ T30] audit: type=1400 audit(2000001144.419:1652): avc: denied { setattr } for pid=20572 comm="syz.6.3686" name="admmidi2" dev="devtmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1182.323793][T14175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.882674][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.383286][T14175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.632236][T20599] fuse: Bad value for 'rootmode' [ 1184.412580][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.620230][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.924093][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.238758][T20619] use of bytesused == 0 is deprecated and will be removed in the future, [ 1186.247318][T20619] use the actual size instead. [ 1186.566837][ T9] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1186.665931][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.764315][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1187.059243][ T9] usb 1-1: config 0 has no interface number 0 [ 1187.069782][ T9] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1187.086284][T20629] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3699'. [ 1187.089904][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1187.116389][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1187.150731][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1187.160123][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1187.168327][ T9] usb 1-1: Product: syz [ 1187.175802][ T9] usb 1-1: SerialNumber: syz [ 1187.231443][T20632] netlink: zone id is out of range [ 1187.236783][T20632] netlink: zone id is out of range [ 1187.243054][T20632] netlink: zone id is out of range [ 1187.263037][ T9] usb 1-1: config 0 descriptor?? [ 1187.269576][ T9] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1187.277183][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input121 [ 1187.688201][ T9] net_ratelimit: 6 callbacks suppressed [ 1187.688227][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.900057][T20636] ptrace attach of "./syz-executor exec"[20638] was attempted by "./syz-executor exec"[20636] [ 1188.081599][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.303945][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1188.311163][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1188.318245][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1188.325210][ T9] usb 1-1: USB disconnect, device number 102 [ 1188.331191][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1188.331203][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1188.396690][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1188.584267][T20651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=20651 comm=syz.6.3707 [ 1188.738711][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.960750][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.511533][T20658] netlink: 'syz.2.3706': attribute type 11 has an invalid length. [ 1189.732479][T20658] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1189.764417][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.853926][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.989468][ T30] audit: type=1400 audit(2000001153.999:1653): avc: denied { name_bind } for pid=20669 comm="syz.6.3711" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1191.073207][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3714'. [ 1191.210459][ T30] audit: type=1400 audit(2000001154.019:1654): avc: denied { name_connect } for pid=20669 comm="syz.6.3711" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1191.298144][T20701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.306856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.593634][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'. [ 1191.613133][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'. [ 1191.923175][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.000189][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.985614][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.337863][T20734] Cannot find add_set index 0 as target [ 1193.546472][T20737] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1193.818652][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3726'. [ 1194.007380][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.069708][ T29] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1194.146849][T20750] netlink: 'syz.4.3728': attribute type 11 has an invalid length. [ 1194.292493][T20754] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1194.335651][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 1194.364624][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.697723][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1194.720104][ T29] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1194.935823][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.960068][ T29] usb 2-1: config 0 descriptor?? [ 1194.981835][ T29] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1195.040368][T10985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.048482][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.218900][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3727'. [ 1195.349783][T20768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3727'. [ 1195.497411][ T5875] usb 2-1: USB disconnect, device number 83 [ 1195.878625][ T30] audit: type=1400 audit(2000001158.889:1655): avc: denied { remount } for pid=20775 comm="syz.6.3731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1195.898841][T20780] devpts: Bad value for 'max' [ 1195.957809][T20784] fuse: Unknown parameter 'user_i00000000000000000000' [ 1196.071544][T20776] netlink: 'syz.6.3731': attribute type 1 has an invalid length. [ 1196.087546][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.109744][T20776] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3731'. [ 1196.139821][T20776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.160629][T20776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.167797][T20776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.719909][ T8835] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1197.159817][ T29] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1197.164721][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.221416][ T8835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.263891][ T8835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.309780][ T8835] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1197.521238][ T29] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1197.534699][ T8835] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1197.537982][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1197.570059][T20826] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3740'. [ 1197.639207][ T29] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1197.640405][ T8835] usb 7-1: Manufacturer: syz [ 1197.658567][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.681627][T10985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.699723][ T8835] usb 7-1: config 0 descriptor?? [ 1197.701015][ T29] usb 3-1: config 0 descriptor?? [ 1197.817065][ T29] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1198.080180][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.781731][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.797262][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.808197][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.822547][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.943937][ T8835] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.001C/input/input122 [ 1199.056567][ T8835] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.001C/input/input123 [ 1199.132476][ T8835] input: syz Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.001C/input/input124 [ 1199.195112][T20853] netlink: 'syz.1.3742': attribute type 11 has an invalid length. [ 1199.232793][ T8835] input: syz Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.001C/input/input125 [ 1199.258721][ T8835] uclogic 0003:256C:006D.001C: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.6-1/input0 [ 1199.359754][T10985] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1199.415869][ T8835] usb 7-1: USB disconnect, device number 2 [ 1199.532794][T10985] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1199.561575][T10985] usb 1-1: config 66 has an invalid interface number: 122 but max is 0 [ 1199.575497][T10985] usb 1-1: config 66 has an invalid descriptor of length 10, skipping remainder of the config [ 1199.591090][T10985] usb 1-1: config 66 has no interface number 0 [ 1199.593345][T20859] fuse: Unknown parameter 'user_i00000000000000000000' [ 1199.597268][T10985] usb 1-1: too many endpoints for config 66 interface 122 altsetting 101: 58, using maximum allowed: 30 [ 1199.597306][T10985] usb 1-1: config 66 interface 122 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 1199.597334][T10985] usb 1-1: config 66 interface 122 has no altsetting 0 [ 1199.599055][T10985] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1199.739616][T10985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.754748][T10985] usb 1-1: Product: syz [ 1199.889829][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.904605][T17821] usb 3-1: USB disconnect, device number 124 [ 1199.989766][T10985] usb 1-1: Manufacturer: syz [ 1199.994385][T10985] usb 1-1: SerialNumber: syz [ 1200.010276][ T5952] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1200.190568][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 1200.197009][ T5952] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1200.213680][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1200.224503][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1200.249803][ T5952] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.269422][ T5952] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1200.279797][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.371081][T10985] usb 1-1: USB disconnect, device number 103 [ 1200.545618][T20864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.555744][T20864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.564490][ T5952] usb 5-1: usb_control_msg returned -32 [ 1200.571662][ T5952] usbtmc 5-1:16.0: can't read capabilities [ 1200.580247][T20864] binder: 20863:20864 ioctl c0306201 2000000001c0 returned -14 [ 1200.627086][ T5952] usb 5-1: USB disconnect, device number 85 [ 1201.051661][T20883] 9p: Bad value for 'wfdno' [ 1201.058204][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.292672][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.079967][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.390200][T20895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3752'. [ 1202.419884][T20895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1202.457048][T20902] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1202.576433][T20895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.094861][T20912] fuse: Unknown parameter 'user_i00000000000000000000' [ 1203.120274][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.154927][T20909] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3753'. [ 1203.248151][ T30] audit: type=1400 audit(2000001166.249:1656): avc: denied { map } for pid=20914 comm="syz.6.3756" path="socket:[79363]" dev="sockfs" ino=79363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1203.331157][T20923] FAULT_INJECTION: forcing a failure. [ 1203.331157][T20923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.347470][T20923] CPU: 0 UID: 0 PID: 20923 Comm: syz.1.3757 Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.347497][T20923] Tainted: [L]=SOFTLOCKUP [ 1203.347503][T20923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1203.347514][T20923] Call Trace: [ 1203.347520][T20923] [ 1203.347526][T20923] dump_stack_lvl+0x100/0x190 [ 1203.347560][T20923] should_fail_ex.cold+0x5/0xa [ 1203.347582][T20923] _copy_from_user+0x2e/0xd0 [ 1203.347604][T20923] kstrtouint_from_user+0xd6/0x1d0 [ 1203.347626][T20923] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1203.347648][T20923] ? __lock_acquire+0x4a5/0x2630 [ 1203.347670][T20923] ? lock_acquire+0x1cf/0x380 [ 1203.347699][T20923] proc_fail_nth_write+0x83/0x220 [ 1203.347726][T20923] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1203.347756][T20923] vfs_write+0x2aa/0x1070 [ 1203.347775][T20923] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1203.347802][T20923] ? __pfx_vfs_write+0x10/0x10 [ 1203.347816][T20923] ? __fget_files+0x215/0x3d0 [ 1203.347841][T20923] ? __fget_files+0x21f/0x3d0 [ 1203.347866][T20923] ksys_write+0x12a/0x250 [ 1203.347881][T20923] ? __pfx_ksys_write+0x10/0x10 [ 1203.347902][T20923] do_syscall_64+0x106/0xf80 [ 1203.347918][T20923] ? clear_bhb_loop+0x40/0x90 [ 1203.347941][T20923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.347958][T20923] RIP: 0033:0x7f7bfcb5d04e [ 1203.347972][T20923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1203.347988][T20923] RSP: 002b:00007f7bfd984fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1203.348005][T20923] RAX: ffffffffffffffda RBX: 00007f7bfd9856c0 RCX: 00007f7bfcb5d04e [ 1203.348017][T20923] RDX: 0000000000000001 RSI: 00007f7bfd9850a0 