last executing test programs: 14.841438944s ago: executing program 2 (id=731): r0 = syz_io_uring_complete(0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r0, 0x4068aea3, &(0x7f00000004c0)) write$P9_RAUTH(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100001040400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000002c80090001ee756c616e000000001c000280100003800c00010001000080ffffff7f0600010003000000080005000000", @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="0000000000000000070000000c0019800800f38004002880"], 0x20}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x4d0, 0x0, 0x390, 0xfeffffff, 0x2d0, 0x228, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00', {}, {0xff}}, 0x0, 0x1f0, 0x228, 0x0, {}, [@common=@ttl={{0x28}, {0x82846f83166753ff, 0x96}}, @common=@inet=@hashlimit3={{0x158}, {'bridge_slave_0\x00', {0x0, 0xed74, 0x1, 0x6, 0x9, 0x8, 0x5, 0x1, 0x18, 0x80}, {0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffffff, 'veth0_to_bond\x00', 'geneve1\x00', {0xff}, {}, 0x5e, 0x2, 0xa}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast2}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCLUNK(r9, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) 13.84014268s ago: executing program 2 (id=733): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create1(0x80000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r2, 0x0) syz_clone3(&(0x7f0000000500)={0x8000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}], 0x1, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r4, 0x1, 0x1, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfe56) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @broadcast}, 0x2}}, 0x26) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1}}, 0x2e) getsockopt(r9, 0x111, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xf76}, &(0x7f0000000340)=0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x43c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x4, 0x9, 0x5, 0x5, 0x9, 0x0, 0x3, 0x9, 0x7, 0x2, 0x15d, 0x5, 0x6, 0x7, 0x10001, 0x0, 0x8, 0x101, 0x80000001, 0x6, 0x101, 0x9, 0x974, 0x9, 0x5, 0x1, 0x8, 0x8, 0x2, 0x1, 0x8733, 0x5, 0x29, 0x3, 0x10004, 0x200, 0x0, 0x2, 0xc82, 0x9, 0xe, 0xed8, 0xffff, 0x3, 0x9, 0x6, 0x7f, 0x800, 0x7, 0xaa79, 0x6, 0x5, 0x40, 0x9, 0x6, 0xfff, 0x4, 0x50000000, 0x9, 0x80000000, 0x80000001, 0x7f, 0xfffffffb, 0x6, 0x8001, 0x6, 0xd3, 0x8000, 0xabf, 0x3, 0x1, 0x8, 0xc9e, 0x7f, 0x4, 0x1, 0x9, 0x0, 0x6, 0x0, 0xfffffffc, 0xc000000, 0x2ff, 0x670e, 0x4, 0x5, 0x53d, 0x7, 0x3, 0x5, 0x4, 0x316f, 0x6, 0xb, 0x98, 0x10, 0xfffffffb, 0xfffff0dc, 0x7, 0x2000, 0x5, 0x7, 0x4, 0xfffffffb, 0x3, 0x11, 0x8, 0x929a, 0x9, 0x6, 0x9, 0x3, 0x7758b7e7, 0x40, 0xbb, 0x9, 0xb7, 0xfffffffc, 0xb, 0x6, 0x7, 0x3, 0x1, 0x8000, 0x400, 0xe, 0x100, 0x7, 0x6, 0x1e, 0x4, 0x2e, 0xffffff80, 0x1ff, 0x7, 0x9, 0x9, 0xff, 0x62, 0x3ff, 0xffff, 0x46, 0x3, 0xa, 0x6, 0x9, 0x8, 0x5, 0x8, 0x5f3, 0x9, 0x8, 0x3, 0x4, 0x5, 0x3ff, 0x1, 0x4683, 0x8, 0x4, 0x9, 0x764, 0x9, 0x7d04, 0x34000, 0x35, 0x0, 0x16c3336e, 0xa, 0x9, 0x5, 0x5, 0x7, 0x5, 0xd33, 0x4, 0x80, 0xfff, 0x400, 0x80000000, 0xa1a, 0x1, 0x7f, 0x5, 0x200, 0x5, 0x100, 0x5, 0x3c9e, 0x9, 0x4, 0x9, 0x1, 0x4, 0x2, 0x80, 0x8, 0x800, 0x9, 0x7, 0x9, 0x5, 0x7, 0x5, 0x1, 0x3, 0xff, 0xffffff01, 0x3, 0x6, 0x10000, 0x8, 0x2e46, 0x0, 0x0, 0x2, 0x4, 0x5, 0x3, 0x4, 0x4, 0x6, 0x1, 0x4, 0x1, 0xfffff48a, 0x5, 0x4, 0x6, 0x6, 0x5, 0x76, 0xfffffff0, 0x58d, 0xfffffffe, 0x9, 0xffffffc0, 0x480, 0x5, 0x4, 0x4, 0x8, 0x3, 0x8, 0x5, 0x5, 0x0, 0xd28, 0x0, 0x3, 0xa, 0x9, 0xf, 0x1, 0x7]}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x43c}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0xf8, 0x24, 0x200, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0x8}, {0xfff3, 0xe}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0xba8c, 0x5b2, 0x0, 0x6, 0x9, 0x4}}, {0xc, 0x2, [0xf001, 0x4, 0x8, 0x1]}}, {{0x1c, 0x1, {0x96, 0xb, 0xe3, 0x1d202934, 0x2, 0x3, 0x0, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x10, 0x2, 0xa, 0x7, 0x0, 0x8, 0x2, 0x7}}, {0x12, 0x2, [0x80, 0x80, 0x70, 0xc, 0x3, 0x6, 0x71]}}, {{0x1c, 0x1, {0x8, 0xe4, 0xfc01, 0x0, 0x0, 0x481bb7d, 0x31b, 0x5}}, {0xe, 0x2, [0xfc27, 0x1, 0x40, 0x7, 0x4]}}, {{0x1c, 0x1, {0xb, 0x8, 0x4, 0x0, 0x0, 0x92, 0x9, 0x3}}, {0xa, 0x2, [0xfffe, 0x7ff, 0x7fff]}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40055}, 0xc010) 13.74324931s ago: executing program 0 (id=735): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) r1 = io_uring_setup(0xeb1, &(0x7f0000000000)={0x0, 0x147a, 0x2, 0x1, 0x338}) r2 = eventfd2(0x100, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000140)=r2, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x1, 0x1, 0x3, 0x8, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x808c) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) 11.588265897s ago: executing program 0 (id=738): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB="8b"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x12b8c0, 0x20) ftruncate(r7, 0x200004) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}}}, 0x24}}, 0x20000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf254f00000038007a8024000100d80ced8b1443a3945bcabef14bdde263ec74bb7b4f766501821134bb6a4e95ae0800040000000000080004006b0b000044007a801c00020090cb0e4dd07184dac8fbc11100ff52b6723e45153d40ba4224000100ff16937b375e4b99ec8934c2fe1373b63d63c5617e9f4eef38ebbfef5f13faef44007a8024000100501d2f29b4fbc6fa3ce3e00e26bd2d6d5cd234defc7c2b1abae62a0b972fef291c000200a9cc03c1a2d1616916b6f114ebfbfde01104a8010108788844007a8008000400fcffffff1c000200aa90673688342fb90a75aaa76df86e4ddf3ef072f8b4d0e31c0002002207c29ec95c17760aac39cd6de6a2844c3b3cdafd10174348007a8014000100882241243e5fcc97015ebcc2e665f99c0c00030001b1b86de05c50fd080004005cbf0000080004000700000014000100667a514545023d37031011c6c1a1adb62c007a80140002002b061ac127f177b236668566f96c3d4814000100e759165027b9ca8537d4366046dca57028007a80240001005af7c59ccaf90d7f214c489f3d7eed077c59aabdc7fbedd7864b262cb89343b9c0007a801c000200c08fcfaa5f524d7a033133447c09441ac9dcb976a312a4f40c00030077289ab48535a7fe0c000300ccdd9315524912f8140002007f4f8f38c12fb7b27526c1739fb7a3892400010087147b3e126539bdf6ead7d51947d94ffd43816c6ac9c854628241a0e56f2a0f140002003fa43ad478f63503602704c52642be6c1c0002005636f8a251a5c09b580395155225a629bbefbcb019eed2630c000300f68e2a77a00fbfb614000100468ea86a164f79703dc37ce973a0001f5c007a8024000100d94df3e44ed18df720f3d889ac659efd8d556c91967db65a00d276c0b54c7fc4240001001c30c5116d56e9bbcbb28a6e790ba8718e06795b05c145e396a0a0afa9d3e42608000400050000000800040000000000bc007a800c000300fd8269bd9219ca641400020054316f7978e40bc4b7f9960fba411ef11c000200c68c3f8e1fe02e2230a762068988a5486283388726be4c37140001001053f4451aa4380705106bc69a054a0b08000400090000000c0003007b7a4cc2f9f82699240001009d7251c76be9c6a32cbeb5f26d7cd478ccabb9d0965908f1ca71d01666ea3ae31c0002002ad91221c3295968756b140625a1430a7f050f270390c62614000100afc73d1aabebefec3517523a055d110d"], 0x38c}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) 11.471506306s ago: executing program 2 (id=740): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r1, &(0x7f00000017c0)=[{&(0x7f0000000640)=""/164, 0xa4}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) accept4(r0, 0x0, 0x0, 0x80800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000006c0)="cc", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20) 10.840527779s ago: executing program 4 (id=745): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 9.696616876s ago: executing program 3 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) alarm(0x8000000000000001) (async) poll(0x0, 0x0, 0x67e) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018"], 0x58}, 0x1, 0x2}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) alarm(0x4) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4010) (async) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) (async) alarm(0x56e) 9.629079487s ago: executing program 2 (id=748): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xe}]}, 0x2c}}, 0x4000010) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1f) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0x1, 0x81, 0x9, 0xf9, 0x8, 0x43, 0xfb, 0x0, 0xc, 0x0, 0xbe, 0x4, 0xfc, 0x38}}) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000140)={0x8, 0x48}) r8 = socket$inet6(0xa, 0x8, 0x57c7) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x4}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) unshare(0x6a040000) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r9, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0}) 9.461592738s ago: executing program 0 (id=749): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$char_usb(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000000c0)={0x4, 0x0, 0x2}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x4f33, 0x2, 0x2, 0x4000, 0x1, 0x1, 0x8, 0x1000d287, 0xa, 0xfd, 0xffeffffd, 0x22, 0xa2, 0x1, 0x8, 0x12a3cfde, 0xf7fffffd, 0x6d, 0x2, 0x1, 0x8, 0x7, 0xeb96, 0x0, 0x40b, 0xe69, 0x6, 0x10008, 0x0, 0x1cdc, 0xfbfffff8]}) sendmsg(r0, &(0x7f0000002ac0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x3, 0x2, 0x4, 0x4}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002700)="c83730438ee8ef273701c8496d57bf4b08824e792efdbfdd8a2c78b2adb8081e55022c0765abc45f98fd6277ac145ba3b058d317ff7c94cf20a67a8c6bfecd973ad93c2a44359ebbfcd2948124602efcddb3fc0205021f13e6ca9115d2a9de90e61affc2c61d78bf9bc8dc56370c6f3ed9ff6b69cad3a469dcc4538aabd4e2413d296ff892f3b911acadd988918b5bbc5d189b6bb9495a3bc5802786361fcb30d5fc59d9d922f39136eeeea092a9d2dffd6ea60bbe00bc5becda53d7b1455f", 0xbf}, {&(0x7f0000002800)="fb5d017dde4ea1665c5d0e701dbf6c206a0879eb398a06521b13d670916c571bd103418494da0f19dda67c07bc20b3fbf2f6399352199ba8949b0b7f376887d37d647a684ac8f06f07b8b6dd3f4bdea66412", 0x52}], 0x2, &(0x7f00000028c0)=[{0x80, 0x11, 0x8, "92371437b7b52fb42ed9cc3c542d93906e063bee22dfc20fe2a19a157a1198dace2e7904753da5ae0698c44c4a90daf087ccc2bdb7429ad0305f46b53376c513229ef06ae7f836dd0c8381b48e940f56f386dffb0d9f18a4103f500e2843a7709eab5024b283760f07ea70"}, {0x88, 0x10b, 0x1, "d0f11c5ebcab76c458cdfdb0a05e6947a42c3e1f10389486e1f51ecd5c7af780be76abd08baf6053b5a27d59f3f516797ecaffabe7c0c4016e681a0eaef695dcce340620d40dfd3250b7684f7ae1faf515fbda706d703c1d14346977addf9d79063ea44be3b319b4924120a3530f4cdd352fef"}, {0x80, 0x10b, 0x3, "5f0f641caa7fa94533b5ebffd217cb33f3364873069e36d2991c6f0bfe31f047d234a57c88016555488ce3d6a0df1392c61091bab4d472f526c699de90ab7a38906c886a763dc908db3280012789950c2b0e01e5d8b2aebfe43035a29e4e17a218a00155320faf881a39"}, {0x60, 0x1ab, 0xffffff00, "0e49e1269b0b29ba7739c20770debb306fada41861c1ae96d73e978fc6730748d78b463ee1d7550c467dbefa24948666bf9876163a568305bc9266d0e49fc9f9bbbbf36fa479b37d131a16f3973f81f0"}, {0x28, 0x10c, 0x2, "3790d6b101c625eaf8334947922fae4b2258173f886f"}], 0x210}, 0x4000880) fcntl$setlease(r0, 0x400, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000280)={0x13, 0x9, 0x1, 'queue1\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1000, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB="2c7766646e6f3d216d19a13fc8386a62995b5896d66ed9c71350f517fd80929fc477ff8d14914b47e472670fbc8af487545999cb8ca7dc4ea5a99d18e42b2e8a6e3c3711f7728e25bfcdd6b98b1c944708ee8ad9c2", @ANYRESHEX=r0, @ANYBLOB=',afid=0x00000000000035aa,version=9p2000.L,fs', @ANYRESHEX, @ANYBLOB="2c6d73697a653d3078303030303030303038303030303030312c6163636573733d636c69656e742c736d61636b66736465663d27262d2a242e402d29732c736d61636b6673666c6f6f723d56247b5c262c7375626a5f726f6c653d28212f2c40ca2c66736d616769633d3078666666666666666666666666666666622c00"]) chown(&(0x7f0000000dc0)='./file1\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) 9.371314962s ago: executing program 3 (id=750): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x290600, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0xf}) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f700"/128], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000400)={0x1, {{0xa, 0x2, 0xff, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0x3, 0x7, @rand_addr=' \x01\x00', 0x321}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x113, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x110) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000cab000)=0xc) 9.038459877s ago: executing program 4 (id=751): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x500, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x8}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) 7.947925466s ago: executing program 3 (id=753): r0 = socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400190000000900020073797a2400000000140007800500150013000000080012400000000005000500020000000500010000686173683a697000"], 0x58}}, 0x40000010) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) r5 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x2) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x2) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc0b45545, &(0x7f0000000040)=0x1000) 7.946611188s ago: executing program 0 (id=754): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x32b7, &(0x7f0000000100)={0x0, 0xc89f, 0x800, 0x1, 0x20002f5}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffd, [0x5, 0xbd90], 0x4}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7723, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001b80)={0x2f}) 6.305768874s ago: executing program 3 (id=755): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20000000) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r5 = getpgrp(0x0) sched_setscheduler(r5, 0x3, &(0x7f0000000000)=0x9) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@remote, @in=@private=0xa010101, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x2000000, 0x3c}, @in6=@private0, {0x0, 0x0, 0x2, 0x7, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0x8, 0xae8}, 0x70bd28, 0x0, 0x2, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x2008810) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x480880, 0x0) write$proc_mixer(r7, &(0x7f0000000080)=[{'DIGITAL1', @void}, {'IMIX', @val={' \'', 'Capture'}}, {'LINE1', @val={' \'', 'Line Capture'}}, {'IMIX', @void}, {'DIGITAL1', @void}], 0x65) 4.71461419s ago: executing program 4 (id=757): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 4.286907569s ago: executing program 0 (id=759): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80800) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x474481, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r2, 0x400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000040)) 4.239569454s ago: executing program 3 (id=760): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0xf, 0xfff2}, {0x2, 0x7}, {0xfff2, 0xf}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x2008085}, 0x20000041) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r5 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f00000000c0)=0x6, 0x4) 3.743045992s ago: executing program 4 (id=761): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$kcm(0xa, 0x2, 0x3a) sched_rr_get_interval(r3, &(0x7f0000000140)) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r7, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x9, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0x969, 0x0, r7}) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x3fb, 0x200, 0x70bd27, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.648325091s ago: executing program 4 (id=764): r0 = memfd_create(&(0x7f0000000840)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r0, 0x0, 0xb, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000000)=@caif=@dbg={0x25, 0x8, 0xe3}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000000100)="08f8dbf1fda414f646948c0ca3a7fe0447a2ee0c23ba731abadcf5dc0a569d88b6349b294a5b9110d99ffc9ae692a1094c567ff926fd4c19d60b869af7c4cb928781682b31115654a2f84a82776472a8a56f3eee390798e4121b5cfad16a9c63ace565c74009a028fe6f4a70844f1b52ddcd3023a580032b3b8545ecc5afa2e4b2100a6cbe7488a007c5622b3654884ed24ee01e8fda54620502bfdd084ef3b2baa46f64e4adf1d929ef8c842ed3e7", 0xaf}, {&(0x7f0000001cc0)="8d006e7d9c18d2b02e755b6ce04deaeeeb2f03f42da5", 0x16}, {&(0x7f0000001d00)="fa3d420d3a8fd25e750781d311db2c6cf52c7da936c0e6aabd20fe3447277f93310ddf82a7e89c91ae19780874d3fee6937a96f0b82a17a044c9b8adf4106543b35bec5c7e2c4b83982b04804d0f733432e1df3dfcfc0c7f573bf66e278cc4d2fc643f924ae8f1adb3aec854c81bf2cb650e591f8ad3d6cc63284fe165d26b9b366507e7e4c1e2c7eef238c2118f3fc3d5fa4fc216d0d206c87f34082c13c292de7bb7f3a1cbaca318c6251d1d16201c10d44ce2b72bd09bf4416c82a5801cc4db161e195694c0ed341e8b10974db7ed4af6f6898a6f474fe349a6198f4b356ad9c243cb1beea629b066bd91dac4b30755065175f47bd3bec22484eb190ec556f9c05926d36ee8fb40f76068eb834ff67b1fa5b1920cefd5b88c1bf04543fc90039b9810449a4d4528b93767fdbb28f43c826597eb07fd73677c79f63700925faf4becdf89595ba8f4b3e16984eed41ee8e4e072ad02c6d72260df080389494cbf4585e904d82aefb52b0357185093998cabfb19b8377a75823be7f21e8b15cd925ffad6fd92c659cfe109ee00fc7d5128de2fa36f8e306c1ee59103ec7791a5a00ca6adad7993238fc90e16a08f14de593aec29ee403dea18d4b97a0f8e5cce8efeb32a8f0536579064465fc6201c9d9f99bfbe4d288a327389637c11a0efa742893a65bd39b0fac056b15a902b929b94e38e2c9dbaa8714dbdbac650e50686a0dec85c982039ab4b88b72abd5d02266a51797c57f9ecd92bc3d8b28a404b6d749b46813404bd91ed04cb9df4fd13612aeb0b5865a149fb9420bc224a7de0d327b3c7b0ae79086cf003954ba66575edcc8f99d6ce75895e9d22588400b789ce5c2af11a017f613cdea434f0e42ff63e793defbca9eb83e710b35f4a7f98e4c5a76b2ea20154c9298efa435bc61d72a9482850b30015320b22878efefe653f31ad153aadd0bb12c9972265de1260abc487804aa3a9b9f9eb5f863735a26461104298cd3712dfedf099e02881960159c2dce71e3dfe65d2997fe045ab3232bb5203a680a47f2fef7924ab4b750b5064c4a1924c51369040787af55fdd6e53bd70174cd62ff7495dc03772dbd7dd7101175bedc07f8868bb2eecb70a5daada22de3c896bcf1017e721f8b6d47000422e96646a24d0f07b54a1da941e5ae82968ed236db726460bcaf96152b197e6fe8535da7828bb2c8237ca9175efae5a6cbb6fae25b66c44b670ca56fd8a44084fad05ee01db8427f0541ac8fa957934e1c0f9d9114d3457f730aca1471a5d06a78d20470d031aaaffc730a508f07a5c587d21f43408d90c5cbd27be04f113edd28427158d87e7b09692352a762b69685cac6a090d694e7cd3a8ae1762dd508636feeebc3db2856f8c556f2c80d3470cabcfeb22d7be1bd0c5bfa17a89ce46a7af83e331324af033b09b0d5eb6af38ed9df605d0483ff9cbcab3d042890bff6d823116ab0376c56f34347594f0ecea663a3f90150e175085bec04c923317d17ec678c177fc47b9f89b495aaa5b32e510efe9701f9fcfe20aa07615f88cefaf867ac5fdd0b29954e1ee7d17b61b18027ced842513a2d4c1db652d8352499fad0c5c9226c027a20d6631909b8d2fb0148454bd22a035831088e582411e949789774743eae4e56ab3d5a0f2c5cc5e6965dbe67bb4d30ebdb293b26cb8343a5397e0d2454ab18e0ad64e96bb5a491789f1cb76a1e05207a8886611d371d95e6710995f9a25a7f9c9133a00bbb86277ad5ce96afba55aebe0b4d938b5e46970dc99657f551714728abf3003d0e2290988ccabe7e131f86cdf1aab46793330c395c29898617e851bece9b2c4b5135679bfae64cf9274af783b88a55d25cd56bc7183ecbffd1c78334c16b65757402cd8de490339197b68f8a1c7e8e7146d06f6d13e3674b48b036bf006724a19f00a576a5d0243ebdc49a7e2919e3eafb48992f3f6747e04df12d4225d2a97931a3b5da74a872e3aceaf2bf7b3244d528951629fb057b2ea218cc506738cdd865cd63cef7fb3e03467589b0bb0be9f9953177ef55063601c552dfccaea35cb7dfe2e23e8ad039b41f37067fa4e8dbf601158d45b9141787c8fe22e8bcf79bb2b9c6b6ed89bf259587437f52d200b6aac5d007dd4b304768b42b25e058ab4a1685aec5aeb39f1e3a0494b1d4c971bee2b8fe61a1d759f300ef6be7f5490b13e7ba3aa5c2cfd1e45036b8bef6968bc5b73cd7534ca45e463be4fb261fdaa15facc514e2a047e2fbbab1ff4364f1cdb75f9d2c9fa1e86f9861d4baeb2e9d57784f57224b52fbedb2d7a85d44265bbd0251b5b7a1657d7df345a97e0bf6c52c5d2b443a5767c5930b40f1aee2a24a71beae3264d522e251000f0b2cbf7e4ef4e6ea8fce48448b0a040230ac05ca7101402f27ee9c5eb75fa78dd0519f1f0ec9f3bb7506f3080723ee88630f802bda550624fd047cdd1f50a95c2021b1274617f1e5aed4108e9e0e5fe9a1cc5653e14b4fbfd4a3003f750e335433d59a1a803c1fd3079bc69e2b0997f2a5f517010993d205a9c953ff1cb0b372d52d756f39b2dd64975a66f0be8ec401061fe6708bba184af5502116cc55cb96baa655