last executing test programs: 5m10.02440903s ago: executing program 3 (id=2078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x1) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180), 0x4) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x42f1, 0xae, 0x0, 0x4, 0x8, 0xc, "db9c9c07b4903ba2d656386d1e9533d9e3c15b9169aa420b84c12b6eb1ec809221a264f6c950e4f29ca35cc2cb4c04f7dd1f693e4ef6f8afae66cdd44970543a", "309f5b80081aca01608ace0614ba7667754435e87b0cdbe44bccc66d360e8304e6d37c89e5a8bdc7eeb2cca02ed88563f03ffe1aa0cab4fbf3d2cc67373bbf84", "cf70b8a1449503e7e78c0e3e7a190572d4a2e7769879ea9b8fc9a755c9ce1ae9", [0x10000]}) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x80) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000003c0)={0x0, @empty, @local}, &(0x7f0000000400)=0xc) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1) r7 = fsmount(r6, 0x0, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000980)=[0x0, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) statx(r7, &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r7, &(0x7f0000000bc0)='./file0\x00', 0x0, 0x2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r7, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000002d40)={{}, {0x1, 0x1}, [{0x2, 0x5, r8}, {0x2, 0x3, r9}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x0, r10}, {0x2, 0x5}], {0x4, 0x2c048610129d9df9}, [{0x8, 0x4, r11}, {0x8, 0x2, r12}, {0x8, 0x5, r13}, {}, {0x8, 0x7, r14}, {0x8, 0x0, r15}], {0x10, 0x1}, {0x20, 0x4}}, 0x7c, 0x1) r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r16, 0x4c02, &(0x7f0000002e00)={0x0, {}, 0x0, {}, 0x8, 0x5, 0x18, 0x0, "871074acbbd53c90d803cb722a654e5db114b82ec1741ac050fadb12c5daa58405ffc7a51f3452ad4d2f80a7a8ad56f551d3cd7892d14cc8d4a934ac1ac2eb5a", "9ded74fa7526efbc5a9a93ec3d8a2d7038eb7149e1333d9142d56bb32fa16ba0", [0x40, 0xdd]}) socket(0x11, 0x1, 0x1) ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000002ec0)) 5m9.957603903s ago: executing program 3 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000fffffff50000000000000001"], 0xfdef) 5m9.265927784s ago: executing program 3 (id=2088): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, 0x0, 0x20004080) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x224}}, 0x0) 5m5.128778176s ago: executing program 3 (id=2116): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) openat$audio1(0xffffffffffffff9c, 0x0, 0x505880, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x40000, 0x3, 0x10000, 0x8000, 0xff7ffffd, 0x1, 0xfffffffe}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000180), 0x7fff, 0x604e00) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)=0xffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x11, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000240)={0x1, 0xc1, 0x0, 0x81, 0xfffffff9, 0x200000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000080)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="054000000000000000a12e00000008000300", @ANYRES32=r6, @ANYBLOB="ca9a87e987639de2e4020c30c09260b1501154f02a508f09800a43fb4d8b9694547431ad4ff112935073a33820b21175b2852107a50c7342bc33fcf0885627f7e01db410ee35a85fd1de1c04b0ff5c39d45dd98169a9a64dd76c4a43"], 0x1c}}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000400)) 5m3.796997602s ago: executing program 3 (id=2126): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$getflags(r3, 0x401) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000001040)=0x8aa760e3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000020200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCATTCHAN(r5, 0x40047457, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) 5m0.376975211s ago: executing program 3 (id=2149): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x1b7c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) sched_setattr(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) io_uring_setup(0x7309, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000080)=0x7, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000200)={0x0, 0x1d60, 0x100, 0x1, 0x8000004}, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 4m45.073723618s ago: executing program 32 (id=2149): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x1b7c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) sched_setattr(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) io_uring_setup(0x7309, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000080)=0x7, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000200)={0x0, 0x1d60, 0x100, 0x1, 0x8000004}, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2m56.514832755s ago: executing program 5 (id=2820): io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, 0xbd4c3b8bc89fc43d}]) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300090c0000000000040000000000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0xfbffffff) 2m56.426907555s ago: executing program 5 (id=2821): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_clone3(&(0x7f0000001700)={0x5000100, &(0x7f0000000140), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x38}, &(0x7f0000000600)=""/4096, 0x1000, &(0x7f0000001600)=""/137, &(0x7f00000016c0)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0xc6bb, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x28, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x220}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xaa}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r0, &(0x7f0000000000)=""/90, 0x5a) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 2m53.690258736s ago: executing program 5 (id=2831): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x500, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) 2m53.608531365s ago: executing program 5 (id=2832): r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a140000001100010000000000000200000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x24048000}, 0xc010) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) (async) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x0, 0xa, 0x8, {0x8, 0x0, "2ec1f099e04c"}}, &(0x7f0000000140)={0x0, 0x3, 0x84, @string={0x84, 0x3, "a815627370fb2adbf7d87d1c9934558b889872db412024673ff99f77708aff78bfe31d6829c7ae29a1d86258405854719f1677adf4cb96e8ea189c8da2c9a76014b13b226819e6e188a0158bd23f1bceded1d9337061e0c60b79f5e60ebcc9f5d4d95a1fc1e05ec4c5d5900f98376f5cfd8c427654e3cb481651e06df34fb619a6be"}}}, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0xf, 0x20, "9824084126eead2803124510e9d39ded461054ad0e55d10441de97e8888ab690"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x81, 0x2, "e86c"}, &(0x7f0000000500)=ANY=[@ANYBLOB="ac317584e8cb9347b3cda4dc0c3a29d67ffef4da48c86d23385386d00d1ae9a6ef21da0dd7732afed1a51dcdc49ac7c2ed1b9b5d1501f969c7d034560f1ed202c8309d7c0e01d17b3b1d15dad9765e42de4807de60073c20025f8b714587b5ee443f"], &(0x7f00000003c0)={0x20, 0x83, 0x2, "34dc"}, &(0x7f0000000400)={0x20, 0x84, 0x4, "7f97ad62"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "9546dd"}}) (async) syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x7, 0x0, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f0000000100)={""/32, 0x0, 0x0, 0xfffffffffffffedd, 0x0, 0x0}) 2m51.498915632s ago: executing program 5 (id=2842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000380)=0xb, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000000000000007000000830b040a1c01027f00000100000000001c"], 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000040900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000002c00038008"], 0xf8}, 0x1, 0xc00000000000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x44040) 2m50.302403701s ago: executing program 5 (id=2848): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) socket$rds(0x15, 0x5, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m35.250950403s ago: executing program 33 (id=2848): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) socket$rds(0x15, 0x5, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m33.826216406s ago: executing program 0 (id=3223): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7c, 0x7fff7ffc}]}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000440)=""/200, 0xc8, 0xd73) lseek(r0, 0x0, 0x1) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00008232fd4915000781850cfdd65e9f6fee9f011d77c94c1f52d02af71d392bb5e1aac223bd6bdee8c26226580e1187fd92698cef62ae8958c6af9e7773bc87561e53885c9c0ca0ec3412fc7434b3914b63448862ec23f0a23b52c2e0a2f5b77ca6983fd7a934937ca30cb27fcede03788939c8b8dbc59d59fb2f222c7f94a1ebee3135c8d6333fc5d6c36691b65de495bb56fa99680387fd23609822eef8e13d5541334e702de97f2f3255bcd2d15df919bb969417c48c2eac6b4fdd69095790b7519df2f7732d3295ef73"], &(0x7f0000002300), 0x600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7c, 0x7fff7ffc}]}) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) pread64(r0, &(0x7f0000000440)=""/200, 0xc8, 0xd73) (async) lseek(r0, 0x0, 0x1) (async) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x7) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00008232fd4915000781850cfdd65e9f6fee9f011d77c94c1f52d02af71d392bb5e1aac223bd6bdee8c26226580e1187fd92698cef62ae8958c6af9e7773bc87561e53885c9c0ca0ec3412fc7434b3914b63448862ec23f0a23b52c2e0a2f5b77ca6983fd7a934937ca30cb27fcede03788939c8b8dbc59d59fb2f222c7f94a1ebee3135c8d6333fc5d6c36691b65de495bb56fa99680387fd23609822eef8e13d5541334e702de97f2f3255bcd2d15df919bb969417c48c2eac6b4fdd69095790b7519df2f7732d3295ef73"], &(0x7f0000002300), 0x600) (async) 1m33.538704732s ago: executing program 0 (id=3229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24004880) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x12) io_pgetevents(0x0, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r5], 0x2b) sendfile(r7, r5, 0x0, 0x4000000053d2) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) 1m32.46659509s ago: executing program 0 (id=3235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x69}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "97ef9959b1c425241a93a351187ea506"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "41cb074f72ac81caf35f1258e81e70aa"}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x1c, r2, 0x101, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4800) (async) r3 = gettid() (async) sigaltstack(&(0x7f0000000280)={0x0, 0x80000001, 0xffffffffffffffec}, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000000180)) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000280)={0x2, &(0x7f0000000b00)}) 1m32.375831226s ago: executing program 0 (id=3238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400", 0x22) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 1m31.304627878s ago: executing program 0 (id=3243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x3, 0x0, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0xa1}, 0x0) 1m31.051021649s ago: executing program 0 (id=3246): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000106b140209000000000001090224000100000001090400fd010300020009218100fb0122280009058103ff1a010f05"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getpgrp(0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000019940)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x48) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0x706, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xefffffee, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x5, 0x26, 0xffffffb9, 0x1a}, 0x9c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000019540)=[{0x0, 0x0, &(0x7f0000019500)=[{0xfffffffffffffffc}, {&(0x7f0000019300)="87e1415cd17041dcacb2caf1e501a78ec48b3b4a718f36d4ef9323cbba2683ea1a168d7292dfb1f2d675baefbffe81c57aeb8383026b557ce0bfd71f1eaa501198e3336ad8b5261e0ebd990ed683117df31441d5ae583d4f524654d20fcc9b5da8058fb8cd76530eae3cf7b91174de08ef89b24c3e5fa07a9ad75f2d687dfc7fb551a90ccfc14043a50db3952473a5f54f3e1482771e6069254017170669a1eea4915f3640c59da5ff00bf4d04c1e51a40984d7be8ebfc4e61a40f95c804236df8bd6e362f691a7e1e904cb30e4477e0ab53c6f541cfcd3817c78f89bc71a2ac28", 0xe1}, {&(0x7f0000019400)="d1bd229bab6300421ed109b2be89997eda5850f5ace618591fb1d38c0bed2905b22aae3ec08a3e6dfd467647a30418bbec77a6a5fa4bb8623ca2275618fef1b1b292bb08655c02dfe1f3efb2598d8c18ac6e93b6e63ca93c6d4f68f2aa1c9dd80920302f29bcc24219ebeb80fa8c13468cbce072c97718c956c15cbb54ef47bca93a1c1ac17d669bac942d9edd2c39f4e6cb40a82e1004653470f2d1931669eafded4b3d0e2ca0ff346e369bbf18c9e4d64b89e6213743af5e5167e14a1119fa2c", 0xc1}], 0x3, 0x0, 0x0, 0x4051}], 0x1, 0x40800) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='@\"('], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r7}, 0x38) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) syz_emit_vhci(0x0, 0x20) 1m13.802423198s ago: executing program 34 (id=3246): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000106b140209000000000001090224000100000001090400fd010300020009218100fb0122280009058103ff1a010f05"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getpgrp(0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000019940)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x48) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0x706, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xefffffee, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x5, 0x26, 0xffffffb9, 0x1a}, 0x9c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000019540)=[{0x0, 0x0, &(0x7f0000019500)=[{0xfffffffffffffffc}, {&(0x7f0000019300)="87e1415cd17041dcacb2caf1e501a78ec48b3b4a718f36d4ef9323cbba2683ea1a168d7292dfb1f2d675baefbffe81c57aeb8383026b557ce0bfd71f1eaa501198e3336ad8b5261e0ebd990ed683117df31441d5ae583d4f524654d20fcc9b5da8058fb8cd76530eae3cf7b91174de08ef89b24c3e5fa07a9ad75f2d687dfc7fb551a90ccfc14043a50db3952473a5f54f3e1482771e6069254017170669a1eea4915f3640c59da5ff00bf4d04c1e51a40984d7be8ebfc4e61a40f95c804236df8bd6e362f691a7e1e904cb30e4477e0ab53c6f541cfcd3817c78f89bc71a2ac28", 0xe1}, {&(0x7f0000019400)="d1bd229bab6300421ed109b2be89997eda5850f5ace618591fb1d38c0bed2905b22aae3ec08a3e6dfd467647a30418bbec77a6a5fa4bb8623ca2275618fef1b1b292bb08655c02dfe1f3efb2598d8c18ac6e93b6e63ca93c6d4f68f2aa1c9dd80920302f29bcc24219ebeb80fa8c13468cbce072c97718c956c15cbb54ef47bca93a1c1ac17d669bac942d9edd2c39f4e6cb40a82e1004653470f2d1931669eafded4b3d0e2ca0ff346e369bbf18c9e4d64b89e6213743af5e5167e14a1119fa2c", 0xc1}], 0x3, 0x0, 0x0, 0x4051}], 0x1, 0x40800) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='@\"('], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r7}, 0x38) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) syz_emit_vhci(0x0, 0x20) 12.473070815s ago: executing program 7 (id=3614): r0 = creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x6, 0xffff8001, 0x1, @mcast2, @private2, 0x700, 0x40, 0x7ff, 0x7}}) sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f00000002c0)=@xdp={0x2c, 0xa, r1, 0x7}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)="ce9731d2ae3e137696a350cb9753ca", 0xf}, {&(0x7f0000000380)="ce621b7b0b24620c07297ad1c20783689695ee877bc1402b96d6fbe5f2895a2552a32f12db6a5a9623380a1b19b6f20f638e20cd528c0a388644d6264ecf437622fc354ab04a3d3a5fe0067e15eb9b9c133850001560161ea028f99c4ac5bffba61ac1defdb8b3d248ad35daeb5f140711c5f15be329fab2f95c1c04d8", 0x7d}, {&(0x7f0000000400)="43ea60b99fdcc4d7aee76206", 0xc}, {&(0x7f0000000440)="b7376dc525b4df912024c4bcbd02b996e7e5bfdc4ab157773208bff72ad6291ac98be7a13e650faa1d5c3a20cbe756e43766a50592873d56249601b3efb3b4272a815ea8bb8ba080dc862a9643f29616ad7c1a9abaf09b6d93c7", 0x5a}, {&(0x7f00000004c0)="0396f328b93c520ae8d9dcc2ff9440d67fb73b7fa55e7402621b143b85769f8f67dd6c45c723bea586bacbb6e7ea5b9486b5091384177f94e4e603e9c5b45341d9ea67f446bcf8a4564fc6b98db999823ec7cc698d0c0f585d570d94f06107d511ee", 0x62}], 0x5, &(0x7f00000005c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x90}, 0x8052) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x40, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4812, 0x3, 0x0, 0x0, 0x5}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) 12.22340068s ago: executing program 7 (id=3616): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000002007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, 0x0, 0x20024090) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) prctl$PR_MCE_KILL_GET(0x22) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) 11.119197315s ago: executing program 7 (id=3621): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f900fffe0500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 9.656689509s ago: executing program 7 (id=3624): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x306, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x2c}}, 0x40010) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000140)=0x4) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f0000000180)={0x3, 0x4c07, 0x9, 0x9}) close_range(r1, r1, 0x2) ioctl$FIONCLEX(r1, 0x5450) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0x0}}, './file0\x00'}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8012, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize}], [{@measure}]}}) lremovexattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='user.syz\x00') ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000004c0)={0x9, 0x9}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x10040, 0x0) sendmsg$nl_generic(r3, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1ec, 0x1b, 0x8, 0x70bd2d, 0x25dfdbfd, {0x19}, [@nested={0x115, 0x5f, 0x0, 0x1, [@generic="b37b82a4e4298fcd5ca825138ad14d6783b0b6fde3874400d84a48ac03ee9522b0e2669cdfa04c430fde4e05f7a3614cac01f44174ebfb88f1531c31b9964ecf4df0ae3f5237437a39dcdc89a593d38c39328f1b6ff895a4689d2da97fb9c24fed385a8d608e54bbc09b399c83987293f8fd2c9f16c21334de33fe0518b7b38d4b2de45ec236c2304b501e028874fe677a450036f34a037810c31230a3a5727d075f9b13ed9325", @nested={0x4, 0x4a}, @nested={0x4, 0x144}, @nested={0x4, 0x1b}, @nested={0x4, 0x8f}, @nested={0x4, 0xc9}, @generic="3e9c466c80307d43f2246e533d8b818961a8b7d1931fe1dd0de0c5ee9eaf530dfac271aef940f99043d046b22dcc4406e5cb5533655c1c95b9f0c5f6f7ead71312287a979c2e59c25001888edef92364854d", @nested={0x4, 0x57}]}, @typed={0xa9, 0x1, 0x0, 0x0, @binary="df5b4885570817c1e88bda6ae84384257bfc3b4c060932b5dba613dacec749ad1d55c982187c73cba64490c65524e049fa43cbf2b24d173a005149994e82a79466593e9bb99611ddde477ae5b22940736f844136ef402ae055cb851bec5a9d918f25c69e2efc9dd2281f7d0aefdd607b8ff012a907e6cb4503e3b3dc9b6d276e7c8dc4aefc827f10de6dae772f96d688099a190e2436c6c56230969d08b285d1c5f852484a"}, @typed={0x8, 0x41, 0x0, 0x0, @uid=r4}, @typed={0xc, 0x151, 0x0, 0x0, @u64=0x7}]}, 0x1ec}}, 0xc4090) syz_usb_connect(0x5, 0x70f, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xbe, 0x5b, 0xf0, 0x20, 0x499, 0x105c, 0x879f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6fd, 0x2, 0x6, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0x22, 0x80, 0xa, 0x6a, 0xd2, 0xf, 0xfd, [@uac_control={{0xa, 0x24, 0x1, 0xfff7, 0x48}, [@feature_unit={0x13, 0x24, 0x6, 0x5, 0x2, 0x6, [0xa, 0x7, 0x0, 0x7, 0x5, 0x7], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x2, 0x2f, 0x0, 0xff, 0x7}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x8, "e8bace6c"}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x19, "9881"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0x6, 0x3, 0x2, 0x9], 0x9}]}], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0x6b, 0xac, 0x2}}, {{0x9, 0x5, 0x8a, 0x0, 0x3ff, 0x7, 0x5, 0x3, [@generic={0x74, 0x3, "032eb060b756608f9a245cb6f93157ccc7bcae64b4a19dd4aa2f4e7081aa6f0b335e1c0d5c7316e046ca4bf0399ed2e9483f8b37d0477e359682ff15006b2ddd09807338a3b481c5544f5ed7a2d7abec63282ff1cd36a59cdacb00920033fd6fc37eca5eaad31141cb1915f4ba3f13bca560"}, @generic={0x32, 0x5, "fae90c0745264cf9e20703f3245d52b488c1b24a8cc83fc720694c5d54db3c0a99cded7b497e09a56b4cf52e8bd42f47"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x3, 0x0, 0x3, [@generic={0x10, 0x6, "47d059951a6f7e8a64587341e634"}, @generic={0x36, 0x7, "d6e7fc419779a0cd7eadb2bb2708e4bbfa04e3679e80f4cdefbfff8cc9f117cdfcec429371ec068b8f753be7f05def002a2f2cce"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x7cf, 0xe, 0x7, 0x31}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x0, 0xb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xf8, 0x5, 0x80, [@generic={0x3e, 0xd, "eaa8b7fbde8784fb1a7d5788fd4ef0d92d42bb34592d5c267ced710b2366d7a1ad6b2bd260f4046743e63434ffd0c3439190554351b6d497a9fd71b9"}, @generic={0x21, 0xf, "0c36cfa53ced591bc6688270566b08ad5942cbef4ca1ad9ff3596f2efbe771"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x3, 0x8, 0x6, [@generic={0x6d, 0x9, "e2d7f915008c59ec04633ff89642043a2d917b7ce52b0d38346389155dc0fc60de156ea912ff5b02cafff26cae1947ef9f38ca86db90ea9e9791e0d63680a6e41c12a21ea5b071e6705a7a31d3f16709fd363d94aebc2e887147522ee8b80f5b3b40db2579bb278f926075"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x1, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x10}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xf7, 0x4, 0x5}}, {{0x9, 0x5, 0x5, 0x8, 0x410, 0x5, 0x6e, 0xf, [@generic={0xa5, 0x7, "9b9ac4abf320d9a1fc38ac7eb395de137f7123d08eb9ff91c8141dd53205e2c36551cf729f58a5de4bf23b22df39c46bed79c87eece3f909dfddd1fb903d54a2e333c5860103c7f682934ae1174fcca6508fa1ec353747ce725daa3c2e87d0b7f4a396fa3063b0c7c89345a5b6af193ab6c33aa56858a83d2627f62b918568554ca0a01128deb3682b8bbd8ca89de993ce0e028975219a34f2222a1cf78c5ea2589528"}]}}]}}, {{0x9, 0x4, 0x9c, 0x40, 0xa, 0xc3, 0x3e, 0x2, 0xb6, [@generic={0x8, 0xd, "a9dc231bdb85"}], [{{0x9, 0x5, 0x9, 0x10, 0x0, 0xb0, 0x5, 0x7, [@generic={0xeb, 0x21, "93c40807cec223b227d38e705e3598bb9fb59ecb35459259b0c60acc2ab1c93dd43b1ab1fce71f61c1bb26c9dc7fe04d4e35c878261e89d7fbb5b52cdc4ea2efad04f90cfa520932d5a606f6e224b5f10f7a75f4f0addbe4d4a2c12b5553a7f819c9ae1bca2a1657a6d712399fcd345a4592e6ce34f7810aa93cd54b77121c6e6a417cc9064ac77eab3b51837dd347e69a588d148b82288a23f135b7026be34a2fa15326b3501895e9a74ee3e2a54b556f2fe511b6cbc5dd0073a92bcefee9533608dd0422851ec28b510e07af6f7f392a154350708bfa7459278e44e9673fc42609a8b0842e591937"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x1, 0x9, 0x9}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x36, 0xb, 0x57}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x40, 0xfd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x6}, @generic={0x20, 0xf, "76efc2784c6bba59931caa6a18b524bafab4a05e17af473fb22f9ee1a441"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb0}, @generic={0x2, 0xe}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xf1, 0x4f, 0x9, [@generic={0x87, 0xc, "f003ecfc1f624c0eaa622deb36ef9f26765b3023814e6cc3f2749932604326d2915f9dcb0a4f56c5e03c43c4baf1b0d6bf8815d3558a47bff57920f84050eca86b245048077045ab0e3b673ad93b77124f908fb73dc051dde768a6022a494f389b34434b067ae19d3eeea532c0f72774d9c4cd589c7a5d3472a1729e726cd208cfb82acb04"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x64, 0x0, 0x9, [@generic={0xea, 