RDI: 0000000000000005 [ 1203.348027][T20923] RBP: 00007f7bfd985090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.348037][T20923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.348047][T20923] R13: 00007f7bfce16038 R14: 00007f7bfce15fa0 R15: 00007ffc32051c58 [ 1203.348072][T20923] [ 1203.395102][T20922] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1204.169945][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.359944][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.733729][T14391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.742478][T10985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.770311][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.869257][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.893802][T20964] input: syz0 as /devices/virtual/input/input126 [ 1206.341083][ T30] audit: type=1400 audit(2000001169.329:1657): avc: denied { map } for pid=20971 comm="syz.4.3768" path="socket:[79414]" dev="sockfs" ino=79414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1206.450047][ T8835] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1206.564760][T20975] fuse: Unknown parameter 'user_id00000000000000000000' [ 1206.902417][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.999697][ T8835] usb 1-1: Using ep0 maxpacket: 16 [ 1207.006182][ T30] audit: type=1400 audit(2000001170.019:1658): avc: denied { append } for pid=20979 comm="syz.1.3769" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1207.052816][ T8835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.063905][ T8835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.083143][ T8835] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1207.254844][ T30] audit: type=1400 audit(2000001170.069:1659): avc: denied { map } for pid=20979 comm="syz.1.3769" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1207.280084][ T8835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.280421][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.318562][ T30] audit: type=1400 audit(2000001170.069:1660): avc: denied { execute } for pid=20979 comm="syz.1.3769" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1207.318714][ T8835] usb 1-1: config 0 descriptor?? [ 1207.393485][ T30] audit: type=1400 audit(2000001170.299:1661): avc: denied { ioctl } for pid=20971 comm="syz.4.3768" path="socket:[79413]" dev="sockfs" ino=79413 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1207.526497][T20984] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1207.533034][T20984] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1207.713785][T20984] vhci_hcd vhci_hcd.0: Device attached [ 1208.009408][ T1206] usb 36-1: SetAddress Request (2) to port 0 [ 1208.016055][T20986] vhci_hcd: connection closed [ 1208.045110][ T50] vhci_hcd vhci_hcd.1: stop threads [ 1208.061742][ T50] vhci_hcd vhci_hcd.1: release socket [ 1208.133768][ T8835] kye 0003:0458:5016.001D: control desc unexpectedly large [ 1208.195397][ T1206] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1208.204467][ T50] vhci_hcd vhci_hcd.1: disconnect device [ 1208.267764][ T8835] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.001D/input/input127 [ 1208.281947][ T1206] usb 36-1: enqueue for inactive port 0 [ 1208.493969][ T8835] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.001D/input/input128 [ 1208.518935][T21004] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1208.655592][T21009] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3773'. [ 1208.739471][ T8835] kye 0003:0458:5016.001D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 1208.752798][ T1206] usb usb36-port1: attempt power cycle [ 1208.962415][ T9] net_ratelimit: 5 callbacks suppressed [ 1208.962431][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.359969][ T5952] usb 1-1: USB disconnect, device number 104 [ 1209.385925][ T1206] usb usb36-port1: unable to enumerate USB device [ 1210.011176][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.026194][T21025] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1210.073944][ T30] audit: type=1400 audit(2000001173.089:1662): avc: denied { getopt } for pid=21017 comm="syz.4.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1210.499907][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.508877][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.629488][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.629683][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.646011][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.654129][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.662245][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.676019][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.183261][T21033] input: syz0 as /devices/virtual/input/input129 [ 1211.249763][T21037] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1211.361833][T21044] fuse: Bad value for 'fd' [ 1211.573823][T21048] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1211.627024][ T5952] lo speed is unknown, defaulting to 1000 [ 1212.052369][ T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1212.269569][ T9] usb 3-1: device descriptor read/64, error -71 [ 1212.514227][T21073] trusted_key: syz.6.3788 sent an empty control message without MSG_MORE. [ 1212.719285][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1212.909800][ T9] usb 3-1: device descriptor read/64, error -71 [ 1213.688213][ T5952] libceph: connect (1)[c::]:6789 error -101 [ 1213.712072][T21078] ceph: No mds server is up or the cluster is laggy [ 1213.760985][ T9] usb usb3-port1: attempt power cycle [ 1213.805867][ T5952] libceph: mon0 (1)[c::]:6789 connect error [ 1214.071920][T21093] netlink: 'syz.1.3786': attribute type 11 has an invalid length. [ 1214.079921][ T1206] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1214.190671][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1214.261310][ T1206] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.272112][ T9] usb 3-1: device descriptor read/8, error -71 [ 1214.279719][ T1206] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1214.319074][T21103] fuse: Unknown parameter 'user_id00000000000000000000' [ 1214.338762][ T1206] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1214.378097][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.517657][ T1206] usb 1-1: config 0 descriptor?? [ 1214.523516][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1214.560908][ T9] usb 3-1: device descriptor read/8, error -71 [ 1214.668806][ T5952] net_ratelimit: 10 callbacks suppressed [ 1214.668823][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.696287][ T9] usb usb3-port1: unable to enumerate USB device [ 1214.728112][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.838381][T21111] input: syz0 as /devices/virtual/input/input130 [ 1215.050110][T21116] vivid-003: ================= START STATUS ================= [ 1215.105242][T21116] vivid-003: Radio HW Seek Mode: Bounded [ 1215.121522][T21116] vivid-003: Radio Programmable HW Seek: false [ 1215.126780][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3793'. [ 1215.177322][T21116] vivid-003: RDS Rx I/O Mode: Block I/O [ 1215.183091][T21116] vivid-003: Generate RBDS Instead of RDS: false [ 1215.197603][T21116] vivid-003: RDS Reception: true [ 1215.227000][T21116] vivid-003: RDS Program Type: 0 inactive [ 1215.234361][T21116] vivid-003: RDS PS Name: inactive [ 1215.251821][T21116] vivid-003: RDS Radio Text: inactive [ 1215.396749][T21121] netlink: 'syz.4.3793': attribute type 2 has an invalid length. [ 1215.551946][T21121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3793'. [ 1215.571453][T21116] vivid-003: RDS Traffic Announcement: false inactive [ 1215.588787][T21116] vivid-003: RDS Traffic Program: false inactive [ 1215.603066][T21116] vivid-003: RDS Music: false inactive [ 1215.611713][T21116] vivid-003: ================== END STATUS ================== [ 1215.680834][ T30] audit: type=1400 audit(2000001178.569:1663): avc: denied { write } for pid=21115 comm="syz.4.3793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1215.735844][T21135] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 1215.747484][ T30] audit: type=1400 audit(2000001178.759:1664): avc: denied { accept } for pid=21134 comm="syz.6.3797" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1215.775304][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.001246][ T8835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1216.037426][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3799'. [ 1216.199678][ T8835] usb 7-1: Using ep0 maxpacket: 8 [ 1216.208995][ T8835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1216.912942][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.927217][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.929830][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.935350][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.944050][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.951431][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.967543][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.211031][ T8835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 1217.320305][ T8835] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1217.332278][ T8835] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 1217.405449][ T8835] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1217.419023][ T8835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.429693][ T8835] usb 7-1: Product: syz [ 1217.435903][ T8835] usb 7-1: Manufacturer: И [ 1217.445314][ T8835] usb 7-1: SerialNumber: syz [ 1217.551042][ T1206] usb 1-1: USB disconnect, device number 105 [ 1217.609753][T21149] binder: BINDER_SET_CONTEXT_MGR already set [ 1217.829838][ T8835] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1217.838753][ T8835] usb 7-1: MIDIStreaming interface descriptor not found [ 1219.226213][T21149] binder: 21148:21149 ioctl 4018620d 200000004a80 returned -16 [ 1219.300066][ T8835] usb 7-1: USB disconnect, device number 3 [ 1219.307313][T21166] block nbd1: shutting down sockets [ 1219.465391][T20865] udevd[20865]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1219.789958][T21180] netlink: 'syz.6.3809': attribute type 3 has an invalid length. [ 1219.806868][ T30] audit: type=1400 audit(2000001182.799:1665): avc: denied { read } for pid=21172 comm="syz.6.3809" dev="sockfs" ino=78570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1219.896413][ T8835] net_ratelimit: 5 callbacks suppressed [ 1219.896428][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.966596][T21184] binder: 21183:21184 ioctl c0306201 0 returned -14 [ 1219.974058][T21184] binder: BINDER_SET_CONTEXT_MGR already set [ 1219.980049][T21184] binder: 21183:21184 ioctl 4018620d 200000004a80 returned -16 [ 1220.008135][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.960335][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.979841][ T5952] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1221.519966][ T5952] usb 2-1: device descriptor read/64, error -71 [ 1221.840025][ T5952] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1222.013023][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.030646][ T5952] usb 2-1: device descriptor read/64, error -71 [ 1222.150728][ T5952] usb usb2-port1: attempt power cycle [ 1222.239867][T21211] netlink: 'syz.4.3819': attribute type 1 has an invalid length. [ 1222.418021][T21225] FAULT_INJECTION: forcing a failure. [ 1222.418021][T21225] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.439942][T21225] CPU: 0 UID: 0 PID: 21225 Comm: syz.2.3824 Tainted: G L syzkaller #0 PREEMPT(full) [ 1222.439973][T21225] Tainted: [L]=SOFTLOCKUP [ 1222.439979][T21225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1222.439990][T21225] Call Trace: [ 1222.439996][T21225] [ 1222.440003][T21225] dump_stack_lvl+0x100/0x190 [ 1222.440038][T21225] should_fail_ex.cold+0x5/0xa [ 1222.440063][T21225] should_failslab+0xc2/0x120 [ 1222.440082][T21225] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1222.440105][T21225] ? __xdp_reg_mem_model+0x134/0x690 [ 1222.440140][T21225] __xdp_reg_mem_model+0x134/0x690 [ 1222.440170][T21225] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 1222.440199][T21225] ? page_pool_list+0x223/0x2a0 [ 1222.440225][T21225] xdp_reg_mem_model+0x22/0x70 [ 1222.440243][T21225] bpf_test_run_xdp_live+0x1cb/0x760 [ 1222.440271][T21225] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1222.440307][T21225] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1222.440353][T21225] ? _copy_from_user+0x59/0xd0 [ 1222.440375][T21225] ? bpf_test_init.isra.0+0x51/0x100 [ 1222.440402][T21225] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 1222.440439][T21225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1222.440474][T21225] ? fput+0x79/0x100 [ 1222.440496][T21225] ? __bpf_prog_get+0x97/0x2a0 [ 1222.440529][T21225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1222.440557][T21225] __sys_bpf+0x1725/0x4b90 [ 1222.440582][T21225] ? __pfx___sys_bpf+0x10/0x10 [ 1222.440599][T21225] ? proc_fail_nth_write+0x9f/0x220 [ 1222.440626][T21225] ? find_held_lock+0x2b/0x80 [ 1222.440655][T21225] ? find_held_lock+0x2b/0x80 [ 1222.440678][T21225] ? ksys_write+0x190/0x250 [ 1222.440701][T21225] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1222.440722][T21225] ? __fget_files+0x215/0x3d0 [ 1222.440754][T21225] ? fput+0x79/0x100 [ 1222.440776][T21225] ? ksys_write+0x1ac/0x250 [ 1222.440793][T21225] ? __pfx_ksys_write+0x10/0x10 [ 1222.440815][T21225] __x64_sys_bpf+0x7b/0xc0 [ 1222.440838][T21225] ? lockdep_hardirqs_on+0x78/0x100 [ 1222.440856][T21225] do_syscall_64+0x106/0xf80 [ 1222.440873][T21225] ? clear_bhb_loop+0x40/0x90 [ 1222.440895][T21225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.440914][T21225] RIP: 0033:0x7fd7e499c819 [ 1222.440930][T21225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.440947][T21225] RSP: 002b:00007fd7e58b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1222.440965][T21225] RAX: ffffffffffffffda RBX: 00007fd7e4c15fa0 RCX: 00007fd7e499c819 [ 1222.440977][T21225] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 000000000000000a [ 1222.440988][T21225] RBP: 00007fd7e58b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.440998][T21225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.441009][T21225] R13: 00007fd7e4c16038 R14: 00007fd7e4c15fa0 R15: 00007fffdd2abb18 [ 1222.441033][T21225] [ 1222.519912][ T5952] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1222.769717][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.777893][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.786051][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.794187][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.067704][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.076189][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.679713][ T5952] usb 2-1: device descriptor read/8, error -71 [ 1223.836560][T21239] SELinux: failed to load policy [ 1223.884995][T21236] 9p: Bad value for 'wfdno' [ 1223.893083][T21236] binder_alloc: binder_alloc_mmap_handler: 21235 200000fed000-200001000000 already mapped failed -16 [ 1224.259714][ T1206] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1224.695479][ T1206] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1224.707300][ T1206] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1224.716670][ T1206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.735561][ T1206] usb 7-1: config 0 descriptor?? [ 1225.204039][ T5875] net_ratelimit: 3 callbacks suppressed [ 1225.204051][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.729701][ T5916] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1225.879750][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 1225.898293][ T5916] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1225.915074][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.232295][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.240706][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1226.242672][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.253922][ T5916] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1226.262142][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.266910][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.276586][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.307627][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.329678][ T5916] usb 2-1: Product: syz [ 1226.333850][ T5916] usb 2-1: Manufacturer: syz [ 1226.338432][ T5916] usb 2-1: SerialNumber: syz [ 1226.480120][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.791599][ T5916] usb 2-1: 0:2 : does not exist [ 1226.815251][T17821] usb 7-1: USB disconnect, device number 4 [ 1226.914498][T21275] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20001 [ 1226.926783][T21275] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1226.933979][T21275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.003562][ T29] IPVS: starting estimator thread 0... [ 1227.090169][T21276] IPVS: using max 43 ests per chain, 103200 per kthread [ 1227.336438][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.965478][ T5916] usb 2-1: USB disconnect, device number 88 [ 1227.996102][T18695] udevd[18695]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1228.339818][T17821] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1228.549682][T17821] usb 3-1: Using ep0 maxpacket: 32 [ 1228.882239][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1228.954110][T17821] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1229.097473][T17821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.127173][T17821] usb 3-1: Product: syz [ 1229.133707][T21303] syzkaller0: entered promiscuous mode [ 1229.145082][T21303] syzkaller0: entered allmulticast mode [ 1229.158038][T17821] usb 3-1: Manufacturer: syz [ 1229.174960][T17821] usb 3-1: SerialNumber: syz [ 1229.235468][T21303] tmpfs: Unknown parameter 'mp' [ 1229.263984][T17821] usb 3-1: config 0 descriptor?? [ 1229.271439][ T30] audit: type=1400 audit(2000001192.279:1666): avc: denied { getopt } for pid=21302 comm="syz.0.3847" lport=36086 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1229.710090][T21320] kthread_run failed with err -4 [ 1230.163056][T17821] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 003 [ 1231.071069][ T30] audit: type=1400 audit(2000001194.009:1667): avc: denied { bind } for pid=21331 comm="syz.1.3855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1231.153535][ T9] net_ratelimit: 3 callbacks suppressed [ 1231.153547][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.297378][ T29] usb 3-1: USB disconnect, device number 3 [ 1231.667208][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.677411][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.686148][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.699358][ T30] audit: type=1400 audit(2000001194.569:1668): avc: denied { relabelfrom } for pid=21340 comm="syz.0.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1231.756860][ T30] audit: type=1400 audit(2000001194.569:1669): avc: denied { relabelto } for pid=21340 comm="syz.0.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1232.345395][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.368076][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.663309][T21355] input: syz0 as /devices/virtual/input/input131 [ 1232.754094][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3863'. [ 1232.783391][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3863'. [ 1232.883111][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.891239][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.048706][T21361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.057111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.141468][ T29] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1233.356018][ T29] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1233.406491][ T29] usb 3-1: config 0 has no interface number 0 [ 1233.485846][ T29] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1233.529700][ T29] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1233.540747][ T29] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1233.552234][ T29] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1233.561740][ T29] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1233.570059][ T29] usb 3-1: Product: syz [ 1233.575031][ T29] usb 3-1: SerialNumber: syz [ 1233.583068][ T29] usb 3-1: config 0 descriptor?? [ 1233.590933][ T29] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1233.599317][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input132 [ 1235.790674][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1235.790881][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1235.797920][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1235.798124][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1235.798317][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1235.798498][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1235.798679][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1235.798858][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1235.799039][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1235.799218][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1235.902118][ T9] usb 3-1: USB disconnect, device number 4 [ 1235.906201][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1236.238941][T21381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=21381 comm=syz.4.3869 [ 1236.255196][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1236.812398][T10063] net_ratelimit: 5 callbacks suppressed [ 1236.812416][T10063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.834879][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.858916][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.967535][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.112694][T21407] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1237.233195][T21406] xt_hashlimit: size too large, truncated to 1048576 [ 1237.292905][T21407] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1237.430013][ T5952] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1237.796531][ T5952] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1237.817808][ T5952] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.852515][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1237.894018][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1237.942153][ T5952] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1237.959691][ T5952] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1237.976567][ T5952] usb 3-1: Manufacturer: syz [ 1237.992634][ T5952] usb 3-1: config 0 descriptor?? [ 1238.006409][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.012851][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.014049][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.027177][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.068346][T21408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1238.112533][ T5952] igorplugusb 3-1:0.0: endpoint incorrect [ 1238.166098][T21421] FAULT_INJECTION: forcing a failure. [ 1238.166098][T21421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.178769][T21422] netlink: zone id is out of range [ 1238.179326][T21421] CPU: 1 UID: 0 PID: 21421 Comm: syz.4.3880 Tainted: G L syzkaller #0 PREEMPT(full) [ 1238.179350][T21421] Tainted: [L]=SOFTLOCKUP [ 1238.179356][T21421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1238.179365][T21421] Call Trace: [ 1238.179371][T21421] [ 1238.179382][T21421] dump_stack_lvl+0x100/0x190 [ 1238.179411][T21421] should_fail_ex.cold+0x5/0xa [ 1238.179433][T21421] _copy_from_user+0x2e/0xd0 [ 1238.179452][T21421] ucma_set_option+0xa5/0x530 [ 1238.179475][T21421] ? __might_fault+0xc5/0x140 [ 1238.179496][T21421] ? __pfx_ucma_set_option+0x10/0x10 [ 1238.179524][T21421] ? __pfx_ucma_set_option+0x10/0x10 [ 1238.179547][T21421] ucma_write+0x1fb/0x330 [ 1238.179567][T21421] ? __pfx_ucma_write+0x10/0x10 [ 1238.179587][T21421] ? bpf_lsm_file_permission+0x9/0x10 [ 1238.179614][T21421] ? security_file_permission+0x76/0x210 [ 1238.179638][T21421] ? rw_verify_area+0xce/0x6d0 [ 1238.179662][T21421] vfs_write+0x2aa/0x1070 [ 1238.179677][T21421] ? __pfx_ucma_write+0x10/0x10 [ 1238.179698][T21421] ? __pfx_vfs_write+0x10/0x10 [ 1238.179711][T21421] ? find_held_lock+0x2b/0x80 [ 1238.179731][T21421] ? __fget_files+0x215/0x3d0 [ 1238.179747][T21421] ? __fget_files+0x215/0x3d0 [ 1238.179767][T21421] ? __fget_files+0x21f/0x3d0 [ 1238.179789][T21421] ksys_write+0x1f8/0x250 [ 1238.179803][T21421] ? __pfx_ksys_write+0x10/0x10 [ 1238.179824][T21421] do_syscall_64+0x106/0xf80 [ 1238.179839][T21421] ? clear_bhb_loop+0x40/0x90 [ 1238.179858][T21421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.179874][T21421] RIP: 0033:0x7f98d199c819 [ 1238.179888][T21421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.179902][T21421] RSP: 002b:00007f98cfbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1238.179917][T21421] RAX: ffffffffffffffda RBX: 00007f98d1c15fa0 RCX: 00007f98d199c819 [ 1238.179927][T21421] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000003 [ 1238.179937][T21421] RBP: 00007f98cfbee090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.179946][T21421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.179955][T21421] R13: 00007f98d1c16038 R14: 00007f98d1c15fa0 R15: 00007ffc925cf1e8 [ 1238.179975][T21421] [ 1238.425797][T21422] netlink: zone id is out of range [ 1238.434411][T21422] netlink: zone id is out of range [ 1238.440117][T21422] netlink: zone id is out of range [ 1238.597510][T21430] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1238.841473][T17821] usb 3-1: USB disconnect, device number 5 [ 1238.948576][ T30] audit: type=1400 audit(2000001201.959:1670): avc: denied { accept } for pid=21436 comm="syz.2.3885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1239.061133][T21433] netlink: 'syz.4.3883': attribute type 1 has an invalid length. [ 1239.099902][ T5952] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1239.258854][ T5952] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1239.284089][ T5952] usb 1-1: config 0 has no interface number 0 [ 1239.309130][ T5952] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1239.375894][ T5952] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1239.413114][ T5952] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1239.451318][ T5952] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1239.482060][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1239.491576][ T5952] usb 1-1: Product: syz [ 1239.495856][ T5952] usb 1-1: SerialNumber: syz [ 1239.571632][ T5952] usb 1-1: config 0 descriptor?? [ 1239.612030][ T5952] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1239.633524][ T5952] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input133 [ 1239.962911][T21449] batman_adv: batadv0: Adding interface: macsec1 [ 1239.969418][T21449] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.970003][T21449] batman_adv: batadv0: Interface activated: macsec1 [ 1240.520247][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1240.744182][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1240.765816][ T9] usb 5-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 1240.792217][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1240.819134][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40 [ 1241.147670][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.157748][T21458] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3890'. [ 1241.166799][ T9] usb 5-1: Product: syz [ 1241.177158][ T9] usb 5-1: Manufacturer: syz [ 1241.184422][T21457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3890'. [ 1241.184440][ T9] usb 5-1: SerialNumber: syz [ 1241.230019][ C1] cm109_urb_ctl_callback: 507 callbacks suppressed [ 1241.230042][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1241.243758][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1241.251756][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1241.267490][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1241.275117][ T5952] usb 1-1: USB disconnect, device number 106 [ 1241.281492][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1241.281517][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1241.373378][T21465] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1241.400059][T21465] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1241.421104][ T5952] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1241.446261][ T9] usb 5-1: 0:2 : does not exist [ 1241.506009][ T9] usb 5-1: USB disconnect, device number 86 [ 1241.513255][T21465] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1241.555717][ T30] audit: type=1400 audit(2000001204.569:1671): avc: denied { write } for pid=21466 comm="syz.1.3892" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1241.557371][T18695] udevd[18695]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.602129][T21470] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3891'. [ 1241.685430][T21467] dvmrp1: entered allmulticast mode [ 1241.970153][ T30] audit: type=1400 audit(2000001204.989:1672): avc: denied { read } for pid=21464 comm="syz.0.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1242.170937][ T9] net_ratelimit: 14 callbacks suppressed [ 1242.170950][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.323362][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.465981][T21485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3895'. [ 1242.478684][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3895'. [ 1242.488032][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.498343][T10063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.507567][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.516834][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.593132][T21468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.605641][T21468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.633056][T21466] dvmrp1: left allmulticast mode [ 1242.779740][T17821] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1243.179786][T17821] usb 5-1: Using ep0 maxpacket: 32 [ 1243.190765][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.199180][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.464123][T17821] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1243.503613][T17821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1243.533974][T17821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1243.617085][T17821] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1243.644160][T17821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.672321][T17821] usb 5-1: Product: syz [ 1243.689943][T17821] usb 5-1: Manufacturer: syz [ 1243.721138][T17821] usb 5-1: SerialNumber: syz [ 1243.739693][T17821] usb 5-1: config 0 descriptor?? [ 1243.760574][T21486] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1243.782536][T17821] hub 5-1:0.0: bad descriptor, ignoring hub [ 1243.807043][T17821] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1243.839813][T17821] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input134 [ 1243.909710][ T29] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1244.001299][ T30] audit: type=1400 audit(2000001207.019:1673): avc: denied { map } for pid=21484 comm="syz.4.3895" path="socket:[81190]" dev="sockfs" ino=81190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1244.097362][T21485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.110775][T21485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.111477][ T30] audit: type=1400 audit(2000001207.049:1674): avc: denied { read } for pid=21484 comm="syz.4.3895" path="socket:[81190]" dev="sockfs" ino=81190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1244.208440][ T29] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1244.253557][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.445478][ T8835] usb 5-1: USB disconnect, device number 87 [ 1244.445613][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1244.498200][ T29] usb 2-1: config 0 descriptor?? [ 1244.724411][ T29] usb 2-1: Cannot read MAC address [ 1244.740163][ T29] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1244.768488][ T29] usb 2-1: USB disconnect, device number 89 [ 1245.029754][ T8835] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1245.073224][T21511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input135 [ 1245.201649][ T8835] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1245.220617][ T8835] usb 7-1: config 0 has no interface number 0 [ 1245.235175][ T8835] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1245.266122][ T8835] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1245.322334][ T8835] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1245.403650][ T8835] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1245.414442][ T8835] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1245.423205][ T8835] usb 7-1: Product: syz [ 1245.429932][ T8835] usb 7-1: SerialNumber: syz [ 1245.739746][ T8835] usb 7-1: config 0 descriptor?? [ 1245.756734][ T8835] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1245.767301][ T8835] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input136 [ 1245.811856][T21531] lo speed is unknown, defaulting to 1000 [ 1245.887493][T17929] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1245.933033][T21539] tmpfs: Unknown parameter ' ' [ 1246.390286][T21546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3915'. [ 1246.448006][T21547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3915'. [ 1246.620176][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1246.627350][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1246.634494][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1246.641863][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1246.648996][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1246.656120][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1246.663294][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1246.670427][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1246.677701][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1246.685098][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1246.692831][ T5875] usb 7-1: USB disconnect, device number 5 [ 1246.692892][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1246.797861][ T5916] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1246.821811][ T5875] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1246.957590][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 1246.974853][ T30] audit: type=1400 audit(2000001209.989:1675): avc: denied { recv } for pid=21557 comm="syz.0.3920" saddr=10.128.0.169 src=30006 daddr=10.128.1.94 dest=46496 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1247.035968][ T5916] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1247.078953][ T5916] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1247.097733][ T30] audit: type=1400 audit(2000001209.989:1676): avc: denied { ioctl } for pid=21555 comm="syz.4.3919" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1247.110122][ T5916] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1247.124720][ T30] audit: type=1400 audit(2000001210.089:1677): avc: denied { read write } for pid=21563 comm="syz.2.3921" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1247.154859][ T5916] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1247.166692][ T30] audit: type=1400 audit(2000001210.089:1678): avc: denied { open } for pid=21563 comm="syz.2.3921" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1247.200115][ T30] audit: type=1400 audit(2000001210.119:1679): avc: denied { ioctl } for pid=21563 comm="syz.2.3921" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1247.209721][ T5916] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1247.239847][ T5916] usb 2-1: config 0 has no interface number 0 [ 1247.245232][T21568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.246136][ T5916] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1247.256529][ T8835] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1247.277419][ T30] audit: type=1400 audit(2000001210.119:1680): avc: denied { set_context_mgr } for pid=21563 comm="syz.2.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1247.301751][ T30] audit: type=1400 audit(2000001210.119:1681): avc: denied { create } for pid=21563 comm="syz.2.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1247.322209][ T30] audit: type=1400 audit(2000001210.119:1682): avc: denied { getopt } for pid=21563 comm="syz.2.3921" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1247.348299][T21568] binder: BINDER_SET_CONTEXT_MGR already set [ 1247.354425][T21568] binder: 21563:21568 ioctl 4018620d 200000004a80 returned -16 [ 1247.354429][ T5916] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1247.354455][ T5916] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1247.386541][ T5916] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1247.400350][ T5916] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1247.407305][ T5916] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1247.416397][ T5916] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1247.434423][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.442550][ T5916] usb 2-1: Product: syz [ 1247.447560][ T5916] usb 2-1: Manufacturer: syz [ 1247.452447][ T5916] usb 2-1: SerialNumber: syz [ 1247.461132][ T8835] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1247.470295][ T5875] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1247.470301][ T5916] usb 2-1: config 0 descriptor?? [ 1247.470679][ T8835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.483766][ T5916] usb 2-1: selecting invalid altsetting 2 [ 1247.505710][ T8835] usb 5-1: config 0 descriptor?? [ 1247.602539][T17821] net_ratelimit: 17 callbacks suppressed [ 1247.602558][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.641613][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1247.652655][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.662710][ T5875] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1247.671820][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.690453][ T5875] usb 7-1: config 0 descriptor?? [ 1247.699842][ T1206] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1247.718904][ T8835] usb 5-1: Cannot read MAC address [ 1247.738153][ T8835] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1247.760735][ T8835] usb 5-1: USB disconnect, device number 88 [ 1247.775301][T21571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.879686][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 1249.108675][T17821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.116812][T21571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.125258][ T5916] get_1284_register timeout [ 1249.139908][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.148001][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.156297][ T5875] usbhid 7-1:0.0: can't add hid device: -71 [ 1249.162741][ C1] usb 2-1: async_complete: urb error -104 [ 1249.163224][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.168557][ C1] usb 2-1: async_complete: urb error -104 [ 1249.182656][ C1] usb 2-1: async_complete: urb error -104 [ 1250.128504][ T5875] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1250.145782][ T5875] usb 7-1: USB disconnect, device number 6 [ 1250.172487][T21576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.372308][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.387815][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1250.387830][ T30] audit: type=1400 audit(2000001213.399:1710): avc: denied { create } for pid=21548 comm="syz.1.