last executing test programs: 9m35.489522282s ago: executing program 2 (id=788): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9m35.223297079s ago: executing program 2 (id=789): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{}, 0x5, 0x0, 0x0, 0x0, 0x0}}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) 9m32.684003666s ago: executing program 2 (id=798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9m30.767344978s ago: executing program 2 (id=806): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbb0800450000380001ac14aa030090781204183f250000000065000062c60ad400840000e00000017f00012e00186300"/69], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003780)={r4, &(0x7f0000002740)="b26b", &(0x7f0000003740)=@udp, 0x2}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_io_uring_setup(0x6b5a, &(0x7f0000000100)={0x0, 0x6f6b, 0x1, 0xffffffff, 0x20e}, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) close(0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001e0001000000000000000000027ca1cb531e0000000100000772880000080001000000000074a35b986d8403a4994f34368f92d0d747d218c172cd4873f4118c4b417bf51ea1282e96a769d20a37845e8f9bf3fb18a25baed9fac0f4e7cb0610a053334cd5d070aad70fbdfa7f00d4810d8674b732191243b1229542346a7a0a2ab328b3299482"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) 9m29.650527402s ago: executing program 2 (id=809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000600)='./file0\x00', 0x28) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getrlimit(0x3, &(0x7f00000005c0)) sendmmsg$inet6(r4, 0x0, 0xffffffffffffffb1, 0x2000c8d4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) lsm_get_self_attr(0x0, 0x0, 0x0, 0x0) 9m27.281361036s ago: executing program 2 (id=820): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x2800, 0x1c, {0x80008, 0xff7fffff}, 0xd0, 0x9}}) 9m26.998028922s ago: executing program 32 (id=820): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x2800, 0x1c, {0x80008, 0xff7fffff}, 0xd0, 0x9}}) 6m21.471379751s ago: executing program 3 (id=1530): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x40}, 0x0) 6m21.457916666s ago: executing program 3 (id=1531): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000005fc0)=""/102392, 0x6) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x40000001, 0x41000000}], 0x80000) r2 = creat(&(0x7f0000001440)='./file0\x00', 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) fcntl$setlease(r3, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=@random={'btrfs.', '/\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, 0x0) write$binfmt_aout(r4, 0x0, 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(r2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003f80)={0x2020}, 0x1e04) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x200fffe, 0xa2, 0x55, &(0x7f0000000240)="a06a0064d082778c19380e07c428bd434e3d40cbdb66d20f5732e9d042f0e6002d647aa34bc8226c696919aad7c0525b710a4f4f9bfd6a55a0b5fabed5fd55ea54ae8a36f1cbc7eeab3a6f427d7547ed23dac616de56acf1d984e272c8c0f926136ed8d5e4f87436bf2885d6ec504b8388c8632edc90ca3fbe90ab66ffe4669bdbc67cf2931ebbccf74cde8bb1781b5a54b30e1e4a51841080e2f4f380bec6000000", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r2, 0x3ba0, &(0x7f0000000880)={0x48, 0x17, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) 6m20.922981112s ago: executing program 3 (id=1533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$pokeuser(0x6, r0, 0x0, 0x6) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x4}, 0x18) shmget$private(0x0, 0x13000, 0x400, &(0x7f0000feb000/0x13000)=nil) mprotect(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) connect$inet(r3, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x2) landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x3}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 6m19.924919594s ago: executing program 3 (id=1537): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_debug_messages', 0x2, 0x0) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) close(0x3) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="7b87f20f21"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setreuid(0xee01, r4) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) sendfile(r0, r0, 0x0, 0x6) 6m16.746037983s ago: executing program 3 (id=1556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1405, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x4800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x4, 0xe, 0x200, 0x9, 0xffc7}, 0x0, 0x0, 0x0) 6m16.314820444s ago: executing program 3 (id=1559): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000006c0)="67400f07c40249af4b8bb9800000c02e0f0051ea35010200000f300f20a366450f769e00000100440f20c067430f78b2a7000000445b66baf80cb88cf4b684ef5656bafc0ced66ba430066b8000066efc4827d24c366ba4cf0ff07ef87f345a572430f111806a4", 0x67}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$nci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="6103099b0001070658e84764c3b302"], 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x2e) sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1415, 0x200, 0x70bd27, 0x25dfdc00, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_PORT_INDEX, @RDMA_NLDEV_ATTR_RES_CQN={0x0, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x0, 0x3d, 0x5}]}, 0x10}}, 0x10) 6m15.082130279s ago: executing program 33 (id=1559): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000006c0)="67400f07c40249af4b8bb9800000c02e0f0051ea35010200000f300f20a366450f769e00000100440f20c067430f78b2a7000000445b66baf80cb88cf4b684ef5656bafc0ced66ba430066b8000066efc4827d24c366ba4cf0ff07ef87f345a572430f111806a4", 0x67}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$nci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="6103099b0001070658e84764c3b302"], 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x2e) sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1415, 0x200, 0x70bd27, 0x25dfdc00, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_PORT_INDEX, @RDMA_NLDEV_ATTR_RES_CQN={0x0, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x0, 0x3d, 0x5}]}, 0x10}}, 0x10) 2m14.967302156s ago: executing program 0 (id=2364): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRES8=r4, @ANYBLOB="bb21e6cdf6c7ac9c5ee935f49440560a9465b5e622e9fc86d30b6212ca241e5f3500b4ce3823674602485122203da7fca7d43f60e29f562de74c407fc3e657ae62507f3a00f6d16dcce93fc346e64acbd81de3549ec0d459ac56222a6f61d061c9befda1744e02a633257aaa6c9a67", @ANYBLOB="77b99aa3a2e0388dbb1fd825", @ANYRES8, @ANYRESDEC=r3, @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r8, r10, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xfdef) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r11, @ANYBLOB="fe000000000000001c0012000c00010062705259634392d62f4ac67bdeef5a638af69a8c478e33cc2a56db7cfa6289e3da798c0b76c1c2b94dcd0d50139c15e8f129f667901aecfc902feee7e38d2e0aaf2b1b1585e9c0a831ef962e8a52f221320cef1df8bca186214c6d90c38a55ba8a07e7f0d2a1fef8af4714146d6e4e245c265740c87c9c187d4967618561fa30771fddddc5f17bc696d1d82918174268d483fd9a9be7356fc699d3a13d391ca2744c42044ac4bf69f579c67a160acaedcd897a3952b71b0cbfa5f1659533165eedf94bfb8d0c6ef6935ae758509906baa2beaa"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010026bd7000fbdb5f250a140000ff040003002c000008001e00020000000c0a16800600060000500000"], 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0x50) socket(0x26, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20000000100010ddffff00000000", @ANYRES32=r11, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0) socket(0x2a, 0xa, 0x4) 2m14.094451965s ago: executing program 0 (id=2365): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a03000000000000000000011a00000000100001"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SECUREBITS(0x1c, 0x15) faccessat(0xffffffffffffffff, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000111401002dbd7000ffdbdf2608004a000000000008004b00130000000800010000000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x48884) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpeername$unix(r2, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000602200000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000006000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400505"], 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xe) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) 2m9.84146903s ago: executing program 0 (id=2375): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRES8=r4, @ANYBLOB="bb21e6cdf6c7ac9c5ee935f49440560a9465b5e622e9fc86d30b6212ca241e5f3500b4ce3823674602485122203da7fca7d43f60e29f562de74c407fc3e657ae62507f3a00f6d16dcce93fc346e64acbd81de3549ec0d459ac56222a6f61d061c9befda1744e02a633257aaa6c9a67", @ANYBLOB="77b99aa3a2e0388dbb1fd825", @ANYRES8, @ANYRESDEC=r3, @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r8, r10, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xfdef) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r11, @ANYBLOB="fe000000000000001c0012000c00010062705259634392d62f4ac67bdeef5a638af69a8c478e33cc2a56db7cfa6289e3da798c0b76c1c2b94dcd0d50139c15e8f129f667901aecfc902feee7e38d2e0aaf2b1b1585e9c0a831ef962e8a52f221320cef1df8bca186214c6d90c38a55ba8a07e7f0d2a1fef8af4714146d6e4e245c265740c87c9c187d4967618561fa30771fddddc5f17bc696d1d82918174268d483fd9a9be7356fc699d3a13d391ca2744c42044ac4bf69f579c67a160acaedcd897a3952b71b0cbfa5f1659533165eedf94bfb8d0c6ef6935ae758509906baa2beaa"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010026bd7000fbdb5f250a140000ff040003002c000008001e00020000000c0a16800600060000500000"], 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0x50) socket(0x26, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20000000100010ddffff00000000", @ANYRES32=r11, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0) socket(0x2a, 0xa, 0x4) 2m5.946553212s ago: executing program 0 (id=2383): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000300)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0xfffffffffffffffd, 0xfffffffffffffffd, 0x4, 0xacba, 0x0, 0xb}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bbd, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x8}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) io_submit(0x0, 0x0, 0x0) stat(0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000001280)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x3f2, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1157d27a36c007f1}, 0x40) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x370, 0x2e8, 0x2e8, 0x370, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev={0xac, 0x14, 0x14, 0x8}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x2}, [0xffffffff], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)=0x1f) socket$inet6_tcp(0xa, 0x1, 0x0) 2m4.700945065s ago: executing program 0 (id=2390): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000000000005f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000340)={0x1, 'bridge_slave_1\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000008300)={0x1, 'wg0\x00', 0x4}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x4, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x9, 0xffff}, {0xfff2, 0x10}}}, 0x24}}, 0x20044000) ioctl$SIOCSIFHWADDR(r4, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) 2m3.379964026s ago: executing program 0 (id=2392): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$inet6(0xa, 0x1, 0x3) modify_ldt$read(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x2, "a2"}, @local=@item_4={0x3, 0x2, 0xa, "9a719233"}]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, 0x0) 1m47.195809977s ago: executing program 34 (id=2392): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$inet6(0xa, 0x1, 0x3) modify_ldt$read(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x2, "a2"}, @local=@item_4={0x3, 0x2, 0xa, "9a719233"}]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, 0x0) 12.182594263s ago: executing program 6 (id=2669): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r0 = syz_usb_connect$uac2(0x6, 0xb3, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1023, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x6, 0x70, 0x80, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x9, 0x16, 0xf7}, [@sample_rate={0xd, 0x24, 0xd, 0x5, 0x2, 0x4, [0x2, 0x0, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x3, "e5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x7f7, 0x7f, 0x0, 0x5, {0x8, 0x25, 0x1, 0x81, 0x30, 0x2, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x3, 0x0, 0x4, "b6d326b5f2a538"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x6, 0x1, 0x8, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffe6, 0x1, 0x8, 0xf9}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0x10, 0x7, {0x8, 0x25, 0x1, 0x2, 0x33, 0x8, 0x8001}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x0, 0x7, 0x7, 0xbf, 0xd8}, 0x1d, &(0x7f0000000540)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x1, 0xc4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0xb, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa, 0x8}]}, 0x3, [{0xc0, &(0x7f0000000580)=ANY=[@ANYBLOB="c00352a05ce94ad715236f576d841cc896a80e4b41ee7732268f283e5de8fe718908665dc199860ed050e631fbb0d290a0b6171f8ee6145f26b805ca848ecd22a268b37ec86fe06b544c3867cc048a2fa52f7ee35403211f8e0270a4bb6c367c63c3e0d6740dcc272d669433fbf758e55c84f9de0bceb8a1e96f535260e4d834fc551ed8edd038ba6bb9898e7b8ba6870458e5580ecf8ff576a6efad3e753b30cfae6103ca967c8408ae45536f22a402b600"/192]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x42b}}, {0x77, &(0x7f0000000680)=@string={0x77, 0x3, "290a5ce1469da599db10ed20da3b76e06b698d8cadadaf5cbb255a367c8294742fba42b5c236820712e38f804346f2cb8242737776114f7ab0ff9b3bbc115df678af337386ef9c3acf238ac7c445098c24ca89de79782242bceb3b7225ae29f00a4dc93e9c6133b2992d3a4fa226c3643e99031203"}}]}) syz_usb_ep_write(r0, 0x19, 0xbd, &(0x7f0000000740)="c7b8619144f810bfda408f3a53ec2bfabe327f3bbcaacd28fae74747f0a81d9c0f97286a8b456e46f57cae9d2f2c08fe02b3eaa09b29c1ba3b12ccb4ee691e85a14397d4209db6afdc24f3381957775580bf0b99fe9bd2b069dc3bd63de8f054e49eb98b5aedf751d5ca2100503ce8f20092f84b67b377181dc6a5d76dcc89f41ac5d5f79a6e5bb8bf92e48a2feaafaec8f0d168b9faac15961c37ae572ed67e01d0f456236a310f3fffecf437e327abcd03a79adc65fbd2086cafc637") syz_clone(0x20844000, &(0x7f0000000040)="5803f2520cef5a9d942a833d17ac6d21e95a47c6599f2497672cc6f71b", 0x1d, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280)="01bcc0d29f010d4fbf8561184af59c28de7ab6d47602719f7d3447e5aba365fe3838af07a0f6b932aef64a62a82a431c64b25d13d05c7bc26483ea5d38653117b0b2fa8a045add8870c77585133f39082a3050c17ac26afa747a8f19d03baa9af38cc3ec146764b91dcb33aabbb8047714ab777e3145dab15953e62af801f396aa819f97e07b7fc8a88809ffd3185bcba4e4bfc5a1d7af5d09feda9663") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op={0x0, 0x8}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f0000000940), 0x4) syz_emit_ethernet(0x34, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaacdaaaaaa0f08060206001706060003aaaaaaaaaaaab79c035253dbaaaaaaaaaa19144dd4a3b71534ac007cee30"], &(0x7f0000000900)={0x1, 0x3, [0x77, 0xccd, 0xdd2, 0x128]}) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000800)={0xbcec, 0xfffffffffffffd60}) 10.511674547s ago: executing program 5 (id=2672): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) pwrite64(r2, 0x0, 0x0, 0x7fffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffff000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000280)={0x0, 0xffffffffffffffe4, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000e8ffffbfffff0b0000004800058008000100657568070002"], 0x5c}}, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) gettid() landlock_create_ruleset(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 9.67247738s ago: executing program 1 (id=2675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x22, 0x2, 0x6) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f0000000300)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x815) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4c23, @remote}}}, 0x84) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r1, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @random="0f6ac106c05b"}, 0x14) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r11) sendmmsg$unix(r10, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x948, 0x0, 0x400000000000000}]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 9.524206633s ago: executing program 5 (id=2676): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="b0539a7d10ece7c02c53c54cfea7186b6d3ce20c42f15eeb7454f724e693d7e3f13595", @ANYRES32], 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40100) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffeff9, 0x0, 0x3, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r8 = socket$netlink(0x10, 0x3, 0x0) preadv(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.061487655s ago: executing program 7 (id=2678): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x4048820) read(r0, &(0x7f00000000c0)=""/163, 0xd0140f23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) 8.938282288s ago: executing program 6 (id=2679): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3136564e, 0x1, @discrete={0xff, 0x1}}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000140)) fcntl$setflags(r3, 0x2, 0xda1bbcf2caa2938d) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r5, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)="d2", 0x1}], 0x1}}], 0x1, 0x8080) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x8) write$cgroup_subtree(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab0700f2000523a6"], 0xfe33) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x462040, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000000ffe, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x1, 0xd, 0x80000002}, 0x0, 0x0) 8.884116837s ago: executing program 4 (id=2680): socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff44, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 8.524899824s ago: executing program 1 (id=2681): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) pwrite64(r2, 0x0, 0x0, 0x7fffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffff000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000280)={0x0, 0xffffffffffffffe4, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000e8ffffbfffff0b0000004800058008000100657568070002"], 0x5c}}, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) gettid() landlock_create_ruleset(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 7.87529663s ago: executing program 1 (id=2682): prlimit64(0x0, 0x3, &(0x7f0000000140)={0xd, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000bc0)=""/129) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) (async) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3ffffd) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3ffffd) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2, 0x0) r4 = fsmount(r0, 0x1, 0x104) r5 = fanotify_init(0x200, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x88040, 0x20) setresuid(0x0, 0xee01, 0x0) fanotify_mark(r5, 0x265, 0x26, r6, 0x0) (async) fanotify_mark(r5, 0x265, 0x26, r6, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2f64, &(0x7f0000000200)={0x0, 0x4913, 0xc000, 0x3, 0x23f, 0x0, r4}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) 7.566497306s ago: executing program 4 (id=2683): syz_usb_connect(0x0, 0x43, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a7000000010902120001000000000904"], 0x0) r0 = socket(0x10, 0x3, 0x0) unshare(0x24060400) r1 = semget$private(0x0, 0x7, 0x243) semtimedop(r1, &(0x7f00000000c0)=[{0x0, 0xffff, 0x2000}, {0x4, 0x0, 0x1800}], 0x2, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) semctl$SETVAL(r1, 0x0, 0x10, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100000202030000000000000000000a00000468000a80640002801400018008000100e000000108000200ac1e090106000340000000000c00028005000100110000000c00028005000100210000002c00018014000300fc0200000000000000000000000000001400040000050000000000000000000000000001080004400000000308000840000000006c00e8dae7830340000400000c000280050001002f00000006000340000100000c00028005000100840000002c00018014000300fc0100000000000000000000f6ffff00140004000000000000000000000005000000000014000180080001000000000008000200ac1414bb08000540000000020800044001800002480002800c00028005000100210000002c0001801400030000000000000000000000ffffac14141e140004"], 0x158}}, 0x4048800) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x1000, 0xf1, 0x8, 0xffffffff}, {0x0, 0xb, 0x8, 0x5}, {0xff80, 0x7, 0xe5, 0x80}, {0x0, 0x7, 0x5, 0x5}, {0x8, 0xf, 0x0, 0x2}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20202, 0xa4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001680), 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000021c0)={0xa, &(0x7f0000001f00)={0xa, 0x6, 0x310, 0x9, 0x2, 0x2}, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) sendmsg$nl_route_sched(r0, 0x0, 0x0) capset(0x0, 0x0) 4.877302173s ago: executing program 7 (id=2684): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 4.571472s ago: executing program 5 (id=2685): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x7, 0x6, 0x4, 0x7, 0xc, "2b747961b5a31e1e343bc41ebce1902d8936d4"}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0xffffffffffffffff) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) (async) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.501064258s ago: executing program 6 (id=2686): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x842, 0x1ba) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x800448d7, &(0x7f0000000080)='|') shmctl$IPC_RMID(r2, 0x0) ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000003c0)={0x8, 0x1, 0x2, "6040a7170200ff0120000000fcff00ff1057e31e940000000000000000aeff00", 0x50313134}) 4.446861311s ago: executing program 7 (id=2687): socket$kcm(0x11, 0xa, 0x300) r0 = socket$inet_smc(0x2b, 0x1, 0x0) utime(&(0x7f0000000000)='.