503a4697813d5442291b3b0e009183a9215d7e2cbde36c22bc369fe84d2c0927ff58020ac5722dc51c7ca6ddab816b78ecc941bf1b82536b977c8563dabffa0c02b177f853971d539c4bba772a80a0f1b4811afeb9f0b0017fa68192dd0874e3a41daff732a0fff2b9b315e2a7b58aa6cbecdd762dcaef3b6c27e2554cc2676b162195b2ef3fcd65322eeb9e65427adfc828e2b4ef040e26326f4f142c799041a5fe73ce47d8a2dee1858244464712e13c599afd1a7ac50e0b94093cf2027e1cbd8caf13b58d3872082aa30189c9bd9655267a35a5148f7b2ba4610b6d5575b1b5b4565bb1f88c07eedf4674d2b9eb9d2a5815a8ee8a14902014d6168d0f38f8a368276cd211bc3dbad5f1fb52da2a093760e0e15d6135219d695293b23bc773f1dca794b26ca90ad64b54c9fce1edddf16116f4b3b3e3df9c666fb7cd176960c1e7dd39795628162b6950d59a936ee0a29e872f352aea69f7ea91f65c15b6b0dc65e0c7c3dee3504952924c54dc5be9e571c50f845f30a1eb194b87c762a0b93413552ccd5006323749eac9fdaa069db6c323f778a6d122d2a0222137d34e71a4e4860df9295b75ebd57a8005db5c329c17ad1200acadc5b13295914f72f691303140857ce8c3098915980b7d9e18488dcedcde4b9429973957d230e1eb68dc951f2a35aaac0787824f82e97e6cd5919c1aba8b48b66569173f88a294f47b02d34249fb47c29aa32e2e74bfc849658ce9eeb7e7418521ebb2c909462f386444996370b3f8f927d35c97015549a742c88d95bead3e8bb0a81786fed7af1a674d17a44e8b8c0e1ae49e2b2a70cddcfdd9ec7bf0283ec9774ee28134e78040f8cf1ae926086c997d137522e89287efcee81e5a929eab2ff19f86e93aef685e044b41e77c8a71b2245d1e81e6e70922eb8d8285c260af20bb9dbebcbdc579e7a6095f2ecb878e85fa6d7e9d174ca1d8d502f2cfe3400ea92adb1c7d6857988abf00504c0edfc2f09f6788d7253d56da29b27e0da76e405c242f217b6ae4cde5093e6a2371bc0e19095bb614e647835cbb210577c41939b8c249f6c163bf630eae8b900fd8f263eb8556eea973dee9b7d5a76c7e3f64760cc0a637276b66c23666131999026d7479f72a1665da930fecceb96b03a925c878644377bda26ebacf69088cd3e16095ba939f876e0bc1818aa781952d4d2d05a09e4af96431a78ff6d5914213e8d239eb073224d47c97c1ba5a202ffbda8369a1bb0a7cd7c6aace4f53c0b4b5ef54fb543ac7daeba327c1563c05bc58dc304e6581b0b37e49b3fe7283ad656fcf4bb6d746e7071f825868e8d848a7d65df0b268fff258109373625899b178e387b71ee209743dbeb9cd33f4749482154b933f03a28a80d45efcaff7936dd5c33a74be569e5b791c35588ed472bff19e1aea52df4bec0be8362e1ac1ce50159b85cd32953ebe1f7151698acf314a933d21d99f01b14689743ac341d04905e8acf3ac5d391649bbcf32d904ea7ef3d1f6675e019e012071e896bc7e78c963d8853943c1d00fe6930aa710cb9060f513376f2a170b23aacf000090c60c9d7ac3ef2894efa043cc696e23f9f0e583cf8ffa0b2a575bc6c9fb2e2aabc035fee393a0bfc37c918517917e3d10521117d15673631dd0abfc525ed9b3523228a343a9fad4683e594a2fdbedff0780fc5c70296587fe053e2639784c0712a951a7f321cdeeca8a3f7c652540a31b532140b80c0b7232e70071905d689e221b483fb68c0eafcd455350b11c77cb581f8b7515e3a833e99579f44d0826d1af4034edc1decd2599705d4cca792334e806ffd4c12008db94766d605b2b87c8f9f439cf9186a20cf4da3e793a1dbeb191ad6b92b713801b4408815847b516b400be0e18e91753a275670af9c74568201a192999dedbac9e730c9419f6b7f6ba0a1f7a1bf104fc29c305ac52125442defa589bb409f903539ea1a0567af3d4d4e63066f89d5892577fa45e75dd2fc5b13a988eef69e73cc6783bd0d50cc543dce7dfbb19a4b537e408d8643b83b05a9b44dce9ba3860f727ea08dc9443841d857efe669d9e841237b1d91c704b0df4d3c8ccf371d7eefc51586c4539f94cebeb716aa6e2057deb507d8711d84c7c00905f78574dec1f583eee22d714143f562bb9daa338da75a2e3fab0dc50fb6c9a8f3a88187d85a83ccde802604f94db1c969740a0a14db4a7bfea767fd19e09e5450cee68de51a6c2354bf87cb90a1e6cab518930c9788a4e04d99a96ecd153ea7f42d530be1a87323e0554b2e6f5bf7b864aebe789bf6a6179d1083b422968196034c950b4bf2e36d5c8d4c6e2eb869f1620ca91919cb6ecafb0c7b7fa124a26ade9d0bf6ada93cfe0691db58ef7c5c6823fa351e2c7ff207098483bc768077c64987830a03cdc14620b13fc1f0a83c0fb61417a548e27898c178a4c990db1a817866472261d988f4c9f1dafd66b79389093fecbd70588aebfcde9f15cdb6779fc3d9282784878d0f93129836427163f52d2881b9af7e6e3c06d477cf6fff22e5dbcb6271352300d90f928d715c93763ad289c300baf5386f748178ed564e57e27e9c88158bd5926da96faf8103f06980760452e2f5a50568f7a9f593dc581d9c4caed0e56bd10be279a438ee3e4f83599bf77b2f29cd7bccbbe52917d6018e4539d4ac0b8b9b845f5e03e68867db13113546e98e24b513b2bb0075e0100aa3820b39c6d58a52cc220a8322fffbf38fe375bf7f9a8722e36455764078cc45ff5e09b693d20ce649d938d2c62328f5eb17674129431b528f5e777a7660e635d62bb43fcf5745d818b282db7e0b78cd2969e47fd5d1f8eaff00ee0fd938cf6213a632922ee25ce324f16fbaecefe221f3461dbf8bc273d805ce9d19555072481b1743fcc42540bff0eddc939ebc07b0d87ad4c1343c5a77477cf7a05992213be1b2c6a1c1e17fa9ba4ef639d51781250c0ff9290aa86c698b9a461a8c3348c4fa6f77fb7930a3eb28f44b251a36d6d1bad93af6e15d8cc6ff4b8e876a48a408f777021d7e538aac99594de2e9236487cbf7ba43dfc1e6d5168307c6010069052f64df1cd4cfa990d8687142cb0581f7d4599b9f465d5e2e3219bcb4f1ef143a9a8310c9ca6042fa46c3b9a0a5b0d3c3fe640dc72f2ec9b3fee6eabb87e9baa98bee64fd4c74", 0x1000}], 0x3, &(0x7f0000002d80)=[@mark={{0x14, 0x1, 0x24, 0x6f34}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002e40)="8e90351e257fddda46f9af57d12c5ba10c08b957b166805d2f97223151e01ce49615e36b116dd19dc049b5c5ebf1b25e31390a95b72c954fa2cef9c4d0e822518f2ffa791eacde51cfa5acba2898f9b429af12272ec9c2f48a35f8b796a49c6717818ca00fdd1cf8c6dc1a42ca00c51e3849c31c0edbc5cf4071bc6a499442596a967943c0f2b64704f0d285a66931fec974aff9d01266d5a85d9e9420076b84b12e6a11acbef5a2303f9893367a8cf9f42dbec701a9e3b77cb161093738b9d2baca4e135cead044eec4", 0xca}], 0x1}}], 0x2, 0x20040030) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)="f697398c62854db20a95253697bf91b6501d62a6ad7a656f25fdcb975b148dde944a6d0063aedb9797658deb10b53b416c70220740a974da5c5f202a59970513d7363063720e7f79b39833520f7ef0dd7dba04488485b1e04c6d48773a315d1ea32076e42d725f6274bc25f1fba3bb96103c66ededb5512b7df066f47073a67209b82a80929bfb9043118638d3e37129a6427f0e1f4b", 0x96}, {&(0x7f0000000540)="f85bd45f6fdce311730313cef47f44593275fe69bca26ccc01128b6339819ac47decada8a0826f5d15ce1b171530b067d6e7d9520be137edfdf69f67c47b693d40f54707a38cd6cb907e2f17e97bb508f584f99dac644679faad3873a7863bb8eaf22855348a3a387b05fbe59d548b39555974271d63f50471", 0x79}, {&(0x7f00000005c0)="9b4648b167a025ea847b3c756c320b0f564b628b855d8d51ef98f222ef97a842a18655122aae805722902339e7fd4233bfb00311ee44f2fef0a2", 0x3a}, {&(0x7f0000000600)="12259a56947de76f3eb3aa19f0dbea625fae5291033b1d72b671c6b3e6982a14cb9904d1ea3668b2e342ebe5885ddeb1128e28a797cecae565e16e293bcffa18ac2b913feab7c577b492a9e4df3fb138c2e81d98f8a7316a", 0x58}, {&(0x7f0000000680)="bcbfdfa8d902de69d95de99009c3deed3e05278c546435d119cc02748abf468254c352220cfe20967bd1f87dcc759e0ea13a933f96c6dc4c55089295598db522994eefb6d8e9a280c316a1fe8a2a0023644490e5713aa33ede01bfcdcf58c1f06ad84281888a2ac447ff4e168c67a447d541bafe0868c5c6fc3821b73e8a3b63b17a137501ceb758c160e188c11c1d1f083fb554c99c120eb2c78320aa85c20e36b6db90394bac1ecb571591fdfefa2d405c1380e599bc9a74b2f49e11c9d6b8bef1270c4ed46e2ecc449b6e70813561a430a09d7398504ae51d577fe0ec159f0989a8d3c3df84ed", 0xe8}], 0x5, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4080}}, {{&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004240)=[{&(0x7f0000004400)}, {&(0x7f0000001c40)="51e750355c6aedc0fe4b0abbdab2c3ef8883905d128594d5da5d2024ceebebd4f3acdc7631f7eb554178", 0x2a}, {&(0x7f0000003000)="e93884f4604e4a6de975e6457b5321be333cb34558da339c3eeb1c47497aa89b699f3e24e764c6346daf9f055bd23255510ce9938e129202d7ac23c2cae2027d1ac400380935ff977787f1f584ce5cdc7b81b7405ea76e017fe843322aa945f1e9", 0x61}, {&(0x7f0000003080)="b1b146b7bc10c0f37728c5e90352ff14655ca4f788b411fa59a4fb1df990b5c279d4", 0x22}, {0x0}, {0x0}], 0x6, &(0x7f0000006540)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0xa0, 0x40}}, {{&(0x7f0000006600)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000007b00)=[{&(0x7f0000006680)="a256999e30167ff40b543c8a1974433a35", 0x11}, {&(0x7f00000066c0)="4b7808d8a65cb323451172609b1e397ab87387c303adf0088b9b0e6b5ce66d7d775971c23a8e2558fcce4a20f90b5fb3297ab888c5654d6c1015f2086d75940b51e39740bd7272046894b8998d345862031295f1b6077e1e19bd51d71c5f0aa5f9919a8b06659c02b6d78d561995c595a48e12f23d08519b987a2b49e42d5756c80b294efd5856b762b2accca074c2a4ddfe6fd6e4118b3574367b35b8bdf24e", 0xa0}, {&(0x7f0000006780)="193e70c8ded73867078d05f5dde3547bc65d8448884eefb3b5e87a09d8b4a53af8ff11784491539930f5d5e1a73901d5b6a9737c24369133bb69a799898b39de234e278fe60def487a0615d7518cb4c876e7e410c58085ef5301ea5d", 0x5c}, {&(0x7f0000006800)="c0254283d0eef02e68e0b3135b5ec01be9e035f05c48f22f8ca9bb3d057074f92120fd7e1ef15429a4e7934f1880d4056c200297001abe9ddfbffa37718ebec746161a84bf67c13e0eca6087708dca63b958796506da89ef394cb5ea6adaa31bb99a97b4d8891c6ce4ba7d73b65b5ba63b1075f9e573cda97a9e0a4c1efe767f562ec254de70ae3837764973683e95c85695f8f3609171c98f3bbed6844700fe04a64ac473b8aa9f58aec14e1e9e28", 0xaf}, {&(0x7f00000068c0)="2bd3334d255238e7c4f056370c1a6fb2f4a9dd113c0896145698a278a601fda3492381df2be4db4c01c24bc3081f4b41397f1a9224c3c6cdb75b29737ed161fc9ca88e42c5bd297423cc66e990b8b43361522638204eb666c2527aeea06d23d975db47165fd367680f92902512174b650b7871d9456c0f9e0c467b717199b0db87075f3d45425461c9407b9b908fb528d99e7621c5aaaf811693d6a1a53ebc516a570fd9dc0479442f3427bc06d33b5fb42d89", 0xb3}, {&(0x7f0000006980)="64242bd841a0eaf12eb4cd69759f9a51e14117c973a96aff47792e071b9410c1ef85a141a4ecde7eba222d0913076af8c92529631d6f1639875996f0bbaec8e38c75fb77750dccf4182fc2f4c626c7d6e925b3a8517c8a85fac61e0cadbb4545758c68527a42adee6a83d050fafba0dbe491d8b17cc0c46629c278f52f52c4b58fc8a0f87f8aaaa9a6ecdaea9f6c6487667b2dc5b77919a94a3d0b7e11b8aadb7428d3049ee1cc2b2f94da6522ebed20d969f9035d3ef13aca27e7cef4", 0xbd}, {&(0x7f0000006a40)="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", 0x1000}, {&(0x7f0000007a40)="0c1fed85391f7baae7a76bf2b6572be1dd7501bdb233910e8f9c6c6dcaf8f6db47ac81dcd793f536e9cd981ca855b50563017b28d7def472b26e9144aa933d99325ce703d7b1cad827f60c6d34893d5b92570c100fb5e4cc71942b4217e0402dbac15b243dce36ff1abcc4c8514dc801ff9290d0d40adb449c4954f532dd405edd", 0x81}], 0x8, &(0x7f0000007dc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8, 0x2c008800}}, {{&(0x7f0000007ec0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000b340)=[{&(0x7f0000007f40)="be394321237f65b9560a33511c6a1bd2d8e7dbbe3a547d48e2c1a9886279ddc704351bd5a1e501617c5b4ef3ddf3ae01561d71dd3bfc8090153f912e7567bf6f6cab530eae0bd0ed6cd6c2c897161610711caa0df5048d4d0176029d0375e1cf", 0x60}, {&(0x7f000000a280)="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", 0xf00}, {&(0x7f000000b280)="592a06a5aac868118db172dbd8bdffcc6ed62b40fc2ef0b4b4174b6fdc2a61cb44eb0d130bac5e8cf3f70f04956ce9428b2577e965c8d7a9b1b60391ded1c75e7a68f8f56b97aeaf0eea395f5eee54b04f8b07e36fc405910ed757ceb2e306bbf58b844e3ba65ce84abe3a433d6e9a1a9dfb8eec60ada9c32683882729dd5a37395de03944951ccbc981e79c82d8be6e2f1b64510932efe32082cbd0e6df47089c2c53a58676d4b821fe9565f99893f5665f7c25c8aa22dee53d73", 0xbb}], 0x3, &(0x7f000000b580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68, 0x80}}, {{0x0, 0x0, &(0x7f000000b7c0)=[{&(0x7f000000b640)="b88cf60a60da6bc181077e21e7211fe5d9b8d97bb02b5c6c65fea413d65439187c42cb42f7a04109858147480e5e9eb112399ccebc69a414375ec4868c8efab9869de2439789b511b61d02827c0c5decfa807cdc0db23fce46e36d1a03f85ac0dfff94568de4238e65ee6ea3bfb7315ae9", 0x71}, {&(0x7f000000b6c0)}], 0x2, &(0x7f00000042c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, r3, r1, 0xffffffffffffffff, r0, r4, r3, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138, 0x4000005}}, {{&(0x7f000000b9c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000bd00)=[{&(0x7f000000ba40)="022b9548db848a4bd2a2ef129b696b69ced7f16039d25df9aa15ff39750e0b2363923cda94012570aa7b", 0x2a}, {&(0x7f000000ba80)="4b37e303cf8785d780fec980d9d6c688ca7448a8c2e082ac18bf35e469793cfad503d0ccb00651d94c05abde119fc7a788ff26f413d5c73a43fa5f3ff1abeb71f9e6f3a5986815095b522a6ff85d35f43dde32d2db7a042c0049e018832c9df116db617d40dec2600955eafce58a75a71e65a4828d9d45426b83f41a736e33ae20f62babd1e40d07bea990fa0d068871672893acdd3a8654ddccaf5c2ade95d66a076d0eb92a053ea5e0eb4fdaed0b5e29bb1d9c19993ab8eb373144d0034ca6dd5bec8fe7d99f611743f3806d53b2af028a8339251979e54864ab8d77e7f96c3a874fed3238ab4e0af2741ef8156b9324e1754b7a36d3073c", 0xf9}, {&(0x7f000000bb80)="dbe11c5a97e3c5fcfc57ff49fd4c1382bd983741b6672e57dbf6e5ec665a16046abc5c101a0df05fd0a6f568555a3e0c300d2466a6e435de39ea82e11544089f0e3a17f3b89817a1433dac405e2573bdeaf0abe74910f9364084f3e2bfa5eeab23d474f70f22d7a9fde2076e32bf989a0e42e5e49b7e678ce6f5b4e0943ba7b825e29f3c40d7c666678cf01a70f3d4a54cdc89c8b4", 0x95}, {&(0x7f000000bc40)="4df193b0ec59b0f9a0d4bf89388846b8e76e40bf7fa5af21c7beca1de3e5763a01a4042e6394e0f136d891d686c98402ef5d4a75f0042f7437a8fa0a7970b6686b7cfc007268b97616537b7db17564e46c613c3ea5bcf2b1369e43aaa94081bb7e5ddc2d91da275963c32f63666279ab038a93cfa7cc", 0x76}, {&(0x7f000000bcc0)="6fa95972d3679cfe62f2c89ba38577863c7bee4e8f78b0d698f4ffaf08fa8029df42df7845101cf5198279f2a02de0", 0x2f}], 0x5, &(0x7f000000be40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88, 0x4040090}}], 0x6, 0x40000) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setuid(0xee01) unshare(0x6040600) pipe(0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x801, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x900, 0x0, 0x0}, 0x58) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.591416496s ago: executing program 3 (id=765): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x40000, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400000, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0xfffffff8, 0xfffffffe, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x5779, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) syz_open_dev$sg(0x0, 0x6f5e, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x4000, &(0x7f00000006c0)}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xff51) 1.909583234s ago: executing program 1 (id=766): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2a800, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002580), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000200)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x361f4095dfa4f658}, 0x800) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x9, 0x0, 0x0, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x6c230c0, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfffffffd, 0x0, 0xfffff714, 0x200, 0x7, 0x2, 0x7, 0x0, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xffff0003, 0x3, 0x0, 0xffffffff, 0x9, 0x88bf9219, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x40, 0x10000, 0xec6a, 0xca86, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0x0, 0x40000000, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x4, 0x0, 0x0, 0x1ff, 0x3, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x401, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x3, 0x199, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x3, 0x0, 0x4, 0xc58, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x6, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x8, 0x5, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x4006f, 0x6, 0x3, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x8]}, 0x45c) setuid(0xee01) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) mlockall(0x7) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_pidfd_open(r5, 0x0) prlimit64(r5, 0x3, &(0x7f0000000080)={0x8, 0x496}, &(0x7f00000000c0)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) readlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)=""/179, 0xb3) r6 = fsopen(&(0x7f0000000440)='configfs\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000540)='rw\x00', 0x0, 0x0) 1.728673646s ago: executing program 1 (id=767): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x500, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x8}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) 1.522984791s ago: executing program 2 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000180)=0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.023246297s ago: executing program 4 (id=769): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000740)={0x0, 0xe, 0x2, "943a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) open(&(0x7f0000000000)='./file1/../file0\x00', 0x1cd143, 0x82) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x31, 0x11, {0x11, 0x10, "066dcb7382b3f556e048566eb15bcb"}}, 0x0}, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x31, 0x11, {0x11, 0x10, "066dcb7382b3f556e048566eb15bcb"}}, 0x0}, 0x0) syz_usb_control_io$uac2(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x0, 0x1, 0x7b, {0x7b, 0x22, "95d0d38ae3428a05c14cc1d2f242921530329ff270ca3a8332d34219075176eea0236123d749e0a4ca3902d0516cd9c1b8d28633eaff8d10df931fc70d4972e09e32cbc1bb9d79cfdaa42bba87062ac829d587129afdc01f04e47ef40e20f17abc52d14983dd6ebeadf1b12f93cca202054b1435419dbdf766"}}, &(0x7f0000000100)={0x0, 0x3, 0x7e, @string={0x7e, 0x3, "c690771e348d734cca75ae1de07d56140328fef9000b12b56ae7c222013dad466ad595011dd45938093c4e44677c0d93099e7a27423b5cc0fbe33a523018e5e4c46180d85dc3ab89547b87a4f46e79437dd436d2c79f12148e52ebae9a9d3e3d65c496ff42aae71ef1d29d04e2130ae10d7423aa88b1b32c41ba4bcf"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0xf, 0xd8, "13760d7bc285b61fee58fdab304188ba67594b96630034c0483c88e43c9c79a35848770bda2ae5a77f9890ab2b1cd5af08c0a0c3eea6426454ca5fb9b1d3002aaa2ce3aa86ca301b0422f49a050b3913c11114fa2f81bd72f981ed64e3016344d38b28dbcdc2451b97522ae1a1b374e7aa627f834d4be0b97efa0fb34f11391799a640ef9d38aaf047a3824fef1dc2321f859edd12dac184c4adbcb8519b9f8f5a66bda1b80990bb11a3d8b1b77313c2f1189ac14f1af5f35bcf1045a35b3652de0f35cdfdb66aa3086b93459e1a3a77ce76c181f6126b0b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000380)={0x20, 0x81, 0x3, '7V!'