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1250.425776][ T5916] usb 2-1: USB disconnect, device number 90 [ 1250.492454][ T30] audit: type=1400 audit(2000001213.499:1711): avc: denied { append } for pid=21577 comm="syz.4.3923" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1250.610609][ T30] audit: type=1400 audit(2000001213.539:1712): avc: denied { read } for pid=21578 comm="syz.6.3924" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1250.840548][ T30] audit: type=1400 audit(2000001213.539:1713): avc: denied { open } for pid=21578 comm="syz.6.3924" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1250.864628][ T30] audit: type=1400 audit(2000001213.589:1714): avc: denied { kexec_image_load } for pid=21578 comm="syz.6.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1250.931642][ T30] audit: type=1400 audit(2000001213.719:1715): avc: denied { ioctl } for pid=21577 comm="syz.4.3923" path="socket:[81423]" dev="sockfs" ino=81423 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1250.957204][ T30] audit: type=1400 audit(2000001213.719:1716): avc: denied { write } for pid=21577 comm="syz.4.3923" name="anycast6" dev="proc" ino=4026533821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1250.981010][ T30] audit: type=1400 audit(2000001213.719:1717): avc: denied { bind } for pid=21577 comm="syz.4.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1251.012703][ T30] audit: type=1400 audit(2000001214.019:1718): avc: denied { create } for pid=21581 comm="syz.2.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1251.032962][ T30] audit: type=1400 audit(2000001214.019:1719): avc: denied { write } for pid=21581 comm="syz.2.3925" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1251.117289][T21589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3926'. [ 1251.208562][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.228350][ T1206] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1251.260095][ T1206] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1251.278809][ T1206] usb 1-1: can't read configurations, error -71 [ 1251.286175][ T5875] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1251.440167][ T9] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1251.461949][ T5875] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1251.470050][ T5875] usb 3-1: can't read configurations, error -22 [ 1251.601160][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1251.609466][ T9] usb 2-1: config 0 has no interface number 0 [ 1251.624336][ T9] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1251.637458][ T5875] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1251.658390][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1251.683398][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1251.713253][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1251.722832][ T9] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1251.731068][ T9] usb 2-1: Product: syz [ 1251.813288][ T5875] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1251.849844][ T9] usb 2-1: SerialNumber: syz [ 1251.854553][ T5875] usb 3-1: can't read configurations, error -22 [ 1251.862843][ T5875] usb usb3-port1: attempt power cycle [ 1251.878407][ T9] usb 2-1: config 0 descriptor?? [ 1251.887661][ T9] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1251.914063][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input137 [ 1252.156703][T21599] kAFS: unable to lookup cell '(,c¾Ì' [ 1252.261637][ T5875] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1252.293487][ T5875] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1252.302714][ T5875] usb 3-1: can't read configurations, error -22 [ 1252.346356][T21606] fuse: Unknown parameter 'fd0x0000000000000003' [ 1252.399777][ T29] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1252.400610][T21608] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3934'. [ 1252.561349][ T29] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1252.573702][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1252.578173][ T5875] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1252.596681][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1252.606116][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1252.612040][ T5875] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1252.614378][ T29] usb 5-1: Product: syz [ 1252.627891][ T29] usb 5-1: Manufacturer: syz [ 1252.634721][ T29] usb 5-1: SerialNumber: syz [ 1252.639803][ T5875] usb 3-1: can't read configurations, error -22 [ 1252.647549][ T5875] usb usb3-port1: unable to enumerate USB device [ 1253.285083][ T5875] net_ratelimit: 1 callbacks suppressed [ 1253.285109][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.595667][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.605983][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.614841][ C0] cm109_urb_ctl_callback: 4 callbacks suppressed [ 1253.614862][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1253.618250][ T29] usb 5-1: config 0 descriptor?? [ 1253.621410][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1253.641342][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1253.646454][ T29] usb 5-1: selecting invalid altsetting 0 [ 1253.648459][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1253.661604][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1253.668741][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1253.675889][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1253.682992][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1253.690102][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1253.697207][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1253.910783][ T5862] usb 5-1: USB disconnect, device number 89 [ 1254.092790][ T9] usb 2-1: USB disconnect, device number 91 [ 1254.098739][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1254.195256][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1254.332948][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.488600][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.588353][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1255.588369][ T30] audit: type=1400 audit(2000001218.599:1762): avc: denied { getopt } for pid=21640 comm="syz.1.3943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1255.592822][T21641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3943'. [ 1255.714360][T21641] ALSA: mixer_oss: invalid OSS volume '' [ 1255.721942][T21641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3943'. [ 1255.776906][ T30] audit: type=1400 audit(2000001218.599:1763): avc: denied { write } for pid=21640 comm="syz.1.3943" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1255.839361][ T30] audit: type=1400 audit(2000001218.739:1764): avc: denied { read } for pid=21640 comm="syz.1.3943" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1255.974457][ T30] audit: type=1400 audit(2000001218.739:1765): avc: denied { open } for pid=21640 comm="syz.1.3943" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1256.042900][ T30] audit: type=1400 audit(2000001218.739:1766): avc: denied { create } for pid=21640 comm="syz.1.3943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1256.078876][ T30] audit: type=1400 audit(2000001218.739:1767): avc: denied { bind } for pid=21640 comm="syz.1.3943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1256.117268][ T30] audit: type=1400 audit(2000001218.749:1768): avc: denied { ioctl } for pid=21640 comm="syz.1.3943" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1256.198895][T21656] netlink: 'syz.2.3949': attribute type 1 has an invalid length. [ 1256.204091][ T30] audit: type=1400 audit(2000001219.119:1769): avc: denied { read } for pid=21649 comm="syz.2.3947" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1256.272787][ T30] audit: type=1400 audit(2000001219.119:1770): avc: denied { open } for pid=21649 comm="syz.2.3947" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1256.354180][ T30] audit: type=1400 audit(2000001219.169:1771): avc: denied { create } for pid=21651 comm="syz.4.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1256.399580][T21659] netlink: zone id is out of range [ 1256.404808][T21659] netlink: zone id is out of range [ 1256.423308][T21659] netlink: zone id is out of range [ 1256.447162][T21656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1256.460585][T21659] netlink: zone id is out of range [ 1256.502323][T21659] netlink: zone id is out of range [ 1258.370674][T21689] netlink: 'syz.2.3954': attribute type 1 has an invalid length. [ 1258.440994][T21689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1258.455869][T21677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1258.470486][T21677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1258.485334][ T5862] net_ratelimit: 7 callbacks suppressed [ 1258.485351][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.499868][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.369692][ T5875] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1259.378544][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.577182][T21720] comedi comedi3: pcmda12: I/O port conflict (0x8005,16) [ 1259.609705][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 1259.616759][ T5875] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1259.627077][ T5875] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1259.637427][ T5875] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1259.669757][ T5875] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1259.683343][ T5875] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1259.703611][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.943154][ T5875] usb 2-1: GET_CAPABILITIES returned 0 [ 1259.958181][ T5875] usbtmc 2-1:16.0: can't read capabilities [ 1260.066367][T21737] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1260.083012][T21737] FAULT_INJECTION: forcing a failure. [ 1260.083012][T21737] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.116463][T21737] CPU: 1 UID: 0 PID: 21737 Comm: syz.6.3969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1260.116482][T21737] Tainted: [L]=SOFTLOCKUP [ 1260.116486][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1260.116493][T21737] Call Trace: [ 1260.116497][T21737] [ 1260.116501][T21737] dump_stack_lvl+0x100/0x190 [ 1260.116523][T21737] should_fail_ex.cold+0x5/0xa [ 1260.116538][T21737] should_failslab+0xc2/0x120 [ 1260.116551][T21737] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1260.116565][T21737] ? shrinker_alloc+0xf5/0xbc0 [ 1260.116579][T21737] shrinker_alloc+0xf5/0xbc0 [ 1260.116590][T21737] ? mark_held_locks+0x40/0x70 [ 1260.116602][T21737] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1260.116620][T21737] ? rcu_is_watching+0x12/0xc0 [ 1260.116635][T21737] ? __pfx_shrinker_alloc+0x10/0x10 [ 1260.116647][T21737] ? lockdep_init_map_type+0x5c/0x250 [ 1260.116658][T21737] ? lockdep_init_map_type+0x5c/0x250 [ 1260.116670][T21737] ? __raw_spin_lock_init+0x3a/0x110 [ 1260.116682][T21737] ? __init_rwsem+0x12d/0x1b0 [ 1260.116696][T21737] alloc_super+0x7c7/0xd20 [ 1260.116715][T21737] ? __pfx_super_s_dev_test+0x10/0x10 [ 1260.116730][T21737] sget_fc+0x117/0xc70 [ 1260.116740][T21737] ? __pfx_super_s_dev_set+0x10/0x10 [ 1260.116756][T21737] get_tree_bdev_flags+0x1ba/0x620 [ 1260.116766][T21737] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 1260.116782][T21737] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1260.116794][T21737] ? cramfs_get_tree+0x28/0x50 [ 1260.116806][T21737] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 1260.116822][T21737] cramfs_get_tree+0x40/0x50 [ 1260.116834][T21737] vfs_get_tree+0x92/0x320 [ 1260.116850][T21737] path_mount+0x7d0/0x23d0 [ 1260.116867][T21737] ? __pfx_path_mount+0x10/0x10 [ 1260.116881][T21737] ? lockdep_hardirqs_on+0x78/0x100 [ 1260.116893][T21737] ? putname+0xb1/0x110 [ 1260.116905][T21737] ? kmem_cache_free+0x124/0x6a0 [ 1260.116924][T21737] ? __x64_sys_mount+0x293/0x310 [ 1260.116938][T21737] __x64_sys_mount+0x293/0x310 [ 1260.116953][T21737] ? __pfx___x64_sys_mount+0x10/0x10 [ 1260.116972][T21737] do_syscall_64+0x106/0xf80 [ 1260.116982][T21737] ? clear_bhb_loop+0x40/0x90 [ 1260.116995][T21737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.117008][T21737] RIP: 0033:0x7f83d339c819 [ 1260.117017][T21737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.117027][T21737] RSP: 002b:00007f83d4301028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1260.117039][T21737] RAX: ffffffffffffffda RBX: 00007f83d3615fa0 RCX: 00007f83d339c819 [ 1260.117046][T21737] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000000 [ 1260.117052][T21737] RBP: 00007f83d4301090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.117059][T21737] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 1260.117065][T21737] R13: 00007f83d3616038 R14: 00007f83d3615fa0 R15: 00007ffdca1f8ba8 [ 1260.117079][T21737] [ 1260.463362][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.591497][T21741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3970'. [ 1260.620138][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1260.620149][ T30] audit: type=1400 audit(2000001223.639:1806): avc: denied { create } for pid=21733 comm="syz.4.3968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1260.889711][ T5875] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1261.051795][ T5875] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1261.060310][ T5875] usb 7-1: not running at top speed; connect to a high speed hub [ 1261.073731][ T5875] usb 7-1: config 1 has an invalid interface number: 171 but max is 0 [ 1261.082946][ T5875] usb 7-1: config 1 has no interface number 0 [ 1261.089822][ T5875] usb 7-1: config 1 interface 171 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1261.101870][ T5875] usb 7-1: config 1 interface 171 has no altsetting 0 [ 1261.132873][ T5875] usb 7-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=d0.5e [ 1261.148068][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.300593][ T5875] usb 7-1: Product: syz [ 1261.304802][ T5875] usb 7-1: Manufacturer: syz [ 1261.309414][ T5875] usb 7-1: SerialNumber: syz [ 1261.519930][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.530470][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.920191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.930304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.098665][ T5916] usb 2-1: USB disconnect, device number 92 [ 1262.362119][ T30] audit: type=1400 audit(2000001225.369:1807): avc: denied { ioctl } for pid=21767 comm="syz.1.3977" path="socket:[82269]" dev="sockfs" ino=82269 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1262.388043][T21760] netlink: 'syz.6.3971': attribute type 1 has an invalid length. [ 1262.521023][T21770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3977'. [ 1262.544250][ T30] audit: type=1400 audit(2000001225.369:1808): avc: denied { create } for pid=21767 comm="syz.1.