\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ff1000/0xe000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0xe000}) 4.446533068s ago: executing program 1 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xd8}}, 0x0) 4.42370596s ago: executing program 5 (id=2689): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) io_submit(r5, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r4, &(0x7f0000000340)="8b", 0x1, 0x6}]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0xffffffffffffff73, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 4.372908231s ago: executing program 1 (id=2690): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r0 = syz_usb_connect$uac2(0x6, 0xb3, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1023, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x6, 0x70, 0x80, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x9, 0x16, 0xf7}, [@sample_rate={0xd, 0x24, 0xd, 0x5, 0x2, 0x4, [0x2, 0x0, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x3, "e5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x7f7, 0x7f, 0x0, 0x5, {0x8, 0x25, 0x1, 0x81, 0x30, 0x2, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x3, 0x0, 0x4, "b6d326b5f2a538"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x6, 0x1, 0x8, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffe6, 0x1, 0x8, 0xf9}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0x10, 0x7, {0x8, 0x25, 0x1, 0x2, 0x33, 0x8, 0x8001}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x0, 0x7, 0x7, 0xbf, 0xd8}, 0x1d, &(0x7f0000000540)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x1, 0xc4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0xb, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa, 0x8}]}, 0x3, [{0xc0, &(0x7f0000000580)=ANY=[@ANYBLOB="c00352a05ce94ad715236f576d841cc896a80e4b41ee7732268f283e5de8fe718908665dc199860ed050e631fbb0d290a0b6171f8ee6145f26b805ca848ecd22a268b37ec86fe06b544c3867cc048a2fa52f7ee35403211f8e0270a4bb6c367c63c3e0d6740dcc272d669433fbf758e55c84f9de0bceb8a1e96f535260e4d834fc551ed8edd038ba6bb9898e7b8ba6870458e5580ecf8ff576a6efad3e753b30cfae6103ca967c8408ae45536f22a402b600"/192]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x42b}}, {0x77, &(0x7f0000000680)=@string={0x77, 0x3, "290a5ce1469da599db10ed20da3b76e06b698d8cadadaf5cbb255a367c8294742fba42b5c236820712e38f804346f2cb8242737776114f7ab0ff9b3bbc115df678af337386ef9c3acf238ac7c445098c24ca89de79782242bceb3b7225ae29f00a4dc93e9c6133b2992d3a4fa226c3643e99031203"}}]}) syz_usb_ep_write(r0, 0x19, 0xbd, &(0x7f0000000740)="c7b8619144f810bfda408f3a53ec2bfabe327f3bbcaacd28fae74747f0a81d9c0f97286a8b456e46f57cae9d2f2c08fe02b3eaa09b29c1ba3b12ccb4ee691e85a14397d4209db6afdc24f3381957775580bf0b99fe9bd2b069dc3bd63de8f054e49eb98b5aedf751d5ca2100503ce8f20092f84b67b377181dc6a5d76dcc89f41ac5d5f79a6e5bb8bf92e48a2feaafaec8f0d168b9faac15961c37ae572ed67e01d0f456236a310f3fffecf437e327abcd03a79adc65fbd2086cafc637") syz_clone(0x20844000, &(0x7f0000000040)="5803f2520cef5a9d942a833d17ac6d21e95a47c6599f2497672cc6f71b", 0x1d, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280)="01bcc0d29f010d4fbf8561184af59c28de7ab6d47602719f7d3447e5aba365fe3838af07a0f6b932aef64a62a82a431c64b25d13d05c7bc26483ea5d38653117b0b2fa8a045add8870c77585133f39082a3050c17ac26afa747a8f19d03baa9af38cc3ec146764b91dcb33aabbb8047714ab777e3145dab15953e62af801f396aa819f97e07b7fc8a88809ffd3185bcba4e4bfc5a1d7af5d09feda9663") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op={0x0, 0x8}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f0000000940), 0x4) syz_emit_ethernet(0x34, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaacdaaaaaa0f08060206001706060003aaaaaaaaaaaab79c035253dbaaaaaaaaaa19144dd4a3b71534ac007cee30"], &(0x7f0000000900)={0x1, 0x3, [0x77, 0xccd, 0xdd2, 0x128]}) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000800)={0xbcec, 0xfffffffffffffd60}) 3.525452844s ago: executing program 4 (id=2691): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) sendmmsg$inet(r1, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004440), 0x0, 0x0, 0xd0}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f00000045c0)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000049c0)='{', 0x1}], 0x1}}], 0x5, 0x4c8c0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7096}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') readlinkat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 3.295644882s ago: executing program 7 (id=2692): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) pwrite64(r3, 0x0, 0x0, 0x7fffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x7ffff000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000280)={0x0, 0xffffffffffffffe4, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000e8ffffbfffff0b0000004800058008000100657568070002"], 0x5c}}, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) gettid() landlock_create_ruleset(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 3.293161332s ago: executing program 4 (id=2693): socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff44, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 2.397188913s ago: executing program 7 (id=2694): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x4048820) read(r0, &(0x7f00000000c0)=""/163, 0xd0140f23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) 2.392817513s ago: executing program 6 (id=2695): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) pwrite64(r2, 0x0, 0x0, 0x7fffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffff000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000280)={0x0, 0xffffffffffffffe4, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000e8ffffbfffff0b0000004800058008000100657568070002"], 0x5c}}, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) gettid() landlock_create_ruleset(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 1.719154383s ago: executing program 4 (id=2696): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000004c0)={{0x1, 0xb}, 0x100, './file0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7fff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x44, '\x00', @data=0x8, 0x8}, {0x6, '\x00', @buffer={"8f01000000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e83", 0x20}, 0x1c}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) epoll_create1(0x80000) 1.644095532s ago: executing program 6 (id=2697): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000000000224e0000", 0x58}], 0x1) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', r5, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x20, 0x0, 0x1, 0x6}}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000520000022dbd7000fddbdf251c08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000600050000000800060032000000080006000700000008000100", @ANYRES32=r5, @ANYBLOB="08000600dd91d9c6000008"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) syz_80211_inject_frame(&(0x7f0000000480)=@device_b, &(0x7f0000000680)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @initial, @initial, {0xf, 0xb86}}, @random="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"}, 0x3be) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) open(&(0x7f0000000100)='./file0\x00', 0xa4c0, 0x10) unshare(0x22020600) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 978.971158ms ago: executing program 5 (id=2698): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x81, 0x20ffc}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xc, 0x11, r0, 0x100000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 847.788911ms ago: executing program 5 (id=2699): r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x0) (async) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x37, &(0x7f0000000040)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000003c0)="34d634c427ac855834d9ce1682e3c3cf5c3dbc807bbfe2ebf2cddf6dbbb83910f28e2b4880735b50f41ca3e005334958e37f0b9e1e40c199eb6bf1668c0aded47d632276bd817a5a6fa1c206cf95293c40457e3f8d4f78b82c2d1093f9e969cf8c9a47436cb6c23f970f9b701c767bcc508b8056e8a5eb33c23643ca6dc4c9a9548e5495367ceb580ed31937e65d9363803cd03d69aa70efd69d20044c9d61ffbbbd69d875cc6cbd2c77319cdd784f4ffb2f51a9a22861cf69d07c8e8720d04e9652777967d1b874b37a38b14a72a2aa5f704dd23699fc56ac17014927184cf5e63d38f48d", 0xe5, 0xfffffffffffffffe) (async) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000003c0)="34d634c427ac855834d9ce1682e3c3cf5c3dbc807bbfe2ebf2cddf6dbbb83910f28e2b4880735b50f41ca3e005334958e37f0b9e1e40c199eb6bf1668c0aded47d632276bd817a5a6fa1c206cf95293c40457e3f8d4f78b82c2d1093f9e969cf8c9a47436cb6c23f970f9b701c767bcc508b8056e8a5eb33c23643ca6dc4c9a9548e5495367ceb580ed31937e65d9363803cd03d69aa70efd69d20044c9d61ffbbbd69d875cc6cbd2c77319cdd784f4ffb2f51a9a22861cf69d07c8e8720d04e9652777967d1b874b37a38b14a72a2aa5f704dd23699fc56ac17014927184cf5e63d38f48d", 0xe5, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000500)="37096a2d9d22106500d7b0db21c986fd0d439d86965ac29facac1563ab15b25f4ffd8b7b900de146f37789875f37c40377b635e142b3be9723365210adea334e6731cf96da97c62dcc7808ac0b8508aa1610469e2546592ddb9b81c5b29013c4ef2f02d91ef4263d79935a894d0b2e232e72512c8668e38adbe285c0844e44e6718e187250d93982ae83cb76a400f2f6263ca88bc570c230ab7c12a7d1bad7ce5dad3412e276330cbbe197e0689d1af72553ce872401399d9378ad524d496f9c5bf6c9df21c54f7cb05c08", 0xcb, 0x0) (async) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000500)="37096a2d9d22106500d7b0db21c986fd0d439d86965ac29facac1563ab15b25f4ffd8b7b900de146f37789875f37c40377b635e142b3be9723365210adea334e6731cf96da97c62dcc7808ac0b8508aa1610469e2546592ddb9b81c5b29013c4ef2f02d91ef4263d79935a894d0b2e232e72512c8668e38adbe285c0844e44e6718e187250d93982ae83cb76a400f2f6263ca88bc570c230ab7c12a7d1bad7ce5dad3412e276330cbbe197e0689d1af72553ce872401399d9378ad524d496f9c5bf6c9df21c54f7cb05c08", 0xcb, 0x0) r9 = add_key$user(&(0x7f00000000c0), &(0x7f0000001180)={'syz', 0x3}, &(0x7f0000001240)='%8', 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000640)={r8, 0x0, r9}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f00000019c0)={&(0x7f0000001940)={'hmac(sha256-neon)\x00'}, &(0x7f0000001980)="25cbc718d00bcb3b46905a8a6e9d7edcdf7e5390491819b90db5eaff5123acfe21b1a3e99d8c5e2711fed8ee47", 0x2d}) (async) keyctl$dh_compute(0x17, &(0x7f0000000640)={r8, 0x0, r9}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f00000019c0)={&(0x7f0000001940)={'hmac(sha256-neon)\x00'}, &(0x7f0000001980)="25cbc718d00bcb3b46905a8a6e9d7edcdf7e5390491819b90db5eaff5123acfe21b1a3e99d8c5e2711fed8ee47", 0x2d}) keyctl$dh_compute(0x17, &(0x7f0000000540)={r7, r8}, &(0x7f0000000580)=""/1, 0x1, &(0x7f0000000740)={&(0x7f0000000600)={'blake2b-512\x00'}, &(0x7f0000000640)="c48ce3e61d6ea4d3fa4f4d11be57fd7d66f230e3c2be12891b2a36027abbd962a19101bdb3f7d44a1930275008337dcab3cc2e8796d4b76607fb52613f90e30d750e93419a46f000fa59d17f80a0952f7491751922d99f75b41979e530838e795456cee3fe7a24bdec562cdc209859c33c7439ab09a059177509a9edfa0b9497249b057e083a807700c94dfa21a614bec96d1df799f8d4e97d3030042394ca2ec76d3c6b633d456806918eda7694027569e66fe68fbc02b6f992a4dae0db101ab3a72e48e21dda8d377fa06eb93d546ac5b972", 0xd3}) 654.765867ms ago: executing program 1 (id=2700): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}, "00016337fe9b1803"}}}}}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000100001000000000000000000e0000002000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac141400000000000000000000000000000000003c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001600000000000000"], 0xf8}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0xfffffff7, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x11, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0xa, 0xffffffff, 0x0, 0x1f0, 0xb8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'xfrm0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%\x1f\xeb9@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xef\x9a\xfe\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV)\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam~\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\x02\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce5_\x86\x9b[\x80*\xd3\x82\xc3R\x9cBT\xa3\xbe\xf6\xf5:]\t7\x16^\x9e\xfc\xb2\x11\xf9\x99j\x98\xd7\xf8\xb9\f+\xe8\xe6\x0f\xb3v~[\x81s>\xbeb\xc8^F\x1fV\xa1\x8a\x142\xe7\xc1\xab\xb55#\xa0\x97\x815\xc4\x1e\x01$\x99@J\xec\x9dUg\xe6\xe5\'\xa1\x90\xfe\xd8\x8b:\xab(\x86\xa9\r9\xc9\xef\xdf\t\x00\xb0\x9cI\xfe\x1d\x99\xe0]\x8c\xca\xe2\xa6_J\f\xe7\x8b|\xf5j8\x1b\x04)I\x85d\xb3\x96h\x13b`\x11w5eFu\xe5Gd\xa0\xef\xb4j\x12\xa5I\f\\^\x1c\xc5\xa3x\xa5\x8bpO\xf9\xaf\xb8N\xf4I\xfd\xb1\x90\xc2\t9 {r\x0e{jz/y\xd0\xeb\xd7\xe8\xe1k\x05I@\xaaW\x16\x98!\xf3\xf4\xeew\x1d\x82\xd6T\x0e\xaa\xdd\xcb{D\xa4Um&\xf2H]t\xad\xa3\xab+E\x11v\xbf\x15]\xad\x02(\x1c\x9d\xa3\xa2G\xe8\x99?\xfe+Z\xbb\xd0\xc9\xe2\xb6;&\xb6\xcf\x80V7@2\xaa\'\xedT\x03\xdb-\xdc\xd9\xa3oe\xf8&\xa1\x05\xa3\xe6\xc4\x9b\xda\xbd\x91f\x8aT\x1c?\xc78\xb1\xde\n\xca\xcf\xedh\xe2\x98\x1d\xc9|\x00\x00\x00i5\xa8\xe9]\xc3\xef]\xe2\xc0FH\xd9\x0e\x00|\xc5\x91p\x9d\xda\xcb\v\xb3\xa9Rp\xb8\xf27\x9e^)\xd8\xa6@\xaaL<,?\x7f\xeb\xdcHU%\xa3\xbc\x88I~F\xef\xc3C', 0xf) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r3) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x430040, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000002c0)=""/115) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x90) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r7, 0xa}}, 0x10) 514.745229ms ago: executing program 6 (id=2701): syz_usb_connect(0x0, 0x43, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a7000000010902120001000000000904"], 0x0) r0 = socket(0x10, 0x3, 0x0) unshare(0x24060400) r1 = semget$private(0x0, 0x7, 0x243) semtimedop(r1, &(0x7f00000000c0)=[{0x0, 0xffff, 0x2000}, {0x4, 0x0, 0x1800}], 0x2, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) semctl$SETVAL(r1, 0x0, 0x10, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100000202030000000000000000000a00000468000a80640002801400018008000100e000000108000200ac1e090106000340000000000c00028005000100110000000c00028005000100210000002c00018014000300fc0200000000000000000000000000001400040000050000000000000000000000000001080004400000000308000840000000006c00e8dae7830340000400000c000280050001002f00000006000340000100000c00028005000100840000002c00018014000300fc0100000000000000000000f6ffff00140004000000000000000000000005000000000014000180080001000000000008000200ac1414bb08000540000000020800044001800002480002800c00028005000100210000002c0001801400030000000000000000000000ffffac14141e140004"], 0x158}}, 0x4048800) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x1000, 0xf1, 0x8, 0xffffffff}, {0x0, 0xb, 0x8, 0x5}, {0xff80, 0x7, 0xe5, 0x80}, {0x0, 0x7, 0x5, 0x5}, {0x8, 0xf, 0x0, 0x2}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20202, 0xa4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001680), 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000021c0)={0xa, &(0x7f0000001f00)={0xa, 0x6, 0x310, 0x9, 0x2, 0x2}, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) sendmsg$nl_route_sched(r0, 0x0, 0x0) capset(0x0, 0x0) 35.724984ms ago: executing program 7 (id=2702): memfd_create(0x0, 0xc) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x2, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04d, 0xffff, 0x80000000, 0xbb2, 0xffffffffffffffff, 0x4000000006, 0x0, 0x100, 0x4, 0x2, 0x80005, 0x3, 0xc, 0xb}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x27, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0x6, 0x1, 0x4, 0x101, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @map_idx={0x18, 0x6}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) io_setup(0x4, &(0x7f0000000000)=0x0) io_getevents(r1, 0x4, 0x0, &(0x7f0000000140), &(0x7f0000000200)) 0s ago: executing program 4 (id=2703): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000200)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x403, 0x2, 0x3, {0x0, 0x0, 0x4, 0x0, 0x6350, 0x2880}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28}}}, @IFLA_LINK={0x8}]}, 0x60}}, 0x4800) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000480)={0x0, 0x1, &(0x7f00000000c0)=""/20, &(0x7f00000004c0)=""/211, &(0x7f0000000340)=""/194, 0xeeedb000}) kernel console output (not intermixed with test programs): 03] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.035401][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=ea.79 [ 711.045777][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=0 [ 711.063412][ T9] usb 7-1: Product: syz [ 711.074635][ T9] usb 7-1: Manufacturer: syz [ 711.076217][ T30] audit: type=1400 audit(1778749793.849:1015): avc: denied { lock } for pid=14567 comm="syz.0.2279" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 711.107218][ T9] usb 7-1: config 0 descriptor?? [ 711.126236][T14553] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 711.235050][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'. [ 711.666674][ T30] audit: type=1400 audit(1778749794.401:1016): avc: denied { mount } for pid=14547 comm="syz.6.2268" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 711.693463][ T30] audit: type=1400 audit(1778749794.429:1017): avc: denied { mounton } for pid=14547 comm="syz.6.2268" path="/114/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 711.725236][T14548] syzkaller0: entered promiscuous mode [ 711.737159][T14548] syzkaller0: entered allmulticast mode [ 711.750339][ T30] audit: type=1400 audit(1778749794.429:1018): avc: denied { remount } for pid=14547 comm="syz.6.2268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 711.776074][ T6259] usb 7-1: USB disconnect, device number 45 [ 711.850911][ T30] audit: type=1800 audit(1778749794.570:1019): pid=14582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2282" name="nullb0" dev="tmpfs" ino=2088 res=0 errno=0 [ 713.305203][ T6259] usb 6-1: USB disconnect, device number 72 [ 713.431643][ T30] audit: type=1400 audit(1778749796.048:1020): avc: denied { unmount } for pid=12004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 713.710005][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'. [ 713.718902][T14610] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 713.741088][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2291'. [ 713.829459][T14613] geneve1: entered allmulticast mode [ 713.857729][T14615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2295'. [ 713.909774][ T30] audit: type=1326 audit(1778749796.497:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.4.2296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f687d99ce59 code=0x0 [ 713.945795][ T5702] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 714.010922][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 714.033340][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2296'. [ 714.128624][ T6259] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 714.140054][ T5702] usb 7-1: Using ep0 maxpacket: 32 [ 714.164263][ T5702] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 714.185763][ T5702] usb 7-1: config 0 has no interface number 0 [ 714.193739][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 714.212268][ T5702] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 714.232047][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 714.248618][ T5702] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.261013][ T9] usb 1-1: config 0 has no interface number 0 [ 714.281218][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 714.292560][ T5702] usb 7-1: Product: syz [ 714.303334][ T6259] usb 