last executing test programs: 2m40.908053745s ago: executing program 1 (id=465): r0 = socket(0x10, 0x80002, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x41, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x5, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xd, 0x5, 0x4, 0x8, 0x4, 0x7f, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0xfffffffe, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0xf9, 0xd, 0x2bf, 0x6c9, 0x2, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x8, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x81, 0x9, 0x2, 0x5, 0x9, 0x1, 0x7, 0x10, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x5, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x17ec12b8, 0x800004, 0x5, 0x5, 0x0, 0x0, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e3, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x20000004, 0x65], [0x9, 0xffffffff, 0x3, 0xb, 0x5, 0x938, 0x2, 0x6, 0x7, 0x5, 0x2, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x4, 0x10000, 0x6, 0x7ffe, 0x80000004, 0x200a620, 0x2, 0xa, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x0, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x400, 0xffbf2441, 0xffd]}, 0x45c) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 2m38.620037022s ago: executing program 1 (id=471): r0 = syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffff81, 0x20d02) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000300)={0x0, "a38b3cc2c6513708fb93b3499bc1de879a4fa73a6e7ad4e11bced557858cdb12"}) 2m38.40669423s ago: executing program 1 (id=474): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x5}}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102376, 0x18fe8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r2, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) 2m36.785982565s ago: executing program 1 (id=480): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000024010300"/17, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r6, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e0000000400000004000000020000d0a1ee89f78c7fff9f0000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, r9, {0x7, 0x2b, 0xfffffffe, 0x30006004, 0x0, 0xfffe, 0x6, 0xc, 0x0, 0x0, 0x1, 0x80100}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000009c0)="54c7130e", 0x1001}], 0x1) 2m36.063917429s ago: executing program 0 (id=486): add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) listen(0xffffffffffffffff, 0x6) connect$l2tp(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) acct(0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_create_resource$binfmt(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xa, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7de", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x6, 0xf, 0x5b92, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x81, 0xb57, 0xc, 0x4b, 0x5}}, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd600000001090224"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) 2m35.681565558s ago: executing program 1 (id=490): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000007c0)="0bcde56ca9", 0x5) syz_usb_disconnect(r0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x88440) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 2m33.441659591s ago: executing program 1 (id=497): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/uevent_helper', 0x242, 0x2b0) sendfile(r0, r0, 0x0, 0xa) ioprio_set$pid(0x2, 0x0, 0x0) sync() r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r2, &(0x7f0000000040), 0xff34) write$binfmt_script(r2, &(0x7f0000001b00), 0xfffffd9d) write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) 2m31.548961689s ago: executing program 0 (id=500): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='W', 0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x14, r4, 0x1, 0x4070bd28, 0x1}, 0x14}}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe5d) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x404040, 0x81) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x20a80, 0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r9, 0x2) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x48, 0x64, 0xc01, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2m31.341434795s ago: executing program 0 (id=502): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = getpid() sched_setaffinity(r5, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) 2m28.025204025s ago: executing program 0 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfdfd}) 2m27.33196063s ago: executing program 0 (id=509): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0xb, 0x5}, {0xffff, 0xc}, {0xfff6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x34, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xd, '\x00', 0x111, 0x3, 0xb, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x8, 0xffff, 0x1, 0x9}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x404c044) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xf, 0xfff2}, {0xfff3, 0x2}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x1d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[], [{@seclabel}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cbc(des3_ede),rmd256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000470000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a300000000014bf638a6afcc9f9973855990d600900030073797a300000000048000000060a010400000000000000000500000008000b4000000000200004801c0001800b000100747540000000010900010073797a3000000000140000001100"], 0xbc}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') r8 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000140)) 2m23.911040391s ago: executing program 0 (id=515): syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="8400000002060300000000000000000003000006050004000100000012000300686173683a6e65742c706f72740000000d000300686173683a6d616300000000050004004384a7db86070000000000000011000300686173e83a6e65742c6e6574007ff94b3fd8727366e65203bd56e8000000050001000700b32c0c229b7fbcf41f00000900020073797a30000000000900020073797a31000000000500010007000000"], 0x84}, 0x1, 0x0, 0x0, 0x44000}, 0x80) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 2m23.458939947s ago: executing program 32 (id=515): syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="8400000002060300000000000000000003000006050004000100000012000300686173683a6e65742c706f72740000000d000300686173683a6d616300000000050004004384a7db86070000000000000011000300686173e83a6e65742c6e6574007ff94b3fd8727366e65203bd56e8000000050001000700b32c0c229b7fbcf41f00000900020073797a30000000000900020073797a31000000000500010007000000"], 0x84}, 0x1, 0x0, 0x0, 0x44000}, 0x80) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 2m18.423828848s ago: executing program 33 (id=497): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/uevent_helper', 0x242, 0x2b0) sendfile(r0, r0, 0x0, 0xa) ioprio_set$pid(0x2, 0x0, 0x0) sync() r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r2, &(0x7f0000000040), 0xff34) write$binfmt_script(r2, &(0x7f0000001b00), 0xfffffd9d) write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) 2m8.475811563s ago: executing program 6 (id=527): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0xffff, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc9073, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r2, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xf749}], 0x5, 0x40012100, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x100, 0x80000000, 0x5, 0x400, 0xe, 0x3, 0x75d, 0x3, 0x2, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x10000b, 0xfd, 0x5, 0x7c, 0xfffffffe, 0x40000003, 0x1, 0x10, 0x0, 0x0, 0x0, 0xe66, 0x3, 0x8, 0x8, 0x0, 0x1]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f00000000c0)) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000040)="cb422a787df47148c531ddef0ffc306a478ff6fb8804a542afcc062d0d4145e2401c850f5138e5d56a5db0378c7c75333d84e56b2138aa7be37c144d9e2190016bd5ae6f679671cebeeb0f9cf9fb085327c785b2f3d352194e92f5d19afef693abe80fe6b792cf65f9aadc0a9383866244bce4ee3839ae2bda0d8a5cccec5102b1613a796ff6fc991c43b86e01dbd1840cd2477d491d56f31aee93a7") 2m8.313917391s ago: executing program 6 (id=551): timer_create(0xfffffffd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)}}], 0x1, 0x4040001) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$uinput_user_dev(r4, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x3, 0x52, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x0, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x9000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1000001, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x5, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0x1d, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0xb24, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0x7fff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0x6, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.26103736s ago: executing program 6 (id=553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "850100", "daf9af4a", "747aaaaf941f267e"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) 2m6.471501585s ago: executing program 6 (id=557): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@deltfilter={0x5c4, 0x2d, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_cgroup={{0xb}, {0x584, 0x2, [@TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_EMATCHES={0x15c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x88, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xff80}, "0614fe788cdb7c80932ab458cced58760e4a0e750c110c9f8baf591ce5abd49aa6523ab95708beddc00ad54f7ee202063b5e76c198eda2c01a7273e8901b8b345fa24ba607b4a82b0a986decc5149688128584fc85e55d3d7aa42b5144ea3d99743cb77e4a1f89782528c7e6b118a9410217485117d401166b"}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x8001}, {0x1, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x30, 0x1, 0x0, 0x0, {{0xb335, 0x0, 0x40}, "39fa49f75db232bff4d3c1fd0ed2232d323c3ad731d5cc95b99a7b41b206634279"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x400}, {{0x4, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0xb1, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x72, 0x2}, {0x6, 0x0, 0x2}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="f6", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x15f4}, {0x401, 0xfffffff9, 0xd4, 0x29530faa}}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x503d, 0x9, 0xc}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_CGROUP_POLICE={0x420, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x266, 0x2, 0xd, 0xbe, 0x5, 0x5, 0x1, 0x7, 0x3, 0x6, 0xbe3a, 0x2, 0x5, 0xeb, 0x0, 0x200, 0x9b31, 0xb65, 0x8001, 0x80000000, 0x6, 0x6eb, 0xffffffff, 0x0, 0x80, 0x7, 0x800, 0x5, 0x2, 0xb8, 0x40, 0x9, 0xb, 0x8, 0x1000, 0xfffffff6, 0x99, 0x7fffffff, 0xffffffff, 0x1, 0x9, 0x2, 0xfff, 0x6, 0x0, 0x3, 0xffffff8a, 0x10, 0xffffff01, 0x9, 0x5, 0x0, 0x81, 0xffff, 0x5, 0x5, 0xfff, 0x7, 0x3, 0x200, 0x3, 0x1, 0x7fffffff, 0xc11, 0x400004, 0xd, 0xaca, 0x2, 0x0, 0x6, 0x6, 0x2, 0x2, 0x2, 0x88, 0x6, 0x70, 0xb, 0x4091, 0x5, 0x3, 0x6, 0xe0cd, 0x8, 0x6, 0x6, 0x3, 0xf, 0x4b, 0xb, 0x4, 0x6, 0xfffffffc, 0xfffff2b5, 0x2, 0x4, 0x3, 0xa6e2, 0x5, 0x8, 0xf51, 0x4, 0x1, 0x8, 0x3, 0xfffffffe, 0x6, 0x3, 0x83, 0x3, 0x3, 0x2, 0x2, 0x5, 0x0, 0x9, 0x7, 0xaa, 0x986, 0x9, 0x9, 0x200, 0x74e, 0x1, 0x2, 0x5, 0x2, 0x4, 0x80, 0x10001, 0x4, 0x0, 0x6, 0x5, 0x7, 0x3, 0xff, 0x7f, 0x6, 0xffffcde2, 0x81, 0x7fffffff, 0x0, 0x5, 0x200, 0x51, 0x8, 0x2, 0x7, 0xd45, 0xfffffff8, 0x949d, 0x5, 0xfffffff7, 0x3, 0x64, 0x4, 0x4, 0x0, 0x7ff, 0x5, 0x10001, 0x7f, 0x95, 0x606, 0x10000, 0x9, 0x0, 0x7, 0x5, 0x100, 0x80000001, 0x4, 0x5, 0x4000, 0x7fffffff, 0x0, 0x3, 0xc, 0x6, 0x10, 0x9, 0x2ef, 0x60, 0x7fff, 0x10000, 0x8, 0x7f, 0xff4, 0xfffffff9, 0x2, 0x8, 0x0, 0x9, 0x0, 0x3, 0x1, 0x2, 0x3, 0x7, 0x9, 0xf26, 0x4, 0xd, 0x5, 0x81, 0x9, 0x1ff, 0x6, 0xc59, 0x2, 0xc, 0x990, 0x9207, 0xa, 0x6, 0x5, 0x9, 0xf99b, 0x4, 0x5, 0x81, 0x0, 0x7, 0x9, 0x8, 0x2, 0x1, 0x7b, 0xa5ac, 0x1000, 0x8, 0x1f, 0x4, 0x6, 0xff, 0x4ed6, 0x8, 0x5, 0x8, 0x10, 0x59b, 0x8, 0x800, 0x8, 0x0, 0x3, 0x9, 0x9, 0x5, 0x9, 0xa, 0x1, 0x4, 0x8f]}]}]}}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001020000ff2505a1a4020000000000000068000101040004090400090202060002082406000001e29e05240005000d240f01090000000300b2accf05241508000824071f0400020008241c010007060006241a03002408241c04000422000724140000380c090582020004a804f9090503020800030506"], &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x6, 0x7, 0x7, 0x8, 0x3}, 0x20, &(0x7f0000000480)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0xb, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xeb, "6c79f8d8f6415453957744411aeff9a5"}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000e40)=ANY=[@ANYBLOB="4022070000001f"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a150000005229dea18715152ba75a5b95c241d2dc9dcf2f892a"], 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f00000001c0)='./file0/../file0/../file0\x00', &(0x7f0000000240)='minix\x00', 0x10000, &(0x7f00000002c0)='\x00') chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') r3 = socket$inet6(0xa, 0x2, 0x6) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast2, 0xb}, 0x17, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x240040d0) 2m1.283726351s ago: executing program 6 (id=571): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'wg0\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000300)="baf80c66360fad680466efbafc0cec0f20e06635004000000f22e06766c7442400bcded5aa6766c7442402ae7a00006766c744240600000000670f011c2426360f01c2e36466b94208000067650f01d166ba000000000f300f18593b66b8f1ffffff0f23c80f21f86635080000000f23f866b8010000000f01d9d839", 0x7c}], 0x1, 0x51, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000240), 0x4c, 0x88040) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) 2m0.751962962s ago: executing program 6 (id=576): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)={0xcc9a, 0xfffffffffffffff3, [{0xc}, {0x9}, {0xc}, {0x2, 0x1}, {0xc, 0x1}, {0x2, 0x1}, {0x4}, {0xb, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0xd, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0xe, 0x1}, {}, {0xd, 0x1}, {0x8, 0x1}, {0xe, 0x1}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x1, 0x4) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f0000000b40)=""/37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$inet(0x2, 0x5, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 2m0.350229327s ago: executing program 34 (id=576): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)={0xcc9a, 0xfffffffffffffff3, [{0xc}, {0x9}, {0xc}, {0x2, 0x1}, {0xc, 0x1}, {0x2, 0x1}, {0x4}, {0xb, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0xd, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0xe, 0x1}, {}, {0xd, 0x1}, {0x8, 0x1}, {0xe, 0x1}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x1, 0x4) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f0000000b40)=""/37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$inet(0x2, 0x5, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 7.528486856s ago: executing program 4 (id=937): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(xts-serpent-avx,sha256-avx)\x00'}, 0xfffffffffffffff3) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a", 0x42}], 0x3}], 0x1, 0x40800) 7.431771447s ago: executing program 4 (id=938): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @broadcast}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'ip6gretap0\x00'}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x23) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x1ff, 0x0) 5.707638757s ago: executing program 4 (id=943): r0 = io_uring_setup(0x5513, &(0x7f0000000100)={0x0, 0x857, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r0, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0xf0ffff, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 5.398512771s ago: executing program 5 (id=947): syz_usb_connect(0xd, 0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="120900006c69f1b1f54b8656ad6c86202f070022bf620102030109023400010000000009040000034653c0001f0e20b4afd7000936e60f5078bdd1b7e9961c77000000"], 0x0) syz_usb_connect$hid(0x2, 0x3f, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 5.131368519s ago: executing program 3 (id=949): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r0, &(0x7f0000000000)=0x2, 0x80000001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3c}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 5.131199229s ago: executing program 3 (id=950): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb, 0x6000000}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x30}}, 0x0) 5.079640484s ago: executing program 3 (id=952): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @empty, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7ffffffffffffffe, 0x7, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x50) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r1}}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000200), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, r0, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xb9, 0x20, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x24, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x100}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x7f, {0xa, 0x25, 0x25, 0x2, 0x1b, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2b, 0xb, 0x0, {0xa, 0x25, 0x25, 0xfffeffff, 0x8, 0xa}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0xff, 0x1, 0xef, 0x40, 0x1}, 0x13, &(0x7f0000000840)=ANY=[]}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="b6bc00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001340)={0x0, &(0x7f00000010c0)=""/246, 0x0, 0x0, 0x68, r4}, 0x38) 4.667397074s ago: executing program 5 (id=954): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x15cd456da21b607, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setopts(0x4200, r7, 0x8, 0x100001) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r7, 0x0, 0x4003) read$msr(r6, &(0x7f000001aa40)=""/102392, 0x18ff8) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) fsopen(0x0, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000"], 0xbc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) 4.667053836s ago: executing program 4 (id=955): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) shmget(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00e970aa6f9230e8aa"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r6, 0x0, 0x0}, 0x10) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r8, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f00000020c0)=""/16, 0xe}], 0x2}, 0x1006}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.247603101s ago: executing program 2 (id=958): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000380)={&(0x7f0000000300)="3e9dcbb3ebe0165d31fda00624aa08a5ad2a92cea0fec5645be9ae8b", 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 3.151200975s ago: executing program 2 (id=959): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000800) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0) 3.095352612s ago: executing program 7 (id=960): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000800) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x1, 0x803, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.935472274s ago: executing program 2 (id=961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001740)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="44000280400001002400"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000440)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0x12, 0x0, 0x8, 0x4, 0x6, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1018, 0x8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f00000000c0)={0x7, 0x4}) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.888088399s ago: executing program 5 (id=962): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) sendmsg(r0, &(0x7f0000002180)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)="75bcfb", 0x3}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="eaef6cc01ecb237eb7e49c8ce4d32e13dc5f297ca39ef078bddbe088c47249988ea0c38c62c7f65f759fd43bf097aa5699527427748a434b7dbb308f3fc2a88891676fb99b159f04d08ee615a3e4626358652c5cc556d3f2293820f93391b03ab52badbc23693c2f51cf16a9174ea6380e699aef4f192a18a4ca59a56e67397eb90b3681dfb872a63b52db41d1679b76f346c73cd161cc877086919752d571579ed39b15225bd697d8c80941cf645c76034ad6db2e4755d4842342f6228d2d542c", 