}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "97"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "03258e"}, &(0x7f0000000440)={0x20, 0x84, 0x4, "892931b1"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "8a82da"}}) 872.284654ms ago: executing program 0 (id=770): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001040), 0x101400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') ioctl(r2, 0x1, 0x0) openat$cgroup(r2, &(0x7f0000001000)='syz1\x00', 0x200002, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/132, 0x84}], 0x1) 602.507581ms ago: executing program 1 (id=771): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x805, 0x0, &(0x7f0000000040), 0xfffffffc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = dup2(r0, r0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r1, &(0x7f00000063c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @empty, 0xa}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYRES16=r10, @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4c000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000000801020000000000a3030000000f09000a05ca9b1551f13302454fef010073797a3100"/58], 0x2c}, 0x1, 0x0, 0x0, 0x400e0}, 0x20008410) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) socket(0x10, 0x3, 0x0) 565.929159ms ago: executing program 2 (id=772): r0 = syz_io_uring_complete(0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r0, 0x4068aea3, &(0x7f00000004c0)) write$P9_RAUTH(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100001040400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000002c80090001ee756c616e000000001c000280100003800c00010001000080ffffff7f0600010003000000080005000000", @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="0000000000000000070000000c0019800800f38004002880"], 0x20}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x4d0, 0x0, 0x390, 0xfeffffff, 0x2d0, 0x228, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00', {}, {0xff}}, 0x0, 0x1f0, 0x228, 0x0, {}, [@common=@ttl={{0x28}, {0x82846f83166753ff, 0x96}}, @common=@inet=@hashlimit3={{0x158}, {'bridge_slave_0\x00', {0x0, 0xed74, 0x1, 0x6, 0x9, 0x8, 0x5, 0x1, 0x18, 0x80}, {0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffffff, 'veth0_to_bond\x00', 'geneve1\x00', {0xff}, {}, 0x5e, 0x2, 0xa}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast2}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCLUNK(r9, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) 489.15489ms ago: executing program 1 (id=773): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x68, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0xfffd, 0x4e20, 0x46, 0x0, @opaque="fc69fe1f5cc79374d254ab9f365a7d84cec4c60629393ec5c602008bf17d753daa9579b4f7761ba71dcd53b85111410735ddce7903135fd6bfbe99d85aa2"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 375.055714ms ago: executing program 1 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x400000002, 0x0) socket$isdn(0x22, 0x2, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0xa9c62d4cae090f7a) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140), 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x18, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x20040000) 0s ago: executing program 1 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x104}, {0x60, 0x8}, {0x0, 0x0, 0xfe, 0x3ff}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x10000000}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x9a) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x7085, &(0x7f0000000140)={0x0, 0xd0a9, 0x400, 0x3, 0x20387}) socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6c, 0x4, 0x5, '\x00', 0x12}, {0x7, 0x8, 0x6f, '\x00', 0x3}, {0x0, 0x41, 0x5, '\x00', 0x5}, {0x80, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x52, 0x4, '\x00', 0x49}, {0xf3, 0xf, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x47, 0xf, '\x00', 0x45}, {0x7, 0xd, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0x6}, {0x38, 0x11, 0xff}, {0x56, 0x4, 0x1}, {0x3, 0xcf, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0x2, '\x00', 0x2}, {0x4, 0x5, 0x1, '\x00', 0x9}, {0x0, 0x2, 0x4, '\x00', 0x7f}, {0x1, 0xb, 0xd5, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x7f, 0xd}, {0x7, 0x21, 0x23, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0xf}, {0x3, 0x1, 0x4, '\x00', 0xe6}, {0x3, 0x4, 0xa, '\x00', 0x54}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_clone3(&(0x7f0000000780)={0x40000000, &(0x7f00000000c0), &(0x7f0000000340)=0x0, &(0x7f00000003c0), {0x19}, &(0x7f0000000400)=""/242, 0xf2, &(0x7f0000000640)=""/238, &(0x7f0000000740)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) prlimit64(r2, 0x1, &(0x7f0000000140)={0x200000000000, 0x8b}, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$kcm(0x10, 0x2, 0x4) kernel console output (not intermixed with test programs): T5897] usb 5-1: can't read configurations, error -22 [ 151.603198][ T5897] usb usb5-port1: attempt power cycle [ 151.763847][ T803] usb 1-1: Using ep0 maxpacket: 32 [ 151.780256][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.809587][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.824399][ T803] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 151.835063][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.848869][ T803] usb 1-1: config 0 descriptor?? [ 151.891121][ T29] audit: type=1400 audit(1776880785.712:328): avc: denied { create } for pid=7094 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 151.981809][ T5897] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.003180][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 152.008903][ T5897] usb 5-1: no configurations [ 152.013999][ T5897] usb 5-1: can't read configurations, error -22 [ 152.150336][ T29] audit: type=1400 audit(1776880785.972:329): avc: denied { create } for pid=7081 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 152.186686][ T5897] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.204711][ T803] usbhid 1-1:0.0: can't add hid device: -71 [ 152.219272][ T803] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 152.233813][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 152.242490][ T5897] usb 5-1: no configurations [ 152.251028][ T803] usb 1-1: USB disconnect, device number 7 [ 152.257363][ T5897] usb 5-1: can't read configurations, error -22 [ 152.268105][ T5897] usb usb5-port1: unable to enumerate USB device [ 152.479215][ T29] audit: type=1400 audit(1776880786.302:330): avc: denied { write } for pid=7103 comm="syz.2.287" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.479796][ T7106] binder: 7103:7106 ioctl c0046209 200000000000000 returned -22 [ 153.051632][ T803] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.192329][ T5883] usb 4-1: USB disconnect, device number 7 [ 153.203873][ T803] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 153.216867][ T803] usb 1-1: config 0 has no interface number 0 [ 153.233144][ T803] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.251153][ T803] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 153.260506][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.273283][ T803] usb 1-1: Product: syz [ 153.279083][ T803] usb 1-1: Manufacturer: syz [ 153.285343][ T803] usb 1-1: SerialNumber: syz [ 153.303163][ T803] usb 1-1: config 0 descriptor?? [ 153.310134][ T7115] netlink: 200 bytes leftover after parsing attributes in process `syz.3.291'. [ 153.327715][ T803] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 153.400916][ T29] audit: type=1400 audit(1776880787.222:331): avc: denied { create } for pid=7117 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 153.426030][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 153.443472][ T29] audit: type=1400 audit(1776880787.252:332): avc: denied { write } for pid=7117 comm="syz.1.292" path="socket:[14130]" dev="sockfs" ino=14130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 153.446067][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 153.551905][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.564210][ T804] usb 1-1: USB disconnect, device number 8 [ 153.581109][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.618355][ T804] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 153.629185][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.656481][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.685850][ T29] audit: type=1400 audit(1776880787.512:333): avc: denied { name_connect } for pid=7126 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 153.783675][ T7133] 9p: Bad value for 'rfdno' [ 153.961622][ T5883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.534174][ T5883] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 154.545453][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.555314][ T5883] usb 5-1: Product: syz [ 154.559845][ T5883] usb 5-1: Manufacturer: syz [ 154.565227][ T5883] usb 5-1: SerialNumber: syz [ 154.578552][ T5883] usb 5-1: config 0 descriptor?? [ 156.007014][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 156.007032][ T29] audit: type=1400 audit(1776880789.832:343): avc: denied { connect } for pid=7157 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.010426][ T7158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 156.142945][ T7163] syzkaller0: entered promiscuous mode [ 156.165231][ T7163] syzkaller0: entered allmulticast mode [ 156.193797][ T29] audit: type=1400 audit(1776880790.022:344): avc: denied { read } for pid=7167 comm="syz.3.309" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 156.217861][ T29] audit: type=1400 audit(1776880790.032:345): avc: denied { open } for pid=7167 comm="syz.3.309" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 156.258157][ T5883] usb 5-1: Firmware version (0.0) predates our first public release. [ 156.274927][ T5883] usb 5-1: Please update to version 0.2 or newer [ 156.416304][ T29] audit: type=1400 audit(1776880790.242:346): avc: denied { ioctl } for pid=7167 comm="syz.3.309" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 156.633145][ T29] audit: type=1400 audit(1776880790.462:347): avc: denied { read } for pid=7173 comm="syz.0.310" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 156.656915][ T29] audit: type=1400 audit(1776880790.462:348): avc: denied { open } for pid=7173 comm="syz.0.310" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 156.687770][ T5883] usb 5-1: USB disconnect, device number 9 [ 156.883788][ T29] audit: type=1400 audit(1776880790.712:349): avc: denied { bind } for pid=7179 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 156.971616][ T5897] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.133317][ T5897] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 158.148142][ T5897] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 158.563116][ T5897] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 158.574465][ T5897] usb 3-1: config 220 has no interface number 2 [ 158.580785][ T5897] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 158.593965][ T5897] usb 3-1: config 220 interface 0 has no altsetting 0 [ 158.600742][ T5897] usb 3-1: config 220 interface 76 has no altsetting 0 [ 158.607690][ T5897] usb 3-1: config 220 interface 1 has no altsetting 0 [ 158.621125][ T5897] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 158.631562][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.651622][ T5897] usb 3-1: Product: syz [ 158.656911][ T5897] usb 3-1: Manufacturer: syz [ 158.665447][ T5897] usb 3-1: SerialNumber: syz [ 158.996624][ T7178] lo speed is unknown, defaulting to 1000 [ 159.026625][ T7206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.311'. [ 159.188635][ T29] audit: type=1400 audit(1776880793.002:350): avc: denied { ioctl } for pid=7177 comm="syz.2.311" path="socket:[15216]" dev="sockfs" ino=15216 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 159.675595][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.744563][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.830253][ T7213] lo speed is unknown, defaulting to 1000 [ 159.911213][ T7213] lo speed is unknown, defaulting to 1000 [ 159.945227][ T5897] usb 3-1: selecting invalid altsetting 0 [ 159.954955][ T7213] lo speed is unknown, defaulting to 1000 [ 159.971367][ T5897] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 160.005416][ T5897] uvcvideo 3-1:220.0: No valid video chain found. [ 160.040958][ T5897] usb 3-1: selecting invalid altsetting 0 [ 160.064437][ T5897] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 160.105018][ T5897] usb 3-1: USB disconnect, device number 14 [ 160.383822][ T5897] lo speed is unknown, defaulting to 1000 [ 160.391696][ T7213] infiniband syz0: set active [ 160.397811][ T7213] infiniband syz0: added lo [ 160.408858][ T7213] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 160.413019][ T7213] infiniband syz0: Couldn't open port 1 [ 160.424998][ T7223] syzkaller0: entered promiscuous mode [ 160.433294][ T7213] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 160.445605][ T7223] 0: reclassify loop, rule prio 0, protocol 800 [ 160.456284][ T7213] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 160.474368][ T7223] syzkaller0: entered allmulticast mode [ 160.480860][ T7213] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 160.608683][ T7213] RDS/IB: syz0: added [ 160.623511][ T7213] smc: adding ib device syz0 with port count 1 [ 160.640367][ T7213] smc: ib device syz0 port 1 has no pnetid [ 160.677913][ T5883] lo speed is unknown, defaulting to 1000 [ 160.726507][ T7213] lo speed is unknown, defaulting to 1000 [ 160.950036][ T7229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7229 comm=syz.0.324 [ 161.158846][ T7213] lo speed is unknown, defaulting to 1000 [ 161.485625][ T7236] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 161.493216][ T7236] UDF-fs: Scanning with blocksize 512 failed [ 161.500987][ T7236] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 161.509331][ T7236] UDF-fs: Scanning with blocksize 1024 failed [ 161.517394][ T7236] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 161.524993][ T7236] UDF-fs: Scanning with blocksize 2048 failed [ 161.532387][ T7236] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 161.539910][ T7236] UDF-fs: Scanning with blocksize 4096 failed [ 161.561618][ T29] audit: type=1400 audit(1776880795.312:351): avc: denied { mounton } for pid=7232 comm="syz.0.325" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 161.936771][ T7213] lo speed is unknown, defaulting to 1000 [ 162.089486][ T29] audit: type=1400 audit(1776880795.912:352): avc: denied { append } for pid=7238 comm="syz.2.326" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.241690][ T29] audit: type=1400 audit(1776880796.072:353): avc: denied { write } for pid=7243 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 162.284746][ T29] audit: type=1400 audit(1776880796.112:354): avc: denied { read } for pid=7243 comm="syz.3.328" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 162.342797][ T29] audit: type=1400 audit(1776880796.112:355): avc: denied { open } for pid=7243 comm="syz.3.328" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 162.412420][ T29] audit: type=1400 audit(1776880796.142:356): avc: denied { ioctl } for pid=7243 comm="syz.3.328" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 162.442827][ T7249] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 162.480992][ T7249] netlink: 224 bytes leftover after parsing attributes in process `syz.3.328'. [ 162.652868][ T7213] lo speed is unknown, defaulting to 1000 [ 162.881697][ T5897] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.951820][ T803] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.130932][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 163.151892][ T803] usb 1-1: Using ep0 maxpacket: 32 [ 163.164391][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.181110][ T803] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 163.194425][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 163.206420][ T5897] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 163.217115][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 163.227666][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 163.239956][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 163.254321][ T5897] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 163.267382][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.276464][ T5897] usb 4-1: Product: syz [ 163.280913][ T5897] usb 4-1: Manufacturer: syz [ 163.286964][ T5897] usb 4-1: SerialNumber: syz [ 163.292498][ T803] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 163.307416][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.317103][ T803] usb 1-1: Product: syz [ 163.321314][ T803] usb 1-1: Manufacturer: syz [ 163.326555][ T803] usb 1-1: SerialNumber: syz [ 163.338387][ T7213] lo speed is unknown, defaulting to 1000 [ 163.355326][ T803] usb 1-1: config 0 descriptor?? [ 163.382621][ T29] audit: type=1400 audit(1776880797.132:357): avc: denied { write } for pid=7255 comm="syz.2.330" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.558435][ T5897] usb 4-1: Cannot retrieve CPort count: -71 [ 163.574157][ T5897] usb 4-1: Cannot retrieve CPort count: -71 [ 163.580157][ T5897] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 163.591067][ T7213] lo speed is unknown, defaulting to 1000 [ 163.592287][ T5897] usb 4-1: USB disconnect, device number 8 [ 163.648297][ T7259] netlink: 44 bytes leftover after parsing attributes in process `syz.4.331'. [ 163.691780][ T29] audit: type=1400 audit(1776880797.512:358): avc: denied { mount } for pid=7258 comm="syz.4.331" name="/" dev="autofs" ino=15554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 163.845731][ T29] audit: type=1400 audit(1776880797.672:359): avc: denied { kexec_image_load } for pid=7268 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 164.419911][ T29] audit: type=1400 audit(1776880798.242:360): avc: denied { unmount } for pid=6647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 164.578756][ T7242] 9p: Bad value for 'wfdno' [ 164.595929][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.618034][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.631952][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.640594][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.647168][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.653930][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.660455][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.667115][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.678256][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.686799][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.719400][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.747521][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.819299][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.839195][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.852408][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.883865][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.913870][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 164.937943][ T803] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 165.263349][ T803] input input9: Timeout waiting for response from device. [ 165.279177][ T803] usb 1-1: USB disconnect, device number 9 [ 166.421702][ T804] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.821574][ T803] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.928521][ T804] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.947623][ T804] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.995121][ T804] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.063772][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.380306][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 167.380327][ T29] audit: type=1400 audit(1776880801.162:365): avc: denied { unmount } for pid=6647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 167.424783][ T7299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.619775][ T803] usb 1-1: device descriptor read/64, error -71 [ 167.655776][ T804] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.103342][ T29] audit: type=1400 audit(1776880801.922:366): avc: denied { read write } for pid=7309 comm="syz.4.343" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 168.129845][ T29] audit: type=1400 audit(1776880801.922:367): avc: denied { open } for pid=7309 comm="syz.4.343" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 168.278695][ T804] usb 3-1: USB disconnect, device number 15 [ 168.289509][ T29] audit: type=1400 audit(1776880802.122:368): avc: denied { connect } for pid=7315 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.321631][ T803] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.664791][ T29] audit: type=1400 audit(1776880802.422:369): avc: denied { read } for pid=7315 comm="syz.4.344" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 168.921625][ T803] usb 1-1: device descriptor read/64, error -71 [ 168.954512][ T29] audit: type=1400 audit(1776880802.422:370): avc: denied { open } for pid=7315 comm="syz.4.344" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 169.031821][ T803] usb usb1-port1: attempt power cycle [ 169.058955][ T29] audit: type=1400 audit(1776880802.432:371): avc: denied { ioctl } for pid=7315 comm="syz.4.344" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 169.117742][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 169.141871][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.240922][ T29] audit: type=1400 audit(1776880803.062:372): avc: denied { write } for pid=7327 comm="syz.2.348" path="socket:[15670]" dev="sockfs" ino=15670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.289372][ T7332] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 169.304898][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 169.325621][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.805390][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.837800][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 169.887649][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 169.898729][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 169.906730][ T7332] bond1: entered promiscuous mode [ 169.908015][ T10] usb 5-1: Manufacturer: syz [ 169.923987][ T10] usb 5-1: config 0 descriptor?? [ 169.928284][ T7332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.000315][ T7338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.020724][ T804] lo speed is unknown, defaulting to 1000 [ 170.031761][ T5883] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 170.181759][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 170.197474][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short [ 170.210446][ T5883] usb 3-1: config 42 has an invalid interface number: 178 but max is 0 [ 170.225408][ T5883] usb 3-1: config 42 has no interface number 0 [ 170.250322][ T5883] usb 3-1: config 42 interface 178 has no altsetting 0 [ 170.383048][ T10] hid_parser_main: 240 callbacks suppressed [ 170.383062][ T10] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 170.408257][ T5883] usb 3-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 170.818146][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.841447][ T5883] usb 3-1: Product: syz [ 170.854557][ T5883] usb 3-1: Manufacturer: syz [ 170.868779][ T5883] usb 3-1: SerialNumber: syz [ 170.891193][ T10] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 171.244385][ T7352] netlink: 'syz.3.353': attribute type 27 has an invalid length. [ 171.264858][ T7352] netlink: 'syz.3.353': attribute type 3 has an invalid length. [ 171.598745][ T7359] netlink: 352 bytes leftover after parsing attributes in process `syz.3.353'. [ 171.884582][ T7328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.900748][ T7328] bond1: (slave bond2): making interface the new active one [ 171.914817][ T7328] bond2: entered promiscuous mode [ 171.928902][ T7328] bond1: (slave bond2): Enslaving as an active interface with an up link [ 171.970538][ T5925] usb 5-1: USB disconnect, device number 10 [ 172.229488][ T5883] uvcvideo 3-1:42.178: Found multiple Units with ID 1 [ 172.260986][ T5883] uvcvideo 3-1:42.178: Found UVC 0.00 device syz (045e:00f8) [ 172.293142][ T5883] uvcvideo 3-1:42.178: No valid video chain found. [ 172.323327][ T5883] usb 3-1: USB disconnect, device number 16 [ 172.432674][ T803] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 172.571670][ T5925] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 172.628115][ T803] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 172.654370][ T7369] netlink: 'syz.0.359': attribute type 10 has an invalid length. [ 172.662234][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.359'. [ 172.674048][ T7369] bridge0: port 3(dummy0) entered blocking state [ 172.680732][ T7369] bridge0: port 3(dummy0) entered disabled state [ 172.687771][ T7369] dummy0: entered allmulticast mode [ 172.699911][ T7369] dummy0: entered promiscuous mode [ 172.717356][ T7369] bridge0: port 3(dummy0) entered blocking state [ 172.723859][ T7369] bridge0: port 3(dummy0) entered forwarding state [ 172.736630][ T7370] ±ÿ: renamed from lo (while UP) [ 172.760715][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.861727][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 172.867904][ T803] usb 4-1: config 0 has no interface number 0 [ 172.876797][ T803] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 172.888203][ T803] usb 4-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.902139][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.912611][ T5925] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.924308][ T5925] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.934678][ T5925] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.947970][ T803] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 172.958255][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.966348][ T5925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.973862][ T5925] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 172.982972][ T803] usb 4-1: Product: syz [ 172.987146][ T803] usb 4-1: Manufacturer: syz [ 172.991871][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.999895][ T803] usb 4-1: SerialNumber: syz [ 173.006471][ T803] usb 4-1: config 0 descriptor?? [ 173.013207][ T7361] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.021127][ T5925] usb 5-1: config 0 descriptor?? [ 173.040576][ T803] plusb 4-1:0.231: probe with driver plusb failed with error -22 [ 173.094231][ T29] audit: type=1400 audit(1776880806.922:373): avc: denied { setattr } for pid=7371 comm="syz.1.360" name="NETLINK" dev="sockfs" ino=16527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.096782][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 173.150802][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 173.299070][ T50] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 173.314477][ T29] audit: type=1400 audit(1776880807.112:374): avc: denied { connect } for pid=7376 comm="syz.1.362" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.668648][ T5925] corsair-psu 0003:1B1C:1C09.0004: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 173.713584][ T10] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 173.785136][ T7389] netlink: 52 bytes leftover after parsing attributes in process `syz.0.364'. [ 173.802051][ T7389] xt_hl: Unknown TTL match mode: 255 [ 173.888096][ T7388] overlayfs: missing 'lowerdir' [ 173.946943][ T10] usb 3-1: No LPM exit latency info found, disabling LPM. [ 174.103518][ T10] usb 3-1: language id specifier not provided by device, defaulting to English [ 174.109908][ T5925] corsair-psu 0003:1B1C:1C09.0004: unable to initialize device (-38) [ 174.147113][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 174.155048][ T5925] corsair-psu 0003:1B1C:1C09.0004: probe with driver corsair-psu failed with error -38 [ 174.174198][ T5925] usb 5-1: USB disconnect, device number 11 [ 174.197649][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.503020][ T29] audit: type=1400 audit(1776880808.332:375): avc: denied { write } for pid=7402 comm="syz.0.367" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.550157][ T7403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.003363][ T7410] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 175.033781][ T29] audit: type=1400 audit(1776880808.802:376): avc: denied { create } for pid=7404 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.357108][ T29] audit: type=1400 audit(1776880808.812:377): avc: denied { setopt } for pid=7404 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.392878][ T29] audit: type=1400 audit(1776880808.822:378): avc: denied { mounton } for pid=7404 comm="syz.4.368" path="/syzcgroup/unified/syz4" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 175.424551][ T804] usb 4-1: USB disconnect, device number 9 [ 175.673511][ T29] audit: type=1400 audit(1776880809.492:379): avc: denied { create } for pid=7415 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.695388][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 175.745127][ T29] audit: type=1400 audit(1776880809.522:380): avc: denied { connect } for pid=7415 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.769067][ T29] audit: type=1400 audit(1776880809.522:381): avc: denied { write } for pid=7415 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.825395][ T29] audit: type=1400 audit(1776880809.572:382): avc: denied { map } for pid=7415 comm="syz.0.371" path="/proc/275/net/ip_vs" dev="proc" ino=4026533289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 176.103331][ T7428] syz_tun: entered allmulticast mode [ 176.744007][ T7421] syz_tun: left allmulticast mode [ 177.002333][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.017180][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 177.340812][ T10] usb 3-1: USB disconnect, device number 17 [ 177.440547][ T7433] ±ÿ speed is unknown, defaulting to 1000 [ 177.451684][ T5904] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 177.490464][ T7433] lo speed is unknown, defaulting to 1000 [ 177.623294][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 177.639984][ T5904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 177.662810][ T5904] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 177.685762][ T5904] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 177.708740][ T5904] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.719170][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.742907][ T5904] usb 5-1: Product: 峭쿨얨㳷좥è©æ›…ﬕᾙŻ㷑﫻竴얜á–ꪫ⡛在맓塂稄ç¨âšƒæ†œä£ãˆ°åˆ´ï¯˜å¦ì‹·êŠê©·ä„³é˜°èŸìœï½° [ 177.786328][ T5904] usb 5-1: Manufacturer: Р [ 177.814264][ T5904] usb 5-1: SerialNumber: â°‡ [ 178.165122][ T7444] ±ÿ speed is unknown, defaulting to 1000 [ 178.227527][ T7444] lo speed is unknown, defaulting to 1000 [ 178.847095][ T5904] cdc_ncm 5-1:1.0: bind() failure [ 178.886687][ T5904] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 178.914956][ T5904] cdc_ncm 5-1:1.1: bind() failure [ 179.257507][ T5904] usb 5-1: USB disconnect, device number 12 [ 179.631945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 180.518751][ T7474] netlink: 352 bytes leftover after parsing attributes in process `syz.1.387'. [ 181.628945][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 181.628968][ T29] audit: type=1400 audit(1776880815.382:385): avc: denied { shutdown } for pid=7471 comm="syz.3.388" lport=57829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.924424][ T7480] orangefs_mount: mount request failed with -4 [ 182.306187][ T29] audit: type=1400 audit(1776880816.092:386): avc: denied { write } for pid=7491 comm="syz.3.393" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.306456][ T29] audit: type=1400 audit(1776880816.102:387): avc: denied { ioctl } for pid=7491 comm="syz.3.393" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.311471][ T29] audit: type=1400 audit(1776880816.112:388): avc: denied { getopt } for pid=7491 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.974757][ T29] audit: type=1400 audit(1776880818.802:389): avc: denied { watch_mount } for pid=7526 comm="syz.0.401" path="/79" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 185.076953][ T29] audit: type=1326 audit(1776880818.902:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d3d79c819 code=0x0 [ 185.416983][ T7541] fuse: Unknown parameter '0x0000000000000003' [ 185.833042][ T7552] netlink: 'syz.1.407': attribute type 10 has an invalid length. [ 185.840853][ T7552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.407'. [ 185.850848][ T7552] batadv0: entered promiscuous mode [ 185.856251][ T7552] batadv0: entered allmulticast mode [ 185.863899][ T7552] bridge0: port 3(batadv0) entered blocking state [ 185.870749][ T7552] bridge0: port 3(batadv0) entered disabled state [ 186.052196][ T1017] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 186.061771][ T1017] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 186.605581][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.665882][ T29] audit: type=1400 audit(1776880820.492:391): avc: denied { setopt } for pid=7573 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.883960][ T29] audit: type=1400 audit(1776880820.712:392): avc: denied { write } for pid=7571 comm="syz.4.414" path="socket:[16177]" dev="sockfs" ino=16177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.021183][ T7592] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 187.049577][ T7592] netlink: 224 bytes leftover after parsing attributes in process `syz.0.416'. [ 187.083453][ T7595] fuse: Unknown parameter '0xffffffffffffffff' [ 187.144087][ T29] audit: type=1400 audit(1776880820.972:393): avc: denied { append } for pid=7593 comm="syz.2.420" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 187.331605][ T5925] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 187.560888][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 187.585561][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.587479][ T5925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.625333][ T5925] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 187.654070][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.670120][ T5925] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 187.695665][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.705648][ T5925] usb 1-1: Product: syz [ 187.712024][ T5925] usb 1-1: Manufacturer: syz [ 187.718746][ T5925] usb 1-1: SerialNumber: syz [ 187.780289][ T7611] overlayfs: failed to clone upperpath [ 188.043493][ T5925] usb 1-1: Cannot retrieve CPort count: -71 [ 188.066358][ T5925] usb 1-1: Cannot retrieve CPort count: -71 [ 188.091413][ T5925] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 188.168830][ T5925] usb 1-1: USB disconnect, device number 13 [ 189.450339][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.532921][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.666531][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.613432][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.042014][ T5925] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 192.085671][ T7648] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 192.093261][ T7648] UDF-fs: Scanning with blocksize 512 failed [ 192.101377][ T7648] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 192.108931][ T7648] UDF-fs: Scanning with blocksize 1024 failed [ 192.116648][ T7648] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 192.125132][ T7648] UDF-fs: Scanning with blocksize 2048 failed [ 192.133390][ T7648] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 192.140984][ T7648] UDF-fs: Scanning with blocksize 4096 failed [ 192.520883][ T7656] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 192.543110][ T7656] netlink: 224 bytes leftover after parsing attributes in process `syz.4.437'. [ 193.540159][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.556972][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 193.721775][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.729313][ T7664] netlink: 352 bytes leftover after parsing attributes in process `syz.3.440'. [ 194.538332][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 194.550284][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.557804][ T29] audit: type=1400 audit(1776880828.382:394): avc: denied { open } for pid=7666 comm="syz.2.441" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 194.558658][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.592084][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.603036][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.631654][ T29] audit: type=1400 audit(1776880828.452:395): avc: denied { setopt } for pid=7666 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 195.048703][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.059381][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.072998][ T5925] usb 1-1: string descriptor 0 read error: -71 [ 195.082674][ T5925] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 195.093061][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.104018][ T5925] usb 1-1: config 0 descriptor?? [ 195.112602][ T5925] usb 1-1: can't set config #0, error -71 [ 195.120372][ T5925] usb 1-1: USB disconnect, device number 14 [ 195.181568][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 195.197675][ T29] audit: type=1400 audit(1776880829.022:396): avc: denied { shutdown } for pid=7676 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.341803][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 195.361236][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.374997][ T24] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 195.399780][ T24] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 195.419118][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.423920][ T7693] evm: overlay not supported [ 195.445492][ T24] usb 5-1: Product: syz [ 195.460626][ T24] usb 5-1: Manufacturer: syz [ 195.476244][ T24] usb 5-1: SerialNumber: syz [ 195.504227][ T24] usb 5-1: can't set config #7, error -71 [ 195.531149][ T24] usb 5-1: USB disconnect, device number 13 [ 195.595514][ T7696] dvmrp1: entered allmulticast mode [ 195.698200][ T7706] netlink: 'syz.0.453': attribute type 4 has an invalid length. [ 196.314314][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.459614][ T29] audit: type=1400 audit(1776880830.282:397): avc: denied { ioctl } for pid=7715 comm="syz.3.455" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.561277][ T29] audit: type=1400 audit(1776880830.382:398): avc: denied { mount } for pid=7715 comm="syz.3.455" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 197.488344][ T7726] QAT: failed to copy from user cfg_data. [ 197.528093][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.537072][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.537562][ T29] audit: type=1400 audit(1776880830.572:399): avc: denied { write } for pid=7715 comm="syz.3.455" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.654716][ T7726] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 197.745488][ T29] audit: type=1400 audit(1776880831.522:400): avc: denied { append } for pid=7728 comm="syz.4.459" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 198.319990][ T29] audit: type=1400 audit(1776880831.872:401): avc: denied { sqpoll } for pid=7730 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 198.680971][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.921641][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 198.938466][ T7665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.009446][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.022271][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.041064][ T7738] fuse: Unknown parameter '0x0000000000000003' [ 199.181717][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 199.195924][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 199.223540][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.245975][ T24] usb 5-1: Product: syz [ 199.258390][ T24] usb 5-1: Manufacturer: syz [ 199.270913][ T24] usb 5-1: SerialNumber: syz [ 199.295312][ T24] usb 5-1: config 0 descriptor?? [ 199.343223][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 199.381354][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 199.381354][ T24] [ 199.414467][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.418867][ T24] usb 5-1: selecting invalid altsetting 3 [ 199.467230][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 199.467230][ T24] [ 199.494346][ T29] audit: type=1400 audit(1776880833.322:402): avc: denied { module_request } for pid=7745 comm="syz.3.464" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 199.528500][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 199.553934][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.583655][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 199.608963][ T24] usb 5-1: media controller created [ 199.621428][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 199.645514][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 199.666874][ T24] dvb-usb: MAC address reading failed. [ 199.705023][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.909961][ T24] DVB: Unable to find symbol stb0899_attach() [ 199.939232][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 199.951410][ T29] audit: type=1400 audit(1776880833.762:403): avc: denied { bind } for pid=7757 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.087964][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.171539][ T24] rc_core: IR keymap rc-tt-1500 not found [ 200.181539][ T24] Registered IR keymap rc-empty [ 200.217416][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 200.233839][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11 [ 200.254030][ T29] audit: type=1400 audit(1776880834.082:404): avc: denied { read } for pid=5180 comm="acpid" name="event4" dev="devtmpfs" ino=2954 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.277184][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 200.294511][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 200.294511][ T24] [ 200.315837][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 200.342089][ T29] audit: type=1400 audit(1776880834.082:405): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2954 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.384218][ T24] usb 5-1: USB disconnect, device number 14 [ 200.406410][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 200.442855][ T42] dvb-usb: error -22 while querying for an remote control event. [ 200.457374][ T29] audit: type=1400 audit(1776880834.082:406): avc: denied { ioctl } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2954 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.530728][ T29] audit: type=1400 audit(1776880834.112:407): avc: denied { connect } for pid=7765 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 200.765719][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 201.165434][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.615616][ T7781] FAULT_INJECTION: forcing a failure. [ 201.615616][ T7781] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 201.694252][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.3.