6-1: Using ep0 maxpacket: 32 [ 714.312090][ T5702] usb 7-1: Manufacturer: syz [ 714.324390][ T5702] usb 7-1: SerialNumber: syz [ 714.335835][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 714.350431][ T6259] usb 6-1: unable to get BOS descriptor or descriptor too short [ 714.362381][ T5702] usb 7-1: config 0 descriptor?? [ 714.384478][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 714.388907][ T6259] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 714.439289][ T5702] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 714.456790][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.458011][ T6259] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 714.523611][ T5702] usb 7-1: selecting invalid altsetting 1 [ 714.530542][ T9] usb 1-1: Product: syz [ 714.531371][ T6259] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9460, setting to 1024 [ 714.537669][ T9] usb 1-1: Manufacturer: syz [ 714.551616][ T5702] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 714.567053][ T9] usb 1-1: SerialNumber: syz [ 714.576438][ T5702] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 714.591848][ T6259] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 714.608971][ T5702] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 714.614589][ T6259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.619488][ T9] usb 1-1: config 0 descriptor?? [ 714.629356][ T6259] usb 6-1: Product: syz [ 714.635058][ T6259] usb 6-1: Manufacturer: syz [ 714.635414][ T5702] usb 7-1: media controller created [ 714.644028][ T6259] usb 6-1: SerialNumber: syz [ 714.653916][T14613] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 714.653947][T14607] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 714.661538][T14613] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 714.680981][T14607] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 714.692679][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 715.027837][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.038473][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.104159][ T5710] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 715.157260][T14607] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 715.164928][T14607] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 715.523662][ T5710] usb 2-1: device descriptor read/64, error -71 [ 715.967631][ T5710] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 715.980353][T14598] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 716.089327][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 716.267946][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 716.322285][ T5710] usb 2-1: device descriptor read/64, error -71 [ 716.547309][ T9] asix 1-1:0.34: probe with driver asix failed with error -32 [ 716.582430][ T5710] usb usb2-port1: attempt power cycle [ 716.718688][ T5702] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 716.754620][ T5702] zl10353_read_register: readreg error (reg=127, ret==-71) [ 716.779129][T14633] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2300'. [ 716.782137][ T5702] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 716.822120][ T6259] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 716.842784][ T6259] usb 6-1: MIDIStreaming interface descriptor not found [ 716.850949][ T6259] usb 6-1: too many endpoints [ 716.932788][ T5702] usb 7-1: USB disconnect, device number 46 [ 716.945015][ T6259] usb 6-1: USB disconnect, device number 73 [ 717.075396][T11103] udevd[11103]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.117567][ T5710] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 717.164499][ T5710] usb 2-1: device descriptor read/8, error -71 [ 717.597431][ T24] usb 1-1: USB disconnect, device number 97 [ 717.615746][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2305'. [ 717.646671][ T5710] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 717.705291][ T5710] usb 2-1: device descriptor read/8, error -71 [ 717.720678][T14653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2306'. [ 717.826304][ T5710] usb usb2-port1: unable to enumerate USB device [ 717.922850][T14660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2309'. [ 717.933044][T14660] xt_hashlimit: max too large, truncated to 1048576 [ 717.958038][T14660] xt_hashlimit: overflow, rate too high: 0 [ 718.075960][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 718.094418][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 718.105377][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 718.113040][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 718.121746][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 718.564686][ T9] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 718.637935][ T5710] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 718.734373][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 718.752170][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 49, changing to 9 [ 718.797404][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8265, setting to 1024 [ 718.809281][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 718.834248][ T5710] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 718.843357][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 718.856985][ T5710] usb 2-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 718.870597][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.904840][ T5710] usb 2-1: config 0 has no interface number 0 [ 719.162854][ T9] usb 1-1: config 0 descriptor?? [ 719.189675][ T5710] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 719.229933][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.247530][ T5710] usb 2-1: Product: syz [ 719.398260][ T5710] usb 2-1: Manufacturer: syz [ 719.494601][ T5710] usb 2-1: SerialNumber: syz [ 719.620865][ T5710] usb 2-1: config 0 descriptor?? [ 719.637261][ T5710] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 719.645627][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 719.679807][ T5710] uvcvideo 2-1:0.105: No valid video chain found. [ 719.826709][ T8132] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.909080][ T6259] usb 2-1: USB disconnect, device number 108 [ 719.990045][T14662] wg1 speed is unknown, defaulting to 1000 [ 719.999636][T14662] vxcan1 speed is unknown, defaulting to 1000 [ 720.073948][ T8132] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.291459][ T5623] Bluetooth: hci5: command tx timeout [ 720.294220][ T24] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 720.311942][ T8132] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.443862][ T24] usb 7-1: device descriptor read/64, error -71 [ 720.733112][ T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 720.904212][ T24] usb 7-1: device descriptor read/64, error -71 [ 721.032946][ T24] usb usb7-port1: attempt power cycle [ 721.095707][ T6259] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 721.153219][T14662] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.163922][T14662] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.171554][T14662] bridge_slave_0: entered allmulticast mode [ 721.178805][T14662] bridge_slave_0: entered promiscuous mode [ 721.214318][T14662] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.224811][T14662] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.246989][T14662] bridge_slave_1: entered allmulticast mode [ 721.253756][T14662] bridge_slave_1: entered promiscuous mode [ 721.266664][ T6259] usb 2-1: Using ep0 maxpacket: 16 [ 721.273052][ T6259] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 721.300881][ T6259] usb 2-1: config 0 has no interface number 0 [ 721.324684][ T8132] pimreg3: left allmulticast mode [ 721.331377][ T6259] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 721.364983][ T6259] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 721.405783][ T24] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 721.417059][ T6259] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 721.432099][ T6259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.434207][ T5710] usb 1-1: USB disconnect, device number 98 [ 721.459424][ T24] usb 7-1: device descriptor read/8, error -71 [ 721.473753][ T6259] usb 2-1: Product: syz [ 721.489054][ T6259] usb 2-1: Manufacturer: syz [ 721.508513][ T6259] usb 2-1: SerialNumber: syz [ 721.557556][ T6259] usb 2-1: config 0 descriptor?? [ 721.597648][T14700] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 721.608883][T14700] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 721.765580][ T24] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 721.840860][ T24] usb 7-1: device descriptor read/8, error -71 [ 721.864249][T14700] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 721.880527][T14714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2318'. [ 721.901754][T14700] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 721.972545][ T24] usb usb7-port1: unable to enumerate USB device [ 722.050296][ T8132] bond1 (unregistering): (slave gretap1): Releasing active interface [ 722.271986][ T30] audit: type=1400 audit(1778749804.330:1022): avc: denied { write } for pid=14706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.358187][ T6259] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 722.387390][ T6259] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 722.405508][ T6259] asix 2-1:0.34: probe with driver asix failed with error -32 [ 722.479506][ T30] audit: type=1400 audit(1778749804.517:1023): avc: denied { write } for pid=14725 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.481572][ T8132] bond0 (unregistering): Released all slaves [ 722.521827][ T5623] Bluetooth: hci5: command tx timeout [ 722.536946][T14723] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 722.552171][T14723] File: /dev/nullb0 PID: 14723 Comm: syz.5.2319 [ 722.563261][ T8132] bond1 (unregistering): Released all slaves [ 722.580039][ T8132] bond2 (unregistering): Released all slaves [ 722.605450][ T8132] bond3 (unregistering): Released all slaves [ 722.634048][ T5710] wg1 speed is unknown, defaulting to 1000 [ 722.652205][T14662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.658116][ T5710] syz0: Port: 1 Link DOWN [ 722.693512][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 722.712012][T14662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.733359][ T8132] tipc: Disabling bearer [ 722.764095][ T8132] tipc: Left network mode [ 723.099441][T14662] team0: Port device team_slave_0 added [ 723.132977][T14662] team0: Port device team_slave_1 added [ 723.247667][ T30] audit: type=1400 audit(1778749805.228:1024): avc: denied { prog_load } for pid=14728 comm="syz.0.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 723.310546][T14662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.346187][T14662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.393460][T14662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.425383][T14662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.432661][T14662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.462002][T14662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.092513][ T6259] usb 2-1: USB disconnect, device number 109 [ 724.162933][T14662] hsr_slave_0: entered promiscuous mode [ 724.172265][T14662] hsr_slave_1: entered promiscuous mode [ 724.180060][T14662] debugfs: 'hsr0' already exists in 'hsr' [ 724.186298][T14662] Cannot create hsr debugfs directory [ 724.733258][ T5623] Bluetooth: hci5: command tx timeout [ 724.885280][ T30] audit: type=1400 audit(1778749806.772:1025): avc: denied { prog_run } for pid=14765 comm="syz.5.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 725.022058][ T30] audit: type=1400 audit(1778749806.903:1026): avc: denied { write } for pid=14739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.177901][ T6259] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 725.202789][T14775] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2329'. [ 725.359557][ T6259] usb 2-1: Using ep0 maxpacket: 16 [ 725.589459][ T6259] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 725.633444][ T6259] usb 2-1: config 0 has no interface number 0 [ 725.652038][ T6259] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 725.695852][ T6259] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 725.718517][ T30] audit: type=1400 audit(1778749807.549:1027): avc: denied { write } for pid=14779 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.791426][ T6259] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 725.814633][ T6259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.842030][ T6259] usb 2-1: Product: syz [ 725.859407][ T6259] usb 2-1: Manufacturer: syz [ 725.883793][ T6259] usb 2-1: SerialNumber: syz [ 725.911405][ T6259] usb 2-1: config 0 descriptor?? [ 725.939161][T14769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 725.962849][T14769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 726.021487][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 727.208322][ T5623] Bluetooth: hci5: command tx timeout [ 727.369713][ T5710] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 727.378329][T14769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 727.385545][T14769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 727.427869][T14793] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 727.826663][ T6259] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 727.860120][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 727.868252][ T5710] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 727.870351][ T6259] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 727.880874][ T5710] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 727.901896][ T5710] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 727.928998][ T5710] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.951705][ T6259] asix 2-1:0.34: probe with driver asix failed with error -32 [ 727.962613][ T5710] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 727.981110][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.995344][ T30] audit: type=1400 audit(1778749809.683:1028): avc: denied { write } for pid=14790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.063025][ T24] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 728.137154][ T30] audit: type=1400 audit(1778749809.814:1029): avc: denied { write } for pid=14806 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.235136][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 728.251322][ T24] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 728.272056][ T24] usb 6-1: config 0 has no interface number 0 [ 728.282854][ T24] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 728.337354][ T24] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 728.366317][ T24] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 728.380521][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.402199][ T24] usb 6-1: Product: syz [ 728.405045][ T5710] usb 1-1: GET_CAPABILITIES returned 0 [ 728.412974][ T24] usb 6-1: Manufacturer: syz [ 728.423765][ T24] usb 6-1: SerialNumber: syz [ 728.434196][ T5710] usbtmc 1-1:16.0: can't read capabilities [ 728.442999][ T24] usb 6-1: config 0 descriptor?? [ 728.460647][T14802] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 728.475793][T14802] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 728.797914][T14802] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 728.815305][T14802] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 728.824219][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.149817][T14784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.165318][ T5710] usb 2-1: USB disconnect, device number 110 [ 729.204338][T14784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.336273][ T24] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 729.365312][ T24] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 729.409180][ T24] asix 6-1:0.34: probe with driver asix failed with error -32 [ 729.427328][ T6259] usb 1-1: USB disconnect, device number 99 [ 729.438365][ T30] audit: type=1400 audit(1778749811.030:1030): avc: denied { write } for pid=14810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.804935][ T5749] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 729.922205][ T30] audit: type=1400 audit(1778749811.480:1031): avc: denied { write } for pid=14835 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.035127][ T5749] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 730.055972][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.096908][ T5749] usb 2-1: config 0 descriptor?? [ 730.118855][ T5749] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 730.134723][ T5749] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 730.237264][T14662] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 730.253227][T14662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.262527][T14662] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 730.272084][T14662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.283823][T14662] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 730.306226][T14662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 730.338254][T14662] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 730.396724][T14662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 730.533483][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2337'. [ 730.568950][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2337'. [ 730.619086][T14863] netlink: 822 bytes leftover after parsing attributes in process `syz.1.2337'. [ 730.648876][T14863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.668342][T14863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.672950][ T30] audit: type=1400 audit(1778749812.181:1032): avc: denied { write } for pid=14843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.733114][T14851] wg1 speed is unknown, defaulting to 1000 [ 730.741187][ T30] audit: type=1400 audit(1778749812.256:1033): avc: denied { map_create } for pid=14833 comm="syz.1.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 730.745995][T14662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.796922][T14851] vxcan1 speed is unknown, defaulting to 1000 [ 730.824212][ T8132] hsr_slave_0: left promiscuous mode [ 730.837268][ T8132] hsr_slave_1: left promiscuous mode [ 730.898981][ T30] audit: type=1400 audit(1778749812.406:1034): avc: denied { write } for pid=14869 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.936494][ T8132] veth0_macvtap: left promiscuous mode [ 730.950808][ T8132] veth1_vlan: left promiscuous mode [ 730.961174][ T8132] veth0_vlan: left promiscuous mode [ 731.038267][ T5710] usb 6-1: USB disconnect, device number 74 [ 731.201051][T14879] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2340'. [ 731.336172][ T30] audit: type=1400 audit(1778749812.808:1035): avc: denied { write } for pid=14873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.524459][ T30] audit: type=1400 audit(1778749812.986:1036): avc: denied { write } for pid=14887 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.918491][ T69] smbdirect: ib_dev[syz0] removed [ 732.181447][ T30] audit: type=1400 audit(1778749813.604:1037): avc: denied { write } for pid=14893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.272945][T14662] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.337709][T14792] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.345787][T14792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.396513][T14792] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.403645][T14792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.493271][T14662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 732.505349][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'. [ 732.549003][T14662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.856689][ T5702] usb 2-1: USB disconnect, device number 111 [ 732.892521][ T8132] IPVS: stop unused estimator thread 0... [ 733.351742][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2347'. [ 733.845431][T14662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.950906][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 733.971601][ T30] audit: type=1400 audit(1778749815.251:1040): avc: denied { map_read map_write } for pid=14930 comm="syz.0.