0xc1}, {&(0x7f0000000200)="68d5166e12b13038e7fb660cc50bc3ddec81d07b14fd48e649b70ebe711413d6f115679faf9269b4c6a699b0330818dc1dbe83d1ad2b3d25b0fceac7ea56eae37d45a6e38b3b56421b85bdd0818580745b9c57e4617ce703c2e36278b1b738b68b5cc11ac12333a3601b2e2d2a8834c6c9dd0eb1c314dfe4392acdfe3adc677a05ff8d61bef2fb7b4f0cc0ab9a7c50e9c3fd1c175e0e4fcb0ba75dbf2c4666ddc473b84194ddeca2c0296adbe6ef3f64693166bc241a11c7eef16d2ee3c9b7b5d3c37e27973689a37eca3004f6196772d7542fd9ecebe9ece707dc277efd6694", 0xe0}, {&(0x7f0000000300)="dcbc96d0495f87a91cf0224324774424e1", 0x11}, {&(0x7f0000000340)="eb91099806ead1483ed35a82d8abe06ba1e51df301e9850cadbc85f9b92b18f9b971e0dc69da31e079287e1be4b88e4a866b3604c3fefa0483", 0x39}, {&(0x7f0000000380)="d0f62e0351dfa7292379ad9e6b9eb282585009b5f7bd2336291c48adf8c0d7d58179fe5f84ffb00e0fbe", 0x2a}, {&(0x7f00000003c0)="750713f54ebf8ed3eec1c2f91a3f82a54c18481698cc6774c69f14f7c4d34c71df33f955055d92337512ef1febeb6edd420974495dffc65f486eceab9b073d6eb5e67cd4fbfb9a349f39bb3a1f55c30a7bb4eb751c7466b0140ac2f87baa7ba22b6090dc5bf955025f9948068057f02b40170ffbe3c8c6c9652753c16b66d303877659ff68d2018dd0496a358caa592bea80b93a14dd8f04da10c15e479ede668db37376b0b74b51393741a76f85c09758fd7327a20586da091f9bad0d1f07ec662f2c350b065acb210d56cfafa26eb1dbf4068c6a49269c5bdc8ea2979a1026dec24a0399006fd3b63b1e", 0xeb}, {&(0x7f00000004c0)="88cdb2f486077c93ffd884eb7862c08b2816cdd645e833a936467f65bdd41a8223ab6d458327f397a5d88afc80330e2e1573bab3b8f8a801802d1a604f4700ddb06a2f6305a7814382432f60dad975", 0x4f}], 0x9, &(0x7f0000000f40)=[{0x90, 0xff, 0x80000001, "980a0dcbdd51e3fe5d1701b16cf2570c4e663dcfad994f18c6cb4237ec81b070457f3a1154f03bde8f2c2d9883e3e7d1f62acd78cdedde4315d526d3ee3ebb509601a38db70eb79d0c342e09977bf3881e9fa3c14d18007f502e44eba84d87024897f4709891c17e3a43a6662470273b945ad6250a5e2ca804a53923"}, {0xe8, 0x6, 0xf43d, "fe34d5cc16361b78edd0c2223b92852404f87fc4dabe876a03a3eba5d2ec00dc4f4208feb68e5c2735cd32e7e834e4f577ed61e8cd39e59bc68f71012c63a8275ccf9705fbfc4b2a892a3cb53d1d110e8ec07e2e12b10027e484ae26ac5360d54384c9f49f494f1db2bb56b0373a40666689f72223ce8fc4f86a65fee4374192f316fd95f008f1a01d03199cdfb6ec1edafaccac74fc5867af54687900c3df65df3afcc0cd224f78798f17b2836e53a21b4c846e52c514ff9e16d5ccb43e8b84a4d16ff57b29057d7d7889b3a8eb3c45f068"}, {0x1010, 0x10e, 0x5, "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"}, {0x98, 0x1, 0xffff7580, "da8b6b6be9462d759c0d5c7aeb72f233644f25658459a98debcb896dc08d2b9cfbe0ea214bd1cd32bb1d0f71db964c37ea5452a86cdd42521d8f2f2accd5b4a3a51825a85098d12d2561d80ea084f438891bb82742a518bee1165ee05bb676b71e31cfce03b6788093bd4121c3177382d15dd7f8dc73310b8a96cd573168d2520394"}], 0x1220}, 0x48000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x1ff, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x8}, 0x3c) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @multicast1}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) 2.744345061s ago: executing program 5 (id=963): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x4, 0x980900, 0x3}) 2.656717394s ago: executing program 7 (id=964): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x543340, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000040)=0x5, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0d0}, 0x4044800) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, r8, &(0x7f00000002c0)=[{0x0, 0x1}], 0xdeadbeef, 0x8, 0x2000007f}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) socket(0x2b, 0x80801, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r9, 0x80086303, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0xd) 2.479961082s ago: executing program 5 (id=965): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000003c0)={&(0x7f0000000200)=""/211, 0xd3, 0x2, 0x2}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$can_bcm(r2, &(0x7f0000000080), 0x10) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602574c80050000000000000002003b00ffffff7f31000000000000004000000000000000e9000000000000000500000004003800010000080100a5ee0700000005000000ffffffffffffffff02000000000000000500000000200000030000000000000018000000000000000200000000000000"], 0x78) timer_gettime(r0, &(0x7f0000000000)) 1.931638013s ago: executing program 4 (id=966): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x1, 0x6, 0x3, {{0x19, 0x4, 0x2, 0x25, 0x64, 0x68, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop, @ssrr={0x89, 0x1b, 0xa0, [@multicast2, @multicast1, @loopback, @rand_addr=0x64010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0x41, 0x1, 0x2, [{@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x3}, {@empty, 0xfff}, {@rand_addr=0x64010102, 0x7}, {@rand_addr=0x64010101, 0xb}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x52b1427a}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x40, 0x49, 0x800, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, r1, 0xb4}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x200000c1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x100, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014003500776c616e3000000000000000000000000a0001"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) 1.784415516s ago: executing program 3 (id=967): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x81}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x1, 0x1}, 0xe) r1 = socket(0x1d, 0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="050000000000000028800000fed3df2502000001", @ANYRES32=r3, @ANYBLOB="4000820408000100ac1414bb"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9e, 0x0, 0x0, 0x0, 0x99ee}, 0x94) add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000300)="98e89dd960f856f3716a11657cbea0f195785a13e3d1885139eb6fa1f924463173e879b71de842c9bdde1af37ed43f4ffade7a31439f679d5700c8755fd7d05706bf905f5a6bb59b70ed2e77330d1332cfe6de6b08052ab66aee2dc418822927463d6ef0ecffa99f35956e18bc0f1130a7c2cb63b647c9aaae0bfffef122059cda4577e828f22470a75ed7df094361cd74d05065cb8f84fb09fe4e1e703db1f1841c52e6f93c9d9eaad010c6ee7c00"/186, 0xba, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f00000000c0)="0816fd10c0b9a60afa", 0x9, 0xfffffffffffffffe) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r8}, 0x8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1.719219082s ago: executing program 4 (id=968): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000019640)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="ced1b48c06cd01f0e5ca1592"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, "37a0"}, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket(0x2d, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x802) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd"], 0xffdd) connect$qrtr(r4, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r7, &(0x7f0000000840)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="eb00e6ffffffff", 0x7}], 0x2) connect$qrtr(r4, &(0x7f0000000440)={0x2d, 0x1, 0x7fff}, 0xc) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r8, 0x118, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="400b020000008c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.673175148s ago: executing program 2 (id=969): syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r3 = socket$inet6(0xa, 0x80002, 0x0) setuid(0xee01) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x10002}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000010400000400c2800c0001800600060065580000971b0280540211171288eeac1e395912db88e0ec7877099f64742164286bc3880b46cac3292f410da21acc8871cca3358b2abf81af60aca3818eb566082569f71016f2e2d177b87320a1690df8f21c600b5d2e7aeb4f1bd3e4c861c041df10d8d7789881ea8358dee6f30030c860d545c8ba2821bd60f7ceca038959e1579290bf6e4624a9cecf8b91e79beed0884b2b515043ed6fbae6a7f4bc97f226b462118b345ee19a7076616ae9de0c6f50ad5a90da5eb8862ee0ff1c65299b"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c080) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r2}, 0xc) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000001c0)=0x8f8, 0x8) listen(r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x9, 0x8, 0x16, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x20, 0xb, 0xffff7fff}}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r8, &(0x7f00000002c0), 0x15) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x9, &(0x7f0000000380)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x61}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}, @call={0x85, 0x0, 0x0, 0x1e}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x0, 0x1, 0x5, 0x4, 0xffffffffffffffff}], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x14, &(0x7f0000000440)=""/20, 0x41100, 0x3, '\x00', r7, @fallback=0x10, r8, 0x8, &(0x7f0000000540)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x1, 0x7fff, 0xd}, 0x10, 0x0, r6, 0x0, &(0x7f0000000640)=[r2, r2, r2, r9, r5, r5, r5, r5, r2, r10], 0x0, 0x10, 0x2}, 0x94) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r11, &(0x7f0000000240)=""/164, 0x131, 0x131) 1.464568561s ago: executing program 5 (id=970): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) writev(r0, &(0x7f00000003c0), 0x100000000000022d) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040cb061b730000000000010902240001000090000904000009030004000921200000012228000905810308"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) syz_usb_control_io$hid(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000400)={0x7ff, 0x2, 0x6, 0x288f, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f00000000c0)={0x8, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f00000001c0), 0x80) 1.327551714s ago: executing program 3 (id=971): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000800) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0) 1.219718618s ago: executing program 3 (id=972): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x3, 0x1, 0x0, 0xf8}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) close(0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f0000001480), 0xb, 0x200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000200)={0x4}) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000003c0)={0xb02, 0x3000, 0x4, 0xffffffffffffffff, 0x4}) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x9) syz_usb_control_io$sierra_net(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000580)={0x40, 0x11, 0xc7, {0xc7, 0x21, "cf46030867fdd7786440ac255e245f81728f6f7dfa44dd6bedc270c44cb3360b33f74bec5bda1ad0c20dcc892e6692e8a391c4fe48cb9784255a8f4f4304835b77b50ea27ab8920984d0c98712664fa172e27f8fa0fdf632159ee22a6d95363076a6a2cdf1a6b292aecede05bc13fb1c8c52376978b5aaea9c23525e285d43f825e3b169570bb854f65ebee54e161aad206943ecc82353c7cdb4dbd64afdf1d0f8073c9191d9f66255af078cc0b484f9619d0bdc77099e70b4274a6381196e84907f0c5dcb"}}, &(0x7f0000000680)={0x0, 0x3, 0xd9, @string={0xd9, 0x3, "bfe8a53515743462696c2cb6a685c42cc9647e7644e6b5d2c09a0c766167244c7f8bc5532a56ca0af9750c99697e4a1f4c77d2709bef5ee5da42e472399cd2f955dcfcbae4397d61701f84c9d58daacfcaafc5642555d7c53cb467263db98fe4c6a5f92c1d749971332db7c222e409c36136fd9057bb90db0029a2d8119e78b970c33a7c6363bea97e5bc04e35056a1182aef3a0e70582620764cdacb9c412bf5b4c6efa5c81523b907320bc8fdbe0a7d2a76266b9300fbb6d9694014711a74df5fdcee581d7e1094525a2010ecccee34ed6718579bdea"}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000780)={0x0, 0x19, 0x9d, "f5e00088415d34f322faef698661da228591eabaafaea4e2ca2f140a807598b16b0999a0bf5952375e05e85176002ba23cd8f8139c7fa58832ec7ba9a69b76d6f7d344e070c1ca1e50af5c5a6f874f4df35142bd6066b8418dd994d2cf18e82ccb6044de7dfbb8c7ec253baaf7070cb83a83235de78057a7b668b0857fc16baa9281cb1fa463c1480060ff701009a81b8841ebc2408b9e315047545a4b"}, &(0x7f0000000bc0)={0xa1, 0x1, 0x400, "0dc4b9bc065ac50fa533aac1b1e65897c699451636e1d253225995f1df01a9ab18a7878283a800a40690799e28eb4e3a8c52e9ad31010ef54e5dc2d4b9b5612c856c6c379c39015140f88df0acc0dd340a929d986b613cc026eba069971e0a465c4c38f0fea081b20f0efee1ebc10ca0888fcf66461a48ee3f8742a0f0da90cc702e0e0d0ed60126c355f8bbe9cda46ac000f85fa4a868520b26519563c94ef603a6acef73c9a37903e482e6372d50cc5a28f4e7fd827fa34a11fa654bfe58ec64066a07c4e8d2af116a14df2ce46c97e328c29d65a1eedd61599e146334c35fbf484f264bfeceeb9c1d824619cde10cf9a5179e30291472562a096985164285078c0a0eb85e0ecc3fa539348d372be159e0be0e990214aa4923941ae136af2d2570680fc6fc45f7a9f91fd2a64627e665a88c4d277dd41d19a001accbdfae711f95154ae32e9266b1df39c3fe5c8e72cafe25ddfad6b565b5fea20c4b6d0e133a75a320465e0124c5a84da7cd65cbc40b6e0c933d6c9add33624a8e550b7d9b7c6837a20ea880021f4e42af3785dbd7de187b040adcbb82fea45e3de18bceb2368ee44636162de10ff52ecfa2b3f28590117adfdaefa83bd14202524b252331cce26a511cf0a47992b3985b406e84ead71eb518aca6b301c31bea8a78de4f763184e81cf09dfff3c5b3d09f3f06709b57d3e4cecbd331ba6746c41ebcefc4b451d916d9694f7ac4cfb09a91b8d20a93c8c4ec71c7faebe8611274521dba028c25375eb9c660ef39e6f41a9b279a7033518258e8676db2aea82e78e03d50d9a9b1844cef0f6f7d351d89b00b54e767ef5ce2d6a1e9147fd9ba0b2a8c7ca5189b3783bb2c37c0e65a995fc054f2a404d5ac7f8bda0118b2237d5b9a2ca87611e36b92f0903c3e11a16dad00737aa4460aee651568a31d9ecf5fe223fb6598b161434a4f173d0c2efc7b8c950bfdbfc0d844d3264fa773d653cdaf5fc5eeacf94ed2c802787f5ba1b74ad023ed1358c6abc09b49b06b64dfe300d4548835d03af418e52bc3efadcd7656bbd7d3571c48107629e48dc459ef0a1a174834688efc734204c258976e4d349ee92cfc4c0cbc1edd45c1145be8f2c4d5ca16e68f10be6e9932ccb0599aaafd5275f1a1368952e6b4e8d5c35ab43e519385087dd0eafa307ba1a9a3e736594fcc2a7592ad1f5dd34fc9237d1923e2d35f27f23521966c6f7b67f18ffff8e0be7ff340b8c3a886727cf592542e4c6b307d2d7aa28aa2d12946158f51d647105b1d9d2d4073d05d768bf7e0180d115b2a416e59cc522815659f03b0f99736844fae98a52158f30b7c5f69274aeef371e3fb1d98e0780cd2fa4de8f36caea9979cfc1b572c2bb97004bddf5c3fe41a38d51a955f78f891f34214f73d5859ec66ff3243848b0d11a7180c94e935a0ab30cc1bb5f9b85f25ce7f"}, 0x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x2, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008200)={0xffffffffffffffff}) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x13) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) setreuid(0x0, r7) creat(&(0x7f00000001c0)='./file0\x00', 0x180) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) 1.003792015s ago: executing program 7 (id=973): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xe, 0x7ffc1ffb}]}) (async) kexec_load(0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000082d000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000913000/0x4000)=nil, &(0x7f0000b42000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000b7e000/0x4000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r2 = io_uring_setup(0x55a1, &(0x7f0000000040)={0x0, 0x77f4, 0xc000, 0x0, 0x4a0042f5}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) (async) fsopen(&(0x7f0000000180)='proc\x00', 0x1) fchdir(0xffffffffffffffff) (async) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e, 0x0, @val=@tracing={0x0, 0x2000000001ff}}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r5) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="c488bf3e6cf607add5ee8b6081e87f00ff000000", @ANYRES16=r6, @ANYBLOB="01012bbd7000fbdbdf25020000000500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'sha224\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) (async) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000001, 0x200000005c831, 0xffffffffffffffff, 0x0) 898.487953ms ago: executing program 2 (id=974): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x1, 0x8, 0x1, 0x3, '\x00', '\x00', '\x00', 0x9, 0x0, 0x6, 0x101, "1701c81cfd31d56b5f5e98043a6baf10"}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x1, 0x40, 0x219, 0x6, {{0x21, 0x4, 0x2, 0x28, 0x84, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x7b, 0x3, 0xf, [{@multicast2, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x2}, {@empty}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0x1f, 0x60, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @private=0xa010102, @local, @loopback]}, @timestamp={0x44, 0x1c, 0xbb, 0x0, 0x4, [0xe, 0x800, 0xb, 0x5, 0x2a, 0x0]}, @end]}}}}}) setgroups(0x24, 0xffffffffffffffff) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={r2, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) syz_usb_connect(0x6, 0x48, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x6) 494.106557ms ago: executing program 7 (id=975): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{0x7}, 0x9}}}, 0x7) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x148) fcntl$setlease(r2, 0x400, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) close(r1) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d00)=@newtfilter={0x29dc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x29b0, 0x2, [@TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan1\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x18fc, 0x4, [@m_connmark={0x9c, 0x1a, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x37f, 0xffffffffffffffff, 0x5, 0x8}, 0xb4f}}]}, {0x4d, 0x6, "f3f2cbefe573e87e5c0c3dac0ba6942891cc738383d3d7f1d39154c7afb0dddbd12433ab5b434ad6711e861ab14ff21bfe321ca8557aa16223977c42dc8223c467eebf0603b37367ae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x16c8178eb2a24e08}}}}, @m_bpf={0x164, 0x12, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xfffc, 0x9, 0xfe, 0xfffffff7}, {0x3, 0x6, 0x0, 0x8}, {0xcaac, 0xf1, 0x80, 0x4}, {0x5, 0x1, 0x35, 0x3}, {0xf429, 0x1, 0x2}, {0x6, 0x8, 0x9, 0xfffffffa}, {0xf063, 0x9, 0x6, 0x4}]}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x114, 0x15, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8a}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0xffffffff, 0xffffffffffffffff, 0x4, 0xbc0}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x35cf, 0x5, 0x8, 0xe, 0x8}}]}, {0xa0, 0x6, "1400d86f37de23155f7391173f39802467ed8cbd51a6d09372eac125af5624cd1b349663f97a1b45befa5840cfa692fd2c6b5ef5b76ede9b63ccff9c0fa7b6797b468cf371e8c8609d5039c30b5583ad67d597ead2c12449e65f1ddfd7a895b4a52917973c25b15c4a8647bad9ff14ec3c9e1c83bee8a54faf3b96f6794a39f8d6a03d0f1ebf55d1a1fde424487d63e2b3ab1f615d41f181d8615f84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x220, 0x1c, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x80000000, 0x0, 0x3, 0x6}, @private=0xa010101, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xdb1, 0xd6}, @rand_addr=0x64010100, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x3, 0x10000000, 0x7, 0x800}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0xffffffffffffffff, 0x498d, 0x8}, @broadcast, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x80000000, 0x4, 0x2, 0x7fff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xab, 0x4a58, 0x8, 0x40, 0x80000001}, @remote, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0xffffffffffffffff, 0xa}, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast}}]}, {0xe0, 0x6, "678e5bc3b977543476f66caf368a92cd0a96d7d14acda1032ffa204394b6a8dfdb917ca9dca235925e4784a1691eefe205f7ab9f1880de5560646d644bcddae1a02f637c4d7fde9076dff9ddb826329d38e868109b1db415e47b3a64b1b677d7d58b58e30a87594c41872b1c36ea8509f66f1e6a6a555e6e0278d3d3c088ad82d554d792fc92f241e8d353ebb8c43078542d8815b9384335c97f0c4db056a85653997c5ff5c8c4a0f014e1e4ba482e03fa64c87208ef68453518d528dbc91a56dfe94a14a6eb4dec92a7c57438d306c017d443b52e9788500f42da59"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xd0, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffe, 0x8, 0x5, 0x5, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd495}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0xf, 0x8, 0x5, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5c}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x42, 0x6, "7a1463365c33f8713596302fc3e0032d8e2dd43c3cf7a4d8c0aa47bb22fdbc493ad2cb795e702806024f9560f888902307802a8873b516dae244e92e1a8a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xe4, 0x16, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x10}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_ZONE={0x6, 0x4, 0x4a2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x6e, 0x6, "57a1fda381d4186b0ec1ca892e7e2e5557d32e97e8183fb6639846adaf232524e420843280ff5f1f8efe802a177070301478f2e4d840db81f4b129b139d093913e234d4b58fedd4aa8884e57d5b1756045088768de3625b47cb73b8958d5a3fa7cfc9ec1a35df1a921bc"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x138, 0x12, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0xe, 0x8, 0x5, 0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x3768d698fca62e45}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xd8, 0x6, "17d4c0c6fa71eda7faaf558ed602caf9e47254567c75ec274e5c54a21cdd2cd949fcc25c7935816699141d39a803e26356f0198fc0d907d53a0e47f5efa982bec5606161b4413c01aabedfa38c32b602cddacaa13eacba44291559d0cc3866ef4362f58be1c174ec2ee05f9e1ec775d21510c5ff3278d5175d958c9c95a8e817b0ff9ea5dc866b14a0e8f95a2baa58b393ddc1067a457bf98637f3163ef7f9a6f2de0d866622a8bf04cb83a0b75b7c31045251c2be99a9256ea8d1cfff28d9b8c0981c95524c8ccba0a47ff65ee0fedd689194ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x78, 0xa, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x7, 0x8, 