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.694284][ T7781] Tainted: [L]=SOFTLOCKUP [ 201.694290][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 201.694300][ T7781] Call Trace: [ 201.694307][ T7781] [ 201.694314][ T7781] dump_stack_lvl+0x100/0x190 [ 201.694344][ T7781] should_fail_ex.cold+0x5/0xa [ 201.694371][ T7781] _copy_to_user+0x32/0xd0 [ 201.694397][ T7781] simple_read_from_buffer+0xcb/0x170 [ 201.694440][ T7781] proc_fail_nth_read+0x1af/0x230 [ 201.694460][ T7781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.694482][ T7781] ? rw_verify_area+0xce/0x6d0 [ 201.694509][ T7781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.694527][ T7781] vfs_read+0x1e4/0xb30 [ 201.694549][ T7781] ? __pfx_vfs_read+0x10/0x10 [ 201.694567][ T7781] ? __fget_files+0x215/0x3d0 [ 201.694595][ T7781] ? __fget_files+0x21f/0x3d0 [ 201.694628][ T7781] ksys_read+0x12a/0x250 [ 201.694645][ T7781] ? __pfx_ksys_read+0x10/0x10 [ 201.694666][ T7781] ? rcu_is_watching+0x12/0xc0 [ 201.694698][ T7781] do_syscall_64+0x10b/0xf80 [ 201.694722][ T7781] ? clear_bhb_loop+0x40/0x90 [ 201.694744][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.694761][ T7781] RIP: 0033:0x7faacdf5d04e [ 201.694776][ T7781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.694793][ T7781] RSP: 002b:00007faacee2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.694810][ T7781] RAX: ffffffffffffffda RBX: 00007faacee306c0 RCX: 00007faacdf5d04e [ 201.694821][ T7781] RDX: 000000000000000f RSI: 00007faacee300a0 RDI: 0000000000000006 [ 201.694832][ T7781] RBP: 00007faacee30090 R08: 0000000000000000 R09: 0000000000000000 [ 201.694842][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.694852][ T7781] R13: 00007faace216038 R14: 00007faace215fa0 R15: 00007ffdfe1b6bc8 [ 201.694877][ T7781] [ 202.783744][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.803165][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.811348][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.819969][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.840588][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.333452][ T50] block nbd4: Receive control failed (result -107) [ 203.408271][ T7810] block nbd4: shutting down sockets [ 203.615943][ T7808] Scaler: ================= START STATUS ================= [ 203.625688][ T7808] Scaler: ================== END STATUS ================== [ 203.804863][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.932962][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.043264][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.052227][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.141436][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.288312][ T29] audit: type=1400 audit(1776880838.112:408): avc: denied { create } for pid=7820 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 204.334338][ T29] audit: type=1400 audit(1776880838.142:409): avc: denied { setopt } for pid=7820 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 204.420413][ T7827] fuse: Unknown parameter 'fd0x0000000000000003' [ 207.497960][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 207.513764][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'. [ 207.562573][ T29] audit: type=1400 audit(1776880841.382:410): avc: denied { create } for pid=7840 comm="syz.4.491" name="#a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 207.594427][ T29] audit: type=1400 audit(1776880841.412:411): avc: denied { link } for pid=7840 comm="syz.4.491" name="#a" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 207.636756][ T29] audit: type=1400 audit(1776880841.452:412): avc: denied { rename } for pid=7840 comm="syz.4.491" name="#b" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 207.771581][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 207.977637][ T5897] net_ratelimit: 9 callbacks suppressed [ 207.977657][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.078700][ T29] audit: type=1400 audit(1776880841.872:413): avc: denied { append } for pid=7862 comm="syz.0.498" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 208.833058][ T10] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 208.856312][ T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 208.868769][ T29] audit: type=1400 audit(1776880842.692:414): avc: denied { getopt } for pid=7870 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.871612][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.896386][ T10] usb 4-1: Product: syz [ 208.900575][ T10] usb 4-1: Manufacturer: syz [ 208.906545][ T10] usb 4-1: SerialNumber: syz [ 208.920171][ T7873] fuse: Unknown parameter 'fd0x0000000000000003' [ 208.926801][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 208.926919][ T10] imon 4-1:155.0: unable to initialize intf0, err -19 [ 208.950422][ T50] Bluetooth: hci1: unexpected event for opcode 0x0041 [ 208.970294][ T10] imon:imon_probe: failed to initialize context! [ 208.977478][ T10] imon 4-1:155.0: unable to register, err -19 [ 208.980334][ T29] audit: type=1400 audit(1776880842.802:415): avc: denied { bind } for pid=7876 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.008652][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.062129][ T24] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 209.220418][ T24] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 209.233770][ T24] usb 3-1: config 0 has no interface number 0 [ 209.240452][ T24] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 209.256770][ T24] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.258577][ T10] usb 4-1: USB disconnect, device number 10 [ 209.334662][ T7896] netlink: 52 bytes leftover after parsing attributes in process `syz.1.506'. [ 209.347813][ T7896] xt_hl: Unknown TTL match mode: 255 [ 209.412003][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.694275][ T24] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 209.704312][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.712409][ T24] usb 3-1: Product: syz [ 209.716615][ T24] usb 3-1: Manufacturer: syz [ 209.721243][ T24] usb 3-1: SerialNumber: syz [ 209.731574][ T24] usb 3-1: config 0 descriptor?? [ 209.739357][ T7869] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 209.749555][ T24] plusb 3-1:0.231: probe with driver plusb failed with error -22 [ 210.041748][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.206791][ T7909] overlayfs: failed to clone upperpath [ 210.365348][ T7915] overlayfs: missing 'lowerdir' [ 210.737276][ T7921] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 210.763414][ T7921] netlink: 224 bytes leftover after parsing attributes in process `syz.3.512'. [ 211.041580][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 211.211704][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 211.240888][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.278823][ T24] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 211.313540][ T24] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 211.344719][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.379557][ T24] usb 4-1: Product: syz [ 211.393201][ T24] usb 4-1: Manufacturer: syz [ 211.406505][ T24] usb 4-1: SerialNumber: syz [ 211.540925][ T7928] bond1: option arp_validate: invalid value (18446744073709551615) [ 211.583118][ T7928] bond1 (unregistering): Released all slaves [ 211.608157][ T50] Bluetooth: hci0: unexpected event for opcode 0x0041 [ 211.636199][ T24] usb 4-1: Cannot retrieve CPort count: -71 [ 211.654778][ T24] usb 4-1: Cannot retrieve CPort count: -71 [ 211.673750][ T24] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 211.708446][ T24] usb 4-1: USB disconnect, device number 11 [ 211.731605][ T804] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 211.882340][ T7937] netlink: 'syz.1.517': attribute type 39 has an invalid length. [ 212.001977][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.038479][ T29] audit: type=1400 audit(1776880845.672:416): avc: denied { block_suspend } for pid=7934 comm="syz.1.517" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 212.177286][ T804] usb 5-1: not running at top speed; connect to a high speed hub [ 212.280134][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.296726][ T804] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 212.309063][ T5925] usb 3-1: USB disconnect, device number 18 [ 212.351035][ T804] usb 5-1: can't read configurations, error -22 [ 212.434774][ T7941] fuse: Unknown parameter 'fd0x0000000000000003' [ 212.441703][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.522779][ T804] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 212.665131][ T7948] FAULT_INJECTION: forcing a failure. [ 212.665131][ T7948] name failslab, interval 1, probability 0, space 0, times 0 [ 212.677898][ T7948] CPU: 0 UID: 0 PID: 7948 Comm: syz.0.520 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.677927][ T7948] Tainted: [L]=SOFTLOCKUP [ 212.677933][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.677943][ T7948] Call Trace: [ 212.677952][ T7948] [ 212.677959][ T7948] dump_stack_lvl+0x100/0x190 [ 212.677986][ T7948] should_fail_ex.cold+0x5/0xa [ 212.678013][ T7948] should_failslab+0xc2/0x120 [ 212.678032][ T7948] __kmalloc_cache_noprof+0x7a/0x6f0 [ 212.678057][ T7948] ? binder_get_thread+0x201/0x850 [ 212.678090][ T7948] binder_get_thread+0x201/0x850 [ 212.678122][ T7948] binder_poll+0x3f/0x430 [ 212.678147][ T7948] ? __pfx_binder_poll+0x10/0x10 [ 212.678173][ T7948] do_select+0xd54/0x1850 [ 212.678213][ T7948] ? __pfx_do_select+0x10/0x10 [ 212.678232][ T7948] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 212.678253][ T7948] ? __pfx___pollwait+0x10/0x10 [ 212.678276][ T7948] ? __pfx_pollwake+0x10/0x10 [ 212.678298][ T7948] ? __pfx_pollwake+0x10/0x10 [ 212.678319][ T7948] ? __pfx_pollwake+0x10/0x10 [ 212.678341][ T7948] ? __pfx_pollwake+0x10/0x10 [ 212.678362][ T7948] ? __pfx_pollwake+0x10/0x10 [ 212.678401][ T7948] ? find_held_lock+0x2b/0x80 [ 212.678419][ T7948] ? __might_fault+0xc5/0x140 [ 212.678443][ T7948] ? __might_fault+0xc5/0x140 [ 212.678477][ T7948] ? core_sys_select+0x55b/0xbb0 [ 212.678496][ T7948] core_sys_select+0x55b/0xbb0 [ 212.678521][ T7948] ? __pfx_core_sys_select+0x10/0x10 [ 212.678553][ T7948] ? ksys_write+0x12a/0x250 [ 212.678591][ T7948] ? __pfx_set_user_sigmask+0x10/0x10 [ 212.678615][ T7948] ? kernel_write+0x6a3/0x6c0 [ 212.678632][ T7948] ? __fget_files+0x215/0x3d0 [ 212.678658][ T7948] do_pselect.constprop.0+0x238/0x270 [ 212.678682][ T7948] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 212.678708][ T7948] ? ksys_write+0x1ac/0x250 [ 212.678730][ T7948] __x64_sys_pselect6+0x149/0x1c0 [ 212.678755][ T7948] do_syscall_64+0x10b/0xf80 [ 212.678779][ T7948] ? clear_bhb_loop+0x40/0x90 [ 212.678801][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.678819][ T7948] RIP: 0033:0x7fea0bf9c819 [ 212.678835][ T7948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.678852][ T7948] RSP: 002b:00007fea0cd81028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 212.678870][ T7948] RAX: ffffffffffffffda RBX: 00007fea0c216090 RCX: 00007fea0bf9c819 [ 212.678881][ T7948] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 212.678891][ T7948] RBP: 00007fea0cd81090 R08: 0000000000000000 R09: 0000000000000000 [ 212.678901][ T7948] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 212.678911][ T7948] R13: 00007fea0c216128 R14: 00007fea0c216090 R15: 00007ffe1fbda078 [ 212.678935][ T7948] [ 213.191638][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 213.202915][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 213.213316][ T5838] Bluetooth: hci1: hardware error 0x00 [ 213.312890][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 213.352503][ T804] usb 5-1: not running at top speed; connect to a high speed hub [ 213.398409][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.428283][ T804] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 213.451772][ T804] usb 5-1: can't read configurations, error -22 [ 213.484742][ T804] usb usb5-port1: attempt power cycle [ 213.596693][ T7954] ip6t_REJECT: ECHOREPLY is not supported [ 214.248333][ T7954] ipt_REJECT: ECHOREPLY no longer supported. [ 214.459394][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.471606][ T804] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 214.496884][ T29] audit: type=1400 audit(1776880848.322:417): avc: denied { read write } for pid=7953 comm="syz.3.523" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 214.542058][ T29] audit: type=1400 audit(1776880848.352:418): avc: denied { open } for pid=7953 comm="syz.3.523" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 214.584406][ T804] usb 5-1: device descriptor read/8, error -71 [ 214.890080][ T7970] loop7: detected capacity change from 0 to 16384 [ 215.101843][ C0] I/O error, dev loop7, sector 15472 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.114972][ C0] I/O error, dev loop7, sector 15472 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.124758][ C0] Buffer I/O error on dev loop7, logical block 1934, async page read [ 215.132957][ C0] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 215.142758][ C0] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 215.155582][ T7970] loop7: detected capacity change from 16384 to 0 [ 215.155805][ C0] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.171434][ C0] Buffer I/O error on dev loop7, logical block 96, async page read [ 215.179525][ C0] I/O error, dev loop7, sector 776 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.188849][ C0] Buffer I/O error on dev loop7, logical block 97, async page read [ 215.196796][ C0] I/O error, dev loop7, sector 784 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.206077][ C0] Buffer I/O error on dev loop7, logical block 98, async page read [ 215.213995][ C0] I/O error, dev loop7, sector 792 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.223279][ C0] Buffer I/O error on dev loop7, logical block 99, async page read [ 215.231188][ C0] I/O error, dev loop7, sector 800 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.240481][ C0] Buffer I/O error on dev loop7, logical block 100, async page read [ 215.248493][ C0] I/O error, dev loop7, sector 808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.251650][ T5838] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 215.257789][ C0] Buffer I/O error on dev loop7, logical block 101, async page read [ 215.257849][ C0] Buffer I/O error on dev loop7, logical block 102, async page read [ 215.257891][ C0] Buffer I/O error on dev loop7, logical block 103, async page read [ 215.257941][ C0] Buffer I/O error on dev loop7, logical block 104, async page read [ 215.324039][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.355560][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.367839][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.380683][ T804] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 215.398632][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.412609][ T7980] netlink: 'syz.2.530': attribute type 1 has an invalid length. [ 215.422324][ T7980] netlink: 224 bytes leftover after parsing attributes in process `syz.2.530'. [ 215.469452][ T804] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 215.487513][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.495732][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.510462][ T804] usb 5-1: config 0 has no interface number 0 [ 215.525261][ T804] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 215.565531][ T7983] ip6t_REJECT: ECHOREPLY is not supported [ 215.574823][ T7983] ipt_REJECT: ECHOREPLY no longer supported. [ 215.577497][ T804] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.638412][ T804] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 215.647655][ T5838] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 215.658627][ T5838] Bluetooth: hci0: Injecting HCI hardware error event [ 215.669996][ T50] Bluetooth: hci0: hardware error 0x00 [ 215.678291][ T5925] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 215.719034][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.743706][ T804] usb 5-1: Product: syz [ 215.756172][ T804] usb 5-1: Manufacturer: syz [ 215.771337][ T804] usb 5-1: SerialNumber: syz [ 215.792780][ T804] usb 5-1: config 0 descriptor?? [ 215.810865][ T7975] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 215.823749][ T804] plusb 5-1:0.231: probe with driver plusb failed with error -22 [ 215.845220][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 215.859336][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 215.887320][ T5925] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 215.921133][ T5925] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 215.948334][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.968207][ T5925] usb 3-1: Product: syz [ 215.978305][ T5925] usb 3-1: Manufacturer: syz [ 215.990938][ T5925] usb 3-1: SerialNumber: syz [ 216.213870][ T5925] usb 3-1: Cannot retrieve CPort count: -71 [ 216.237409][ T5925] usb 3-1: Cannot retrieve CPort count: -71 [ 216.252989][ T5925] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 216.282038][ T5925] usb 3-1: USB disconnect, device number 19 [ 216.467914][ T7995] overlayfs: missing 'lowerdir' [ 216.632879][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.776257][ T8006] netlink: 352 bytes leftover after parsing attributes in process `syz.0.534'. [ 217.128363][ T29] audit: type=1400 audit(1776880850.952:419): avc: denied { bind } for pid=8008 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.170926][ T29] audit: type=1400 audit(1776880850.992:420): avc: denied { connect } for pid=8008 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.201853][ T8009] tmpfs: Unknown parameter 'usrquota/#/msr' [ 217.234531][ T29] audit: type=1400 audit(1776880851.062:421): avc: denied { setopt } for pid=8010 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 217.393396][ T8015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.537'. [ 217.470276][ T8015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.537'. [ 217.768030][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 218.070013][ T8025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.318384][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.459194][ T804] usb 5-1: USB disconnect, device number 18 [ 218.541028][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.656406][ T29] audit: type=1400 audit(1776880852.482:422): avc: denied { mounton } for pid=8027 comm="syz.0.542" path="/proc/386/task" dev="proc" ino=18923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 219.499025][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.919685][ T8046] mmap: syz.2.550 (8046): VmData 37724160 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 220.115836][ T29] audit: type=1400 audit(1776880853.942:423): avc: denied { mount } for pid=8056 comm="syz.1.552" name="/" dev="rpc_pipefs" ino=18987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 220.586054][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.477237][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.489429][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.499515][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.571978][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.643768][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.871869][ T5925] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 222.341952][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 222.354855][ T5925] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 222.376981][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.403537][ T5925] usb 3-1: config 0 has no interface number 0 [ 222.423004][ T5925] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.451780][ T5925] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 222.461705][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.469812][ T5925] usb 3-1: Product: syz [ 222.478783][ T5925] usb 3-1: Manufacturer: syz [ 222.486696][ T5925] usb 3-1: SerialNumber: syz [ 222.497776][ T5925] usb 3-1: config 0 descriptor?? [ 222.512019][ T5925] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 222.524408][ T5925] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 222.681995][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.379555][ T5925] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 223.397617][ T5925] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 223.865558][ T8105] overlayfs: failed to clone upperpath [ 223.919253][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.410508][ T29] audit: type=1400 audit(1776880858.232:424): avc: denied { getopt } for pid=8113 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.629756][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 224.642941][ T8121] openvswitch: netlink: Flow key attr not present in new flow. [ 224.718195][ T5938] usb 3-1: USB disconnect, device number 20 [ 224.812995][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.066839][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.449143][ T29] audit: type=1400 audit(1776880859.272:425): avc: denied { mount } for pid=8124 comm="syz.2.571" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 225.599071][ T8134] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[8134] [ 226.762360][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.806197][ T8146] FAULT_INJECTION: forcing a failure. [ 226.806197][ T8146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 226.852777][ T7665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.863900][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.173668][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.224450][ T8146] CPU: 1 UID: 0 PID: 8146 Comm: syz.0.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.224479][ T8146] Tainted: [L]=SOFTLOCKUP [ 227.224484][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 227.224494][ T8146] Call Trace: [ 227.224500][ T8146] [ 227.224506][ T8146] dump_stack_lvl+0x100/0x190 [ 227.224538][ T8146] should_fail_ex.cold+0x5/0xa [ 227.224558][ T8146] ? prepare_alloc_pages+0x16d/0x5f0 [ 227.224580][ T8146] should_fail_alloc_page+0xeb/0x140 [ 227.224599][ T8146] prepare_alloc_pages+0x1f0/0x5f0 [ 227.224622][ T8146] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 227.224649][ T8146] ? __lock_acquire+0x4a5/0x2630 [ 227.224671][ T8146] ? is_bpf_text_address+0x94/0x1a0 [ 227.224693][ T8146] ? kernel_text_address+0x8d/0x100 [ 227.224715][ T8146] ? __kernel_text_address+0xd/0x30 [ 227.224739][ T8146] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 227.224767][ T8146] ? rcu_is_watching+0x12/0xc0 [ 227.224791][ T8146] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 227.224816][ T8146] ? stack_depot_save_flags+0x479/0x9d0 [ 227.224843][ T8146] ? kasan_save_stack+0x3f/0x50 [ 227.224866][ T8146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.224887][ T8146] ? policy_nodemask+0xed/0x4f0 [ 227.224905][ T8146] alloc_pages_mpol+0x1fb/0x540 [ 227.224924][ T8146] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 227.224947][ T8146] alloc_pages_noprof+0x1a/0x160 [ 227.224966][ T8146] pte_alloc_one+0x1c/0x3d0 [ 227.224990][ T8146] __pte_alloc+0x6d/0x3e0 [ 227.225006][ T8146] ? __pfx___pte_alloc+0x10/0x10 [ 227.225020][ T8146] ? __lock_acquire+0x4a5/0x2630 [ 227.225044][ T8146] do_anonymous_page+0x13c6/0x2050 [ 227.225066][ T8146] ? __pfx_pgd_none+0x10/0x10 [ 227.225093][ T8146] __handle_mm_fault+0x1d2c/0x2a00 [ 227.225118][ T8146] ? mt_find+0x45e/0x8e0 [ 227.225142][ T8146] ? __pfx___handle_mm_fault+0x10/0x10 [ 227.225162][ T8146] ? __pfx_mt_find+0x10/0x10 [ 227.225182][ T8146] ? post_alloc_hook+0x140/0x170 [ 227.225221][ T8146] handle_mm_fault+0x36d/0xa20 [ 227.225247][ T8146] __get_user_pages+0x1178/0x32a0 [ 227.225271][ T8146] ? find_held_lock+0x2b/0x80 [ 227.225286][ T8146] ? mtree_load+0x311/0xa90 [ 227.225307][ T8146] ? __pfx___get_user_pages+0x10/0x10 [ 227.225331][ T8146] get_user_pages_remote+0x3d2/0xb10 [ 227.225350][ T8146] ? mas_root_expand+0x670/0x750 [ 227.225374][ T8146] ? __pfx_get_user_pages_remote+0x10/0x10 [ 227.225401][ T8146] __access_remote_vm+0x3bb/0x890 [ 227.225421][ T8146] ? do_raw_spin_lock+0x128/0x260 [ 227.225443][ T8146] ? __pfx___access_remote_vm+0x10/0x10 [ 227.225457][ T8146] ? environ_read+0x20b/0x420 [ 227.225480][ T8146] ? environ_read+0x20b/0x420 [ 227.225512][ T8146] environ_read+0x281/0x420 [ 227.225539][ T8146] ? __pfx_environ_read+0x10/0x10 [ 227.225560][ T8146] vfs_readv+0x5d8/0x8d0 [ 227.225582][ T8146] ? __pfx_vfs_readv+0x10/0x10 [ 227.225597][ T8146] ? find_held_lock+0x2b/0x80 [ 227.225626][ T8146] ? __fget_files+0x21f/0x3d0 [ 227.225651][ T8146] ? do_preadv+0x1ac/0x270 [ 227.225664][ T8146] do_preadv+0x1ac/0x270 [ 227.225680][ T8146] ? __pfx_do_preadv+0x10/0x10 [ 227.225697][ T8146] ? rcu_is_watching+0x12/0xc0 [ 227.225723][ T8146] do_syscall_64+0x10b/0xf80 [ 227.225744][ T8146] ? clear_bhb_loop+0x40/0x90 [ 227.225764][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.225780][ T8146] RIP: 0033:0x7fea0bf9c819 [ 227.225795][ T8146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.225810][ T8146] RSP: 002b:00007fea0cd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 227.225826][ T8146] RAX: ffffffffffffffda RBX: 00007fea0c216090 RCX: 00007fea0bf9c819 [ 227.225837][ T8146] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000004 [ 227.225846][ T8146] RBP: 00007fea0cd81090 R08: 0000000000000000 R09: 0000000000000000 [ 227.225856][ T8146] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000001 [ 227.225865][ T8146] R13: 00007fea0c216128 R14: 00007fea0c216090 R15: 00007ffe1fbda078 [ 227.225887][ T8146] [ 227.847857][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.881887][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.310586][ T29] audit: type=1400 audit(1776880862.132:426): avc: denied { ioctl } for pid=8161 comm="syz.0.581" path="socket:[18229]" dev="sockfs" ino=18229 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.853326][ T803] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 228.931782][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.954413][ T29] audit: type=1400 audit(1776880862.782:427): avc: denied { listen } for pid=8173 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.996564][ T29] audit: type=1400 audit(1776880862.822:428): avc: denied { mounton } for pid=8175 comm="syz.3.585" path="/115/file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 229.062929][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.083130][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.098191][ T803] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 229.106520][ T803] usb 5-1: config 0 has no interface number 0 [ 229.123032][ T803] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.134497][ T803] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 229.145536][ T803] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 229.157266][ T803] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 229.171755][ T803] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 229.196924][ T803] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 229.237094][ T803] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 229.259335][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.297879][ T803] usb 5-1: config 0 descriptor?? [ 229.325658][ T8168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 229.335276][ T8168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 229.353341][ T803] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 229.621804][ T804] usb 5-1: USB disconnect, device number 19 [ 229.663718][ T804] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 229.976972][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.254536][ T8191] xt_connbytes: Forcing CT accounting to be enabled [ 230.375644][ T8203] ipt_REJECT: TCP_RESET invalid for non-tcp [ 231.225087][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.254312][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.875520][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.261759][ T804] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 234.281673][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.381813][ T50] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 234.594018][ T8226] loop5: detected capacity change from 0 to 7 [ 234.645534][ T804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.645586][ T804] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 234.645611][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 234.645638][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 234.645659][ T804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 234.650203][ T8227] netlink: 'syz.4.595': attribute type 10 has an invalid length. [ 234.650261][ T8227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.595'. [ 234.650362][ T8227] batadv0: entered promiscuous mode [ 234.650403][ T8227] batadv0: entered allmulticast mode [ 234.652527][ T8227] bridge0: port 3(batadv0) entered blocking state [ 234.652820][ T8227] bridge0: port 3(batadv0) entered disabled state [ 234.659979][ T8227] bridge0: port 3(batadv0) entered blocking state [ 234.660095][ T8227] bridge0: port 3(batadv0) entered forwarding state [ 234.828712][ T804] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 234.829765][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 234.830791][ T804] usb 3-1: Product: syz [ 234.833990][ T804] usb 3-1: Manufacturer: syz [ 234.835024][ T804] usb 3-1: SerialNumber: syz [ 235.026991][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.041881][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 235.192556][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 235.225385][ T804] usb 3-1: config 0 descriptor?? [ 235.285369][ T8226] Dev loop5: unable to read RDB block 7 [ 235.294109][ T8226] loop5: AHDI p1 [ 235.297796][ T8226] loop5: partition table partially beyond EOD, truncated [ 235.544369][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 235.567786][ T804] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 235.574683][ T804] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 235.589425][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 235.769994][ T804] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 235.786662][ T804] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 235.819558][ T804] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 236.063347][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.313424][ T8245] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 236.320964][ T8245] UDF-fs: Scanning with blocksize 512 failed [ 236.327537][ T8245] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 236.335112][ T8245] UDF-fs: Scanning with blocksize 1024 failed [ 236.341577][ T8245] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 236.349068][ T8245] UDF-fs: Scanning with blocksize 2048 failed [ 236.355455][ T8245] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 236.364215][ T8245] UDF-fs: Scanning with blocksize 4096 failed [ 236.442294][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.676844][ T8240] ±ÿ speed is unknown, defaulting to 1000 [ 236.808400][ T8240] lo speed is unknown, defaulting to 1000 [ 237.092017][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.325900][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 237.340873][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 237.446546][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.927907][ T8260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.938033][ T8260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.960409][ T8260] batman_adv: batadv0: Interface deactivated: vlan1 [ 238.260959][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.276898][ T803] lo speed is unknown, defaulting to 1000 [ 238.297309][ T803] syz0: Port: 1 Link DOWN [ 238.318093][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.371647][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.548472][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.031199][ T1017] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.061276][ T1017] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.136406][ T1017] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.173465][ T1017] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.270523][ T5925] lo speed is unknown, defaulting to 1000 [ 239.291312][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.407393][ T29] audit: type=1400 audit(2000000009.060:429): avc: denied { map } for pid=8272 comm="syz.1.608" path="socket:[19560]" dev="sockfs" ino=19560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 239.534345][ T29] audit: type=1400 audit(2000000009.090:430): avc: denied { write } for pid=8272 comm="syz.1.608" name="file0" dev="tmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.639055][ T29] audit: type=1400 audit(2000000009.090:431): avc: denied { open } for pid=8272 comm="syz.1.608" path="/151/file0" dev="tmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.722246][ T29] audit: type=1400 audit(2000000009.090:432): avc: denied { ioctl } for pid=8272 comm="syz.1.608" path="/151/file0" dev="tmpfs" ino=822 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.795560][ T8276] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 239.802796][ T29] audit: type=1400 audit(2000000009.090:433): avc: denied { ioctl } for pid=8272 comm="syz.1.608" path="socket:[19565]" dev="sockfs" ino=19565 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 239.887996][ T29] audit: type=1400 audit(2000000265.351:434): avc: denied { bind } for pid=8275 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.931587][ T5883] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 240.103121][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 240.126152][ T5883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.167507][ T5883] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.205116][ T5883] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 240.219467][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 240.235462][ T5883] usb 1-1: Product: syz [ 240.239762][ T5883] usb 1-1: Manufacturer: syz [ 240.245093][ T5883] usb 1-1: SerialNumber: syz [ 240.262171][ T5883] appletouch 1-1:1.0: Could not find int-in endpoint [ 240.269134][ T5883] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 240.284123][ T5883] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 240.374221][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.713673][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.780864][ T8278] sp0: Synchronizing with TNC [ 240.807694][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 240.818958][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 240.847997][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.870992][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.117669][ T5897] usb 1-1: USB disconnect, device number 15 [ 241.380916][ T29] audit: type=1400 audit(2000000267.031:435): avc: denied { mount } for pid=8294 comm="syz.4.614" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 241.406911][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.310679][ T8301] overlayfs: missing 'lowerdir' [ 242.441922][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.591325][ T8308] syz_tun: entered allmulticast mode [ 243.385661][ T8302] syz_tun: left allmulticast mode [ 243.491337][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.520876][ T24] usb 3-1: USB disconnect, device number 21 [ 243.783154][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.974983][ T8321] FAULT_INJECTION: forcing a failure. [ 243.974983][ T8321] name failslab, interval 1, probability 0, space 0, times 0 [ 244.084136][ T8321] CPU: 0 UID: 0 PID: 8321 Comm: syz.2.621 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.084168][ T8321] Tainted: [L]=SOFTLOCKUP [ 244.084172][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.084178][ T8321] Call Trace: [ 244.084183][ T8321] [ 244.084187][ T8321] dump_stack_lvl+0x100/0x190 [ 244.084205][ T8321] should_fail_ex.cold+0x5/0xa [ 244.084220][ T8321] should_failslab+0xc2/0x120 [ 244.084232][ T8321] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 244.084248][ T8321] ? ptlock_alloc+0x1f/0x70 [ 244.084262][ T8321] ? stack_depot_save_flags+0x27/0x9d0 [ 244.084280][ T8321] ptlock_alloc+0x1f/0x70 [ 244.084294][ T8321] pte_alloc_one+0x82/0x3d0 [ 244.084312][ T8321] __pte_alloc+0x6d/0x3e0 [ 244.084322][ T8321] ? __pfx___pte_alloc+0x10/0x10 [ 244.084333][ T8321] ? __lock_acquire+0x4a5/0x2630 [ 244.084349][ T8321] do_anonymous_page+0x13c6/0x2050 [ 244.084369][ T8321] ? __pfx_pgd_none+0x10/0x10 [ 244.084386][ T8321] __handle_mm_fault+0x1d2c/0x2a00 [ 244.084404][ T8321] ? irqentry_exit+0x246/0x790 [ 244.084419][ T8321] ? __pfx___handle_mm_fault+0x10/0x10 [ 244.084433][ T8321] ? irqentry_exit+0x246/0x790 [ 244.084454][ T8321] ? lock_is_held_type+0xf5/0x140 [ 244.084472][ T8321] handle_mm_fault+0x36d/0xa20 [ 244.084489][ T8321] __get_user_pages+0x1178/0x32a0 [ 244.084505][ T8321] ? find_held_lock+0x2b/0x80 [ 244.084515][ T8321] ? mtree_load+0x311/0xa90 [ 244.084529][ T8321] ? __pfx___get_user_pages+0x10/0x10 [ 244.084545][ T8321] get_user_pages_remote+0x3d2/0xb10 [ 244.084559][ T8321] ? mas_root_expand+0x670/0x750 [ 244.084582][ T8321] ? __pfx_get_user_pages_remote+0x10/0x10 [ 244.084607][ T8321] __access_remote_vm+0x3bb/0x890 [ 244.084620][ T8321] ? do_raw_spin_lock+0x128/0x260 [ 244.084636][ T8321] ? __pfx___access_remote_vm+0x10/0x10 [ 244.084645][ T8321] ? environ_read+0x20b/0x420 [ 244.084661][ T8321] ? environ_read+0x20b/0x420 [ 244.084679][ T8321] environ_read+0x281/0x420 [ 244.084696][ T8321] ? __pfx_environ_read+0x10/0x10 [ 244.084711][ T8321] vfs_readv+0x5d8/0x8d0 [ 244.084726][ T8321] ? __pfx_vfs_readv+0x10/0x10 [ 244.084736][ T8321] ? find_held_lock+0x2b/0x80 [ 244.084753][ T8321] ? __fget_files+0x21f/0x3d0 [ 244.084770][ T8321] ? do_preadv+0x1ac/0x270 [ 244.084779][ T8321] do_preadv+0x1ac/0x270 [ 244.084789][ T8321] ? __pfx_do_preadv+0x10/0x10 [ 244.084800][ T8321] ? rcu_is_watching+0x12/0xc0 [ 244.084819][ T8321] do_syscall_64+0x10b/0xf80 [ 244.084833][ T8321] ? clear_bhb_loop+0x40/0x90 [ 244.084846][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.084857][ T8321] RIP: 0033:0x7fa67f59c819 [ 244.084866][ T8321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.084877][ T8321] RSP: 002b:00007fa6804fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 244.084888][ T8321] RAX: ffffffffffffffda RBX: 00007fa67f816090 RCX: 00007fa67f59c819 [ 244.084895][ T8321] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000004 [ 244.084901][ T8321] RBP: 00007fa6804fc090 R08: 0000000000000000 R09: 0000000000000000 [ 244.084907][ T8321] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000001 [ 244.084913][ T8321] R13: 00007fa67f816128 R14: 00007fa67f816090 R15: 00007fff2bb28fe8 [ 244.084926][ T8321] [ 244.842961][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.006012][ T8324] netlink: 268 bytes leftover after parsing attributes in process `syz.0.623'. [ 246.142503][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.172629][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.742381][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.841822][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.895697][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.989632][ T8364] syz_tun: entered allmulticast mode [ 247.750635][ T8354] syz_tun: left allmulticast mode [ 247.931637][ T5883] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 248.028154][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.072599][ T5883] usb 4-1: device descriptor read/64, error -71 [ 248.321555][ T5883] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 248.947252][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'. [ 249.091677][ T804] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 249.099436][ T5883] usb 4-1: device descriptor read/64, error -71 [ 249.107929][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.214688][ T5883] usb usb4-port1: attempt power cycle [ 249.253677][ T804] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 249.268266][ T804] usb 5-1: config 0 has no interface number 0 [ 249.274730][ T804] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 249.289370][ T804] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 249.312091][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 249.321598][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.329846][ T804] usb 5-1: Product: syz [ 249.336082][ T804] usb 5-1: Manufacturer: syz [ 249.342501][ T804] usb 5-1: SerialNumber: syz [ 249.350087][ T804] usb 5-1: config 0 descriptor?? [ 249.355923][ T8373] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 249.393957][ T804] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, be:ac:65:d4:f7:29 [ 249.446989][ T29] audit: type=1400 audit(2000000275.101:436): avc: denied { read } for pid=5490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 249.494618][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 249.562226][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.590789][ T9] usb 1-1: Product: syz [ 249.601625][ T5883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 249.619956][ T9] usb 1-1: Manufacturer: syz [ 249.624867][ T9] usb 1-1: SerialNumber: syz [ 249.639963][ T9] usb 1-1: config 0 descriptor?? [ 249.646536][ T5883] usb 4-1: device descriptor read/8, error -71 [ 250.043351][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.571022][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 250.585896][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.035010][ T5938] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 251.212568][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 251.243871][ T5938] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 251.284548][ T5938] usb 3-1: config 0 has no interface number 0 [ 251.309050][ T5938] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.340625][ T5938] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 251.361152][ T5938] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 251.390969][ T5938] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 251.415980][ T5938] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.452613][ T5938] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 251.470478][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.489410][ T5938] usb 3-1: Product: syz [ 251.499945][ T5938] usb 3-1: Manufacturer: syz [ 251.507574][ T803] usb 5-1: USB disconnect, device number 20 [ 251.508038][ T5938] usb 3-1: SerialNumber: syz [ 251.543222][ T803] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 251.546321][ T5938] usb 3-1: config 0 descriptor?? [ 251.555316][ T5897] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 251.574478][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.606329][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.645386][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.673472][ T29] audit: type=1400 audit(2000000277.331:437): avc: denied { connect } for pid=8379 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 251.712340][ T5897] usb 4-1: device descriptor read/64, error -71 [ 251.804896][ T5938] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 251.961743][ T5897] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 252.121092][ T5897] usb 4-1: device descriptor read/64, error -71 [ 252.318583][ T5897] usb usb4-port1: attempt power cycle [ 253.040302][ T5897] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 253.050955][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.072614][ T5897] usb 4-1: device descriptor read/8, error -71 [ 253.081718][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.196032][ T5883] usb 3-1: USB disconnect, device number 22 [ 253.321747][ T5897] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 253.362859][ T5897] usb 4-1: device descriptor read/8, error -71 [ 253.405400][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 253.491938][ T5897] usb usb4-port1: unable to enumerate USB device [ 253.516989][ T29] audit: type=1400 audit(2000000279.171:438): avc: denied { getopt } for pid=8457 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.567387][ T29] audit: type=1400 audit(2000000279.201:439): avc: denied { accept } for pid=8457 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.891330][ T8469] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 253.898895][ T8469] UDF-fs: Scanning with blocksize 512 failed [ 253.905418][ T8469] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 253.912912][ T8469] UDF-fs: Scanning with blocksize 1024 failed [ 253.919352][ T8469] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 253.926872][ T8469] UDF-fs: Scanning with blocksize 2048 failed [ 253.933293][ T8469] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 253.940781][ T8469] UDF-fs: Scanning with blocksize 4096 failed [ 254.124073][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.161831][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.171939][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 255.423118][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 255.434605][ T9] usb 3-1: config 255 has an invalid interface number: 151 but max is 0 [ 255.443839][ T9] usb 3-1: config 255 has no interface number 0 [ 255.461573][ T9] usb 3-1: config 255 interface 151 has no altsetting 0 [ 255.470440][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=a6.86 [ 255.491869][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.548282][ T8493] netlink: 312 bytes leftover after parsing attributes in process `syz.1.657'. [ 255.662179][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.917889][ T9] usb 3-1: Product: syz [ 256.054187][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.063618][ T9] usb 3-1: Manufacturer: syz [ 256.068322][ T9] usb 3-1: SerialNumber: syz [ 256.124194][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.131758][ T29] audit: type=1400 audit(2000000281.771:440): avc: denied { setopt } for pid=8495 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 256.202179][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.291410][ T8501] netlink: 'syz.4.659': attribute type 64 has an invalid length. [ 256.535193][ T5897] usb 1-1: USB disconnect, device number 16 [ 256.962159][ T8512] 9pnet_virtio: no channels available for device syz [ 256.981800][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.660'. [ 256.992500][ T8512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.660'. [ 257.256311][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.121492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 258.181493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 258.221493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 258.261492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 258.421725][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.661653][ T29] audit: type=1400 audit(2000000284.281:441): avc: denied { read } for pid=8517 comm="syz.0.662" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 258.800743][ T29] audit: type=1400 audit(2000000284.281:442): avc: denied { open } for pid=8517 comm="syz.0.662" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 259.162681][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.194770][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.664'. [ 259.390346][ T8522] netlink: 'syz.1.663': attribute type 10 has an invalid length. [ 259.399522][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.663'. [ 259.442270][ T8519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.662'. [ 259.491722][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.582528][ T29] audit: type=1400 audit(2000000285.211:443): avc: denied { accept } for pid=8528 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.632201][ T8539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=8539 comm=syz.3.664 [ 259.792696][ T9] usb 3-1: USB disconnect, device number 23 [ 259.814003][ T29] audit: type=1400 audit(2000000285.471:444): avc: denied { unmount } for pid=6647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 259.850521][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:255.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.525931][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.561741][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.830342][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'. [ 262.203754][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.533139][ T29] audit: type=1400 audit(2000000288.081:445): avc: denied { create } for pid=8580 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 262.624972][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.911564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 263.168715][ T9] kernel read not supported for file /video7 (pid: 9 comm: kworker/0:0) [ 263.642969][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.178178][ T8607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.228339][ T8607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.264426][ T8607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.296106][ T8605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.348943][ T8605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.483801][ T29] audit: type=1400 audit(2000000290.131:446): avc: denied { shutdown } for pid=8621 comm="syz.4.685" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 265.242999][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.251852][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.273174][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.769469][ T8640] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 267.716919][ T8633] ±ÿ speed is unknown, defaulting to 1000 [ 267.874892][ T8633] lo speed is unknown, defaulting to 1000 [ 267.901597][ T5897] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 267.958477][ T803] net_ratelimit: 1 callbacks suppressed [ 267.958493][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.123633][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 268.136608][ T8662] netlink: 'syz.3.694': attribute type 29 has an invalid length. [ 268.150191][ T5897] usb 1-1: not running at top speed; connect to a high speed hub [ 268.166216][ T8662] netlink: 'syz.3.694': attribute type 29 has an invalid length. [ 268.188117][ T5897] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 268.217646][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.237088][ T5897] usb 1-1: Product: syz [ 268.253185][ T5897] usb 1-1: Manufacturer: syz [ 268.271328][ T5897] usb 1-1: SerialNumber: syz [ 268.282344][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.326085][ T5897] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 268.404809][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 268.766312][ T5897] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 268.844974][ T5897] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 268.991293][ T5897] usb 1-1: can't set first interface for hiFace device. [ 269.007325][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.025996][ T5897] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 269.057255][ T5897] usb 1-1: can't set first interface for hiFace device. [ 269.072013][ T5897] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 269.100111][ T5897] usb 1-1: USB disconnect, device number 17 [ 269.154095][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.897084][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 270.030710][ T8694] wg1: entered promiscuous mode [ 270.047523][ T8694] wg1: entered allmulticast mode [ 270.053243][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.095848][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.274484][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.289243][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.320143][ T8700] bridge0: port 3(batadv0) entered disabled state [ 270.328176][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.378666][ T8700] bridge_slave_0: left allmulticast mode [ 270.412945][ T8700] bridge_slave_0: left promiscuous mode [ 270.433418][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.433675][ T29] audit: type=1400 audit(2000000296.081:447): avc: denied { mount } for pid=8701 comm="syz.4.705" name="/" dev="pstore" ino=3488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 270.496819][ T8700] bridge_slave_1: left allmulticast mode [ 270.504265][ T8700] bridge_slave_1: left promiscuous mode [ 270.522533][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.547344][ T8700] bond0: (slave bond_slave_0): Releasing backup interface [ 270.592116][ T8700] bond0: (slave bond_slave_1): Releasing backup interface [ 270.608174][ T8700] team0: Port device team_slave_0 removed [ 270.624522][ T8700] team0: Port device team_slave_1 removed [ 270.637349][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.654654][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.683081][ T8700] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 270.814287][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.037267][ T8709] netlink: 52 bytes leftover after parsing attributes in process `syz.1.707'. [ 271.050069][ T8709] xt_hl: Unknown TTL match mode: 255 [ 271.733777][ T29] audit: type=1400 audit(2000000297.391:448): avc: denied { ioctl } for pid=8713 comm="syz.2.709" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 271.894440][ T8724] Cannot find add_set index 4 as target [ 272.545382][ T29] audit: type=1400 audit(2000000298.191:449): avc: denied { execute } for pid=8727 comm="syz.2.712" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=21371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 272.808902][ T29] audit: type=1400 audit(2000000298.461:450): avc: denied { write } for pid=8732 comm="syz.3.714" name="mouse0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 273.541074][ T29] audit: type=1400 audit(2000000299.191:451): avc: denied { ioctl } for pid=8739 comm="syz.3.716" path="socket:[21452]" dev="sockfs" ino=21452 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 273.623375][ T24] net_ratelimit: 4 callbacks suppressed [ 273.623398][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.637135][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.645429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.730026][ T50] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 273.730147][ T50] Bluetooth: hci2: connection err: -111 [ 274.059346][ T29] audit: type=1400 audit(2000000299.711:452): avc: denied { write } for pid=8739 comm="syz.3.716" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 274.095677][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 274.326164][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.432034][ T8756] netlink: 52 bytes leftover after parsing attributes in process `syz.2.720'. [ 274.444993][ T8756] xt_hl: Unknown TTL match mode: 255 [ 274.834177][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.843553][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.209308][ T8760] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 275.275569][ T8743] binder: 8739:8743 ioctl c0306201 0 returned -14 [ 276.131904][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 276.165957][ T8773] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 276.174355][ T8773] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 276.184173][ T8773] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 276.194981][ T29] audit: type=1400 audit(2000000301.841:453): avc: denied { firmware_load } for pid=8771 comm="syz.1.724" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 276.333316][ T8778] wg1: entered promiscuous mode [ 276.362730][ T8778] wg1: entered allmulticast mode [ 277.543201][ T8797] FAULT_INJECTION: forcing a failure. [ 277.543201][ T8797] name failslab, interval 1, probability 0, space 0, times 0 [ 277.742783][ T8802] netlink: 52 bytes leftover after parsing attributes in process `syz.2.731'. [ 277.756120][ T8802] xt_hl: Unknown TTL match mode: 255 [ 278.077874][ T8797] CPU: 1 UID: 0 PID: 8797 Comm: syz.0.730 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.077904][ T8797] Tainted: [L]=SOFTLOCKUP [ 278.077909][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 278.077917][ T8797] Call Trace: [ 278.077921][ T8797] [ 278.077925][ T8797] dump_stack_lvl+0x100/0x190 [ 278.077945][ T8797] should_fail_ex.cold+0x5/0xa [ 278.077960][ T8797] ? unix_create_addr+0x24/0x100 [ 278.077972][ T8797] should_failslab+0xc2/0x120 [ 278.077984][ T8797] __kmalloc_noprof+0xe0/0x850 [ 278.078002][ T8797] unix_create_addr+0x24/0x100 [ 278.078016][ T8797] unix_bind+0x287/0x1650 [ 278.078032][ T8797] ? __pfx_unix_bind+0x10/0x10 [ 278.078048][ T8797] __sys_bind+0x1a9/0x260 [ 278.078063][ T8797] ? __pfx___sys_bind+0x10/0x10 [ 278.078085][ T8797] __x64_sys_bind+0x72/0xb0 [ 278.078099][ T8797] do_syscall_64+0x10b/0xf80 [ 278.078114][ T8797] ? clear_bhb_loop+0x40/0x90 [ 278.078127][ T8797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.078138][ T8797] RIP: 0033:0x7fea0bf9c819 [ 278.078148][ T8797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.078158][ T8797] RSP: 002b:00007fea0cd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 278.078169][ T8797] RAX: ffffffffffffffda RBX: 00007fea0c216090 RCX: 00007fea0bf9c819 [ 278.078176][ T8797] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000006 [ 278.078182][ T8797] RBP: 00007fea0cd81090 R08: 0000000000000000 R09: 0000000000000000 [ 278.078188][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.078194][ T8797] R13: 00007fea0c216128 R14: 00007fea0c216090 R15: 00007ffe1fbda078 [ 278.078208][ T8797] [ 278.476272][ T8812] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 280.447346][ T8806] ±ÿ speed is unknown, defaulting to 1000 [ 280.454525][ T8806] lo speed is unknown, defaulting to 1000 [ 280.675239][ T8827] netlink: 'syz.0.738': attribute type 1 has an invalid length. [ 280.922683][ T8834] bond1: entered promiscuous mode [ 280.929891][ T8834] bond1: entered allmulticast mode [ 280.941670][ T8834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.079141][ T8840] veth5: entered promiscuous mode [ 281.097266][ T8840] veth5: entered allmulticast mode [ 281.112953][ T8840] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 281.134445][ T8841] netlink: 32 bytes leftover after parsing attributes in process `syz.3.741'. [ 281.228412][ T29] audit: type=1400 audit(2000000306.878:454): avc: denied { accept } for pid=8829 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 281.418463][ T8846] veth7: entered promiscuous mode [ 281.442675][ T8846] veth7: entered allmulticast mode [ 281.466032][ T8846] bond1: (slave veth7): Enslaving as a backup interface with a down link [ 281.672674][ T8857] netlink: 52 bytes leftover after parsing attributes in process `syz.3.744'. [ 281.682500][ T8857] xt_hl: Unknown TTL match mode: 255 [ 283.325600][ T29] audit: type=1400 audit(2000000308.958:455): avc: denied { write } for pid=8874 comm="syz.3.750" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 283.552530][ T29] audit: type=1400 audit(2000000309.008:456): avc: denied { connect } for pid=8874 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 284.152820][ T8889] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 284.204014][ T8889] UDF-fs: Scanning with blocksize 512 failed [ 284.244485][ T8889] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 284.301697][ T8889] UDF-fs: Scanning with blocksize 1024 failed [ 284.387406][ T29] audit: type=1400 audit(2000000310.038:457): avc: denied { setopt } for pid=8892 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.834304][ T8889] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 284.991554][ T8889] UDF-fs: Scanning with blocksize 2048 failed [ 285.311606][ T264] Bluetooth: hci5: Frame reassembly failed (-84) [ 285.415397][ T8889] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 285.569261][ T8889] UDF-fs: Scanning with blocksize 4096 failed [ 285.670410][ T8901] ±ÿ speed is unknown, defaulting to 1000 [ 285.677036][ T8901] lo speed is unknown, defaulting to 1000 [ 286.528689][ T5938] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 286.562512][ T5938] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.171603][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 287.986588][ T8920] netlink: 52 bytes leftover after parsing attributes in process `syz.1.758'. [ 287.999363][ T8920] xt_hl: Unknown TTL match mode: 255 [ 288.221905][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 288.447706][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 288.481941][ T24] usb 1-1: device descriptor read/64, error -71 [ 288.522193][ T29] audit: type=1326 audit(2000000314.178:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3d79c819 code=0x7ffc0000 [ 288.563445][ T29] audit: type=1326 audit(2000000314.178:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3d79c819 code=0x7ffc0000 [ 288.587270][ T29] audit: type=1326 audit(2000000314.178:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f0d3d79c819 code=0x7ffc0000 [ 288.611992][ T29] audit: type=1326 audit(2000000314.178:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3d79c819 code=0x7ffc0000 [ 288.901541][ T29] audit: type=1326 audit(2000000314.178:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3d79c819 code=0x7ffc0000 [ 288.968231][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 288.996520][ T29] audit: type=1326 audit(2000000314.208:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0d3d79c819 code=0x7ffc0000 [ 289.188884][ T29] audit: type=1326 audit(2000000314.208:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3d79c819 code=0x7ffc0000 [ 289.212727][ T29] audit: type=1326 audit(2000000314.208:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3d79c819 code=0x7ffc0000 [ 289.239426][ T29] audit: type=1326 audit(2000000314.208:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.4.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0d3d79c819 code=0x7ffc0000 [ 289.263393][ T24] usb 1-1: device descriptor read/64, error -71 [ 289.270513][ T29] audit: type=1400 audit(2000000314.268:467): avc: denied { create } for pid=8921 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 289.510599][ T24] usb usb1-port1: attempt power cycle [ 289.874144][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 289.935085][ T24] usb 1-1: device descriptor read/8, error -71 [ 290.271702][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 290.302139][ T24] usb 1-1: device descriptor read/8, error -71 [ 290.414073][ T24] usb usb1-port1: unable to enumerate USB device [ 290.545114][ T5834] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 290.545187][ T5834] Bluetooth: hci3: connection err: -111 [ 291.368004][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 291.593346][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 291.801706][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 291.816991][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 291.842235][ T8977] netlink: 52 bytes leftover after parsing attributes in process `syz.2.772'. [ 291.855117][ T8977] xt_hl: Unknown TTL match mode: 255 [ 291.886347][ T803] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 291.894475][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 291.923851][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.933847][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.944278][ T24] usb 5-1: Product: syz [ 291.948695][ T24] usb 5-1: Manufacturer: syz [ 291.955561][ T24] usb 5-1: SerialNumber: syz [ 291.986896][ T24] usb 5-1: config 0 descriptor?? [ 292.086921][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 292.096975][ T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 292.106946][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 292.128623][ T8974] delete_channel: no stack [ 292.131790][ T803] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 292.154884][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 97, changing to 7 [ 292.168670][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 24929, setting to 1024 [ 292.183716][ T803] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 292.193136][ T803] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 292.202008][ T803] usb 1-1: Manufacturer: syz [ 292.211295][ T803] usb 1-1: config 0 descriptor?? [ 292.223359][ T803] smsusb:smsusb_probe: board id=9, interface number 0 [ 292.227921][ T8981] ±ÿ speed is unknown, defaulting to 1000 [ 292.233519][ T803] smsusb:siano_media_device_register: media controller created [ 292.237487][ T8981] lo speed is unknown, defaulting to 1000 [ 292.246246][ T803] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 292.258066][ T803] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 292.274336][ T803] ------------[ cut here ]------------ [ 292.279875][ T803] !PageLargeKmalloc(page) [ 292.279891][ T803] WARNING: mm/slub.c:6471 at free_large_kmalloc+0xbf/0x100, CPU#1: kworker/1:2/803 [ 292.294425][ T803] Modules linked in: [ 292.298719][ T803] CPU: 1 UID: 0 PID: 803 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.309681][ T803] Tainted: [L]=SOFTLOCKUP [ 292.314071][ T803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 292.324261][ T803] Workqueue: usb_hub_wq hub_event [ 292.329371][ T803] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 292.335292][ T803] Code: 28 90 0f 0b 90 80 3d 4f 68 59 0e 00 0f 84 d7 4d b9 fe 48 8b 74 24 28 48 89 ef e8 fc ff 0b 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 ba 60 f4 8d 5b 5d 41 5c 41 [ 292.354972][ T803] RSP: 0018:ffffc900047e6d68 EFLAGS: 00010202 [ 292.361207][ T803] RAX: 00000000000000ff RBX: ffffea00020b9880 RCX: 000000000000002e [ 292.369553][ T803] RDX: 0000000000000000 RSI: ffff888082e62000 RDI: ffffea00020b9880 [ 292.378666][ T803] RBP: ffff888082e62000 R08: 0000000000000005 R09: 0000000000000000 [ 292.387273][ T803] R10: ffffffffffffffff R11: ffffffff82770584 R12: ffff88802fcaf000 [ 292.395339][ T803] R13: ffff88802fcad000 R14: dffffc0000000000 R15: ffff88802fcaf0f0 [ 292.403639][ T803] FS: 0000000000000000(0000) GS:ffff8881243db000(0000) knlGS:0000000000000000 [ 292.412802][ T803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.419445][ T803] CR2: 00007f5810184ff8 CR3: 000000003000d000 CR4: 00000000003526f0 [ 292.427523][ T803] Call Trace: [ 292.430866][ T803] [ 292.433835][ T803] usb_free_urb.part.0+0xf8/0x110 [ 292.438897][ T803] usb_free_urb+0x1f/0x30 [ 292.443312][ T803] smsusb_term_device+0x108/0x200 [ 292.448379][ T803] smsusb_init_device+0xb4e/0xbb0 [ 292.453555][ T803] ? __pfx_smsusb_init_device+0x10/0x10 [ 292.459202][ T803] ? kfree+0x1dd/0x6c0 [ 292.463442][ T803] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 292.469028][ T803] ? usb_clear_halt+0x61/0x160 [ 292.474420][ T803] smsusb_probe+0xd7f/0xe1f [ 292.478974][ T803] ? __pfx_smsusb_probe+0x10/0x10 [ 292.484669][ T803] ? mark_held_locks+0x40/0x70 [ 292.489516][ T803] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 292.495338][ T803] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 292.501147][ T803] ? __pm_runtime_set_status+0x13c/0x970 [ 292.506814][ T803] usb_probe_interface+0x303/0x8f0 [ 292.512078][ T803] ? __pfx_usb_probe_interface+0x10/0x10 [ 292.517726][ T803] really_probe+0x241/0xa60 [ 292.522373][ T803] __driver_probe_device+0x22e/0x480 [ 292.527654][ T803] driver_probe_device+0x4c/0x1b0 [ 292.532706][ T803] __device_attach_driver+0x1df/0x340 [ 292.538236][ T803] ? __pfx___device_attach_driver+0x10/0x10 [ 292.544143][ T803] bus_for_each_drv+0x159/0x1e0 [ 292.548993][ T803] ? __pfx_bus_for_each_drv+0x10/0x10 [ 292.554383][ T803] ? lockdep_hardirqs_on+0x78/0x100 [ 292.559573][ T803] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 292.565397][ T803] __device_attach+0x1e4/0x4d0 [ 292.570167][ T803] ? __pfx___device_attach+0x10/0x10 [ 292.576059][ T803] ? do_raw_spin_unlock+0x145/0x1e0 [ 292.581277][ T803] device_initial_probe+0xaf/0xd0 [ 292.586750][ T803] bus_probe_device+0x64/0x160 [ 292.591534][ T803] device_add+0x1210/0x1950 [ 292.596034][ T803] ? __pfx_device_add+0x10/0x10 [ 292.600882][ T803] usb_set_configuration+0xd97/0x1c60 [ 292.606288][ T803] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 292.612359][ T803] usb_generic_driver_probe+0xa1/0xe0 [ 292.617742][ T803] usb_probe_device+0xef/0x400 [ 292.622518][ T803] ? __pfx_usb_probe_device+0x10/0x10 [ 292.627873][ T803] really_probe+0x241/0xa60 [ 292.632400][ T803] __driver_probe_device+0x22e/0x480 [ 292.637684][ T803] ? usb_driver_applicable+0x1c7/0x220 [ 292.643152][ T803] driver_probe_device+0x4c/0x1b0 [ 292.648182][ T803] __device_attach_driver+0x1df/0x340 [ 292.653578][ T803] ? __pfx___device_attach_driver+0x10/0x10 [ 292.659469][ T803] bus_for_each_drv+0x159/0x1e0 [ 292.664419][ T803] ? __pfx_bus_for_each_drv+0x10/0x10 [ 292.669805][ T803] ? lockdep_hardirqs_on+0x78/0x100 [ 292.675014][ T803] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 292.681331][ T803] __device_attach+0x1e4/0x4d0 [ 292.686526][ T803] ? __pfx___device_attach+0x10/0x10 [ 292.691836][ T803] ? do_raw_spin_unlock+0x145/0x1e0 [ 292.697044][ T803] device_initial_probe+0xaf/0xd0 [ 292.702075][ T803] bus_probe_device+0x64/0x160 [ 292.706830][ T803] device_add+0x1210/0x1950 [ 292.711332][ T803] ? __pfx_device_add+0x10/0x10 [ 292.716202][ T803] ? add_device_randomness+0xb7/0xf0 [ 292.721527][ T803] usb_new_device.cold+0x685/0x115c [ 292.726740][ T803] ? do_raw_spin_lock+0x128/0x260 [ 292.731778][ T803] ? __pfx_usb_new_device+0x10/0x10 [ 292.736981][ T803] ? mark_held_locks+0x40/0x70 [ 292.741841][ T803] hub_event+0x314d/0x4af0 [ 292.746251][ T803] ? __pfx_hub_event+0x10/0x10 [ 292.750992][ T803] ? interval_tree_remove+0xb70/0xef0 [ 292.756452][ T803] ? rcu_is_watching+0x12/0xc0 [ 292.761213][ T803] process_one_work+0xa0e/0x1980 [ 292.766267][ T803] ? __pfx_process_one_work+0x10/0x10 [ 292.771648][ T803] ? __pfx_hub_event+0x10/0x10 [ 292.776391][ T803] worker_thread+0x5ef/0xe50 [ 292.781591][ T803] ? __pfx_worker_thread+0x10/0x10 [ 292.786731][ T803] ? kthread+0x13a/0x450 [ 292.791000][ T803] ? __pfx_worker_thread+0x10/0x10 [ 292.796551][ T803] kthread+0x370/0x450 [ 292.800638][ T803] ? __pfx_kthread+0x10/0x10 [ 292.805245][ T803] ret_from_fork+0x72b/0xd50 [ 292.809827][ T803] ? __pfx_ret_from_fork+0x10/0x10 [ 292.814962][ T803] ? __switch_to+0x800/0x1100 [ 292.819648][ T803] ? __pfx_kthread+0x10/0x10 [ 292.824260][ T803] ret_from_fork_asm+0x1a/0x30 [ 292.829022][ T803] [ 292.832040][ T803] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 292.839308][ T803] CPU: 1 UID: 0 PID: 803 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.850143][ T803] Tainted: [L]=SOFTLOCKUP [ 292.854456][ T803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 292.864491][ T803] Workqueue: usb_hub_wq hub_event [ 292.869589][ T803] Call Trace: [ 292.872857][ T803] [ 292.875779][ T803] dump_stack_lvl+0x100/0x190 [ 292.880449][ T803] vpanic+0x552/0x970 [ 292.884411][ T803] ? __pfx_vpanic+0x10/0x10 [ 292.888912][ T803] panic+0xd1/0xe0 [ 292.892616][ T803] ? __pfx_panic+0x10/0x10 [ 292.897034][ T803] check_panic_on_warn.cold+0x19/0x34 [ 292.902389][ T803] ? free_large_kmalloc+0xbf/0x100 [ 292.907495][ T803] __warn.cold+0x191/0x328 [ 292.911893][ T803] __report_bug+0x296/0x3d0 [ 292.916381][ T803] ? free_large_kmalloc+0xbf/0x100 [ 292.921589][ T803] ? __pfx___report_bug+0x10/0x10 [ 292.926621][ T803] ? bus_for_each_drv+0x159/0x1e0 [ 292.931654][ T803] ? __device_attach+0x1e4/0x4d0 [ 292.936598][ T803] ? device_initial_probe+0xaf/0xd0 [ 292.941785][ T803] ? bus_probe_device+0x64/0x160 [ 292.946706][ T803] ? device_add+0x1210/0x1950 [ 292.951374][ T803] ? usb_new_device.cold+0x685/0x115c [ 292.956761][ T803] ? hub_event+0x314d/0x4af0 [ 292.961347][ T803] ? process_one_work+0xa0e/0x1980 [ 292.966457][ T803] ? worker_thread+0x5ef/0xe50 [ 292.971211][ T803] ? kthread+0x370/0x450 [ 292.975521][ T803] ? ret_from_fork+0x72b/0xd50 [ 292.980274][ T803] ? find_held_lock+0x2b/0x80 [ 292.984931][ T803] ? smscore_unregister_device+0x537/0x7f0 [ 292.990722][ T803] ? smscore_unregister_device+0x537/0x7f0 [ 292.996513][ T803] ? free_large_kmalloc+0xbf/0x100 [ 293.001638][ T803] report_bug+0xb2/0x220 [ 293.005883][ T803] ? free_large_kmalloc+0xbf/0x100 [ 293.010981][ T803] handle_bug+0x16a/0x2a0 [ 293.015289][ T803] exc_invalid_op+0x17/0x50 [ 293.019767][ T803] asm_exc_invalid_op+0x1a/0x20 [ 293.024598][ T803] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 293.030314][ T803] Code: 28 90 0f 0b 90 80 3d 4f 68 59 0e 00 0f 84 d7 4d b9 fe 48 8b 74 24 28 48 89 ef e8 fc ff 0b 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 ba 60 f4 8d 5b 5d 41 5c 41 [ 293.049903][ T803] RSP: 0018:ffffc900047e6d68 EFLAGS: 00010202 [ 293.055955][ T803] RAX: 00000000000000ff RBX: ffffea00020b9880 RCX: 000000000000002e [ 293.063908][ T803] RDX: 0000000000000000 RSI: ffff888082e62000 RDI: ffffea00020b9880 [ 293.071886][ T803] RBP: ffff888082e62000 R08: 0000000000000005 R09: 0000000000000000 [ 293.079834][ T803] R10: ffffffffffffffff R11: ffffffff82770584 R12: ffff88802fcaf000 [ 293.087786][ T803] R13: ffff88802fcad000 R14: dffffc0000000000 R15: ffff88802fcaf0f0 [ 293.095746][ T803] ? kasan_save_track+0x14/0x30 [ 293.100612][ T803] usb_free_urb.part.0+0xf8/0x110 [ 293.105630][ T803] usb_free_urb+0x1f/0x30 [ 293.109938][ T803] smsusb_term_device+0x108/0x200 [ 293.114947][ T803] smsusb_init_device+0xb4e/0xbb0 [ 293.119971][ T803] ? __pfx_smsusb_init_device+0x10/0x10 [ 293.125510][ T803] ? kfree+0x1dd/0x6c0 [ 293.129574][ T803] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 293.135118][ T803] ? usb_clear_halt+0x61/0x160 [ 293.139864][ T803] smsusb_probe+0xd7f/0xe1f [ 293.144352][ T803] ? __pfx_smsusb_probe+0x10/0x10 [ 293.149373][ T803] ? mark_held_locks+0x40/0x70 [ 293.154114][ T803] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 293.159911][ T803] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 293.165703][ T803] ? __pm_runtime_set_status+0x13c/0x970 [ 293.171333][ T803] usb_probe_interface+0x303/0x8f0 [ 293.176426][ T803] ? __pfx_usb_probe_interface+0x10/0x10 [ 293.182035][ T803] really_probe+0x241/0xa60 [ 293.186522][ T803] __driver_probe_device+0x22e/0x480 [ 293.191800][ T803] driver_probe_device+0x4c/0x1b0 [ 293.196808][ T803] __device_attach_driver+0x1df/0x340 [ 293.202161][ T803] ? __pfx___device_attach_driver+0x10/0x10 [ 293.208035][ T803] bus_for_each_drv+0x159/0x1e0 [ 293.212867][ T803] ? __pfx_bus_for_each_drv+0x10/0x10 [ 293.218220][ T803] ? lockdep_hardirqs_on+0x78/0x100 [ 293.223410][ T803] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 293.229197][ T803] __device_attach+0x1e4/0x4d0 [ 293.233953][ T803] ? __pfx___device_attach+0x10/0x10 [ 293.239230][ T803] ? do_raw_spin_unlock+0x145/0x1e0 [ 293.244423][ T803] device_initial_probe+0xaf/0xd0 [ 293.249435][ T803] bus_probe_device+0x64/0x160 [ 293.254191][ T803] device_add+0x1210/0x1950 [ 293.258674][ T803] ? __pfx_device_add+0x10/0x10 [ 293.263506][ T803] usb_set_configuration+0xd97/0x1c60 [ 293.269077][ T803] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 293.275130][ T803] usb_generic_driver_probe+0xa1/0xe0 [ 293.280517][ T803] usb_probe_device+0xef/0x400 [ 293.285261][ T803] ? __pfx_usb_probe_device+0x10/0x10 [ 293.290631][ T803] really_probe+0x241/0xa60 [ 293.295137][ T803] __driver_probe_device+0x22e/0x480 [ 293.300409][ T803] ? usb_driver_applicable+0x1c7/0x220 [ 293.305846][ T803] driver_probe_device+0x4c/0x1b0 [ 293.310853][ T803] __device_attach_driver+0x1df/0x340 [ 293.316210][ T803] ? __pfx___device_attach_driver+0x10/0x10 [ 293.322084][ T803] bus_for_each_drv+0x159/0x1e0 [ 293.326927][ T803] ? __pfx_bus_for_each_drv+0x10/0x10 [ 293.332278][ T803] ? lockdep_hardirqs_on+0x78/0x100 [ 293.337465][ T803] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 293.343251][ T803] __device_attach+0x1e4/0x4d0 [ 293.348007][ T803] ? __pfx___device_attach+0x10/0x10 [ 293.353273][ T803] ? do_raw_spin_unlock+0x145/0x1e0 [ 293.358468][ T803] device_initial_probe+0xaf/0xd0 [ 293.363473][ T803] bus_probe_device+0x64/0x160 [ 293.368218][ T803] device_add+0x1210/0x1950 [ 293.372704][ T803] ? __pfx_device_add+0x10/0x10 [ 293.377540][ T803] ? add_device_randomness+0xb7/0xf0 [ 293.382820][ T803] usb_new_device.cold+0x685/0x115c [ 293.388002][ T803] ? do_raw_spin_lock+0x128/0x260 [ 293.393006][ T803] ? __pfx_usb_new_device+0x10/0x10 [ 293.398186][ T803] ? mark_held_locks+0x40/0x70 [ 293.402944][ T803] hub_event+0x314d/0x4af0 [ 293.407351][ T803] ? __pfx_hub_event+0x10/0x10 [ 293.412105][ T803] ? interval_tree_remove+0xb70/0xef0 [ 293.417470][ T803] ? rcu_is_watching+0x12/0xc0 [ 293.422217][ T803] process_one_work+0xa0e/0x1980 [ 293.427148][ T803] ? __pfx_process_one_work+0x10/0x10 [ 293.432524][ T803] ? __pfx_hub_event+0x10/0x10 [ 293.437265][ T803] worker_thread+0x5ef/0xe50 [ 293.441857][ T803] ? __pfx_worker_thread+0x10/0x10 [ 293.446965][ T803] ? kthread+0x13a/0x450 [ 293.451202][ T803] ? __pfx_worker_thread+0x10/0x10 [ 293.456299][ T803] kthread+0x370/0x450 [ 293.460346][ T803] ? __pfx_kthread+0x10/0x10 [ 293.464928][ T803] ret_from_fork+0x72b/0xd50 [ 293.469518][ T803] ? __pfx_ret_from_fork+0x10/0x10 [ 293.474610][ T803] ? __switch_to+0x800/0x1100 [ 293.479545][ T803] ? __pfx_kthread+0x10/0x10 [ 293.484119][ T803] ret_from_fork_asm+0x1a/0x30 [ 293.488873][ T803] [ 293.492234][ T803] Kernel Offset: disabled [ 293.496539][ T803] Rebooting in 86400 seconds..