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1262.566262][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.626511][ T30] audit: type=1400 audit(2000001225.439:1809): avc: denied { name_bind } for pid=21768 comm="syz.0.3976" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1262.657838][ T30] audit: type=1400 audit(2000001225.439:1810): avc: denied { node_bind } for pid=21768 comm="syz.0.3976" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1262.698825][ T5875] rndis_host 7-1:1.171: skipping garbage [ 1262.709220][ T5875] usb 7-1: bad CDC descriptors [ 1262.720647][ T5875] cdc_acm 7-1:1.171: skipping garbage [ 1263.030008][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.032984][ T5875] usb 7-1: USB disconnect, device number 7 [ 1263.549992][T21784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3981'. [ 1263.656970][ T30] audit: type=1400 audit(2000001226.619:1811): avc: denied { mounton } for pid=21783 comm="syz.1.3981" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1263.720222][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.739769][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.815149][ T30] audit: type=1400 audit(2000001226.619:1812): avc: denied { mount } for pid=21783 comm="syz.1.3981" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1265.043489][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.124028][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.416100][ T5875] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1265.659676][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 1266.149749][ T5875] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1266.157860][ T5875] usb 3-1: config 2 has no interface number 0 [ 1266.166151][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.194948][ T5875] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1266.217868][ T30] audit: type=1400 audit(2000001229.229:1813): avc: denied { read } for pid=21801 comm="syz.4.3983" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1266.240889][ T30] audit: type=1400 audit(2000001229.259:1814): avc: denied { open } for pid=21801 comm="syz.4.3983" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1266.268163][ T30] audit: type=1400 audit(2000001229.259:1815): avc: denied { ioctl } for pid=21801 comm="syz.4.3983" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1266.272286][ T5875] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1266.421901][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.442664][ T5875] usb 3-1: Product: syz [ 1266.446832][ T5875] usb 3-1: Manufacturer: syz [ 1266.480071][ T5875] usb 3-1: SerialNumber: syz [ 1266.629251][ T5875] ch9200 3-1:2.31: probe with driver ch9200 failed with error -71 [ 1266.673398][ T5875] usb 3-1: USB disconnect, device number 10 [ 1266.870434][ T5916] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 1267.194172][ T5916] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1267.212688][ T5916] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1267.224361][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.739701][ T5916] usb 1-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 1267.789439][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1267.839653][ T5916] usb 1-1: config 1 has no interface number 0 [ 1267.857635][ T5916] usb 1-1: too many endpoints for config 1 interface 1 altsetting 180: 241, using maximum allowed: 30 [ 1267.879969][ T5916] usb 1-1: config 1 interface 1 altsetting 180 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 1267.929789][ T5916] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1267.936429][ T5916] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1267.988141][ T5875] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1267.993409][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.073860][ T30] audit: type=1400 audit(2000001231.049:1816): avc: denied { connect } for pid=21822 comm="syz.6.3987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1268.094338][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.160762][ T30] audit: type=1400 audit(2000001231.049:1817): avc: denied { shutdown } for pid=21822 comm="syz.6.3987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1268.240306][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.264415][ T30] audit: type=1400 audit(2000001231.079:1818): avc: denied { setopt } for pid=21822 comm="syz.6.3987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1268.320248][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1268.483583][T21805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.528599][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1268.539688][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1268.649854][ T5875] usb 5-1: Product: syz [ 1269.761967][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.774171][T21576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.782685][ T5875] usb 5-1: Manufacturer: syz [ 1269.787282][ T5875] usb 5-1: SerialNumber: syz [ 1269.820760][T21805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.871238][ T30] audit: type=1400 audit(2000001231.149:1819): avc: denied { append } for pid=21824 comm="syz.1.3990" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1270.067603][ T5875] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1270.290136][ T30] audit: type=1400 audit(2000001231.149:1820): avc: denied { map } for pid=21824 comm="syz.1.3990" path="socket:[81830]" dev="sockfs" ino=81830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1270.360834][ T30] audit: type=1400 audit(2000001233.179:1821): avc: denied { create } for pid=21804 comm="syz.0.3984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1270.450693][ T30] audit: type=1400 audit(2000001233.179:1822): avc: denied { connect } for pid=21804 comm="syz.0.3984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1270.561706][ T5916] usb 1-1: string descriptor 0 read error: -71 [ 1270.595290][ T5916] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1270.897805][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.106262][ T5916] usb 1-1: selecting invalid altsetting 0 [ 1271.120950][ T5916] snd_usb_pod 1-1:1.1: set_interface failed [ 1271.160945][ T5916] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1271.192504][ T5916] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1271.253384][ T5916] usb 1-1: USB disconnect, device number 109 [ 1271.283402][T21843] overlayfs: empty lowerdir [ 1271.390085][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1271.390115][ T30] audit: type=1400 audit(2000001234.409:1826): avc: denied { create } for pid=21844 comm="syz.6.3993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1271.474666][ T30] audit: type=1400 audit(2000001234.409:1827): avc: denied { getopt } for pid=21844 comm="syz.6.3993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1271.781868][ T5875] usb 5-1: USB disconnect, device number 90 [ 1271.790089][ T5875] usblp0: removed [ 1271.864637][T21851] netlink: 'syz.6.3998': attribute type 21 has an invalid length. [ 1271.884709][T21851] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3998'. [ 1271.921258][T21576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.937626][T21851] netlink: 'syz.6.3998': attribute type 5 has an invalid length. [ 1271.971410][T21851] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3998'. [ 1272.556757][ T30] audit: type=1400 audit(2000001235.539:1828): avc: denied { read write } for pid=21855 comm="syz.2.3995" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1272.592683][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.640772][ T30] audit: type=1400 audit(2000001235.539:1829): avc: denied { open } for pid=21855 comm="syz.2.3995" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1272.750407][T21862] fuse: Unknown parameter 'ÿÿÿ0x0000000000000004ΘüR1ÖÍ©9HúßgºvºÎìØfÓ:nWR#2' [ 1272.800476][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.082138][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.202767][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.719920][ T5916] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1273.840775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.889905][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 1273.902012][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.973727][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1274.226246][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.240175][ T30] audit: type=1400 audit(2000001237.079:1830): avc: denied { write } for pid=21874 comm="syz.2.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1274.297637][ T5916] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1274.355592][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.366575][ T30] audit: type=1400 audit(2000001237.079:1831): avc: denied { read } for pid=21874 comm="syz.2.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1274.396602][ T5916] usb 1-1: Product: syz [ 1274.401205][ T5916] usb 1-1: Manufacturer: syz [ 1274.405798][ T5916] usb 1-1: SerialNumber: syz [ 1274.499398][ T5916] usb 1-1: config 0 descriptor?? [ 1274.785787][ T30] audit: type=1400 audit(2000001237.799:1832): avc: denied { create } for pid=21881 comm="syz.6.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1274.835173][ T30] audit: type=1400 audit(2000001237.849:1833): avc: denied { setopt } for pid=21881 comm="syz.6.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1275.115907][T21886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4008'. [ 1275.125295][T21890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4008'. [ 1275.197529][ T30] audit: type=1400 audit(2000001238.199:1834): avc: denied { create } for pid=21885 comm="syz.1.4008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1275.280267][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.289693][ T30] audit: type=1400 audit(2000001238.199:1835): avc: denied { create } for pid=21885 comm="syz.1.4008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1275.693464][ T5916] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1276.000885][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.124733][ T5875] usb 1-1: USB disconnect, device number 110 [ 1276.159697][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 1276.188576][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1276.220520][ T5916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.258767][ T5916] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1276.298586][ T5916] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1276.329923][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.340690][T21901] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1276.360086][T21901] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1276.407745][ T5916] usb 3-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 1276.432535][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.461530][ T5916] usb 3-1: Product: syz [ 1276.475904][ T5916] usb 3-1: Manufacturer: syz [ 1276.520493][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1276.520509][ T30] audit: type=1400 audit(2000001239.529:1842): avc: denied { read } for pid=21907 comm="syz.0.4014" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1276.552320][ T5916] usb 3-1: SerialNumber: syz [ 1276.616310][ T30] audit: type=1400 audit(2000001239.529:1843): avc: denied { open } for pid=21907 comm="syz.0.4014" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1276.689709][ T30] audit: type=1400 audit(2000001239.529:1844): avc: denied { ioctl } for pid=21907 comm="syz.0.4014" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1276.738860][ T30] audit: type=1400 audit(2000001239.679:1845): avc: denied { connect } for pid=21910 comm="syz.6.