0x9}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xd8, 0x9, 0x10000000, 0x2b, 0x7}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x81}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9200}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0x1060, 0x11, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x46}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x7f, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0xffffffff}, @TCA_FW_POLICE={0x410, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x0, 0x3fa, 0x3, 0x1, 0x3ec3, 0xc, 0x1, 0xa277, 0x4, 0xe, 0xe, 0x5, 0x9, 0x8001, 0x400, 0x2c7d, 0x9, 0xfffffffc, 0x0, 0x18e6, 0x8, 0x2, 0x9, 0x2, 0x5, 0x0, 0xa883, 0x80000001, 0x40, 0x4a3, 0xa, 0xc51, 0x3, 0xa00, 0x2, 0x3, 0x30e, 0x401, 0x8000, 0x1, 0x2, 0x9, 0x1, 0x1000, 0xa2, 0x2, 0xc, 0x6, 0xfffffffd, 0xc4, 0x4, 0x0, 0x7, 0x33, 0x8, 0xb99f, 0x4, 0xa2, 0x5, 0x9, 0x9, 0x8, 0x1, 0xf627, 0x2c00, 0x1, 0x0, 0x9, 0xe, 0x5, 0x1, 0x80000000, 0x8, 0x1, 0x0, 0x10, 0x10000, 0xe9, 0x400, 0x4, 0x8, 0x9, 0x92, 0x7, 0xfffffffd, 0x9, 0x1, 0x80000000, 0xd, 0x3f, 0x7, 0xd3, 0xe3, 0x8000, 0xc, 0x6, 0x1, 0xaa3b, 0x8, 0x8, 0x8000, 0x1, 0xdc000000, 0x4, 0x401, 0x7, 0x4, 0xf41, 0x6, 0x920, 0x101, 0x4, 0x4, 0x8, 0x0, 0x1, 0xb, 0x80000001, 0x8, 0x5, 0x5, 0x3, 0x3a, 0x8, 0x3, 0x7, 0x2, 0x1, 0x7bea, 0x9, 0x400, 0x5c4a, 0x0, 0x3, 0x10, 0x59, 0x5, 0x3ff, 0x9, 0x8, 0x1, 0xddf, 0x1000, 0x7fff, 0x3, 0x40b, 0xa, 0x7, 0x9, 0x5, 0xfffffffd, 0x0, 0x0, 0x9, 0x9, 0x0, 0xffff, 0x1, 0x3ff, 0x6, 0x9, 0x6, 0x9c04, 0x80, 0xdab, 0x3000, 0x7, 0x8001, 0x80000001, 0x1, 0xdb0, 0xff, 0x9017, 0x488, 0x8, 0x1673, 0x164003df, 0xffffff7b, 0x2, 0x7ff, 0x9, 0xdf, 0x1, 0xa, 0x7f, 0x5, 0x0, 0xcc9, 0x1, 0xffff, 0x5, 0x0, 0x3, 0x9, 0x3, 0x9, 0x3, 0x2, 0x9, 0x5, 0x7990, 0x7fff, 0x7, 0x841, 0x7, 0x8, 0x7, 0x6, 0x2, 0x608, 0x6, 0x9, 0x5, 0x4, 0x3ff, 0x80000000, 0x0, 0x0, 0x2, 0x1000, 0x10000, 0xd1b8, 0xfffffffb, 0x4, 0x80000, 0x7, 0x5, 0x7, 0x6, 0x7, 0x677, 0x2, 0xff, 0xfffff4e7, 0x3, 0xc7, 0x6, 0x7ff, 0x3, 0x401, 0x5, 0x4, 0x60000000, 0x8001, 0x8, 0xffffffff, 0x5, 0x2, 0x0, 0x6, 0x8, 0x200, 0x2, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}]}, @TCA_FW_ACT={0xc74, 0x4, [@m_simple={0x124, 0x9, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7c9e0146, 0x20000000, 0x6, 0x5f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x2000, 0x20000002, 0x7, 0x4}}, @TCA_DEF_DATA={0x8, 0x3, 'sfq\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x6, 0x3, 0x9, 0xfffffff8}}]}, {0x91, 0x6, "d45a6ec9006eab9888d337435338e6b92a7531cb9d222931e6c072b04f0fab90fb0650f8cc26606ae6d7c0eea258113506beecb5a8018f17bf171fdb97f785e0ee51a39f7e078acbf2cd3f38143b4c31b68c93a0f77bb1c16c230fac096760ef6e3be380ef751070d0d28262af9d14e6d5b2f341ff620b75dbcc82619d1d48389131821decb95ede09dc6ac8b9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x158, 0x4, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffff9a, 0xb, 0x1, 0x89, 0xe}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x6, 0x2, 0x9, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x15c2, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f44, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1218}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x101d, 0x20000000}}]}, {0xcc, 0x6, "30d2f9656c53980fadc81dd12f2441a262e3e4f0473238a7e598710a430632308714243263ba99020fbb529e0cea58fef58918227fd16772d82ab7fd33d0399c29567a5557e524b83052077efef57a17777ebdcc0898d3b89c35c72fb5824db72222ec515a7d944ada5539cedaa832cf0824a445a2bea8540189b225c9ebef993cb141d893626e2db33eaebe10a974c224892fdf9c323fab2136e58293d3b2a39573b78981e2892687ca9604c3191d3aefeb89aee87db30b6c3d64e69f810d80018617e2c905c715"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xe8, 0x15, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xd6fa, 0xc, 0x6, 0x5, 0x7}, 0x25}}]}, {0x9f, 0x6, "92267b69bee8824f83d6786ac61e4f6ffda41d853c6ce575e85a0d06e8f7dc9f69f2be2a8eabffe27866edf8b0898849c80c059ab21831ebcc09f89e449c7df6554f3105513c45501841b5d6c7bfaa62b3e0938e8f91a47b28676506c903646414d651385c13b62045a781f45f1f8aab9b20950ff1765ad73c370eac9b8259c3ba8d4d11e0c445c49f62c6271769b0505cef6c9d09d96e087aff60"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_police={0x90c, 0x9, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x480}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf73b}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5ec7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x877f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8000, 0xffffff7f, 0x3, 0x3e61, 0x6, 0x7, 0x6, 0x1000, 0x24, 0x2, 0x5, 0x4, 0x10001, 0x4, 0x5, 0x8, 0x800, 0x7, 0x0, 0x3, 0x6, 0x1, 0x58ab, 0xfffffffc, 0xff, 0x8, 0x50, 0x1, 0xf, 0x3, 0x9, 0x0, 0x7, 0xd, 0x3ff, 0x9, 0x7, 0x96, 0x40000000, 0x1ff00000, 0x6, 0x6, 0x8001, 0x1c000000, 0x9, 0x7fff, 0x4, 0xb, 0x6, 0x9, 0xe52e, 0x0, 0x1, 0xffffffff, 0x0, 0xfffffff8, 0x100, 0x96a, 0x6, 0x80000001, 0x8, 0x7aa, 0x2, 0x4, 0xbf, 0x7fff, 0x3ff, 0x9, 0x800, 0xee0d, 0x7, 0x4, 0xb0, 0x5, 0x3ff, 0xcb, 0x1, 0x401, 0x51, 0x1, 0x40, 0x7fffffff, 0x0, 0x8001, 0x7c5, 0x7, 0x9, 0x7, 0x1, 0x4, 0x9, 0x1000, 0x1000, 0x2000, 0x5, 0x8000, 0x18e, 0x9, 0x1, 0x7f, 0x9, 0x8, 0x87, 0x60c, 0x80000001, 0xa6, 0x7f, 0x2, 0xc568, 0x8, 0x2, 0x10000, 0x5, 0xb4b8, 0xb, 0x3, 0x2, 0x0, 0x4, 0xb11, 0x7, 0x6, 0x4, 0x3, 0x2, 0xe, 0x6, 0x7, 0x3, 0x11ec, 0x2, 0x5, 0x10000, 0x7, 0x7ab8, 0x9, 0x8000, 0x1, 0x80, 0x800, 0xfffffff7, 0x1, 0x7, 0x8, 0xfffffffc, 0x6, 0x4, 0x7, 0x2, 0x1e40, 0x3ff, 0x200, 0x80, 0x7f, 0x80, 0x3, 0x19, 0xf5, 0x2, 0x3ff, 0x10000, 0x10001, 0x5, 0x9, 0xfffffff7, 0xffffff02, 0x7, 0x2, 0x5, 0x5, 0x3, 0x5, 0x2000, 0x1, 0x2, 0x6, 0x400, 0xfffffffa, 0x70, 0x7fff, 0x7, 0x7, 0xff, 0x1, 0x7, 0xb, 0x4, 0x1, 0x8000, 0x2, 0x9, 0x3, 0x272a, 0x3, 0x9, 0x2000000, 0xffffffff, 0x10001, 0x42, 0x34, 0x1, 0x6, 0x8, 0x3f, 0x2, 0x7f2, 0xed1, 0x80000000, 0x9, 0x3, 0x0, 0x0, 0x8, 0x8, 0xb79e3e9, 0x4, 0x1, 0x8, 0x4, 0x0, 0x0, 0xcca, 0x2, 0x6, 0x7, 0x9, 0x6, 0x7, 0x7f, 0x4, 0xfffffffa, 0x6, 0x7, 0x8, 0x0, 0x0, 0x4, 0x57fa, 0x3, 0xfffffff9, 0x8, 0x80000001, 0x7, 0xe, 0x7, 0xfffffff9, 0x5, 0x2, 0xf, 0x4, 0x4, 0x4, 0x10, 0x7, 0x3ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x3, 0x400, 0x9, 0x6, 0x4, 0x3, 0x9, 0x2, 0x4, 0x7fffffff, 0x2, 0x49, 0x9, 0x3, 0x0, 0x38d, 0x8, 0x2, 0x1, 0x1, 0x8, 0x5, 0x0, 0xfffffff9, 0x2, 0x5, 0x384f6ea7, 0x7, 0x51, 0x8, 0x2, 0x0, 0x5, 0x9, 0x6, 0x3, 0x6, 0x403, 0x101, 0x9, 0x8, 0x2, 0x6, 0xfffffffc, 0x6, 0x4, 0x44, 0xce000000, 0x4, 0xf, 0x1000, 0x0, 0x6, 0x7, 0x9, 0x1ff, 0x7, 0xffffffff, 0x1000, 0x81a0, 0x4e8d, 0x40, 0x6, 0xf8000000, 0x1, 0x0, 0x401, 0x9, 0x8001, 0x81, 0x73, 0x40, 0x10, 0x3ff, 0xb30d, 0x4, 0x8, 0x9, 0x6, 0x2, 0x5, 0x10001, 0x4, 0xd5f4, 0xfffffff7, 0x400, 0x0, 0x1569, 0x10, 0x3, 0x1, 0x7f, 0x1f, 0x27fefae, 0xffffffff, 0x7, 0x5, 0x6, 0x4, 0xc000000, 0x6, 0x7, 0x0, 0x5, 0x200, 0xc2, 0xff000000, 0x1, 0x7, 0x9, 0x1, 0x7, 0xc467, 0x2, 0x27f, 0xfffffc00, 0x4, 0x2, 0xf43, 0x5, 0xffff, 0xffffffff, 0x10001, 0xd84c, 0xfa00000, 0x5, 0x3ff, 0x80000001, 0x400000, 0x15d6, 0x2, 0xfffffffc, 0xf, 0x10, 0x8, 0x1, 0x3, 0x1, 0x3, 0x800, 0x0, 0x7f2d7140, 0xffffff88, 0x10000000, 0x6, 0x10, 0x10, 0x0, 0xccef, 0x9, 0x5, 0x80000001, 0x6, 0x6c, 0x1, 0x0, 0x9, 0x35, 0x7, 0x3, 0x2c3cd5f0, 0x0, 0x2, 0x62a, 0xfffff095, 0x5, 0x5, 0x4, 0x3, 0x8, 0xae5, 0x418, 0x1, 0xf, 0x7fff, 0x5, 0xc09, 0x8000, 0x7, 0x1270eeb2, 0xa, 0x8000, 0x4684, 0x180, 0x9, 0x10001, 0x5, 0x0, 0x5, 0x8001, 0x67c8e8a3, 0x3ff, 0x7fffffff, 0x6, 0x7fffffff, 0x8, 0x7ff, 0xb, 0x26, 0x10001, 0x654b, 0x6, 0x5, 0x3, 0xff, 0x800, 0x9, 0x5, 0x1, 0x6, 0x2, 0xfe5, 0xfffff2e8, 0x6, 0x1, 0x0, 0x1, 0x4, 0x8, 0x5, 0xdc74, 0x2, 0x5, 0xff, 0x7, 0x0, 0xb86, 0x9, 0x6, 0x7, 0x881, 0x92, 0x400, 0x7, 0x2, 0x1, 0x6, 0xffffffff, 0xfffffffc, 0x7, 0xc31, 0xfffffff8, 0x6, 0xff, 0x80, 0x0, 0x6, 0x80000000, 0x617, 0xfff, 0x80000001, 0x9, 0x6, 0x1]}]]}, {0x7d, 0x6, "aac33ab8fe0a0e21eba01dbb6ba05c885b73c4f49fdbb07478a49ffa39b5ba0dfc302e99a7f833b976c89db579f7eb5983a67d9a1fc9018c77066765dfb5a7488dafc767760a6d079ea3b6a916dc847d6b30e30685dc6960141d6059fdddb95d530ee7f22e4642f9fc294253ace3448d8b230eccf3a8101db5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}]}}]}, 0x29dc}}, 0x0) 447.95211ms ago: executing program 7 (id=976): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x1fe], [{0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {0x9, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffa}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x4}], 0x12, 0x0, 0x0, 0x8000000}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x80800) close(r2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0x8, 0xc}, {0xf}}}, 0x24}}, 0x48001) ioctl$KVM_RUN(r3, 0xae80, 0x0) 269.334458ms ago: executing program 7 (id=977): r0 = syz_open_dev$dri(&(0x7f0000000080), 0xe74f, 0x711b00) unshare(0xa000000) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000ffc000/0x3000)=nil) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x3e, 0x71, 0x200000008}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x28, 0x4, @tid=r1}, &(0x7f0000000300)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100152018b401e040740e2c543d9cd010902bf158a9f1c1bcaf00101040000030904"], 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001d005f80004000000000000002000000010000000000080008000100000303ff", 0x24) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x40, 0x23, 0x22, {0x22, 0x19, "32a70bf12da40a17b351c9156eca8f7d45fb890cc440084956fc1c39dce516d8"}}, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast2, 0x80064e}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x20000, 0x80ffffff}]}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xf0003, 0x0, {[0x8, 0x6, 0x81, 0xffffffffefffff14, 0x3, 0x100000000, 0x3]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 2 (id=978): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000"], 0x48) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x9eb487cbb07c6a48) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x10100, 0x2, 0x3, 0x3, 0x96, 0xff, 0x2000000}, 0x20) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20010800) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x8, @empty, 0x6}, 0x1c) sendmmsg$unix(r6, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009594f0ff100000008510000006000000bf91000000000000b702000002000000850000001ccaa62db7000000000000009500000000000000", @ANYRES32=r0, @ANYBLOB="18f100000000000000000000000100000018110000", @ANYRESDEC=r6, @ANYRESOCT, @ANYRES32=r3, @ANYRES32, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="18fbb30300004fab76dbc0dc030000005667fa5e216783153744f3d24c7a59fdc8a5c29953461ef96cfab19fa1b4e294dde68e9ba68d41ee30e1d80c9c2b6c7498fe854e40c9167c2320249e5c8b2e50966ab3f0dec4981f18d344fabde7326a2800e8dd74fd7dda1afeddf8255ce94178188f6dfd726e346dfe91deb8ebc703dcede7bebefaacc4abce1baca08906aa5d58fa1b31b2740cfebcc023582b608a863b84aa9d606c7243b9a0813eb0ced2bfbd69118b70d81ddeb443fc959d9401230164ea3706ae3e4085f6bd9c1686023b20d53c643867d0fa747575a2a03e43da7bca24b9", @ANYRES16=r7, @ANYBLOB="21032bbd7000fedbdf250100000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.410738][ T5716] pwc: recv_control_msg error -32 req 04 val 1100 [ 295.441037][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.450729][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 295.465323][ T5716] pwc: recv_control_msg error -71 req 04 val 1200 [ 295.493874][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 295.510918][ T5716] pwc: Registered as video103. [ 295.524728][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 295.530663][ T5716] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 295.560664][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 295.626213][ T5716] usb 5-1: USB disconnect, device number 35 [ 295.730991][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 295.825622][ T5736] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 295.966337][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.105259][ T5736] usb 6-1: Using ep0 maxpacket: 16 [ 296.116428][ T5736] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 296.125830][ T5736] usb 6-1: config 0 has no interface number 0 [ 296.132109][ T5736] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 296.144430][ T5736] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 296.155509][ T5707] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 296.395798][ T5736] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 296.422626][T10637] netlink: 'syz.4.641': attribute type 4 has an invalid length. [ 296.430461][T10637] netlink: 17 bytes leftover after parsing attributes in process `syz.4.641'. [ 296.446338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.456558][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.502024][ T5736] usb 6-1: Product: syz [ 296.528305][ T5707] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 296.543682][ T5736] usb 6-1: Manufacturer: syz [ 296.576140][ T5736] usb 6-1: SerialNumber: syz [ 296.583971][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.640614][ T5707] usb 4-1: Product: syz [ 296.668170][ T5707] usb 4-1: Manufacturer: syz [ 296.722546][ T5707] usb 4-1: SerialNumber: syz [ 296.745656][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.641'. [ 296.814044][ T5736] usb 6-1: config 0 descriptor?? [ 296.829304][ T5707] usb 4-1: config 0 descriptor?? [ 296.837966][T10603] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 296.850274][T10603] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 297.018894][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.271966][ T4979] block nbd1: Possible stuck request ffff888028d7e000: control (read@0,1024B). Runtime 90 seconds [ 297.283478][ T4979] block nbd1: Possible stuck request ffff888028d7e1c0: control (read@1024,1024B). Runtime 90 seconds [ 297.296943][ T4979] block nbd1: Possible stuck request ffff888028d7e380: control (read@2048,1024B). Runtime 90 seconds [ 297.318035][ T4979] block nbd1: Possible stuck request ffff888028d7e540: control (read@3072,1024B). Runtime 90 seconds [ 297.462695][T10603] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 297.555183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 297.593714][ T5707] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 297.612016][T10603] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 297.894076][ T5736] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 298.024629][ T29] audit: type=1400 audit(1777609118.141:572): avc: denied { write } for pid=10623 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 298.446766][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.022629][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.277518][ T29] audit: type=1400 audit(1777609119.411:573): avc: denied { map } for pid=10623 comm="syz.3.640" path="/dev/raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.354502][ T29] audit: type=1400 audit(1777609119.411:574): avc: denied { execute } for pid=10623 comm="syz.3.640" path="/dev/raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.462610][ T5736] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 299.474391][ T5736] asix 6-1:0.34: probe with driver asix failed with error -71 [ 299.519539][ T5736] usb 6-1: USB disconnect, device number 7 [ 299.566806][ T5707] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 299.806549][T10682] random: crng reseeded on system resumption [ 300.045458][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.254607][T10688] netlink: 24 bytes leftover after parsing attributes in process `syz.7.646'. [ 300.839879][ T5797] usb 4-1: USB disconnect, device number 32 [ 301.085624][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.512288][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.872504][T10715] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20003 [ 301.889115][T10715] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 301.916967][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 301.947697][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 301.968277][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 302.153332][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.381310][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.175820][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.204357][ T29] audit: type=1400 audit(1777609123.331:575): avc: denied { read write } for pid=10738 comm="syz.3.655" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 303.268792][ T29] audit: type=1400 audit(1777609123.331:576): avc: denied { open } for pid=10738 comm="syz.3.655" path="/146/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 304.021721][T10770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.218287][ T29] audit: type=1400 audit(1777609124.091:577): avc: denied { read } for pid=10759 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.218346][ T29] audit: type=1400 audit(1777609124.151:578): avc: denied { bind } for pid=10759 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.218387][ T29] audit: type=1400 audit(1777609124.151:579): avc: denied { node_bind } for pid=10759 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 304.227433][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.288774][T10753] syz.7.657 (10753) used greatest stack depth: 19720 bytes left [ 305.139238][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.373726][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.592581][T10788] syz.3.663: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 305.607402][T10788] CPU: 0 UID: 0 PID: 10788 Comm: syz.3.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.607434][T10788] Tainted: [L]=SOFTLOCKUP [ 305.607438][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.607455][T10788] Call Trace: [ 305.607460][T10788] [ 305.607466][T10788] dump_stack_lvl+0x100/0x190 [ 305.607485][T10788] warn_alloc.cold+0x95/0x1c1 [ 305.607500][T10788] ? __pfx_warn_alloc+0x10/0x10 [ 305.607521][T10788] ? stack_depot_save_flags+0x27/0x9d0 [ 305.607539][T10788] ? __lock_acquire+0x4a5/0x2630 [ 305.607559][T10788] ? xskq_create+0xfb/0x1d0 [ 305.607578][T10788] __vmalloc_node_range_noprof+0x136c/0x1630 [ 305.607599][T10788] ? xskq_create+0xfb/0x1d0 [ 305.607622][T10788] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.607644][T10788] ? xskq_create+0xfb/0x1d0 [ 305.607662][T10788] vmalloc_user_noprof+0x9e/0xe0 [ 305.607676][T10788] ? xskq_create+0xfb/0x1d0 [ 305.607694][T10788] xskq_create+0xfb/0x1d0 [ 305.607712][T10788] xsk_setsockopt+0x743/0xab0 [ 305.607735][T10788] ? __pfx_xsk_setsockopt+0x10/0x10 [ 305.607754][T10788] ? find_held_lock+0x2b/0x80 [ 305.607765][T10788] ? __fget_files+0x215/0x3d0 [ 305.607783][T10788] ? selinux_socket_setsockopt+0x6a/0x80 [ 305.607798][T10788] ? __pfx_xsk_setsockopt+0x10/0x10 [ 305.607817][T10788] do_sock_setsockopt+0xf3/0x1d0 [ 305.607832][T10788] __sys_setsockopt+0x195/0x220 [ 305.607851][T10788] __x64_sys_setsockopt+0xbd/0x160 [ 305.607867][T10788] ? do_syscall_64+0x90/0xf80 [ 305.607880][T10788] ? lockdep_hardirqs_on+0x78/0x100 [ 305.607893][T10788] do_syscall_64+0x10b/0xf80 [ 305.607906][T10788] ? clear_bhb_loop+0x40/0x90 [ 305.607921][T10788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.607932][T10788] RIP: 0033:0x7f78e7b9cdd9 [ 305.607943][T10788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.607954][T10788] RSP: 002b:00007f78e8ab4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 305.607966][T10788] RAX: ffffffffffffffda RBX: 00007f78e7e16180 RCX: 00007f78e7b9cdd9 [ 305.607973][T10788] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 305.607980][T10788] RBP: 00007f78e7c32d69 R08: 0000000000000004 R09: 0000000000000000 [ 305.607987][T10788] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.607994][T10788] R13: 00007f78e7e16218 R14: 00007f78e7e16180 R15: 00007fffc8c08708 [ 305.608010][T10788] [ 305.608036][T10788] Mem-Info: [ 305.872119][T10788] active_anon:14727 inactive_anon:0 isolated_anon:0 [ 305.872119][T10788] active_file:21403 inactive_file:40805 isolated_file:0 [ 305.872119][T10788] unevictable:768 dirty:189 writeback:0 [ 305.872119][T10788] slab_reclaimable:11780 slab_unreclaimable:104776 [ 305.872119][T10788] mapped:38214 shmem:4202 pagetables:1664 [ 305.872119][T10788] sec_pagetables:0 bounce:0 [ 305.872119][T10788] kernel_misc_reclaimable:0 [ 305.872119][T10788] free:1276183 free_pcp:7668 free_cma:0 [ 305.937592][T10788] Node 0 active_anon:58908kB inactive_anon:0kB active_file:85612kB inactive_file:163008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152856kB dirty:752kB writeback:0kB shmem:15272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13328kB pagetables:6468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 305.974530][T10788] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 306.078453][T10788] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.108822][T10788] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 306.114836][T10788] Node 0 DMA32 free:1145588kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58908kB inactive_anon:0kB active_file:85612kB inactive_file:163008kB unevictable:1536kB writepending:752kB zspages:0kB present:3129332kB managed:2537128kB mlocked:0kB bounce:0kB free_pcp:30552kB local_pcp:16540kB free_cma:0kB [ 306.148715][T10788] lowmem_reserve[]: 0 0 1 1 1 [ 306.153828][T10788] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:24kB free_cma:0kB [ 306.185743][T10788] lowmem_reserve[]: 0 0 0 0 0 [ 306.190674][T10788] Node 1 Normal free:3943780kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.354793][T10788] lowmem_reserve[]: 0 0 0 0 0 [ 306.359657][ T1218] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 306.408965][T10788] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 306.445439][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.467595][T10788] Node 0 DMA32: 4913*4kB (UM) 2314*8kB (UME) 974*16kB (UME) 640*32kB (UME) 397*64kB (UM) 192*128kB (M) 42*256kB (UM) 23*512kB (UM) 11*1024kB (UME) 6*2048kB (UM) 238*4096kB (M) = 1145140kB [ 306.531705][ T1218] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.552744][ T1218] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 306.564421][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.578929][T10788] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 306.595010][T10788] Node 1 Normal: 11*4kB (UM) 15*8kB (UM) 14*16kB (UM) 7*32kB (UM) 4*64kB (UM) 6*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943780kB [ 306.624127][ T1218] usb 5-1: config 0 descriptor?? [ 306.691114][T10812] xt_hashlimit: size too large, truncated to 1048576 [ 307.071020][T10788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.087715][ T1218] pwc: Askey VC010 type 2 USB webcam detected. [ 307.107996][T10788] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 307.128783][T10788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.162483][ T29] audit: type=1400 audit(1777609127.271:580): avc: denied { name_bind } for pid=10782 comm="syz.7.662" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 307.202859][T10788] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 307.269759][T10788] 63518 total pagecache pages [ 307.281112][T10788] 0 pages in swap cache [ 307.289831][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.307582][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.321717][T10788] Free swap = 124996kB [ 307.345037][T10788] Total swap = 124996kB [ 307.349435][T10788] 2097051 pages RAM [ 307.382007][T10788] 0 pages HighMem/MovableOnly [ 307.411499][T10788] 430881 pages reserved [ 307.423234][T10828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.667'. [ 307.438052][T10788] 0 pages cma reserved [ 307.487190][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.570892][ T1218] pwc: recv_control_msg error -32 req 02 val 2b00 [ 307.596463][ T1218] pwc: recv_control_msg error -32 req 02 val 2700 [ 307.619150][ T1218] pwc: recv_control_msg error -32 req 02 val 2c00 [ 307.637829][ T1218] pwc: recv_control_msg error -32 req 04 val 1000 [ 307.852258][ T1218] pwc: recv_control_msg error -71 req 04 val 1400 [ 307.862260][ T1218] pwc: recv_control_msg error -71 req 02 val 2000 [ 307.890410][ T1218] pwc: recv_control_msg error -71 req 02 val 2100 [ 307.908119][T10837] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.918129][ T1218] pwc: recv_control_msg error -71 req 04 val 1500 [ 307.930391][ T1218] pwc: recv_control_msg error -71 req 02 val 2500 [ 307.945977][T10838] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.955922][ T1218] pwc: recv_control_msg error -71 req 02 val 2400 [ 307.974615][ T1218] pwc: recv_control_msg error -71 req 02 val 2600 [ 307.993640][ T1218] pwc: recv_control_msg error -71 req 02 val 2900 [ 308.023526][ T1218] pwc: recv_control_msg error -71 req 02 val 2800 [ 308.044580][ T1218] pwc: recv_control_msg error -71 req 04 val 1100 [ 308.067246][ T1218] pwc: recv_control_msg error -71 req 04 val 1200 [ 308.109784][ T1218] pwc: Registered as video103. [ 308.133254][ T1218] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 308.206299][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.236169][ T1218] usb 5-1: USB disconnect, device number 36 [ 308.663731][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.052935][T10907] netlink: 60 bytes leftover after parsing attributes in process `syz.5.671'. [ 309.145289][ T1218] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 309.295643][ T1218] usb 5-1: device descriptor read/64, error -71 [ 309.545271][ T1218] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 309.605330][ T5802] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 309.695401][ T1218] usb 5-1: device descriptor read/64, error -71 [ 309.726131][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.736231][ T29] audit: type=1400 audit(1777609129.871:581): avc: denied { create } for pid=10955 comm="syz.7.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.815762][ T1218] usb usb5-port1: attempt power cycle [ 309.935289][ T5802] usb 3-1: Using ep0 maxpacket: 16 [ 309.942417][ T5802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 309.967781][ T5802] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 309.994050][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.003272][ T5802] usb 3-1: Product: syz [ 310.007984][ T5802] usb 3-1: Manufacturer: syz [ 310.013068][ T29] audit: type=1400 audit(1777609130.141:582): avc: denied { ioctl } for pid=10955 comm="syz.7.676" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.047173][ T5802] usb 3-1: SerialNumber: syz [ 310.059609][ T5802] usb 3-1: config 0 descriptor?? [ 310.068625][ T5802] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 310.083170][ T5802] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 310.165270][ T1218] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 310.222279][ T1218] usb 5-1: device descriptor read/8, error -71 [ 310.475532][ T1218] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 310.505765][ T1218] usb 5-1: device descriptor read/8, error -71 [ 310.625652][ T1218] usb usb5-port1: unable to enumerate USB device [ 310.679978][ T5802] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 310.792908][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.140917][ T29] audit: type=1400 audit(1777609131.271:583): avc: denied { mounton } for pid=10911 comm="syz.2.673" path="/132/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 311.246352][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.298752][T11005] netlink: 'syz.3.681': attribute type 27 has an invalid length. [ 311.321566][T11005] netlink: 'syz.3.681': attribute type 3 has an invalid length. [ 311.338045][T11010] netlink: 24 bytes leftover after parsing attributes in process `syz.7.682'. [ 311.418556][T11012] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.809257][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.819027][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.437901][ T5802] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 312.535407][ T5802] em28xx 3-1:0.0: board has no eeprom [ 312.616260][ T5802] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 312.781057][ T5802] em28xx 3-1:0.0: dvb set to bulk mode. [ 312.787357][ T5716] em28xx 3-1:0.0: Binding DVB extension [ 312.805384][ T5802] usb 3-1: USB disconnect, device number 31 [ 312.836450][ T5802] em28xx 3-1:0.0: Disconnecting em28xx [ 312.876650][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.404863][ T5716] em28xx 3-1:0.0: Registering input extension [ 313.426777][ T5802] em28xx 3-1:0.0: Closing input extension [ 313.590438][ T5802] em28xx 3-1:0.0: Freeing device [ 313.766123][ T5707] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 313.897259][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.068046][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 314.120416][ T5707] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 314.204734][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.250556][ T5707] usb 5-1: config 0 descriptor?? [ 314.292659][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.314420][ T5707] as10x_usb: device has been detected [ 314.371990][ T5707] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 314.428032][ T5707] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 314.445593][ T5723] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 314.458870][ T5707] as10x_usb: error during firmware upload part1 [ 314.506624][ T5707] Registered device nBox DVB-T Dongle [ 314.547003][ T5707] usb 5-1: USB disconnect, device number 41 [ 314.901891][ T5723] usb 8-1: config index 0 descriptor too short (expected 5567, got 496) [ 314.944516][ T5723] usb 8-1: config 159 has too many interfaces: 138, using maximum allowed: 32 [ 314.959637][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.983659][ T5723] usb 8-1: config 159 contains an unexpected descriptor of type 0x1, skipping [ 314.983754][ T5707] Unregistered device nBox DVB-T Dongle [ 315.004140][ T5716] IPVS: starting estimator thread 0... [ 315.036029][ T5723] usb 8-1: config 159 has an invalid descriptor of length 0, skipping remainder of the config [ 315.072132][ T5707] as10x_usb: device has been disconnected [ 315.094871][ T5723] usb 8-1: config 159 has 0 interfaces, different from the descriptor's value: 138 [ 315.134064][ T5723] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=c5.e2 [ 315.143932][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.692'. [ 315.159039][T11154] IPVS: using max 44 ests per chain, 105600 per kthread [ 315.181654][ T5723] usb 8-1: New USB device strings: Mfr=67, Product=217, SerialNumber=205 [ 315.189155][T11162] bond0: entered promiscuous mode [ 315.203088][T11162] bond_slave_0: entered promiscuous mode [ 315.218227][ T5723] usb 8-1: Product: syz [ 315.218405][T11162] bond_slave_1: entered promiscuous mode [ 315.238349][ T5723] usb 8-1: Manufacturer: syz [ 315.251443][ T5723] usb 8-1: SerialNumber: syz [ 315.257169][T11162] batadv0: entered promiscuous mode [ 315.299460][T11162] debugfs: 'hsr1' already exists in 'hsr' [ 315.321839][T11162] Cannot create hsr debugfs directory [ 315.351296][T11162] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 315.585717][ T5716] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 315.768230][ T5716] usb 6-1: config 0 has an invalid interface number: 80 but max is 0 [ 315.791477][ T5716] usb 6-1: config 0 has no interface number 0 [ 315.802612][ T5716] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.59 [ 315.814104][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.923801][ T5716] usb 6-1: Product: syz [ 315.928529][ T5716] usb 6-1: Manufacturer: syz [ 315.933168][ T5716] usb 6-1: SerialNumber: syz [ 315.941087][ T5716] usb 6-1: config 0 descriptor?? [ 315.962586][T11119] can0: slcan on ptm0. [ 315.967585][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.429934][ T5723] usb 8-1: USB disconnect, device number 2 [ 316.537283][T11118] can0 (unregistered): slcan off ptm0. [ 316.578352][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 316.945114][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.955667][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.007325][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.023430][ T5716] usb 6-1: USB disconnect, device number 8 [ 317.044912][ T29] audit: type=1400 audit(1777609137.171:584): avc: denied { write } for pid=11214 comm="syz.2.697" lport=44176 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 317.435899][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.791439][ T29] audit: type=1400 audit(1777609137.921:585): avc: denied { bind } for pid=11246 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.891394][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.702'. [ 318.053690][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.086275][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.120779][ T5736] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 319.306293][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 319.315304][ T5736] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 319.333488][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.345272][ T5716] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 319.355299][T11312] warn_alloc: 2 callbacks suppressed [ 319.355310][T11312] syz.2.707: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 319.419001][T11312] CPU: 0 UID: 0 PID: 11312 Comm: syz.2.707 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.419035][T11312] Tainted: [L]=SOFTLOCKUP [ 319.419044][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.419055][T11312] Call Trace: [ 319.419062][T11312] [ 319.419070][T11312] dump_stack_lvl+0x100/0x190 [ 319.419100][T11312] warn_alloc.cold+0x95/0x1c1 [ 319.419125][T11312] ? __pfx_warn_alloc+0x10/0x10 [ 319.419166][T11312] ? stack_depot_save_flags+0x27/0x9d0 [ 319.419200][T11312] ? __lock_acquire+0x4a5/0x2630 [ 319.419235][T11312] ? xskq_create+0xfb/0x1d0 [ 319.419269][T11312] __vmalloc_node_range_noprof+0x136c/0x1630 [ 319.419308][T11312] ? xskq_create+0xfb/0x1d0 [ 319.419346][T11312] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 319.419383][T11312] ? xskq_create+0xfb/0x1d0 [ 319.419410][T11312] vmalloc_user_noprof+0x9e/0xe0 [ 319.419431][T11312] ? xskq_create+0xfb/0x1d0 [ 319.419471][T11312] xskq_create+0xfb/0x1d0 [ 319.419504][T11312] xsk_setsockopt+0x743/0xab0 [ 319.419535][T11312] ? __pfx_xsk_setsockopt+0x10/0x10 [ 319.419567][T11312] ? find_held_lock+0x2b/0x80 [ 319.419585][T11312] ? __fget_files+0x215/0x3d0 [ 319.419613][T11312] ? selinux_socket_setsockopt+0x6a/0x80 [ 319.419627][T11312] ? __pfx_xsk_setsockopt+0x10/0x10 [ 319.419645][T11312] do_sock_setsockopt+0xf3/0x1d0 [ 319.419660][T11312] __sys_setsockopt+0x195/0x220 [ 319.419681][T11312] __x64_sys_setsockopt+0xbd/0x160 [ 319.419699][T11312] ? do_syscall_64+0x90/0xf80 [ 319.419712][T11312] ? lockdep_hardirqs_on+0x78/0x100 [ 319.419725][T11312] do_syscall_64+0x10b/0xf80 [ 319.419737][T11312] ? clear_bhb_loop+0x40/0x90 [ 319.419751][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.419763][T11312] RIP: 0033:0x7f7b3499cdd9 [ 319.419774][T11312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.419787][T11312] RSP: 002b:00007f7b3578c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.419798][T11312] RAX: ffffffffffffffda RBX: 00007f7b34c16090 RCX: 00007f7b3499cdd9 [ 319.419807][T11312] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 319.419814][T11312] RBP: 00007f7b34a32d69 R08: 0000000000000004 R09: 0000000000000000 [ 319.419822][T11312] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.419829][T11312] R13: 00007f7b34c16128 R14: 00007f7b34c16090 R15: 00007ffd5d2b3b28 [ 319.419845][T11312] [ 319.425038][ T5736] usb 4-1: config 0 descriptor?? [ 319.693561][ T5736] as10x_usb: device has been detected [ 319.699220][T11312] Mem-Info: [ 319.699862][ T5736] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 319.710710][ T5716] usb 8-1: unable to get BOS descriptor or descriptor too short [ 319.719355][T11312] active_anon:27273 inactive_anon:0 isolated_anon:0 [ 319.719355][T11312] active_file:21403 inactive_file:40810 isolated_file:0 [ 319.719355][T11312] unevictable:768 dirty:393 writeback:0 [ 319.719355][T11312] slab_reclaimable:11814 slab_unreclaimable:103841 [ 319.719355][T11312] mapped:45847 shmem:15663 pagetables:1749 [ 319.719355][T11312] sec_pagetables:0 bounce:0 [ 319.719355][T11312] kernel_misc_reclaimable:0 [ 319.719355][T11312] free:1256882 free_pcp:12036 free_cma:0 [ 319.802487][ T5736] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 319.808565][ T5716] usb 8-1: not running at top speed; connect to a high speed hub [ 319.835204][T11312] Node 0 active_anon:109492kB inactive_anon:0kB active_file:85612kB inactive_file:163028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:183388kB dirty:1572kB writeback:0kB shmem:61316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13556kB pagetables:6808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 319.883347][ T5716] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.916509][ T5716] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.966442][T11312] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 320.000608][ T5716] usb 8-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 320.014780][ T5716] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.028306][ T5736] as10x_usb: error during firmware upload part1 [ 320.045650][ T5736] Registered device nBox DVB-T Dongle [ 320.053342][ T5736] usb 4-1: USB disconnect, device number 33 [ 320.069263][ T5716] usb 8-1: Product: syz [ 320.088595][ T5716] usb 8-1: Manufacturer: syz [ 320.124738][ T5716] usb 8-1: SerialNumber: syz [ 320.130681][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.155546][T11312] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.222516][T11312] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 320.234163][T11312] Node 0 DMA32 free:1068184kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109992kB inactive_anon:0kB active_file:85612kB inactive_file:163028kB unevictable:1536kB writepending:1572kB zspages:0kB present:3129332kB managed:2537128kB mlocked:0kB bounce:0kB free_pcp:55248kB local_pcp:24192kB free_cma:0kB [ 320.282594][T11312] lowmem_reserve[]: 0 0 1 1 1 [ 320.291985][T11312] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:8kB free_cma:0kB [ 320.329787][T11312] lowmem_reserve[]: 0 0 0 0 0 [ 320.359499][T11312] Node 1 Normal free:3943780kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.362917][ T5736] Unregistered device nBox DVB-T Dongle [ 320.397275][T11312] lowmem_reserve[]: 0 0 0 0 0 [ 320.410366][T11312] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 320.449403][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.476178][ T5736] as10x_usb: device has been disconnected [ 320.488729][T11312] Node 0 DMA32: 3949*4kB (U) 2046*8kB (UE) 642*16kB (UE) 3*32kB (UME) 60*64kB (UM) 196*128kB (UM) 41*256kB (M) 16*512kB (UM) 9*1024kB (UME) 3*2048kB (UM) 235*4096kB (UM) = 1068068kB [ 320.569462][T11312] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 320.606579][T11312] Node 1 Normal: 11*4kB (UM) 15*8kB (UM) 14*16kB (UM) 7*32kB (UM) 4*64kB (UM) 6*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943780kB [ 320.652860][T11312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.671537][T11312] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.691452][T11312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.711731][T11312] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.730757][T11312] 81981 total pagecache pages [ 320.740845][T11312] 0 pages in swap cache [ 320.755235][ T1218] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 320.775483][T11312] Free swap = 124996kB [ 320.790893][T11312] Total swap = 124996kB [ 320.798673][T11312] 2097051 pages RAM [ 320.820703][T11312] 0 pages HighMem/MovableOnly [ 320.825653][T11312] 430881 pages reserved [ 320.855925][T11312] 0 pages cma reserved [ 320.930535][ T1218] usb 6-1: Using ep0 maxpacket: 32 [ 320.946704][ T1218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.969614][ T1218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.010431][ T1218] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 321.029955][ T1218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.044338][ T1218] usb 6-1: config 0 descriptor?? [ 321.063305][ T1218] hub 6-1:0.0: USB hub found [ 321.171729][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.325269][ T5707] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 321.407973][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.426001][ T1218] hub 6-1:0.0: 26 ports detected [ 321.439495][ T1218] hub 6-1:0.0: insufficient power available to use all downstream ports [ 321.497335][ T5707] usb 3-1: config index 0 descriptor too short (expected 5567, got 496) [ 321.514381][ T5707] usb 3-1: config 159 has too many interfaces: 138, using maximum allowed: 32 [ 321.541924][ T5707] usb 3-1: config 159 contains an unexpected descriptor of type 0x1, skipping [ 321.568619][ T5707] usb 3-1: config 159 has an invalid descriptor of length 0, skipping remainder of the config [ 321.601726][ T5707] usb 3-1: config 159 has 0 interfaces, different from the descriptor's value: 138 [ 321.633932][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.709'. [ 321.660588][ T5707] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=c5.e2 [ 321.688645][ T5707] usb 3-1: New USB device strings: Mfr=67, Product=217, SerialNumber=205 [ 321.729201][ T5707] usb 3-1: Product: syz [ 321.745102][ T5707] usb 3-1: Manufacturer: syz [ 321.747266][ T5716] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.764370][ T5707] usb 3-1: SerialNumber: syz [ 321.787864][ T5716] usb 8-1: MIDIStreaming interface descriptor not found [ 322.058353][ T5716] usb 8-1: USB disconnect, device number 3 [ 322.228826][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.713'. [ 322.242197][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.291297][T11399] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.713'. [ 322.367304][ T6094] udevd[6094]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.616390][ T1218] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 322.644980][ T1218] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 322.806669][ T29] audit: type=1400 audit(1777609142.931:586): avc: denied { append } for pid=11414 comm="syz.3.714" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 322.979505][T11360] can0: slcan on ptm0. [ 323.016539][ T1218] usbhid 6-1:0.0: can't add hid device: -32 [ 323.034011][ T1218] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 323.196762][ T1218] usb 6-1: USB disconnect, device number 9 [ 323.269239][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.492772][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.883167][ T29] audit: type=1400 audit(1777609144.011:587): avc: denied { getopt } for pid=11450 comm="syz.3.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 323.930984][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.7.717'. [ 324.329553][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.431315][T11455] cgroup2: Unknown parameter 'euid' [ 324.461626][T11455] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 324.500062][ T29] audit: type=1400 audit(1777609144.631:588): avc: denied { setopt } for pid=11448 comm="syz.7.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 324.660545][ T5707] usb 3-1: USB disconnect, device number 32 [ 324.725479][ T5716] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 324.746504][T11416] can0 (unregistered): slcan off ptm0. [ 324.753618][ T1218] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 324.895398][ T5716] usb 5-1: Using ep0 maxpacket: 16 [ 325.075360][ T1218] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 325.098721][ T1218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.236047][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.720'. [ 325.244947][T11493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.720'. [ 325.318621][ T1218] usb 6-1: Product: syz [ 325.337957][ T1218] usb 6-1: Manufacturer: syz [ 325.352980][ T5716] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 325.356379][ T1218] usb 6-1: SerialNumber: syz [ 325.393088][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.409836][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.414717][ T1218] usb 6-1: config 0 descriptor?? [ 325.434331][ T5716] usb 5-1: Product: syz [ 325.464968][ T5716] usb 5-1: Manufacturer: syz [ 325.482979][ T5716] usb 5-1: SerialNumber: syz [ 325.744527][ T1218] usb 6-1: USB disconnect, device number 10 [ 325.848115][ T29] audit: type=1400 audit(1777609145.971:589): avc: denied { write } for pid=11519 comm="syz.3.723" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 325.932494][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.998360][ T29] audit: type=1400 audit(1777609146.131:590): avc: denied { write } for pid=11462 comm="syz.5.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.266329][ T1218] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 326.398333][ T1218] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 326.450920][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.527053][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.936606][ T5716] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 326.999040][ T5716] usb 5-1: USB disconnect, device number 42 [ 327.088193][ T29] audit: type=1400 audit(1777609147.221:591): avc: denied { setopt } for pid=11563 comm="syz.5.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 327.498841][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.806639][ T4979] block nbd1: Possible stuck request ffff888028d7e000: control (read@0,1024B). Runtime 120 seconds [ 327.817488][ T4979] block nbd1: Possible stuck request ffff888028d7e1c0: control (read@1024,1024B). Runtime 120 seconds [ 327.828524][ T4979] block nbd1: Possible stuck request ffff888028d7e380: control (read@2048,1024B). Runtime 120 seconds [ 327.839629][ T4979] block nbd1: Possible stuck request ffff888028d7e540: control (read@3072,1024B). Runtime 120 seconds [ 327.878098][ T29] audit: type=1326 audit(1777609148.011:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3499cdd9 code=0x7ffc0000 [ 328.035063][ T29] audit: type=1326 audit(1777609148.011:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3499cdd9 code=0x7ffc0000 [ 328.067811][ T29] audit: type=1326 audit(1777609148.041:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3499cdd9 code=0x7ffc0000 [ 328.108614][ T29] audit: type=1326 audit(1777609148.041:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f7b3499cdd9 code=0x7ffc0000 [ 328.136839][ T29] audit: type=1326 audit(1777609148.041:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3499cdd9 code=0x7ffc0000 [ 328.464391][ T29] audit: type=1326 audit(1777609148.041:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3499cdd9 code=0x7ffc0000 [ 328.498653][ T29] audit: type=1326 audit(1777609148.041:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3499cdd9 code=0x7ffc0000 [ 328.534340][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.553012][ T29] audit: type=1326 audit(1777609148.041:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3499cdd9 code=0x7ffc0000 [ 328.580215][ T29] audit: type=1326 audit(1777609148.041:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b3499cdd9 code=0x7ffc0000 [ 328.620224][ T29] audit: type=1326 audit(1777609148.041:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3499cdd9 code=0x7ffc0000 [ 328.854977][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 329.202394][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.7.739'. [ 329.215322][ T5723] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 329.251323][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.7.739'. [ 329.355245][ T5723] usb 4-1: device descriptor read/64, error -71 [ 329.566003][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.574145][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.606070][ T5723] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 329.745439][ T5723] usb 4-1: device descriptor read/64, error -71 [ 330.045591][ T5723] usb usb4-port1: attempt power cycle [ 330.342301][T11662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 330.360781][T11662] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 330.465310][ T5723] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 330.485781][ T5723] usb 4-1: device descriptor read/8, error -71 [ 330.741581][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.865247][ T5723] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 331.264894][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.273080][ T5707] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 331.347457][ T5723] usb 4-1: device descriptor read/8, error -71 [ 331.513536][ T5723] usb usb4-port1: unable to enumerate USB device [ 331.580437][ T5707] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.593525][ T5707] usb 3-1: config 0 has no interface number 0 [ 331.828786][T11721] overlayfs: missing 'lowerdir' [ 331.838905][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.121615][ T5707] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 332.148604][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.182554][ T5707] usb 3-1: Product: syz [ 332.189434][ T5707] usb 3-1: Manufacturer: syz [ 332.201126][ T5707] usb 3-1: SerialNumber: syz [ 332.241428][ T5707] usb 3-1: config 0 descriptor?? [ 332.353023][ T5707] usb 3-1: selecting invalid altsetting 1 [ 332.363672][T11662] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 332.400421][ T5707] dvb_ttusb_budget: ttusb_init_controller: error [ 332.416422][T11662] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 332.430304][ T5707] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 332.457637][ T5802] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 332.599894][ T5707] DVB: Unable to find symbol stv0299_attach() [ 332.606260][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.635475][ T5802] usb 8-1: Using ep0 maxpacket: 8 [ 332.653628][ T5802] usb 8-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 332.676229][ T5802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.695321][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.752'. [ 332.708971][ T5802] usb 8-1: Product: syz [ 332.717309][ T5802] usb 8-1: Manufacturer: syz [ 332.717377][ T5707] DVB: Unable to find symbol tda8083_attach() [ 332.721914][ T5802] usb 8-1: SerialNumber: syz [ 332.740661][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.752'. [ 332.756775][ T5707] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 332.799472][ T5707] usb 3-1: USB disconnect, device number 33 [ 332.845695][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.425212][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.754'. [ 333.445933][T11784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.754'. [ 333.895492][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.241346][ T5802] mxuport 8-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 334.289533][ T5802] mxuport 8-1:254.0: probe with driver mxuport failed with error -5 [ 334.323857][ T5802] usb 8-1: USB disconnect, device number 4 [ 334.486172][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'. [ 334.669237][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.755'. [ 334.929437][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.985493][ T5802] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 335.195400][ T5707] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 335.217005][ T5802] usb 6-1: Using ep0 maxpacket: 16 [ 335.225786][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 335.225801][ T29] audit: type=1400 audit(1777609155.361:753): avc: denied { bind } for pid=11826 comm="syz.7.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 335.278752][ T5802] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.411263][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.422201][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.431941][ T5802] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 335.444639][ T5707] usb 3-1: Using ep0 maxpacket: 8 [ 335.451640][ T5707] usb 3-1: config 3 has an invalid interface number: 175 but max is 0 [ 335.484271][ T5802] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.756741][ T5802] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 335.959540][ T5802] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 335.967763][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.977997][ T5707] usb 3-1: config 3 has no interface number 0 [ 335.997988][ T5802] usb 6-1: Manufacturer: syz [ 336.044622][ T5707] usb 3-1: config 3 interface 175 has no altsetting 0 [ 336.055247][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.299413][ T5707] usb 3-1: New USB device found, idVendor=095a, idProduct=3003, bcdDevice=32.bd [ 336.339624][ T29] audit: type=1400 audit(1777609156.291:754): avc: denied { bind } for pid=11835 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.409735][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.410808][ T5802] usb 6-1: config 0 descriptor?? [ 336.431374][ T5707] usb 3-1: Product: syz [ 336.440835][ T5707] usb 3-1: Manufacturer: syz [ 336.512210][ T5707] usb 3-1: SerialNumber: syz [ 336.736308][ T5802] rc_core: IR keymap rc-hauppauge not found [ 336.759627][ T5802] Registered IR keymap rc-empty [ 336.760334][ T5707] kaweth 3-1:3.175: couldn't find required endpoints [ 336.776195][T11845] syzkaller0: entered promiscuous mode [ 336.784836][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.801338][T11845] syzkaller0: entered allmulticast mode [ 336.807737][ T5707] usb 3-1: USB disconnect, device number 34 [ 336.839111][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.172045][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.200282][ T5802] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 337.307474][ T5802] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 337.330123][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.365376][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.865276][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.871808][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.884612][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.903317][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.903520][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.934456][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.944214][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.985415][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.025574][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.048655][T11881] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 338.130299][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 338.149428][T11882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.767'. [ 338.984138][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 339.994409][ T5716] net_ratelimit: 1 callbacks suppressed [ 339.994429][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.045300][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 340.065251][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 340.089224][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 340.098658][ T29] audit: type=1400 audit(1777609160.231:755): avc: denied { ioctl } for pid=11890 comm="syz.4.768" path="socket:[26474]" dev="sockfs" ino=26474 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 340.169449][ T5802] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 340.178643][ T5802] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 340.568527][ T5802] usb 6-1: USB disconnect, device number 11 [ 340.851824][T11924] netlink: 68 bytes leftover after parsing attributes in process `syz.7.774'. [ 340.919005][T11937] netlink: 'syz.2.776': attribute type 1 has an invalid length. [ 340.937599][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.942758][T11923] netlink: 68 bytes leftover after parsing attributes in process `syz.5.773'. [ 341.005566][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.080422][T11937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.182613][ T5797] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 341.191307][ T29] audit: type=1400 audit(1777609161.281:756): avc: denied { setcurrent } for pid=11922 comm="syz.5.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 341.218341][T11954] bond2: (slave geneve2): making interface the new active one [ 341.375676][ T5797] usb 8-1: Using ep0 maxpacket: 8 [ 341.560827][T11954] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 341.592373][ T5797] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 341.611285][ T5797] usb 8-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 341.622027][ T5797] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.642222][ T5797] usb 8-1: Product: syz [ 341.646762][ T5797] usb 8-1: Manufacturer: syz [ 341.651525][ T5797] usb 8-1: SerialNumber: syz [ 341.876218][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 341.899069][T11998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.781'. [ 342.046538][ T990] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 342.109168][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.126010][ T5797] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 342.221160][ T5797] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 342.286714][ T990] usb 3-1: Using ep0 maxpacket: 16 [ 342.357292][ T990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.422428][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.519713][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 342.526167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.612520][ T990] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 342.679593][ T990] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.701778][ T29] audit: type=1400 audit(1777609162.811:757): avc: denied { write } for pid=12004 comm="syz.5.782" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 342.795790][ T990] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.826415][ T5797] usb 8-1: USB disconnect, device number 5 [ 342.857642][ T990] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.880503][ T990] usb 3-1: Manufacturer: syz [ 343.257408][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.265826][ T990] usb 3-1: config 0 descriptor?? [ 343.318356][ T6498] udevd[6498]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.500234][ T29] audit: type=1400 audit(1777609163.631:758): avc: denied { bind } for pid=12043 comm="syz.7.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 343.822534][T12050] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.096782][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.185318][ T990] rc_core: IR keymap rc-hauppauge not found [ 344.191377][ T990] Registered IR keymap rc-empty [ 344.200762][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 344.227516][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 344.254466][ T990] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 344.282449][ T990] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 344.324592][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.444640][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 344.473304][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 345.056782][ T5716] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 345.472750][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 345.612012][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.627394][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 345.648801][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 345.719305][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 345.726478][T12076] netlink: 'syz.7.791': attribute type 1 has an invalid length. [ 345.777181][ T5716] usb 6-1: Using ep0 maxpacket: 8 [ 346.163846][T12076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.173801][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 346.195901][ T5716] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 346.242960][T12079] bond1: (slave geneve2): making interface the new active one [ 346.319861][T12079] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 346.320769][ T5716] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.341001][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 346.391833][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 346.426462][ T5716] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.516151][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 346.567288][ T5716] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.619939][ T5716] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.805838][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.818265][ T990] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 346.831849][ T5716] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.841061][ T990] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 346.854543][ T990] usb 3-1: USB disconnect, device number 35 [ 346.860475][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.061042][ T5802] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 347.147006][ T5716] usb 6-1: usb_control_msg returned -32 [ 347.241676][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.275602][ T5716] usbtmc 6-1:16.0: can't read capabilities [ 347.277950][T12152] serio: Serial port ttyS3 [ 347.316296][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.328591][ T5802] usb 4-1: Using ep0 maxpacket: 16 [ 347.341000][ T29] audit: type=1400 audit(1777609167.230:759): avc: denied { bind } for pid=12149 comm="syz.7.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.365142][T12158] syzkaller0: entered promiscuous mode [ 347.385256][T12158] syzkaller0: entered allmulticast mode [ 347.393720][ T5802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.403919][ T990] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 347.417385][ T29] audit: type=1400 audit(1777609167.267:760): avc: denied { write } for pid=12149 comm="syz.7.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.439397][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.471284][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 347.493684][ T5802] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 347.526460][ T5802] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.554563][ T5802] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 347.564674][ T5802] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 347.573580][ T5802] usb 4-1: Manufacturer: syz [ 347.605144][ T5802] usb 4-1: config 0 descriptor?? [ 347.638651][ T990] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 347.657211][ T990] usb 3-1: config 0 has no interface number 0 [ 347.669536][ T990] usb 3-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 347.686557][ T990] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 347.698436][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.708288][ T990] usb 3-1: Product: syz [ 347.712938][ T990] usb 3-1: Manufacturer: syz [ 347.719393][ T990] usb 3-1: SerialNumber: syz [ 347.742447][ T5707] usb 6-1: USB disconnect, device number 12 [ 347.744438][ T990] usb 3-1: config 0 descriptor?? [ 347.772147][T12124] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 347.816125][ T990] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 347.927507][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.010392][ T5802] rc_core: IR keymap rc-hauppauge not found [ 348.019545][ T5802] Registered IR keymap rc-empty [ 348.030722][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.054457][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.098786][T12073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.107485][T12073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.119538][ T5802] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 348.146114][ T5716] usb 3-1: USB disconnect, device number 36 [ 348.155005][ T136] usb 3-1: Failed to submit usb control message: -71 [ 348.170014][ T5802] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 348.183539][ T136] usb 3-1: unable to send the bmi data to the device: -71 [ 348.204132][ T136] usb 3-1: unable to get target info from device [ 348.215641][ T136] usb 3-1: could not get target info (-71) [ 348.234144][ T136] usb 3-1: could not probe fw (-71) [ 348.326780][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.368827][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.433206][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.464354][T12200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.472843][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.512908][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.556242][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.594443][T12080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.603407][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.617605][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.632258][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.641767][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.656050][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.684231][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.737514][T12080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.771500][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.815782][ T5802] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.882002][ T5802] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 348.910845][ T5802] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 348.937392][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 349.018259][T12217] netlink: 88 bytes leftover after parsing attributes in process `syz.2.801'. [ 349.063745][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.303276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 349.313966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 349.356692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 350.894160][ T5802] usb 4-1: USB disconnect, device number 38 [ 351.684896][ T5802] net_ratelimit: 1 callbacks suppressed [ 351.684914][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.851991][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 351.900178][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 352.017890][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.025482][T12270] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.231413][ T5716] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 352.238949][ T5802] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 352.406289][ T5716] usb 8-1: unable to get BOS descriptor or descriptor too short [ 352.416456][ T5802] usb 4-1: config 0 has no interfaces? [ 352.423652][ T5707] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 352.424618][ T5716] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 352.451825][ T5802] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 352.481082][ T5802] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 352.502133][ T5716] usb 8-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 352.527579][ T5802] usb 4-1: Manufacturer: syz [ 352.533414][ T5716] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.553285][ T5802] usb 4-1: config 0 descriptor?? [ 352.565363][ T5716] usb 8-1: Product: syz [ 352.587126][ T5716] usb 8-1: Manufacturer: syz [ 352.604724][ T5716] usb 8-1: SerialNumber: syz [ 352.642299][ T5707] usb 3-1: Using ep0 maxpacket: 8 [ 352.672687][ T5707] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 352.700605][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.729872][ T5707] usb 3-1: Product: syz [ 352.744250][ T990] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 352.753556][ T5707] usb 3-1: Manufacturer: syz [ 352.773479][ T5707] usb 3-1: SerialNumber: syz [ 352.787464][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.816625][ T5707] usb 3-1: config 0 descriptor?? [ 352.852067][ T5707] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 352.891658][ T5707] pctv452e: pctv452e_power_ctrl: 1 [ 352.891658][ T5707] [ 352.918398][T12274] netlink: 'syz.3.809': attribute type 27 has an invalid length. [ 352.929211][ T5707] usb 3-1: selecting invalid altsetting 3 [ 352.933112][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 352.966379][ T5707] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 352.966379][ T5707] [ 352.971475][ T990] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 353.021327][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.041393][ T5707] dvb-usb: bulk message failed: -22 (5/0) [ 353.138810][ T990] usb 5-1: config 0 descriptor?? [ 353.229335][ T990] as10x_usb: device has been detected [ 353.243004][ T990] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 353.296904][ T5707] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.301299][ T990] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 353.389243][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.394015][ T990] as10x_usb: error during firmware upload part1 [ 353.426318][ T5707] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 353.452323][ T990] Registered device nBox DVB-T Dongle [ 353.453751][ T5707] usb 3-1: media controller created [ 353.479412][ T990] usb 5-1: USB disconnect, device number 43 [ 353.502605][ T5707] dvb-usb: bulk message failed: -22 (8/0) [ 353.539994][ T5707] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 353.598193][ T5707] dvb-usb: MAC address reading failed. [ 353.617520][ T990] Unregistered device nBox DVB-T Dongle [ 353.644738][ T990] as10x_usb: device has been disconnected [ 353.716889][ T5707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.899383][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.932274][ T5716] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 353.960216][ T29] audit: type=1400 audit(1777609173.425:761): avc: denied { setcheckreqprot } for pid=12372 comm="syz.2.816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 354.006960][ T5716] usb 8-1: USB disconnect, device number 6 [ 354.019542][T12375] netlink: 44 bytes leftover after parsing attributes in process `syz.2.816'. [ 354.059579][ T6498] udevd[6498]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.235432][ T5707] DVB: Unable to find symbol stb0899_attach() [ 354.266644][ T5707] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 354.398615][T12391] netlink: 20 bytes leftover after parsing attributes in process `syz.5.817'. [ 354.487147][ T5707] rc_core: IR keymap rc-tt-1500 not found [ 354.516627][ T5707] Registered IR keymap rc-empty [ 354.543378][ T5707] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 354.600124][ T5707] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input26 [ 354.634982][ T5707] dvb-usb: schedule remote query interval to 100 msecs. [ 354.655594][ T5707] pctv452e: pctv452e_power_ctrl: 0 [ 354.655594][ T5707] [ 354.674799][ T5707] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 354.727893][ T5707] usb 3-1: USB disconnect, device number 37 [ 354.753993][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.787651][ T5736] dvb-usb: bulk message failed: -22 (4/0) [ 354.819736][ T5736] dvb-usb: error -22 while querying for an remote control event. [ 354.822155][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.899914][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.010889][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.074571][ T5707] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 355.195811][ T5736] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 355.265183][ T1218] usb 4-1: USB disconnect, device number 39 [ 355.298561][T12432] netlink: 'syz.5.821': attribute type 61 has an invalid length. [ 355.405147][ T5736] usb 5-1: Using ep0 maxpacket: 32 [ 355.445177][ T5736] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 355.474141][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.482434][ T5707] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 355.619011][ T5736] usb 5-1: Product: syz [ 355.635128][ T5736] usb 5-1: Manufacturer: syz [ 355.768515][ T5707] usb 3-1: Using ep0 maxpacket: 32 [ 356.090054][ T5736] usb 5-1: SerialNumber: syz [ 356.128493][ T5707] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 356.142865][T12436] input: syz1 as /devices/virtual/input/input27 [ 356.151282][ T5736] usb 5-1: config 0 descriptor?? [ 356.151595][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.245338][ T5707] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 356.291945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 356.320936][ T5707] usb 3-1: config 0 interface 0 has no altsetting 0 [ 356.441780][ T5707] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 356.478482][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.494750][ T5736] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 044 [ 356.551229][ T5707] usb 3-1: config 0 descriptor?? [ 356.966054][T12463] capability: warning: `syz.7.824' uses 32-bit capabilities (legacy support in use) [ 357.058385][ T5707] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 357.092583][ T5707] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 357.120131][ T5707] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 357.144285][ T5707] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 357.173513][ T5707] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 357.202356][T12468] i2c i2c-1: failure reading data [ 357.225689][ T5707] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 357.237702][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.338110][ T5707] corsair-cpro 0003:1B1C:0C10.000D: probe with driver corsair-cpro failed with error -90 [ 357.408120][ T990] usb 5-1: USB disconnect, device number 44 [ 357.493296][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 357.940705][T12505] FAULT_INJECTION: forcing a failure. [ 357.940705][T12505] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 357.953895][T12505] CPU: 0 UID: 0 PID: 12505 Comm: syz.7.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.953926][T12505] Tainted: [L]=SOFTLOCKUP [ 357.953933][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.953945][T12505] Call Trace: [ 357.953954][T12505] [ 357.953963][T12505] dump_stack_lvl+0x100/0x190 [ 357.953993][T12505] should_fail_ex.cold+0x5/0xa [ 357.954022][T12505] _copy_from_user+0x2e/0xd0 [ 357.954051][T12505] __keyctl_dh_compute+0x1b6/0x10d0 [ 357.954080][T12505] ? rcu_is_watching+0x12/0xc0 [ 357.954111][T12505] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 357.954133][T12505] ? lockdep_hardirqs_on+0x78/0x100 [ 357.954156][T12505] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 357.954187][T12505] ? trace_sched_exit_tp+0x11c/0x160 [ 357.954232][T12505] ? __pfx___schedule+0x10/0x10 [ 357.954254][T12505] ? preempt_schedule_irq+0x7b/0x90 [ 357.954279][T12505] keyctl_dh_compute+0xd9/0x140 [ 357.954308][T12505] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 357.954334][T12505] ? irqentry_exit+0x246/0x790 [ 357.954377][T12505] __do_sys_keyctl+0x464/0x5a0 [ 357.954401][T12505] do_syscall_64+0x10b/0xf80 [ 357.954423][T12505] ? clear_bhb_loop+0x40/0x90 [ 357.954448][T12505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.954469][T12505] RIP: 0033:0x7f5907b9cdd9 [ 357.954486][T12505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.954506][T12505] RSP: 002b:00007f5908a70028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 357.954526][T12505] RAX: ffffffffffffffda RBX: 00007f5907e16180 RCX: 00007f5907b9cdd9 [ 357.954540][T12505] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 357.954553][T12505] RBP: 00007f5908a70090 R08: 0000000000000000 R09: 0000000000000000 [ 357.954565][T12505] R10: 0000000000000053 R11: 0000000000000246 R12: 0000000000000001 [ 357.954578][T12505] R13: 00007f5907e16218 R14: 00007f5907e16180 R15: 00007ffda4d8e178 [ 357.954606][T12505] [ 358.279962][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.344093][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.665153][ T5802] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 358.845986][ T5802] usb 6-1: Using ep0 maxpacket: 16 [ 358.859946][ T4979] block nbd1: Possible stuck request ffff888028d7e000: control (read@0,1024B). Runtime 150 seconds [ 358.865036][ T5802] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.870743][ T4979] block nbd1: Possible stuck request ffff888028d7e1c0: control (read@1024,1024B). Runtime 150 seconds [ 358.870802][ T4979] block nbd1: Possible stuck request ffff888028d7e380: control (read@2048,1024B). Runtime 150 seconds [ 358.896507][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.903742][ T4979] block nbd1: Possible stuck request ffff888028d7e540: control (read@3072,1024B). Runtime 150 seconds [ 358.992108][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 359.040229][ T5802] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 359.053849][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 359.070424][ T5708] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 359.093682][ T5802] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.151947][ T5802] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 359.198653][ T5802] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 359.225593][ T5802] usb 6-1: Manufacturer: syz [ 359.248143][ T5802] usb 6-1: config 0 descriptor?? [ 359.264088][ T5708] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 359.292300][ T5708] usb 8-1: config 0 has no interface number 0 [ 359.334328][ T5708] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.379875][ T5708] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 359.416482][ T5708] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.430208][ T990] usb 3-1: USB disconnect, device number 38 [ 359.449326][ T5708] usb 8-1: Product: syz [ 359.471984][ T5708] usb 8-1: Manufacturer: syz [ 359.483983][ T5708] usb 8-1: SerialNumber: syz [ 359.499633][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.531717][ T5708] usb 8-1: config 0 descriptor?? [ 359.579339][ T5708] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 359.681042][ T5802] rc_core: IR keymap rc-hauppauge not found [ 359.697408][ T5802] Registered IR keymap rc-empty [ 359.722702][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 359.768124][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 359.814538][ T5802] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 359.881847][ T5802] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input28 [ 359.934824][ T29] audit: type=1400 audit(1777609179.021:762): avc: denied { name_bind } for pid=12506 comm="syz.5.829" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 359.999772][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 360.036336][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 360.110066][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 360.127436][T12520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.132520][ T29] audit: type=1326 audit(1777609179.199:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12506 comm="syz.5.829" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f064939cdd9 code=0x0 [ 360.182142][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 360.197306][T12520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.225368][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 360.369050][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 360.395765][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 360.413080][ T29] audit: type=1400 audit(1777609179.470:764): avc: denied { map } for pid=12518 comm="syz.7.831" path="socket:[26948]" dev="sockfs" ino=26948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.441828][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 360.496003][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 360.504303][ T29] audit: type=1400 audit(1777609179.470:765): avc: denied { read } for pid=12518 comm="syz.7.831" path="socket:[26948]" dev="sockfs" ino=26948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.545099][ T5802] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 360.589694][ T5802] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 360.621422][ T5802] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 360.653083][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.699360][ T5802] usb 6-1: USB disconnect, device number 13 [ 361.214772][ T5708] usb 8-1: USB disconnect, device number 7 [ 361.278413][ T5708] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 361.633793][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.765276][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.857093][ T29] audit: type=1400 audit(1777609180.818:766): avc: denied { read } for pid=12616 comm="syz.5.837" path="socket:[28421]" dev="sockfs" ino=28421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 361.994296][ T29] audit: type=1400 audit(1777609180.865:767): avc: denied { write } for pid=12616 comm="syz.5.837" path="socket:[28422]" dev="sockfs" ino=28422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 362.757057][ T1218] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 362.875429][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.949475][ T1218] usb 5-1: Using ep0 maxpacket: 32 [ 362.973770][ T1218] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 363.006138][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.038535][ T1218] usb 5-1: Product: syz [ 363.055265][ T1218] usb 5-1: Manufacturer: syz [ 363.076113][ T1218] usb 5-1: SerialNumber: syz [ 363.097970][ T1218] usb 5-1: config 0 descriptor?? [ 363.174099][ T5708] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 363.323411][ T5708] usb 6-1: device descriptor read/64, error -71 [ 363.336623][ T1218] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 045 [ 363.626015][ T5708] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 363.855294][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.987432][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.035872][T12674] i2c i2c-1: failure reading data [ 364.042057][T12669] netlink: 'syz.3.845': attribute type 1 has an invalid length. [ 364.050152][ T5708] usb 6-1: device descriptor read/64, error -71 [ 364.177574][T12669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.184473][ T5708] usb usb6-port1: attempt power cycle [ 364.256277][ T5716] usb 5-1: USB disconnect, device number 45 [ 364.324825][T12710] vlan2: entered allmulticast mode [ 364.331967][T12710] bond1: entered allmulticast mode [ 364.342182][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.401901][T12720] bond1: (slave geneve2): making interface the new active one [ 364.409828][T12720] geneve2: entered allmulticast mode [ 364.416814][T12720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.426355][T12720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.437662][T12720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.448670][T12720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.457026][T12720] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 364.520664][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.574859][ T5708] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 364.629227][ T5708] usb 6-1: device descriptor read/8, error -71 [ 364.890872][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.150813][ T5708] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 365.188629][ T5708] usb 6-1: device descriptor read/8, error -71 [ 365.311407][ T5708] usb usb6-port1: unable to enumerate USB device [ 365.408214][ T29] audit: type=1400 audit(1777609184.140:768): avc: denied { mount } for pid=12733 comm="syz.7.848" name="/" dev="hugetlbfs" ino=27035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 365.463946][T12759] netlink: 168 bytes leftover after parsing attributes in process `syz.2.853'. [ 365.908580][ T29] audit: type=1400 audit(1777609184.598:769): avc: denied { set_context_mgr } for pid=12768 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 365.995048][T12769] binder: 12768:12769 ioctl 4018620d 200000000040 returned -22 [ 366.057368][T12769] binder: 12768:12769 ioctl c0306201 2000000003c0 returned -14 [ 366.089956][T12769] binder: 12768:12769 ioctl c0306201 2000000001c0 returned -14 [ 366.166597][ T5707] kernel read not supported for file /dsp (pid: 5707 comm: kworker/0:3) [ 366.508059][ T5707] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 366.520665][T12791] netlink: 'syz.7.860': attribute type 1 has an invalid length. [ 366.637999][T12791] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.691192][ T5707] usb 6-1: config index 0 descriptor too short (expected 5567, got 496) [ 366.717301][T12797] vlan2: entered allmulticast mode [ 366.722597][ T5707] usb 6-1: config 159 has too many interfaces: 138, using maximum allowed: 32 [ 366.750539][ T5707] usb 6-1: config 159 contains an unexpected descriptor of type 0x1, skipping [ 366.772964][T12797] bond2: entered allmulticast mode [ 366.786340][ T5707] usb 6-1: config 159 has an invalid descriptor of length 0, skipping remainder of the config [ 366.824659][ T5707] usb 6-1: config 159 has 0 interfaces, different from the descriptor's value: 138 [ 366.869924][ T5707] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=c5.e2 [ 366.907942][ T5708] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 366.915741][ T5707] usb 6-1: New USB device strings: Mfr=67, Product=217, SerialNumber=205 [ 366.941311][ T5707] usb 6-1: Product: syz [ 366.961359][ T5707] usb 6-1: Manufacturer: syz [ 366.972137][ T5707] usb 6-1: SerialNumber: syz [ 367.087623][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 367.117739][ T5708] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 367.152332][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.425124][ T5708] usb 3-1: Product: syz [ 367.450148][ T5708] usb 3-1: Manufacturer: syz [ 367.469078][ T5708] usb 3-1: SerialNumber: syz [ 367.496308][ T5708] usb 3-1: config 0 descriptor?? [ 367.748801][ T5707] usb 6-1: USB disconnect, device number 18 [ 367.776631][ T5708] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 039 [ 367.887503][ T29] audit: type=1400 audit(1777609186.461:770): avc: denied { read } for pid=12875 comm="syz.7.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 368.265114][ T57] net_ratelimit: 19 callbacks suppressed [ 368.265127][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.286125][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.352196][T12893] i2c i2c-1: failure reading data [ 368.475079][ T29] audit: type=1400 audit(1777609187.022:771): avc: denied { ioctl } for pid=12896 comm="syz.4.871" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 368.528988][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.568591][ T5716] usb 3-1: USB disconnect, device number 39 [ 368.582548][ T29] audit: type=1400 audit(1777609187.041:772): avc: denied { write } for pid=12889 comm="syz.7.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.535195][T12937] netlink: 'syz.5.872': attribute type 1 has an invalid length. [ 369.607156][ T5707] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 369.639756][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.678754][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.738789][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 369.814183][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.207438][ T29] audit: type=1400 audit(1777609188.548:773): avc: denied { ioctl } for pid=12922 comm="syz.3.875" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 370.360781][ T5707] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.364616][ T29] audit: type=1400 audit(1777609188.782:774): avc: denied { name_bind } for pid=12948 comm="syz.4.879" src=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 370.417816][ T5707] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 370.454622][ T29] audit: type=1400 audit(1777609188.866:775): avc: denied { create } for pid=12948 comm="syz.4.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 370.500801][ T5707] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.523023][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.546847][ T5707] usb 3-1: Product: syz [ 370.557908][ T5707] usb 3-1: Manufacturer: syz [ 370.570458][ T5707] usb 3-1: SerialNumber: syz [ 370.579247][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 370.739955][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.748229][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 370.755292][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 370.767093][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.797062][ T24] usb 4-1: config 0 descriptor?? [ 370.996246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.043899][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 371.060028][ T24] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 371.083024][ T29] audit: type=1400 audit(1777609189.455:776): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 371.104138][ T24] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 371.278543][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.591236][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.853748][ T5707] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 371.870916][ T5707] cdc_ncm 3-1:1.0: bind() failure [ 371.894396][ T5707] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 371.906633][ T5707] cdc_ncm 3-1:1.1: bind() failure [ 371.937635][ T5707] usb 3-1: USB disconnect, device number 40 [ 372.043279][ T5736] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 372.203719][ T5736] usb 5-1: Using ep0 maxpacket: 8 [ 372.213339][ T5736] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 372.227730][ T5736] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.233409][T12986] syz.3.882 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 372.277812][ T5736] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 372.309704][ T5736] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 372.332262][ T5736] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.367847][ T5736] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 372.385072][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.396307][ T1218] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 372.569060][ T1218] usb 8-1: Using ep0 maxpacket: 16 [ 372.580063][ T1218] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.592644][ T1218] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.604926][ T1218] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 372.615402][ T1218] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 372.630492][ T1218] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.645191][ T1218] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 372.655785][ T5736] usb 5-1: usb_control_msg returned -32 [ 372.664711][ T1218] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 372.679085][ T5736] usbtmc 5-1:16.0: can't read capabilities [ 372.693036][ T1218] usb 8-1: Manufacturer: syz [ 372.717963][ T1218] usb 8-1: config 0 descriptor?? [ 372.823427][ T5708] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 372.983680][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 372.995496][ T5708] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 373.006609][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.022410][ T5708] pvrusb2: Hardware description: Terratec Grabster AV400 [ 373.039329][ T1218] rc_core: IR keymap rc-hauppauge not found [ 373.046973][ T5708] pvrusb2: ********** [ 373.061818][ T1218] Registered IR keymap rc-empty [ 373.066696][ T5708] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 373.081534][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.090941][ T5708] pvrusb2: Important functionality might not be entirely working. [ 373.109266][ T5708] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 373.124005][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.132472][T13018] xt_hashlimit: size too large, truncated to 1048576 [ 373.139492][ T5708] pvrusb2: ********** [ 373.155926][ T1218] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 373.180094][ T1218] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input29 [ 373.210497][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.227720][T13021] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 373.240236][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.283035][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.325687][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.351599][ T2356] pvrusb2: Invalid write control endpoint [ 373.362167][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.400410][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.443224][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.475330][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.486848][ T2356] pvrusb2: Invalid write control endpoint [ 373.503699][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 373.518023][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.527981][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 373.541636][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 373.553475][ T1218] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 373.566056][ T2356] pvrusb2: Device being rendered inoperable [ 373.576913][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 373.594895][ T5708] usb 3-1: USB disconnect, device number 41 [ 373.602522][ T1218] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 373.620887][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 373.638349][ T1218] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 373.663786][ T2356] pvrusb2: Attached sub-driver cx25840 [ 373.677929][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 373.704300][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 374.012648][ T12] net_ratelimit: 5 callbacks suppressed [ 374.012666][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.052356][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.168697][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.588143][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.856533][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.003656][ T5716] usb 5-1: USB disconnect, device number 46 [ 375.212492][T13078] netlink: 'syz.4.890': attribute type 39 has an invalid length. [ 375.243281][ T29] audit: type=1400 audit(1777609193.348:777): avc: denied { map } for pid=13077 comm="syz.4.890" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 375.249237][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.388054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 375.430834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 375.493614][ T29] audit: type=1400 audit(1777609193.348:778): avc: denied { execute } for pid=13077 comm="syz.4.890" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 375.517821][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.525936][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.683292][ T5708] usb 8-1: USB disconnect, device number 8 [ 375.732962][ T29] audit: type=1400 audit(1777609193.807:779): avc: denied { create } for pid=13086 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 375.816663][ T29] audit: type=1400 audit(1777609193.854:780): avc: denied { listen } for pid=13086 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.948618][T13106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.010879][T13106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.387930][ T5736] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 377.667988][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.683888][ T5736] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 377.711385][ T5736] usb 3-1: New USB device found, idVendor=06cb, idProduct=731b, bcdDevice= 0.00 [ 377.731156][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.762733][ T5736] usb 3-1: config 0 descriptor?? [ 379.556598][ T5736] hid-generic 0003:06CB:731B.000E: unknown main item tag 0x2 [ 379.570088][T13191] netlink: 5252 bytes leftover after parsing attributes in process `syz.4.907'. [ 379.594010][ T5736] hid-generic 0003:06CB:731B.000E: reserved main item tag 0xe [ 379.638479][ T5736] hid-generic 0003:06CB:731B.000E: unknown main item tag 0x0 [ 379.730939][ T5716] net_ratelimit: 39 callbacks suppressed [ 379.730957][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.795881][T13202] block nbd0: not configured, cannot reconfigure [ 379.803165][ T5736] hid-generic 0003:06CB:731B.000E: unknown main item tag 0x2 [ 379.823236][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.837533][ T5736] hid-generic 0003:06CB:731B.000E: reserved main item tag 0xe [ 379.847134][T13132] netlink: 'syz.2.898': attribute type 10 has an invalid length. [ 379.875590][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.895158][ T5736] hid-generic 0003:06CB:731B.000E: unknown main item tag 0x6 [ 379.923545][ T5736] hid-generic 0003:06CB:731B.000E: item fetching failed at offset 38/40 [ 379.939104][ T5736] hid-generic 0003:06CB:731B.000E: probe with driver hid-generic failed with error -22 [ 379.974100][T13132] team0: Port device geneve0 added [ 379.998256][ T29] audit: type=1400 audit(1777609197.803:781): avc: denied { mount } for pid=13189 comm="syz.3.908" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 380.027190][ T990] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 380.058044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.082926][ T5736] usb 3-1: USB disconnect, device number 42 [ 380.218929][ T990] usb 8-1: Using ep0 maxpacket: 32 [ 380.236713][ T990] usb 8-1: unable to get BOS descriptor or descriptor too short [ 380.262944][ T990] usb 8-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 380.285287][ T990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.301554][ T990] usb 8-1: Product: syz [ 380.306410][ T990] usb 8-1: Manufacturer: syz [ 380.311094][ T990] usb 8-1: SerialNumber: syz [ 380.849141][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.855567][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.946372][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.983644][ T990] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 381.007488][ T990] usb 8-1: unit 37 not found! [ 381.016211][ T990] usb 8-1: unit 0 not found! [ 381.021374][ T5723] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 381.191102][ T990] usb 8-1: USB disconnect, device number 9 [ 381.287697][ T5723] usb 5-1: Using ep0 maxpacket: 8 [ 381.321220][ T5723] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 381.331499][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.341470][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.373767][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.391187][ T5723] usb 5-1: Product: syz [ 381.411097][ T5723] usb 5-1: Manufacturer: syz [ 381.418175][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.442830][ T5723] usb 5-1: SerialNumber: syz [ 381.585711][T13262] loop6: detected capacity change from 0 to 2640 [ 381.633897][T13262] buffer_io_error: 11 callbacks suppressed [ 381.633927][T13262] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.692476][ T29] audit: type=1400 audit(1777609199.375:782): avc: denied { create } for pid=13271 comm="syz.2.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 381.798134][T13262] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.868400][T13262] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.897265][T13262] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.915911][ T5723] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 381.941392][ T5723] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 381.983641][ T5723] usb 5-1: USB disconnect, device number 47 [ 382.036410][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.082735][T13262] loop6: unable to read partition table [ 382.100958][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 382.150232][T13262] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 382.151855][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'. [ 382.173384][T13278] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 382.174904][ T5736] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 382.217544][T13278] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 382.274523][T13278] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 382.329792][T13278] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 382.354133][T13278] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 382.368540][ T5736] usb 8-1: Using ep0 maxpacket: 16 [ 382.383139][ T5736] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.405816][ T5736] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.427679][ T5736] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 382.451604][ T5736] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 382.480014][ T5736] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.520571][ T5736] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.536989][ T5736] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.554039][ T5736] usb 8-1: Manufacturer: syz [ 382.574098][ T5736] usb 8-1: config 0 descriptor?? [ 382.634983][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 382.656472][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.667348][T13278] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 382.677360][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 382.730903][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 382.740075][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 382.891397][ T4977] ldm_validate_partition_table(): Disk read failed. [ 382.970652][ T4977] Dev loop6: unable to read RDB block 0 [ 382.991744][ T5736] rc_core: IR keymap rc-hauppauge not found [ 382.996838][ T4977] loop6: unable to read partition table [ 383.260956][ T5736] Registered IR keymap rc-empty [ 383.276550][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 383.322199][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 383.462890][ T5736] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 383.484620][ T5736] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input30 [ 383.983693][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 384.043981][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 384.108061][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 384.150818][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 384.193446][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 384.336037][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 384.385871][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 384.428712][T13347] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 384.439208][ T5723] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 384.456036][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 384.497210][T13356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.923'. [ 384.511116][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 384.557830][ T5736] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 384.748946][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 384.755715][ T5723] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.766197][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.777328][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 384.787889][ T5723] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 384.796639][T13347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.806030][ T5736] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 384.820255][ T5736] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 384.828137][ T5723] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.884582][ T5723] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 384.909332][ T5723] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 384.933967][ T5723] usb 3-1: Manufacturer: syz [ 384.963349][ T5723] usb 3-1: config 0 descriptor?? [ 385.305244][ T5723] rc_core: IR keymap rc-hauppauge not found [ 385.311249][ T5723] Registered IR keymap rc-empty [ 385.316698][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.338942][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.380829][ T5723] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 385.416309][ T5723] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input31 [ 385.436883][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.445002][ T990] net_ratelimit: 7 callbacks suppressed [ 385.445017][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.475897][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.509616][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.539783][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.596721][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.639700][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.671336][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.700322][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.736243][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.742817][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.771711][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.774849][ T5723] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.847129][ T5723] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 385.872929][ T5723] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 385.997431][ T5736] usb 8-1: USB disconnect, device number 10 [ 386.320785][T13458] netlink: 'syz.5.933': attribute type 1 has an invalid length. [ 386.367348][T13458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.433050][T13458] bond1: (slave geneve2): making interface the new active one [ 386.443211][T13458] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 386.513143][ T5736] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 386.564188][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.636603][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.934'. [ 386.663238][T13498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.934'. [ 386.684020][ T5736] usb 8-1: Using ep0 maxpacket: 32 [ 386.694209][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.934'. [ 386.709996][ T5736] usb 8-1: config 2 has an invalid interface number: 45 but max is 0 [ 386.713540][T13499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.934'. [ 386.725594][ T5736] usb 8-1: config 2 has no interface number 0 [ 386.748581][ T5736] usb 8-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 386.773866][ T5736] usb 8-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 386.803901][ T5736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.828292][ T5736] usb 8-1: Product: syz [ 386.832535][ T5736] usb 8-1: Manufacturer: syz [ 386.841916][ T5736] usb 8-1: SerialNumber: syz [ 386.891168][ T5736] kobil_sct 8-1:2.45: KOBIL USB smart card terminal converter detected [ 386.920779][ T5736] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 386.993398][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.025181][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.139316][ T5736] usb 8-1: USB disconnect, device number 11 [ 387.168307][ T5736] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 387.191641][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'. [ 387.212734][ T5736] kobil_sct 8-1:2.45: device disconnected [ 387.221404][T13516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.936'. [ 387.503459][T13533] netlink: 136 bytes leftover after parsing attributes in process `syz.4.938'. [ 387.801120][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.374735][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.634127][ T5708] usb 3-1: USB disconnect, device number 43 [ 388.896888][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.133418][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.374621][T13573] xt_hashlimit: size too large, truncated to 1048576 [ 389.432378][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.945'. [ 389.442213][T13579] netlink: 24 bytes leftover after parsing attributes in process `syz.7.945'. [ 389.452164][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.945'. [ 389.456855][T13583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13583 comm=syz.3.944 [ 389.565350][ T29] audit: type=1400 audit(1777609206.749:783): avc: denied { read append } for pid=13571 comm="syz.3.944" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 390.716456][T13638] FAULT_INJECTION: forcing a failure. [ 390.716456][T13638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.729886][T13638] CPU: 0 UID: 0 PID: 13638 Comm: syz.2.956 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.729918][T13638] Tainted: [L]=SOFTLOCKUP [ 390.729923][T13638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.729933][T13638] Call Trace: [ 390.729937][T13638] [ 390.729941][T13638] dump_stack_lvl+0x100/0x190 [ 390.729960][T13638] should_fail_ex.cold+0x5/0xa [ 390.729977][T13638] _copy_from_user+0x2e/0xd0 [ 390.729994][T13638] rfkill_fop_write+0x11e/0x580 [ 390.730014][T13638] ? __pfx_rfkill_fop_write+0x10/0x10 [ 390.730032][T13638] ? __pfx_bpf_lsm_file_permission+0x10/0x10 [ 390.730051][T13638] ? security_file_permission+0x76/0x210 [ 390.730069][T13638] ? rw_verify_area+0xce/0x6d0 [ 390.730088][T13638] vfs_write+0x2aa/0x1070 [ 390.730100][T13638] ? __pfx_rfkill_fop_write+0x10/0x10 [ 390.730119][T13638] ? __pfx_vfs_write+0x10/0x10 [ 390.730130][T13638] ? find_held_lock+0x2b/0x80 [ 390.730140][T13638] ? __fget_files+0x215/0x3d0 [ 390.730154][T13638] ? __fget_files+0x215/0x3d0 [ 390.730170][T13638] ? __fget_files+0x21f/0x3d0 [ 390.730188][T13638] ksys_write+0x1f8/0x250 [ 390.730199][T13638] ? __pfx_ksys_write+0x10/0x10 [ 390.730212][T13638] ? rcu_is_watching+0x12/0xc0 [ 390.730232][T13638] do_syscall_64+0x10b/0xf80 [ 390.730245][T13638] ? clear_bhb_loop+0x40/0x90 [ 390.730258][T13638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.730270][T13638] RIP: 0033:0x7f7b3499cdd9 [ 390.730279][T13638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.730290][T13638] RSP: 002b:00007f7b3578c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 390.730303][T13638] RAX: ffffffffffffffda RBX: 00007f7b34c16090 RCX: 00007f7b3499cdd9 [ 390.730310][T13638] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 390.730317][T13638] RBP: 00007f7b3578c090 R08: 0000000000000000 R09: 0000000000000000 [ 390.730323][T13638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.730329][T13638] R13: 00007f7b34c16128 R14: 00007f7b34c16090 R15: 00007ffd5d2b3b28 [ 390.730345][T13638] [ 391.142885][ T4979] block nbd1: Possible stuck request ffff888028d7e000: control (read@0,1024B). Runtime 180 seconds [ 391.161282][ T4979] block nbd1: Possible stuck request ffff888028d7e1c0: control (read@1024,1024B). Runtime 180 seconds [ 391.173674][ T4979] block nbd1: Possible stuck request ffff888028d7e380: control (read@2048,1024B). Runtime 180 seconds [ 391.187999][ T4979] block nbd1: Possible stuck request ffff888028d7e540: control (read@3072,1024B). Runtime 180 seconds [ 391.609512][ T46] net_ratelimit: 6 callbacks suppressed [ 391.609528][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.624282][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.634386][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.646399][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.816135][T13634] trusted_key: syz.4.955 sent an empty control message without MSG_MORE. [ 391.850697][T13657] netlink: 'syz.7.960': attribute type 1 has an invalid length. [ 391.963282][T13657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.001608][T13670] __nla_validate_parse: 7 callbacks suppressed [ 392.001620][T13670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.961'. [ 392.067629][T13664] vlan3: entered allmulticast mode [ 392.091327][T13664] bond3: entered allmulticast mode [ 392.219911][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.260023][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.616770][T13713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.710268][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.281706][T13728] can: request_module (can-proto-4) failed. [ 393.283182][T13735] trusted_key: encrypted_key: insufficient parameters specified [ 393.321849][T13728] trusted_key: encrypted_key: insufficient parameters specified [ 393.375254][T13728] 9p: Bad value for 'rfdno' [ 393.458226][ T990] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 393.512178][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.531952][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.564780][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.971'. [ 393.630693][ T990] usb 5-1: Using ep0 maxpacket: 16 [ 393.639487][ T990] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 393.661592][ T5723] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 393.674108][ T990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.688884][ T990] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.708333][ T990] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.718874][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.727288][ T990] usb 5-1: Product: syz [ 393.733470][ T990] usb 5-1: Manufacturer: syz [ 393.740424][ T990] usb 5-1: SerialNumber: syz [ 393.770310][ T990] usb 5-1: 0:2 : does not exist [ 393.821722][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.844496][ T5723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.861947][ T5723] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.874981][ T5723] usb 6-1: New USB device found, idVendor=06cb, idProduct=731b, bcdDevice= 0.00 [ 393.894294][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.908322][ T5723] usb 6-1: config 0 descriptor?? [ 394.197311][T13732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13732 comm=syz.4.968 [ 394.220426][ T29] audit: type=1400 audit(1777609211.110:784): avc: denied { connect } for pid=13730 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 394.248494][ T29] audit: type=1400 audit(1777609211.128:785): avc: denied { getopt } for pid=13730 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 394.304006][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.7.975'. [ 394.314934][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.975'. [ 394.568881][ T990] usb 5-1: USB disconnect, device number 48 [ 395.105572][ T30] INFO: task syz.1.497:8198 blocked for more than 143 seconds. [ 395.137806][ T30] Tainted: G L syzkaller #0 [ 395.155575][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.241581][ T30] task:syz.1.497 state:D stack:27336 pid:8198 tgid:8197 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 395.342685][ T30] Call Trace: [ 395.374287][ T30] [ 395.397075][ T30] __schedule+0x10e9/0x6820 [ 395.418694][ T5716] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 395.454258][ T30] ? __pfx___schedule+0x10/0x10 [ 395.503664][ T30] ? find_held_lock+0x2b/0x80 [ 395.514385][ T30] ? schedule+0x2bf/0x390 [ 395.520208][ T30] schedule+0xdd/0x390 [ 395.581459][ T30] schedule_preempt_disabled+0x13/0x30 [ 395.598033][ T30] __mutex_lock+0xced/0x1b10 [ 395.608931][ T30] ? sync_bdevs+0x153/0x480 [ 395.614181][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 395.620571][ T30] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 395.630543][ T30] ? iput.part.0+0x1a0/0xf50 [ 395.639564][ T30] ? sync_bdevs+0x153/0x480 [ 395.651764][ T30] sync_bdevs+0x153/0x480 [ 395.661499][ T5716] usb 8-1: config index 0 descriptor too short (expected 5567, got 496) [ 395.670461][ T30] ksys_sync+0xb0/0xf0 [ 395.677967][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 395.684170][ T5716] usb 8-1: config 159 has too many interfaces: 138, using maximum allowed: 32 [ 395.693103][ T30] ? rcu_is_watching+0x12/0xc0 [ 395.698728][ T30] ? do_syscall_64+0x90/0xf80 [ 395.703587][ T5716] usb 8-1: config 159 contains an unexpected descriptor of type 0x1, skipping [ 395.712576][ T30] __do_sys_sync+0xe/0x20 [ 395.717965][ T30] do_syscall_64+0x10b/0xf80 [ 395.723183][ T5716] usb 8-1: config 159 has an invalid descriptor of length 0, skipping remainder of the config [ 395.736029][ T30] ? clear_bhb_loop+0x40/0x90 [ 395.741065][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.749290][ T5716] usb 8-1: config 159 has 0 interfaces, different from the descriptor's value: 138 [ 395.758869][ T30] RIP: 0033:0x7efee2b9cdd9 [ 395.763338][ T30] RSP: 002b:00007efee3989028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 395.772210][ T30] RAX: ffffffffffffffda RBX: 00007efee2e15fa0 RCX: 00007efee2b9cdd9 [ 395.781367][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.789977][ T30] RBP: 00007efee2e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 395.799764][ T5716] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=c5.e2 [ 395.810413][ T5716] usb 8-1: New USB device strings: Mfr=67, Product=217, SerialNumber=205 [ 395.818907][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.827212][ T5716] usb 8-1: Product: syz [ 395.831456][ T30] R13: 00007efee2e16038 R14: 00007efee2e15fa0 R15: 00007ffe756780c8 [ 395.839701][ T5716] usb 8-1: Manufacturer: syz [ 395.844553][ T30] [ 395.847631][ T5716] usb 8-1: SerialNumber: syz [ 395.854712][ T30] [ 395.854712][ T30] Showing all locks held in the system: [ 395.877927][ T30] 6 locks held by kworker/1:0/24: [ 395.893957][ T30] #0: ffff888022e9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 395.905873][ T30] #1: ffffc900001e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 395.917561][ T30] #2: ffff88802c0551d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 395.927930][ T30] #3: ffff888056c4b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 395.938019][ T30] #4: ffff88802c2031a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 395.947314][ T30] #5: ffffffff8e68f8e8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 395.957961][ T30] 1 lock held by khungtaskd/30: [ 395.962912][ T30] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 395.973893][ T30] 2 locks held by getty/5366: [ 395.978634][ T30] #0: ffff888039abe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 395.988481][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 395.998755][ T30] 4 locks held by kworker/1:4/5716: [ 396.004052][ T30] #0: ffff888022e9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 396.014948][ T30] #1: ffffc90003e97d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 396.026273][ T30] #2: ffff88802c1b11d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 396.035261][ T30] #3: ffff88807d1a41d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 396.046493][ T30] 5 locks held by kworker/1:5/5723: [ 396.051736][ T30] #0: ffff888022e9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 396.063370][ T30] #1: ffffc90003f07d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 396.074824][ T30] #2: ffff88802c0f51d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 396.083770][ T30] #3: ffff88805e5bf1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 396.095854][ T30] #4: ffff8880792111a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 396.105180][ T30] 1 lock held by udevd/6495: [ 396.109860][ T30] #0: ffff888028349350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 396.119302][ T30] 1 lock held by syz.1.497/8198: [ 396.124282][ T30] #0: ffff888028349350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 396.140648][ T30] [ 396.143030][ T30] ============================================= [ 396.143030][ T30] [ 396.152344][ T30] NMI backtrace for cpu 0 [ 396.152362][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 396.152395][ T30] Tainted: [L]=SOFTLOCKUP [ 396.152402][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.152412][ T30] Call Trace: [ 396.152419][ T30] [ 396.152427][ T30] dump_stack_lvl+0x100/0x190 [ 396.152457][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 396.152483][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 396.152509][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 396.152541][ T30] sys_info+0x141/0x190 [ 396.152565][ T30] watchdog+0xcb1/0x1030 [ 396.152592][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 396.152615][ T30] ? __pfx_watchdog+0x10/0x10 [ 396.152636][ T30] ? __kthread_parkme+0x18c/0x230 [ 396.152658][ T30] ? kthread+0x13a/0x450 [ 396.152681][ T30] ? __pfx_watchdog+0x10/0x10 [ 396.152703][ T30] kthread+0x370/0x450 [ 396.152725][ T30] ? __pfx_kthread+0x10/0x10 [ 396.152749][ T30] ret_from_fork+0x72b/0xd50 [ 396.152776][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 396.152802][ T30] ? __switch_to+0x800/0x1100 [ 396.152831][ T30] ? __pfx_kthread+0x10/0x10 [ 396.152855][ T30] ret_from_fork_asm+0x1a/0x30 [ 396.152895][ T30] [ 396.152917][ T30] Sending NMI from CPU 0 to CPUs 1: [ 396.284212][ C1] NMI backtrace for cpu 1 [ 396.284229][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.284255][ C1] Tainted: [L]=SOFTLOCKUP [ 396.284261][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.284271][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 396.284298][ C1] Code: 66 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 a0 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 396.284316][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 396.284331][ C1] RAX: 00000000013d92c9 RBX: ffff88801e2ba500 RCX: ffffffff8b89f045 [ 396.284343][ C1] RDX: 0000000000000000 RSI: ffffffff8df1f73f RDI: ffffffff8c1c3500 [ 396.284355][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 396.284365][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 396.284377][ C1] R13: ffffed1003c574a0 R14: 0000000000000001 R15: ffffffff90d79350 [ 396.284388][ C1] FS: 0000000000000000(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 396.284405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.284417][ C1] CR2: 000000110c3f3354 CR3: 000000007da5e000 CR4: 00000000003526f0 [ 396.284429][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.284440][ C1] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 396.284451][ C1] Call Trace: [ 396.284457][ C1] [ 396.284463][ C1] default_idle+0x9/0x10 [ 396.284485][ C1] default_idle_call+0x6c/0xb0 [ 396.284506][ C1] do_idle+0x464/0x590 [ 396.284525][ C1] ? __pfx_do_idle+0x10/0x10 [ 396.284542][ C1] ? do_idle+0x30c/0x590 [ 396.284560][ C1] cpu_startup_entry+0x4f/0x60 [ 396.284577][ C1] start_secondary+0x21d/0x2d0 [ 396.284598][ C1] ? __pfx_start_secondary+0x10/0x10 [ 396.284621][ C1] common_startup_64+0x13e/0x148 [ 396.284657][ C1] [ 396.480104][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 396.486967][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 396.497652][ T30] Tainted: [L]=SOFTLOCKUP [ 396.501969][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.512013][ T30] Call Trace: [ 396.515277][ T30] [ 396.518202][ T30] dump_stack_lvl+0x100/0x190 [ 396.522890][ T30] vpanic+0x552/0x970 [ 396.526861][ T30] ? __pfx_vpanic+0x10/0x10 [ 396.531350][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 396.537504][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 396.543658][ T30] panic+0xd1/0xe0 [ 396.547371][ T30] ? __pfx_panic+0x10/0x10 [ 396.551776][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 396.557922][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 396.564065][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 396.570211][ T30] ? watchdog.cold+0x1ec/0x234 [ 396.574965][ T30] ? watchdog+0xcc1/0x1030 [ 396.579375][ T30] watchdog.cold+0x1fd/0x234 [ 396.583957][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 396.589747][ T30] ? __pfx_watchdog+0x10/0x10 [ 396.594416][ T30] ? __kthread_parkme+0x18c/0x230 [ 396.599434][ T30] ? kthread+0x13a/0x450 [ 396.603665][ T30] ? __pfx_watchdog+0x10/0x10 [ 396.608327][ T30] kthread+0x370/0x450 [ 396.612385][ T30] ? __pfx_kthread+0x10/0x10 [ 396.616970][ T30] ret_from_fork+0x72b/0xd50 [ 396.621553][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 396.626654][ T30] ? __switch_to+0x800/0x1100 [ 396.631328][ T30] ? __pfx_kthread+0x10/0x10 [ 396.635912][ T30] ret_from_fork_asm+0x1a/0x30 [ 396.640682][ T30] [ 396.644205][ T30] Kernel Offset: disabled [ 396.648517][ T30] Rebooting in 86400 seconds..