0x23, "dffb147c5568d4286bee56f6efe4b87be29cb5f07b90ac77c99ed9a9913e15e648ba73cfc89b4ee3bf0c75cdc754e9775d0aa8137b2edd7ba9dfe1f44b99651e92e9144b57d53542d6246c67127a3eb0ff002440a341725bab3f2434311efb92a6e614eb94846f28f5a42fd981a02a1bee58edc8d945f8f361e845b3309db38f213800b53e45b30d75d600d4b1b8bcb3f864c90c9e2aece21d4efc84e249c3dd8fc8c1d9d3545f7d5f08235aa621946d58227c6845b3723775f13cff18ee41dd78ed1a4075b622eb0dd0ab3a3070c50de0b4d3f8ec7b50b980285171d5c83911a521b211c8b8ecfa"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x4, 0x40, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x5, 0x1, 0xa, [@generic={0xe0, 0x6, "579bceda9c39c70b0c83cd22deb46438357ff37719f8f3c58e11cb1797ba1c9d1a059c002bddae9c560ecbd3f4b1423a45970b731a6cd7bda3642ba6e56b9b90fb2abb1ff8a7dbbb901c8621f48edc3cd99c63da1274d0dcaac935cff6dd70cd1d492d886fbf52a47892436a6df27c8ca71bb248b066dff0f8ecd5d9f0f349fac902e9fe1d5340509e7fcbaed5f3b6ac8b0a6a5146dc113393ce7dad8bc702defb6766d631793168af094db80b800579b1ed0cefffeb6176e49f3ce9cb4105987876a1716a151925ba10450359d02932a59cdf9ec72c0ed050ee569a5fad"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xf, 0x0, 0x9}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x310, 0x0, 0x41, 0x1, 0x10, 0x9}, 0x7d, &(0x7f0000001000)={0x5, 0xf, 0x7d, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x81, 0x5, 0x0, 0xff0f, 0x0, [0xff3f00, 0xff60c0, 0xc0, 0x7e0f, 0x3fff]}, @generic={0x55, 0x10, 0x2, "ac51bbe3ebf270f8ff8b809757f383bb64c7401a9674e40853a1b0be8bfdbf8e7a4fb2c1bea7bb9e5adbadacdb13b82422e675fb84ba2df3a9ee7ce91957b94e883ac9f786c05b9966f2cd579c4ed2e5a626"}]}, 0x7, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0xc04}}, {0x6c, &(0x7f0000001180)=@string={0x6c, 0x3, "53387311195b5024685fb5ad706fe77070522faa5b29c2e20d9935665242eba27e1cb2c36c83482106611a1f1778a6d0dfeac9528f3838b03e8826045879eeb6075049152d51c4ccb4a8e588c6176c403a00fdaf708626199aa84326ca03207ba81c3cc6832322c17a3e"}}, {0xa0, &(0x7f0000001200)=@string={0xa0, 0x3, "71731f4aff6956cf7235f35960d14c81dd7aeabd879e3099acba421cc311e5b7f34a20f40d2fc2f8d47603bdd45fee0f80f549b495f55fc24da2c8c14f8e346451d9adf4c88a56c68880e5e41a2c7d7a4c359601fa722586ab9646b0869dce5db3ed24d07418d7fb7d9128ba2bbf0c0e66da93a41b3d62d18e2c356f7be26450b0e00e8cedf47d729eb6d205a011a85fcc0dba8f097c4696b070264c6cb5"}}, {0x4, &(0x7f00000012c0)=@string={0x4, 0x3, "dae4"}}]}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001380)={'ipvlan1\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f00000013c0)=0x1, &(0x7f0000001400)=0x4) r8 = socket$alg(0x26, 0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2a93fb593fdbe457}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, 0x7, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040004}, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000016c0), &(0x7f0000001700)=0x4) write$uinput_user_dev(r3, &(0x7f0000001740)={'syz1\x00', {0x0, 0x5, 0x8, 0x1}, 0x1f, [0xffffff1f, 0x6, 0x5, 0x8001, 0x5, 0x7ff, 0x426, 0x5, 0x8, 0x10000, 0x7fffffff, 0x0, 0x80000000, 0x1, 0x54c, 0x6, 0x8, 0x956, 0x5, 0x0, 0x2, 0x9, 0xffffffff, 0x0, 0x0, 0xa, 0x2, 0x4, 0x5, 0x0, 0x101, 0x7, 0x2, 0x4, 0x42ccb42a, 0x2, 0x4, 0x129a2ac5, 0x8, 0x5, 0x9, 0xfffffffa, 0x6f3, 0xfff, 0x6, 0x2, 0xc37, 0x5, 0x1ff, 0x1, 0x3, 0x8001, 0x0, 0xa14, 0x2, 0x359, 0x400, 0xffffff81, 0x9, 0x7, 0x1, 0x9de8, 0x7, 0x9], [0x0, 0x2cf954dd, 0xb0b8, 0x4, 0x2, 0x8, 0x245, 0x0, 0x7, 0x7, 0x9, 0x0, 0x8, 0x4, 0x3, 0x4, 0x7f, 0xfffffff7, 0x4, 0x5, 0xfffffff9, 0xf9, 0x6, 0x8, 0x0, 0x2, 0x3, 0x9, 0x9, 0x4, 0x6, 0x401, 0xc5, 0x5, 0xfffffff1, 0x4, 0x9c3, 0x7fff, 0xa, 0x90d1, 0x9, 0x8da4, 0x100, 0x2a6, 0x414, 0xfffffff2, 0x1b, 0xe, 0x7, 0x9fc0, 0x7, 0x30000000, 0x7, 0x762e, 0x3, 0xffff, 0x18, 0x5e2b3a46, 0x0, 0x5, 0x1ed3d867, 0x5, 0x9, 0x4], [0x8, 0x4, 0x6, 0xb, 0x1, 0x6, 0x9, 0x7, 0x7, 0x7fff, 0x8, 0x9, 0x9, 0x2, 0x101, 0x6, 0x6, 0x6, 0x5, 0x5, 0x10000, 0x80, 0xe1, 0x1ff, 0x0, 0x3, 0x8, 0xdc38, 0x8, 0x0, 0x3ff, 0x7, 0x7c, 0x9, 0xf, 0x100, 0x10000, 0x0, 0x2, 0x2, 0x8, 0x7, 0x5f28, 0x5, 0x2, 0x5, 0x5, 0xfffffffa, 0x200, 0xf, 0x1, 0x4, 0x9, 0x0, 0x3, 0x0, 0x2c59, 0x4, 0x9, 0x4, 0xd6, 0x57e, 0x5, 0x2], [0x3, 0x0, 0x7fff, 0x9, 0xe3, 0x6, 0x9, 0x3, 0x8, 0x800, 0x6e0, 0x2, 0x4, 0x7ff, 0x7, 0x8, 0x1, 0x5, 0x863, 0x1, 0x9, 0xe4f6, 0x80000000, 0xf, 0xfff, 0x5, 0x8, 0xe, 0x4, 0x4, 0x3, 0x7, 0x2, 0x5, 0x7, 0xb, 0xc, 0x7, 0xff, 0x6, 0xfffffff9, 0xffffffff, 0x6, 0x9, 0x0, 0x8, 0x0, 0x5, 0x7, 0x1, 0xfff, 0x5, 0x4d, 0x8, 0x1, 0xfffffffa, 0x7, 0x5, 0x3, 0x1, 0x4, 0x4, 0x3, 0x9]}, 0x45c) r9 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000001bc0)={0x2, 'vcan0\x00', {0x5}, 0x400}) r10 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000001c00)={r6, 0x1, 0x0, 0xfffffffffffff000}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000001c80)=[r1, r8, r10, r1, 0xffffffffffffffff], 0x5) 6.289794906s ago: executing program 4 (id=3639): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 6.288585875s ago: executing program 7 (id=3640): r0 = io_uring_setup(0x136a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(0x0, 0x345142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x4000005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r5, &(0x7f00000004c0)={0x2020}, 0x2020) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f0000000640)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000240)={r8, &(0x7f0000000200), 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000140)={r8, &(0x7f0000000040), &(0x7f00000000c0)}) syz_usb_connect(0x2, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xf9, 0x49, 0xce, 0x40, 0x3731, 0x113, 0xddb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x8, 0x0, 0x7231d0f8ecf8343f, 0x81}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 6.202481275s ago: executing program 4 (id=3641): r0 = io_uring_setup(0x136a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(0x0, 0x345142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x4000005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000004001000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r5, &(0x7f00000004c0)={0x2020}, 0x2020) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f0000000640)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000240)={r8, &(0x7f0000000200), 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000140)={r8, &(0x7f0000000040), &(0x7f00000000c0)}) syz_usb_connect(0x2, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xf9, 0x49, 0xce, 0x40, 0x3731, 0x113, 0xddb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x8, 0x0, 0x7231d0f8ecf8343f, 0x81}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.701871028s ago: executing program 6 (id=3642): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101701) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) listen(0xffffffffffffffff, 0x39b3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000007fff000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, 0x0, &(0x7f0000004880)=@udp}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) sendmsg$xdp(r2, &(0x7f00000030c0)={&(0x7f0000000100)={0x2c, 0xf, 0x0, 0xd}, 0x10, &(0x7f0000003000)=[{&(0x7f0000000b00)="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", 0xc00}, {&(0x7f0000001b00)="709f4271e28b07dd1a47e20cf39d7e9cdab60f50f7256fbee27f752227b0a51e2e1ebdb56879ece96a2602a5213ac6ec21be9d0eda465746b02db94e0eb14e33f57fdac23b56827e756896ecb1581440078a4f0b0a017d02cc349cba7b2814c1d76e6e28b35a50194de800266a8a384159529295cf1a2a5ec278ee74cfb410199b7b37dbcc6d584ae3c94d3db6d57ea774cc7030dc0519d5d6ae88882496dc2e661cde499743319b6413218ed2b7c86fcf471e8a655d50eb7c5296c5a4207b579fd01dcdab5027adc02fbf658c2d1ee213155691bfb6bd84ce4463209c15a472cff9d40eff0d0b060ee4b93410792936aa9acdaa0473df6db6a66173ddf2e1310fddba58b075ddbd8c2e3d703eae7793055176c366bdb1cd43ee27a2df128f377855dd2ba45d7ef9277d3b9c312f8f5a8f1d77b44aecf042911158f68d27b6064b354400260a79be268f31be8d9459c6a71f75ba470aa0f0c197e6e0220dfc518bc764b31b66007504cef5ef368c42e48fbefcaf8ddb6c73598a4997d7679dcf903b75348c5d021eea8cb31f78f08c5c2ea590250e3f3bf5c568bd24304f98b65f1be826a158f2fc634183df3454409b8f6901b8cad7d1a19c0eba1b296cdefd22af1dda5ea04f038d825fa52d7fb27daabc85220b87a8931f28903e440e2fa1a9a8e6f5474efd70f12287850ee7e8d04b7864a0518c3c685882d844aa8c2621b03618fa611b7a015990b95aadc41c1a66480cd383ee20177d37650a9f4b43f5086daf889839428081059843a7d07608e427da1fde8c74cab5765f6f61dcab189e94a08b8e2f11d244c7315312307f67c7ac425067d7375923d1139a401743ca66ea9057464ee7ba37a4a3da7da0aad6089b175bd98b24e3f47af11c9fdcab70024d7465287ac4d79a5b306bd19e54be8d2d4a4f7ae3a3b34ba3dac2d1c72481dc0967cc7c90bdb15d5c546e7c4590a041af27f2271f5bbf30fffcfe084815170afd91b5121bf11f899d3424a561ae374fb444ecf489fe117c7bf62e593e984ef9e297518f63d18b5d6d654713c3b6a36e1ad9c2fa6023d31e79abac1ceb154eec29c1fbe48228a07c7910abfc72fbf668cfc17d57b207f653ef555e7b281bbbeb8315b723ab9ce0473d9df237bd2d560a5fff6e3e56bd10c4e52635584c434501b935da2de99282af6faa70e98b1256b36b3fa5ff6e9dc878a63a0e45f3618f448105f3c64595c48860415249b7aa491bdcadf615f81b2aa95f4683ec0cd7222ce5c7bcb958844c612f16224c2f363a8d7a01bf5118bc56e9f252be9287a5a0f4d22d715af4a1ca437d6167562a8dcca051c4afd71c817e48443d777c78961c68a563425828945f8e26ee328b4a2ca4d507ad1e907e8e4baad3340c8c43313e73c5e8d04af7a8e89e2f9b6f1fe59ac7f38908a691cb5997f41b919697ac7a15bf57407a1bec5d8715a158df005c86a4b8eee18bd3b524c4ae36943a17da6f1da585a91f1ea7b59478b39483dd2ea6c57870a5203ecb3fbb08d77be101675fd6fff05446bc3cc6af334b6b341c411c8ebd665987666952ea0587b354fc10acc38ccb65a0c1796ff6583200e7d2620dc7d7505588e2e65d12fbee6be09d8cacb3b7ca65462f57789c3042a3ed536314bc4a0705a5492e223ac2c09f78fff747d4ce2e0690ee63eb001d1a4564ee12ee6c4c37229548924ec59b5617a17f9af4f3b630a90afdbed7b822ec1fba18274f9fb880013cce7d0b89da7f428e0f36bb2ff24a6cd598555628a7da3e05aae002bf6bbd1563b4edabf38c78f16c36446776d15b5684364e7cb7f3488a0edb274cbbc5e64a689a76ac8e8612a06127167491a249a3f4a7c5d5ad61e25b3a9bc611bfd2e9729ea91cb931106ee2eec1767d9fa810c2358410579c286e1e8ea5b70acef1d8b34ea6e010e528def88720319009b87f613d0a8e09ce641632b0c7f70614934d48bd52c86fc3e6ad907c10ee1ef84bed0878347ec7a44f98e0a39ecae3b612b739a49ced673c825677fb3a97a9167580e1328edbb0d2a96c308903124dfa400dd305fe8b2c63a658298b5850a132ee522ae8dadd56d725dda860592ae40fd06427bf0318e98118696f0cc7ef497b847f3cba9553c96db8f0a28ebd457048a9f309beee55ab3f1af999d18c5081f691992f6f5756b8ee70ede04896c31008c8950a2da1b8ccc5fb30c006877244b4602829a3902ed63ab475442bac54bb4a984f68337336107f8195eee77ecd058584bababc9651055761abdd01d45b3e7029b0b65300dda74cb8ba05b53a1fcdc9253153cf3b0467268681bdf9e4a7d648f79a0b35f32e53b805f8514a8a3615ab9a3c6d6664085de8767a306eabb6b39669f10e4744733ad07bca7ae10afda0e2a767fdf6e1629c9a88ed8b943c5625677ccf07489be0c6b6595dc12c99afd6dac5a6ae957e6e828496a740fced6618788343da0dcf38f052c591be46ed05dd9cda35ab56167bb519c3bb57c36fdcac9483892585e8b88d8b2d5869a286051a3e77af84f722d956c859605e88e37bbdce2eb32e7702a61b5445888f5fe38bb7c73972a008ec7971efb21bebd82dd611fd356265f7209bb8b0baf60354616783ad9404250188c95eb75abf9b99c8808c7043991d6eaa414591d0531814463cd20fcc7f35eda17d949b9442c8e0dd87db92af6f99ed45e892ee3827e2e40f583879929a8eb2fac8dcb59a6033ec109cf5e7950ddb17831e3a6d575969f1e428565ca72c2693579c10623e9a59209814cb92bb5bb6a4d6f147c4788174acc6cd5fdde6de0c11d6a5af2bcd8b0d8824a0c469280e64015ded326831272450ea0c5f63668bbc0f8b96dc3feba6345c10d0bcf05313da48437eb837703bb7915a18f2221464bbb461998a36f75de16cb4d4ff5b4c4ab483824e3dfd2082ebb7d984adab20589c0955587d4131eee8e889c89a872c6031a320d5fa89582227b2c87752957d711dfa4be90870a15c85c199d2af2da19dc21456340879b1f49028ea49771d0a720975c46330b67fb19cafd756449ba4d6add6a56e4390cc55494f53223b3cbad912291c1b2246647d538e38caa2d0c8face01e80a475d4b8948b1ba15217aa24fca726889769b19355b3d4d23997f0c5d802770fee8c81c444f934065def1c30f2af2a83e18ce45357a58539c155678f114ff402a5db4231ed597bf3a4c5fa69675c90abbd6a9e36195cf079ea3c95474d20082c566570a66883e5ab1b364585009bbaadf184125fbcff4e7807f6ff11cac57942850e394b88a7b1c8aaec501fbe033f105d2d4a4607ed91df1fd31effa656b4146ab43d2ef34d6ed676475bdd7b7481ed6efbe45afe5978f740cd51fa2f705b2d87436c90aff0cc6b41026dd2594e4eeacfc61da0f7c74a3a717a5d138ea0b1be0b7763e0e117f3a8f1e7e0d45de994f175ef5acb72d7726641f719e1fd033c5d5cbdc3d67d1b5f5bc7836d5eefb56ca47c2a21ce623103246866413c0be74b4ad1a47ef3149a1791f3265fe414b22a505997d0be5242d1a1bf88d605dfd70da3b2c50f6281a8ab08c16a7f106a30ec81cdff815570be634b421e16c81adf9e744282d024c537af75dfa4af57b07299c9328a5f16386215226436fbf0ef5dfadf2a491c299a796c1475e664efe2d83fc44531d6ea141af1be1f3d7d465fd3d21236d04fbc9b168e57d5563bcab0af1011d8596e9064c45a6aa58b788971ffac6d70e5ff9fc4140af8197203adb56599f3c0f6c94aa77b3e0c60f5d7192a817322ba91de4c5c755f8515237fe6e4240639821e86427f69a47d5164adf3fe8ff6f4aa0b717d36af5ee78fa9ce2bb1a1b1cce466c39c2296b87a5ea19d39702528bd3c17396ad0e0d5aaa6490d71c3583d8e4639af88be021f8bebbd73cab18f191e89665d25434784f5657b26673871a8cfc8190ce4ab75355535ddea2bf088c1910792b825d08c5fb562fc43136f416825de041625d8aa09e90dc06a876a27828855c45e941f6c7863017077eea009e1ec6c1eac73df2fb33d79dd65762fe6dad5af8773c443900e967409a6d492f07f9f7cd50659198b9068846a9d88fac8db7687590fd7144a6f65a0eb0089153cadadf18335ac9f128c02ff1893ce632eb81f020a3251e26933e8f8b115952c59a1c05004e7e629ee447f582423264d984860fdcf3d899fde402ac4ad322968807d65e09e667fd6af96afa4e193edac1ccf491040f7738cfef1f98ccc73f687cf0fe87349b831321b2b4715035c9c12751638f5ba2a8090b1ab0163cc81c1b456808efde421dffcb5adc6ec7f5d237a74def58d9bef89fffad10cd8932cd9d15d3d4dbb29611a56e3a0b81bb4284f0aba8c39da5cf72acfe03c0d0f6db48f398477ec102672a0e6e11e27fbe78657b5bdad94a17b812e2c7a387497e8eddfb71c68a8d520ece472a6db50a49ad1b1a43164c2124cf9db90c901601d33c25e0b94920df0d67f3839297cc39c9cebefe7101bd7e71dbcd0260b26f1f953f876a6a2f2fd40d8f4566cd4175326660775690e6be8a09fb172fcb84619c593fee3c56dba10ba5c5f925dea48e5a63d36b42914edee4bd02e2a83d1a7b011b89f59534600904fe98baeeecafb52ff63e59e77faf1ca8a519614a681a0307a94fa30c018bea8578bfc99ea453f0c6611c08041bb4b2a8a7f61688f4bad3d60baab1ec53c31b35c51381210b8652fae75ccad0f0a1a6954f494420b3c8e56f12925fba73838d27379d5b53cdf6c17ba8328660e42a2f1527d4bc5e86bd673a3125ebed95e7d75adbe502ca361df6e428214de5878ad603b8d46bd60d26c3e4cf7be41031c5742d63872c275aab21f3087bb2c759e1ce7c24f6a9ea4a19c8e44147b9bf9c8fc77f693818bffd93890df5eda286d81789284c4ad37e66b7a9b6ccd3a9a65e89dd8bda6f8db0e8d20da84632cf9aca0d43179ca2373dccd5fe9d0b6c64bf0d6c2ef61818ccd3d1fe4a6d8b58702781b55129a723b7e0822b3e41414f901f829cb41cf7237bff2eb010864adcb37d90889ac6785159c783a6ff3a9a84b3900bf112bb8e0ef381815fb522f04a8572b8485520443c4c50112b1f1fc226c446c0ee28db31d25c65d3683a35a5dc54860bd713e8c9dfa7666d7d0dfe44c54dccc8ec190e5845d488b9622c2f30045d923a843fb119d485017746eb7f16f5be63b85c66899aca7ad91119a77e26536b90b8f46219fcd6332b2a1b7b17ce506f4b0fd8a3d1e44f0417fb2d98865ca6c3149a75dade377c1be06285dc089cd3e8134c62a5dc361a91feec1cc2f364e8eeedbdabaa025a77289a41ffd3e0e46b1388e4eaed507f8f26cad5990ec86bc96ad6c0cbeb9fd1e51b2c86411edfac13c2da57b08a5eb8ec8a8522f75da4a1b9a620054026bd180f534784904c69c638190a583294408c7276386b1101630d06c645dfead6d0be71b7319bfd61d1abe5dfb9d3c24c53b8fe2a3900c75b155e1c0e44f5dd97cef4921cc580d670e48449e85512f65d8ba8937e4bb95e446f1b4dc968807b95c1046ecdc9428c3937d9e1f0b15656b904c49bf69088ca41d2dce1c5af045ff1b5d2deeb2da1f689ba11850ddf14451c99b757290122ec97244955b154753fedcaa6a0ad8ad56367caac489358fb71d0b6c33a4651fd59690429eab9709e23665eb1a2f09f24b000916e48f81fb231d80e89879e834562f2db5c97336c6ab3671247287971e49d7d501024890666884a54d8eaa418c00f4e14cc4f999bf1e0d9d6a98b6bf13cccad2a784b", 0x1000}, {&(0x7f0000002b00)="e3cb012ca6bf3c199138929c95d3e3189c4930e3c3b0420d6aaf0ccf72c5d4b10de1eee88b458830e56aec291b0d606e24ebf37770dfad643e089c65ef3b90e0aaf98ef170924b75905dbac038c678ddadbdd5dc015a01f2b898dff3ceddd55a923724d0f8ef4f28f8ae29815e53a9f9ac76fd4111ec07bca8ea04f9a127869e2d3a23882e44be96dc2c2e96650c19b7272ee5795ebe977f30ebdbe997217a", 0x9f}, {0x0}, {&(0x7f0000002cc0)="17276b45002ffc6c4aecce17bd482008e51d6335fb2eb5a4f3c49506c0b1777fbb1f1014b3d678f8aa77f5c49f0628b300a1f6d65052b4dd436bf3263a6c78bfba3124963fe88580d9c588d9bbb561bf9753d1bebb7edf13591df9", 0x5b}, {&(0x7f0000002d40)="af032d0ebed5b635e6c416dd20578132d82aeb0fd616d80647d0218a2c35944df72abc1645c86007a141d5a025010964", 0x30}, {&(0x7f0000002d80)="e2daae070e8f2f5a0b87eb4f89626fad17d886642ec8cfb4311b886a351834f1397b7122596c433f5f41af0deaf1859d781c78db186391669987e745ebd02c2f4bf232ce53ec5cf5b611b9249c0894b85d80d1a8155496b9c5bd5bbcf4a2d10cf8964630c200eb19aa8fc5caa11e4b82db105b71b776f3751cc2864c5739779fdc19ae2bd7b322375c98c6c75dc3ed9f47f06955f2c081e93ef899cccdea90d8d2f99c2f8ea393d506895a342efb204aa42c", 0xb2}, {&(0x7f0000002e40)="50bccbcc68b4dd9a9480f97187956d72ddb556894635800be143ad23d2eff9256f1da5b90c711525162861eba53e05a111cf5b385861e7ce77e8a51476c4186b9e16dafc580970b8388173f9d5dcb139879b292312f107b5651e9a2de4927a3635740933bd9b009b5e472d60e17748deeff49b96736096ef80798031ae1aee463363177982bef0746dc1786880ba15f3044a47c97f857e02fbc167b9a300308e", 0xa0}, {&(0x7f0000002f00)}], 0x9, 0x0, 0x0, 0x80}, 0x8090) 5.295892339s ago: executing program 6 (id=3643): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (fail_nth: 3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 4.990796896s ago: executing program 6 (id=3644): pipe(&(0x7f0000000380)) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r0, 0x2, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xfa) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xffffffff, 0x8, 0x3eb2, 0x5, 0x0, [{0x77, 0x0, 0x8, '\x00', 0xc}, {0x8, 0x0, 0x7, '\x00', 0x9}, {0x3, 0x1, 0xc, '\x00', 0xd4}, {0x6, 0x86, 0x3, '\x00', 0xff}, {0xc4, 0xa, 0x1, '\x00', 0x4}, {0x4f, 0x4, 0x1, '\x00', 0x8}, {0xfb, 0x7, 0x75, '\x00', 0x2}, {0x7, 0x10, 0xfc, '\x00', 0x2}, {0x12, 0x4, 0xf, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0x7}, {0x5, 0x0, 0x8, '\x00', 0x9}, {0x9, 0xd, 0x5, '\x00', 0x6}, {0x4, 0x8, 0x4, '\x00', 0x2}, {0xa, 0x53, 0x5, '\x00', 0x10}, {0x4, 0xfa, 0x1, '\x00', 0x6}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x3b, 0xc, 0x6, '\x00', 0x7}, {0x4, 0x8d, 0x80, '\x00', 0x7}, {0x23, 0x83, 0x28, '\x00', 0x1}, {0x7c, 0x5, 0x3d, '\x00', 0x5}, {0x10, 0x6, 0xfd, '\x00', 0x9}, {0x8f, 0x8, 0x7, '\x00', 0x9}, {0xa9, 0x10, 0xe, '\x00', 0x4}, {0x46, 0x4, 0x1, '\x00', 0x8}]}}) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c8, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x4}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) unshare(0x6a040000) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0)=0x4, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105500, 0x0) 3.540128994s ago: executing program 2 (id=3647): close(0x3) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfffffdf9, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f00000003c0)={r1}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r2, 0x100000000) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') 3.537204198s ago: executing program 2 (id=3648): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000200)=""/47, 0x3f, 0x0, 0x2, 0x4}}, 0xfffffdc0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x40, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0), 0x10ba00, 0x0) socket(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xffffffff, 0x3ff, 0x9, 0x0, r3, 0x8, '\x00', 0x0, r3, 0x5, 0x3, 0x1, 0xc}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) socket$nl_generic(0x10, 0x3, 0x10) 3.448131595s ago: executing program 6 (id=3649): ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0a4586d, &(0x7f0000001400)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3fe, 0x1, '\x00', {0x904, 0x5, 0x0, 0xe1f, 0xc2, 0xffe, 0xffffff7f, 0x3, {0x5, 0x3ff}, {0xb0cb, 0x7}, {0x80000000, 0x7}, 0x400, 0x9, 0xfc, 0x0, 0x3, 0x4, 0x9, 0x7, 0x6, 0xfff8, '\x00', 0x9, 0x5, 0x3aa2, 0x100}}) sched_setscheduler(0x0, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f050000009bd40012800b000100697036748bcb5fe8c76e6c0000000000000708000001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x944, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRES64=r0], 0x104}, 0x1, 0x0, 0x0, 0x200000a0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e21, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x0, @local}, {0xa, 0x6e23, 0x0, @empty, 0x6}, 0x1, {[0x0, 0x0, 0x0, 0x80000004, 0x0, 0x1, 0xfffffffe, 0x40]}}, 0x5c) 3.162146202s ago: executing program 6 (id=3650): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000003b03000000000100000001"], 0x0, 0x53}, 0x28) 3.030516627s ago: executing program 6 (id=3651): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x306, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x2c}}, 0x40010) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000140)=0x4) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f0000000180)={0x3, 0x4c07, 0x9, 0x9}) close_range(r1, r1, 0x2) ioctl$FIONCLEX(r1, 0x5450) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0x0}}, './file0\x00'}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8012, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize}], [{@measure}]}}) lremovexattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='user.syz\x00') ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000004c0)={0x9, 0x9}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x10040, 0x0) sendmsg$nl_generic(r3, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1ec, 0x1b, 0x8, 0x70bd2d, 0x25dfdbfd, {0x19}, [@nested={0x115, 0x5f, 0x0, 0x1, [@generic="b37b82a4e4298fcd5ca825138ad14d6783b0b6fde3874400d84a48ac03ee9522b0e2669cdfa04c430fde4e05f7a3614cac01f44174ebfb88f1531c31b9964ecf4df0ae3f5237437a39dcdc89a593d38c39328f1b6ff895a4689d2da97fb9c24fed385a8d608e54bbc09b399c83987293f8fd2c9f16c21334de33fe0518b7b38d4b2de45ec236c2304b501e028874fe677a450036f34a037810c31230a3a5727d075f9b13ed9325", @nested={0x4, 0x4a}, @nested={0x4, 0x144}, @nested={0x4, 0x1b}, @nested={0x4, 0x8f}, @nested={0x4, 0xc9}, @generic="3e9c466c80307d43f2246e533d8b818961a8b7d1931fe1dd0de0c5ee9eaf530dfac271aef940f99043d046b22dcc4406e5cb5533655c1c95b9f0c5f6f7ead71312287a979c2e59c25001888edef92364854d", @nested={0x4, 0x57}]}, @typed={0xa9, 0x1, 0x0, 0x0, @binary="df5b4885570817c1e88bda6ae84384257bfc3b4c060932b5dba613dacec749ad1d55c982187c73cba64490c65524e049fa43cbf2b24d173a005149994e82a79466593e9bb99611ddde477ae5b22940736f844136ef402ae055cb851bec5a9d918f25c69e2efc9dd2281f7d0aefdd607b8ff012a907e6cb4503e3b3dc9b6d276e7c8dc4aefc827f10de6dae772f96d688099a190e2436c6c56230969d08b285d1c5f852484a"}, @typed={0x8, 0x41, 0x0, 0x0, @uid=r4}, @typed={0xc, 0x151, 0x0, 0x0, @u64=0x7}]}, 0x1ec}}, 0xc4090) syz_usb_connect(0x5, 0x757, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xbe, 0x5b, 0xf0, 0x20, 0x499, 0x105c, 0x879f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x745, 0x2, 0x6, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0x22, 0x80, 0xa, 0x6a, 0xd2, 0xf, 0xfd, [@uac_control={{0xa, 0x24, 0x1, 0xfff7, 0x48}, [@feature_unit={0x13, 0x24, 0x6, 0x5, 0x2, 0x6, [0xa, 0x7, 0x0, 0x7, 0x5, 0x7], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x2, 0x2f, 0x0, 0xff, 0x7}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x8, "e8bace6c"}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x19, "9881"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0x6, 0x3, 0x2, 0x9], 0x9}]}], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0x6b, 0xac, 0x2}}, {{0x9, 0x5, 0x8a, 0x0, 0x3ff, 0x7, 0x5, 0x3, [@generic={0x74, 0x3, "032eb060b756608f9a245cb6f93157ccc7bcae64b4a19dd4aa2f4e7081aa6f0b335e1c0d5c7316e046ca4bf0399ed2e9483f8b37d0477e359682ff15006b2ddd09807338a3b481c5544f5ed7a2d7abec63282ff1cd36a59cdacb00920033fd6fc37eca5eaad31141cb1915f4ba3f13bca560"}, @generic={0x32, 0x5, "fae90c0745264cf9e20703f3245d52b488c1b24a8cc83fc720694c5d54db3c0a99cded7b497e09a56b4cf52e8bd42f47"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x3, 0x0, 0x3, [@generic={0x10, 0x6, "47d059951a6f7e8a64587341e634"}, @generic={0x36, 0x7, "d6e7fc419779a0cd7eadb2bb2708e4bbfa04e3679e80f4cdefbfff8cc9f117cdfcec429371ec068b8f753be7f05def002a2f2cce"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x7cf, 0xe, 0x7, 0x31}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x0, 0xb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xf8, 0x5, 0x80, [@generic={0x3e, 0xd, "eaa8b7fbde8784fb1a7d5788fd4ef0d92d42bb34592d5c267ced710b2366d7a1ad6b2bd260f4046743e63434ffd0c3439190554351b6d497a9fd71b9"}, @generic={0x21, 0xf, "0c36cfa53ced591bc6688270566b08ad5942cbef4ca1ad9ff3596f2efbe771"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x3, 0x8, 0x6, [@generic={0x6d, 0x9, "e2d7f915008c59ec04633ff89642043a2d917b7ce52b0d38346389155dc0fc60de156ea912ff5b02cafff26cae1947ef9f38ca86db90ea9e9791e0d63680a6e41c12a21ea5b071e6705a7a31d3f16709fd363d94aebc2e887147522ee8b80f5b3b40db2579bb278f926075"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x1, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x10}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xf7, 0x4, 0x5}}, {{0x9, 0x5, 0x5, 0x8, 0x410, 0x5, 0x6e, 0xf, [@generic={0xa5, 0x7, "9b9ac4abf320d9a1fc38ac7eb395de137f7123d08eb9ff91c8141dd53205e2c36551cf729f58a5de4bf23b22df39c46bed79c87eece3f909dfddd1fb903d54a2e333c5860103c7f682934ae1174fcca6508fa1ec353747ce725daa3c2e87d0b7f4a396fa3063b0c7c89345a5b6af193ab6c33aa56858a83d2627f62b918568554ca0a01128deb3682b8bbd8ca89de993ce0e028975219a34f2222a1cf78c5ea2589528"}]}}]}}, {{0x9, 0x4, 0x9c, 0x40, 0xa, 0xc3, 0x3e, 0x2, 0xb6, [@generic={0x8, 0xd, "a9dc231bdb85"}], [{{0x9, 0x5, 0x9, 0x10, 0x0, 0xb0, 0x5, 0x7, [@generic={0xeb, 0x21, "93c40807cec223b227d38e705e3598bb9fb59ecb35459259b0c60acc2ab1c93dd43b1ab1fce71f61c1bb26c9dc7fe04d4e35c878261e89d7fbb5b52cdc4ea2efad04f90cfa520932d5a606f6e224b5f10f7a75f4f0addbe4d4a2c12b5553a7f819c9ae1bca2a1657a6d712399fcd345a4592e6ce34f7810aa93cd54b77121c6e6a417cc9064ac77eab3b51837dd347e69a588d148b82288a23f135b7026be34a2fa15326b3501895e9a74ee3e2a54b556f2fe511b6cbc5dd0073a92bcefee9533608dd0422851ec28b510e07af6f7f392a154350708bfa7459278e44e9673fc42609a8b0842e591937"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x1, 0x9, 0x9}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x36, 0xb, 0x57}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x40, 0xfd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x6}, @generic={0x20, 0xf, "76efc2784c6bba59931caa6a18b524bafab4a05e17af473fb22f9ee1a441"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb0}, @generic={0x4a, 0xe, "dd540f7e2521448e6c38ccdb1369e3a8124cf1c22ff2ce1a918350024a1804363121a9668741500cee7980f4a401dfd23001f3a888f5263a13af0febc9ea52bfe7024c309fdb16b3"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xf1, 0x4f, 0x9, [@generic={0x87, 0xc, "f003ecfc1f624c0eaa622deb36ef9f26765b3023814e6cc3f2749932604326d2915f9dcb0a4f56c5e03c43c4baf1b0d6bf8815d3558a47bff57920f84050eca86b245048077045ab0e3b673ad93b77124f908fb73dc051dde768a6022a494f389b34434b067ae19d3eeea532c0f72774d9c4cd589c7a5d3472a1729e726cd208cfb82acb04"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x64, 0x0, 0x9, [@generic={0xea, 0x23, "dffb147c5568d4286bee56f6efe4b87be29cb5f07b90ac77c99ed9a9913e15e648ba73cfc89b4ee3bf0c75cdc754e9775d0aa8137b2edd7ba9dfe1f44b99651e92e9144b57d53542d6246c67127a3eb0ff002440a341725bab3f2434311efb92a6e614eb94846f28f5a42fd981a02a1bee58edc8d945f8f361e845b3309db38f213800b53e45b30d75d600d4b1b8bcb3f864c90c9e2aece21d4efc84e249c3dd8fc8c1d9d3545f7d5f08235aa621946d58227c6845b3723775f13cff18ee41dd78ed1a4075b622eb0dd0ab3a3070c50de0b4d3f8ec7b50b980285171d5c83911a521b211c8b8ecfa"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x4, 0x40, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x5, 0x1, 0xa, [@generic={0xe0, 0x6, "579bceda9c39c70b0c83cd22deb46438357ff37719f8f3c58e11cb1797ba1c9d1a059c002bddae9c560ecbd3f4b1423a45970b731a6cd7bda3642ba6e56b9b90fb2abb1ff8a7dbbb901c8621f48edc3cd99c63da1274d0dcaac935cff6dd70cd1d492d886fbf52a47892436a6df27c8ca71bb248b066dff0f8ecd5d9f0f349fac902e9fe1d5340509e7fcbaed5f3b6ac8b0a6a5146dc113393ce7dad8bc702defb6766d631793168af094db80b800579b1ed0cefffeb6176e49f3ce9cb4105987876a1716a151925ba10450359d02932a59cdf9ec72c0ed050ee569a5fad"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xf, 0x0, 0x9}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x310, 0x0, 0x41, 0x1, 0x10, 0x9}, 0x7d, &(0x7f0000001000)={0x5, 0xf, 0x7d, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x81, 0x5, 0x0, 0xff0f, 0x0, [0xff3f00, 0xff60c0, 0xc0, 0x7e0f, 0x3fff]}, @generic={0x55, 0x10, 0x2, "ac51bbe3ebf270f8ff8b809757f383bb64c7401a9674e40853a1b0be8bfdbf8e7a4fb2c1bea7bb9e5adbadacdb13b82422e675fb84ba2df3a9ee7ce91957b94e883ac9f786c05b9966f2cd579c4ed2e5a626"}]}, 0x7, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0xc04}}, {0x6c, &(0x7f0000001180)=@string={0x6c, 0x3, "53387311195b5024685fb5ad706fe77070522faa5b29c2e20d9935665242eba27e1cb2c36c83482106611a1f1778a6d0dfeac9528f3838b03e8826045879eeb6075049152d51c4ccb4a8e588c6176c403a00fdaf708626199aa84326ca03207ba81c3cc6832322c17a3e"}}, {0xa0, &(0x7f0000001200)=@string={0xa0, 0x3, "71731f4aff6956cf7235f35960d14c81dd7aeabd879e3099acba421cc311e5b7f34a20f40d2fc2f8d47603bdd45fee0f80f549b495f55fc24da2c8c14f8e346451d9adf4c88a56c68880e5e41a2c7d7a4c359601fa722586ab9646b0869dce5db3ed24d07418d7fb7d9128ba2bbf0c0e66da93a41b3d62d18e2c356f7be26450b0e00e8cedf47d729eb6d205a011a85fcc0dba8f097c4696b070264c6cb5"}}, {0x4, &(0x7f00000012c0)=@string={0x4, 0x3, "dae4"}}]}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001380)={'ipvlan1\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f00000013c0)=0x1, &(0x7f0000001400)=0x4) r8 = socket$alg(0x26, 0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2a93fb593fdbe457}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, 0x7, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040004}, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000016c0), &(0x7f0000001700)=0x4) write$uinput_user_dev(r3, &(0x7f0000001740)={'syz1\x00', {0x0, 0x5, 0x8, 0x1}, 0x1f, [0xffffff1f, 0x6, 0x5, 0x8001, 0x5, 0x7ff, 0x426, 0x5, 0x8, 0x10000, 0x7fffffff, 0x0, 0x80000000, 0x1, 0x54c, 0x6, 0x8, 0x956, 0x5, 0x0, 0x2, 0x9, 0xffffffff, 0x0, 0x0, 0xa, 0x2, 0x4, 0x5, 0x0, 0x101, 0x7, 0x2, 0x4, 0x42ccb42a, 0x2, 0x4, 0x129a2ac5, 0x8, 0x5, 0x9, 0xfffffffa, 0x6f3, 0xfff, 0x6, 0x2, 0xc37, 0x5, 0x1ff, 0x1, 0x3, 0x8001, 0x0, 0xa14, 0x2, 0x359, 0x400, 0xffffff81, 0x9, 0x7, 0x1, 0x9de8, 0x7, 0x9], [0x0, 0x2cf954dd, 0xb0b8, 0x4, 0x2, 0x8, 0x245, 0x0, 0x7, 0x7, 0x9, 0x0, 0x8, 0x4, 0x3, 0x4, 0x7f, 0xfffffff7, 0x4, 0x5, 0xfffffff9, 0xf9, 0x6, 0x8, 0x0, 0x2, 0x3, 0x9, 0x9, 0x4, 0x6, 0x401, 0xc5, 0x5, 0xfffffff1, 0x4, 0x9c3, 0x7fff, 0xa, 0x90d1, 0x9, 0x8da4, 0x100, 0x2a6, 0x414, 0xfffffff2, 0x1b, 0xe, 0x7, 0x9fc0, 0x7, 0x30000000, 0x7, 0x762e, 0x3, 0xffff, 0x18, 0x5e2b3a46, 0x0, 0x5, 0x1ed3d867, 0x5, 0x9, 0x4], [0x8, 0x4, 0x6, 0xb, 0x1, 0x6, 0x9, 0x7, 0x7, 0x7fff, 0x8, 0x9, 0x9, 0x2, 0x101, 0x6, 0x6, 0x6, 0x5, 0x5, 0x10000, 0x80, 0xe1, 0x1ff, 0x0, 0x3, 0x8, 0xdc38, 0x8, 0x0, 0x3ff, 0x7, 0x7c, 0x9, 0xf, 0x100, 0x10000, 0x0, 0x2, 0x2, 0x8, 0x7, 0x5f28, 0x5, 0x2, 0x5, 0x5, 0xfffffffa, 0x200, 0xf, 0x1, 0x4, 0x9, 0x0, 0x3, 0x0, 0x2c59, 0x4, 0x9, 0x4, 0xd6, 0x57e, 0x5, 0x2], [0x3, 0x0, 0x7fff, 0x9, 0xe3, 0x6, 0x9, 0x3, 0x8, 0x800, 0x6e0, 0x2, 0x4, 0x7ff, 0x7, 0x8, 0x1, 0x5, 0x863, 0x1, 0x9, 0xe4f6, 0x80000000, 0xf, 0xfff, 0x5, 0x8, 0xe, 0x4, 0x4, 0x3, 0x7, 0x2, 0x5, 0x7, 0xb, 0xc, 0x7, 0xff, 0x6, 0xfffffff9, 0xffffffff, 0x6, 0x9, 0x0, 0x8, 0x0, 0x5, 0x7, 0x1, 0xfff, 0x5, 0x4d, 0x8, 0x1, 0xfffffffa, 0x7, 0x5, 0x3, 0x1, 0x4, 0x4, 0x3, 0x9]}, 0x45c) r9 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000001bc0)={0x2, 'vcan0\x00', {0x5}, 0x400}) r10 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000001c00)={r6, 0x1, 0x0, 0xfffffffffffff000}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000001c80)=[r1, r8, r10, r1, 0xffffffffffffffff], 0x5) 2.791073783s ago: executing program 2 (id=3652): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f900feff0500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 2.654930421s ago: executing program 1 (id=3654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000400)={0x0, 0xffffffc0, 0x53de, 0x57, 0x0, [0x0, 0x0, 0x0, r6], [0x2, 0x60ef, 0x2, 0xfffffadb], [0x40, 0x3cb, 0xf34, 0x7ff], [0x0, 0x800, 0x7fffffff, 0x8000]}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r7, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x5dddbfe, 0x10}, 0x5c) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r9, 0x1, 0x0, 0x25dfdbff, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wrr\x00', 0x1, 0x0, 0x78}, 0x2c) 2.654558474s ago: executing program 2 (id=3655): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x24008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x41, 0x3, 0x1c0, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x128, 0x1f0, 0x1f0, 0x128, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'syzkaller0\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x220) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6, @broadcast}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r11, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r4}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2.5915093s ago: executing program 7 (id=3656): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYBLOB="23829bad0f"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x113e01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x20200, 0x0) r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140)=0x49c2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r7, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000280)={[0xa000, 0x80a0000, 0x70000, 0x10000], 0x7, 0x40, 0x4}) syz_emit_ethernet(0x22, 0x0, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) fstat(r8, 0x0) 2.480214453s ago: executing program 4 (id=3657): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f8", 0x2d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b6", 0x86}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca5", 0x6e}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000010901080000000021000000120080090800034000000008080005400000001a100002000c000280"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000700000000040014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010426bd7000fedbdf2503000000300001"], 0x44}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000001880)="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", 0xf91}, {&(0x7f0000000600)="e24d15dd079e127eadd889294224da39f99ce3126e69beb1835dc21f13bc2e8fcf2550e3d0d9c1be3f5ecb12ed9fa2c82c6a9b52659ad8cf98fb4ac7b8e6154479bd6f9c1c5bb0b02282cf042bf49a76a528d1fce30f6df0b1b31384e0dba00e49f501b59847fd58944e431c1b3e69e00718fc576fdd98db959760616a2ffdd3e66a92e9e30d2761e80def0e7bc5d469a4d51aeb543824c536824c5bc05bc08da523a3fe5f7d16633b0a9159f7cc17e0c40a5cec14d53552c4487eba7dce365f63925eb2c09672e56081ec1d0a8f832c88844f2d11af39e6c7e4d4ee84c5dcbad7de21ad8386fdd6f21c92a99a", 0xed}, {&(0x7f0000000700)="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", 0xfa}], 0x3, 0x1, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000dc0)={'syz1\x00', {0xd91, 0x401, 0x8001, 0x18e}, 0x6, [0x5b, 0x401, 0x1, 0x4, 0x100, 0x1, 0x50, 0x5, 0x9, 0x8001, 0x401, 0x7, 0x0, 0x52e, 0x9334, 0xffff, 0x1, 0x2, 0xc, 0x3, 0xac40, 0x200000, 0x0, 0x5, 0x81, 0x8, 0x2, 0x5, 0x3, 0x9, 0xe, 0xfffffff7, 0x6, 0x0, 0xebd, 0x5, 0x0, 0x2, 0x7, 0x1, 0x714, 0x0, 0x4, 0x3, 0xa0de, 0x1ff00000, 0xec1b, 0x9, 0x4, 0x1f, 0x6, 0x10, 0x4, 0x913, 0x4, 0x9, 0xe, 0x8, 0x6, 0xc, 0xf1e2, 0xfffffff8, 0x3, 0x6], [0xd106, 0x6, 0x4, 0x10, 0x6, 0x6, 0x5, 0x9, 0xd8, 0x1, 0x8, 0x8, 0x1, 0x0, 0x6, 0x101, 0x1, 0x3, 0xff, 0x8, 0xda, 0x4, 0x2, 0xae, 0xfdb, 0x4, 0xff, 0x7fff, 0x0, 0x800, 0x7, 0x4a, 0x5, 0x6, 0x2, 0x80, 0x8, 0x1, 0xc, 0x9, 0x6c, 0xc0, 0xb760, 0x1ff, 0x3, 0x0, 0x0, 0x4ef9f8af, 0x0, 0x0, 0x1000, 0xfffffff7, 0x8b96, 0x7, 0x100, 0x8, 0x4, 0xfffffffb, 0x9, 0x3, 0x7, 0x40, 0x9, 0x8], [0xff, 0x3, 0xc, 0x80000001, 0x473, 0x3, 0x9, 0x1, 0x7fff, 0xeb, 0x9, 0x0, 0x9, 0x7, 0x7ad, 0x1, 0xffffe45e, 0x9, 0x2, 0x8, 0x0, 0x5, 0x8, 0x3, 0x8, 0xb, 0x80000001, 0x5, 0x4, 0x7fff, 0x2, 0x88dc, 0x1, 0x100, 0x80, 0xf, 0x7ff, 0xffffffff, 0x6, 0x5, 0xae, 0x8, 0x0, 0x9, 0x7, 0xd5f, 0x7f, 0x9, 0x9, 0x4, 0xc, 0x3, 0xfff, 0x3, 0x1, 0x3, 0xd, 0x2, 0x0, 0x0, 0xffffffff, 0x8, 0x7, 0x9], [0x3, 0x7fffffff, 0x5, 0x3, 0x6, 0xe, 0x3, 0xffffffff, 0x6, 0x3574, 0x0, 0x8, 0x0, 0x8, 0x0, 0x8, 0x4, 0x4, 0x5, 0x80009, 0x9, 0x6e5, 0x0, 0x7, 0xfffffc01, 0x2, 0x3, 0x9b0, 0x8, 0x0, 0x0, 0x4, 0xaa7, 0x8, 0x3, 0x0, 0x3, 0xa000, 0xffff, 0x2e9700, 0x0, 0x8, 0x6, 0x4, 0x6, 0x2, 0x7, 0x80, 0x9ab, 0x9, 0x3, 0x1, 0x3, 0x7, 0x5, 0x9, 0x1, 0x7, 0x53, 0x4, 0x4, 0x686, 0x101, 0x7]}, 0x45c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.398967577s ago: executing program 1 (id=3658): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x80480, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2277e77d6087cdc2}], 0x1, 0x0, 0x0, 0x0) process_madvise(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="feb02a2deab80fc23201f78ec8bb5d9c52b9f264f2990dab3bca4af8c73fe614cb4218a18f950247ba09865be1a41681bbd93b6a9867a4262c7f7ee04907545d466d2867f5ac6d8021eb090a6f16664e3e0e86fb8511ee931a320ba75d2a30764de8f9f39ce46614c812f95b00fbf2d509", 0x71}, {&(0x7f0000000340)="170a397ff87f671e7802b18bb5bf530390a12e6f9db4ea8a2f9a61e2fb273a9d05f709451e89b94553cfcf8f865883d5bc6b635718698f7dc3c4d8070b7a97cfbf43de38626386df9bf1479b04b3612c8e6ea2838deedf0f4942de40ef00fd94a7e6703e0300457776dfb3d63adb5ef44f6a5f30ab375d617d2a3db557e7b1e4e6156ba330a9c92efe2a0c7cd491e3", 0x8f}], 0x2, 0xe, 0x0) (async) process_madvise(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="feb02a2deab80fc23201f78ec8bb5d9c52b9f264f2990dab3bca4af8c73fe614cb4218a18f950247ba09865be1a41681bbd93b6a9867a4262c7f7ee04907545d466d2867f5ac6d8021eb090a6f16664e3e0e86fb8511ee931a320ba75d2a30764de8f9f39ce46614c812f95b00fbf2d509", 0x71}, {&(0x7f0000000340)="170a397ff87f671e7802b18bb5bf530390a12e6f9db4ea8a2f9a61e2fb273a9d05f709451e89b94553cfcf8f865883d5bc6b635718698f7dc3c4d8070b7a97cfbf43de38626386df9bf1479b04b3612c8e6ea2838deedf0f4942de40ef00fd94a7e6703e0300457776dfb3d63adb5ef44f6a5f30ab375d617d2a3db557e7b1e4e6156ba330a9c92efe2a0c7cd491e3", 0x8f}], 0x2, 0xe, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.341397906s ago: executing program 1 (id=3659): write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) pipe2(0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8003, 0x7}, 0x50) openat$vcs(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x90) 2.062825312s ago: executing program 4 (id=3660): pipe(&(0x7f0000000380)) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r0, 0x2, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xfa) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xffffffff, 0x8, 0x3eb2, 0x5, 0x0, [{0x77, 0x0, 0x8, '\x00', 0xc}, {0x8, 0x0, 0x7, '\x00', 0x9}, {0x3, 0x1, 0xc, '\x00', 0xd4}, {0x6, 0x86, 0x3, '\x00', 0xff}, {0xc4, 0xa, 0x1, '\x00', 0x4}, {0x4f, 0x4, 0x1, '\x00', 0x8}, {0xfb, 0x7, 0x75, '\x00', 0x2}, {0x7, 0x10, 0xfc, '\x00', 0x2}, {0x12, 0x4, 0xf, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0x7}, {0x5, 0x0, 0x8, '\x00', 0x9}, {0x9, 0xd, 0x5, '\x00', 0x6}, {0x4, 0x8, 0x4, '\x00', 0x2}, {0xa, 0x53, 0x5, '\x00', 0x10}, {0x4, 0xfa, 0x1, '\x00', 0x6}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x3b, 0xc, 0x6, '\x00', 0x7}, {0x4, 0x8d, 0x80, '\x00', 0x7}, {0x23, 0x83, 0x28, '\x00', 0x1}, {0x7c, 0x5, 0x3d, '\x00', 0x5}, {0x10, 0x6, 0xfd, '\x00', 0x9}, {0x8f, 0x8, 0x7, '\x00', 0x9}, {0xa9, 0x10, 0xe, '\x00', 0x4}, {0x46, 0x4, 0x1, '\x00', 0x8}]}}) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c8, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x4}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) unshare(0x6a040000) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0)=0x4, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0}) (fail_nth: 1) 1.101587883s ago: executing program 1 (id=3661): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x7a52, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}}], 0x1, 0x40c40c0) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000001880)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[], 0x38}}, 0x4) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000000)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a09"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) 1.046948736s ago: executing program 2 (id=3662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r5, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 906.700359ms ago: executing program 1 (id=3663): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/171, 0xab, 0x9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xf8ffffff}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x7) close_range(r5, r5, 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 867.040484ms ago: executing program 4 (id=3664): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x14, 0x1}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000d00000000000000fcffffff18120000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000300)="6db4efa6ca9c1ce85f5040d6c546b7237341d1948352b8a0b2bca05d5d50289c1aab5b3f900c37f574ff360f93a8443271dfae64f97d13bd6ae30e1d1ab900b46720082aaa759790ce16470898b4a42f4a04694b77fdeb4338139cb1526003c8fa37723ac7362e907f997d816925500b6f914553fbe0e6777c9e922e59a2cadc6adb6996ace3cdbb7284116d630b77c53537f381dcdfbc4f496a", &(0x7f00000003c0)=""/212, &(0x7f00000004c0)="d60696fba94f7f", &(0x7f00000005c0)="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", 0x800, r1}, 0x38) 782.258728ms ago: executing program 2 (id=3665): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TCSETS(r1, 0x545c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r2, 0x20, &(0x7f0000000780)={&(0x7f0000000500)=""/235, 0xeb, 0x0, &(0x7f00000006c0)=""/192, 0xc0}}, 0x10) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x102) chdir(&(0x7f0000000680)='./file0\x00') truncate(&(0x7f0000000040)='./bus\x00', 0xfffffffffffffffb) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000150a000200000000000000000d0000070900020073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 503.184929ms ago: executing program 4 (id=3666): r0 = io_uring_setup(0x136a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(0x0, 0x345142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x4000005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r5, &(0x7f00000004c0)={0x2020}, 0x2020) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f0000000640)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000240)={r8, &(0x7f0000000200), 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000140)={r8, &(0x7f0000000040), &(0x7f00000000c0)}) syz_usb_connect(0x2, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xf9, 0x49, 0xce, 0x40, 0x3731, 0x113, 0xddb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x8, 0x0, 0x7231d0f8ecf8343f, 0x81}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=3667): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet(0x2, 0x3, 0x6) creat(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fffffffac1414aa0000000072995abec9bc5b69bee43ca977d129979e99ad6be27c6b1db2af87b3067d7014fd79beed21678d8afac9e9c631b293432dbe2ff4c014bc4fedfda445d1352f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001b09c40005020000fffd000880000002d58838068b91000000"], 0x4e) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) kernel console output (not intermixed with test programs): 1] usb usb2-port1: attempt power cycle [ 600.408237][T16933] syzkaller0: entered promiscuous mode [ 600.424473][T16935] loop3: detected capacity change from 0 to 7 [ 600.430994][T16933] syzkaller0: entered allmulticast mode [ 600.447803][T16935] Dev loop3: unable to read RDB block 7 [ 600.469889][T16935] loop3: unable to read partition table [ 600.484131][T16935] loop3: partition table beyond EOD, truncated [ 600.497278][T16935] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 600.709443][ T8701] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 600.825139][ T8701] usb 2-1: device descriptor read/8, error -71 [ 601.108548][ T8701] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 601.163865][ T8701] usb 2-1: device descriptor read/8, error -71 [ 601.433029][T16961] loop5: detected capacity change from 0 to 7 [ 601.433357][ T8701] usb usb2-port1: unable to enumerate USB device [ 601.449685][T16962] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 601.462436][T16961] Dev loop5: unable to read RDB block 7 [ 601.475701][T16961] loop5: AHDI p1 p2 p3 [ 601.799275][T16961] loop5: partition table partially beyond EOD, truncated [ 601.814517][T16961] loop5: p1 start 1601398130 is beyond EOD, truncated [ 601.827758][T16961] loop5: p2 start 1702059890 is beyond EOD, truncated [ 601.900465][ T30] audit: type=1400 audit(1781992220.577:1362): avc: denied { getopt } for pid=16966 comm="syz.0.3134" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 602.700045][ T5705] net_ratelimit: 7 callbacks suppressed [ 602.700063][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.763739][ T5797] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 602.948985][ T8701] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 602.957628][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 602.976513][ T5797] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 246, changing to 7 [ 602.991923][ T5797] usb 3-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice= 0.40 [ 603.007553][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.017434][T16985] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 603.025401][ T5797] usb 3-1: Product: ࡃ [ 603.030281][ T5797] usb 3-1: Manufacturer: ࠌ [ 603.035016][ T5797] usb 3-1: SerialNumber: 위῏퐓旙ⳏ蔞셦Ớ帅농ྒྷ؞裘鱏✜蕂⾴ఄ䐃쑿㮢穡Ἷ֤居상ं驲㦸點ﴢᡨ뀉렚妶ಭ㗣嬑雔᱆㕯엮὏ꩥ譮맘₪厕 [ 603.123268][ T8701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.134762][ T8701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.135097][T16989] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3143'. [ 603.154341][ T8701] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 603.155137][T16989] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3143'. [ 603.165158][ T8701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.181886][T16989] netlink: 640 bytes leftover after parsing attributes in process `syz.0.3143'. [ 603.188099][ T8701] usb 5-1: config 0 descriptor?? [ 603.283264][ T5797] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.298818][ T5797] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 603.318678][ T5797] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.326369][ T5797] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 603.342857][ T5797] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.424381][ T5797] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 603.483283][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.491480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.747807][ T5797] usb 3-1: USB disconnect, device number 89 [ 603.759760][ T8701] hid-thrustmaster 0003:044F:B65D.0010: collection stack underflow [ 603.791651][ T8693] udevd[8693]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.792135][ T8701] hid-thrustmaster 0003:044F:B65D.0010: item 0 1 0 12 parsing failed [ 603.823137][ T8701] hid-thrustmaster 0003:044F:B65D.0010: parse failed with error -22 [ 603.835135][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.845610][ T8701] hid-thrustmaster 0003:044F:B65D.0010: probe with driver hid-thrustmaster failed with error -22 [ 604.173929][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.410157][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.427367][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.741393][ T9] usb 5-1: USB disconnect, device number 114 [ 604.867044][T11609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.875363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.038437][ T5797] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 605.058945][T17045] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3160'. [ 605.072512][T17045] geneve2: entered promiscuous mode [ 605.077759][T17045] geneve2: entered allmulticast mode [ 605.203315][ T30] audit: type=1400 audit(1781992223.633:1363): avc: denied { write } for pid=17028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.237241][ T5797] usb 2-1: Using ep0 maxpacket: 32 [ 605.251416][ T5797] usb 2-1: config 0 has no interfaces? [ 605.259050][ T5797] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 605.269966][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 605.287677][ T5797] usb 2-1: Product: syz [ 605.291998][ T5797] usb 2-1: Manufacturer: syz [ 605.296687][ T5797] usb 2-1: SerialNumber: syz [ 605.385003][T15115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.402712][ T30] audit: type=1400 audit(1781992223.799:1364): avc: denied { write } for pid=17060 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.417858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 605.434643][ T5797] usb 2-1: config 0 descriptor?? [ 605.708026][T17021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17021 comm=syz.1.3154 [ 605.753076][T17021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17021 comm=syz.1.3154 [ 605.825357][ T8701] usb 2-1: USB disconnect, device number 39 [ 605.965049][ T30] audit: type=1400 audit(1781992224.344:1365): avc: denied { write } for pid=17067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.044320][ T30] audit: type=1400 audit(1781992224.408:1366): avc: denied { write } for pid=17079 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.575887][ T30] audit: type=1400 audit(1781992224.898:1367): avc: denied { write } for pid=17088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.649264][T17115] netlink: 'syz.2.3172': attribute type 5 has an invalid length. [ 606.649326][T17111] lo speed is unknown, defaulting to 1000 [ 606.729264][ T30] audit: type=1400 audit(1781992225.054:1368): avc: denied { write } for pid=17116 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.892362][ T8701] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 607.013976][T17127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3175'. [ 607.075013][ T8701] usb 5-1: Using ep0 maxpacket: 32 [ 607.092481][ T8701] usb 5-1: config 246 has an invalid interface number: 166 but max is 0 [ 607.112306][ T8701] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 607.164148][ T8701] usb 5-1: config 246 has no interface number 0 [ 607.205599][T17126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3171'. [ 607.233362][ T8701] usb 5-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 607.317033][ T8701] usb 5-1: config 246 interface 166 altsetting 118 bulk endpoint 0xB has invalid maxpacket 0 [ 607.383511][ T8701] usb 5-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.399520][T17137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3177'. [ 607.410376][ T8701] usb 5-1: config 246 interface 166 has no altsetting 0 [ 607.420649][T17137] geneve2: entered promiscuous mode [ 607.431665][T17137] geneve2: entered allmulticast mode [ 607.449954][ T8701] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 607.469501][ T8701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.482746][ T8701] usb 5-1: Product: syz [ 607.487953][ T8701] usb 5-1: Manufacturer: syz [ 607.493596][ T8701] usb 5-1: SerialNumber: syz [ 607.580084][ T30] audit: type=1400 audit(1781992225.830:1369): avc: denied { write } for pid=17125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.605458][ T5797] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 607.658331][ T30] audit: type=1400 audit(1781992225.904:1370): avc: denied { write } for pid=17154 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.789571][ T5797] usb 2-1: Using ep0 maxpacket: 32 [ 607.796618][ T5797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.815623][ T5797] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.830004][ T5797] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.840012][ T5797] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.856063][ T5797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 607.862688][ T5797] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 607.866550][ T30] audit: type=1400 audit(1781992226.088:1371): avc: denied { write } for pid=17157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.872313][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.897851][ T8699] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 607.913064][ T5797] usb 2-1: config 0 descriptor?? [ 607.958672][ T30] audit: type=1400 audit(1781992226.181:1372): avc: denied { write } for pid=17168 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.986094][ T9] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 608.049597][ T8699] usb 1-1: device descriptor read/64, error -71 [ 608.150046][ T9] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 608.167404][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 608.168681][ T8701] usb 5-1: Limiting number of CPorts to U8_MAX [ 608.176013][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 608.181538][ T8701] usb 5-1: Not enough endpoints found in device, aborting! [ 608.189332][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.204590][ T9] usb 3-1: Product: ဤ [ 608.208790][ T9] usb 3-1: Manufacturer: ј [ 608.320374][ T8699] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 608.405700][ T5797] corsair-cpro 0003:1B1C:0C10.0011: item fetching failed at offset 2/5 [ 608.414914][ T5797] corsair-cpro 0003:1B1C:0C10.0011: probe with driver corsair-cpro failed with error -22 [ 608.424350][ T8701] usb 5-1: USB disconnect, device number 115 [ 608.438876][ T30] audit: type=1400 audit(1781992226.624:1373): avc: denied { setopt } for pid=17151 comm="syz.2.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 608.460982][T17156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=521 sclass=netlink_route_socket pid=17156 comm=syz.2.3181 [ 608.475069][T17156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.483466][ T8699] usb 1-1: device descriptor read/64, error -71 [ 608.490261][T17156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.506583][ T9] usb 3-1: USB disconnect, device number 90 [ 608.602173][ T8699] usb usb1-port1: attempt power cycle [ 608.948751][ T5705] net_ratelimit: 7 callbacks suppressed [ 608.948768][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.970279][ T8699] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 608.994283][ T8699] usb 1-1: device descriptor read/8, error -71 [ 609.118299][ T8527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.126795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.263799][ T8699] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 609.317369][ T8699] usb 1-1: device descriptor read/8, error -71 [ 609.363912][T17177] veth3: left allmulticast mode [ 609.447133][ T8699] usb usb1-port1: unable to enumerate USB device [ 609.674353][ T5705] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 609.685187][T15115] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 609.848581][T15115] usb 3-1: Using ep0 maxpacket: 32 [ 609.858260][ T5705] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 609.861743][T15115] usb 3-1: config 6 has an invalid interface number: 34 but max is 1 [ 609.868343][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.875500][T15115] usb 3-1: config 6 has an invalid interface number: 156 but max is 1 [ 609.892884][T15115] usb 3-1: config 6 has no interface number 0 [ 609.899093][T15115] usb 3-1: config 6 has no interface number 1 [ 609.905276][T15115] usb 3-1: config 6 interface 34 altsetting 128 endpoint 0x8A has invalid maxpacket 1023, setting to 64 [ 609.916984][T15115] usb 3-1: config 6 interface 34 altsetting 128 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 609.917478][ T5705] usb 5-1: config 0 descriptor?? [ 609.936593][T15115] usb 3-1: config 6 interface 34 altsetting 128 has a duplicate endpoint with address 0x8A, skipping [ 609.938280][ T8699] usb 2-1: USB disconnect, device number 40 [ 609.957174][T15115] usb 3-1: config 6 interface 34 altsetting 128 endpoint 0x3 has invalid maxpacket 1999, setting to 64 [ 609.972815][T15115] usb 3-1: config 6 interface 34 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 609.986450][T15115] usb 3-1: config 6 interface 34 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 609.999680][T15115] usb 3-1: config 6 interface 34 altsetting 128 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 610.012520][T15115] usb 3-1: config 6 interface 34 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 610.027472][T15115] usb 3-1: config 6 interface 34 altsetting 128 endpoint 0x5 has invalid maxpacket 1040, setting to 64 [ 610.042330][T15115] usb 3-1: config 6 interface 34 altsetting 128 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 610.058529][T15115] usb 3-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0x9, skipping [ 610.075301][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.082131][T15115] usb 3-1: config 6 interface 156 altsetting 64 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 610.099982][T15115] usb 3-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 610.118435][T15115] usb 3-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 610.131385][T15115] usb 3-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 610.144723][T15115] usb 3-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 610.265822][T15115] usb 3-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 610.303940][ T5705] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 610.614687][ T5705] hackrf 5-1:0.0: Could not detect board [ 610.620694][ T5705] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 610.632589][ T5705] usb 5-1: USB disconnect, device number 116 [ 610.641036][T15115] usb 3-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 610.678782][T15115] usb 3-1: config 6 interface 34 has no altsetting 0 [ 610.701445][T15115] usb 3-1: config 6 interface 156 has no altsetting 0 [ 610.722427][T15115] usb 3-1: Dual-Role OTG device on HNP port [ 610.735291][T15115] usb 3-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice=87.9f [ 610.750213][T15115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.760346][T15115] usb 3-1: Product: 䰊 [ 610.764560][T15115] usb 3-1: Manufacturer: ࠝ [ 610.769255][T15115] usb 3-1: SerialNumber: ఄ [ 610.932794][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.941073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.106174][ T8527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.114430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.191239][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.289708][T17212] loop3: detected capacity change from 0 to 7 [ 611.301278][T17212] Dev loop3: unable to read RDB block 7 [ 611.307092][T17212] loop3: unable to read partition table [ 611.315749][T17212] loop3: partition table beyond EOD, truncated [ 611.324205][T17212] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 611.389361][T17211] lo speed is unknown, defaulting to 1000 [ 611.999685][T15115] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.014561][ T5705] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 612.047353][T15115] snd-usb-audio 3-1:6.34: probe with driver snd-usb-audio failed with error -2 [ 612.113492][T15115] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.231714][T15115] snd-usb-audio 3-1:6.156: probe with driver snd-usb-audio failed with error -2 [ 612.308264][T15115] usb 3-1: USB disconnect, device number 91 [ 612.327871][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.441707][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.579684][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3201'. [ 613.184273][ T4988] block nbd0: Possible stuck request ffff888027ff5080: control (read@0,1024B). Runtime 90 seconds [ 613.195225][ T4988] block nbd0: Possible stuck request ffff888027ff5240: control (read@1024,1024B). Runtime 90 seconds [ 613.206210][ T4988] block nbd0: Possible stuck request ffff888027ff5400: control (read@2048,1024B). Runtime 90 seconds [ 613.217489][ T4988] block nbd0: Possible stuck request ffff888027ff55c0: control (read@3072,1024B). Runtime 90 seconds [ 613.235115][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3203'. [ 613.256004][T17247] netlink: 5128 bytes leftover after parsing attributes in process `syz.6.3203'. [ 613.271413][T17245] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 613.810091][T17252] lo speed is unknown, defaulting to 1000 [ 613.857441][T15115] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 613.916067][T15115] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 613.958496][T15115] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 613.997851][T15115] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 614.041069][T15115] rtc rtc0: __rtc_set_alarm: err=-22 [ 614.158578][T17215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3195'. [ 614.173151][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 615.263916][T11609] net_ratelimit: 3 callbacks suppressed [ 615.263937][T11609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.277796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.637401][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.541729][ T5705] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 616.652038][T11609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.660314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.742010][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.752554][ T5705] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 616.772411][ T5705] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 616.783997][ T5705] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 616.793131][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.801176][ T5705] usb 5-1: Product: syz [ 616.805407][ T5705] usb 5-1: Manufacturer: syz [ 616.811003][ T5705] usb 5-1: SerialNumber: syz [ 616.835022][ T5705] usb 5-1: config 0 descriptor?? [ 616.850273][ T5705] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 616.868898][T17315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3220'. [ 616.882310][T17315] geneve2: entered promiscuous mode [ 616.887599][T17315] geneve2: entered allmulticast mode [ 617.452649][T17335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3221'. [ 617.871064][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.957461][T17284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.959998][ T30] audit: type=1400 audit(1781992235.413:1374): avc: denied { setattr } for pid=17354 comm="syz.2.3227" name="PACKET" dev="sockfs" ino=68416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 617.966051][T17284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.438381][T17371] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 618.507212][T17377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3232'. [ 618.926415][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'. [ 618.990375][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.138941][ T5712] usb 5-1: USB disconnect, device number 118 [ 619.318322][T17394] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3238'. [ 619.492584][T17398] netlink: 'syz.2.3239': attribute type 64 has an invalid length. [ 619.654363][ T30] audit: type=1400 audit(1781992236.982:1375): avc: denied { name_bind } for pid=17391 comm="syz.4.3237" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 620.117186][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.125310][ T8527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.367286][T17422] syzkaller0: entered promiscuous mode [ 620.373784][T17422] syzkaller0: entered allmulticast mode [ 620.398455][T17422] tipc: Started in network mode [ 620.403554][T17422] tipc: Node identity 4e19d0ccb29d, cluster identity 4711 [ 620.411777][T17422] tipc: Enabled bearer , priority 0 [ 620.425506][T17421] tipc: Resetting bearer [ 620.444197][T17421] tipc: Disabling bearer [ 620.907104][ T8701] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 621.112767][ T8701] usb 1-1: Using ep0 maxpacket: 16 [ 621.125044][ T5726] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 621.150522][ T8701] usb 1-1: config 0 interface 0 has no altsetting 0 [ 621.166966][ T30] audit: type=1400 audit(1781992238.349:1376): avc: denied { accept } for pid=17445 comm="syz.1.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 621.196449][ T8701] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 621.219929][ T8701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.246036][ T8699] net_ratelimit: 3 callbacks suppressed [ 621.246048][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.297284][ T8701] usb 1-1: config 0 descriptor?? [ 621.454230][ T5726] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 621.465117][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.481519][ T5726] usb 3-1: Product: syz [ 621.491881][ T5726] usb 3-1: Manufacturer: syz [ 621.504752][ T5726] usb 3-1: SerialNumber: syz [ 621.506594][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.517554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.749340][T17450] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3254'. [ 621.805991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 622.196560][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.273266][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 622.369738][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.896760][T11609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.905080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.936863][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.143350][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 623.154491][ T5726] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 623.171576][ T5726] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 623.187742][ T5726] usb 3-1: USB disconnect, device number 92 [ 623.327686][T17471] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3257'. [ 623.397394][T17474] syzkaller0: entered promiscuous mode [ 623.407837][T17474] syzkaller0: entered allmulticast mode [ 623.417943][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.479266][T17467] tipc: Started in network mode [ 623.489338][T17484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3261'. [ 623.496966][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.609900][T17467] tipc: Node identity ce54e5658d3f, cluster identity 4711 [ 623.617901][T17467] tipc: Enabled bearer , priority 0 [ 623.627057][T17464] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3257'. [ 623.638683][T17466] tipc: Resetting bearer [ 623.646131][T17464] nbd: device at index 64 is going down [ 623.675020][T17486] Bluetooth: MGMT ver 1.23 [ 623.698211][T17466] tipc: Disabling bearer [ 624.156918][ T5712] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 624.340689][ T5712] usb 5-1: Using ep0 maxpacket: 16 [ 624.365993][ T5712] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 624.397997][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.425404][ T5712] usb 5-1: Product: syz [ 624.440681][ T5712] usb 5-1: Manufacturer: syz [ 624.449796][ T5712] usb 5-1: SerialNumber: syz [ 624.474424][ T5712] usb 5-1: config 0 descriptor?? [ 624.482739][ T5712] hub 5-1:0.0: bad descriptor, ignoring hub [ 624.491931][ T5712] hub 5-1:0.0: probe with driver hub failed with error -5 [ 624.524197][ T5712] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 624.556118][ T8557] usb 5-1: Failed to submit usb control message: -71 [ 624.568362][ T8557] usb 5-1: unable to send the bmi data to the device: -71 [ 624.578248][ T8557] usb 5-1: unable to get target info from device [ 624.585827][ T8557] usb 5-1: could not get target info (-71) [ 624.593541][ T8557] usb 5-1: could not probe fw (-71) [ 624.979773][ T5712] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 625.153091][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 625.160154][ T5712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 625.169467][ T5712] usb 3-1: config 31 has an invalid interface number: 197 but max is 0 [ 625.178021][ T5712] usb 3-1: config 31 has no interface number 0 [ 625.184568][ T5712] usb 3-1: config 31 interface 197 has no altsetting 0 [ 625.193436][ T5712] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 625.202714][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.212543][ T5712] usb 3-1: Product: Ќ [ 625.216751][ T5712] usb 3-1: Manufacturer: Щ [ 625.222006][ T5712] usb 3-1: SerialNumber: 僡퓶ᤢ䝇⽞箭菒Ž뭇达賧㩙밬뻠賈鴩큀칧쌎ㄠ鈬쟨㳯稥핹쑧鯰ሕ宅饃倫⿢꺪辣缸 [ 625.463095][ T5712] gspca_main: etoms-2.14.0 probing 102c:6151 [ 625.502518][ T5712] usb 3-1: USB disconnect, device number 93 [ 626.323125][ T5712] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 626.496383][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 626.647529][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 626.674208][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 626.684839][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.696502][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 626.715494][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 626.732396][ T5712] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 626.741676][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.749889][ T5712] usb 2-1: Product: syz [ 626.754096][ T5712] usb 2-1: Manufacturer: syz [ 626.759330][ T5712] usb 2-1: SerialNumber: syz [ 626.791733][ T5712] usb 2-1: config 0 descriptor?? [ 626.842094][T17515] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 626.875625][T17527] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3273'. [ 626.880012][ T5712] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 626.894829][ T5705] net_ratelimit: 5 callbacks suppressed [ 626.894852][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.942826][ T5726] usb 5-1: USB disconnect, device number 119 [ 627.004214][ T4959] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 627.040071][ T4959] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 627.207408][ T4959] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 627.235706][T17515] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 627.264890][ T5898] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 627.266933][ T5726] usb 2-1: USB disconnect, device number 41 [ 627.274844][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 627.308505][T17531] syz_tun: entered allmulticast mode [ 627.318381][T17531] bond0: entered promiscuous mode [ 627.324802][T17531] : entered promiscuous mode [ 627.329731][T17531] bond_slave_1: entered promiscuous mode [ 627.450786][ T5712] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 627.465269][T17542] binder: 17541:17542 ioctl 890b 2000000006c0 returned -22 [ 627.482684][ T8701] usbhid 1-1:0.0: can't add hid device: -32 [ 627.488727][ T8701] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 627.578462][ T30] audit: type=1400 audit(1781992244.294:1377): avc: denied { read write } for pid=17541 comm="syz.6.3280" name="mouse0" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 627.607812][ T30] audit: type=1400 audit(1781992244.322:1378): avc: denied { open } for pid=17541 comm="syz.6.3280" path="/dev/input/mouse0" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 627.634094][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 627.642205][ T5712] usb 5-1: not running at top speed; connect to a high speed hub [ 627.651620][ T5712] usb 5-1: config 8 has no interfaces? [ 627.660484][ T5712] usb 5-1: string descriptor 0 read error: -22 [ 627.666971][ T5712] usb 5-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 627.676688][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.742166][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.750423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.809894][T17548] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3282'. [ 627.819656][T17548] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3282'. [ 627.828607][T17548] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3282'. [ 627.839494][T17548] SET target dimension over the limit! [ 627.865271][T17551] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 627.907722][ T5726] usb 5-1: USB disconnect, device number 120 [ 628.002553][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.099351][ T5712] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 628.142683][ T8701] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 628.262236][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 628.270916][ T5712] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 628.279999][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.288113][ T5712] usb 3-1: Product: syz [ 628.292365][ T5712] usb 3-1: Manufacturer: syz [ 628.296972][ T5712] usb 3-1: SerialNumber: syz [ 628.302586][ T5712] usb 3-1: config 0 descriptor?? [ 628.309448][ T5712] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 628.316085][ T8701] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 628.324758][ T8701] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 628.334967][ T8701] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 628.344235][ T8701] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 1024 [ 628.355520][ T8701] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 628.367011][ T8701] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 628.376170][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 628.384196][ T8701] usb 2-1: Product: syz [ 628.388374][ T8701] usb 2-1: Manufacturer: syz [ 628.402924][T17553] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 628.450917][ T8701] cdc_wdm 2-1:1.0: skipping garbage [ 628.456621][ T8701] cdc_wdm 2-1:1.0: skipping garbage [ 628.463639][ T8701] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 628.645189][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.687791][ T8701] usb 2-1: USB disconnect, device number 42 [ 628.728025][T17560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3286'. [ 628.892506][T17568] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3288'. [ 629.136313][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.147018][ T8556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.155235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.658020][T17575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3291'. [ 629.829911][ T5712] gspca_ov534_9: sccb_write failed [ 630.048559][ T5712] gspca_ov534_9: reg_w failed -71 [ 630.752113][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.991910][ T30] audit: type=1400 audit(1781992247.442:1379): avc: denied { setopt } for pid=17584 comm="syz.2.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 631.110929][ T5712] gspca_ov534_9: Unknown sensor 0000 [ 631.111477][ T5712] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 631.143914][ T5712] usb 3-1: USB disconnect, device number 94 [ 631.729788][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3302'. [ 631.748550][T17614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3303'. [ 631.930947][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.064398][T15115] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 632.369294][T15115] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 632.386099][T15115] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 632.407928][T15115] usb 5-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 632.421861][T15115] usb 5-1: config 220 has no interface number 2 [ 632.458032][T17621] Bluetooth: MGMT ver 1.23 [ 632.464939][T15115] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 632.482934][T15115] usb 5-1: config 220 interface 0 has no altsetting 0 [ 632.490102][T15115] usb 5-1: config 220 interface 76 has no altsetting 0 [ 632.499693][T15115] usb 5-1: config 220 interface 1 has no altsetting 0 [ 632.532032][T15115] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 632.551177][T15115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.569733][T15115] usb 5-1: Product: syz [ 632.575422][T15115] usb 5-1: Manufacturer: syz [ 632.583232][T15115] usb 5-1: SerialNumber: syz [ 633.068817][ T5712] net_ratelimit: 2 callbacks suppressed [ 633.068835][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.090494][T15115] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 633.120879][T15115] uvcvideo 5-1:220.0: No valid video chain found. [ 633.143578][T15115] usb 5-1: selecting invalid altsetting 0 [ 633.176550][T15115] usb 5-1: selecting invalid altsetting 0 [ 633.246002][T15115] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 633.262335][T15115] usb 5-1: USB disconnect, device number 121 [ 633.268065][T17642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 633.280143][T17642] block device autoloading is deprecated and will be removed. [ 633.290744][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.298972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.742365][T17638] md: could not open device unknown-block(0,0). [ 633.748905][T17638] md: md_import_device returned -6 [ 634.305101][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.459915][T17658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3315'. [ 634.675981][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.976621][T17673] lo speed is unknown, defaulting to 1000 [ 635.550561][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.558830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.637012][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.210273][T17680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3321'. [ 636.245772][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 636.828037][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.934929][T17694] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 636.979781][T17694] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 637.967975][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.067998][T17701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3327'. [ 638.355316][T17704] syzkaller0: entered promiscuous mode [ 638.361158][T17704] syzkaller0: entered allmulticast mode [ 638.378383][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 638.385666][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 638.394314][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 638.402826][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 638.410211][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 639.028720][T17722] lo speed is unknown, defaulting to 1000 [ 639.617307][ T5712] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 639.637345][ T5705] net_ratelimit: 2 callbacks suppressed [ 639.637361][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.639247][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.639335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.789815][ T5712] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 639.799054][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 639.807058][ T5712] usb 2-1: Product: syz [ 639.811855][ T5712] usb 2-1: SerialNumber: syz [ 639.841279][ T5712] usb 2-1: config 0 descriptor?? [ 640.313909][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.427869][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'. [ 640.528103][T17707] lo speed is unknown, defaulting to 1000 [ 640.545401][ T9] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 640.568207][ T5712] usb 2-1: USB disconnect, device number 43 [ 640.582282][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'. [ 640.664355][ T5619] Bluetooth: hci1: command tx timeout [ 640.741225][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.893595][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 640.921586][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 640.945632][T17752] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3339'. [ 640.956880][ T9] usb 3-1: config 8 has no interfaces? [ 641.128617][ T9] usb 3-1: string descriptor 0 read error: -22 [ 641.195571][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.195563][ T9] usb 3-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 641.195596][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.203832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.570275][ T8701] usb 3-1: USB disconnect, device number 95 [ 641.711026][T17707] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.728189][T17707] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.742732][T17707] bridge_slave_0: entered allmulticast mode [ 641.759325][T17707] bridge_slave_0: entered promiscuous mode [ 641.776853][T17707] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.794119][T17707] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.808215][T17707] bridge_slave_1: entered allmulticast mode [ 641.823171][T17707] bridge_slave_1: entered promiscuous mode [ 641.861771][T17707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.871198][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.872886][T17707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.933212][T17707] team0: Port device team_slave_0 added [ 641.946215][T17707] team0: Port device team_slave_1 added [ 641.981158][T17707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.988296][T17707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.016308][T17707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.031128][T17707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.038099][T17707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.064437][T17707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.100964][T17707] hsr_slave_0: entered promiscuous mode [ 642.107234][T17707] hsr_slave_1: entered promiscuous mode [ 642.113552][T17707] debugfs: 'hsr0' already exists in 'hsr' [ 642.119643][T17707] Cannot create hsr debugfs directory [ 643.136729][ T5619] Bluetooth: hci1: command tx timeout [ 643.156398][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.210335][T17707] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 643.221831][T17707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.229499][T17707] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 643.245340][T17707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.261407][T17707] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 643.515976][T17707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.533816][ T30] audit: type=1400 audit(1781992259.019:1380): avc: denied { bind } for pid=17787 comm="syz.1.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 643.534481][T17707] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 643.562153][ T30] audit: type=1400 audit(1781992259.019:1381): avc: denied { node_bind } for pid=17787 comm="syz.1.3348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 643.658685][T17790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3349'. [ 643.672888][T17707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.819028][T17802] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 643.828277][T17802] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 643.842909][ T30] audit: type=1400 audit(1781992259.305:1382): avc: denied { firmware_load } for pid=17787 comm="syz.1.3348" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 644.260785][T17805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.273826][T17805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.287763][T17805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.298870][T17805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.306845][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.342085][T17707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.438567][T17707] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.547372][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.554650][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.554771][ T30] audit: type=1400 audit(1781992259.905:1383): avc: denied { unmount } for pid=15286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 644.639139][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.646276][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.766507][ T30] audit: type=1400 audit(1781992260.164:1384): avc: denied { create } for pid=17819 comm="syz.1.3355" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 644.838986][ T30] audit: type=1400 audit(1781992260.210:1385): avc: denied { unlink } for pid=15286 comm="syz-executor" name="file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 645.333538][ T5613] Bluetooth: hci1: command tx timeout [ 645.420514][ T5705] net_ratelimit: 2 callbacks suppressed [ 645.420531][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.449685][T17852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3361'. [ 645.838162][T11613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.846344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.867669][ T4988] block nbd0: Possible stuck request ffff888027ff5080: control (read@0,1024B). Runtime 120 seconds [ 645.941283][ T4988] block nbd0: Possible stuck request ffff888027ff5240: control (read@1024,1024B). Runtime 120 seconds [ 645.960984][ T4988] block nbd0: Possible stuck request ffff888027ff5400: control (read@2048,1024B). Runtime 120 seconds [ 645.972124][ T4988] block nbd0: Possible stuck request ffff888027ff55c0: control (read@3072,1024B). Runtime 120 seconds [ 646.006567][T17707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.018963][T17854] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3362'. [ 646.603557][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.613890][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.681420][T17872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3367'. [ 646.763905][T17874] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 646.786838][T17880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3366'. [ 646.835151][T17880] unsupported nlmsg_type 40 [ 646.927801][ T30] audit: type=1400 audit(1781992262.158:1386): avc: denied { getopt } for pid=17873 comm="syz.2.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 647.088602][T17707] veth0_vlan: entered promiscuous mode [ 647.107811][T17707] veth1_vlan: entered promiscuous mode [ 647.143381][T17707] veth0_macvtap: entered promiscuous mode [ 647.161665][T17707] veth1_macvtap: entered promiscuous mode [ 647.168889][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.177166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.209959][T17707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.235604][T17707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.257962][ T8538] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.267288][ T8701] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 647.289229][ T8538] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.307038][ T8538] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.327068][ T5619] Bluetooth: hci3: command 0x0405 tx timeout [ 647.345354][ T8538] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.420607][ T8539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.450270][ T8701] usb 2-1: Using ep0 maxpacket: 16 [ 647.452141][ T8539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.470884][ T8701] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 21, changing to 7 [ 647.484730][ T8701] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 647.497796][ T8701] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024 [ 647.531984][ T9] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 647.544944][ T8701] usb 2-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice= 0.40 [ 647.557573][ T8557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.569647][ T8557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.581178][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.589497][ T5613] Bluetooth: hci1: command tx timeout [ 647.614191][ T8701] usb 2-1: Product: syz [ 647.632561][ T8701] usb 2-1: Manufacturer: syz [ 647.654526][ T8701] usb 2-1: SerialNumber: syz [ 647.705247][ T9] usb 3-1: device descriptor read/64, error -71 [ 647.773795][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.004580][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 648.049513][ T8701] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.077763][ T8701] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 648.104401][ T8701] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.124250][ T8701] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 648.161134][ T8701] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 648.170897][ T9] usb 3-1: device descriptor read/64, error -71 [ 648.252254][ T8701] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 648.295943][ T8701] usb 2-1: USB disconnect, device number 44 [ 648.300237][ T5726] hid_parser_main: 28 callbacks suppressed [ 648.300255][ T5726] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 648.315886][ T9] usb usb3-port1: attempt power cycle [ 648.336732][ T5726] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 648.339781][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.680781][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 648.756900][ T9] usb 3-1: device descriptor read/8, error -71 [ 648.942169][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.134905][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 649.264584][ T9] usb 3-1: device descriptor read/8, error -71 [ 649.759656][T17922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3378'. [ 649.840485][ T9] usb usb3-port1: unable to enumerate USB device [ 649.932243][ T30] audit: type=1326 audit(1781992264.928:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.3380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 649.990783][ T30] audit: type=1326 audit(1781992264.928:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.3380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 650.017385][T17920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3378'. [ 650.026408][T17920] nbd: nbd64 already in use [ 650.041976][ T30] audit: type=1326 audit(1781992264.964:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.3380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 650.071944][ T30] audit: type=1326 audit(1781992264.964:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.3380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 650.098777][T17921] syz.7.3379 (17921) used greatest stack depth: 19664 bytes left [ 650.133861][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.156559][ T30] audit: type=1326 audit(1781992264.974:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.3380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 650.184416][ T30] audit: type=1400 audit(1781992264.974:1392): avc: denied { wake_alarm } for pid=17926 comm="syz.6.3380" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 650.210639][ T30] audit: type=1326 audit(1781992265.029:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.3380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 650.238918][ T30] audit: type=1326 audit(1781992265.029:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.3380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f679459cbc2 code=0x7ffc0000 [ 650.266092][ T30] audit: type=1326 audit(1781992265.029:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.3380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f679459cc57 code=0x7ffc0000 [ 650.294303][ T5705] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 650.302262][ T30] audit: type=1326 audit(1781992265.029:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17926 comm="syz.6.3380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6794559b51 code=0x7ffc0000 [ 650.445967][ T5705] usb 2-1: device descriptor read/64, error -71 [ 650.706036][ T5705] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 650.738117][ T5726] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 650.868107][ T5705] usb 2-1: device descriptor read/64, error -71 [ 650.911362][ T5726] usb 5-1: Using ep0 maxpacket: 8 [ 650.983840][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 651.139346][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 651.139588][ T5705] usb usb2-port1: attempt power cycle [ 651.160516][ T5726] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 651.177628][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 63688, setting to 1024 [ 651.203846][ T5726] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 651.215895][ T5726] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 651.227475][ T8699] net_ratelimit: 2 callbacks suppressed [ 651.227490][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.246103][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.280324][T15115] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 651.324409][ T5726] usb 5-1: config 0 descriptor?? [ 651.330036][T17937] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 651.439748][T17963] 9pnet_virtio: no channels available for device syz [ 651.464339][T11613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.472581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.232773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 652.364066][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.376997][ T5705] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 652.418817][ T5705] usb 2-1: device descriptor read/8, error -71 [ 652.452247][T15115] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 652.463568][T15115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.480401][T17965] lo speed is unknown, defaulting to 1000 [ 652.591131][T15115] usb 3-1: Product: syz [ 652.597594][T15115] usb 3-1: Manufacturer: syz [ 652.605259][T15115] usb 3-1: SerialNumber: syz [ 652.617282][T15115] usb 3-1: config 0 descriptor?? [ 652.626264][T15115] ch341 3-1:0.0: ch341-uart converter detected [ 652.866801][T11613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.087686][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3386'. [ 653.416534][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.424817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.491339][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.565351][ T5613] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 653.714799][ T8699] usb 5-1: USB disconnect, device number 122 [ 654.111698][T15115] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 654.173007][T17988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3398'. [ 654.464933][T15115] usb 3-1: USB disconnect, device number 100 [ 654.486294][T15115] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 654.504890][T15115] ch341 3-1:0.0: device disconnected [ 654.522387][T17998] FAULT_INJECTION: forcing a failure. [ 654.522387][T17998] name failslab, interval 1, probability 0, space 0, times 0 [ 654.559948][T17998] CPU: 1 UID: 0 PID: 17998 Comm: syz.1.3401 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.559981][T17998] Tainted: [L]=SOFTLOCKUP [ 654.559988][T17998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.560001][T17998] Call Trace: [ 654.560007][T17998] [ 654.560014][T17998] dump_stack_lvl+0x100/0x190 [ 654.560041][T17998] should_fail_ex.cold+0x5/0xa [ 654.560065][T17998] ? fs_reclaim_acquire+0x70/0x100 [ 654.560088][T17998] ? tomoyo_realpath_from_path+0xb6/0x690 [ 654.560108][T17998] should_failslab+0xc2/0x120 [ 654.560129][T17998] __kmalloc_noprof+0xe0/0x840 [ 654.560153][T17998] ? kfree+0x1e5/0x6c0 [ 654.560180][T17998] tomoyo_realpath_from_path+0xb6/0x690 [ 654.560202][T17998] tomoyo_path_number_perm+0x23c/0x580 [ 654.560228][T17998] ? tomoyo_path_number_perm+0x22e/0x580 [ 654.560255][T17998] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 654.560284][T17998] ? preempt_count_add+0x76/0x150 [ 654.560311][T17998] ? rcu_is_watching+0x12/0xc0 [ 654.560338][T17998] ? __fget_files+0x215/0x3d0 [ 654.560364][T17998] ? hook_file_ioctl_common+0x140/0x440 [ 654.560387][T17998] ? lock_release+0x24d/0x310 [ 654.560410][T17998] ? __fget_files+0x21f/0x3d0 [ 654.560436][T17998] security_file_ioctl+0xd3/0x230 [ 654.560465][T17998] __x64_sys_ioctl+0xb7/0x210 [ 654.560490][T17998] do_syscall_64+0x115/0x870 [ 654.560510][T17998] ? clear_bhb_loop+0x40/0x90 [ 654.560533][T17998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.560561][T17998] RIP: 0033:0x7fc87e39ce59 [ 654.560578][T17998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.560598][T17998] RSP: 002b:00007fc87f2b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.560618][T17998] RAX: ffffffffffffffda RBX: 00007fc87e615fa0 RCX: 00007fc87e39ce59 [ 654.560632][T17998] RDX: 0000000000000000 RSI: 000000000000545c RDI: 0000000000000004 [ 654.560645][T17998] RBP: 00007fc87f2b8090 R08: 0000000000000000 R09: 0000000000000000 [ 654.560657][T17998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.560669][T17998] R13: 00007fc87e616038 R14: 00007fc87e615fa0 R15: 00007ffde97811d8 [ 654.560690][T17998] [ 654.560840][T17998] ERROR: Out of memory at tomoyo_realpath_from_path. [ 654.786077][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.913012][T18002] xt_hashlimit: size too large, truncated to 1048576 [ 655.295123][T18012] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 655.592003][T18015] openvswitch: netlink: Flow key attr not present in new flow. [ 655.883891][ T8700] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 656.403898][ T8700] usb 2-1: device descriptor read/64, error -71 [ 656.420747][T18029] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3412'. [ 656.736003][ T8700] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 656.870220][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3414'. [ 657.563974][ T12] net_ratelimit: 3 callbacks suppressed [ 657.563993][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.577890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.807186][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.877939][ T8700] usb 2-1: device descriptor read/64, error -71 [ 658.061595][ T8700] usb usb2-port1: attempt power cycle [ 658.084656][T18032] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3413'. [ 658.382543][T15115] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 658.518151][T18056] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 658.560623][T15115] usb 3-1: Using ep0 maxpacket: 16 [ 658.574495][T15115] usb 3-1: unable to get BOS descriptor or descriptor too short [ 658.585029][T15115] usb 3-1: config 1 has an invalid interface number: 232 but max is 0 [ 658.595046][T15115] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.605915][T15115] usb 3-1: config 1 has no interface number 0 [ 658.622296][T15115] usb 3-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 658.633703][T15115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.643289][T15115] usb 3-1: Product: syz [ 658.647628][ T8700] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 658.647763][T15115] usb 3-1: Manufacturer: syz [ 658.660432][T15115] usb 3-1: SerialNumber: syz [ 658.949451][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.385835][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.428202][ T8700] usb 2-1: device descriptor read/8, error -71 [ 659.687402][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.695650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.119942][ T9] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 660.357325][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.381384][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 660.397556][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.409482][T15115] hub 3-1:1.232: bad descriptor, ignoring hub [ 660.421558][ T9] usb 5-1: config 0 descriptor?? [ 660.426729][T15115] hub 3-1:1.232: probe with driver hub failed with error -5 [ 660.436814][T15115] option 3-1:1.232: GSM modem (1-port) converter detected [ 660.472951][T15115] usb 3-1: USB disconnect, device number 101 [ 660.482802][T15115] option 3-1:1.232: device disconnected [ 660.532695][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.639152][ T30] kauditd_printk_skb: 304 callbacks suppressed [ 660.639168][ T30] audit: type=1400 audit(1781992530.809:1701): avc: denied { mount } for pid=18077 comm="syz.7.3427" name="/" dev="autofs" ino=73844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 660.652552][T18058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.697984][T18058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.747919][ T9] ath6kl: Failed to submit usb control message: -71 [ 660.755177][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 660.767381][ T30] audit: type=1400 audit(1781992530.929:1702): avc: denied { read write } for pid=18086 comm="syz.7.3428" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 660.800075][ T9] ath6kl: Unable to send get target info: -71 [ 660.814986][ T9] ath6kl: Failed to init ath6kl core: -71 [ 660.824444][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 660.837689][ T30] audit: type=1400 audit(1781992530.929:1703): avc: denied { open } for pid=18086 comm="syz.7.3428" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 660.867511][ T9] usb 5-1: USB disconnect, device number 123 [ 660.901667][ T8712] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 661.312670][T18104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.346932][ T9] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 661.409142][T18107] lo speed is unknown, defaulting to 1000 [ 661.571018][T18114] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 661.784602][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.860633][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 662.289616][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 662.298029][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 662.320678][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 662.330852][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 662.359684][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 662.375356][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 662.392091][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 662.401621][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.414555][ T9] usb 5-1: config 0 descriptor?? [ 662.421391][T18098] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 662.421481][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.768697][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 124 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 662.998736][ T30] audit: type=1400 audit(1781992532.996:1704): avc: denied { read write } for pid=18096 comm="syz.4.3431" name="lp0" dev="devtmpfs" ino=4072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 663.025084][T18125] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 663.068717][T18125] bond1 (unregistering): Released all slaves [ 663.098322][ T9] usb 5-1: USB disconnect, device number 124 [ 663.114980][ T9] usblp0: removed [ 663.120309][ T30] audit: type=1400 audit(1781992532.996:1705): avc: denied { open } for pid=18096 comm="syz.4.3431" path="/dev/usb/lp0" dev="devtmpfs" ino=4072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 663.676300][ T8700] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 663.697316][T18142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3442'. [ 663.795757][ T8557] net_ratelimit: 2 callbacks suppressed [ 663.795773][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.809729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.822635][T15307] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 663.863699][ T8700] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 663.874183][ T8700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.883115][ T8700] usb 3-1: Product: syz [ 663.894350][ T8700] usb 3-1: Manufacturer: syz [ 663.952422][ T8700] usb 3-1: SerialNumber: syz [ 663.993324][ T8700] usb 3-1: config 0 descriptor?? [ 664.042775][T15307] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 664.071466][ T8700] ch341 3-1:0.0: ch341-uart converter detected [ 664.088610][T15307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.108607][T15307] usb 2-1: Product: syz [ 664.138276][T15307] usb 2-1: Manufacturer: syz [ 664.149642][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.159193][T15307] usb 2-1: SerialNumber: syz [ 664.186293][T15307] usb 2-1: config 0 descriptor?? [ 664.197016][T15307] ch341 2-1:0.0: ch341-uart converter detected [ 664.510199][T18160] syzkaller0: entered promiscuous mode [ 664.522067][T18160] syzkaller0: entered allmulticast mode [ 664.546405][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.558644][T18160] tipc: Started in network mode [ 664.563528][T18160] tipc: Node identity 7ac144674d8, cluster identity 4711 [ 664.575630][T18160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.597250][T18160] tipc: Enabled bearer , priority 0 [ 664.618149][T18159] tipc: Resetting bearer [ 664.635892][T18159] tipc: Disabling bearer [ 664.711632][T18162] netlink: 'syz.7.3449': attribute type 1 has an invalid length. [ 664.742567][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3449'. [ 664.752063][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3449'. [ 664.878446][T18162] bond1: (slave gretap1): making interface the new active one [ 664.892994][T18162] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 665.238307][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.246517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.257276][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.268424][ T8700] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 665.276245][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.878342][ T9] usb 3-1: USB disconnect, device number 102 [ 665.947473][ T9] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 665.962552][T15307] usb 2-1: ch341-uart converter now attached to ttyUSB1 [ 665.963922][ T9] ch341 3-1:0.0: device disconnected [ 666.117406][ T5797] usb 2-1: USB disconnect, device number 53 [ 666.132090][ T5797] ch341-uart ttyUSB1: ch341-uart converter now disconnected from ttyUSB1 [ 666.148413][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3455'. [ 666.336021][ T5797] ch341 2-1:0.0: device disconnected [ 666.397063][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.736207][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3457'. [ 666.818466][T18199] syzkaller0: entered promiscuous mode [ 666.851882][T18199] syzkaller0: entered allmulticast mode [ 666.885386][T18201] tipc: Enabled bearer , priority 0 [ 666.919195][T18198] tipc: Resetting bearer [ 666.954921][T18198] tipc: Disabling bearer [ 667.132601][T18207] trusted_key: encrypted_key: insufficient parameters specified [ 667.147551][ T30] audit: type=1400 audit(1781992536.816:1706): avc: denied { ioctl } for pid=18206 comm="syz.2.3461" path="socket:[75037]" dev="sockfs" ino=75037 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 667.176948][ T5797] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 667.209362][ T30] audit: type=1400 audit(1781992536.852:1707): avc: denied { create } for pid=18208 comm="syz.6.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 667.284702][ T30] audit: type=1326 audit(1781992536.908:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.6.3462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 667.345264][ T30] audit: type=1326 audit(1781992536.908:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.6.3462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 667.397687][ T5797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.423356][ T5797] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.697719][ T5797] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 667.712626][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.720691][ T30] audit: type=1326 audit(1781992536.908:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.6.3462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 667.747848][ T5797] usb 2-1: Product: syz [ 667.752057][ T5797] usb 2-1: Manufacturer: syz [ 667.756695][ T5797] usb 2-1: SerialNumber: syz [ 667.765009][ T5797] usb 2-1: config 0 descriptor?? [ 667.769974][ T30] audit: type=1326 audit(1781992536.908:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.6.3462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 667.802990][ T30] audit: type=1326 audit(1781992536.908:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.6.3462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 667.856753][ T30] audit: type=1326 audit(1781992536.908:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.6.3462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 667.899074][ T30] audit: type=1326 audit(1781992536.908:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.6.3462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 667.927721][ T30] audit: type=1326 audit(1781992536.917:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.6.3462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f679459ce59 code=0x7ffc0000 [ 668.190994][ T8701] usb 2-1: USB disconnect, device number 54 [ 668.368752][T18235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3467'. [ 668.536595][T18229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3467'. [ 668.545906][T18229] nbd: nbd64 already in use [ 668.752428][ T8693] udevd[8693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 668.778103][T18253] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3473'. [ 668.856503][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 669.198852][ T9] usb 5-1: device descriptor read/64, error -71 [ 669.654888][T18266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3477'. [ 669.683289][T18268] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3478'. [ 669.723686][ T9] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 669.779004][ T8701] net_ratelimit: 6 callbacks suppressed [ 669.779019][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.040471][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.048722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.297885][ T9] usb 5-1: device descriptor read/64, error -71 [ 670.615975][ T9] usb usb5-port1: attempt power cycle [ 670.709547][ T8701] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 670.732374][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.740563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.890280][ T8701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 670.899827][ T8701] usb 2-1: not running at top speed; connect to a high speed hub [ 670.911448][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.922673][ T8701] usb 2-1: config 8 has no interfaces? [ 670.939885][ T8701] usb 2-1: string descriptor 0 read error: -22 [ 671.048250][ T8701] usb 2-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 671.058713][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.134975][ T9] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 671.188359][ T9] usb 5-1: device descriptor read/8, error -71 [ 671.427761][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.471618][ T5797] usb 2-1: USB disconnect, device number 55 [ 671.595320][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 671.603292][T15115] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 672.121712][ T9] usb 5-1: device not accepting address 2, error -71 [ 672.123835][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.148852][ T9] usb usb5-port1: unable to enumerate USB device [ 672.228493][T15115] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 672.236877][T15115] usb 8-1: config 0 has no interface number 0 [ 672.243078][T15115] usb 8-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 672.255066][T15115] usb 8-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 672.270077][T15115] usb 8-1: config 0 interface 200 has no altsetting 0 [ 672.279013][T15115] usb 8-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 672.288203][T15115] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.290678][T18317] FAT-fs (nbd2): unable to read boot sector [ 672.296530][T15115] usb 8-1: Product: syz [ 672.306665][T15115] usb 8-1: Manufacturer: syz [ 672.311316][T15115] usb 8-1: SerialNumber: syz [ 672.316869][T15115] usb 8-1: config 0 descriptor?? [ 672.340350][T18317] atomic_op ffff888043dc8998 conn xmit_atomic 0000000000000000 [ 672.479970][T18320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3494'. [ 672.518031][T18320] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18320 comm=syz.4.3494 [ 672.620534][T18300] syz.7.3488 (18300): attempted to duplicate a private mapping with mremap. This is not supported. [ 672.652026][T15115] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.200/input/input35 [ 672.663953][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.671245][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.671397][ T8701] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 672.678601][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.703081][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.710379][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.717773][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.725364][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.732832][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.746649][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.757794][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.766916][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.774449][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.789990][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.801087][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.811923][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.823099][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.833754][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.844552][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.851855][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.859165][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.866465][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.873767][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.881091][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.888387][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.895691][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.903023][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.910317][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.917599][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.925055][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.931451][ T8701] usb 3-1: Using ep0 maxpacket: 32 [ 672.932428][ C0] usb 8-1: hanwang_irq - nonzero urb status received: -71 [ 672.939326][ T8701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 672.952542][ C0] usb 8-1: hanwang_irq - urb shutting down with status: -2 [ 672.955984][ T8701] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 673.278586][T15115] usb 8-1: USB disconnect, device number 3 [ 673.460627][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.469117][ T8701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.477203][ T8701] usb 3-1: Product: ꦪ㏋瀇됅꽣猊涮㗈彾쾖몸椰쯃녑ᙹ걈ꎢ굷ꍪ—傁烩鴧岦矔꧐駋纍昁ࣂ碥⛐奃 [ 673.491344][ T8701] usb 3-1: Manufacturer: ⠊ [ 673.497404][ T8701] usb 3-1: SerialNumber: Ꟙ꼪繾 [ 673.516067][ T8701] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 673.534564][ T8701] gspca_stv06xx: st6422 sensor detected [ 673.746059][T18345] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3500'. [ 674.100483][T18347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3501'. [ 674.385335][ T8701] STV06xx 3-1:1.0: probe with driver STV06xx failed with error -71 [ 674.407739][T18337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3498'. [ 674.417914][ T8701] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 674.489251][ T8701] usb 3-1: USB disconnect, device number 103 [ 674.522585][T18337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3498'. [ 674.548329][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.560218][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 674.620590][ T8693] block device autoloading is deprecated and will be removed. [ 674.737746][ T8693] udevd[8693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 674.751236][T18366] IPv6: NLM_F_CREATE should be specified when creating new route [ 674.777685][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 674.777702][ T30] audit: type=1400 audit(1781992543.856:1751): avc: denied { setcurrent } for pid=18361 comm="syz.4.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 674.806808][ T8693] udevd[8693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 674.850099][ T8700] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 674.863089][ T8693] udevd[8693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 674.896675][ T30] audit: type=1401 audit(1781992543.856:1752): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 674.918811][T18371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3505'. [ 675.044962][ T8701] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 675.122451][ T8693] udevd[8693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 675.196684][ T8700] usb 2-1: device descriptor read/64, error -71 [ 675.221059][ T30] audit: type=1400 audit(1781992544.271:1753): avc: denied { load_policy } for pid=18373 comm="syz.2.3507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 675.244567][T18377] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 2618908928) [ 675.254840][T18377] SELinux: invalid class [ 675.263493][T18377] SELinux: failed to load policy [ 675.273814][T18377] SELinux: failed to load policy [ 675.284093][T18377] SELinux: failed to load policy [ 675.293922][T18377] SELinux: failed to load policy [ 675.300660][T18377] SELinux: failed to load policy [ 675.311481][T18377] SELinux: failed to load policy [ 675.336356][T18377] SELinux: failed to load policy [ 675.337471][ T8701] usb 5-1: Using ep0 maxpacket: 16 [ 675.366991][ T8701] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 675.391731][T18377] SELinux: failed to load policy [ 675.396853][ T8701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.418747][T18377] SELinux: failed to load policy [ 675.420808][ T8701] usb 5-1: Product: syz [ 675.430309][T18377] SELinux: failed to load policy [ 675.435052][ T8701] usb 5-1: Manufacturer: syz [ 675.454068][ T8701] usb 5-1: SerialNumber: syz [ 675.468869][ T8700] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 675.483293][ T8701] usb 5-1: config 0 descriptor?? [ 675.504495][ T8701] hub 5-1:0.0: bad descriptor, ignoring hub [ 675.522979][ T8701] hub 5-1:0.0: probe with driver hub failed with error -5 [ 675.560706][ T8701] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 675.590186][ T150] usb 5-1: Failed to submit usb control message: -71 [ 675.601550][ T150] usb 5-1: unable to send the bmi data to the device: -71 [ 675.619029][ T150] usb 5-1: unable to get target info from device [ 675.630077][ T8700] usb 2-1: device descriptor read/64, error -71 [ 675.634735][ T150] usb 5-1: could not get target info (-71) [ 675.645342][ T150] usb 5-1: could not probe fw (-71) [ 675.673664][ T8701] net_ratelimit: 2 callbacks suppressed [ 675.673687][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.782103][ T8700] usb usb2-port1: attempt power cycle [ 675.946851][T18390] lo speed is unknown, defaulting to 1000 [ 676.827990][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.888349][ T5619] Bluetooth: hci1: command 0x0405 tx timeout [ 676.888733][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.976529][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.984794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.862911][ T8700] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 677.929228][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.010693][T18424] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3520'. [ 678.020532][ T8700] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 678.048540][ T8700] usb 2-1: Using ep0 maxpacket: 32 [ 678.060162][ T8700] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 678.095474][ T8700] usb 2-1: config 2 has no interface number 0 [ 678.145253][ T8700] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 678.247612][ T8700] usb 2-1: config 2 interface 88 has no altsetting 0 [ 678.352371][ T8700] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 678.376705][ T8700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.390279][ T8700] usb 2-1: Product: syz [ 678.394655][ T8700] usb 2-1: Manufacturer: syz [ 678.399569][ T8700] usb 2-1: SerialNumber: syz [ 678.406962][T18416] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 678.491731][ T8701] usb 5-1: USB disconnect, device number 3 [ 678.873511][T18435] lo speed is unknown, defaulting to 1000 [ 679.532310][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.553478][T18416] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 679.563316][ T4988] block nbd0: Possible stuck request ffff888027ff5080: control (read@0,1024B). Runtime 150 seconds [ 679.574130][ T4988] block nbd0: Possible stuck request ffff888027ff5240: control (read@1024,1024B). Runtime 150 seconds [ 679.585425][ T4988] block nbd0: Possible stuck request ffff888027ff5400: control (read@2048,1024B). Runtime 150 seconds [ 679.596477][ T4988] block nbd0: Possible stuck request ffff888027ff55c0: control (read@3072,1024B). Runtime 150 seconds [ 680.324931][ T8701] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 680.444109][T11613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.452279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.582924][ T8701] usb 5-1: Using ep0 maxpacket: 8 [ 680.595066][ T8701] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 680.615795][ T8701] usb 5-1: config 0 has no interface number 0 [ 680.859470][ T8700] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 680.874430][ T8701] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 680.890835][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.914520][ T8700] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 680.950776][ T8701] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 680.987457][ T8700] asix 2-1:2.88: probe with driver asix failed with error -71 [ 681.000188][ T30] audit: type=1400 audit(1781992549.604:1754): avc: denied { ioctl } for pid=18459 comm="syz.2.3531" path="socket:[75581]" dev="sockfs" ino=75581 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 681.029085][ T8701] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 681.029985][T18461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.074882][ T8700] usb 2-1: USB disconnect, device number 59 [ 681.090518][ T8701] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 681.113508][ T30] audit: type=1400 audit(1781992549.632:1755): avc: denied { mmap_zero } for pid=18459 comm="syz.2.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 681.135623][ T8701] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.207353][ T8701] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 681.319461][ T8701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.566374][ T8701] usb 5-1: Product: syz [ 681.707599][ T8701] usb 5-1: Manufacturer: syz [ 681.741693][ T8701] usb 5-1: SerialNumber: syz [ 681.937942][ T8701] usb 5-1: config 0 descriptor?? [ 682.006290][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.121238][T18469] syzkaller0: entered promiscuous mode [ 682.130378][T18469] syzkaller0: entered allmulticast mode [ 682.170044][T18469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.178370][T18469] tipc: Enabled bearer , priority 0 [ 682.317061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.457500][T18468] tipc: Resetting bearer [ 682.457571][ T8701] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 682.494103][T18468] tipc: Disabling bearer [ 682.525689][T11613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.579706][ T8701] usb 5-1: USB disconnect, device number 4 [ 682.586725][T18473] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3534'. [ 682.858633][T18478] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3535'. [ 683.146125][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.352414][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.360652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.796369][T18495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3542'. [ 684.229668][ T30] audit: type=1400 audit(1781992552.584:1756): avc: denied { connect } for pid=18501 comm="syz.1.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 684.249655][ T30] audit: type=1400 audit(1781992552.584:1757): avc: denied { write } for pid=18501 comm="syz.1.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 684.276826][ T30] audit: type=1400 audit(1781992552.603:1758): avc: denied { read } for pid=18501 comm="syz.1.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 684.280750][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.322951][T18509] loop5: detected capacity change from 0 to 7 [ 684.362864][T18509] Dev loop5: unable to read RDB block 7 [ 684.368976][ T8700] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 684.473998][T18509] loop5: unable to read partition table [ 684.487088][T18509] loop5: partition table beyond EOD, truncated [ 684.488201][T18514] geneve2: entered promiscuous mode [ 684.511481][T18509] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 684.712883][ T8700] usb 8-1: unable to get BOS descriptor or descriptor too short [ 684.735614][ T8700] usb 8-1: not running at top speed; connect to a high speed hub [ 684.753526][T18516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3548'. [ 684.762709][T18514] geneve2: entered allmulticast mode [ 684.784662][ T8700] usb 8-1: config 8 has no interfaces? [ 684.811784][ T8700] usb 8-1: string descriptor 0 read error: -22 [ 684.840186][ T8700] usb 8-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 684.876423][ T8700] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.995931][ T8700] kernel write not supported for file /meminfo (pid: 8700 comm: kworker/1:11) [ 685.219013][ T5797] usb 8-1: USB disconnect, device number 4 [ 685.386454][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.552024][T18530] ip6gre1: entered promiscuous mode [ 685.571074][T18530] ip6gre1: entered allmulticast mode [ 685.577871][ T150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.590643][ T150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.600950][ T5797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.610009][T18530] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.850158][T15115] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.997440][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.574412][T18539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3555'. [ 686.869282][ T5797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 687.654751][ T8701] net_ratelimit: 2 callbacks suppressed [ 687.654764][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.969989][ T8701] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 687.990035][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.100130][ T30] audit: type=1400 audit(1781992556.155:1759): avc: denied { audit_write } for pid=18554 comm="syz.4.3559" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 688.620685][ T30] audit: type=1400 audit(1781992556.506:1760): avc: denied { read } for pid=18565 comm="syz.1.3563" dev="sockfs" ino=76051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 688.654484][ T8701] usb 8-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 688.669918][ T8701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.688083][ T8701] usb 8-1: Product: syz [ 688.719766][ T8701] usb 8-1: Manufacturer: syz [ 688.740511][ T8701] usb 8-1: SerialNumber: syz [ 688.758544][ T8701] usb 8-1: config 0 descriptor?? [ 688.767465][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.783707][ T5613] Bluetooth: hci7: urb ffff88802bb1ae00 submission failed (2) [ 688.885184][ T5797] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 688.898971][ T30] audit: type=1400 audit(1781992556.893:1761): avc: denied { bind } for pid=18565 comm="syz.1.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 688.991362][T18551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.000972][T18551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.021410][T15115] usb 8-1: USB disconnect, device number 5 [ 689.082020][ T5797] usb 3-1: unable to get BOS descriptor or descriptor too short [ 689.110956][ T5797] usb 3-1: not running at top speed; connect to a high speed hub [ 689.132012][ T5797] usb 3-1: config 8 has no interfaces? [ 689.159203][ T5797] usb 3-1: string descriptor 0 read error: -22 [ 689.173672][ T5797] usb 3-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 689.194591][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.461521][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.474886][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.483250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.777250][ T8701] usb 3-1: USB disconnect, device number 104 [ 689.785138][ T30] audit: type=1400 audit(1781992557.705:1762): avc: denied { ioctl } for pid=18580 comm="syz.6.3568" path="socket:[76862]" dev="sockfs" ino=76862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 689.892661][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 689.900338][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.320007][T18598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3573'. [ 690.606060][T18601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3574'. [ 690.711763][ T30] audit: type=1400 audit(1781992558.564:1763): avc: denied { setopt } for pid=18604 comm="syz.2.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 690.779378][T18607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3576'. [ 690.847717][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.855982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.062374][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.063767][T18610] bridge1: entered promiscuous mode [ 691.220378][T18610] bridge1: entered allmulticast mode [ 691.572439][ T9] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 691.713354][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 691.821949][ T9] usb 8-1: device descriptor read/64, error -71 [ 691.937643][T18622] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3580'. [ 692.338581][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.400417][ T9] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 692.656350][ T9] usb 8-1: device descriptor read/64, error -71 [ 692.703452][T18633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3585'. [ 692.786756][ T9] usb usb8-port1: attempt power cycle [ 693.273944][ T9] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 693.473207][ T8701] net_ratelimit: 2 callbacks suppressed [ 693.473227][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.519139][T18635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3586'. [ 693.546843][ T9] usb 8-1: device descriptor read/8, error -71 [ 693.573597][T18635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3586'. [ 693.582624][T18635] nbd: device at index 64 is going down [ 693.646335][ T5898] udevd[5898]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 693.664801][ T8693] udevd[8693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 693.714122][ T30] audit: type=1400 audit(1781992561.332:1764): avc: denied { setopt } for pid=18653 comm="syz.1.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 693.736564][ T30] audit: type=1400 audit(1781992561.350:1765): avc: denied { read } for pid=18653 comm="syz.1.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 693.758346][ T30] audit: type=1400 audit(1781992561.350:1766): avc: denied { write } for pid=18653 comm="syz.1.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 693.848365][ T9] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 693.859242][ T8701] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 693.870776][ T9] usb 8-1: device descriptor read/8, error -71 [ 693.990053][ T9] usb usb8-port1: unable to enumerate USB device [ 694.002105][ T8701] usb 3-1: device descriptor read/64, error -71 [ 694.189803][T18664] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 694.260378][ T8701] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 694.315611][T11609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.433710][ T8701] usb 3-1: device descriptor read/64, error -71 [ 694.565497][ T8701] usb usb3-port1: attempt power cycle [ 694.688564][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.343963][ T8701] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 695.367934][ T8701] usb 3-1: device descriptor read/8, error -71 [ 695.450221][T18675] syzkaller0: entered promiscuous mode [ 695.456132][T18675] syzkaller0: entered allmulticast mode [ 695.571600][T18675] tipc: Started in network mode [ 695.576825][T18675] tipc: Node identity b23accc23c55, cluster identity 4711 [ 695.591179][T18675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.624375][T18675] tipc: Enabled bearer , priority 0 [ 695.645616][T18674] tipc: Resetting bearer [ 695.653390][ T8701] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 695.667545][T18674] tipc: Disabling bearer [ 695.702422][ T8701] usb 3-1: device descriptor read/8, error -71 [ 695.702986][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.716816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.790227][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.832543][ T8701] usb usb3-port1: unable to enumerate USB device [ 695.839651][T18689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3602'. [ 696.189419][T15115] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 696.489497][ T5797] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 696.579677][T15115] usb 8-1: Using ep0 maxpacket: 8 [ 696.586191][T15115] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.597602][T15115] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 696.648556][T15115] usb 8-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 696.658994][T15115] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.674167][T15115] usb 8-1: config 0 descriptor?? [ 696.683241][ T5797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 696.691746][ T5797] usb 2-1: not running at top speed; connect to a high speed hub [ 696.796760][T18705] lo speed is unknown, defaulting to 1000 [ 697.243947][T11609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.252205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.699132][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.723493][ T5797] usb 2-1: config 8 has no interfaces? [ 697.741462][ T5797] usb 2-1: string descriptor 0 read error: -22 [ 697.747822][ T5797] usb 2-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 697.756986][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.760785][ T8700] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 697.933622][T18713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3610'. [ 697.948467][ T8700] usb 5-1: Using ep0 maxpacket: 32 [ 697.980100][ T8700] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 698.000868][ T8700] usb 5-1: config 0 has no interface number 0 [ 698.007107][ T8700] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 698.008654][T15115] samsung 0003:0419:0600.0013: unknown main item tag 0x0 [ 698.018526][ T8700] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 698.096464][ T8700] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 698.241823][T15307] usb 2-1: USB disconnect, device number 60 [ 698.252114][T15115] samsung 0003:0419:0600.0013: ignoring exceeding usage max [ 698.272640][ T8700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.282049][ T8700] usb 5-1: Product: syz [ 698.286272][ T8700] usb 5-1: Manufacturer: syz [ 698.287952][T15115] samsung 0003:0419:0600.0013: global environment stack underflow [ 698.290879][ T8700] usb 5-1: SerialNumber: syz [ 698.317966][ T8700] usb 5-1: config 0 descriptor?? [ 698.320616][T15115] samsung 0003:0419:0600.0013: item 0 1 1 11 parsing failed [ 698.323868][T18704] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 698.337795][T18704] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 698.341745][T15115] samsung 0003:0419:0600.0013: parse failed [ 698.352690][ T8700] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 698.353264][T15115] samsung 0003:0419:0600.0013: probe with driver samsung failed with error -22 [ 698.372777][T18716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3611'. [ 698.378018][T15115] usb 8-1: USB disconnect, device number 10 [ 698.476277][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 699.860919][T18738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.941369][T18738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.960109][ T8700] net_ratelimit: 3 callbacks suppressed [ 699.960125][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.971531][ T9] usb 5-1: USB disconnect, device number 5 [ 700.034793][T18744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3620'. [ 700.151051][T18745] lo speed is unknown, defaulting to 1000 [ 700.565218][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.077494][T15115] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 701.145303][T18750] geneve2: entered promiscuous mode [ 701.151327][T18750] geneve2: entered allmulticast mode [ 701.167179][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.175399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.272211][T15115] usb 3-1: Using ep0 maxpacket: 32 [ 701.284746][T15115] usb 3-1: unable to get BOS descriptor or descriptor too short [ 701.294924][T15115] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.305152][T15115] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 701.322241][T15115] usb 3-1: New USB device found, idVendor=31b2, idProduct=0011, bcdDevice= 0.40 [ 701.351355][T15115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.362173][ T30] audit: type=1400 audit(1781992568.390:1767): avc: denied { mounton } for pid=18733 comm="syz.1.3617" path="/178/file0" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 701.370947][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.525216][T15115] usb 3-1: Product: syz [ 701.534546][T15115] usb 3-1: Manufacturer: syz [ 701.545638][T15115] usb 3-1: SerialNumber: syz [ 701.761430][T18758] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3623'. [ 701.990894][T18757] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3623'. [ 701.999894][T18757] nbd: device at index 64 is going down [ 702.060980][T15115] usb 3-1: unit 2 not found! [ 702.139111][T15115] usb 3-1: USB disconnect, device number 109 [ 702.278984][T18772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3628'. [ 702.512567][ T5797] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 703.300620][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.333514][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.341755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.367902][T18784] syzkaller0: entered promiscuous mode [ 703.373404][T18784] syzkaller0: entered allmulticast mode [ 703.384369][T11609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.403918][T18784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.412351][T18784] tipc: Enabled bearer , priority 0 [ 703.426278][T18783] tipc: Resetting bearer [ 703.454123][T18783] tipc: Disabling bearer [ 703.678617][ T5797] usb 8-1: Using ep0 maxpacket: 32 [ 703.743070][ T5797] usb 8-1: config 6 has an invalid interface number: 34 but max is 1 [ 703.758309][ T5797] usb 8-1: config 6 has an invalid interface number: 156 but max is 1 [ 703.769308][ T5797] usb 8-1: config 6 has no interface number 0 [ 703.785986][ T5797] usb 8-1: config 6 has no interface number 1 [ 703.817115][ T5797] usb 8-1: config 6 interface 34 altsetting 128 endpoint 0x8A has invalid maxpacket 1023, setting to 64 [ 703.853229][ T5797] usb 8-1: config 6 interface 34 altsetting 128 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 703.901197][ T5797] usb 8-1: config 6 interface 34 altsetting 128 has a duplicate endpoint with address 0x8A, skipping [ 703.946774][ T5797] usb 8-1: config 6 interface 34 altsetting 128 endpoint 0x3 has invalid maxpacket 1999, setting to 64 [ 703.993362][ T5797] usb 8-1: config 6 interface 34 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 704.013423][ T5797] usb 8-1: config 6 interface 34 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 704.026211][ T5797] usb 8-1: config 6 interface 34 altsetting 128 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 704.037678][ T5797] usb 8-1: config 6 interface 34 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 704.060156][ T5797] usb 8-1: config 6 interface 34 altsetting 128 endpoint 0x5 has invalid maxpacket 1040, setting to 64 [ 704.079009][ T5797] usb 8-1: config 6 interface 34 altsetting 128 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 704.095954][ T5797] usb 8-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0x9, skipping [ 704.106826][ T5797] usb 8-1: config 6 interface 156 altsetting 64 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 704.118914][ T5797] usb 8-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 704.130092][ T5797] usb 8-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 704.140927][ T5797] usb 8-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 704.154670][ T5797] usb 8-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 704.167392][ T5797] usb 8-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 704.230369][ T5797] usb 8-1: config 6 interface 156 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 704.266416][ T5797] usb 8-1: config 6 interface 34 has no altsetting 0 [ 704.273152][ T5797] usb 8-1: config 6 interface 156 has no altsetting 0 [ 704.289435][ T5797] usb 8-1: Dual-Role OTG device on HNP port [ 704.300967][ T5797] usb 8-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice=87.9f [ 704.310511][ T5797] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.320088][ T5797] usb 8-1: Product: 䰊 [ 704.324268][ T5797] usb 8-1: Manufacturer: ࠝ [ 704.329092][ T5797] usb 8-1: SerialNumber: ఄ [ 704.577791][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 704.903249][T15307] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 704.957376][T18805] netlink: 'syz.4.3637': attribute type 1 has an invalid length. [ 704.980428][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 704.987572][T18805] bond1: entered promiscuous mode [ 704.996608][T18805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 705.003258][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 705.023362][ T9] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 705.032997][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.041045][ T9] usb 2-1: Product: syz [ 705.045624][ T9] usb 2-1: Manufacturer: syz [ 705.050260][ T9] usb 2-1: SerialNumber: syz [ 705.245078][T18798] orangefs_mount: mount request failed with -4 [ 705.313075][ T5797] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 705.316245][T15307] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 705.334324][ T5797] snd-usb-audio 8-1:6.34: probe with driver snd-usb-audio failed with error -2 [ 705.343247][T15307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.354780][T15307] usb 3-1: config 0 descriptor?? [ 705.392229][ T5797] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 705.692765][T15307] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 705.742723][T15307] hackrf 3-1:0.0: Could not detect board [ 705.926694][T15307] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 705.936629][ T8700] net_ratelimit: 3 callbacks suppressed [ 705.936645][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.954496][T15307] usb 3-1: USB disconnect, device number 110 [ 705.977309][ T5797] snd-usb-audio 8-1:6.156: probe with driver snd-usb-audio failed with error -2 [ 706.072594][ T5797] usb 8-1: USB disconnect, device number 11 [ 706.271109][ T9] usb 2-1: USB disconnect, device number 61 [ 706.291641][ T8693] udevd[8693]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:6.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.339404][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.431151][T15115] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 706.712809][ T5797] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 706.838746][T18827] lo speed is unknown, defaulting to 1000 [ 707.411312][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.471151][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.497869][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.506181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.648998][ T30] audit: type=1400 audit(1781992574.194:1768): avc: denied { write } for pid=18830 comm="syz.2.3645" name="file0" dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 707.683167][ T30] audit: type=1400 audit(1781992574.213:1769): avc: denied { open } for pid=18830 comm="syz.2.3645" path="/199/file0" dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 707.735018][ T30] audit: type=1400 audit(1781992574.213:1770): avc: denied { ioctl } for pid=18830 comm="syz.2.3645" path="/199/file0" dev="tmpfs" ino=1060 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 707.796897][T15115] usb 5-1: unable to get BOS descriptor or descriptor too short [ 707.919470][T15115] usb 5-1: not running at top speed; connect to a high speed hub [ 707.930563][T15115] usb 5-1: config 8 has no interfaces? [ 707.940313][T15115] usb 5-1: string descriptor 0 read error: -22 [ 707.946531][T15115] usb 5-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 707.956839][T15115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.015527][ T5797] usb 8-1: unable to get BOS descriptor or descriptor too short [ 708.027722][ T5797] usb 8-1: not running at top speed; connect to a high speed hub [ 708.049602][ T5797] usb 8-1: config 8 has no interfaces? [ 708.062016][ T5797] usb 8-1: string descriptor 0 read error: -22 [ 708.072932][ T5797] usb 8-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 708.089646][ T5797] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.238057][T18844] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3649'. [ 708.360654][ T5619] Bluetooth: hci6: command 0x0406 tx timeout [ 708.429003][ T8700] usb 8-1: USB disconnect, device number 12 [ 708.501226][ T5797] usb 5-1: USB disconnect, device number 6 [ 708.533709][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.849425][T18851] geneve2: entered promiscuous mode [ 708.858026][T18851] geneve2: entered allmulticast mode [ 708.952982][T18859] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 709.199332][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3657'. [ 709.335524][T15115] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 709.633118][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.641346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.651272][T15115] usb 8-1: Using ep0 maxpacket: 8 [ 709.657939][T15115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 709.661014][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.666959][T15115] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x23, changing to 0x3 [ 709.803329][T18876] lo speed is unknown, defaulting to 1000 [ 710.363460][T15115] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 44443, setting to 1024 [ 710.415599][T15115] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 710.459096][T15115] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 710.468568][T15115] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.476878][T15115] usb 8-1: Product: syz [ 710.485995][T15115] usb 8-1: Manufacturer: syz [ 710.496527][T15115] usb 8-1: SerialNumber: syz [ 710.508998][T15115] usb 8-1: config 0 descriptor?? [ 710.524675][T18862] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 710.534745][T15115] powermate 8-1:0.0: probe with driver powermate failed with error -5 [ 710.805013][T18884] ip6gre1: left promiscuous mode [ 710.810282][T18884] ip6gre1: left allmulticast mode [ 710.834174][ T8699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.899981][ T8700] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.178468][ T8700] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.596155][T15115] usb 8-1: USB disconnect, device number 13 [ 711.656183][ T31] INFO: task syz.5.2848:15765 blocked in I/O wait for more than 143 seconds. [ 711.667655][ T31] Tainted: G L syzkaller #0 [ 711.674419][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 711.683540][ T31] task:syz.5.2848 state:D stack:26264 pid:15765 tgid:15764 ppid:13192 task_flags:0x400140 flags:0x00080002 [ 711.695800][ T31] Call Trace: [ 711.699262][ T31] [ 711.702219][ T31] __schedule+0x125c/0x6730 [ 711.706823][ T31] ? __pfx___schedule+0x10/0x10 [ 711.714631][ T31] ? rcu_is_watching+0x12/0xc0 [ 711.725437][ T31] ? schedule+0x2bf/0x390 [ 711.729851][ T31] ? lock_release+0x24d/0x310 [ 711.736428][ T31] schedule+0xdd/0x390 [ 711.743446][ T31] io_schedule+0x8a/0xf0 [ 711.752357][ T31] folio_wait_bit_common+0x414/0xa70 [ 711.758692][ T31] ? folio_wait_bit_common+0x2a0/0xa70 [ 711.769599][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 711.777147][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 711.784125][ T31] ? __pfx___might_resched+0x10/0x10 [ 711.792190][ T31] ? compaction_free+0x182/0x430 [ 711.797394][ T31] migrate_pages_batch+0x7a1/0x45c0 [ 711.802669][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 711.808353][ T31] ? __pfx_compaction_free+0x10/0x10 [ 711.813708][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 711.819663][ T31] ? lapic_next_event+0x10/0x20 [ 711.824584][ T31] ? __pfx_remove_migration_pte+0x10/0x10 [ 711.831881][ T31] ? __pfx_clockevents_program_event+0x10/0x10 [ 711.838100][ T31] migrate_pages_sync+0x4db/0x880 [ 711.845345][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 711.852374][ T8700] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 711.859972][ T31] ? __pfx_compaction_free+0x10/0x10 [ 711.865674][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 711.915985][ T31] migrate_pages+0x1a83/0x2850 [ 711.925834][ T31] ? isolate_migratepages_block+0xd74/0x61d0 [ 711.939257][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 711.951580][ T31] ? __pfx_compaction_free+0x10/0x10 [ 711.964647][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 711.978665][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 712.283901][T15307] net_ratelimit: 2 callbacks suppressed [ 712.283914][T15307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.300482][ T31] ? __nr_to_section+0xaa/0x100 [ 712.308019][ T31] ? pfn_to_online_page+0x178/0x4c0 [ 712.313295][ T31] compact_zone+0x243c/0x4420 [ 712.318140][ T31] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 712.324123][ T31] ? debug_object_free+0x295/0x550 [ 712.329338][ T31] ? __pfx_debug_object_free+0x10/0x10 [ 712.334848][ T31] ? __pfx_compact_zone+0x10/0x10 [ 712.340244][ T31] ? __flush_work+0x4ca/0xcb0 [ 712.344951][ T31] ? __flush_work+0x5fe/0xcb0 [ 712.350070][ T31] ? lock_release+0x24d/0x310 [ 712.354790][ T31] compact_node+0x17f/0x2c0 [ 712.359457][ T31] ? __pfx_compact_node+0x10/0x10 [ 712.360336][ T4988] block nbd0: Possible stuck request ffff888027ff5080: control (read@0,1024B). Runtime 180 seconds [ 712.364688][ T31] ? __lru_add_drain_all+0x441/0x650 [ 712.375191][ T4988] block nbd0: Possible stuck request ffff888027ff5240: control (read@1024,1024B). Runtime 180 seconds [ 712.380479][ T31] sysctl_compaction_handler+0x141/0x210 [ 712.391529][ T4988] block nbd0: Possible stuck request ffff888027ff5400: control (read@2048,1024B). Runtime 180 seconds [ 712.397248][ T31] proc_sys_call_handler+0x47f/0x5a0 [ 712.408148][ T4988] block nbd0: Possible stuck request ffff888027ff55c0: control (read@3072,1024B). Runtime 180 seconds [ 712.413576][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 712.431614][ T8700] usb 5-1: unable to get BOS descriptor or descriptor too short [ 712.439718][ T8700] usb 5-1: not running at top speed; connect to a high speed hub [ 712.447521][ T31] ? splice_from_pipe_next+0x1ec/0x5a0 [ 712.453219][ T31] iter_file_splice_write+0x830/0x10b0 [ 712.458921][ T31] ? copy_splice_read+0x739/0xbb0 [ 712.459447][ T8700] usb 5-1: config 8 has no interfaces? [ 712.464158][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 712.475908][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 712.476880][ T8700] usb 5-1: string descriptor 0 read error: -22 [ 712.481498][ T31] ? __might_fault+0xc5/0x140 [ 712.487580][ T8700] usb 5-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 712.492352][ T31] ? __fpu_restore_sig+0x60b/0x13b0 [ 712.501291][ T8700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.506754][ T31] ? __pfx___might_resched+0x10/0x10 [ 712.520185][ T31] ? __fpu_restore_sig+0x615/0x13b0 [ 712.528192][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 712.537903][ T31] direct_splice_actor+0x192/0x690 [ 712.564182][ T31] splice_direct_to_actor+0x345/0xa30 [ 712.570567][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 712.576368][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 712.582346][ T31] ? rcu_is_watching+0x12/0xc0 [ 712.587180][ T31] ? __might_fault+0xc5/0x140 [ 712.592006][ T31] ? lock_release+0x24d/0x310 [ 712.596692][ T31] do_splice_direct+0x174/0x240 [ 712.601636][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 712.607024][ T31] ? avc_policy_seqno+0x9/0x20 [ 712.611936][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 712.617892][ T31] ? bpf_lsm_file_permission+0x9/0x10 [ 712.623404][ T31] ? security_file_permission+0x76/0x210 [ 712.629062][ T31] ? rw_verify_area+0xce/0x6d0 [ 712.633886][ T31] do_sendfile+0xadc/0xe20 [ 712.638317][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 712.643300][ T31] ? lock_release+0x24d/0x310 [ 712.648000][ T31] __x64_sys_sendfile64+0x154/0x220 [ 712.653302][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 712.659047][ T31] ? lock_release+0x24d/0x310 [ 712.663757][ T31] ? rcu_is_watching+0x12/0xc0 [ 712.668535][ T31] do_syscall_64+0x115/0x870 [ 712.673212][ T31] ? clear_bhb_loop+0x40/0x90 [ 712.678001][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.683901][ T31] RIP: 0033:0x7f8bb939ce59 [ 712.688378][ T31] RSP: 002b:00007f8bba1bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 712.697132][ T31] RAX: ffffffffffffffda RBX: 00007f8bb9615fa0 RCX: 00007f8bb939ce59 [ 712.705124][ T31] RDX: 00002000000000c0 RSI: 0000000000000006 RDI: 0000000000000007 [ 712.713154][ T31] RBP: 00007f8bb9432e6f R08: 0000000000000000 R09: 0000000000000000 [ 712.721148][ T31] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 712.729161][ T31] R13: 00007f8bb9616038 R14: 00007f8bb9615fa0 R15: 00007ffe074ee0f8 [ 712.737140][ T31] [ 712.740219][ T31] INFO: lockdep is turned off. [ 712.744974][ T31] NMI backtrace for cpu 1 [ 712.744991][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 712.745019][ T31] Tainted: [L]=SOFTLOCKUP [ 712.745026][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 712.745038][ T31] Call Trace: [ 712.745044][ T31] [ 712.745051][ T31] dump_stack_lvl+0x100/0x190 [ 712.745076][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 712.745099][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 712.745120][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 712.745144][ T31] sys_info+0x141/0x190 [ 712.745162][ T31] watchdog+0xcb1/0x1030 [ 712.745179][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 712.745197][ T31] ? __pfx_watchdog+0x10/0x10 [ 712.745211][ T31] ? __kthread_parkme+0x18c/0x230 [ 712.745230][ T31] ? kthread+0x13a/0x450 [ 712.745253][ T31] ? __pfx_watchdog+0x10/0x10 [ 712.745271][ T31] kthread+0x370/0x450 [ 712.745296][ T31] ? __pfx_kthread+0x10/0x10 [ 712.745316][ T31] ret_from_fork+0x72b/0xd50 [ 712.745330][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 712.745344][ T31] ? __switch_to+0x800/0x10f0 [ 712.745360][ T31] ? __pfx_kthread+0x10/0x10 [ 712.745379][ T31] ret_from_fork_asm+0x1a/0x30 [ 712.745397][ T31] [ 712.745404][ T31] Sending NMI from CPU 1 to CPUs 0: [ 712.876580][ C0] NMI backtrace for cpu 0 [ 712.876597][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.876623][ C0] Tainted: [L]=SOFTLOCKUP [ 712.876630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 712.876641][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 712.876673][ C0] Code: a6 88 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 e8 14 00 fb f4 fc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 712.876691][ C0] RSP: 0018:ffffffff8e407e10 EFLAGS: 00000246 [ 712.876707][ C0] RAX: 00000000031ea744 RBX: ffffffff8e491480 RCX: ffffffff8b96b2d5 [ 712.876720][ C0] RDX: 0000000000000001 RSI: ffffffff8c1d2680 RDI: ffffffff81de2aa7 [ 712.876732][ C0] RBP: fffffbfff1c92290 R08: 0000000000000000 R09: ffffed101708678d [ 712.876744][ C0] R10: ffff8880b8433c6b R11: ffffffff81d4ff9c R12: 0000000000000000 [ 712.876756][ C0] R13: 0000000000000000 R14: 1ffffffff1c80fc6 R15: dffffc0000000000 [ 712.876768][ C0] FS: 0000000000000000(0000) GS:ffff88812431a000(0000) knlGS:0000000000000000 [ 712.876785][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.876797][ C0] CR2: 00007f5bdb1ea2f8 CR3: 0000000073924000 CR4: 00000000003526f0 [ 712.876809][ C0] Call Trace: [ 712.876815][ C0] [ 712.876821][ C0] default_idle+0x9/0x10 [ 712.876840][ C0] default_idle_call+0x6c/0xb0 [ 712.876859][ C0] do_idle+0x3a7/0x5b0 [ 712.876882][ C0] ? __pfx_do_idle+0x10/0x10 [ 712.876906][ C0] cpu_startup_entry+0x4f/0x60 [ 712.876928][ C0] rest_init+0x251/0x260 [ 712.876947][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 712.876975][ C0] start_kernel+0x484/0x490 [ 712.876999][ C0] x86_64_start_reservations+0x24/0x30 [ 712.877025][ C0] x86_64_start_kernel+0x12b/0x130 [ 712.877050][ C0] common_startup_64+0x13e/0x158 [ 712.877080][ C0] [ 713.064911][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 713.071762][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 713.082418][ T31] Tainted: [L]=SOFTLOCKUP [ 713.086753][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.096784][ T31] Call Trace: [ 713.100038][ T31] [ 713.102944][ T31] dump_stack_lvl+0x100/0x190 [ 713.107606][ T31] vpanic+0x552/0x970 [ 713.111575][ T31] ? __pfx_vpanic+0x10/0x10 [ 713.116065][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 713.122208][ T31] panic+0xd1/0xe0 [ 713.125907][ T31] ? __pfx_panic+0x10/0x10 [ 713.130301][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 713.136521][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 713.142658][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 713.148796][ T31] ? watchdog.cold+0x1ec/0x234 [ 713.153552][ T31] ? watchdog+0xcc1/0x1030 [ 713.157944][ T31] watchdog.cold+0x1fd/0x234 [ 713.162511][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 713.168553][ T31] ? __pfx_watchdog+0x10/0x10 [ 713.173203][ T31] ? __kthread_parkme+0x18c/0x230 [ 713.178206][ T31] ? kthread+0x13a/0x450 [ 713.182427][ T31] ? __pfx_watchdog+0x10/0x10 [ 713.187079][ T31] kthread+0x370/0x450 [ 713.191130][ T31] ? __pfx_kthread+0x10/0x10 [ 713.195703][ T31] ret_from_fork+0x72b/0xd50 [ 713.200271][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 713.205361][ T31] ? __switch_to+0x800/0x10f0 [ 713.210022][ T31] ? __pfx_kthread+0x10/0x10 [ 713.214590][ T31] ret_from_fork_asm+0x1a/0x30 [ 713.219334][ T31] [ 713.222559][ T31] Kernel Offset: disabled [ 713.226859][ T31] Rebooting in 86400 seconds..