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 734.003144][ T5749] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 734.220312][ T5749] usb 2-1: Using ep0 maxpacket: 16 [ 734.239286][ T5749] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 734.274871][ T5749] usb 2-1: config 0 has no interface number 0 [ 734.313984][ T5749] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 734.353027][ T5749] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 734.388822][ T5749] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 734.431155][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.501572][ T5749] usb 2-1: Product: syz [ 734.522208][ T5749] usb 2-1: Manufacturer: syz [ 734.543952][ T5749] usb 2-1: SerialNumber: syz [ 734.574227][T14662] veth0_vlan: entered promiscuous mode [ 734.583719][ T5749] usb 2-1: config 0 descriptor?? [ 734.589994][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2346'. [ 734.605434][T14941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 734.622096][T14662] veth1_vlan: entered promiscuous mode [ 734.648318][T14941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 734.660542][T14952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2346'. [ 734.714538][T14662] veth0_macvtap: entered promiscuous mode [ 734.716164][T14957] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2346'. [ 734.775634][T14662] veth1_macvtap: entered promiscuous mode [ 734.827868][T14662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.866976][T14662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.891943][T14941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 734.909065][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.924872][T14941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 734.937178][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.985245][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.026380][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.274017][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2351'. [ 735.314502][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.355293][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.398049][ T5749] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 735.419792][ T5749] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 735.448992][ T5749] asix 2-1:0.34: probe with driver asix failed with error -32 [ 735.510105][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.535733][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.168145][ T5749] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 736.245422][T14974] __nla_validate_parse: 2 callbacks suppressed [ 736.245440][T14974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2308'. [ 736.347440][ T5749] usb 1-1: Using ep0 maxpacket: 16 [ 736.375243][ T5749] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 110, changing to 7 [ 736.414831][ T5749] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 736.436475][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.461196][ T5749] usb 1-1: Product: syz [ 736.469678][ T5749] usb 1-1: Manufacturer: syz [ 736.475038][ T5749] usb 1-1: SerialNumber: syz [ 736.732069][T14989] netlink: 'syz.6.2355': attribute type 2 has an invalid length. [ 736.770373][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2352'. [ 736.802462][T14969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2352'. [ 736.855834][T14991] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2352'. [ 736.913941][ T5772] usb 2-1: USB disconnect, device number 112 [ 737.009753][ T6259] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 737.010120][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 737.026065][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 737.037099][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 737.043130][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 737.200727][ T6259] usb 7-1: Using ep0 maxpacket: 16 [ 737.220516][ T6259] usb 7-1: unable to get BOS descriptor or descriptor too short [ 737.243332][ T6259] usb 7-1: config 8 has an invalid interface number: 46 but max is 0 [ 737.251533][ T6259] usb 7-1: config 8 has no interface number 0 [ 737.259120][ T6259] usb 7-1: config 8 interface 46 has no altsetting 0 [ 737.269045][ T5749] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 737.270052][ T6259] usb 7-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=a7.db [ 737.285228][ T5749] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 737.287539][ T6259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.301573][T14995] ceph: No mds server is up or the cluster is laggy [ 737.309314][ T6259] usb 7-1: Product: syz [ 737.320170][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 737.321116][ T6259] usb 7-1: Manufacturer: syz [ 737.352493][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 737.353097][ T6259] usb 7-1: SerialNumber: syz [ 737.491850][ T5749] usb 1-1: USB disconnect, device number 100 [ 737.544099][T10371] udevd[10371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.628320][ T6259] smsusb:smsusb_probe: board id=5, interface number 46 [ 737.650368][ T5772] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 737.678834][ T6259] usb 7-1: USB disconnect, device number 51 [ 737.840831][ T5772] usb 5-1: Using ep0 maxpacket: 32 [ 737.849229][ T5772] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 737.874982][ T5772] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 737.894463][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 737.904068][ T5772] usb 5-1: Product: syz [ 737.914509][ T5772] usb 5-1: Manufacturer: syz [ 737.921147][ T5772] usb 5-1: SerialNumber: syz [ 737.970236][ T5772] usb 5-1: config 0 descriptor?? [ 737.984277][T14995] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 738.018769][ T5772] hub 5-1:0.0: bad descriptor, ignoring hub [ 738.035834][T15012] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 738.042476][T15012] [U] J"—e:ÀÆ" [ 738.059349][ T5772] hub 5-1:0.0: probe with driver hub failed with error -5 [ 738.142660][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'. [ 738.428679][ T5749] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 738.583674][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'. [ 738.606173][ T5749] usb 1-1: not running at top speed; connect to a high speed hub [ 738.607439][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2356'. [ 738.635409][ T5749] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 738.653067][T15002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2356'. [ 738.658182][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.691512][ T5749] usb 1-1: Product: ä½ì•…淾㙿Ⱪâ¶ç •à¨‚ᥤ줜ퟯ೻梈윗躜Ǜë‰è„€æ¯­ã¸áºŽäš‡ê”ೆå¯ë¬Œî¿ ïŽ¯ïœ‹ç¹²ç©’ã¬áš‡ë¤³ìš²à¸„æï–Ȕ譒渊牞J쫢쯚孵ʭ漵ャ홧뚿ﶀ꠪èƒé´¼Í朔ﭼổ飩낳ﭨç±íƒžçŒªã¸ê¨½á®«É®ì„©ì¢—瑯å¥åˆ£ë“²î¢—喽칰팙ﻅ媓俷쌗즄䙎â³ã€³êˆ´à¢±Èžî†£ïº²åœ•çµ“ㄷ츦ꥯ鳊ડá‘聆﵇㌊牃졯촺èˆäµ”ã±—ä§î¿†á‚ î¬† [ 738.740891][ T5749] usb 1-1: Manufacturer: à  [ 738.746077][ T5749] usb 1-1: SerialNumber: syz [ 738.982231][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2359'. [ 739.012343][ T5749] cdc_ncm 1-1:1.0: bind() failure [ 739.038801][ T5749] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 739.046320][ T5749] cdc_ncm 1-1:1.1: bind() failure [ 739.056981][ T5749] usb 1-1: USB disconnect, device number 101 [ 739.080501][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2360'. [ 739.093999][ T5772] usb 6-1: new low-speed USB device number 75 using dummy_hcd [ 739.273109][ T5772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 739.293086][ T5772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 739.314654][ T5772] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 739.347758][ T5772] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 739.358483][ T5772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.382179][ T5772] usb 6-1: config 0 descriptor?? [ 739.390386][T15021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 739.841196][T15021] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 740.422410][T15042] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 740.542631][ T5772] usbhid 6-1:0.0: can't add hid device: -71 [ 740.569164][ T5772] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 740.603766][ T5772] usb 6-1: USB disconnect, device number 75 [ 740.896614][T15048] IPVS: stopping master sync thread 15051 ... [ 741.449558][ T29] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 741.596506][T15056] __nla_validate_parse: 3 callbacks suppressed [ 741.596564][T15056] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2366'. [ 741.894526][ T29] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 741.915386][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.937735][ T29] usb 1-1: Product: syz [ 741.945895][ T29] usb 1-1: Manufacturer: syz [ 741.962926][ T29] usb 1-1: SerialNumber: syz [ 741.979073][ T29] usb 1-1: config 0 descriptor?? [ 742.104656][ T5749] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 742.309451][ T5749] usb 6-1: Using ep0 maxpacket: 16 [ 742.527146][ T5749] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 742.954769][ T5749] usb 6-1: config 0 has no interface number 0 [ 742.973605][ T5749] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 743.013444][ T5749] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 743.222584][ T29] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 743.460807][ T5749] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 743.478600][ T29] usb 1-1: Firmware version (0.0) predates our first public release. [ 743.496197][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.513284][ T29] usb 1-1: Please update to version 0.2 or newer [ 743.528751][ T5749] usb 6-1: Product: syz [ 743.541599][ T5749] usb 6-1: Manufacturer: syz [ 743.562859][ T5749] usb 6-1: SerialNumber: syz [ 743.569413][ T6259] usb 5-1: USB disconnect, device number 62 [ 743.650831][ T5749] usb 6-1: config 0 descriptor?? [ 743.715926][T15057] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 743.749124][T15057] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 743.857462][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'. [ 744.061361][T15057] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 744.082690][T15057] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 744.293118][T15075] veth1: entered promiscuous mode [ 744.302877][T15075] macsec1: entered allmulticast mode [ 744.313146][T15075] veth1: entered allmulticast mode [ 744.576702][ T5749] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 744.661164][ T5749] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 744.864964][ T5749] asix 6-1:0.34: probe with driver asix failed with error -32 [ 745.652256][ T5749] usb 1-1: USB disconnect, device number 102 [ 745.701975][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.725301][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.794347][ T29] usb 6-1: USB disconnect, device number 76 [ 745.950238][T15094] netlink: 'syz.1.2374': attribute type 10 has an invalid length. [ 746.117452][T15099] IPVS: stopping master sync thread 14793 ... [ 747.623537][T15111] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 747.707990][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2375'. [ 749.129529][ T30] audit: type=1400 audit(1778749829.466:1041): avc: denied { audit_write } for pid=15115 comm="syz.4.2379" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 749.274196][ T30] audit: type=1400 audit(1778749829.587:1042): avc: denied { read } for pid=15127 comm="syz.0.2383" lport=47535 faddr=::ffff:10.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 749.682814][T15137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2386'. [ 749.746702][T15137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15137 comm=syz.1.2386 [ 749.873312][ T29] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 750.054891][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 750.073630][ T29] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 750.097824][ T29] usb 6-1: config 0 has no interface number 0 [ 750.118254][ T29] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 750.142869][ T29] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 750.293609][ T29] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 750.307614][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.316025][ T29] usb 6-1: Product: syz [ 750.320335][ T29] usb 6-1: Manufacturer: syz [ 750.332767][ T29] usb 6-1: SerialNumber: syz [ 750.361728][ T29] usb 6-1: config 0 descriptor?? [ 750.383281][T15139] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 750.397096][T15139] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 750.474510][T15146] IPVS: stopping master sync thread 15149 ... [ 750.867413][T15139] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 750.881336][T15139] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 752.383973][ T29] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 752.398851][ T29] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 752.409580][ T29] asix 6-1:0.34: probe with driver asix failed with error -61 [ 761.625094][ T5702] usb 6-1: USB disconnect, device number 77 [ 765.782570][ T992] hid_parser_main: 28 callbacks suppressed [ 765.782591][ T992] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 765.880577][ T992] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 766.105357][T15179] wg1 speed is unknown, defaulting to 1000 [ 766.114292][T15179] wg1 speed is unknown, defaulting to 1000 [ 766.304758][T15179] wg1 speed is unknown, defaulting to 1000 [ 767.137958][T15179] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 767.158410][T15179] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 767.176755][T15179] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 767.424797][ T5772] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 767.505274][ T6259] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 767.691369][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.751025][ T6259] usb 2-1: Using ep0 maxpacket: 32 [ 767.785019][ T6259] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.796301][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.837853][T15194] input: syz0 as /devices/virtual/input/input61 [ 767.879380][ T6259] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 767.906035][ T5772] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 767.956799][ T6259] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 767.966269][ T5772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.975646][T15179] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 768.015035][ T6259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.030503][ T5772] usb 1-1: config 0 descriptor?? [ 768.060534][ T5772] usb 1-1: can't set config #0, error -71 [ 768.106283][ T6259] usb 2-1: config 0 descriptor?? [ 768.114213][ T5772] usb 1-1: USB disconnect, device number 103 [ 768.255248][ T24] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 768.291998][T15179] wg1 speed is unknown, defaulting to 1000 [ 768.340236][T15179] wg1 speed is unknown, defaulting to 1000 [ 768.349428][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 768.363823][T15179] wg1 speed is unknown, defaulting to 1000 [ 768.380968][T15179] wg1 speed is unknown, defaulting to 1000 [ 768.402594][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 768.411837][T15179] wg1 speed is unknown, defaulting to 1000 [ 768.418331][T15179] wg1 speed is unknown, defaulting to 1000 [ 768.462008][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 768.537686][ T30] audit: type=1400 audit(1778749847.611:1043): avc: denied { setcurrent } for pid=15172 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 768.581338][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 768.589384][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 768.598998][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 768.640201][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 768.675373][ T24] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1096, setting to 1023 [ 768.746950][ T24] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 768.799414][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.847974][ T24] usb 7-1: Product: syz [ 768.875543][ T24] usb 7-1: Manufacturer: syz [ 768.915821][ T24] usb 7-1: SerialNumber: syz [ 769.212055][ T5710] usb 2-1: USB disconnect, device number 113 [ 769.309255][ T24] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 770.574625][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 770.726876][ T24] usb 7-1: USB disconnect, device number 52 [ 770.807321][ T5623] Bluetooth: hci4: command tx timeout [ 770.819773][T15212] netlink: 'syz.4.2400': attribute type 4 has an invalid length. [ 770.892533][T15186] udevd[15186]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.976159][T15213] netlink: 'syz.4.2400': attribute type 4 has an invalid length. [ 771.241159][T15217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2404'. [ 771.932861][T15199] vxcan1 speed is unknown, defaulting to 1000 [ 772.578307][T15199] wg1 speed is unknown, defaulting to 1000 [ 773.039776][ T5623] Bluetooth: hci4: command tx timeout [ 773.260877][T15229] IPVS: stopping master sync thread 15111 ... [ 774.394353][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2407'. [ 774.531179][T15199] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.568299][T15199] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.622418][ T992] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 774.636331][T15199] bridge_slave_0: entered allmulticast mode [ 774.671631][T15199] bridge_slave_0: entered promiscuous mode [ 774.679718][ T24] libceph: connect (1)[c::]:6789 error -101 [ 774.706773][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 774.713487][T15199] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.732428][T15257] ceph: No mds server is up or the cluster is laggy [ 774.753800][T15199] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.825422][ T992] usb 5-1: device descriptor read/64, error -71 [ 774.833692][T15199] bridge_slave_1: entered allmulticast mode [ 774.851376][T15199] bridge_slave_1: entered promiscuous mode [ 774.975149][ T24] libceph: connect (1)[c::]:6789 error -101 [ 775.180296][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 775.252931][ T5623] Bluetooth: hci4: command tx timeout [ 775.317665][ T992] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 775.385154][T15199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.461087][T15199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.498656][ T992] usb 5-1: device descriptor read/64, error -71 [ 775.607154][T15199] team0: Port device team_slave_0 added [ 775.628804][ T992] usb usb5-port1: attempt power cycle [ 775.640580][T15199] team0: Port device team_slave_1 added [ 776.054107][ T992] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 776.086869][ T992] usb 5-1: device descriptor read/8, error -71 [ 776.094682][T15199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.109531][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.136851][T15199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.160455][T15199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.167562][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.249734][T15199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.369483][ T992] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 776.409012][ T992] usb 5-1: device descriptor read/8, error -71 [ 776.428543][T15199] hsr_slave_0: entered promiscuous mode [ 776.446992][T15199] hsr_slave_1: entered promiscuous mode [ 776.454440][T15199] debugfs: 'hsr0' already exists in 'hsr' [ 776.467567][T15199] Cannot create hsr debugfs directory [ 776.537567][ T992] usb usb5-port1: unable to enumerate USB device [ 777.507419][ T5623] Bluetooth: hci4: command tx timeout [ 777.979191][T15286] netlink: 'syz.4.2418': attribute type 21 has an invalid length. [ 778.154581][T15286] netlink: 'syz.4.2418': attribute type 6 has an invalid length. [ 778.169760][T15286] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2418'. [ 779.748804][T15199] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 780.027139][T15199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 780.048196][T15199] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 780.108693][T15199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 780.281978][T15199] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 780.291928][T15199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 780.300375][T15199] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 780.316922][T15199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 780.412542][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 780.443589][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 780.568742][T15199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.575536][ T5710] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 780.657270][T15199] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.682910][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.690067][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.854920][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 780.901568][ T5710] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 780.933116][ T5710] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 781.085593][ T5710] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 781.111561][ T5710] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.148469][ T5710] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 781.150064][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.164706][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.210074][T15313] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 781.246201][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.501834][ T5710] usb 5-1: GET_CAPABILITIES returned 0 [ 781.515689][ T5710] usbtmc 5-1:16.0: can't read capabilities [ 781.809035][T15296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.848524][T15296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.951661][ T5710] usb 5-1: USB disconnect, device number 67 [ 781.958081][T15321] netlink: 'syz.1.2424': attribute type 4 has an invalid length. [ 782.029905][T15325] netlink: 'syz.1.2424': attribute type 4 has an invalid length. [ 782.969016][T15199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.126387][T15338] netlink: 'syz.5.2427': attribute type 4 has an invalid length. [ 783.199111][T15340] netlink: 'syz.5.2427': attribute type 4 has an invalid length. [ 783.988356][T15199] veth0_vlan: entered promiscuous mode [ 784.006187][T15350] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2428'. [ 784.023201][T15199] veth1_vlan: entered promiscuous mode [ 784.153366][T15199] veth0_macvtap: entered promiscuous mode [ 784.207883][T15199] veth1_macvtap: entered promiscuous mode [ 784.296116][T15199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.341388][T15199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.399116][ T5831] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.436942][ T5831] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.462819][ T5831] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.492450][ T5831] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.546234][T15355] ªªªªªª: renamed from vlan0 [ 784.795750][T14792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.838627][T14792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.959596][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 784.999024][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 785.004898][T14792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.063697][T14792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.100879][T15369] kAFS: No cell specified [ 786.203958][T15361] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2431'. [ 786.302548][ T5749] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 786.594444][T15373] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2434'. [ 786.838919][T15375] netlink: 'syz.5.2435': attribute type 4 has an invalid length. [ 786.849400][ T5749] usb 8-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 786.859874][T15375] netlink: 'syz.5.2435': attribute type 4 has an invalid length. [ 786.895798][ T5749] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.960964][ T5749] usb 8-1: config 0 descriptor?? [ 787.014077][ T5749] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 787.071072][ T5749] dvb_usb_af9015 8-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 787.337040][T15381] vxcan1 speed is unknown, defaulting to 1000 [ 787.433793][T15381] wg1 speed is unknown, defaulting to 1000 [ 787.496191][T15383] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2437'. [ 787.496213][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 787.546882][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 787.556517][ T30] audit: type=1400 audit(1778749865.410:1044): avc: denied { ioctl } for pid=15376 comm="syz.5.2437" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 787.556636][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2398'. [ 787.604920][T15387] netlink: 822 bytes leftover after parsing attributes in process `syz.7.2398'. [ 787.620010][T15387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.633673][T15387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.396706][ T5749] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 788.503680][ T24] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 788.578554][ T5749] usb 5-1: Using ep0 maxpacket: 32 [ 788.595815][ T5749] usb 5-1: config 0 has no interfaces? [ 788.613420][ T5749] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 788.634752][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 788.651653][ T5749] usb 5-1: Product: syz [ 788.655846][ T5749] usb 5-1: Manufacturer: syz [ 788.660448][ T5749] usb 5-1: SerialNumber: syz [ 788.676082][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 788.682986][ T5749] usb 5-1: config 0 descriptor?? [ 788.699269][ T24] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 788.730121][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.766693][ T24] usb 2-1: config 0 descriptor?? [ 788.787251][ T24] as10x_usb: device has been detected [ 788.797292][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 788.892348][ T24] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 788.989626][ T24] as10x_usb: error during firmware upload part1 [ 788.996478][ T24] Registered device nBox DVB-T Dongle [ 789.012854][ T24] usb 2-1: USB disconnect, device number 114 [ 789.026974][ T992] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 789.094841][ T24] Unregistered device nBox DVB-T Dongle [ 789.096217][ T24] as10x_usb: device has been disconnected [ 789.208661][ T992] usb 7-1: Using ep0 maxpacket: 16 [ 789.215425][ T992] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 789.224907][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.235748][ T992] usb 7-1: config 0 descriptor?? [ 789.245565][ T992] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 789.300424][ T5772] usb 8-1: USB disconnect, device number 2 [ 789.336308][T15406] kAFS: No cell specified [ 789.444934][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 789.495810][T15409] overlayfs: failed to resolve './file7': -2 [ 789.583014][T15409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.627922][T15409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.646978][T15409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.682199][T15409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.697071][ T992] gspca_sonixj: reg_w1 err -71 [ 789.702506][ T992] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 789.712925][ T992] usb 7-1: USB disconnect, device number 53 [ 789.744081][ T5772] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 789.903218][ T5772] usb 8-1: Using ep0 maxpacket: 16 [ 789.911998][ T5772] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 789.920631][ T5772] usb 8-1: config 0 has no interface number 0 [ 789.927042][ T5772] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 789.939002][ T5772] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 789.956908][ T5772] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 789.976184][ T5772] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.982393][T15403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.986861][ T5772] usb 8-1: Product: syz [ 789.997315][ T5772] usb 8-1: Manufacturer: syz [ 790.002974][ T5772] usb 8-1: SerialNumber: syz [ 790.012989][T15403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.015752][ T5772] usb 8-1: config 0 descriptor?? [ 790.030826][T15408] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 790.038976][T15408] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 790.266957][T15408] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 790.274417][T15408] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 790.762788][ T5772] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 790.781900][ T5772] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 790.793331][ T5772] asix 8-1:0.34: probe with driver asix failed with error -61 [ 790.940795][ T30] audit: type=1326 audit(1778749868.563:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15422 comm="syz.5.2450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412bf9ce59 code=0x7ffc0000 [ 791.283895][ T30] audit: type=1326 audit(1778749868.563:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15422 comm="syz.5.2450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412bf9ce59 code=0x7ffc0000 [ 791.523169][T15421] vxcan1 speed is unknown, defaulting to 1000 [ 791.557630][ T5749] usb 5-1: USB disconnect, device number 68 [ 791.878590][T15441] kAFS: No cell specified [ 792.165311][T15446] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2454'. [ 793.294364][T15421] wg1 speed is unknown, defaulting to 1000 [ 793.332196][ T5749] usb 8-1: USB disconnect, device number 3 [ 794.598540][T15455] vxcan1 speed is unknown, defaulting to 1000 [ 795.045323][T15455] wg1 speed is unknown, defaulting to 1000 [ 795.247951][ T30] audit: type=1326 audit(1778749872.615:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15474 comm="syz.5.2462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f412bf9ce59 code=0x0 [ 797.018824][T15495] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2467'. [ 797.046295][T15502] fuse: Bad value for 'fd' [ 797.979801][T15507] netlink: 'syz.6.2471': attribute type 4 has an invalid length. [ 798.029098][T15507] netlink: 'syz.6.2471': attribute type 4 has an invalid length. [ 799.092449][T15529] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2476'. [ 800.005393][T15539] fuse: Bad value for 'fd' [ 800.026187][T15536] 0xfffffffffffffffd-0x000000020000 : "" [ 800.090972][T15536] mtd: partition "" is out of reach -- disabled [ 800.150501][T15536] ftl_cs: FTL header not found. [ 801.760136][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2485'. [ 802.275772][ T5623] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 802.285780][ T5623] Bluetooth: hci5: Injecting HCI hardware error event [ 802.302124][ T5619] Bluetooth: hci5: hardware error 0x00 [ 802.605851][T15568] 0xfffffffffffffffd-0x000000020000 : "" [ 802.618118][T15568] mtd: partition "" is out of reach -- disabled [ 802.632148][T15568] ftl_cs: FTL header not found. [ 803.102308][T15581] netlink: 'syz.1.2492': attribute type 4 has an invalid length. [ 803.124901][T15581] netlink: 'syz.1.2492': attribute type 4 has an invalid length. [ 804.057952][ T992] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 804.113123][T15587] netlink: 'syz.5.2495': attribute type 4 has an invalid length. [ 804.125109][T15587] netlink: 'syz.5.2495': attribute type 4 has an invalid length. [ 804.186485][ T30] audit: type=1400 audit(1778749880.981:1048): avc: denied { getopt } for pid=15588 comm="syz.4.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 804.214391][ T5749] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 804.225762][T15589] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2496' sets config #1 [ 804.258441][ T992] usb 8-1: Using ep0 maxpacket: 16 [ 804.268525][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2497'. [ 804.292313][ T992] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 804.313926][ T992] usb 8-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 0.40 [ 804.332596][ T992] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.358748][ T992] usb 8-1: Product: â ‰ [ 804.368616][ T992] usb 8-1: Manufacturer: й [ 804.376012][ T992] usb 8-1: SerialNumber: syz [ 804.425624][ T5749] usb 7-1: Using ep0 maxpacket: 8 [ 804.426020][T15597] vxcan1 speed is unknown, defaulting to 1000 [ 804.435607][ T5749] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 804.467223][ T5749] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 804.488622][ T5749] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 804.506164][ T5749] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.520969][ T5749] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 804.531209][ T5749] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.632312][ T992] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 804.661071][ T5619] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 804.664192][T15603] FAULT_INJECTION: forcing a failure. [ 804.664192][T15603] name failslab, interval 1, probability 0, space 0, times 0 [ 804.704796][T15603] CPU: 0 UID: 0 PID: 15603 Comm: syz.1.2500 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.704828][T15603] Tainted: [L]=SOFTLOCKUP [ 804.704835][T15603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.704845][T15603] Call Trace: [ 804.704852][T15603] [ 804.704859][T15603] dump_stack_lvl+0x100/0x190 [ 804.704887][T15603] should_fail_ex.cold+0x5/0xa [ 804.704912][T15603] ? sock_kmalloc+0x111/0x170 [ 804.704933][T15603] should_failslab+0xc2/0x120 [ 804.704954][T15603] __kmalloc_noprof+0xe0/0x850 [ 804.704980][T15603] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 804.705011][T15603] sock_kmalloc+0x111/0x170 [ 804.705033][T15603] hash_alloc_result+0xd7/0x150 [ 804.705058][T15603] hash_sendmsg+0x6d4/0x10a0 [ 804.705091][T15603] ____sys_sendmsg+0x9e1/0xb70 [ 804.705112][T15603] ? __pfx_hash_sendmsg+0x10/0x10 [ 804.705137][T15603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 804.705173][T15603] ___sys_sendmsg+0x190/0x1e0 [ 804.705198][T15603] ? __pfx____sys_sendmsg+0x10/0x10 [ 804.705254][T15603] __sys_sendmsg+0x170/0x220 [ 804.705273][T15603] ? __pfx___sys_sendmsg+0x10/0x10 [ 804.705303][T15603] ? rcu_is_watching+0x12/0xc0 [ 804.705335][T15603] do_syscall_64+0x10b/0xf80 [ 804.705359][T15603] ? clear_bhb_loop+0x40/0x90 [ 804.705382][T15603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.705400][T15603] RIP: 0033:0x7fbe5af9ce59 [ 804.705416][T15603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.705434][T15603] RSP: 002b:00007fbe5be10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.705452][T15603] RAX: ffffffffffffffda RBX: 00007fbe5b215fa0 RCX: 00007fbe5af9ce59 [ 804.705464][T15603] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000004 [ 804.705474][T15603] RBP: 00007fbe5be10090 R08: 0000000000000000 R09: 0000000000000000 [ 804.705491][T15603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.705502][T15603] R13: 00007fbe5b216038 R14: 00007fbe5b215fa0 R15: 00007ffc5bcd8578 [ 804.705529][T15603] [ 804.766211][T15597] wg1 speed is unknown, defaulting to 1000 [ 804.881268][ T5749] usb 7-1: GET_CAPABILITIES returned 0 [ 804.930719][ T992] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 804.931195][ T5749] usbtmc 7-1:16.0: can't read capabilities [ 804.941502][ T992] snd_usb_podhd 8-1:1.0: Line 6 POD HDDESKTOP found [ 804.955149][ T992] usb 8-1: selecting invalid altsetting 1 [ 804.961254][ T992] snd_usb_podhd 8-1:1.0: set_interface failed [ 804.968412][ T992] snd_usb_podhd 8-1:1.0: Line 6 POD HDDESKTOP now disconnected [ 804.976475][ T992] snd_usb_podhd 8-1:1.0: probe with driver snd_usb_podhd failed with error -22 [ 804.998005][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2501'. [ 805.022025][ T992] usb 8-1: USB disconnect, device number 4 [ 805.062190][T15186] udevd[15186]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.162183][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.176955][T15583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.187857][T15583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.235025][ T6257] usb 7-1: USB disconnect, device number 54 [ 805.280451][ T5710] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 806.344318][ T5710] usb 6-1: Using ep0 maxpacket: 8 [ 806.369288][ T5710] usb 6-1: unable to get BOS descriptor or descriptor too short [ 806.382822][T15625] IPVS: stopping master sync thread 15628 ... [ 806.546295][T15632] afs: Unknown parameter 'dy' [ 806.684884][ T5710] usb 6-1: config 117 has an invalid interface number: 163 but max is 0 [ 806.723078][ T5710] usb 6-1: config 117 has no interface number 0 [ 806.729374][ T5710] usb 6-1: config 117 interface 163 has no altsetting 0 [ 806.762353][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2509'. [ 806.786178][T15634] netlink: 822 bytes leftover after parsing attributes in process `syz.4.2510'. [ 806.809445][T15634] bridge: RTM_NEWNEIGH with unconfigured vlan 1033 on bridge0 [ 806.818974][ T5710] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 806.830310][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.849721][ T5710] usb 6-1: Product: syz [ 806.868631][ T5710] usb 6-1: Manufacturer: syz [ 806.876618][ T5710] usb 6-1: SerialNumber: syz [ 807.865793][T15597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2498'. [ 807.924544][T15642] netlink: 'syz.4.2513': attribute type 4 has an invalid length. [ 807.954201][T15642] netlink: 'syz.4.2513': attribute type 4 has an invalid length. [ 808.099923][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2506'. [ 808.109615][T15638] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2506'. [ 808.163692][T15646] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2506'. [ 808.588250][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2514'. [ 809.574621][T15664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2511'. [ 810.073523][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2523'. [ 810.100261][ T6257] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 810.431222][ T6257] usb 2-1: Using ep0 maxpacket: 8 [ 810.464363][ T6257] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 810.483860][ T6257] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 810.510750][ T6257] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 810.546524][ T6257] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.608239][ T6257] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 810.649511][ T6257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.698569][T15683] netlink: 'syz.4.2524': attribute type 4 has an invalid length. [ 810.722075][T15683] netlink: 'syz.4.2524': attribute type 4 has an invalid length. [ 811.318149][T15675] IPVS: stopping master sync thread 15313 ... [ 811.868371][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.884572][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.966049][ T6257] usb 2-1: GET_CAPABILITIES returned 0 [ 812.040230][ T6257] usbtmc 2-1:16.0: can't read capabilities [ 812.286087][ T5710] f81534a_ctrl 6-1:117.163: probe with driver f81534a_ctrl failed with error -32 [ 812.308682][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 813.073653][ T30] audit: type=1326 audit(1778749888.692:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15692 comm="syz.7.2526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dcc59ce59 code=0x7ffc0000 [ 813.117554][T15677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.139830][T15677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.150781][ T992] usb 2-1: USB disconnect, device number 115 [ 813.164446][ T30] audit: type=1326 audit(1778749888.692:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15692 comm="syz.7.2526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dcc59ce59 code=0x7ffc0000 [ 813.585018][T15699] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 813.694853][T15699] File: /dev/nullb0 PID: 15699 Comm: syz.4.2529 [ 813.742387][T15702] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2528'. [ 814.284196][ T30] audit: type=1400 audit(1778749890.433:1051): avc: denied { setopt } for pid=15712 comm="syz.4.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 814.359084][T15717] netlink: 5536 bytes leftover after parsing attributes in process `syz.7.2535'. [ 814.405129][T15717] netlink: 5536 bytes leftover after parsing attributes in process `syz.7.2535'. [ 815.174429][ T992] usb 6-1: USB disconnect, device number 78 [ 815.229153][ T5772] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 815.402050][ T5772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 815.407175][T15732] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.420636][ T5772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.421400][T15732] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.439713][ T5772] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 815.539030][ T5772] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 815.553716][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.593394][ T5772] usb 5-1: config 0 descriptor?? [ 816.055949][ T5772] usbhid 5-1:0.0: can't add hid device: -71 [ 816.063877][ T5772] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 816.078325][ T5749] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 816.084298][ T5772] usb 5-1: USB disconnect, device number 69 [ 816.214450][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2538'. [ 816.223511][T15744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2538'. [ 816.260988][T15744] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2538'. [ 816.460585][ T5749] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 816.470943][ T5749] usb 8-1: config 0 has no interface number 0 [ 816.482124][ T5749] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.500182][ T5749] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 816.568161][ T5749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.603273][ T5749] usb 8-1: Product: syz [ 816.618301][ T5749] usb 8-1: Manufacturer: syz [ 816.634328][T15753] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 816.670934][T15743] IPVS: stopping master sync thread 15753 ... [ 816.671764][ T5749] usb 8-1: SerialNumber: syz [ 816.721438][ T5749] usb 8-1: config 0 descriptor?? [ 816.799189][ T5749] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 816.878598][ T5772] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 817.174069][ T5772] usb 7-1: Using ep0 maxpacket: 8 [ 817.182522][ T5772] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 817.192472][ T5772] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 817.215267][ T5772] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 817.528140][ T5772] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.529871][ T5749] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 817.593849][ T5772] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 817.618633][ T5772] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.797262][ T5749] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 817.836593][ T5749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.869849][ T5749] usb 6-1: config 0 descriptor?? [ 817.876236][ T5772] usb 7-1: GET_CAPABILITIES returned 0 [ 817.892464][ T5772] usbtmc 7-1:16.0: can't read capabilities [ 817.915512][ T5749] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 817.935900][ T5749] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 818.102597][T15752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.128969][T15752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.174818][ T992] usb 7-1: USB disconnect, device number 55 [ 818.356827][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2543'. [ 818.406609][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2543'. [ 818.465030][T15764] netlink: 822 bytes leftover after parsing attributes in process `syz.5.2543'. [ 818.515717][T15764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.538529][T15764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.717162][T15769] FAULT_INJECTION: forcing a failure. [ 818.717162][T15769] name failslab, interval 1, probability 0, space 0, times 0 [ 818.730960][T15769] CPU: 0 UID: 0 PID: 15769 Comm: syz.4.2546 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.730991][T15769] Tainted: [L]=SOFTLOCKUP [ 818.730998][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.731010][T15769] Call Trace: [ 818.731016][T15769] [ 818.731023][T15769] dump_stack_lvl+0x100/0x190 [ 818.731050][T15769] should_fail_ex.cold+0x5/0xa [ 818.731076][T15769] should_failslab+0xc2/0x120 [ 818.731097][T15769] __kmalloc_cache_noprof+0x7a/0x6f0 [ 818.731122][T15769] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 818.731154][T15769] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 818.731184][T15769] ? __mutex_lock+0x26d/0x1b10 [ 818.731212][T15769] ? preempt_schedule_thunk+0x16/0x30 [ 818.731233][T15769] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 818.731258][T15769] ? __pfx___mutex_lock+0x10/0x10 [ 818.731282][T15769] ? __mutex_lock+0x8ff/0x1b10 [ 818.731305][T15769] ? find_held_lock+0x2b/0x80 [ 818.731323][T15769] ? snd_pcm_oss_poll+0x3ba/0xb00 [ 818.731345][T15769] ? snd_pcm_oss_poll+0x3ba/0xb00 [ 818.731372][T15769] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 818.731404][T15769] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 818.731436][T15769] snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 818.731466][T15769] snd_pcm_oss_poll+0x417/0xb00 [ 818.731489][T15769] ? __pfx___pollwait+0x10/0x10 [ 818.731513][T15769] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 818.731535][T15769] ? __fget_files+0x21f/0x3d0 [ 818.731563][T15769] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 818.731588][T15769] do_select+0xd54/0x1850 [ 818.731630][T15769] ? __pfx_do_select+0x10/0x10 [ 818.731651][T15769] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 818.731676][T15769] ? rcu_is_watching+0x12/0xc0 [ 818.731703][T15769] ? __pfx___pollwait+0x10/0x10 [ 818.731728][T15769] ? __pfx_pollwake+0x10/0x10 [ 818.731751][T15769] ? __pfx_pollwake+0x10/0x10 [ 818.731774][T15769] ? __pfx_pollwake+0x10/0x10 [ 818.731797][T15769] ? __pfx_pollwake+0x10/0x10 [ 818.731820][T15769] ? __pfx_pollwake+0x10/0x10 [ 818.731862][T15769] ? find_held_lock+0x2b/0x80 [ 818.731880][T15769] ? __might_fault+0xc5/0x140 [ 818.731906][T15769] ? __might_fault+0xc5/0x140 [ 818.731941][T15769] ? core_sys_select+0x55b/0xbb0 [ 818.731963][T15769] core_sys_select+0x55b/0xbb0 [ 818.731991][T15769] ? __pfx_core_sys_select+0x10/0x10 [ 818.732012][T15769] ? find_held_lock+0x2b/0x80 [ 818.732029][T15769] ? get_pid_task+0xfc/0x250 [ 818.732075][T15769] ? __pfx_set_user_sigmask+0x10/0x10 [ 818.732099][T15769] ? vfs_write+0x3/0x1070 [ 818.732117][T15769] ? __fget_files+0x215/0x3d0 [ 818.732144][T15769] do_pselect.constprop.0+0x238/0x270 [ 818.732171][T15769] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 818.732198][T15769] ? ksys_write+0x1ac/0x250 [ 818.732223][T15769] __x64_sys_pselect6+0x149/0x1c0 [ 818.732249][T15769] do_syscall_64+0x10b/0xf80 [ 818.732273][T15769] ? clear_bhb_loop+0x40/0x90 [ 818.732296][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.732314][T15769] RIP: 0033:0x7f03c079ce59 [ 818.732330][T15769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.732346][T15769] RSP: 002b:00007f03c1653028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 818.732364][T15769] RAX: ffffffffffffffda RBX: 00007f03c0a16090 RCX: 00007f03c079ce59 [ 818.732376][T15769] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 818.732387][T15769] RBP: 00007f03c1653090 R08: 0000000000000000 R09: 0000000000000000 [ 818.732398][T15769] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 818.732408][T15769] R13: 00007f03c0a16128 R14: 00007f03c0a16090 R15: 00007ffff083c7e8 [ 818.732441][T15769] [ 819.476793][ T992] usb 8-1: USB disconnect, device number 5 [ 819.849177][ T992] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 820.132996][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2545'. [ 820.451200][ T6259] usb 6-1: USB disconnect, device number 79 [ 820.713405][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2550'. [ 820.746220][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2550'. [ 821.010299][ T6259] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 821.059020][T15791] bond1 (unregistering): Released all slaves [ 821.159963][ T6259] usb 6-1: device descriptor read/64, error -71 [ 821.427159][ T6259] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 821.589491][ T6259] usb 6-1: device descriptor read/64, error -71 [ 821.740228][ T6259] usb usb6-port1: attempt power cycle [ 821.858242][T15813] netlink: 'syz.1.2555': attribute type 4 has an invalid length. [ 822.190424][T15807] netlink: 'syz.1.2555': attribute type 4 has an invalid length. [ 822.303311][ T6259] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 822.348486][ T6259] usb 6-1: device descriptor read/8, error -71 [ 822.420922][ T5749] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 822.624604][ T6259] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 822.668243][ T6259] usb 6-1: device descriptor read/8, error -71 [ 822.698682][ T24] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 822.698706][ T5749] usb 7-1: Using ep0 maxpacket: 8 [ 822.738316][ T5749] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.759467][ T5749] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.797462][ T6259] usb usb6-port1: unable to enumerate USB device [ 822.804767][ T5749] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.816722][ T9] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 822.845146][ T5749] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.886789][ T5749] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 822.892984][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 822.927932][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.942915][ T5749] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.950300][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 822.999493][ T24] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 823.019384][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.037809][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 823.049352][ T24] usb 8-1: config 0 descriptor?? [ 823.255862][ T5749] usb 7-1: GET_CAPABILITIES returned 0 [ 823.282792][ T5749] usbtmc 7-1:16.0: can't read capabilities [ 823.295124][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 823.389255][T15822] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2559'. [ 823.642036][T15815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.650246][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 823.658793][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 823.670473][ T24] usb 8-1: USB disconnect, device number 6 [ 823.678175][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 823.692921][T15815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.725478][ T9] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 823.753361][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.771948][ T5749] usb 7-1: USB disconnect, device number 56 [ 823.835550][ T9] usb 2-1: config 0 descriptor?? [ 823.878315][T15818] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 824.202474][ T30] audit: type=1400 audit(1778749899.716:1052): avc: denied { wake_alarm } for pid=15827 comm="syz.4.2561" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 824.323171][ T5619] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 824.337655][ T5619] Bluetooth: hci4: Injecting HCI hardware error event [ 824.347140][ T5619] Bluetooth: hci4: hardware error 0x00 [ 824.775247][T15837] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 824.781918][T15837] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 824.813044][T15818] hsr0: entered promiscuous mode [ 825.101180][T15844] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2565'. [ 825.442246][T15849] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 825.788165][T15848] netlink: 'syz.4.2566': attribute type 4 has an invalid length. [ 825.843701][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 825.861384][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 825.883339][ T5749] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 825.914179][ T9] usb 2-1: USB disconnect, device number 116 [ 826.104228][ T5749] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.136631][ T5749] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 826.178326][ T5749] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.212411][ T5749] usb 8-1: config 0 descriptor?? [ 826.663661][ T5749] ath6kl: Unsupported hardware version: 0x0 [ 826.677462][ T5749] ath6kl: Failed to init ath6kl core: -22 [ 826.706448][ T5749] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 826.717789][ T5619] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 826.817408][T15853] netlink: 'syz.6.2567': attribute type 4 has an invalid length. [ 826.839093][T15853] netlink: 'syz.6.2567': attribute type 4 has an invalid length. [ 827.176293][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 827.253552][T15862] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2684387552 (343601606656 ns) > initial count (199307484288 ns). Using initial count to start timer. [ 827.358019][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 827.412075][ T24] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 827.481330][ T24] usb 5-1: config 0 has no interface number 0 [ 827.503759][ T24] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 827.519344][ T24] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 827.544704][ T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 827.564863][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.585135][ T24] usb 5-1: Product: syz [ 827.604781][ T24] usb 5-1: Manufacturer: syz [ 827.640319][ T24] usb 5-1: SerialNumber: syz [ 827.653450][ T24] usb 5-1: config 0 descriptor?? [ 827.659759][T15858] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 827.667109][T15858] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 827.911362][T15858] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 827.924611][T15858] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 828.299723][T15874] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2572'. [ 828.827106][ T24] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 828.838769][ T24] asix 5-1:0.34: probe with driver asix failed with error -32 [ 829.327486][ T9] usb 8-1: USB disconnect, device number 7 [ 829.442636][ T30] audit: type=1400 audit(1778749904.610:1053): avc: denied { write } for pid=15877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.686388][ T30] audit: type=1400 audit(1778749904.844:1054): avc: denied { write } for pid=15895 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.501660][T15913] netlink: 'syz.6.2578': attribute type 4 has an invalid length. [ 830.765986][T12117] usb 5-1: USB disconnect, device number 70 [ 830.899303][ T30] audit: type=1400 audit(1778749905.967:1055): avc: denied { write } for pid=15897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.274211][T15928] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2582'. [ 831.376988][ T992] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 831.747126][ T30] audit: type=1400 audit(1778749906.772:1056): avc: denied { write } for pid=15932 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.000319][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 832.016432][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.065232][ T992] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 832.118859][ T992] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 832.150262][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.185272][ T992] usb 2-1: config 0 descriptor?? [ 832.716650][ T992] usbhid 2-1:0.0: can't add hid device: -71 [ 832.737443][ T992] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 832.778435][ T992] usb 2-1: USB disconnect, device number 117 [ 834.282646][T12117] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 834.506809][T12117] usb 7-1: Using ep0 maxpacket: 16 [ 834.593043][T12117] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 834.645666][T12117] usb 7-1: config 0 has no interface number 0 [ 835.029840][T12117] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 835.052125][T12117] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 835.101597][T15970] netlink: 'syz.1.2594': attribute type 4 has an invalid length. [ 835.291738][T15962] loop5: detected capacity change from 0 to 2640 [ 835.298382][T15962] buffer_io_error: 362 callbacks suppressed [ 835.298391][T15962] Buffer I/O error on dev loop5, logical block 0, async page read [ 835.312582][T15962] Buffer I/O error on dev loop5, logical block 0, async page read [ 835.320534][T15962] Buffer I/O error on dev loop5, logical block 0, async page read [ 835.328344][T15962] Buffer I/O error on dev loop5, logical block 0, async page read [ 835.336187][T15962] Buffer I/O error on dev loop5, logical block 0, async page read [ 835.344080][T15962] Buffer I/O error on dev loop5, logical block 0, async page read [ 835.351974][T15962] Buffer I/O error on dev loop5, logical block 0, async page read [ 835.359789][T15962] Buffer I/O error on dev loop5, logical block 0, async page read [ 835.367618][T15962] ldm_validate_partition_table(): Disk read failed. [ 835.374261][T15962] Buffer I/O error on dev loop5, logical block 0, async page read [ 835.382139][T15962] Buffer I/O error on dev loop5, logical block 0, async page read [ 835.415434][T15962] Dev loop5: unable to read RDB block 8 [ 835.421470][T15962] loop5: unable to read partition table [ 835.427338][T15962] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 835.437238][T12117] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 835.456666][T12117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.482277][T12117] usb 7-1: Product: syz [ 835.488528][T12117] usb 7-1: Manufacturer: syz [ 835.493783][T12117] usb 7-1: SerialNumber: syz [ 835.512040][T12117] usb 7-1: config 0 descriptor?? [ 835.520270][T15958] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 835.530524][T15958] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 836.057362][T15958] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 836.086790][T15958] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 837.150702][T12117] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 837.254730][T12117] asix 7-1:0.34: probe with driver asix failed with error -32 [ 837.825516][T15981] netlink: 'syz.7.2591': attribute type 4 has an invalid length. [ 838.364873][ T992] usb 7-1: USB disconnect, device number 57 [ 839.656739][ T6257] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 839.752549][T16007] overlayfs: missing 'lowerdir' [ 839.849940][ T6257] usb 8-1: Using ep0 maxpacket: 8 [ 839.851632][ T6257] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 839.851659][ T6257] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 839.851682][ T6257] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 839.851705][ T6257] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.851739][ T6257] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 839.851759][ T6257] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.071753][ T6257] usb 8-1: GET_CAPABILITIES returned 0 [ 840.071793][ T6257] usbtmc 8-1:16.0: can't read capabilities [ 840.291942][T15994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.322427][T15994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.354203][ T6257] usb 8-1: USB disconnect, device number 8 [ 840.811598][ T24] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 840.843594][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2603'. [ 841.006284][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 841.045131][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.067455][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 841.101683][T16033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2608'. [ 841.106322][ T24] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 841.168435][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.197722][ T24] usb 7-1: config 0 descriptor?? [ 841.367220][ T992] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 841.572193][ T992] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 841.599569][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.624260][ T992] usb 2-1: Product: syz [ 841.636947][ T992] usb 2-1: Manufacturer: syz [ 841.654483][ T992] usb 2-1: SerialNumber: syz [ 841.673969][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 841.690138][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 841.718825][ T24] usb 7-1: USB disconnect, device number 58 [ 842.206582][T16040] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 842.237119][T16037] IPVS: stopping master sync thread 16040 ... [ 842.408387][T16028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.432693][T16028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.109313][ T992] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 843.651515][ T992] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 843.886772][T16028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.969565][T16028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.053890][ T6259] usb 2-1: USB disconnect, device number 118 [ 844.083400][ T6259] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 844.645992][ T30] audit: type=1400 audit(1778749918.844:1057): avc: denied { write } for pid=16066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.753956][ T30] audit: type=1400 audit(1778749918.937:1058): avc: denied { write } for pid=16090 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.906369][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2624'. [ 845.032610][ T6259] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 845.227759][ T6259] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 845.257904][ T6259] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.286883][ T6259] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 845.330443][ T6259] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 845.408656][ T6259] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.484977][ T6259] usb 8-1: config 0 descriptor?? [ 845.954912][ T30] audit: type=1400 audit(1778749920.070:1059): avc: denied { write } for pid=16093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.287228][ T30] audit: type=1400 audit(1778749920.378:1060): avc: denied { write } for pid=16117 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.367219][ T6259] usbhid 8-1:0.0: can't add hid device: -71 [ 846.394664][ T6259] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 846.451529][ T6259] usb 8-1: USB disconnect, device number 9 [ 847.949867][ T6259] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 848.143827][ T6259] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 848.176482][ T6259] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.220712][ T6259] usb 7-1: config 0 descriptor?? [ 848.267956][ T6259] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 848.300701][ T6259] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 848.587458][T16142] binder_alloc: 16141: binder_alloc_buf size 1024 failed, no address space [ 848.602830][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2629'. [ 848.616455][T16142] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 848.641644][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2629'. [ 848.702067][T16143] netlink: 822 bytes leftover after parsing attributes in process `syz.6.2629'. [ 848.747774][T16143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.805813][T16143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.221571][ T992] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 849.403133][ T992] usb 2-1: Using ep0 maxpacket: 32 [ 849.410019][ T992] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 849.419628][ T992] usb 2-1: config 0 has no interface number 0 [ 849.426453][ T992] usb 2-1: config 0 interface 184 has no altsetting 0 [ 849.436329][ T992] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 849.447001][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.455092][ T992] usb 2-1: Product: syz [ 849.459881][ T992] usb 2-1: Manufacturer: syz [ 849.465657][ T992] usb 2-1: SerialNumber: syz [ 849.473254][ T992] usb 2-1: config 0 descriptor?? [ 849.714696][T16154] netlink: 'syz.5.2637': attribute type 4 has an invalid length. [ 850.097851][ T5772] usb 7-1: USB disconnect, device number 59 [ 850.342621][T16159] netlink: 'syz.7.2638': attribute type 4 has an invalid length. [ 850.440820][ T992] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 850.601381][ T992] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 850.841032][ T992] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 850.879186][ T992] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 850.905457][ T992] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 850.934023][ T992] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 851.275935][T16165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.594030][T12117] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 851.769534][T12117] usb 7-1: Using ep0 maxpacket: 32 [ 851.789742][T12117] usb 7-1: config 0 has no interfaces? [ 851.804310][T12117] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 851.807507][ T992] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 851.816501][T12117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.830302][T12117] usb 7-1: Product: syz [ 851.837972][T12117] usb 7-1: Manufacturer: syz [ 851.843179][T12117] usb 7-1: SerialNumber: syz [ 851.852112][T12117] usb 7-1: config 0 descriptor?? [ 851.935842][ T5710] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 852.001282][ T992] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 852.010417][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.020828][ T992] usb 5-1: config 0 descriptor?? [ 852.029865][ T992] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 852.037139][ T992] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 852.108331][ T5710] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 852.119885][ T5710] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.132174][ T5710] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 852.145705][ T5710] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 852.155352][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.169726][ T5710] usb 8-1: config 0 descriptor?? [ 852.319446][T16165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.329042][T16165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.343329][ T992] usb 7-1: USB disconnect, device number 60 [ 852.377443][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 852.388948][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2643'. [ 852.405580][T16179] netlink: 822 bytes leftover after parsing attributes in process `syz.4.2643'. [ 852.421704][T16179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.431034][T16179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.628798][ T5710] usbhid 8-1:0.0: can't add hid device: -71 [ 852.636805][ T5710] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 852.653430][ T5710] usb 8-1: USB disconnect, device number 10 [ 852.684659][T16181] FAULT_INJECTION: forcing a failure. [ 852.684659][T16181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 852.697897][T16181] CPU: 0 UID: 0 PID: 16181 Comm: syz.5.2646 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.697915][T16181] Tainted: [L]=SOFTLOCKUP [ 852.697919][T16181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 852.697926][T16181] Call Trace: [ 852.697931][T16181] [ 852.697935][T16181] dump_stack_lvl+0x100/0x190 [ 852.697953][T16181] should_fail_ex.cold+0x5/0xa [ 852.697966][T16181] ? prepare_alloc_pages+0x16d/0x5f0 [ 852.697980][T16181] should_fail_alloc_page+0xeb/0x140 [ 852.697993][T16181] prepare_alloc_pages+0x1f0/0x5f0 [ 852.698006][T16181] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 852.698020][T16181] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 852.698038][T16181] ? unwind_get_return_address+0x59/0xa0 [ 852.698055][T16181] ? arch_stack_walk+0xa6/0xf0 [ 852.698076][T16181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 852.698093][T16181] ? __pfx_stack_trace_save+0x10/0x10 [ 852.698104][T16181] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 852.698125][T16181] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 852.698140][T16181] ? __pmd_alloc+0xbf/0x950 [ 852.698152][T16181] ? __handle_mm_fault+0xa9c/0x2a00 [ 852.698166][T16181] ? handle_mm_fault+0x36d/0xa20 [ 852.698180][T16181] ? do_user_addr_fault+0x74c/0x12f0 [ 852.698194][T16181] ? exc_page_fault+0x6f/0xd0 [ 852.698207][T16181] ? asm_exc_page_fault+0x26/0x30 [ 852.698217][T16181] ? rep_movs_alternative+0xf/0x90 [ 852.698227][T16181] ? _copy_from_user+0x98/0xd0 [ 852.698242][T16181] ? copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 852.698256][T16181] ? do_sock_getsockopt+0x530/0x6e0 [ 852.698267][T16181] ? __sys_getsockopt+0x148/0x260 [ 852.698283][T16181] ? __x64_sys_getsockopt+0xbd/0x160 [ 852.698299][T16181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 852.698314][T16181] ? policy_nodemask+0xed/0x4f0 [ 852.698328][T16181] alloc_pages_mpol+0x1fb/0x540 [ 852.698340][T16181] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 852.698353][T16181] ? __lock_acquire+0x4a5/0x2630 [ 852.698369][T16181] alloc_pages_noprof+0x1a/0x160 [ 852.698383][T16181] pte_alloc_one+0x1c/0x3d0 [ 852.698393][T16181] __pte_alloc+0x6d/0x3e0 [ 852.698405][T16181] ? __pfx___pte_alloc+0x10/0x10 [ 852.698417][T16181] ? do_raw_spin_lock+0x128/0x260 [ 852.698432][T16181] ? find_held_lock+0x2b/0x80 [ 852.698444][T16181] do_anonymous_page+0x13c6/0x2050 [ 852.698467][T16181] ? __pmd_alloc+0x3fb/0x950 [ 852.698481][T16181] __handle_mm_fault+0x1d2c/0x2a00 [ 852.698498][T16181] ? mt_find+0x45e/0x8e0 [ 852.698514][T16181] ? __pfx___handle_mm_fault+0x10/0x10 [ 852.698529][T16181] ? __pfx_mt_find+0x10/0x10 [ 852.698551][T16181] ? find_vma+0xbf/0x140 [ 852.698562][T16181] ? __pfx_find_vma+0x10/0x10 [ 852.698574][T16181] handle_mm_fault+0x36d/0xa20 [ 852.698592][T16181] do_user_addr_fault+0x74c/0x12f0 [ 852.698608][T16181] ? trace_page_fault_kernel+0x7a/0x200 [ 852.698624][T16181] exc_page_fault+0x6f/0xd0 [ 852.698639][T16181] asm_exc_page_fault+0x26/0x30 [ 852.698649][T16181] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 852.698661][T16181] Code: c4 10 e9 84 9b 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 [ 852.698671][T16181] RSP: 0018:ffffc9000568fbd0 EFLAGS: 00050202 [ 852.698681][T16181] RAX: 0000000000000001 RBX: 0000200000000000 RCX: 0000000000000004 [ 852.698688][T16181] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000568fcf0 [ 852.698694][T16181] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000ad1f9e [ 852.698700][T16181] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 852.698706][T16181] R13: ffffc9000568fcf0 R14: 0000200000000000 R15: 0000000000000065 [ 852.698720][T16181] _copy_from_user+0x98/0xd0 [ 852.698736][T16181] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 852.698751][T16181] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 852.698769][T16181] do_sock_getsockopt+0x530/0x6e0 [ 852.698781][T16181] ? __lock_acquire+0x4a5/0x2630 [ 852.698796][T16181] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 852.698808][T16181] ? find_held_lock+0x2b/0x80 [ 852.698818][T16181] ? ksys_write+0x190/0x250 [ 852.698833][T16181] ? find_held_lock+0x2b/0x80 [ 852.698847][T16181] ? __fget_files+0x21f/0x3d0 [ 852.698864][T16181] __sys_getsockopt+0x148/0x260 [ 852.698884][T16181] ? __x64_sys_getsockopt+0xbd/0x160 [ 852.698900][T16181] __x64_sys_getsockopt+0xbd/0x160 [ 852.698916][T16181] ? do_syscall_64+0x90/0xf80 [ 852.698930][T16181] ? lockdep_hardirqs_on+0x78/0x100 [ 852.698944][T16181] do_syscall_64+0x10b/0xf80 [ 852.698964][T16181] ? clear_bhb_loop+0x40/0x90 [ 852.698982][T16181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.698993][T16181] RIP: 0033:0x7f412bf9ce59 [ 852.699003][T16181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.699012][T16181] RSP: 002b:00007f412a1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 852.699022][T16181] RAX: ffffffffffffffda RBX: 00007f412c215fa0 RCX: 00007f412bf9ce59 [ 852.699028][T16181] RDX: 0000000000000002 RSI: 0000000000000065 RDI: 0000000000000003 [ 852.699034][T16181] RBP: 00007f412a1f6090 R08: 0000200000000000 R09: 0000000000000000 [ 852.699041][T16181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.699047][T16181] R13: 00007f412c216038 R14: 00007f412c215fa0 R15: 00007ffdbf1b9a58 [ 852.699061][T16181] [ 853.311784][ T5749] usb 2-1: USB disconnect, device number 119 [ 853.682638][T16192] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 853.682638][T16192] The task syz.6.2649 (16192) triggered the difference, watch for misbehavior. [ 853.730961][ T5749] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 854.040969][ T5749] usb 2-1: device descriptor read/64, error -71 [ 854.221534][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 854.308220][ T5749] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 854.469915][ T5749] usb 2-1: device descriptor read/64, error -71 [ 854.580602][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 854.596999][T16202] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2651'. [ 854.606805][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 854.616364][T16202] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2651'. [ 854.626271][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 854.651557][ T5749] usb usb2-port1: attempt power cycle [ 854.766098][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 854.777128][T16202] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2651'. [ 854.786735][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 854.798129][T16202] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2651'. [ 854.798982][ T24] usb 5-1: USB disconnect, device number 71 [ 855.045509][ T5749] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 855.078309][ T5749] usb 2-1: device descriptor read/8, error -71 [ 855.355640][ T5749] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 855.388342][ T5749] usb 2-1: device descriptor read/8, error -71 [ 855.526741][ T5749] usb usb2-port1: unable to enumerate USB device [ 855.868294][ T24] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 856.049937][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 856.062110][ T24] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 856.072924][ T24] usb 6-1: config 0 has no interface number 0 [ 856.079025][ T24] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 856.089047][ T24] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 856.105250][ T24] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 856.115864][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.123837][ T24] usb 6-1: Product: syz [ 856.128133][ T24] usb 6-1: Manufacturer: syz [ 856.132727][ T24] usb 6-1: SerialNumber: syz [ 856.140131][ T24] usb 6-1: config 0 descriptor?? [ 856.146900][T16221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 856.154858][T16221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 856.384419][T16221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 856.392791][T16221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 856.485338][T16224] netlink: 'syz.7.2657': attribute type 4 has an invalid length. [ 857.213348][T16228] syz.1.2659 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 857.986768][T16239] netlink: 'syz.7.2661': attribute type 1 has an invalid length. [ 859.345936][ T24] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 859.351723][T16248] No source specified [ 859.383171][ T24] asix 6-1:0.34: probe with driver asix failed with error -71 [ 859.418836][ T24] usb 6-1: USB disconnect, device number 84 [ 859.629911][ T5710] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 859.859480][T16257] binder: 16253:16257 ioctl c0285840 200000000000 returned -22 [ 859.922894][ T5710] usb 7-1: Using ep0 maxpacket: 8 [ 860.020417][ T5710] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 860.248621][ T5710] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 860.628385][ T5710] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 860.815699][ T5710] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 860.897138][ T5710] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 860.921696][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.930446][ T5710] usb 7-1: Product: syz [ 860.934980][ T5710] usb 7-1: Manufacturer: syz [ 860.963734][ T5710] usb 7-1: SerialNumber: syz [ 860.973299][ T5710] usb 7-1: config 0 descriptor?? [ 861.004401][T16248] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 861.168700][T12117] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 861.227133][ T5710] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 861.274442][ T5710] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input63 [ 861.343775][T12117] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 861.394491][T12117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.430266][T12117] usb 6-1: config 0 descriptor?? [ 861.517675][T12117] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 861.528072][T12117] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 861.606600][ T5772] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 861.717630][T16248] __nla_validate_parse: 10 callbacks suppressed [ 861.717662][T16248] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2663'. [ 861.762644][ C0] powermate: config urb returned -71 [ 861.768846][ C0] powermate: config urb returned -71 [ 861.774858][ C0] powermate: config urb returned -71 [ 861.783556][ T5710] usb 7-1: USB disconnect, device number 61 [ 861.788222][ T5772] usb 8-1: Using ep0 maxpacket: 16 [ 861.789918][ C0] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 861.806628][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 861.815948][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2666'. [ 861.862318][ T5772] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 861.869210][T16268] netlink: 822 bytes leftover after parsing attributes in process `syz.5.2666'. [ 861.905492][ T5772] usb 8-1: config 0 has no interface number 0 [ 861.909213][T16268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.929383][T16268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.932017][ T5772] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 861.980684][ T5772] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 862.015421][ T5772] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 862.034482][ T5772] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.063604][ T5772] usb 8-1: Product: syz [ 862.079173][ T5772] usb 8-1: Manufacturer: syz [ 862.094725][ T5772] usb 8-1: SerialNumber: syz [ 862.113702][ T5772] usb 8-1: config 0 descriptor?? [ 862.132994][T16265] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 862.170195][T16265] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 862.435905][T16265] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 862.451740][T16265] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 864.182963][ T5710] usb 6-1: USB disconnect, device number 85 [ 864.743489][T16287] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2672'. [ 864.975200][ T5772] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 865.003736][ T5772] asix 8-1:0.34: probe with driver asix failed with error -71 [ 865.035877][ T5772] usb 8-1: USB disconnect, device number 11 [ 866.590683][T16317] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2681'. [ 866.722223][T16306] netlink: 'syz.5.2676': attribute type 4 has an invalid length. [ 867.537445][T12117] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 867.773526][T16326] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2679'. [ 868.443569][T12117] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 868.541348][T12117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.703287][T12117] usb 5-1: config 0 descriptor?? [ 868.738777][T12117] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 868.765864][T12117] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 869.094167][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 869.104632][T16328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2683'. [ 869.298200][T16330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.343370][T16330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.001407][T16329] netlink: 822 bytes leftover after parsing attributes in process `syz.4.2683'. [ 870.084640][T16334] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 870.112241][ T8132] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.147974][ T8132] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.177790][ T8132] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.209629][ T8132] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.424662][T16348] fuse: Unknown parameter '0x00000000000000050x0000000000000005' [ 870.714288][T12117] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 870.892912][T12117] usb 6-1: Using ep0 maxpacket: 32 [ 870.905934][T12117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.935492][T12117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.945936][T12117] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 870.970334][T12117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.984665][T12117] usb 6-1: config 0 descriptor?? [ 871.182442][ T5710] usb 5-1: USB disconnect, device number 72 [ 871.434769][T12117] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 871.456763][T12117] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 871.683209][T12117] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 872.973519][T16372] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2695'. [ 873.371639][T16379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.712118][T12117] ft260 0003:0403:6030.0011: failed to retrieve system status [ 873.744050][T12117] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -71 [ 874.485333][ T5749] usb 6-1: reset high-speed USB device number 86 using dummy_hcd [ 874.590196][ T992] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 874.774636][ T992] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 874.792608][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 874.797555][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.801495][T16396] netlink: 