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1276.761168][T21906] SELinux: Context ? is not valid (left unmapped). [ 1276.789699][ T5875] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 1276.828894][ T30] audit: type=1400 audit(2000001239.739:1846): avc: denied { ioctl } for pid=21910 comm="syz.6.4016" path="socket:[82647]" dev="sockfs" ino=82647 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1276.871806][ T30] audit: type=1400 audit(2000001239.739:1847): avc: denied { execute } for pid=21910 comm="syz.6.4016" path="/dev/audio" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1276.936039][ T5875] usb 1-1: device descriptor read/64, error -71 [ 1277.487935][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.496562][ T30] audit: type=1400 audit(2000001239.779:1848): avc: denied { setopt } for pid=21904 comm="syz.1.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1277.516440][ T30] audit: type=1400 audit(2000001239.779:1849): avc: denied { bind } for pid=21904 comm="syz.1.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1277.539675][ T5875] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 1277.679673][ T5875] usb 1-1: device descriptor read/64, error -71 [ 1278.536835][ T5875] usb usb1-port1: attempt power cycle [ 1278.563963][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.689303][ T30] audit: type=1400 audit(2000001241.699:1850): avc: denied { write } for pid=21931 comm="syz.2.4022" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1278.695570][ T5916] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1278.719899][T17929] Bluetooth: hci2: command tx timeout [ 1278.742233][ T30] audit: type=1400 audit(2000001241.729:1851): avc: denied { ioctl } for pid=21931 comm="syz.2.4022" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1278.809916][ T5916] usb 3-1: 0:2 : does not exist [ 1278.856557][ T5916] usb 3-1: USB disconnect, device number 11 [ 1278.879697][ T5875] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 1278.910187][ T5875] usb 1-1: device descriptor read/8, error -71 [ 1279.040069][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.149773][ T5875] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 1279.170185][ T5875] usb 1-1: device descriptor read/8, error -71 [ 1279.263555][T21946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4025'. [ 1279.283067][ T5875] usb usb1-port1: unable to enumerate USB device [ 1279.323405][T21933] lo speed is unknown, defaulting to 1000 [ 1279.604151][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.181910][T21959] fuse: Bad value for 'rootmode' [ 1280.416374][T21955] netlink: zone id is out of range [ 1280.442421][T21955] netlink: zone id is out of range [ 1280.448167][T21955] netlink: zone id is out of range [ 1280.454446][T21955] netlink: zone id is out of range [ 1280.459874][T21955] netlink: zone id is out of range [ 1280.465408][T21955] netlink: zone id is out of range [ 1280.471898][T21955] netlink: zone id is out of range [ 1280.478263][T21955] netlink: zone id is out of range [ 1280.489754][T21955] netlink: get zone limit has 4 unknown bytes [ 1280.634643][ T5875] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1280.653779][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.386272][ T5875] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1281.400101][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.418257][ T5875] usb 5-1: Product: syz [ 1281.429175][ T5875] usb 5-1: Manufacturer: syz [ 1281.439989][ T5875] usb 5-1: SerialNumber: syz [ 1281.741922][T21981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.866387][T21981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.880015][ T5862] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1282.882416][T21989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.014716][T21989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.387994][T21991] lo speed is unknown, defaulting to 1000 [ 1283.452416][ T30] kauditd_printk_skb: 304 callbacks suppressed [ 1283.452432][ T30] audit: type=1400 audit(2000001246.469:2156): avc: denied { ioctl } for pid=21994 comm="syz.6.4038" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1283.479670][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 1283.495625][ T5862] usb 1-1: config 6 has an invalid interface number: 213 but max is 1 [ 1283.509659][ T5862] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.539688][ T5862] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 1283.558184][ T5862] usb 1-1: config 6 has no interface number 0 [ 1283.573148][ T5862] usb 1-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1283.602156][ T5875] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1283.613433][ T5862] usb 1-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1283.613464][ T5862] usb 1-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1283.613487][ T5862] usb 1-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1283.649773][ T5875] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1283.688251][ T5875] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1283.722233][ T30] audit: type=1400 audit(2000001246.719:2157): avc: denied { getopt } for pid=21990 comm="syz.2.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1283.739742][ T5862] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 1283.745863][ T30] audit: type=1400 audit(2000001246.729:2158): avc: denied { connect } for pid=21999 comm="syz.4.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1283.791983][ T5875] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1283.796051][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1283.826957][ T5862] usb 1-1: Manufacturer: syz [ 1283.831724][ T5862] usb 1-1: SerialNumber: syz [ 1283.833663][ T5875] usb 5-1: USB disconnect, device number 91 [ 1283.941303][ T30] audit: type=1400 audit(2000001246.729:2159): avc: denied { setopt } for pid=21999 comm="syz.4.4041" laddr=fe80::14 lport=62498 faddr=fe80::aa fport=19999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1283.985903][ T30] audit: type=1400 audit(2000001246.729:2160): avc: denied { write } for pid=21999 comm="syz.4.4041" laddr=fe80::14 lport=62498 faddr=fe80::aa fport=19999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1284.057944][ T30] audit: type=1400 audit(2000001246.769:2161): avc: denied { create } for pid=22001 comm="syz.1.4042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1284.126410][ T5862] em28xx 1-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 1284.167654][ T5862] em28xx 1-1:6.213: Audio interface 213 found (Vendor Class) [ 1284.182897][ T30] audit: type=1400 audit(2000001246.789:2162): avc: denied { ioctl } for pid=22001 comm="syz.1.4042" path="socket:[83265]" dev="sockfs" ino=83265 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1284.269727][ T30] audit: type=1400 audit(2000001247.099:2163): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1284.274514][ T5862] em28xx 1-1:6.213: unknown em28xx chip ID (0) [ 1284.301122][ T30] audit: type=1400 audit(2000001247.099:2164): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1284.367491][T22013] overlayfs: missing 'lowerdir' [ 1284.388029][ T30] audit: type=1400 audit(2000001247.249:2165): avc: denied { name_bind } for pid=21999 comm="syz.4.4041" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1284.420150][ T5862] em28xx 1-1:6.213: Config register raw data: 0xfffffffb [ 1284.429145][ T5862] em28xx 1-1:6.213: AC97 chip type couldn't be determined [ 1284.474576][ T5862] em28xx 1-1:6.213: No AC97 audio processor [ 1284.573323][ T5862] usb 1-1: USB disconnect, device number 115 [ 1284.608011][ T5862] em28xx 1-1:6.213: Disconnecting em28xx [ 1284.699141][ T5862] em28xx 1-1:6.213: Freeing device [ 1285.582784][T22023] syzkaller0: entered promiscuous mode [ 1285.600889][T22023] syzkaller0: entered allmulticast mode [ 1285.680261][ T5862] net_ratelimit: 22 callbacks suppressed [ 1285.680279][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.384378][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.490017][T22034] vivid-004: kernel_thread() failed [ 1287.408427][T22050] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input141 [ 1287.449857][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.274388][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4052'. [ 1288.399848][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'. [ 1288.443460][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'. [ 1288.481047][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1288.481063][ T30] audit: type=1400 audit(2000001251.489:2171): avc: denied { read write } for pid=22061 comm="syz.0.4057" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1288.483232][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.559663][ T30] audit: type=1400 audit(2000001251.499:2172): avc: denied { open } for pid=22061 comm="syz.0.4057" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1288.583574][ T5862] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1288.730024][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.766446][T22064] input: syz0 as /devices/virtual/input/input142 [ 1288.809793][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 1288.837012][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.909674][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.920777][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1288.940022][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.953912][ T5862] usb 3-1: config 0 descriptor?? [ 1288.988014][ T5862] hub 3-1:0.0: USB hub found [ 1289.188328][ T5862] hub 3-1:0.0: 1 port detected [ 1290.099962][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.125131][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.877978][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.906755][ T5862] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 1292.070547][ T5862] usb 3-1: USB disconnect, device number 12 [ 1292.171699][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.405662][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.986319][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1293.001739][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1293.029979][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1293.038900][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1293.055317][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1293.064692][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1293.073883][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1293.091324][T22073] lo speed is unknown, defaulting to 1000 [ 1293.184096][T22090] netlink: zone id is out of range [ 1293.189226][T22090] netlink: zone id is out of range [ 1293.194436][T22090] netlink: zone id is out of range [ 1293.202316][T22090] netlink: zone id is out of range [ 1293.207438][T22090] netlink: zone id is out of range [ 1293.210918][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.393001][T22100] xt_hashlimit: size too large, truncated to 1048576 [ 1293.834368][T22111] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1293.843518][T22111] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1293.852142][T22111] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1293.859914][T22111] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1293.944198][ T30] audit: type=1400 audit(2000001256.819:2173): avc: denied { create } for pid=22099 comm="syz.4.4065" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1294.091778][ T30] audit: type=1400 audit(2000001256.839:2174): avc: denied { setopt } for pid=22099 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1294.121766][T22117] input: syz0 as /devices/virtual/input/input143 [ 1294.263235][T22123] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1294.904718][ T30] audit: type=1400 audit(2000001257.559:2175): avc: denied { ioctl } for pid=22120 comm="syz.0.4072" path="socket:[83440]" dev="sockfs" ino=83440 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1294.987031][T22130] binder: 22127:22130 ioctl c0306201 0 returned -14 [ 1295.030206][ T30] audit: type=1400 audit(2000001257.559:2176): avc: denied { connect } for pid=22120 comm="syz.0.4072" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1295.077733][ T30] audit: type=1400 audit(2000001258.009:2177): avc: denied { unlink } for pid=17927 comm="syz-executor" name="file0" dev="tmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1295.235486][T22141] __nla_validate_parse: 46 callbacks suppressed [ 1295.235525][T22141] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4075'. [ 1295.471840][ T30] audit: type=1400 audit(2000001258.489:2178): avc: denied { mount } for pid=22147 comm="syz.0.4079" name="/" dev="autofs" ino=84189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1295.530846][ T30] audit: type=1400 