'syz.4.2703': attribute type 5 has an invalid length. [ 986.989798][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 986.989816][ C1] rcu: (detected by 1, t=10502 jiffies, g=101285, q=581 ncpus=2) [ 986.989831][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295033911-4295023409), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 986.989850][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g101285 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 986.989868][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 986.989877][ C1] rcu: RCU grace-period kthread stack dump: [ 986.989883][ C1] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 986.989942][ C1] Call Trace: [ 986.989949][ C1] [ 986.989960][ C1] __schedule+0x1295/0x67a0 [ 986.990005][ C1] ? __pfx___schedule+0x10/0x10 [ 986.990025][ C1] ? find_held_lock+0x2b/0x80 [ 986.990045][ C1] ? schedule+0x2bf/0x390 [ 986.990070][ C1] schedule+0xdd/0x390 [ 986.990091][ C1] schedule_timeout+0x127/0x280 [ 986.990112][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 986.990134][ C1] ? __pfx_process_timeout+0x10/0x10 [ 986.990158][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 986.990182][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 986.990210][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 986.990233][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 986.990258][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 986.990283][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 986.990310][ C1] rcu_gp_kthread+0x179/0x230 [ 986.990333][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 986.990353][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 986.990379][ C1] ? __kthread_parkme+0x18c/0x230 [ 986.990402][ C1] ? kthread+0x13a/0x450 [ 986.990422][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 986.990442][ C1] kthread+0x370/0x450 [ 986.990463][ C1] ? __pfx_kthread+0x10/0x10 [ 986.990486][ C1] ret_from_fork+0x72b/0xd50 [ 986.990511][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 986.990536][ C1] ? __switch_to+0x800/0x1100 [ 986.990563][ C1] ? __pfx_kthread+0x10/0x10 [ 986.990592][ C1] ret_from_fork_asm+0x1a/0x30 [ 986.990631][ C1] [ 986.990638][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 986.990652][ C1] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 986.990676][ C1] Tainted: [L]=SOFTLOCKUP [ 986.990683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 986.990695][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 986.990718][ C1] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 986.990736][ C1] RSP: 0018:ffffc9000202f610 EFLAGS: 00000202 [ 986.990751][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81fc138d [ 986.990763][ C1] RDX: ffff888078bfa500 RSI: 0000000000000001 RDI: 0000000000000000 [ 986.990774][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 986.990785][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 986.990796][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 986.990808][ C1] FS: 00005555922a2500(0000) GS:ffff888124472000(0000) knlGS:0000000000000000 [ 986.990826][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 986.990838][ C1] CR2: 00007fbe5bd456b8 CR3: 000000005cc17000 CR4: 00000000003526f0 [ 986.990850][ C1] Call Trace: [ 986.990856][ C1] [ 986.990863][ C1] smp_call_function_many_cond+0x5ad/0x1700 [ 986.990889][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 986.990918][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 986.990940][ C1] ? ldt_dup_context+0x1a4/0x300 [ 986.990964][ C1] ? ldt_dup_context+0x1a4/0x300 [ 986.990994][ C1] ? rcu_is_watching+0x12/0xc0 [ 986.991021][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 986.991043][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 986.991067][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 986.991091][ C1] ? dup_mmap+0x12cd/0x2180 [ 986.991112][ C1] ? dup_mmap+0x12cd/0x2180 [ 986.991136][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 986.991159][ C1] ? up_write+0x28c/0x4f0 [ 986.991187][ C1] dup_mmap+0x12e8/0x2180 [ 986.991219][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 986.991240][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 986.991267][ C1] ? __lock_acquire+0x4a5/0x2630 [ 986.991290][ C1] ? find_held_lock+0x2b/0x80 [ 986.991307][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 986.991355][ C1] copy_process+0x6c78/0x7ed0 [ 986.991388][ C1] ? __pfx_copy_process+0x10/0x10 [ 986.991405][ C1] ? do_raw_spin_lock+0x128/0x260 [ 986.991441][ C1] kernel_clone+0x12e/0x9c0 [ 986.991461][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 986.991477][ C1] ? __lock_acquire+0x4a5/0x2630 [ 986.991506][ C1] ? find_held_lock+0x2b/0x80 [ 986.991524][ C1] ? __might_fault+0xc5/0x140 [ 986.991552][ C1] __do_sys_clone+0xd9/0x120 [ 986.991575][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 986.991609][ C1] ? rcu_is_watching+0x12/0xc0 [ 986.991638][ C1] do_syscall_64+0x10b/0xf80 [ 986.991660][ C1] ? clear_bhb_loop+0x40/0x90 [ 986.991682][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.991700][ C1] RIP: 0033:0x7fbe5afc58d2 [ 986.991717][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 986.991733][ C1] RSP: 002b:00007ffc5bcd8790 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 986.991750][ C1] RAX: ffffffffffffffda RBX: 00007ffc5bcd8790 RCX: 00007fbe5afc58d2 [ 986.991763][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 986.991774][ C1] RBP: 00007ffc5bcd891c R08: 0000000000000000 R09: 0000000000000001 [ 986.991785][ C1] R10: 00005555922a27d0 R11: 0000000000000246 R12: 0000000000000001 [ 986.991797][ C1] R13: 00000000000927c0 R14: 00000000000d23ef R15: 00007ffc5bcd8970 [ 986.991822][ C1] [ 1130.507517][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 240s! [syz-executor:5613] [ 1130.507541][ C1] Modules linked in: [ 1130.507550][ C1] irq event stamp: 6904488 [ 1130.507557][ C1] hardirqs last enabled at (6904487): [] irqentry_exit+0x24d/0x7e0 [ 1130.507589][ C1] hardirqs last disabled at (6904488): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1130.507615][ C1] softirqs last enabled at (6904482): [] __irq_exit_rcu+0x162/0x210 [ 1130.507643][ C1] softirqs last disabled at (6904449): [] __irq_exit_rcu+0x162/0x210 [ 1130.507677][ C1] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1130.507702][ C1] Tainted: [L]=SOFTLOCKUP [ 1130.507708][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1130.507720][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1700 [ 1130.507749][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 79 83 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 41 [ 1130.507766][ C1] RSP: 0018:ffffc9000202f618 EFLAGS: 00000293 [ 1130.507780][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc138d [ 1130.507791][ C1] RDX: ffff888078bfa500 RSI: ffffffff81fc1367 RDI: ffff888078bfa500 [ 1130.507803][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 1130.507814][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1130.507824][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 1130.507836][ C1] FS: 00005555922a2500(0000) GS:ffff888124472000(0000) knlGS:0000000000000000 [ 1130.507853][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1130.507865][ C1] CR2: 00007fbe5bd456b8 CR3: 000000005cc17000 CR4: 00000000003526f0 [ 1130.507877][ C1] Call Trace: [ 1130.507882][ C1] [ 1130.507893][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1130.507923][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1130.507945][ C1] ? ldt_dup_context+0x1a4/0x300 [ 1130.507969][ C1] ? ldt_dup_context+0x1a4/0x300 [ 1130.507998][ C1] ? rcu_is_watching+0x12/0xc0 [ 1130.508024][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1130.508046][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1130.508070][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 1130.508094][ C1] ? dup_mmap+0x12cd/0x2180 [ 1130.508115][ C1] ? dup_mmap+0x12cd/0x2180 [ 1130.508139][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1130.508162][ C1] ? up_write+0x28c/0x4f0 [ 1130.508190][ C1] dup_mmap+0x12e8/0x2180 [ 1130.508221][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1130.508241][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1130.508268][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1130.508291][ C1] ? find_held_lock+0x2b/0x80 [ 1130.508308][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1130.508355][ C1] copy_process+0x6c78/0x7ed0 [ 1130.508388][ C1] ? __pfx_copy_process+0x10/0x10 [ 1130.508405][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1130.508442][ C1] kernel_clone+0x12e/0x9c0 [ 1130.508460][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1130.508476][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1130.508505][ C1] ? find_held_lock+0x2b/0x80 [ 1130.508521][ C1] ? __might_fault+0xc5/0x140 [ 1130.508550][ C1] __do_sys_clone+0xd9/0x120 [ 1130.508568][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1130.508601][ C1] ? rcu_is_watching+0x12/0xc0 [ 1130.508631][ C1] do_syscall_64+0x10b/0xf80 [ 1130.508653][ C1] ? clear_bhb_loop+0x40/0x90 [ 1130.508675][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.508692][ C1] RIP: 0033:0x7fbe5afc58d2 [ 1130.508708][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1130.508724][ C1] RSP: 002b:00007ffc5bcd8790 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1130.508746][ C1] RAX: ffffffffffffffda RBX: 00007ffc5bcd8790 RCX: 00007fbe5afc58d2 [ 1130.508757][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1130.508768][ C1] RBP: 00007ffc5bcd891c R08: 0000000000000000 R09: 0000000000000001 [ 1130.508778][ C1] R10: 00005555922a27d0 R11: 0000000000000246 R12: 0000000000000001 [ 1130.508789][ C1] R13: 00000000000927c0 R14: 00000000000d23ef R15: 00007ffc5bcd8970 [ 1130.508814][ C1] [ 1130.508821][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1130.508845][ C0] NMI backtrace for cpu 0 [ 1130.508857][ C0] CPU: 0 UID: 0 PID: 16396 Comm: syz.4.2703 Tainted: G L syzkaller #0 PREEMPT(full) [ 1130.508875][ C0] Tainted: [L]=SOFTLOCKUP [ 1130.508880][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1130.508887][ C0] RIP: 0010:__lock_acquire+0x290/0x2630 [ 1130.508905][ C0] Code: 90 0b 00 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 84 00 00 00 00 00 83 e8 01 48 83 ee 28 83 f8 ff 0f 84 0f 05 00 00 <0f> b6 7e 21 44 31 cf 83 e7 60 74 e4 44 8d 48 01 65 8b 05 41 d2 26 [ 1130.508918][ C0] RSP: 0018:ffffc90000007d30 EFLAGS: 00000046 [ 1130.508928][ C0] RAX: 0000000000000000 RBX: ffff88807a0bb0b8 RCX: 0000000000000001 [ 1130.508937][ C0] RDX: 0000000000000002 RSI: ffff88807a0bb090 RDI: ffff8880b84284d8 [ 1130.508946][ C0] RBP: ffff88807a0ba500 R08: 0000000000000001 R09: 0000000000000040 [ 1130.508955][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 1130.508963][ C0] R13: 0000000000000074 R14: 0000000000000000 R15: 0000000000000000 [ 1130.508972][ C0] FS: 00007f03c16746c0(0000) GS:ffff888124372000(0000) knlGS:0000000000000000 [ 1130.508986][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1130.508996][ C0] CR2: 000000110c3529c1 CR3: 000000006577f000 CR4: 00000000003526f0 [ 1130.509005][ C0] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 000000000000000a [ 1130.509013][ C0] DR3: 0000000000000800 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1130.509021][ C0] Call Trace: [ 1130.509026][ C0] [ 1130.509033][ C0] ? find_held_lock+0x2b/0x80 [ 1130.509045][ C0] ? advance_sched+0x76b/0xd20 [ 1130.509066][ C0] ? advance_sched+0x76b/0xd20 [ 1130.509086][ C0] lock_acquire+0x1b1/0x370 [ 1130.509102][ C0] ? __hrtimer_run_queues+0x1bd/0xa00 [ 1130.509125][ C0] _raw_spin_lock_irq+0x36/0x50 [ 1130.509140][ C0] ? __hrtimer_run_queues+0x1bd/0xa00 [ 1130.509158][ C0] __hrtimer_run_queues+0x1bd/0xa00 [ 1130.509181][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1130.509198][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1130.509218][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1130.509241][ C0] [ 1130.509245][ C0] [ 1130.509250][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1130.509264][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 1130.509278][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 48 5e 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 16 59 21 00 48 85 ed 0f 85 27 01 00 00 28 5e 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 1130.509290][ C0] RSP: 0018:ffffc900032cf118 EFLAGS: 00000283 [ 1130.509301][ C0] RAX: 00000000000513a1 RBX: 000000000000003e RCX: ffffc900133c0000 [ 1130.509309][ C0] RDX: 0000000000080000 RSI: ffffffff81e739d4 RDI: ffff88807a0ba500 [ 1130.509318][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1130.509326][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000659e25 [ 1130.509334][ C0] R13: 0000000000000200 R14: ffff888028c9ca00 R15: ffffc900032cf1e0 [ 1130.509346][ C0] ? vprintk_emit+0x674/0x6b0 [ 1130.509361][ C0] ? vprintk_emit+0x674/0x6b0 [ 1130.509373][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1130.509387][ C0] ? find_held_lock+0x2b/0x80 [ 1130.509402][ C0] _printk+0xcf/0x110 [ 1130.509415][ C0] ? __pfx__printk+0x10/0x10 [ 1130.509427][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1130.509446][ C0] ? __pfx____ratelimit+0x10/0x10 [ 1130.509463][ C0] __nla_validate_parse.cold+0x6d/0xa9 [ 1130.509484][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 1130.509504][ C0] __nla_parse+0x40/0x60 [ 1130.509521][ C0] rtnl_newlink+0x45d/0x2380 [ 1130.509539][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1130.509551][ C0] ? find_held_lock+0x2b/0x80 [ 1130.509563][ C0] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1130.509576][ C0] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1130.509590][ C0] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1130.509611][ C0] ? find_held_lock+0x2b/0x80 [ 1130.509623][ C0] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1130.509637][ C0] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1130.509651][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 1130.509664][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 1130.509679][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1130.509695][ C0] ? ref_tracker_free+0x37e/0x6c0 [ 1130.509710][ C0] netlink_rcv_skb+0x159/0x420 [ 1130.509728][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1130.509742][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1130.509763][ C0] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1130.509780][ C0] netlink_unicast+0x585/0x850 [ 1130.509798][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1130.509817][ C0] netlink_sendmsg+0x8b0/0xda0 [ 1130.509835][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.509851][ C0] ? __might_fault+0x50/0x140 [ 1130.509872][ C0] ____sys_sendmsg+0x9e1/0xb70 [ 1130.509888][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.509905][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1130.509923][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 1130.509938][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1130.509956][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1130.509983][ C0] __sys_sendmsg+0x170/0x220 [ 1130.509997][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 1130.510009][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 1130.510032][ C0] ? rcu_is_watching+0x12/0xc0 [ 1130.510052][ C0] do_syscall_64+0x10b/0xf80 [ 1130.510068][ C0] ? clear_bhb_loop+0x40/0x90 [ 1130.510083][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.510097][ C0] RIP: 0033:0x7f03c079ce59 [ 1130.510108][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.510121][ C0] RSP: 002b:00007f03c1674028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1130.510133][ C0] RAX: ffffffffffffffda RBX: 00007f03c0a15fa0 RCX: 00007f03c079ce59 [ 1130.510142][ C0] RDX: 0000000000004800 RSI: 0000200000000440 RDI: 0000000000000004 [ 1130.510150][ C0] RBP: 00007f03c0832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1130.510158][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.510166][ C0] R13: 00007f03c0a16038 R14: 00007f03c0a15fa0 R15: 00007ffff083c7e8 [ 1130.510180][ C0] [ 1130.510844][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 1130.510857][ C1] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1130.510879][ C1] Tainted: [L]=SOFTLOCKUP [ 1130.510886][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1130.510896][ C1] Call Trace: [ 1130.510903][ C1] [ 1130.510910][ C1] dump_stack_lvl+0x100/0x190 [ 1130.510932][ C1] vpanic+0x552/0x970 [ 1130.510949][ C1] ? __pfx_vpanic+0x10/0x10 [ 1130.510968][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1130.510997][ C1] panic+0xd1/0xe0 [ 1130.511014][ C1] ? __pfx_panic+0x10/0x10 [ 1130.511032][ C1] ? __pfx_printk_trigger_flush+0x10/0x10 [ 1130.511052][ C1] ? wq_watchdog_touch+0xec/0x1a0 [ 1130.511073][ C1] ? watchdog_timer_fn.cold+0x5/0x25 [ 1130.511093][ C1] ? watchdog_timer_fn+0x702/0x7a0 [ 1130.511117][ C1] watchdog_timer_fn.cold+0x16/0x25 [ 1130.511136][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1130.511160][ C1] __hrtimer_run_queues+0x142/0xa00 [ 1130.511195][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1130.511224][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1130.511249][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1130.511271][ C1] [ 1130.511277][ C1] [ 1130.511285][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1130.511304][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1700 [ 1130.511326][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 79 83 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 41 [ 1130.511343][ C1] RSP: 0018:ffffc9000202f618 EFLAGS: 00000293 [ 1130.511357][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc138d [ 1130.511367][ C1] RDX: ffff888078bfa500 RSI: ffffffff81fc1367 RDI: ffff888078bfa500 [ 1130.511379][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 1130.511389][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1130.511400][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 1130.511418][ C1] ? smp_call_function_many_cond+0x5ad/0x1700 [ 1130.511439][ C1] ? smp_call_function_many_cond+0x587/0x1700 [ 1130.511464][ C1] ? smp_call_function_many_cond+0x587/0x1700 [ 1130.511489][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1130.511517][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1130.511539][ C1] ? ldt_dup_context+0x1a4/0x300 [ 1130.511561][ C1] ? ldt_dup_context+0x1a4/0x300 [ 1130.511590][ C1] ? rcu_is_watching+0x12/0xc0 [ 1130.511616][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1130.511638][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1130.511661][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 1130.511685][ C1] ? dup_mmap+0x12cd/0x2180 [ 1130.511704][ C1] ? dup_mmap+0x12cd/0x2180 [ 1130.511728][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1130.511755][ C1] ? up_write+0x28c/0x4f0 [ 1130.511782][ C1] dup_mmap+0x12e8/0x2180 [ 1130.511813][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1130.511834][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1130.511860][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1130.511884][ C1] ? find_held_lock+0x2b/0x80 [ 1130.511900][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1130.511946][ C1] copy_process+0x6c78/0x7ed0 [ 1130.511977][ C1] ? __pfx_copy_process+0x10/0x10 [ 1130.511994][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1130.512030][ C1] kernel_clone+0x12e/0x9c0 [ 1130.512049][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1130.512065][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1130.512093][ C1] ? find_held_lock+0x2b/0x80 [ 1130.512110][ C1] ? __might_fault+0xc5/0x140 [ 1130.512138][ C1] __do_sys_clone+0xd9/0x120 [ 1130.512155][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1130.512188][ C1] ? rcu_is_watching+0x12/0xc0 [ 1130.512217][ C1] do_syscall_64+0x10b/0xf80 [ 1130.512238][ C1] ? clear_bhb_loop+0x40/0x90 [ 1130.512260][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.512277][ C1] RIP: 0033:0x7fbe5afc58d2 [ 1130.512290][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1130.512306][ C1] RSP: 002b:00007ffc5bcd8790 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1130.512322][ C1] RAX: ffffffffffffffda RBX: 00007ffc5bcd8790 RCX: 00007fbe5afc58d2 [ 1130.512333][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1130.512344][ C1] RBP: 00007ffc5bcd891c R08: 0000000000000000 R09: 0000000000000001 [ 1130.512355][ C1] R10: 00005555922a27d0 R11: 0000000000000246 R12: 0000000000000001 [ 1130.512366][ C1] R13: 00000000000927c0 R14: 00000000000d23ef R15: 00007ffc5bcd8970 [ 1130.512390][ C1] [ 1131.600542][ C1] Shutting down cpus with NMI [ 1131.600755][ C1] Kernel Offset: disabled