audit(2000001258.489:2179): avc: denied { read } for pid=22147 comm="syz.0.4079" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1295.732471][ T30] audit: type=1400 audit(2000001258.749:2180): avc: denied { unmount } for pid=18360 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1296.000109][ T30] audit: type=1400 audit(2000001258.849:2181): avc: denied { bind } for pid=22156 comm="syz.4.4080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1296.098788][T22162] input: syz0 as /devices/virtual/input/input144 [ 1296.322012][ T8835] net_ratelimit: 16 callbacks suppressed [ 1296.322026][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.143425][T22177] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4086'. [ 1297.262793][T22177] netlink: 'syz.1.4086': attribute type 7 has an invalid length. [ 1297.362303][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.509810][ T8835] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1297.701439][ T8835] usb 2-1: Using ep0 maxpacket: 8 [ 1297.751002][ T8835] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1297.762754][ T8835] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1297.784444][ T8835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.038570][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.050873][T22185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4087'. [ 1298.270505][T22192] FAULT_INJECTION: forcing a failure. [ 1298.270505][T22192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.449145][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.538199][T22192] CPU: 0 UID: 0 PID: 22192 Comm: syz.4.4089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.538220][T22192] Tainted: [L]=SOFTLOCKUP [ 1298.538224][T22192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1298.538230][T22192] Call Trace: [ 1298.538235][T22192] [ 1298.538239][T22192] dump_stack_lvl+0x100/0x190 [ 1298.538262][T22192] should_fail_ex.cold+0x5/0xa [ 1298.538277][T22192] strncpy_from_user+0x3b/0x2d0 [ 1298.538292][T22192] do_getname+0x78/0x390 [ 1298.538309][T22192] user_path_at+0x26/0x60 [ 1298.538321][T22192] __x64_sys_mount+0x1fb/0x310 [ 1298.538337][T22192] ? __pfx___x64_sys_mount+0x10/0x10 [ 1298.538356][T22192] do_syscall_64+0x106/0xf80 [ 1298.538367][T22192] ? clear_bhb_loop+0x40/0x90 [ 1298.538380][T22192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.538392][T22192] RIP: 0033:0x7f98d199c819 [ 1298.538402][T22192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.538413][T22192] RSP: 002b:00007f98cfbac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1298.538423][T22192] RAX: ffffffffffffffda RBX: 00007f98d1c16180 RCX: 00007f98d199c819 [ 1298.538430][T22192] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 1298.538437][T22192] RBP: 00007f98cfbac090 R08: 0000200000000240 R09: 0000000000000000 [ 1298.538443][T22192] R10: 0000000000218888 R11: 0000000000000246 R12: 0000000000000001 [ 1298.538449][T22192] R13: 00007f98d1c16218 R14: 00007f98d1c16180 R15: 00007ffc925cf1e8 [ 1298.538463][T22192] [ 1298.783656][ T30] audit: type=1400 audit(2000001261.709:2182): avc: denied { read write } for pid=22189 comm="syz.4.4089" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1299.259896][ T30] audit: type=1400 audit(2000001261.709:2183): avc: denied { open } for pid=22189 comm="syz.4.4089" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1299.339684][ T30] audit: type=1400 audit(2000001262.039:2184): avc: denied { create } for pid=22183 comm="syz.0.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1299.399720][ T30] audit: type=1400 audit(2000001262.039:2185): avc: denied { ioctl } for pid=22183 comm="syz.0.4088" path="socket:[84261]" dev="sockfs" ino=84261 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1299.449922][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.456259][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.512922][ T30] audit: type=1400 audit(2000001262.049:2186): avc: denied { bind } for pid=22183 comm="syz.0.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1299.534425][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.546057][T22199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22199 comm=syz.4.4092 [ 1299.669690][ T8835] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1299.783770][T22208] input: syz0 as /devices/virtual/input/input145 [ 1300.140284][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1300.146314][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1300.163668][T22209] ceph: No mds server is up or the cluster is laggy [ 1300.255927][ T30] audit: type=1400 audit(2000001263.259:2187): avc: denied { bind } for pid=22196 comm="syz.6.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1300.406138][T22217] lo speed is unknown, defaulting to 1000 [ 1300.583673][T22215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.592361][T22215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.604342][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.632077][ T5875] usb 2-1: USB disconnect, device number 93 [ 1300.661077][ T30] audit: type=1400 audit(2000001263.259:2188): avc: denied { listen } for pid=22196 comm="syz.6.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1300.684796][ T30] audit: type=1400 audit(2000001263.259:2189): avc: denied { connect } for pid=22196 comm="syz.6.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1300.707320][ T30] audit: type=1400 audit(2000001263.269:2190): avc: denied { accept } for pid=22196 comm="syz.6.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1300.727701][ T30] audit: type=1400 audit(2000001263.269:2191): avc: denied { write } for pid=22196 comm="syz.6.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1300.837143][ T30] audit: type=1400 audit(2000001263.339:2192): avc: denied { read } for pid=22196 comm="syz.6.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1301.041820][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.223179][T22223] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.720993][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.848602][T22223] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.879218][ T29] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1302.009901][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.072579][T22223] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.164636][ T29] usb 2-1: config 0 has no interfaces? [ 1302.174852][ T29] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1302.187192][ T29] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1302.213284][ T29] usb 2-1: Product: syz [ 1302.229738][ T29] usb 2-1: Manufacturer: syz [ 1302.247729][ T29] usb 2-1: SerialNumber: syz [ 1302.254686][T22223] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.318548][ T8835] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1302.328719][ T29] usb 2-1: config 0 descriptor?? [ 1302.380589][ T8835] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1302.408413][ T8835] usb 7-1: can't read configurations, error -71 [ 1302.878656][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.413446][ T5916] usb 2-1: USB disconnect, device number 94 [ 1303.791547][T10063] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.813253][T10063] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.880464][T22249] [ 1303.882801][T22249] ============================================ [ 1303.888928][T22249] WARNING: possible recursive locking detected [ 1303.895074][T22249] syzkaller #0 Tainted: G L [ 1303.901041][T22249] -------------------------------------------- [ 1303.907181][T22249] syz.6.4104/22249 is trying to acquire lock: [ 1303.913234][T22249] ffff88803302b0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 1303.922123][T22249] [ 1303.922123][T22249] but task is already holding lock: [ 1303.929487][T22249] ffff88803302a8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 1303.939170][T22249] [ 1303.939170][T22249] other info that might help us debug this: [ 1303.947228][T22249] Possible unsafe locking scenario: [ 1303.947228][T22249] [ 1303.954678][T22249] CPU0 [ 1303.957957][T22249] ---- [ 1303.961235][T22249] lock(&dev->mutex#4); [ 1303.965494][T22249] lock(&dev->mutex#4); [ 1303.969745][T22249] [ 1303.969745][T22249] *** DEADLOCK *** [ 1303.969745][T22249] [ 1303.977881][T22249] May be due to missing lock nesting notation [ 1303.977881][T22249] [ 1303.986194][T22249] 1 lock held by syz.6.4104/22249: [ 1303.991295][T22249] #0: ffff88803302a8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 1304.001411][T22249] [ 1304.001411][T22249] stack backtrace: [ 1304.007292][T22249] CPU: 1 UID: 0 PID: 22249 Comm: syz.6.4104 Tainted: G L syzkaller #0 PREEMPT(full) [ 1304.007322][T22249] Tainted: [L]=SOFTLOCKUP [ 1304.007331][T22249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1304.007343][T22249] Call Trace: [ 1304.007350][T22249] [ 1304.007358][T22249] dump_stack_lvl+0x100/0x190 [ 1304.007391][T22249] print_deadlock_bug.cold+0xbd/0xca [ 1304.007422][T22249] __lock_acquire+0x12bb/0x2630 [ 1304.007447][T22249] lock_acquire+0x1cf/0x380 [ 1304.007464][T22249] ? comedi_do_insn+0x2e/0x360 [ 1304.007489][T22249] ? __pfx___might_resched+0x10/0x10 [ 1304.007513][T22249] __mutex_lock+0x1a2/0x1b90 [ 1304.007535][T22249] ? comedi_do_insn+0x2e/0x360 [ 1304.007554][T22249] ? comedi_do_insn+0x2e/0x360 [ 1304.007575][T22249] ? __pfx___mutex_lock+0x10/0x10 [ 1304.007596][T22249] ? __pfx___might_resched+0x10/0x10 [ 1304.007621][T22249] ? __up_read+0x2c5/0x700 [ 1304.007643][T22249] ? comedi_do_insn+0x2e/0x360 [ 1304.007660][T22249] comedi_do_insn+0x2e/0x360 [ 1304.007679][T22249] comedi_dio_bitfield2+0x3c0/0x420 [ 1304.007698][T22249] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 1304.007717][T22249] ? __kernel_text_address+0xd/0x30 [ 1304.007739][T22249] ? arch_stack_walk+0xa6/0xf0 [ 1304.007766][T22249] bonding_dio_insn_bits+0x2b9/0x570 [ 1304.007789][T22249] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 1304.007813][T22249] ? __lock_acquire+0x4a5/0x2630 [ 1304.007833][T22249] insn_rw_emulate_bits+0x2a2/0x5e0 [ 1304.007861][T22249] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 1304.007888][T22249] ? rcu_read_unlock+0x17/0x60 [ 1304.007910][T22249] ? comedi_check_chanlist+0x27e/0x300 [ 1304.007937][T22249] parse_insn+0x83f/0x19f0 [ 1304.007957][T22249] ? trace_kmalloc+0x101/0x130 [ 1304.007976][T22249] ? __pfx_parse_insn+0x10/0x10 [ 1304.007995][T22249] ? __kmalloc_noprof+0x320/0x850 [ 1304.008024][T22249] do_insn_ioctl+0x152/0x4e0 [ 1304.008047][T22249] comedi_unlocked_ioctl+0xf68/0x3310 [ 1304.008071][T22249] ? tomoyo_path_number_perm+0x188/0x580 [ 1304.008098][T22249] ? futex_wait+0x125/0x380 [ 1304.008122][T22249] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1304.008148][T22249] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1304.008176][T22249] ? do_vfs_ioctl+0x226/0x13e0 [ 1304.008204][T22249] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1304.008232][T22249] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1304.008266][T22249] ? __fget_files+0x215/0x3d0 [ 1304.008286][T22249] ? hook_file_ioctl_common+0x146/0x410 [ 1304.008309][T22249] ? selinux_file_ioctl+0x139/0x290 [ 1304.008336][T22249] ? selinux_file_ioctl+0xb4/0x290 [ 1304.008363][T22249] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1304.008388][T22249] __x64_sys_ioctl+0x18e/0x210 [ 1304.008417][T22249] do_syscall_64+0x106/0xf80 [ 1304.008435][T22249] ? clear_bhb_loop+0x40/0x90 [ 1304.008457][T22249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.008484][T22249] RIP: 0033:0x7f83d339c819 [ 1304.008502][T22249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.008522][T22249] RSP: 002b:00007f83d4301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1304.008542][T22249] RAX: ffffffffffffffda RBX: 00007f83d3615fa0 RCX: 00007f83d339c819 [ 1304.008556][T22249] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 1304.008569][T22249] RBP: 00007f83d3432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1304.008581][T22249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.008593][T22249] R13: 00007f83d3616038 R14: 00007f83d3615fa0 R15: 00007ffdca1f8ba8 [ 1304.008611][T22249] [ 1304.353922][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.362011][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.723191][T14403] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.841423][T14403] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.361588][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.400788][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.359930][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.450925][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.480683][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.530835][T21576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.399923][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.560756][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.599904][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.608002][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.640722][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.439992][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.680698][T21576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog