last executing test programs:

15m54.438587937s ago: executing program 4 (id=1536):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x3, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0x4040)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
socket$inet6_sctp(0xa, 0x1, 0x84)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x418, 0x220, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="18b177f45cd4", @empty, @local, @rand_addr=0x64010101, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @broadcast, 0x4, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010102, 0xff, 0xffffff00, 0x8, 0xa, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x2, 0x24, 0x8, 0x62, 0x5, 0x5, 'vlan1\x00', 'wlan1\x00', {}, {}, 0x0, 0x82}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)

15m50.278047269s ago: executing program 4 (id=1544):
socket$unix(0x1, 0x5, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
get_mempolicy(0x0, 0x0, 0x7811, &(0x7f00001df000/0x4000)=nil, 0x2)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = epoll_create(0x10000047)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000340))
openat$cgroup_subtree(r2, &(0x7f0000000180), 0x2, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
r4 = socket$inet(0x2, 0x4, 0x4)
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, 0x0)

15m49.678695817s ago: executing program 4 (id=1547):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4)

15m49.362541596s ago: executing program 4 (id=1548):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
clock_gettime(0x3, &(0x7f0000000040))
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x8, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
ptrace(0x10, 0x0)
read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r5, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x24040000)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
read$FUSE(r2, &(0x7f0000006040)={0x2020}, 0x2020)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000003000018006000400000000000600010002000000060002"], 0x44}}, 0x0)

15m47.980995715s ago: executing program 4 (id=1551):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
clock_gettime(0x3, &(0x7f0000000040))
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x8, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
ptrace(0x10, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x24040000)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
read$FUSE(r0, &(0x7f0000006040)={0x2020}, 0x2020)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)

15m44.287921019s ago: executing program 4 (id=1559):
r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00')
pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x72, &(0x7f00000000c0)="efee275551693b4572a93e0ff710b95916aab463fdf722aa4b80efa15aaf776c42872e040dbbe341db70a7b76166614c6fc632a7c4ad989791ac9d505c300c420bdbe4a26b8b39a25afee85a13350789ec987d441fabd0c48f3e806139e2d997288f13913b89deab1f7a0a8c63711b790ada", 0x12, 0x0, &(0x7f0000000140)="174e95f6452fbbc694dd1cbf64b898b48b46"})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc))
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x119)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
read$FUSE(r3, &(0x7f00000024c0)={0x2020}, 0xfffffec1)
clock_gettime(0x0, &(0x7f0000000040))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000380)={0x3, 0x0, [{0x6400000, 0x3, 0x1, [0x100, 0x200, 0x1, 0xfffffff8, 0x7, 0xfffffff3, 0x80, 0x9]}, {0x80000001, 0x4, 0x6, [0x3, 0x1, 0xee7, 0x6, 0x3, 0x1, 0x172]}, {0x0, 0x200, 0x7, [0xb, 0x8, 0x1, 0x82, 0x6, 0x5a3, 0x10000, 0x8]}]})
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="250429bd7000fbdbdf25020000000800010001000000"], 0x1c}}, 0x8054)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8100)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000200)={0x0, 0x3, 0x2, 0x1, 0xb})
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r9, r10, 0x0, 0x20000023896)

15m28.902971983s ago: executing program 32 (id=1559):
r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00')
pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x72, &(0x7f00000000c0)="efee275551693b4572a93e0ff710b95916aab463fdf722aa4b80efa15aaf776c42872e040dbbe341db70a7b76166614c6fc632a7c4ad989791ac9d505c300c420bdbe4a26b8b39a25afee85a13350789ec987d441fabd0c48f3e806139e2d997288f13913b89deab1f7a0a8c63711b790ada", 0x12, 0x0, &(0x7f0000000140)="174e95f6452fbbc694dd1cbf64b898b48b46"})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc))
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x119)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
read$FUSE(r3, &(0x7f00000024c0)={0x2020}, 0xfffffec1)
clock_gettime(0x0, &(0x7f0000000040))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000380)={0x3, 0x0, [{0x6400000, 0x3, 0x1, [0x100, 0x200, 0x1, 0xfffffff8, 0x7, 0xfffffff3, 0x80, 0x9]}, {0x80000001, 0x4, 0x6, [0x3, 0x1, 0xee7, 0x6, 0x3, 0x1, 0x172]}, {0x0, 0x200, 0x7, [0xb, 0x8, 0x1, 0x82, 0x6, 0x5a3, 0x10000, 0x8]}]})
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="250429bd7000fbdbdf25020000000800010001000000"], 0x1c}}, 0x8054)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8100)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000200)={0x0, 0x3, 0x2, 0x1, 0xb})
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r9, r10, 0x0, 0x20000023896)

2m36.351199604s ago: executing program 2 (id=3582):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002bbd0500dbdbdf25020000dd000000010c000000000000000000000000001205b6f70656108350"], 0x24}}, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
writev(r4, &(0x7f00000003c0), 0x100000000000022d)

2m34.571913782s ago: executing program 2 (id=3588):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, 0x0, 0x0)

2m33.540686933s ago: executing program 2 (id=3590):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00')
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
memfd_secret(0x80000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00')
syz_open_procfs(0x0, &(0x7f0000000280)='timerslack_ns\x00')
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e61, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

2m28.799937563s ago: executing program 2 (id=3600):
io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x345142, 0x0)
mq_open(0x0, 0x42, 0x197, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x804)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000040006c4e674bf45dcddf34dace96c748b21f55a81f5618c38b9e3cf1d22b9f207c0f07d29271f63e26517391369f118cb343132672ea3349fa216e171fafce26ec89840e642d3e576245fdf24bc947ef437cb2404106bb10902f33b23e139a236e1749e3bdf52fcd0f2f1644f5f3578d97fd169226cd721d2f0b0ed50b6f58"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r5 = eventfd2(0xeffffffb, 0x80800)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001340)={0x8, 0x0, 0x0, r5, 0xa})

2m26.86528585s ago: executing program 2 (id=3606):
syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_procfs(0x0, 0x0)
syz_ublk_setup_io_uring(0x6548, 0x0, 0x0, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, 0x44}}, 0x20048004)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0xa, 0x78, 0x28e, 0x0, 0x66b8, 0x46ed0086})

2m25.342181675s ago: executing program 2 (id=3612):
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0xfffffffffffffde7)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000002400), 0x0, 0x40000002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xf401)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1})
r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r5, 0x52b242d)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3})
r6 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000080)={0x0})

2m8.95173737s ago: executing program 33 (id=3612):
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0xfffffffffffffde7)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000002400), 0x0, 0x40000002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xf401)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1})
r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r5, 0x52b242d)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3})
r6 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000080)={0x0})

22.009068168s ago: executing program 6 (id=3902):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711", 0x11}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8b", 0x5b}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bb"], 0x1a0}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

15.343631039s ago: executing program 1 (id=3914):
io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x345142, 0x0)
mq_open(0x0, 0x42, 0x197, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x804)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000040006c4e674bf45dcddf34dace96c748b21f55a81f5618c38b9e3cf1d22b9f207c0f07d29271f63e26517391369f118cb343132672ea3349fa216e171fafce26ec89840e642d3e576245fdf24bc947ef437cb2404106bb10902f33b23e139a236e1749e3bdf52fcd0f2f1644f5f3578d97fd169226cd721d2f0b0ed50b6f58"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r5 = eventfd2(0xeffffffb, 0x80800)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001340)={0x8, 0x0, 0x0, r5, 0xa})

13.400116109s ago: executing program 3 (id=3917):
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62)

13.010018028s ago: executing program 3 (id=3919):
socket(0x840000000002, 0x3, 0xff)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, 0x0)
syz_open_dev$loop(&(0x7f0000000300), 0x65, 0x1c7c01)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r0=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000002980)={0x0, 0x0, r0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x0, 0x82, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000340)={'veth0_to_batadv\x00', {0x2, 0x4e25, @multicast1}})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000480)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000002c0)})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r6, 0x0, 0x8, 0x39, &(0x7f0000000080)="0ec9e176747872e1abdea82c29b678fef5304ae7f3cdc74f83d002004e00495286330cadac900d633fa06e3739f6b0b675634ac5babe67cfd9", 0x4})
add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(0x0, &(0x7f0000001180)={'syz', 0x3}, &(0x7f0000001240), 0x0, 0xfffffffffffffffe)

12.229781315s ago: executing program 0 (id=3920):
setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000280)=0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x1, 0x2090)
r3 = creat(0x0, 0x102)
sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x84)
syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffff00000000bbbbbbbbbb86dd6745201037ff0000000000000000000022ffac14d8e886004d14aaff02000000000000000000018b00907876160002000000000000000600"], 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b<B\xc3k\xcd\x01\xe4\x05\n!\x02Y\xc7`ooveu`z\xb9\xf5r\xc0c\x95\xcbQbj5\xb1\x8f\xb9J\xa9#\x13\x92\x05H\x91\xa5\xdfxM\nD\xc70\xa11B\xf1\xab\xccw\x17\xbf\xc8W\xec\xb88\xc9\x1b*h\xc3c\x89n\x89ic\xfd\x9c\xfa~\xb5$VG\x85\xc2\x86\x89}*\x99\xda\x94\xba)\xb9b\xeb\xe9\x0f{V%TD\xbc\xee\x96C\x89No\xc9\n\x91\xe0\xfcqE4\x8c', 0x3a, '\x8c\xf0<\x06\xd3=(\xa0\x96k\xd8cf\x92\xd1\xed\xf5\x00\x00\xb5\xff\xd9o\x1c.\xecU \xc8\x12\xacf\x15I)S\xa5\xdb\x8f!\x8aA\xee$\x0e\x16\xf7wL\x9c~8\x10\xd2\nJ,D;Z \x92\xccY\xd7', 0x3a, './cgroup.cpu/cpuset.cpus/file0'}, 0x147)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x84)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc142e000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)

9.268356965s ago: executing program 3 (id=3921):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r2=>0x0], 0x1})
syz_usb_disconnect(0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70000000000002000000", @ANYRES32=r5, @ANYBLOB="0800b9003a09000008009f000d000000080026006c0900"], 0x34}, 0x1, 0x0, 0x0, 0x4000019}, 0x0)
r6 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003440000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r7, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff})
ftruncate(0xffffffffffffffff, 0x5)
ftruncate(0xffffffffffffffff, 0x51a9497)
r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000280)=0x152)

8.391528109s ago: executing program 1 (id=3922):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_io_uring_setup(0x3b5e, &(0x7f0000000200)={0x0, 0xcb14, 0x2, 0x0, 0x4001bf}, &(0x7f00000000c0), &(0x7f0000000080), 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/113, 0x71}], 0x1)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

8.347258444s ago: executing program 6 (id=3923):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711", 0x11}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8b", 0x5b}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bb"], 0x1a0}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.291618428s ago: executing program 5 (id=3924):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe45e8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
getrlimit(0x1, &(0x7f0000000040))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, r5, 0x301, 0x0, 0x0, {0x34}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r6, 0x7ffffff4, 0x4, 0xb, 0x1fd, 0x1})

8.263760477s ago: executing program 0 (id=3925):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
sendto$inet(0xffffffffffffffff, &(0x7f00000005c0)="4cff", 0x2, 0x40080c0, 0x0, 0x0)

7.486892682s ago: executing program 0 (id=3926):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000004c0)=[@enter_looper], 0x0, 0x0, 0x0})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000", 0x1a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x3f}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000780)={0x14, &(0x7f0000000600)={0x20, 0xd, 0xbe, {0xbe, 0x21, "028569dd46c812763b4a25348cd6f400fbe5c574b52cb4b355067d9068dc4108e11f59c96df0fe238aacca4e74f0b6191d90266600b08f95e1ccf1f0aee95f89194966efd32c85d4337887df2e21412983488d9697af042e399d198ccbf88562c0ab95b1239d73e16b357a434f1192d14ffcd5f674aad77ae454871321cd43805bb48c664d5b44274d45ee6436e00968de11eb17bd3a85a9a65aa01f786ef2c2d9aa7077148f64ce8448fab8623bc46c15b92e88a0ec4a5b8bd367e1"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000007c0)={0x20, 0x13, 0x70, "e7d85315e2a9f2475d887034cf61d12bf156b6edfa4df7aeb9025dc3cc2b6ae33c626da84296cefc5dc83cd6542b5b07e35e19c01dcfbfd224fd51604c286fdc73222ddff8cd70e27bd42a4e3f5a97a84d278131eb7740f1b540d568f784e8e7abc1a800382fe79b3000c08074d34023"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xa4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000900)={0x20, 0x80, 0x1c, {0x7, 0x7, 0x8, 0xed90, 0xa, 0xfff9, 0x2bce, 0x3, 0xfce2, 0xfff9, 0xc2f5, 0x1}}, &(0x7f0000000940)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000980)={0x20, 0x83, 0x2}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000a80)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.485479241s ago: executing program 1 (id=3927):
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x100)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

7.168435389s ago: executing program 5 (id=3928):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000400), &(0x7f0000000440)=0x30)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000480)={<r6=>0x0, @loopback, @local}, &(0x7f0000000640)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x1, 0x5, 0xfffffffa, 0x2810, r0, 0x4, '\x00', r6, r0, 0x3, 0x4, 0x1, 0xf}, 0x50)
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)
preadv2(r1, &(0x7f0000000a80)=[{&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/22, 0x16}, {&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f0000000a00)=""/99, 0x63}], 0x5, 0x17c, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x120c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11e4, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}, {0x11d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x11d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "a6818dec6866d5d20755ed47d90a3aa3299533f17e53e9c5024fd930d72aefae14544fdbfd89c5a1b76558e77543ccf8e1c549586be3394d69b1b025985f9358d6c4ca93380ad2e826f084614ed7957a833c53f839cc2ea8f8"}, @NFTA_DATA_VALUE={0xc8, 0x1, "68ce17851c649c62bb2406589b68b0c4add30d20ca2f621fcc95987438a0fa95a7d643cc6bf22a121aad590fffe9e8a0de2b7d36b8d417c71f9d31cd552c2db369b586c771513b5e2a561d87f1195d82935125f4b77811a348a4ac4c995e22a85889550f5bf051b3ef2eaa49ad2cac1d83f1a596c7d0c0cb5205c1a2542f2c71e0a6a0c3eab19d11b0ae53e6b6c4f2d5ededc214fd6fba997ffa0cdbebb2d6b766c9096b8690e52acd3267cf007ac7a56cada207ab713c77a377941b13889b7ecd5a3afe"}, @NFTA_DATA_VALUE={0x48, 0x1, "355c8f88591625bb723093a813380c98acb3bb7b85a6478feb902ae85fd6e4b1a292398667beb98641940545b19867cd423698d26a5a189bdb95a87b94194d80de339abf"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1278}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000000)='minix\x00', 0x2808404, 0x0)

7.147971369s ago: executing program 6 (id=3929):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b7", 0x10}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb", 0x45}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bb"], 0x1a0}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.903151409s ago: executing program 3 (id=3930):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0xc, "1542", 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_procfs(0x0, 0x0)
syz_ublk_setup_io_uring(0x6548, 0x0, 0x0, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xf0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, 0x44}}, 0x20048004)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0xa, 0x78, 0x28e, 0x0, 0x66b8, 0x46ed0086})

4.744774705s ago: executing program 5 (id=3931):
r0 = syz_open_dev$video4linux(0x0, 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000001600)={0x0, {0x3, 0x7f}})
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0)
syz_create_resource$binfmt(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0)
ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0x7fffffffffffffff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0xcb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x80000080, 0x22}, 0x0, 0x40, 0xa, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0)
mknod$loop(0x0, 0x8fff, 0x0)

4.624553073s ago: executing program 6 (id=3932):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x4788, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0)

4.471191763s ago: executing program 1 (id=3933):
io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x345142, 0x0)
mq_open(0x0, 0x42, 0x197, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x804)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000040006c4e674bf45dcddf34dace96c748b21f55a81f5618c38b9e3cf1d22b9f207c0f07d29271f63e26517391369f118cb343132672ea3349fa216e171fafce26ec89840e642d3e576245fdf24bc947ef437cb2404106bb10902f33b23e139a236e1749e3bdf52fcd0f2f1644f5f3578d97fd169226cd721d2f0b0ed50b6f58"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r5 = eventfd2(0xeffffffb, 0x80800)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001340)={0x8, 0x0, 0x0, r5, 0xa})

2.559108039s ago: executing program 5 (id=3934):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711", 0x11}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8b", 0x5b}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bb"], 0x1a0}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.410790313s ago: executing program 3 (id=3935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xf5b, 0xc2, 0x4})
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
socket(0x11, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={<r2=>0xffffffffffffffff})
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
accept4$alg(r3, 0x0, 0x0, 0x0)
recvmsg$unix(r2, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0)

2.362876309s ago: executing program 6 (id=3936):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
sendto$inet(r0, &(0x7f00000005c0)="4cff", 0x2, 0x40080c0, 0x0, 0x0)

1.726983937s ago: executing program 0 (id=3937):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, 0x0, 0x0)

1.565301636s ago: executing program 6 (id=3938):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711", 0x11}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb", 0x45}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bb"], 0x1a0}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.530383728s ago: executing program 3 (id=3939):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902340001000000000904fb00026c5d650009050402100000fa0009058202"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="001106"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x24, &(0x7f0000000600)={0x20, 0xd, 0x2, "8703"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.005037799s ago: executing program 5 (id=3940):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)

343.746162ms ago: executing program 0 (id=3941):
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x100)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

269.621711ms ago: executing program 1 (id=3942):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
r1 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x10, @loopback, 0x2}, 0x1c, 0x0}}], 0x2, 0x240c089d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0)

205.153016ms ago: executing program 5 (id=3943):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b7", 0x10}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb", 0x45}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bb"], 0x1a0}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.912703ms ago: executing program 0 (id=3944):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0)
close(r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f00000001c0)=0xfffffff7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl')
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x6dd, 0x10, 0x0, 0x2, 0x100000, 0x20, 0xffffffff, 0x20, 0xe, &(0x7f00000005c0)=[0x4], 0x1, 0x0})
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c00000000000000000000000000020000000400"/170], 0xfc}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a0000000210001000400000000000000fc0200000000000000000000b239c204ff02000000000000000000000000000100000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc0000000000000000000000000000017f000019000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c040000000000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_open_dev$vcsu(&(0x7f0000000340), 0x40, 0x40)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8a<Z\x02\xfc\xb6E\x8c&\f\xb4)l\x93\xb8\xb1\xcfK\x0e\xben \xc3\xc5xH\xa5\t\xcc\"\xcd\xe2\xbb>S\x1bZ\xa1\xba\xb4E\xbc', r6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')

0s ago: executing program 1 (id=3945):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0xc, "1542", 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_procfs(0x0, 0x0)
syz_ublk_setup_io_uring(0x6548, 0x0, 0x0, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
open_by_handle_at(r0, &(0x7f0000000000)=ANY=[], 0xf0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, 0x44}}, 0x20048004)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0xa, 0x78, 0x28e, 0x0, 0x66b8, 0x46ed0086})

kernel console output (not intermixed with test programs):

 nlmsg_type=48427 sclass=netlink_route_socket pid=18795 comm=syz.1.3497
[ 1335.459110][ T5804] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1335.651160][ T5804] usb 4-1: device descriptor read/64, error -71
[ 1335.791152][ T5804] usb usb4-port1: attempt power cycle
[ 1335.819564][T18800] netlink: 'syz.0.3504': attribute type 3 has an invalid length.
[ 1336.164107][ T5804] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1336.199748][ T5804] usb 4-1: device descriptor read/8, error -71
[ 1336.260797][    T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1336.445114][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1336.464716][ T5804] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1336.484066][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1336.517736][ T5804] usb 4-1: device descriptor read/8, error -71
[ 1336.525824][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1336.553793][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1336.586266][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1336.602093][   T29] audit: type=1400 audit(1778810498.705:817): avc:  denied  { ioctl } for  pid=18804 comm="syz.5.3506" path="socket:[66923]" dev="sockfs" ino=66923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1336.634233][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.657912][    T9] usb 1-1: config 0 descriptor??
[ 1336.663009][ T5804] usb usb4-port1: unable to enumerate USB device
[ 1337.131391][    T9] usbhid 1-1:0.0: can't add hid device: -71
[ 1337.173344][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1337.285616][T18808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3507'.
[ 1337.320356][    T9] usb 1-1: USB disconnect, device number 61
[ 1337.970857][ T1667] block nbd11: Possible stuck request ffff888028ea7000: control (read@0,1024B). Runtime 1050 seconds
[ 1337.982348][ T1667] block nbd11: Possible stuck request ffff888028ea71c0: control (read@1024,1024B). Runtime 1050 seconds
[ 1337.995060][ T1667] block nbd11: Possible stuck request ffff888028ea7380: control (read@2048,1024B). Runtime 1050 seconds
[ 1338.007882][ T1667] block nbd11: Possible stuck request ffff888028ea7540: control (read@3072,1024B). Runtime 1050 seconds
[ 1338.369538][T18824] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3512'.
[ 1338.576350][   T29] audit: type=1400 audit(1778810500.408:818): avc:  denied  { ioctl } for  pid=18819 comm="syz.3.3511" path="socket:[67009]" dev="sockfs" ino=67009 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1340.182318][ T5622] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[ 1340.217112][T18846] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1340.664320][ T5622] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1340.699613][ T1667] block nbd10: Possible stuck request ffff888028e47000: control (read@0,1024B). Runtime 1050 seconds
[ 1340.711558][ T1667] block nbd10: Possible stuck request ffff888028e471c0: control (read@1024,1024B). Runtime 1050 seconds
[ 1340.720952][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1340.723661][ T1667] block nbd10: Possible stuck request ffff888028e47380: control (read@2048,1024B). Runtime 1050 seconds
[ 1340.743456][ T1667] block nbd10: Possible stuck request ffff888028e47540: control (read@3072,1024B). Runtime 1050 seconds
[ 1340.753938][ T5622] usb 1-1: Product: syz
[ 1340.784157][ T5622] usb 1-1: Manufacturer: syz
[ 1340.805695][ T5622] usb 1-1: SerialNumber: syz
[ 1341.808614][ T5622] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1341.869415][ T5622] usb 1-1: USB disconnect, device number 62
[ 1341.902177][ T5622] usblp0: removed
[ 1342.062733][   T25] block nbd2: Possible stuck request ffff888028b77000: control (read@0,1024B). Runtime 1140 seconds
[ 1342.074869][   T25] block nbd2: Possible stuck request ffff888028b771c0: control (read@1024,1024B). Runtime 1140 seconds
[ 1342.087096][   T25] block nbd2: Possible stuck request ffff888028b77380: control (read@2048,1024B). Runtime 1140 seconds
[ 1342.099161][   T25] block nbd2: Possible stuck request ffff888028b77540: control (read@3072,1024B). Runtime 1140 seconds
[ 1342.594808][    T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1342.783154][    T9] usb 2-1: device descriptor read/64, error -71
[ 1343.049257][    T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1343.237892][T18838] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 1343.364692][T18879] netlink: 'syz.0.3527': attribute type 3 has an invalid length.
[ 1343.378658][T18879] netlink: 4556 bytes leftover after parsing attributes in process `syz.0.3527'.
[ 1343.606068][    T9] usb 2-1: device descriptor read/64, error -71
[ 1343.718645][T18838] usb 3-1: Using ep0 maxpacket: 16
[ 1343.731700][    T9] usb usb2-port1: attempt power cycle
[ 1343.732936][T18838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1343.773319][T18838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1343.785926][T18838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1343.805500][T18838] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1343.815865][T18838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.882883][T18838] usb 3-1: config 0 descriptor??
[ 1344.038210][T18883] MINIX-fs: unable to read superblock
[ 1344.325604][    T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1345.087032][    T9] usb 2-1: device descriptor read/8, error -71
[ 1345.093386][T18838] usbhid 3-1:0.0: can't add hid device: -71
[ 1345.126347][T18838] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1345.192040][T18838] usb 3-1: USB disconnect, device number 89
[ 1345.515054][   T25] block nbd7: Possible stuck request ffff888028d00000: control (read@0,1024B). Runtime 1110 seconds
[ 1345.527109][   T25] block nbd7: Possible stuck request ffff888028d001c0: control (read@1024,1024B). Runtime 1110 seconds
[ 1345.539360][   T25] block nbd7: Possible stuck request ffff888028d00380: control (read@2048,1024B). Runtime 1110 seconds
[ 1345.555435][   T25] block nbd7: Possible stuck request ffff888028d00540: control (read@3072,1024B). Runtime 1110 seconds
[ 1345.622492][T18897] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1345.834275][T18890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3530'.
[ 1347.405882][T18922] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3540'.
[ 1347.835746][   T25] block nbd3: Possible stuck request ffff888028be5080: control (read@0,1024B). Runtime 1140 seconds
[ 1347.847752][   T25] block nbd3: Possible stuck request ffff888028be5240: control (read@1024,1024B). Runtime 1140 seconds
[ 1347.860092][   T25] block nbd3: Possible stuck request ffff888028be5400: control (read@2048,1024B). Runtime 1140 seconds
[ 1347.872230][   T25] block nbd3: Possible stuck request ffff888028be55c0: control (read@3072,1024B). Runtime 1140 seconds
[ 1348.188009][T18922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3540'.
[ 1348.401349][ T5622] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1348.589839][T18934] netlink: 'syz.2.3543': attribute type 1 has an invalid length.
[ 1348.598407][T18934] netlink: 760 bytes leftover after parsing attributes in process `syz.2.3543'.
[ 1348.708819][ T5622] usb 1-1: device descriptor read/64, error -71
[ 1348.783519][    T9] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[ 1348.970592][    T9] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1348.971823][ T5622] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1349.104063][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1349.125777][    T9] usb 4-1: Product: syz
[ 1349.130007][    T9] usb 4-1: Manufacturer: syz
[ 1349.134872][    T9] usb 4-1: SerialNumber: syz
[ 1349.158170][ T5622] usb 1-1: device descriptor read/64, error -71
[ 1349.275055][ T5802] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1349.286363][ T5622] usb usb1-port1: attempt power cycle
[ 1349.398142][    T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1349.444991][    T9] usb 4-1: USB disconnect, device number 83
[ 1349.451189][ T5802] usb 6-1: Using ep0 maxpacket: 16
[ 1349.472639][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1349.505513][T18949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48427 sclass=netlink_route_socket pid=18949 comm=syz.1.3546
[ 1349.506577][    T9] usblp0: removed
[ 1349.528786][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1349.563279][ T5802] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1349.598641][ T5802] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1349.627639][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1349.649047][ T5622] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1349.649858][ T5802] usb 6-1: config 0 descriptor??
[ 1349.692848][ T5622] usb 1-1: device descriptor read/8, error -71
[ 1349.901813][ T5802] usbhid 6-1:0.0: can't add hid device: -71
[ 1349.916638][ T5802] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1349.942681][ T5802] usb 6-1: USB disconnect, device number 53
[ 1349.958930][ T5622] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1349.992846][ T5622] usb 1-1: device descriptor read/8, error -71
[ 1350.119878][ T5622] usb usb1-port1: unable to enumerate USB device
[ 1350.256192][T18956] MINIX-fs: unable to read superblock
[ 1350.373607][T12045] block nbd4: Possible stuck request ffff888028c55080: control (read@0,1024B). Runtime 1140 seconds
[ 1350.386059][T12045] block nbd4: Possible stuck request ffff888028c55240: control (read@1024,1024B). Runtime 1140 seconds
[ 1350.406977][   T25] block nbd9: Possible stuck request ffff888028dde000: control (read@0,1024B). Runtime 1080 seconds
[ 1350.420451][T12045] block nbd4: Possible stuck request ffff888028c55400: control (read@2048,1024B). Runtime 1140 seconds
[ 1350.434436][   T25] block nbd9: Possible stuck request ffff888028dde1c0: control (read@1024,1024B). Runtime 1080 seconds
[ 1350.452327][ T1696] block nbd0: Possible stuck request ffff888028ad7000: control (read@0,1024B). Runtime 1230 seconds
[ 1350.467908][ T1696] block nbd0: Possible stuck request ffff888028ad71c0: control (read@1024,1024B). Runtime 1230 seconds
[ 1350.481317][T12045] block nbd4: Possible stuck request ffff888028c555c0: control (read@3072,1024B). Runtime 1140 seconds
[ 1350.494871][   T25] block nbd9: Possible stuck request ffff888028dde380: control (read@2048,1024B). Runtime 1080 seconds
[ 1350.515029][ T1696] block nbd0: Possible stuck request ffff888028ad7380: control (read@2048,1024B). Runtime 1230 seconds
[ 1350.528793][   T25] block nbd9: Possible stuck request ffff888028dde540: control (read@3072,1024B). Runtime 1080 seconds
[ 1350.546780][ T1696] block nbd0: Possible stuck request ffff888028ad7540: control (read@3072,1024B). Runtime 1230 seconds
[ 1351.639213][ T1696] block nbd1: Possible stuck request ffff888028b15080: control (read@0,1024B). Runtime 1170 seconds
[ 1351.651227][ T1696] block nbd1: Possible stuck request ffff888028b15240: control (read@1024,1024B). Runtime 1170 seconds
[ 1351.663100][ T1696] block nbd1: Possible stuck request ffff888028b15400: control (read@2048,1024B). Runtime 1170 seconds
[ 1351.674733][ T1696] block nbd1: Possible stuck request ffff888028b155c0: control (read@3072,1024B). Runtime 1170 seconds
[ 1352.255921][T18968] Cannot find set identified by id 0 to match
[ 1352.908896][T18959] nbd49: detected capacity change from 0 to 63
[ 1353.128393][T18982] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1353.143160][ T5802] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1353.279425][T17132] block nbd49: Receive control failed (result -32)
[ 1353.375013][ T5802] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1353.677135][ T5802] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1353.841777][ T5802] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1353.872133][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1353.926042][ T5802] usb 6-1: Product: syz
[ 1353.963567][ T5802] usb 6-1: Manufacturer: syz
[ 1353.999436][T18990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3561'.
[ 1354.088173][ T5802] usb 6-1: SerialNumber: syz
[ 1354.363114][ T5802] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1354.414785][ T5736] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1354.571512][ T5802] usb 6-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1354.594415][ T5802] usb 6-1: found format II with max.bitrate = 4, frame size=7372
[ 1354.743932][T19000] warn_alloc: 1 callbacks suppressed
[ 1354.743962][T19000] syz.2.3565: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1354.765367][T19000] CPU: 1 UID: 0 PID: 19000 Comm: syz.2.3565 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1354.765411][T19000] Tainted: [L]=SOFTLOCKUP
[ 1354.765420][T19000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1354.765435][T19000] Call Trace:
[ 1354.765444][T19000]  <TASK>
[ 1354.765453][T19000]  dump_stack_lvl+0x100/0x190
[ 1354.765483][T19000]  warn_alloc.cold+0x95/0x1c1
[ 1354.765509][T19000]  ? __pfx_warn_alloc+0x10/0x10
[ 1354.765544][T19000]  ? __lock_acquire+0x4a5/0x2630
[ 1354.765567][T19000]  ? avc_has_extended_perms+0x33a/0x1080
[ 1354.765593][T19000]  __vmalloc_node_range_noprof+0x136c/0x1630
[ 1354.765623][T19000]  ? rcu_is_watching+0x12/0xc0
[ 1354.765658][T19000]  ? trace_contention_end+0x122/0x170
[ 1354.765687][T19000]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1354.765738][T19000]  ? dvb_dvr_do_ioctl+0x7e/0x270
[ 1354.765776][T19000]  ? find_held_lock+0x2b/0x80
[ 1354.765802][T19000]  ? rcu_is_watching+0x12/0xc0
[ 1354.765840][T19000]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1354.765870][T19000]  ? __pfx___mutex_lock+0x10/0x10
[ 1354.765898][T19000]  ? irqentry_exit+0x24d/0x7e0
[ 1354.765936][T19000]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1354.765968][T19000]  __vmalloc_node_noprof+0xad/0xf0
[ 1354.765996][T19000]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1354.766028][T19000]  dvb_dvr_do_ioctl+0x15d/0x270
[ 1354.766061][T19000]  dvb_usercopy+0x167/0x340
[ 1354.766092][T19000]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[ 1354.766120][T19000]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1354.766155][T19000]  ? selinux_file_ioctl+0x13b/0x290
[ 1354.766187][T19000]  ? selinux_file_ioctl+0xb6/0x290
[ 1354.766220][T19000]  dvb_dvr_ioctl+0x29/0x40
[ 1354.766251][T19000]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[ 1354.766285][T19000]  __x64_sys_ioctl+0x18e/0x210
[ 1354.766338][T19000]  do_syscall_64+0x10b/0xf80
[ 1354.766377][T19000]  ? clear_bhb_loop+0x40/0x90
[ 1354.766409][T19000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1354.766439][T19000] RIP: 0033:0x7fe5b2b9ce59
[ 1354.766461][T19000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1354.766480][T19000] RSP: 002b:00007fe5b3aa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1354.766498][T19000] RAX: ffffffffffffffda RBX: 00007fe5b2e16090 RCX: 00007fe5b2b9ce59
[ 1354.766510][T19000] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007
[ 1354.766525][T19000] RBP: 00007fe5b2c32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1354.766538][T19000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1354.766548][T19000] R13: 00007fe5b2e16128 R14: 00007fe5b2e16090 R15: 00007ffc562ce378
[ 1354.766570][T19000]  </TASK>
[ 1354.766659][T19000] Mem-Info:
[ 1355.001806][ T5802] usb 6-1: invalid uac2 rates
[ 1355.007248][T19000] active_anon:32963 inactive_anon:0 isolated_anon:0
[ 1355.007248][T19000]  active_file:21883 inactive_file:41194 isolated_file:0
[ 1355.007248][T19000]  unevictable:769 dirty:595 writeback:0
[ 1355.007248][T19000]  slab_reclaimable:13117 slab_unreclaimable:125802
[ 1355.007248][T19000]  mapped:34905 shmem:17740 pagetables:1511
[ 1355.007248][T19000]  sec_pagetables:0 bounce:0
[ 1355.007248][T19000]  kernel_misc_reclaimable:0
[ 1355.007248][T19000]  free:1240063 free_pcp:6125 free_cma:0
[ 1355.031076][ T5802] usb 6-1: invalid uac2 rates
[ 1355.032383][T19000] Node 0 active_anon:131852kB inactive_anon:0kB active_file:87472kB inactive_file:164576kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:139612kB dirty:2380kB writeback:0kB shmem:69424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15604kB pagetables:5916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1355.051893][ T5802] usb 6-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1355.051924][ T5802] usb 6-1: found format II with max.bitrate = 4, frame size=7372
[ 1355.105372][ T1667] block nbd8: Possible stuck request ffff888028d85080: control (read@0,1024B). Runtime 1110 seconds
[ 1355.106091][T19000] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1355.144902][ T1667] block nbd8: Possible stuck request ffff888028d85240: control (read@1024,1024B). Runtime 1110 seconds
[ 1355.152102][T19000] Node 0 
[ 1355.159647][ T1667] block nbd8: Possible stuck request ffff888028d85400: control (read@2048,1024B). Runtime 1110 seconds
[ 1355.159680][ T1667] block nbd8: Possible stuck request ffff888028d855c0: control (read@3072,1024B). Runtime 1110 seconds
[ 1355.171289][T19000] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1355.247109][ T5802] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1355.275638][T19000] lowmem_reserve[]: 0 2477 2478 2478 2478
[ 1355.291154][T19000] Node 0 DMA32 free:992096kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:131852kB inactive_anon:0kB active_file:87472kB inactive_file:164576kB unevictable:1540kB writepending:2380kB zspages:0kB present:3129332kB managed:2537060kB mlocked:4kB bounce:0kB free_pcp:22160kB local_pcp:9804kB free_cma:0kB
[ 1355.326589][T19000] lowmem_reserve[]: 0 0 1 1 1
[ 1355.331704][T19000] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1088kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1355.364005][T19000] lowmem_reserve[]: 0 0 0 0 0
[ 1355.368876][T19000] Node 1 Normal free:3952924kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB
[ 1355.375603][ T5736] usb 2-1: Using ep0 maxpacket: 16
[ 1355.401020][T19000] lowmem_reserve[]: 0 0 0 0 0
[ 1355.401074][T19000] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1355.401217][T19000] Node 0 DMA32: 5948*4kB (UME) 7318*8kB (UME) 4868*16kB (UME) 1610*32kB (UME) 884*64kB (UME) 710*128kB (UME) 368*256kB (UME) 188*512kB (UME) 28*1024kB (UM) 6*2048kB (UME) 98*4096kB (M) = 992032kB
[ 1355.401419][T19000] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1355.401540][T19000] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 4*16kB (UM) 6*32kB (UM) 6*64kB (U) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (M) 963*4096kB (UM) = 3952924kB
[ 1355.401733][T19000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1355.401754][T19000] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1355.401772][T19000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1355.401790][T19000] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1355.401809][T19000] 80828 total pagecache pages
[ 1355.401819][T19000] 0 pages in swap cache
[ 1355.401827][T19000] Free swap  = 124996kB
[ 1355.401836][T19000] Total swap = 124996kB
[ 1355.401846][T19000] 2097051 pages RAM
[ 1355.401855][T19000] 0 pages HighMem/MovableOnly
[ 1355.401863][T19000] 430899 pages reserved
[ 1355.401872][T19000] 0 pages cma reserved
[ 1355.555935][ T5802] usb 6-1: USB disconnect, device number 54
[ 1355.677704][ T5622] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 1355.845082][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1355.857326][ T5622] usb 1-1: device descriptor read/64, error -71
[ 1355.865190][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1355.876642][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1355.891104][ T5736] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1355.901153][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1356.114355][ T5622] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1356.229445][ T5736] usb 2-1: config 0 descriptor??
[ 1356.360752][ T5622] usb 1-1: device descriptor read/64, error -71
[ 1356.569580][ T5622] usb usb1-port1: attempt power cycle
[ 1356.892526][ T5736] usbhid 2-1:0.0: can't add hid device: -71
[ 1356.913394][ T5736] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1357.101918][ T5736] usb 2-1: USB disconnect, device number 85
[ 1357.118306][ T5622] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1357.184897][ T5622] usb 1-1: device descriptor read/8, error -71
[ 1357.461098][ T5622] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1357.504155][ T5622] usb 1-1: device descriptor read/8, error -71
[ 1357.622801][ T5622] usb usb1-port1: unable to enumerate USB device
[ 1357.752913][T19026] netlink: 'syz.5.3575': attribute type 3 has an invalid length.
[ 1358.072130][T19028] netlink: 'syz.0.3576': attribute type 1 has an invalid length.
[ 1358.290203][T19035] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1359.709624][ T5622] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1359.884834][T19051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48427 sclass=netlink_route_socket pid=19051 comm=syz.2.3582
[ 1360.199959][ T5622] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1360.225422][ T5622] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1360.255573][ T5622] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1360.265586][ T5622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1360.278790][ T5622] usb 6-1: Product: syz
[ 1360.283840][ T5622] usb 6-1: Manufacturer: syz
[ 1360.289197][ T5622] usb 6-1: SerialNumber: syz
[ 1360.445003][ T5714] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1360.525511][ T5622] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1360.673419][ T5714] usb 2-1: device descriptor read/64, error -71
[ 1361.484805][ T5622] usb 6-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1361.512847][ T5622] usb 6-1: found format II with max.bitrate = 4, frame size=7372
[ 1361.862750][ T5714] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1362.247911][T18614] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 1362.301497][ T5622] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[ 1362.321906][ T5714] usb 2-1: device descriptor read/64, error -71
[ 1362.394744][ T5622] usb 6-1: USB disconnect, device number 55
[ 1362.428751][T18614] usb 3-1: Using ep0 maxpacket: 16
[ 1362.435802][T18614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1362.448224][ T5714] usb usb2-port1: attempt power cycle
[ 1362.465022][T18614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1362.485158][T18614] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1362.512846][T18614] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1362.539783][T18614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1362.573634][T18614] usb 3-1: config 0 descriptor??
[ 1362.853683][ T5714] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1364.781670][T19081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1364.790628][T19081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1364.890478][ T5714] usb 2-1: device descriptor read/8, error -71
[ 1364.897694][T18614] usbhid 3-1:0.0: can't add hid device: -71
[ 1364.901127][ T1696] block nbd5: Possible stuck request ffff888028c7e000: control (read@0,1024B). Runtime 1140 seconds
[ 1364.903728][T18614] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1364.906306][T18614] usb 3-1: USB disconnect, device number 90
[ 1364.917578][ T1696] block nbd5: Possible stuck request ffff888028c7e1c0: control (read@1024,1024B). Runtime 1140 seconds
[ 1364.942164][ T1696] block nbd5: Possible stuck request ffff888028c7e380: control (read@2048,1024B). Runtime 1140 seconds
[ 1364.956262][ T1696] block nbd5: Possible stuck request ffff888028c7e540: control (read@3072,1024B). Runtime 1140 seconds
[ 1365.421227][ T5714] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1365.487151][ T5714] usb 2-1: device descriptor read/8, error -71
[ 1365.675856][ T5714] usb usb2-port1: unable to enumerate USB device
[ 1366.800206][ T1667] block nbd6: Possible stuck request ffff888028cde000: control (read@0,1024B). Runtime 1140 seconds
[ 1366.801178][T19088] nbd50: detected capacity change from 0 to 63
[ 1366.820525][ T1667] block nbd6: Possible stuck request ffff888028cde1c0: control (read@1024,1024B). Runtime 1140 seconds
[ 1366.833136][ T1667] block nbd6: Possible stuck request ffff888028cde380: control (read@2048,1024B). Runtime 1140 seconds
[ 1366.845565][ T1667] block nbd6: Possible stuck request ffff888028cde540: control (read@3072,1024B). Runtime 1140 seconds
[ 1367.179978][T17132] block nbd50: Receive control failed (result -32)
[ 1367.598379][T19112] Cannot find set identified by id 0 to match
[ 1368.611631][T19122] netlink: 'syz.0.3605': attribute type 3 has an invalid length.
[ 1368.686129][T19124] netlink: 4556 bytes leftover after parsing attributes in process `syz.0.3605'.
[ 1369.000888][T18614] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1369.406066][T18614] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1369.503180][T18614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1369.591458][T18614] usb 2-1: Product: syz
[ 1369.629177][T18614] usb 2-1: Manufacturer: syz
[ 1369.655031][T18614] usb 2-1: SerialNumber: syz
[ 1370.215918][ T1667] block nbd11: Possible stuck request ffff888028ea7000: control (read@0,1024B). Runtime 1080 seconds
[ 1370.226998][ T1667] block nbd11: Possible stuck request ffff888028ea71c0: control (read@1024,1024B). Runtime 1080 seconds
[ 1370.238318][ T1667] block nbd11: Possible stuck request ffff888028ea7380: control (read@2048,1024B). Runtime 1080 seconds
[ 1370.249619][ T1667] block nbd11: Possible stuck request ffff888028ea7540: control (read@3072,1024B). Runtime 1080 seconds
[ 1370.964656][T18614] cdc_ncm 2-1:1.0: failed to get mac address
[ 1371.018615][T18614] cdc_ncm 2-1:1.0: bind() failure
[ 1371.060850][T18614] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1371.088907][T18614] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1371.250433][T19154] MINIX-fs: unable to read superblock
[ 1371.772323][T18614] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[ 1372.202691][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1372.226850][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1372.288115][T18614] usb 2-1: USB disconnect, device number 90
[ 1372.596969][T19160] netlink: 'syz.5.3616': attribute type 3 has an invalid length.
[ 1372.671513][T19162] netlink: 4556 bytes leftover after parsing attributes in process `syz.5.3616'.
[ 1372.836475][ T1667] block nbd10: Possible stuck request ffff888028e47000: control (read@0,1024B). Runtime 1080 seconds
[ 1372.847491][ T1667] block nbd10: Possible stuck request ffff888028e471c0: control (read@1024,1024B). Runtime 1080 seconds
[ 1372.858675][ T1667] block nbd10: Possible stuck request ffff888028e47380: control (read@2048,1024B). Runtime 1080 seconds
[ 1372.870373][ T1667] block nbd10: Possible stuck request ffff888028e47540: control (read@3072,1024B). Runtime 1080 seconds
[ 1374.235458][ T1696] block nbd2: Possible stuck request ffff888028b77000: control (read@0,1024B). Runtime 1170 seconds
[ 1374.247327][ T1696] block nbd2: Possible stuck request ffff888028b771c0: control (read@1024,1024B). Runtime 1170 seconds
[ 1374.260537][ T1696] block nbd2: Possible stuck request ffff888028b77380: control (read@2048,1024B). Runtime 1170 seconds
[ 1374.273629][ T1696] block nbd2: Possible stuck request ffff888028b77540: control (read@3072,1024B). Runtime 1170 seconds
[ 1374.439213][ T5736] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1374.652447][T19189] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3624'.
[ 1374.700069][ T5736] usb 1-1: device descriptor read/64, error -71
[ 1375.016329][ T5736] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1375.149371][T19201] MINIX-fs: unable to read superblock
[ 1375.504147][ T5736] usb 1-1: device descriptor read/64, error -71
[ 1375.710780][  T804] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1376.202844][ T5736] usb usb1-port1: attempt power cycle
[ 1376.699036][ T5736] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1376.721417][  T804] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1376.741963][  T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1376.763474][ T5736] usb 1-1: device descriptor read/8, error -71
[ 1376.772894][  T804] usb 2-1: Product: syz
[ 1376.783276][  T804] usb 2-1: Manufacturer: syz
[ 1376.795234][  T804] usb 2-1: SerialNumber: syz
[ 1377.046489][ T5736] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1377.104824][ T5736] usb 1-1: device descriptor read/8, error -71
[ 1377.228500][ T5736] usb usb1-port1: unable to enumerate USB device
[ 1377.631911][ T1696] block nbd7: Possible stuck request ffff888028d00000: control (read@0,1024B). Runtime 1140 seconds
[ 1377.647102][ T1696] block nbd7: Possible stuck request ffff888028d001c0: control (read@1024,1024B). Runtime 1140 seconds
[ 1377.660439][ T1696] block nbd7: Possible stuck request ffff888028d00380: control (read@2048,1024B). Runtime 1140 seconds
[ 1377.673768][ T1696] block nbd7: Possible stuck request ffff888028d00540: control (read@3072,1024B). Runtime 1140 seconds
[ 1377.918691][  T804] cdc_ncm 2-1:1.0: failed to get mac address
[ 1377.969281][  T804] cdc_ncm 2-1:1.0: bind() failure
[ 1378.019113][  T804] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1378.071244][  T804] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1378.126851][  T804] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[ 1378.208106][  T804] usb 2-1: USB disconnect, device number 91
[ 1379.428726][T19241] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3639'.
[ 1379.805216][T18838] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1380.017560][T18838] usb 4-1: Using ep0 maxpacket: 16
[ 1380.049970][T18838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1380.103013][T18838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1380.146589][T18838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1380.272233][T19254] MINIX-fs: unable to read superblock
[ 1380.429510][   T25] block nbd3: Possible stuck request ffff888028be5080: control (read@0,1024B). Runtime 1170 seconds
[ 1380.445720][   T25] block nbd3: Possible stuck request ffff888028be5240: control (read@1024,1024B). Runtime 1170 seconds
[ 1380.481466][   T25] block nbd3: Possible stuck request ffff888028be5400: control (read@2048,1024B). Runtime 1170 seconds
[ 1380.536336][   T25] block nbd3: Possible stuck request ffff888028be55c0: control (read@3072,1024B). Runtime 1170 seconds
[ 1381.060325][T18838] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1381.251716][T18838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1381.273466][T18838] usb 4-1: config 0 descriptor??
[ 1381.610064][    T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1381.635950][T18838] usbhid 4-1:0.0: can't add hid device: -71
[ 1381.659095][T18838] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1382.069531][T18838] usb 4-1: USB disconnect, device number 84
[ 1382.162734][    T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1382.205991][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1382.234791][T19267] random: crng reseeded on system resumption
[ 1383.011828][    T9] usb 2-1: config 0 descriptor??
[ 1383.120483][ T1696] block nbd9: Possible stuck request ffff888028dde000: control (read@0,1024B). Runtime 1110 seconds
[ 1383.132585][T12045] block nbd4: Possible stuck request ffff888028c55080: control (read@0,1024B). Runtime 1170 seconds
[ 1383.144576][   T25] block nbd0: Possible stuck request ffff888028ad7000: control (read@0,1024B). Runtime 1260 seconds
[ 1383.156165][T12045] block nbd4: Possible stuck request ffff888028c55240: control (read@1024,1024B). Runtime 1170 seconds
[ 1383.168027][ T1696] block nbd9: Possible stuck request ffff888028dde1c0: control (read@1024,1024B). Runtime 1110 seconds
[ 1383.180939][   T25] block nbd0: Possible stuck request ffff888028ad71c0: control (read@1024,1024B). Runtime 1260 seconds
[ 1383.192720][T12045] block nbd4: Possible stuck request ffff888028c55400: control (read@2048,1024B). Runtime 1170 seconds
[ 1383.204547][ T1696] block nbd9: Possible stuck request ffff888028dde380: control (read@2048,1024B). Runtime 1110 seconds
[ 1383.216356][   T25] block nbd0: Possible stuck request ffff888028ad7380: control (read@2048,1024B). Runtime 1260 seconds
[ 1383.228142][T12045] block nbd4: Possible stuck request ffff888028c555c0: control (read@3072,1024B). Runtime 1170 seconds
[ 1383.240008][ T1696] block nbd9: Possible stuck request ffff888028dde540: control (read@3072,1024B). Runtime 1110 seconds
[ 1383.252684][   T25] block nbd0: Possible stuck request ffff888028ad7540: control (read@3072,1024B). Runtime 1260 seconds
[ 1383.829910][   T25] block nbd1: Possible stuck request ffff888028b15080: control (read@0,1024B). Runtime 1200 seconds
[ 1383.842311][   T25] block nbd1: Possible stuck request ffff888028b15240: control (read@1024,1024B). Runtime 1200 seconds
[ 1383.854282][   T25] block nbd1: Possible stuck request ffff888028b15400: control (read@2048,1024B). Runtime 1200 seconds
[ 1383.866328][   T25] block nbd1: Possible stuck request ffff888028b155c0: control (read@3072,1024B). Runtime 1200 seconds
[ 1385.990735][T18838] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1386.242937][T18838] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1386.317767][T18838] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1386.340977][    T9] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1386.367728][T18838] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1386.377603][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[ 1386.418849][T18838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1386.455025][T18838] usb 6-1: Product: syz
[ 1386.471571][    T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[ 1386.474877][T18838] usb 6-1: Manufacturer: syz
[ 1386.519584][    T9] [drm] Initialized udl on minor 2
[ 1386.536542][T18838] usb 6-1: SerialNumber: syz
[ 1386.562498][    T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1386.622372][    T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1386.630585][T18614] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1386.666434][T18614] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1386.682329][    T9] usb 2-1: USB disconnect, device number 92
[ 1386.717592][T18614] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1386.809911][T18838] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1386.832107][T18838] usb 6-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1386.854238][T18838] usb 6-1: found format II with max.bitrate = 4, frame size=7372
[ 1386.877699][  T804] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1386.886333][T18838] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1387.000971][ T4930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1387.022688][ T4930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1387.032848][ T4930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1387.043732][ T4930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1387.059794][ T4930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1387.106891][  T804] usb 4-1: Using ep0 maxpacket: 16
[ 1387.144740][  T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1387.167166][  T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1387.183084][T18838] usb 6-1: USB disconnect, device number 56
[ 1387.189494][  T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1387.205347][  T804] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1387.219895][  T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1387.250523][  T804] usb 4-1: config 0 descriptor??
[ 1387.618147][  T804] usbhid 4-1:0.0: can't add hid device: -71
[ 1387.651166][  T804] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1388.127873][ T1667] block nbd8: Possible stuck request ffff888028d85080: control (read@0,1024B). Runtime 1140 seconds
[ 1388.139987][ T1667] block nbd8: Possible stuck request ffff888028d85240: control (read@1024,1024B). Runtime 1140 seconds
[ 1388.151178][ T1667] block nbd8: Possible stuck request ffff888028d85400: control (read@2048,1024B). Runtime 1140 seconds
[ 1388.162417][ T1667] block nbd8: Possible stuck request ffff888028d855c0: control (read@3072,1024B). Runtime 1140 seconds
[ 1388.186330][  T804] usb 4-1: USB disconnect, device number 85
[ 1389.265325][T17132] Bluetooth: hci4: command tx timeout
[ 1389.655293][T18614] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1390.693310][T18614] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1390.702692][T18614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1392.290900][T17132] Bluetooth: hci4: command tx timeout
[ 1392.290935][T18614] usb 1-1: config 0 descriptor??
[ 1392.452722][T19303] lo speed is unknown, defaulting to 1000
[ 1392.635210][T18614] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1392.670123][T18614] [drm:udl_init] *ERROR* Selecting channel failed
[ 1392.671616][T19345] netlink: 'syz.5.3677': attribute type 1 has an invalid length.
[ 1393.112983][T18614] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[ 1393.138601][T18614] [drm] Initialized udl on minor 2
[ 1393.144883][T18614] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1393.161688][T18614] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1393.176520][    T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1393.185072][    T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1393.197197][T18614] usb 1-1: USB disconnect, device number 75
[ 1393.336434][T19345] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1394.467475][T17132] Bluetooth: hci4: command tx timeout
[ 1395.859174][T19303] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1395.895765][T19303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1395.913167][T19303] bridge_slave_0: entered allmulticast mode
[ 1395.951161][T19303] bridge_slave_0: entered promiscuous mode
[ 1395.956070][T19389] netlink: 'syz.1.3689': attribute type 1 has an invalid length.
[ 1395.981094][    T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1396.008860][T19389] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1396.040176][T19303] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1396.067190][T19303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1396.121212][ T5802] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1396.121885][T19303] bridge_slave_1: entered allmulticast mode
[ 1396.221308][T19394] MINIX-fs: unable to read superblock
[ 1396.467602][T19303] bridge_slave_1: entered promiscuous mode
[ 1396.520242][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1396.686588][T17132] Bluetooth: hci4: command tx timeout
[ 1397.092319][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1397.106073][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1397.115369][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1397.123397][    T9] usb 4-1: Product: syz
[ 1397.127692][    T9] usb 4-1: Manufacturer: syz
[ 1397.132485][    T9] usb 4-1: SerialNumber: syz
[ 1397.167583][T19391] bond1: (slave geneve2): making interface the new active one
[ 1397.183974][T19391] bond1: (slave geneve2): Enslaving as an active interface with an up link
[ 1397.267157][ T5802] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1397.310277][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1397.323391][T19303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1397.352896][ T5802] usb 1-1: config 0 descriptor??
[ 1397.382351][    T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1397.396442][T19303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1397.407198][    T9] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1397.407265][    T9] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[ 1397.407664][    T9] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1397.963272][   T25] block nbd5: Possible stuck request ffff888028c7e000: control (read@0,1024B). Runtime 1170 seconds
[ 1397.976533][    T9] usb 4-1: USB disconnect, device number 86
[ 1397.989558][   T25] block nbd5: Possible stuck request ffff888028c7e1c0: control (read@1024,1024B). Runtime 1170 seconds
[ 1398.002419][   T25] block nbd5: Possible stuck request ffff888028c7e380: control (read@2048,1024B). Runtime 1170 seconds
[ 1398.016872][   T25] block nbd5: Possible stuck request ffff888028c7e540: control (read@3072,1024B). Runtime 1170 seconds
[ 1398.355777][T19303] team0: Port device team_slave_0 added
[ 1398.460425][T19303] team0: Port device team_slave_1 added
[ 1399.137006][T19303] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1399.223039][T19303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1399.258852][T19303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1399.276575][T19303] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1399.285319][T19303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1399.313548][T19303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1399.513983][ T1667] block nbd6: Possible stuck request ffff888028cde000: control (read@0,1024B). Runtime 1170 seconds
[ 1399.525206][ T1667] block nbd6: Possible stuck request ffff888028cde1c0: control (read@1024,1024B). Runtime 1170 seconds
[ 1399.536560][ T1667] block nbd6: Possible stuck request ffff888028cde380: control (read@2048,1024B). Runtime 1170 seconds
[ 1399.548145][ T1667] block nbd6: Possible stuck request ffff888028cde540: control (read@3072,1024B). Runtime 1170 seconds
[ 1400.254709][T19303] hsr_slave_0: entered promiscuous mode
[ 1400.293639][ T5802] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1400.306329][T19303] hsr_slave_1: entered promiscuous mode
[ 1400.335166][ T5802] [drm:udl_init] *ERROR* Selecting channel failed
[ 1400.346939][T19303] debugfs: 'hsr0' already exists in 'hsr'
[ 1400.374564][T19303] Cannot create hsr debugfs directory
[ 1400.629773][ T5802] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[ 1400.668150][ T5802] [drm] Initialized udl on minor 2
[ 1400.694940][T19421] netlink: 'syz.1.3700': attribute type 1 has an invalid length.
[ 1400.722729][ T5802] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1400.760458][ T5802] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1400.767393][    T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1400.816397][    T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1400.831283][ T5802] usb 1-1: USB disconnect, device number 76
[ 1400.853123][    T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1400.936430][T19421] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1401.369555][T18838] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1401.726009][T18838] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1401.767478][T18838] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1401.812722][T18838] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1401.873290][T18838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1401.898036][T18838] usb 4-1: Product: syz
[ 1401.909428][T18838] usb 4-1: Manufacturer: syz
[ 1401.922494][T18838] usb 4-1: SerialNumber: syz
[ 1402.927135][T13911] block nbd11: Possible stuck request ffff888028ea7000: control (read@0,1024B). Runtime 1110 seconds
[ 1402.938402][T13911] block nbd11: Possible stuck request ffff888028ea71c0: control (read@1024,1024B). Runtime 1110 seconds
[ 1402.957807][T13911] block nbd11: Possible stuck request ffff888028ea7380: control (read@2048,1024B). Runtime 1110 seconds
[ 1402.960016][T18838] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1403.002834][T13911] block nbd11: Possible stuck request ffff888028ea7540: control (read@3072,1024B). Runtime 1110 seconds
[ 1403.284145][T18838] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1403.336461][T18838] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[ 1403.384321][T18838] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1403.606628][T18838] usb 4-1: USB disconnect, device number 87
[ 1403.980872][T19469] netlink: 'syz.5.3716': attribute type 1 has an invalid length.
[ 1404.131582][T19469] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1404.242824][T18838] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1404.243125][T19303] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1404.987100][T13911] block nbd10: Possible stuck request ffff888028e47000: control (read@0,1024B). Runtime 1110 seconds
[ 1405.026073][T13911] block nbd10: Possible stuck request ffff888028e471c0: control (read@1024,1024B). Runtime 1110 seconds
[ 1405.065024][T13911] block nbd10: Possible stuck request ffff888028e47380: control (read@2048,1024B). Runtime 1110 seconds
[ 1405.068231][T18838] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1405.105004][T13911] block nbd10: Possible stuck request ffff888028e47540: control (read@3072,1024B). Runtime 1110 seconds
[ 1405.599773][T19303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1405.607710][T19303] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1405.629728][T19303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1405.658943][T19303] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1405.677085][T19303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1405.682294][T18838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1405.685251][T19303] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1405.721421][T19303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1405.786255][T18838] usb 4-1: config 0 descriptor??
[ 1406.347045][   T25] block nbd2: Possible stuck request ffff888028b77000: control (read@0,1024B). Runtime 1200 seconds
[ 1406.358529][   T25] block nbd2: Possible stuck request ffff888028b771c0: control (read@1024,1024B). Runtime 1200 seconds
[ 1406.370222][   T25] block nbd2: Possible stuck request ffff888028b77380: control (read@2048,1024B). Runtime 1200 seconds
[ 1406.381917][   T25] block nbd2: Possible stuck request ffff888028b77540: control (read@3072,1024B). Runtime 1200 seconds
[ 1406.400109][T19303] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1406.584665][T19303] 8021q: adding VLAN 0 to HW filter on device team0
[ 1406.708440][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1406.715725][ T6144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1406.839962][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1406.847176][ T6144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1409.086532][T19518] netlink: 4556 bytes leftover after parsing attributes in process `syz.0.3725'.
[ 1409.805512][   T25] block nbd7: Possible stuck request ffff888028d00000: control (read@0,1024B). Runtime 1170 seconds
[ 1409.819793][   T25] block nbd7: Possible stuck request ffff888028d001c0: control (read@1024,1024B). Runtime 1170 seconds
[ 1409.832648][   T25] block nbd7: Possible stuck request ffff888028d00380: control (read@2048,1024B). Runtime 1170 seconds
[ 1409.845844][   T25] block nbd7: Possible stuck request ffff888028d00540: control (read@3072,1024B). Runtime 1170 seconds
[ 1410.323556][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3729'.
[ 1411.238895][T18838] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1411.452507][T18838] [drm:udl_init] *ERROR* Selecting channel failed
[ 1411.632549][T18838] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[ 1411.723488][T18838] [drm] Initialized udl on minor 2
[ 1411.775757][T19530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3728'.
[ 1411.800131][T18838] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1411.881646][T18838] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1411.889458][   T86] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1411.942455][   T86] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1411.959349][T18838] usb 4-1: USB disconnect, device number 88
[ 1411.982125][   T86] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1412.746381][   T29] audit: type=1400 audit(1778810569.952:819): avc:  denied  { append } for  pid=19538 comm="syz.3.3733" name="sg0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1413.411397][   T25] block nbd3: Possible stuck request ffff888028be5080: control (read@0,1024B). Runtime 1200 seconds
[ 1413.428091][   T25] block nbd3: Possible stuck request ffff888028be5240: control (read@1024,1024B). Runtime 1200 seconds
[ 1413.442447][   T25] block nbd3: Possible stuck request ffff888028be5400: control (read@2048,1024B). Runtime 1200 seconds
[ 1413.454335][   T25] block nbd3: Possible stuck request ffff888028be55c0: control (read@3072,1024B). Runtime 1200 seconds
[ 1413.650582][T19303] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1415.241487][ T1696] block nbd9: Possible stuck request ffff888028dde000: control (read@0,1024B). Runtime 1140 seconds
[ 1415.253424][   T25] block nbd4: Possible stuck request ffff888028c55080: control (read@0,1024B). Runtime 1200 seconds
[ 1415.270062][ T1696] block nbd9: Possible stuck request ffff888028dde1c0: control (read@1024,1024B). Runtime 1140 seconds
[ 1415.282324][   T25] block nbd4: Possible stuck request ffff888028c55240: control (read@1024,1024B). Runtime 1200 seconds
[ 1415.305115][ T1696] block nbd9: Possible stuck request ffff888028dde380: control (read@2048,1024B). Runtime 1140 seconds
[ 1415.317509][   T25] block nbd4: Possible stuck request ffff888028c55400: control (read@2048,1024B). Runtime 1200 seconds
[ 1415.333928][ T1696] block nbd9: Possible stuck request ffff888028dde540: control (read@3072,1024B). Runtime 1140 seconds
[ 1415.346251][   T25] block nbd4: Possible stuck request ffff888028c555c0: control (read@3072,1024B). Runtime 1200 seconds
[ 1415.429947][T19303] veth0_vlan: entered promiscuous mode
[ 1415.512664][T19303] veth1_vlan: entered promiscuous mode
[ 1415.719553][T19303] veth0_macvtap: entered promiscuous mode
[ 1415.822563][T19303] veth1_macvtap: entered promiscuous mode
[ 1415.923715][ T1696] block nbd0: Possible stuck request ffff888028ad7000: control (read@0,1024B). Runtime 1290 seconds
[ 1415.936106][   T25] block nbd1: Possible stuck request ffff888028b15080: control (read@0,1024B). Runtime 1230 seconds
[ 1415.947742][ T1696] block nbd0: Possible stuck request ffff888028ad71c0: control (read@1024,1024B). Runtime 1290 seconds
[ 1415.959966][   T25] block nbd1: Possible stuck request ffff888028b15240: control (read@1024,1024B). Runtime 1230 seconds
[ 1415.974699][ T1696] block nbd0: Possible stuck request ffff888028ad7380: control (read@2048,1024B). Runtime 1290 seconds
[ 1415.987930][   T25] block nbd1: Possible stuck request ffff888028b15400: control (read@2048,1024B). Runtime 1230 seconds
[ 1415.999949][ T1696] block nbd0: Possible stuck request ffff888028ad7540: control (read@3072,1024B). Runtime 1290 seconds
[ 1416.032307][ T1696] block nbd1: Possible stuck request ffff888028b155c0: control (read@3072,1024B). Runtime 1230 seconds
[ 1416.149220][T19303] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1416.293463][T19303] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1416.350552][ T3342] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1416.419812][ T3342] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1416.449538][ T3342] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1416.493424][ T3342] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1416.530046][ T5802] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1416.736617][ T5802] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1416.779905][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1416.853654][ T5802] usb 2-1: config 0 descriptor??
[ 1416.901756][ T3342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1416.946188][ T3342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1417.148792][ T5622] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1417.260253][  T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1417.302156][  T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1417.387874][ T5622] usb 6-1: Using ep0 maxpacket: 16
[ 1417.419628][ T5622] usb 6-1: config index 0 descriptor too short (expected 52, got 36)
[ 1417.499965][ T5622] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[ 1417.534208][ T5622] usb 6-1: config 0 has no interface number 0
[ 1417.541820][ T5622] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1417.621905][T18614] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1417.678566][ T5622] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1417.714768][ T5622] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1417.749924][ T5622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1417.771997][ T5622] usb 6-1: Product: syz
[ 1417.777390][ T5622] usb 6-1: Manufacturer: syz
[ 1417.793949][ T5622] usb 6-1: SerialNumber: syz
[ 1417.822734][T18614] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1417.826741][ T5622] usb 6-1: config 0 descriptor??
[ 1417.846326][T18614] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1417.848405][T19593] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1417.915993][T18614] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1417.919319][T19593] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1417.978007][T18614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1418.010874][T18614] usb 4-1: Product: syz
[ 1418.029635][T18614] usb 4-1: Manufacturer: syz
[ 1418.046609][T18614] usb 4-1: SerialNumber: syz
[ 1418.317858][T19593] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1418.340021][T19593] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1418.428387][T18614] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1418.567594][T18614] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1418.596790][T18614] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[ 1418.839630][ T5622] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1418.902872][ T5622] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[ 1418.949655][ T5622] asix 6-1:0.251: probe with driver asix failed with error -71
[ 1419.000800][T18614] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1419.006012][ T5622] usb 6-1: USB disconnect, device number 57
[ 1419.037506][T18614] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[ 1419.225379][T18614] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1419.346515][ T5802] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1419.385836][ T5802] [drm:udl_init] *ERROR* Selecting channel failed
[ 1419.449467][T18614] usb 4-1: USB disconnect, device number 89
[ 1419.468747][ T5802] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[ 1419.496825][ T5802] [drm] Initialized udl on minor 2
[ 1419.525683][ T5802] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1419.563291][ T5802] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1419.589272][    T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1419.612744][    T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1419.624487][ T5802] usb 2-1: USB disconnect, device number 93
[ 1419.930709][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1420.119429][    T9] usb 7-1: Using ep0 maxpacket: 16
[ 1420.197124][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1420.278456][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1420.363866][    T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40
[ 1420.426903][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1420.470177][    T9] usb 7-1: Product: syz
[ 1420.486399][    T9] usb 7-1: Manufacturer: syz
[ 1420.504332][    T9] usb 7-1: SerialNumber: syz
[ 1420.600519][    T9] usb 7-1: 0:2 : does not exist
[ 1420.709107][ T1667] block nbd8: Possible stuck request ffff888028d85080: control (read@0,1024B). Runtime 1170 seconds
[ 1420.720325][ T1667] block nbd8: Possible stuck request ffff888028d85240: control (read@1024,1024B). Runtime 1170 seconds
[ 1420.731769][ T1667] block nbd8: Possible stuck request ffff888028d85400: control (read@2048,1024B). Runtime 1170 seconds
[ 1420.743198][ T1667] block nbd8: Possible stuck request ffff888028d855c0: control (read@3072,1024B). Runtime 1170 seconds
[ 1420.805192][ T5622] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1420.846162][T19612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1420.855265][T19612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1421.957185][ T5622] usb 4-1: Using ep0 maxpacket: 16
[ 1421.988361][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1422.051328][T19630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3753'.
[ 1422.078902][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1422.188157][ T5622] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1422.303693][ T5622] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1422.365443][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1422.429485][ T5622] usb 4-1: config 0 descriptor??
[ 1422.832699][ T5622] usbhid 4-1:0.0: can't add hid device: -71
[ 1422.851371][ T5622] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1422.890831][T19636] syz.1.3756: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1422.906328][T19636] CPU: 0 UID: 0 PID: 19636 Comm: syz.1.3756 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1422.906365][T19636] Tainted: [L]=SOFTLOCKUP
[ 1422.906374][T19636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1422.906387][T19636] Call Trace:
[ 1422.906396][T19636]  <TASK>
[ 1422.906406][T19636]  dump_stack_lvl+0x100/0x190
[ 1422.906448][T19636]  warn_alloc.cold+0x95/0x1c1
[ 1422.906476][T19636]  ? __pfx_warn_alloc+0x10/0x10
[ 1422.906520][T19636]  ? __lock_acquire+0x4a5/0x2630
[ 1422.906553][T19636]  ? avc_has_extended_perms+0x33a/0x1080
[ 1422.906589][T19636]  __vmalloc_node_range_noprof+0x136c/0x1630
[ 1422.906628][T19636]  ? rcu_is_watching+0x12/0xc0
[ 1422.906666][T19636]  ? trace_contention_end+0x122/0x170
[ 1422.906700][T19636]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1422.906739][T19636]  ? dvb_dvr_do_ioctl+0x7e/0x270
[ 1422.906774][T19636]  ? find_held_lock+0x2b/0x80
[ 1422.906802][T19636]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1422.906833][T19636]  ? __pfx___mutex_lock+0x10/0x10
[ 1422.906875][T19636]  ? futex_wait+0x11e/0x370
[ 1422.906904][T19636]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1422.906941][T19636]  __vmalloc_node_noprof+0xad/0xf0
[ 1422.906971][T19636]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1422.907012][T19636]  dvb_dvr_do_ioctl+0x15d/0x270
[ 1422.907054][T19636]  dvb_usercopy+0x167/0x340
[ 1422.907088][T19636]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[ 1422.907126][T19636]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1422.907174][T19636]  ? selinux_file_ioctl+0x13b/0x290
[ 1422.907206][T19636]  ? selinux_file_ioctl+0xb6/0x290
[ 1422.907241][T19636]  dvb_dvr_ioctl+0x29/0x40
[ 1422.907275][T19636]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[ 1422.907312][T19636]  __x64_sys_ioctl+0x18e/0x210
[ 1422.907340][T19636]  do_syscall_64+0x10b/0xf80
[ 1422.907371][T19636]  ? clear_bhb_loop+0x40/0x90
[ 1422.907400][T19636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1422.907421][T19636] RIP: 0033:0x7f868ef9ce59
[ 1422.907446][T19636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1422.907469][T19636] RSP: 002b:00007f868fe70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1422.907491][T19636] RAX: ffffffffffffffda RBX: 00007f868f216090 RCX: 00007f868ef9ce59
[ 1422.907508][T19636] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007
[ 1422.907524][T19636] RBP: 00007f868f032d6f R08: 0000000000000000 R09: 0000000000000000
[ 1422.907538][T19636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1422.907553][T19636] R13: 00007f868f216128 R14: 00007f868f216090 R15: 00007ffdf07c10d8
[ 1422.907585][T19636]  </TASK>
[ 1422.907673][T19636] Mem-Info:
[ 1423.178870][T19636] active_anon:50554 inactive_anon:0 isolated_anon:0
[ 1423.178870][T19636]  active_file:21884 inactive_file:41220 isolated_file:0
[ 1423.178870][T19636]  unevictable:768 dirty:436 writeback:0
[ 1423.178870][T19636]  slab_reclaimable:13242 slab_unreclaimable:128424
[ 1423.178870][T19636]  mapped:52890 shmem:34972 pagetables:1599
[ 1423.178870][T19636]  sec_pagetables:0 bounce:0
[ 1423.178870][T19636]  kernel_misc_reclaimable:0
[ 1423.178870][T19636]  free:1204941 free_pcp:7643 free_cma:0
[ 1423.224857][T19636] Node 0 active_anon:202216kB inactive_anon:0kB active_file:87476kB inactive_file:164680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:211500kB dirty:1744kB writeback:0kB shmem:138352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16208kB pagetables:6268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1423.260024][T19636] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1423.293472][T19636] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1423.323677][T19636] lowmem_reserve[]: 0 2477 2478 2478 2478
[ 1423.329709][T19636] Node 0 DMA32 free:849500kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:193316kB inactive_anon:0kB active_file:87476kB inactive_file:164680kB unevictable:1536kB writepending:1744kB zspages:0kB present:3129332kB managed:2537060kB mlocked:0kB bounce:0kB free_pcp:39368kB local_pcp:14912kB free_cma:0kB
[ 1423.363711][T19636] lowmem_reserve[]: 0 0 1 1 1
[ 1423.368666][T19636] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1088kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1423.398399][T19636] lowmem_reserve[]: 0 0 0 0 0
[ 1423.403780][T19636] Node 1 Normal free:3954904kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1423.436116][T19636] lowmem_reserve[]: 0 0 0 0 0
[ 1423.444077][T19636] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1423.457180][T19636] Node 0 DMA32: 1058*4kB (U) 4479*8kB (UE) 2835*16kB (UM) 1158*32kB (UM) 822*64kB (ME) 714*128kB (UME) 375*256kB (UM) 191*512kB (UME) 28*1024kB (UM) 4*2048kB (ME) 86*4096kB (M) = 849392kB
[ 1423.475930][T19636] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1423.487513][T19636] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 4*16kB (UM) 4*32kB (UM) 6*64kB (U) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 964*4096kB (UM) = 3954904kB
[ 1423.504415][T19636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1423.514433][T19636] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1423.523814][T19636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1423.533694][T19636] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1423.543062][T19636] 93566 total pagecache pages
[ 1423.547742][T19636] 0 pages in swap cache
[ 1423.551980][T19636] Free swap  = 124996kB
[ 1423.556125][T19636] Total swap = 124996kB
[ 1423.560305][T19636] 2097051 pages RAM
[ 1423.564102][T19636] 0 pages HighMem/MovableOnly
[ 1423.568762][T19636] 430899 pages reserved
[ 1423.572955][T19636] 0 pages cma reserved
[ 1423.729400][ T5736] usb 7-1: USB disconnect, device number 2
[ 1423.741319][ T5622] usb 4-1: USB disconnect, device number 90
[ 1425.728411][T19650] random: crng reseeded on system resumption
[ 1426.751853][T19645] nbd51: detected capacity change from 0 to 63
[ 1427.340252][T19668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3767'.
[ 1427.402748][T17132] block nbd51: Receive control failed (result -32)
[ 1427.430025][   T86] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1427.662921][   T86] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1427.798202][   T86] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1427.916324][   T86] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1427.947939][   T86] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1428.854296][   T86] usb 4-1: Product: syz
[ 1428.859155][   T86] usb 4-1: Manufacturer: syz
[ 1428.864527][   T86] usb 4-1: SerialNumber: syz
[ 1429.686753][   T86] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1430.898192][ T1696] block nbd5: Possible stuck request ffff888028c7e000: control (read@0,1024B). Runtime 1200 seconds
[ 1430.909609][ T1696] block nbd5: Possible stuck request ffff888028c7e1c0: control (read@1024,1024B). Runtime 1200 seconds
[ 1430.921684][ T1696] block nbd5: Possible stuck request ffff888028c7e380: control (read@2048,1024B). Runtime 1200 seconds
[ 1430.939819][ T1696] block nbd5: Possible stuck request ffff888028c7e540: control (read@3072,1024B). Runtime 1200 seconds
[ 1431.111605][   T86] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1431.136370][   T86] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[ 1431.145565][   T86] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1431.654168][ T1667] block nbd6: Possible stuck request ffff888028cde000: control (read@0,1024B). Runtime 1200 seconds
[ 1431.692049][ T1667] block nbd6: Possible stuck request ffff888028cde1c0: control (read@1024,1024B). Runtime 1200 seconds
[ 1431.703993][ T1667] block nbd6: Possible stuck request ffff888028cde380: control (read@2048,1024B). Runtime 1200 seconds
[ 1431.719252][ T1667] block nbd6: Possible stuck request ffff888028cde540: control (read@3072,1024B). Runtime 1200 seconds
[ 1431.894449][   T86] usb 4-1: USB disconnect, device number 91
[ 1432.441744][T19703] bridge0: port 3(netdevsim0) entered blocking state
[ 1432.448588][T19703] bridge0: port 3(netdevsim0) entered disabled state
[ 1432.455721][T19703] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1432.465843][T19703] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1432.473777][T19703] bridge0: port 3(netdevsim0) entered blocking state
[ 1432.480592][T19703] bridge0: port 3(netdevsim0) entered forwarding state
[ 1432.773532][T19707] netlink: 'syz.5.3777': attribute type 1 has an invalid length.
[ 1432.782319][T19707] netlink: 760 bytes leftover after parsing attributes in process `syz.5.3777'.
[ 1432.999228][T19698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3776'.
[ 1433.110184][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3779'.
[ 1433.608290][T19728] syz.3.3782: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1433.623899][T19728] CPU: 1 UID: 0 PID: 19728 Comm: syz.3.3782 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1433.623922][T19728] Tainted: [L]=SOFTLOCKUP
[ 1433.623927][T19728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1433.623936][T19728] Call Trace:
[ 1433.623941][T19728]  <TASK>
[ 1433.623946][T19728]  dump_stack_lvl+0x100/0x190
[ 1433.623966][T19728]  warn_alloc.cold+0x95/0x1c1
[ 1433.623980][T19728]  ? __pfx_warn_alloc+0x10/0x10
[ 1433.624002][T19728]  ? __lock_acquire+0x4a5/0x2630
[ 1433.624019][T19728]  ? avc_has_extended_perms+0x33a/0x1080
[ 1433.624038][T19728]  __vmalloc_node_range_noprof+0x136c/0x1630
[ 1433.624057][T19728]  ? rcu_is_watching+0x12/0xc0
[ 1433.624075][T19728]  ? trace_contention_end+0x122/0x170
[ 1433.624094][T19728]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1433.624114][T19728]  ? dvb_dvr_do_ioctl+0x7e/0x270
[ 1433.624131][T19728]  ? find_held_lock+0x2b/0x80
[ 1433.624150][T19728]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1433.624167][T19728]  ? __pfx___mutex_lock+0x10/0x10
[ 1433.624188][T19728]  ? futex_wait+0x11e/0x370
[ 1433.624204][T19728]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1433.624223][T19728]  __vmalloc_node_noprof+0xad/0xf0
[ 1433.624238][T19728]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1433.624258][T19728]  dvb_dvr_do_ioctl+0x15d/0x270
[ 1433.624279][T19728]  dvb_usercopy+0x167/0x340
[ 1433.624296][T19728]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[ 1433.624321][T19728]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1433.624359][T19728]  ? selinux_file_ioctl+0x13b/0x290
[ 1433.624375][T19728]  ? selinux_file_ioctl+0xb6/0x290
[ 1433.624393][T19728]  dvb_dvr_ioctl+0x29/0x40
[ 1433.624410][T19728]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[ 1433.624428][T19728]  __x64_sys_ioctl+0x18e/0x210
[ 1433.624443][T19728]  do_syscall_64+0x10b/0xf80
[ 1433.624459][T19728]  ? clear_bhb_loop+0x40/0x90
[ 1433.624475][T19728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1433.624487][T19728] RIP: 0033:0x7f273779ce59
[ 1433.624499][T19728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1433.624511][T19728] RSP: 002b:00007f27359f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1433.624524][T19728] RAX: ffffffffffffffda RBX: 00007f2737a16090 RCX: 00007f273779ce59
[ 1433.624532][T19728] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007
[ 1433.624540][T19728] RBP: 00007f2737832d6f R08: 0000000000000000 R09: 0000000000000000
[ 1433.624548][T19728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1433.624557][T19728] R13: 00007f2737a16128 R14: 00007f2737a16090 R15: 00007ffc006e0d58
[ 1433.624585][T19728]  </TASK>
[ 1433.624633][T19728] Mem-Info:
[ 1433.897540][T19728] active_anon:52697 inactive_anon:0 isolated_anon:0
[ 1433.897540][T19728]  active_file:21883 inactive_file:41224 isolated_file:0
[ 1433.897540][T19728]  unevictable:768 dirty:452 writeback:0
[ 1433.897540][T19728]  slab_reclaimable:13254 slab_unreclaimable:127926
[ 1433.897540][T19728]  mapped:42958 shmem:36826 pagetables:1580
[ 1433.897540][T19728]  sec_pagetables:0 bounce:0
[ 1433.897540][T19728]  kernel_misc_reclaimable:0
[ 1433.897540][T19728]  free:1202946 free_pcp:9513 free_cma:0
[ 1433.945206][T19728] Node 0 active_anon:210788kB inactive_anon:0kB active_file:87472kB inactive_file:164696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:171772kB dirty:1808kB writeback:0kB shmem:145768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:16292kB pagetables:6192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1433.982075][T19728] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1434.016179][T19728] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1434.047831][T19728] lowmem_reserve[]: 0 2477 2478 2478 2478
[ 1434.053878][T19728] Node 0 DMA32 free:841520kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:210788kB inactive_anon:0kB active_file:87472kB inactive_file:164696kB unevictable:1536kB writepending:1808kB zspages:0kB present:3129332kB managed:2537060kB mlocked:0kB bounce:0kB free_pcp:38052kB local_pcp:15548kB free_cma:0kB
[ 1434.088869][T19728] lowmem_reserve[]: 0 0 1 1 1
[ 1434.093800][T19728] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1088kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1434.124611][T19728] lowmem_reserve[]: 0 0 0 0 0
[ 1434.129590][T19728] Node 1 Normal free:3954904kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1434.162886][T19728] lowmem_reserve[]: 0 0 0 0 0
[ 1434.167852][T19728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1434.181064][T19728] Node 0 DMA32: 2262*4kB (UM) 4525*8kB (UME) 2229*16kB (UM) 1049*32kB (UM) 839*64kB (UME) 718*128kB (UME) 383*256kB (UM) 194*512kB (UME) 27*1024kB (UM) 4*2048kB (UME) 85*4096kB (UM) = 841456kB
[ 1434.201122][T19728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1434.213124][T19728] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 4*16kB (UM) 4*32kB (UM) 6*64kB (U) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 964*4096kB (UM) = 3954904kB
[ 1434.230753][T19728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1434.241185][T19728] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1434.251343][T19728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1434.262517][T19728] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1434.271920][T19728] 99949 total pagecache pages
[ 1434.276601][T19728] 0 pages in swap cache
[ 1434.280815][T19728] Free swap  = 124996kB
[ 1434.284971][T19728] Total swap = 124996kB
[ 1434.289164][T19728] 2097051 pages RAM
[ 1434.292965][T19728] 0 pages HighMem/MovableOnly
[ 1434.297633][T19728] 430899 pages reserved
[ 1434.301968][T19728] 0 pages cma reserved
[ 1435.080041][ T1667] block nbd11: Possible stuck request ffff888028ea7000: control (read@0,1024B). Runtime 1140 seconds
[ 1435.091783][ T1667] block nbd11: Possible stuck request ffff888028ea71c0: control (read@1024,1024B). Runtime 1140 seconds
[ 1435.104390][ T1667] block nbd11: Possible stuck request ffff888028ea7380: control (read@2048,1024B). Runtime 1140 seconds
[ 1435.123692][ T1667] block nbd11: Possible stuck request ffff888028ea7540: control (read@3072,1024B). Runtime 1140 seconds
[ 1437.682277][ T1667] block nbd10: Possible stuck request ffff888028e47000: control (read@0,1024B). Runtime 1140 seconds
[ 1437.694760][ T1667] block nbd10: Possible stuck request ffff888028e471c0: control (read@1024,1024B). Runtime 1140 seconds
[ 1437.708169][ T1667] block nbd10: Possible stuck request ffff888028e47380: control (read@2048,1024B). Runtime 1140 seconds
[ 1437.721169][ T1667] block nbd10: Possible stuck request ffff888028e47540: control (read@3072,1024B). Runtime 1140 seconds
[ 1437.820628][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1437.899837][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1438.732944][   T25] block nbd2: Possible stuck request ffff888028b77000: control (read@0,1024B). Runtime 1230 seconds
[ 1438.746177][   T25] block nbd2: Possible stuck request ffff888028b771c0: control (read@1024,1024B). Runtime 1230 seconds
[ 1438.757984][   T25] block nbd2: Possible stuck request ffff888028b77380: control (read@2048,1024B). Runtime 1230 seconds
[ 1438.773388][   T25] block nbd2: Possible stuck request ffff888028b77540: control (read@3072,1024B). Runtime 1230 seconds
[ 1440.183964][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3793'.
[ 1440.774224][ T5802] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1440.976801][T19778] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1441.361862][ T5802] usb 1-1: Using ep0 maxpacket: 16
[ 1441.426879][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1441.501508][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1441.553192][ T5802] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1441.607909][ T5802] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1442.037455][   T25] block nbd7: Possible stuck request ffff888028d00000: control (read@0,1024B). Runtime 1200 seconds
[ 1442.049845][   T25] block nbd7: Possible stuck request ffff888028d001c0: control (read@1024,1024B). Runtime 1200 seconds
[ 1442.065567][   T25] block nbd7: Possible stuck request ffff888028d00380: control (read@2048,1024B). Runtime 1200 seconds
[ 1442.080799][   T25] block nbd7: Possible stuck request ffff888028d00540: control (read@3072,1024B). Runtime 1200 seconds
[ 1442.182590][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1442.587932][ T5802] usb 1-1: config 0 descriptor??
[ 1442.904333][ T5802] usbhid 1-1:0.0: can't add hid device: -71
[ 1442.942966][ T5802] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1443.049540][ T5802] usb 1-1: USB disconnect, device number 77
[ 1443.473975][T19806] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3803'.
[ 1443.638897][T19808] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3807'.
[ 1444.158938][T19813] bridge0: port 3(netdevsim0) entered blocking state
[ 1444.167207][T19813] bridge0: port 3(netdevsim0) entered disabled state
[ 1444.176723][T19813] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1444.210019][T19813] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1444.229876][T19813] bridge0: port 3(netdevsim0) entered blocking state
[ 1444.237266][T19813] bridge0: port 3(netdevsim0) entered forwarding state
[ 1444.711611][  T804] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[ 1445.324446][  T804] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1445.379238][  T804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1445.489467][  T804] usb 7-1: Product: syz
[ 1445.503902][  T804] usb 7-1: Manufacturer: syz
[ 1445.523117][  T804] usb 7-1: SerialNumber: syz
[ 1446.204240][   T25] block nbd3: Possible stuck request ffff888028be5080: control (read@0,1024B). Runtime 1230 seconds
[ 1446.217738][   T25] block nbd3: Possible stuck request ffff888028be5240: control (read@1024,1024B). Runtime 1230 seconds
[ 1446.231306][   T25] block nbd3: Possible stuck request ffff888028be5400: control (read@2048,1024B). Runtime 1230 seconds
[ 1446.244427][   T25] block nbd3: Possible stuck request ffff888028be55c0: control (read@3072,1024B). Runtime 1230 seconds
[ 1446.300565][  T804] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1446.380457][  T804] usb 7-1: USB disconnect, device number 3
[ 1446.419929][  T804] usblp0: removed
[ 1448.020635][   T25] block nbd4: Possible stuck request ffff888028c55080: control (read@0,1024B). Runtime 1230 seconds
[ 1448.033418][ T1696] block nbd9: Possible stuck request ffff888028dde000: control (read@0,1024B). Runtime 1170 seconds
[ 1448.051806][ T1696] block nbd9: Possible stuck request ffff888028dde1c0: control (read@1024,1024B). Runtime 1170 seconds
[ 1448.051980][   T25] block nbd4: Possible stuck request ffff888028c55240: control (read@1024,1024B). Runtime 1230 seconds
[ 1448.077068][ T1696] block nbd9: Possible stuck request ffff888028dde380: control (read@2048,1024B). Runtime 1170 seconds
[ 1448.092878][   T25] block nbd4: Possible stuck request ffff888028c55400: control (read@2048,1024B). Runtime 1230 seconds
[ 1448.169970][   T38] block nbd9: Possible stuck request ffff888028dde540: control (read@3072,1024B). Runtime 1170 seconds
[ 1448.181987][   T25] block nbd4: Possible stuck request ffff888028c555c0: control (read@3072,1024B). Runtime 1230 seconds
[ 1448.194235][ T1696] block nbd1: Possible stuck request ffff888028b15080: control (read@0,1024B). Runtime 1260 seconds
[ 1448.205896][T12045] block nbd0: Possible stuck request ffff888028ad7000: control (read@0,1024B). Runtime 1320 seconds
[ 1448.217269][ T1696] block nbd1: Possible stuck request ffff888028b15240: control (read@1024,1024B). Runtime 1260 seconds
[ 1448.229353][T12045] block nbd0: Possible stuck request ffff888028ad71c0: control (read@1024,1024B). Runtime 1320 seconds
[ 1448.241509][ T1696] block nbd1: Possible stuck request ffff888028b15400: control (read@2048,1024B). Runtime 1260 seconds
[ 1448.254053][T12045] block nbd0: Possible stuck request ffff888028ad7380: control (read@2048,1024B). Runtime 1320 seconds
[ 1448.266240][T12045] block nbd0: Possible stuck request ffff888028ad7540: control (read@3072,1024B). Runtime 1320 seconds
[ 1448.278826][ T1696] block nbd1: Possible stuck request ffff888028b155c0: control (read@3072,1024B). Runtime 1260 seconds
[ 1448.730386][ T5804] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 1449.222124][ T5804] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1449.269762][ T5804] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1449.330497][ T5804] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1449.384580][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1449.433216][ T5804] usb 1-1: Product: syz
[ 1449.600138][ T5804] usb 1-1: Manufacturer: syz
[ 1449.605547][ T5804] usb 1-1: SerialNumber: syz
[ 1450.357784][ T5804] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1450.551353][ T5804] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1450.601098][ T5804] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[ 1450.809061][T19862] bridge0: port 3(netdevsim0) entered blocking state
[ 1450.816967][T19862] bridge0: port 3(netdevsim0) entered disabled state
[ 1450.826287][T19862] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[ 1450.854272][T19862] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[ 1450.865669][T19862] bridge0: port 3(netdevsim0) entered blocking state
[ 1450.875273][T19862] bridge0: port 3(netdevsim0) entered forwarding state
[ 1451.224727][ T5804] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[ 1451.410980][ T5804] usb 1-1: USB disconnect, device number 78
[ 1451.630529][ T5802] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1451.857395][ T5802] usb 6-1: Using ep0 maxpacket: 16
[ 1451.893138][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1451.946554][T19872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3825'.
[ 1451.965384][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1452.011621][ T5802] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1452.071449][ T5802] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1452.258463][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.298971][ T5802] usb 6-1: config 0 descriptor??
[ 1452.842719][ T5802] usbhid 6-1:0.0: can't add hid device: -71
[ 1452.849722][ T1667] block nbd8: Possible stuck request ffff888028d85080: control (read@0,1024B). Runtime 1200 seconds
[ 1452.860864][ T1667] block nbd8: Possible stuck request ffff888028d85240: control (read@1024,1024B). Runtime 1200 seconds
[ 1452.872064][ T1667] block nbd8: Possible stuck request ffff888028d85400: control (read@2048,1024B). Runtime 1200 seconds
[ 1452.880825][   T86] usb 2-1: new full-speed USB device number 94 using dummy_hcd
[ 1452.883174][ T1667] block nbd8: Possible stuck request ffff888028d855c0: control (read@3072,1024B). Runtime 1200 seconds
[ 1452.900792][ T5802] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1452.936262][ T5802] usb 6-1: USB disconnect, device number 58
[ 1453.745350][   T86] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1454.157219][   T86] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1454.184612][   T86] usb 2-1: Product: syz
[ 1454.189475][   T86] usb 2-1: Manufacturer: syz
[ 1454.200113][   T86] usb 2-1: SerialNumber: syz
[ 1454.504633][   T86] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1455.108165][   T86] usb 2-1: USB disconnect, device number 94
[ 1455.361699][   T86] usblp0: removed
[ 1456.822074][T19889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3830'.
[ 1458.913964][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3838'.
[ 1458.967651][T19919] fuse: Bad value for 'fd'
[ 1459.042920][T19922] netlink: 'syz.6.3837': attribute type 1 has an invalid length.
[ 1459.050869][T19922] netlink: 760 bytes leftover after parsing attributes in process `syz.6.3837'.
[ 1459.268709][T19913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3835'.
[ 1460.040848][ T5802] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1460.339323][ T5802] usb 6-1: Using ep0 maxpacket: 16
[ 1460.360022][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1460.396688][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1460.441840][ T5802] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1460.653486][ T5802] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1460.757688][T19945] syz.0.3843: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1460.773620][T19945] CPU: 1 UID: 0 PID: 19945 Comm: syz.0.3843 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1460.773661][T19945] Tainted: [L]=SOFTLOCKUP
[ 1460.773672][T19945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1460.773687][T19945] Call Trace:
[ 1460.773695][T19945]  <TASK>
[ 1460.773705][T19945]  dump_stack_lvl+0x100/0x190
[ 1460.773742][T19945]  warn_alloc.cold+0x95/0x1c1
[ 1460.773770][T19945]  ? __pfx_warn_alloc+0x10/0x10
[ 1460.773814][T19945]  ? __lock_acquire+0x4a5/0x2630
[ 1460.773846][T19945]  ? avc_has_extended_perms+0x33a/0x1080
[ 1460.773882][T19945]  __vmalloc_node_range_noprof+0x136c/0x1630
[ 1460.773919][T19945]  ? rcu_is_watching+0x12/0xc0
[ 1460.773958][T19945]  ? trace_contention_end+0x122/0x170
[ 1460.773992][T19945]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1460.774031][T19945]  ? dvb_dvr_do_ioctl+0x7e/0x270
[ 1460.774065][T19945]  ? find_held_lock+0x2b/0x80
[ 1460.774101][T19945]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1460.774131][T19945]  ? __pfx___mutex_lock+0x10/0x10
[ 1460.774173][T19945]  ? futex_wait+0x11e/0x370
[ 1460.774203][T19945]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1460.774238][T19945]  __vmalloc_node_noprof+0xad/0xf0
[ 1460.774267][T19945]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1460.774306][T19945]  dvb_dvr_do_ioctl+0x15d/0x270
[ 1460.774349][T19945]  dvb_usercopy+0x167/0x340
[ 1460.774383][T19945]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[ 1460.774421][T19945]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1460.774472][T19945]  ? selinux_file_ioctl+0x13b/0x290
[ 1460.774504][T19945]  ? selinux_file_ioctl+0xb6/0x290
[ 1460.774538][T19945]  dvb_dvr_ioctl+0x29/0x40
[ 1460.774572][T19945]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[ 1460.774607][T19945]  __x64_sys_ioctl+0x18e/0x210
[ 1460.774636][T19945]  do_syscall_64+0x10b/0xf80
[ 1460.774668][T19945]  ? clear_bhb_loop+0x40/0x90
[ 1460.774696][T19945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1460.774720][T19945] RIP: 0033:0x7f2b6759ce59
[ 1460.774740][T19945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1460.774764][T19945] RSP: 002b:00007f2b68466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1460.774786][T19945] RAX: ffffffffffffffda RBX: 00007f2b67816090 RCX: 00007f2b6759ce59
[ 1460.774802][T19945] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007
[ 1460.774818][T19945] RBP: 00007f2b67632d6f R08: 0000000000000000 R09: 0000000000000000
[ 1460.774832][T19945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1460.774846][T19945] R13: 00007f2b67816128 R14: 00007f2b67816090 R15: 00007ffcdddac2d8
[ 1460.774878][T19945]  </TASK>
[ 1460.775011][T19945] Mem-Info:
[ 1461.056078][T19945] active_anon:47940 inactive_anon:0 isolated_anon:0
[ 1461.056078][T19945]  active_file:21883 inactive_file:41232 isolated_file:0
[ 1461.056078][T19945]  unevictable:793 dirty:95 writeback:3
[ 1461.056078][T19945]  slab_reclaimable:13855 slab_unreclaimable:128438
[ 1461.056078][T19945]  mapped:39480 shmem:32050 pagetables:1544
[ 1461.056078][T19945]  sec_pagetables:0 bounce:0
[ 1461.056078][T19945]  kernel_misc_reclaimable:0
[ 1461.056078][T19945]  free:1205711 free_pcp:12070 free_cma:0
[ 1461.105609][T19945] Node 0 active_anon:191760kB inactive_anon:0kB active_file:87472kB inactive_file:164728kB unevictable:1636kB isolated(anon):0kB isolated(file):0kB mapped:157860kB dirty:380kB writeback:12kB shmem:126664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:16428kB pagetables:6048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1461.143765][T19945] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1461.180093][T19945] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1461.212499][T19945] lowmem_reserve[]: 0 2477 2478 2478 2478
[ 1461.218877][T19945] Node 0 DMA32 free:852580kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:191760kB inactive_anon:0kB active_file:87472kB inactive_file:164728kB unevictable:1636kB writepending:388kB zspages:0kB present:3129332kB managed:2537060kB mlocked:100kB bounce:0kB free_pcp:48236kB local_pcp:38460kB free_cma:0kB
[ 1461.255196][T19945] lowmem_reserve[]: 0 0 1 1 1
[ 1461.260391][T19945] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1088kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1461.292882][T19945] lowmem_reserve[]: 0 0 0 0 0
[ 1461.298073][T19945] Node 1 Normal free:3954904kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1461.332419][T19945] lowmem_reserve[]: 0 0 0 0 0
[ 1461.337668][T19945] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1461.351568][T19945] Node 0 DMA32: 3215*4kB (UME) 6156*8kB (UME) 3509*16kB (UME) 342*32kB (UM) 809*64kB (UME) 728*128kB (UME) 391*256kB (UME) 196*512kB (UME) 29*1024kB (UM) 2*2048kB (M) 84*4096kB (UM) = 852460kB
[ 1461.372470][T19945] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1461.385116][T19945] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 4*16kB (UM) 4*32kB (UM) 6*64kB (U) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 964*4096kB (UM) = 3954904kB
[ 1461.403991][T19945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1461.414608][T19945] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1461.424787][T19945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1461.435296][T19945] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1461.445418][T19945] 95181 total pagecache pages
[ 1461.450532][T19945] 0 pages in swap cache
[ 1461.455037][T19945] Free swap  = 124996kB
[ 1461.459553][T19945] Total swap = 124996kB
[ 1461.464147][T19945] 2097051 pages RAM
[ 1461.468282][T19945] 0 pages HighMem/MovableOnly
[ 1461.473396][T19945] 430899 pages reserved
[ 1461.477903][T19945] 0 pages cma reserved
[ 1461.658474][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1461.849631][ T5802] usb 6-1: config 0 descriptor??
[ 1462.109708][ T5802] usbhid 6-1:0.0: can't add hid device: -71
[ 1462.148322][ T5802] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1462.219433][ T5802] usb 6-1: USB disconnect, device number 59
[ 1462.745764][T19968] Cannot find set identified by id 0 to match
[ 1462.831647][ T5622] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1463.070803][ T5622] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1463.276654][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1463.294417][ T1696] block nbd5: Possible stuck request ffff888028c7e000: control (read@0,1024B). Runtime 1230 seconds
[ 1463.306189][ T1696] block nbd5: Possible stuck request ffff888028c7e1c0: control (read@1024,1024B). Runtime 1230 seconds
[ 1463.321896][ T1696] block nbd5: Possible stuck request ffff888028c7e380: control (read@2048,1024B). Runtime 1230 seconds
[ 1463.334063][ T1696] block nbd5: Possible stuck request ffff888028c7e540: control (read@3072,1024B). Runtime 1230 seconds
[ 1463.347222][ T5622] usb 2-1: Product: syz
[ 1463.353007][ T5622] usb 2-1: Manufacturer: syz
[ 1463.358777][ T5622] usb 2-1: SerialNumber: syz
[ 1463.575904][T19975] overlayfs: overlapping lowerdir path
[ 1463.815321][ T1667] block nbd6: Possible stuck request ffff888028cde000: control (read@0,1024B). Runtime 1230 seconds
[ 1463.830724][ T1667] block nbd6: Possible stuck request ffff888028cde1c0: control (read@1024,1024B). Runtime 1230 seconds
[ 1463.843038][ T1667] block nbd6: Possible stuck request ffff888028cde380: control (read@2048,1024B). Runtime 1230 seconds
[ 1463.862118][ T1667] block nbd6: Possible stuck request ffff888028cde540: control (read@3072,1024B). Runtime 1230 seconds
[ 1464.307516][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3852'.
[ 1465.391012][ T5622] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1466.000836][ T5622] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 1466.004552][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3854'.
[ 1466.077471][T19986] fuse: Bad value for 'fd'
[ 1466.154693][ T5622] usb 2-1: USB disconnect, device number 95
[ 1466.191346][ T5622] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[ 1467.210455][ T1667] block nbd11: Possible stuck request ffff888028ea7000: control (read@0,1024B). Runtime 1170 seconds
[ 1467.223824][ T1667] block nbd11: Possible stuck request ffff888028ea71c0: control (read@1024,1024B). Runtime 1170 seconds
[ 1467.235418][ T1667] block nbd11: Possible stuck request ffff888028ea7380: control (read@2048,1024B). Runtime 1170 seconds
[ 1467.249245][ T1667] block nbd11: Possible stuck request ffff888028ea7540: control (read@3072,1024B). Runtime 1170 seconds
[ 1469.667812][T20017] overlayfs: overlapping lowerdir path
[ 1469.974757][ T1667] block nbd10: Possible stuck request ffff888028e47000: control (read@0,1024B). Runtime 1170 seconds
[ 1469.986989][ T1667] block nbd10: Possible stuck request ffff888028e471c0: control (read@1024,1024B). Runtime 1170 seconds
[ 1469.998281][ T1667] block nbd10: Possible stuck request ffff888028e47380: control (read@2048,1024B). Runtime 1170 seconds
[ 1470.010687][ T1667] block nbd10: Possible stuck request ffff888028e47540: control (read@3072,1024B). Runtime 1170 seconds
[ 1471.347628][T12045] block nbd2: Possible stuck request ffff888028b77000: control (read@0,1024B). Runtime 1260 seconds
[ 1471.360791][T12045] block nbd2: Possible stuck request ffff888028b771c0: control (read@1024,1024B). Runtime 1260 seconds
[ 1471.411635][T12045] block nbd2: Possible stuck request ffff888028b77380: control (read@2048,1024B). Runtime 1260 seconds
[ 1471.617122][T12045] block nbd2: Possible stuck request ffff888028b77540: control (read@3072,1024B). Runtime 1260 seconds
[ 1473.177960][T20035] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3865'.
[ 1473.503317][T20039] Cannot find set identified by id 0 to match
[ 1474.735496][ T1696] block nbd7: Possible stuck request ffff888028d00000: control (read@0,1024B). Runtime 1230 seconds
[ 1474.747845][ T1696] block nbd7: Possible stuck request ffff888028d001c0: control (read@1024,1024B). Runtime 1230 seconds
[ 1474.760491][ T1696] block nbd7: Possible stuck request ffff888028d00380: control (read@2048,1024B). Runtime 1230 seconds
[ 1474.775135][ T1696] block nbd7: Possible stuck request ffff888028d00540: control (read@3072,1024B). Runtime 1230 seconds
[ 1476.423498][T20064] MINIX-fs: unable to read superblock
[ 1478.974478][ T1696] block nbd3: Possible stuck request ffff888028be5080: control (read@0,1024B). Runtime 1260 seconds
[ 1478.986381][ T1696] block nbd3: Possible stuck request ffff888028be5240: control (read@1024,1024B). Runtime 1260 seconds
[ 1478.998879][ T1696] block nbd3: Possible stuck request ffff888028be5400: control (read@2048,1024B). Runtime 1260 seconds
[ 1479.011777][ T1696] block nbd3: Possible stuck request ffff888028be55c0: control (read@3072,1024B). Runtime 1260 seconds
[ 1479.364319][T20071] netlink: 'syz.0.3875': attribute type 3 has an invalid length.
[ 1480.214498][T12045] block nbd4: Possible stuck request ffff888028c55080: control (read@0,1024B). Runtime 1260 seconds
[ 1480.226343][T12045] block nbd4: Possible stuck request ffff888028c55240: control (read@1024,1024B). Runtime 1260 seconds
[ 1480.238514][ T1696] block nbd9: Possible stuck request ffff888028dde000: control (read@0,1024B). Runtime 1200 seconds
[ 1480.250563][T12045] block nbd4: Possible stuck request ffff888028c55400: control (read@2048,1024B). Runtime 1260 seconds
[ 1480.262669][ T1696] block nbd9: Possible stuck request ffff888028dde1c0: control (read@1024,1024B). Runtime 1200 seconds
[ 1480.274791][ T1696] block nbd9: Possible stuck request ffff888028dde380: control (read@2048,1024B). Runtime 1200 seconds
[ 1480.287095][T12045] block nbd4: Possible stuck request ffff888028c555c0: control (read@3072,1024B). Runtime 1260 seconds
[ 1480.300226][T12045] block nbd9: Possible stuck request ffff888028dde540: control (read@3072,1024B). Runtime 1200 seconds
[ 1480.932690][ T1696] block nbd1: Possible stuck request ffff888028b15080: control (read@0,1024B). Runtime 1290 seconds
[ 1480.944878][T12045] block nbd0: Possible stuck request ffff888028ad7000: control (read@0,1024B). Runtime 1350 seconds
[ 1480.956940][ T1696] block nbd1: Possible stuck request ffff888028b15240: control (read@1024,1024B). Runtime 1290 seconds
[ 1480.973595][T12045] block nbd0: Possible stuck request ffff888028ad71c0: control (read@1024,1024B). Runtime 1350 seconds
[ 1480.986659][ T1696] block nbd1: Possible stuck request ffff888028b15400: control (read@2048,1024B). Runtime 1290 seconds
[ 1480.998826][T12045] block nbd0: Possible stuck request ffff888028ad7380: control (read@2048,1024B). Runtime 1350 seconds
[ 1481.010979][ T1696] block nbd1: Possible stuck request ffff888028b155c0: control (read@3072,1024B). Runtime 1290 seconds
[ 1481.024652][T12045] block nbd0: Possible stuck request ffff888028ad7540: control (read@3072,1024B). Runtime 1350 seconds
[ 1481.036934][ T5622] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1481.207764][ T5622] usb 2-1: Using ep0 maxpacket: 16
[ 1481.241360][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1481.254519][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1481.267542][ T5622] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1481.283537][ T5622] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1481.295208][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.310146][ T5622] usb 2-1: config 0 descriptor??
[ 1481.580824][ T5622] usbhid 2-1:0.0: can't add hid device: -71
[ 1481.609363][ T5622] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1481.639918][ T5622] usb 2-1: USB disconnect, device number 96
[ 1482.859155][T20083] overlayfs: overlapping lowerdir path
[ 1483.579687][T20095] Cannot find set identified by id 0 to match
[ 1484.057963][T18838] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1484.264576][T18838] usb 1-1: Using ep0 maxpacket: 16
[ 1484.310345][T18838] usb 1-1: config index 0 descriptor too short (expected 52, got 36)
[ 1484.390936][T18838] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[ 1484.452001][T18838] usb 1-1: config 0 has no interface number 0
[ 1484.501571][T18838] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1484.585847][T18838] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1485.029837][ T1667] block nbd8: Possible stuck request ffff888028d85080: control (read@0,1024B). Runtime 1230 seconds
[ 1485.040763][ T1667] block nbd8: Possible stuck request ffff888028d85240: control (read@1024,1024B). Runtime 1230 seconds
[ 1485.067945][ T1667] block nbd8: Possible stuck request ffff888028d85400: control (read@2048,1024B). Runtime 1230 seconds
[ 1485.079504][ T1667] block nbd8: Possible stuck request ffff888028d855c0: control (read@3072,1024B). Runtime 1230 seconds
[ 1485.125249][T18838] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1485.248218][T18838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1485.312759][T18838] usb 1-1: Product: syz
[ 1485.343085][T18838] usb 1-1: Manufacturer: syz
[ 1485.383374][T18838] usb 1-1: SerialNumber: syz
[ 1485.467491][T18838] usb 1-1: config 0 descriptor??
[ 1485.499825][T20086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1485.555480][T20086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1485.766971][T20117] random: crng reseeded on system resumption
[ 1486.078893][T20086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1486.914594][T20086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1486.980457][T18838] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1486.992803][T18838] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61
[ 1487.007197][T18838] asix 1-1:0.251: probe with driver asix failed with error -5
[ 1487.328638][T18614] usb 1-1: USB disconnect, device number 79
[ 1488.485082][T20137] overlayfs: overlapping lowerdir path
[ 1489.146056][T20142] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3893'.
[ 1489.992162][T18838] usb 2-1: new full-speed USB device number 97 using dummy_hcd
[ 1490.004978][ T5714] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1490.226272][ T5714] usb 6-1: Using ep0 maxpacket: 16
[ 1490.228275][T18838] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1490.263275][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1490.312969][T18838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.339351][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1490.368184][T18838] usb 2-1: Product: syz
[ 1490.398189][T18838] usb 2-1: Manufacturer: syz
[ 1490.404160][ T5714] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1490.495595][T18838] usb 2-1: SerialNumber: syz
[ 1490.495592][ T5714] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1490.495623][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1490.586054][ T5714] usb 6-1: config 0 descriptor??
[ 1490.903353][T18838] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 97 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1490.931042][ T5714] usbhid 6-1:0.0: can't add hid device: -71
[ 1490.979148][ T5714] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1491.013206][T18838] usb 2-1: USB disconnect, device number 97
[ 1491.101013][ T5714] usb 6-1: USB disconnect, device number 60
[ 1491.164215][T18838] usblp0: removed
[ 1494.737824][T20181] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3904'.
[ 1495.299800][T20193] MINIX-fs: unable to read superblock
[ 1495.932531][T13911] block nbd6: Possible stuck request ffff888028cde000: control (read@0,1024B). Runtime 1260 seconds
[ 1495.955134][T13911] block nbd6: Possible stuck request ffff888028cde1c0: control (read@1024,1024B). Runtime 1260 seconds
[ 1495.994488][T13911] block nbd6: Possible stuck request ffff888028cde380: control (read@2048,1024B). Runtime 1260 seconds
[ 1496.031619][T13911] block nbd6: Possible stuck request ffff888028cde540: control (read@3072,1024B). Runtime 1260 seconds
[ 1496.066672][T12045] block nbd5: Possible stuck request ffff888028c7e000: control (read@0,1024B). Runtime 1260 seconds
[ 1496.084488][T12045] block nbd5: Possible stuck request ffff888028c7e1c0: control (read@1024,1024B). Runtime 1260 seconds
[ 1496.101333][T12045] block nbd5: Possible stuck request ffff888028c7e380: control (read@2048,1024B). Runtime 1260 seconds
[ 1496.119198][T12045] block nbd5: Possible stuck request ffff888028c7e540: control (read@3072,1024B). Runtime 1260 seconds
[ 1499.408001][ T1667] block nbd11: Possible stuck request ffff888028ea7000: control (read@0,1024B). Runtime 1200 seconds
[ 1499.420187][ T1667] block nbd11: Possible stuck request ffff888028ea71c0: control (read@1024,1024B). Runtime 1200 seconds
[ 1499.433710][ T1667] block nbd11: Possible stuck request ffff888028ea7380: control (read@2048,1024B). Runtime 1200 seconds
[ 1499.446187][ T1667] block nbd11: Possible stuck request ffff888028ea7540: control (read@3072,1024B). Runtime 1200 seconds
[ 1500.663155][T20197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3910'.
[ 1502.089842][ T1667] block nbd10: Possible stuck request ffff888028e47000: control (read@0,1024B). Runtime 1200 seconds
[ 1502.101767][ T1667] block nbd10: Possible stuck request ffff888028e471c0: control (read@1024,1024B). Runtime 1200 seconds
[ 1502.117731][ T1667] block nbd10: Possible stuck request ffff888028e47380: control (read@2048,1024B). Runtime 1200 seconds
[ 1502.131006][ T1667] block nbd10: Possible stuck request ffff888028e47540: control (read@3072,1024B). Runtime 1200 seconds
[ 1502.973047][T20237] random: crng reseeded on system resumption
[ 1503.142192][T20236] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1503.621431][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1503.654172][T12045] block nbd2: Possible stuck request ffff888028b77000: control (read@0,1024B). Runtime 1290 seconds
[ 1503.672347][T12045] block nbd2: Possible stuck request ffff888028b771c0: control (read@1024,1024B). Runtime 1290 seconds
[ 1503.832254][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1503.849485][T12045] block nbd2: Possible stuck request ffff888028b77380: control (read@2048,1024B). Runtime 1290 seconds
[ 1504.395512][T12045] block nbd2: Possible stuck request ffff888028b77540: control (read@3072,1024B). Runtime 1290 seconds
[ 1505.821190][T20244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3921'.
[ 1506.101046][T20244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3921'.
[ 1506.393510][T18838] usb 4-1: new full-speed USB device number 92 using dummy_hcd
[ 1506.633736][T18838] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1506.680454][T18838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1506.715254][T18838] usb 4-1: Product: syz
[ 1506.734163][T18838] usb 4-1: Manufacturer: syz
[ 1506.750093][T18838] usb 4-1: SerialNumber: syz
[ 1507.002796][T12045] block nbd7: Possible stuck request ffff888028d00000: control (read@0,1024B). Runtime 1260 seconds
[ 1507.071393][T12045] block nbd7: Possible stuck request ffff888028d001c0: control (read@1024,1024B). Runtime 1260 seconds
[ 1507.083758][T12045] block nbd7: Possible stuck request ffff888028d00380: control (read@2048,1024B). Runtime 1260 seconds
[ 1507.096034][T12045] block nbd7: Possible stuck request ffff888028d00540: control (read@3072,1024B). Runtime 1260 seconds
[ 1507.505925][T18838] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1507.523831][T18838] usb 4-1: USB disconnect, device number 92
[ 1507.533535][T18838] usblp0: removed
[ 1507.683728][   T29] audit: type=1800 audit(1778810658.848:820): pid=20263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3927" name="bus" dev="tmpfs" ino=1028 res=0 errno=0
[ 1507.974808][ T5714] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1508.134311][T20267] MINIX-fs: unable to read superblock
[ 1510.001891][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1510.011363][ T5714] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1510.025028][ T5714] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1510.034309][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1510.042844][ T5714] usb 1-1: Product: syz
[ 1510.047176][ T5714] usb 1-1: Manufacturer: syz
[ 1510.051878][ T5714] usb 1-1: SerialNumber: syz
[ 1510.318713][ T5714] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1511.301331][ T5714] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1511.310002][ T5714] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[ 1511.627320][ T5714] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1511.658925][ T5714] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[ 1511.678699][T20279] syz.5.3931: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1511.694804][T20279] CPU: 1 UID: 0 PID: 20279 Comm: syz.5.3931 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1511.694843][T20279] Tainted: [L]=SOFTLOCKUP
[ 1511.694852][T20279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1511.694867][T20279] Call Trace:
[ 1511.694875][T20279]  <TASK>
[ 1511.694885][T20279]  dump_stack_lvl+0x100/0x190
[ 1511.694920][T20279]  warn_alloc.cold+0x95/0x1c1
[ 1511.694948][T20279]  ? __pfx_warn_alloc+0x10/0x10
[ 1511.694990][T20279]  ? __lock_acquire+0x4a5/0x2630
[ 1511.695022][T20279]  ? avc_has_extended_perms+0x33a/0x1080
[ 1511.695058][T20279]  __vmalloc_node_range_noprof+0x136c/0x1630
[ 1511.695095][T20279]  ? rcu_is_watching+0x12/0xc0
[ 1511.695131][T20279]  ? trace_contention_end+0x122/0x170
[ 1511.695163][T20279]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1511.695202][T20279]  ? dvb_dvr_do_ioctl+0x7e/0x270
[ 1511.695237][T20279]  ? find_held_lock+0x2b/0x80
[ 1511.695262][T20279]  ? rcu_is_watching+0x12/0xc0
[ 1511.695298][T20279]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1511.695329][T20279]  ? __pfx___mutex_lock+0x10/0x10
[ 1511.695364][T20279]  ? irqentry_exit+0x24d/0x7e0
[ 1511.695408][T20279]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1511.695444][T20279]  __vmalloc_node_noprof+0xad/0xf0
[ 1511.695475][T20279]  ? dvb_dvr_do_ioctl+0x15d/0x270
[ 1511.695515][T20279]  dvb_dvr_do_ioctl+0x15d/0x270
[ 1511.695557][T20279]  dvb_usercopy+0x167/0x340
[ 1511.695592][T20279]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[ 1511.695630][T20279]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1511.695677][T20279]  ? selinux_file_ioctl+0x13b/0x290
[ 1511.695706][T20279]  ? selinux_file_ioctl+0xb6/0x290
[ 1511.695737][T20279]  dvb_dvr_ioctl+0x29/0x40
[ 1511.695767][T20279]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[ 1511.695816][T20279]  __x64_sys_ioctl+0x18e/0x210
[ 1511.695848][T20279]  do_syscall_64+0x10b/0xf80
[ 1511.695880][T20279]  ? clear_bhb_loop+0x40/0x90
[ 1511.695909][T20279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1511.695933][T20279] RIP: 0033:0x7f60bcf9ce59
[ 1511.695953][T20279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1511.695978][T20279] RSP: 002b:00007f60bde09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1511.696001][T20279] RAX: ffffffffffffffda RBX: 00007f60bd216090 RCX: 00007f60bcf9ce59
[ 1511.696017][T20279] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007
[ 1511.696032][T20279] RBP: 00007f60bd032d6f R08: 0000000000000000 R09: 0000000000000000
[ 1511.696046][T20279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1511.696060][T20279] R13: 00007f60bd216128 R14: 00007f60bd216090 R15: 00007ffcd11c8d48
[ 1511.696091][T20279]  </TASK>
[ 1511.696100][T20279] Mem-Info:
[ 1511.975847][T20279] active_anon:58606 inactive_anon:0 isolated_anon:0
[ 1511.975847][T20279]  active_file:21883 inactive_file:41250 isolated_file:0
[ 1511.975847][T20279]  unevictable:768 dirty:483 writeback:4
[ 1511.975847][T20279]  slab_reclaimable:13748 slab_unreclaimable:129874
[ 1511.975847][T20279]  mapped:40206 shmem:42646 pagetables:1507
[ 1511.975847][T20279]  sec_pagetables:0 bounce:0
[ 1511.975847][T20279]  kernel_misc_reclaimable:0
[ 1511.975847][T20279]  free:1200643 free_pcp:9100 free_cma:0
[ 1512.023316][T20279] Node 0 active_anon:234424kB inactive_anon:0kB active_file:87472kB inactive_file:164800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160764kB dirty:1932kB writeback:16kB shmem:169048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:16332kB pagetables:5900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1512.060223][T20279] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1512.094847][T20279] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1512.125985][T20279] lowmem_reserve[]: 0 2477 2478 2478 2478
[ 1512.132120][T20279] Node 0 DMA32 free:832308kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:234424kB inactive_anon:0kB active_file:87472kB inactive_file:164800kB unevictable:1536kB writepending:1948kB zspages:0kB present:3129332kB managed:2537060kB mlocked:0kB bounce:0kB free_pcp:36400kB local_pcp:13032kB free_cma:0kB
[ 1512.167192][T20279] lowmem_reserve[]: 0 0 1 1 1
[ 1512.172129][T20279] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1088kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1512.203018][T20279] lowmem_reserve[]: 0 0 0 0 0
[ 1512.207948][T20279] Node 1 Normal free:3954904kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1512.242137][T20279] lowmem_reserve[]: 0 0 0 0 0
[ 1512.247373][T20279] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1512.261825][T20279] Node 0 DMA32: 4013*4kB (UME) 7286*8kB (UME) 5257*16kB (UME) 1300*32kB (UME) 630*64kB (UME) 572*128kB (UME) 370*256kB (UM) 192*512kB (UME) 28*1024kB (UME) 1*2048kB (E) 72*4096kB (M) = 832244kB
[ 1512.262641][T12045] block nbd3: Possible stuck request ffff888028be5080: control (read@0,1024B). Runtime 1290 seconds
[ 1512.281395][T20279] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1512.281525][T20279] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 4*16kB (UM) 4*32kB (UM) 6*64kB (U) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 964*4096kB (UM) = 3954904kB
[ 1512.281722][T20279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1512.281741][T20279] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1512.281760][T20279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1512.281778][T20279] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1512.281797][T20279] 105772 total pagecache pages
[ 1512.281807][T20279] 0 pages in swap cache
[ 1512.281816][T20279] Free swap  = 124996kB
[ 1512.281825][T20279] Total swap = 124996kB
[ 1512.281835][T20279] 2097051 pages RAM
[ 1512.281844][T20279] 0 pages HighMem/MovableOnly
[ 1512.281853][T20279] 430899 pages reserved
[ 1512.281861][T20279] 0 pages cma reserved
[ 1512.387762][ T5714] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1512.390352][T12045] block nbd3: Possible stuck request ffff888028be5240: control (read@1024,1024B). Runtime 1290 seconds
[ 1512.426674][   T25] block nbd4: Possible stuck request ffff888028c55080: control (read@0,1024B). Runtime 1290 seconds
[ 1512.450297][ T1696] block nbd9: Possible stuck request ffff888028dde000: control (read@0,1024B). Runtime 1230 seconds
[ 1512.462197][   T25] block nbd4: Possible stuck request ffff888028c55240: control (read@1024,1024B). Runtime 1290 seconds
[ 1512.474335][ T1696] block nbd9: Possible stuck request ffff888028dde1c0: control (read@1024,1024B). Runtime 1230 seconds
[ 1512.486377][   T25] block nbd4: Possible stuck request ffff888028c55400: control (read@2048,1024B). Runtime 1290 seconds
[ 1512.498927][ T1696] block nbd9: Possible stuck request ffff888028dde380: control (read@2048,1024B). Runtime 1230 seconds
[ 1512.511118][   T25] block nbd4: Possible stuck request ffff888028c555c0: control (read@3072,1024B). Runtime 1290 seconds
[ 1512.523451][ T1696] block nbd9: Possible stuck request ffff888028dde540: control (read@3072,1024B). Runtime 1230 seconds
[ 1512.535877][T12045] block nbd3: Possible stuck request ffff888028be5400: control (read@2048,1024B). Runtime 1290 seconds
[ 1512.547991][T12045] block nbd3: Possible stuck request ffff888028be55c0: control (read@3072,1024B). Runtime 1290 seconds
[ 1512.621774][ T5714] usb 1-1: USB disconnect, device number 80
[ 1513.182670][T12045] block nbd1: Possible stuck request ffff888028b15080: control (read@0,1024B). Runtime 1320 seconds
[ 1513.194567][T12045] block nbd1: Possible stuck request ffff888028b15240: control (read@1024,1024B). Runtime 1320 seconds
[ 1513.218980][T12045] block nbd1: Possible stuck request ffff888028b15400: control (read@2048,1024B). Runtime 1320 seconds
[ 1513.230711][T12045] block nbd1: Possible stuck request ffff888028b155c0: control (read@3072,1024B). Runtime 1320 seconds
[ 1513.930944][T12045] block nbd0: Possible stuck request ffff888028ad7000: control (read@0,1024B). Runtime 1380 seconds
[ 1513.943045][T12045] block nbd0: Possible stuck request ffff888028ad71c0: control (read@1024,1024B). Runtime 1380 seconds
[ 1513.955303][T12045] block nbd0: Possible stuck request ffff888028ad7380: control (read@2048,1024B). Runtime 1380 seconds
[ 1513.967660][T12045] block nbd0: Possible stuck request ffff888028ad7540: control (read@3072,1024B). Runtime 1380 seconds
[ 1514.803730][T18838] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1514.920884][   T29] audit: type=1800 audit(1778810665.624:821): pid=20313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3941" name="bus" dev="tmpfs" ino=1255 res=0 errno=0
[ 1515.039575][T18838] usb 4-1: Using ep0 maxpacket: 16
[ 1515.061013][T18838] usb 4-1: config index 0 descriptor too short (expected 52, got 36)
[ 1515.121371][T18838] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[ 1515.169274][T18838] usb 4-1: config 0 has no interface number 0
[ 1515.345328][T18838] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1515.377339][T18838] usb 4-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1627.587002][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1627.594003][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P18614/1:b..l P20316/1:b..l P4979/1:b..l P19143/1:b..l
[ 1627.606330][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=126369, q=275 ncpus=2)
[ 1627.614146][    C0] task:syz.2.3612      state:R  running task     stack:26376 pid:19143 tgid:19137 ppid:17131  task_flags:0x40044c flags:0x00080003
[ 1627.629000][    C0] Call Trace:
[ 1627.632284][    C0]  <TASK>
[ 1627.635217][    C0]  __schedule+0x1295/0x67a0
[ 1627.639727][    C0]  ? bpf_ksym_find+0x128/0x1c0
[ 1627.644516][    C0]  ? __pfx___schedule+0x10/0x10
[ 1627.649368][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1627.654146][    C0]  preempt_schedule_irq+0x50/0x90
[ 1627.659176][    C0]  irqentry_exit+0x205/0x7e0
[ 1627.663777][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1627.669758][    C0] RIP: 0010:rcu_is_watching+0x0/0xc0
[ 1627.675051][    C0] Code: 3a ff ff ff 48 89 df e8 fe 79 89 00 eb 81 e8 27 7a 89 00 e9 49 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 53 65 ff 05 73 1c 1e 12 e8 3e c5 9d 09 48 c7 c3 a8
[ 1627.694699][    C0] RSP: 0018:ffffc900053178b0 EFLAGS: 00000297
[ 1627.700766][    C0] RAX: 0000000000000001 RBX: ffffffff8e7e5760 RCX: ffffffff82828b50
[ 1627.708737][    C0] RDX: ffff888084bda500 RSI: ffffffff82828b23 RDI: ffffffff8e7e5760
[ 1627.716704][    C0] RBP: ffffffff82828b23 R08: 0000000000000001 R09: 0000000000000000
[ 1627.724671][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e8a1a40
[ 1627.732635][    C0] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff88801e8a1a3c
[ 1627.740604][    C0]  ? __page_table_check_zero+0x333/0x410
[ 1627.746244][    C0]  ? __page_table_check_zero+0x360/0x410
[ 1627.751876][    C0]  ? __page_table_check_zero+0x333/0x410
[ 1627.757513][    C0]  lock_release+0x245/0x310
[ 1627.762025][    C0]  __page_table_check_zero+0x338/0x410
[ 1627.767490][    C0]  __free_frozen_pages+0x72a/0x1040
[ 1627.772706][    C0]  vfree+0x15f/0x8d0
[ 1627.776606][    C0]  ? __pfx_kcov_close+0x10/0x10
[ 1627.781456][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1627.786229][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1627.792038][    C0]  ? __pfx_kcov_close+0x10/0x10
[ 1627.796890][    C0]  ? __pfx_kcov_close+0x10/0x10
[ 1627.801740][    C0]  kcov_close+0x34/0x60
[ 1627.805908][    C0]  __fput+0x3ff/0xb50
[ 1627.809902][    C0]  ? cleanup_mnt+0x263/0x450
[ 1627.814495][    C0]  task_work_run+0x150/0x240
[ 1627.819093][    C0]  ? __pfx_task_work_run+0x10/0x10
[ 1627.824216][    C0]  do_exit+0x951/0x2af0
[ 1627.828367][    C0]  ? irqentry_exit+0x24d/0x7e0
[ 1627.833137][    C0]  ? __pfx_do_exit+0x10/0x10
[ 1627.837725][    C0]  ? do_raw_spin_lock+0x128/0x260
[ 1627.842759][    C0]  ? find_held_lock+0x2b/0x80
[ 1627.847436][    C0]  ? get_signal+0x7e5/0x2210
[ 1627.852039][    C0]  do_group_exit+0xd5/0x2a0
[ 1627.856557][    C0]  get_signal+0x20ff/0x2210
[ 1627.861095][    C0]  ? __sys_sendmmsg+0x367/0x430
[ 1627.865968][    C0]  ? __pfx_get_signal+0x10/0x10
[ 1627.870840][    C0]  arch_do_signal_or_restart+0x91/0x7e0
[ 1627.876832][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1627.883010][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1627.887786][    C0]  exit_to_user_mode_loop+0x8b/0x4f0
[ 1627.893074][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1627.897848][    C0]  do_syscall_64+0x706/0xf80
[ 1627.902443][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1627.907134][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1627.913042][    C0] RIP: 0033:0x7fe5b2b9ce59
[ 1627.917460][    C0] RSP: 002b:00007fe5b3aa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1627.925871][    C0] RAX: 0000000000000400 RBX: 00007fe5b2e16090 RCX: 00007fe5b2b9ce59
[ 1627.933837][    C0] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000006
[ 1627.941806][    C0] RBP: 00007fe5b2c32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1627.949770][    C0] R10: 000000000000f401 R11: 0000000000000246 R12: 0000000000000000
[ 1627.957733][    C0] R13: 00007fe5b2e16128 R14: 00007fe5b2e16090 R15: 00007ffc562ce378
[ 1627.965717][    C0]  </TASK>
[ 1627.968727][    C0] task:udevd           state:R  running task     stack:23640 pid:4979  tgid:4979  ppid:1      task_flags:0x400140 flags:0x00080000
[ 1627.982216][    C0] Call Trace:
[ 1627.985489][    C0]  <TASK>
[ 1627.988414][    C0]  __schedule+0x1295/0x67a0
[ 1627.992941][    C0]  ? __pfx___schedule+0x10/0x10
[ 1627.997804][    C0]  ? preempt_schedule_thunk+0x16/0x30
[ 1628.003179][    C0]  preempt_schedule_common+0x42/0xc0
[ 1628.008470][    C0]  preempt_schedule_thunk+0x16/0x30
[ 1628.013675][    C0]  _raw_spin_unlock+0x3e/0x50
[ 1628.018352][    C0]  dput.part.0+0x2d4/0x570
[ 1628.022768][    C0]  dput+0x1f/0x30
[ 1628.026399][    C0]  step_into_slowpath+0x670/0xf90
[ 1628.031422][    C0]  ? __pfx___up_read+0x10/0x10
[ 1628.036191][    C0]  ? kernfs_dop_revalidate+0x3c6/0x7e0
[ 1628.041696][    C0]  ? kernfs_dop_revalidate+0x3c6/0x7e0
[ 1628.047168][    C0]  ? __pfx_step_into_slowpath+0x10/0x10
[ 1628.052719][    C0]  ? kernfs_dop_revalidate+0x50/0x7e0
[ 1628.058102][    C0]  ? lookup_fast+0x2da/0x600
[ 1628.062691][    C0]  ? inode_permission+0x374/0x620
[ 1628.067716][    C0]  link_path_walk+0xf28/0x1cc0
[ 1628.072494][    C0]  path_openat+0x1be/0x31a0
[ 1628.076999][    C0]  ? kasan_save_stack+0x3f/0x50
[ 1628.081846][    C0]  ? kasan_save_stack+0x30/0x50
[ 1628.086687][    C0]  ? kasan_save_track+0x14/0x30
[ 1628.091545][    C0]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 1628.097193][    C0]  ? __pfx_path_openat+0x10/0x10
[ 1628.102147][    C0]  do_file_open+0x20e/0x430
[ 1628.106700][    C0]  ? __pfx_do_file_open+0x10/0x10
[ 1628.111748][    C0]  ? alloc_fd+0x476/0x790
[ 1628.116089][    C0]  ? do_getname+0x191/0x390
[ 1628.120602][    C0]  do_sys_openat2+0x10d/0x1e0
[ 1628.125291][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1628.130507][    C0]  __x64_sys_openat+0x12d/0x210
[ 1628.135364][    C0]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1628.140747][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1628.145530][    C0]  do_syscall_64+0x10b/0xf80
[ 1628.150126][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1628.154809][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1628.160703][    C0] RIP: 0033:0x7f061d715c3a
[ 1628.165118][    C0] RSP: 002b:00007fff6405c548 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[ 1628.173542][    C0] RAX: ffffffffffffffda RBX: 000055fbb194f2d0 RCX: 00007f061d715c3a
[ 1628.181509][    C0] RDX: 0000000000090800 RSI: 000055fbb1949030 RDI: 00000000ffffff9c
[ 1628.189477][    C0] RBP: 000055fbb1949030 R08: 0000000000000000 R09: 0000000000000001
[ 1628.197440][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000055fbaffe7170
[ 1628.205414][    C0] R13: 00000000000000ff R14: 000055fb89f36be0 R15: 00007fff6405c7f0
[ 1628.213402][    C0]  </TASK>
[ 1628.216420][    C0] task:syz.5.3943      state:R  running task     stack:26776 pid:20316 tgid:20314 ppid:11564  task_flags:0x400040 flags:0x00080000
[ 1628.229912][    C0] Call Trace:
[ 1628.233190][    C0]  <TASK>
[ 1628.236119][    C0]  __schedule+0x1295/0x67a0
[ 1628.240633][    C0]  ? ktime_get+0x1a4/0x320
[ 1628.245071][    C0]  ? __pfx___schedule+0x10/0x10
[ 1628.249928][    C0]  ? mark_held_locks+0x40/0x70
[ 1628.254705][    C0]  preempt_schedule_irq+0x50/0x90
[ 1628.259736][    C0]  irqentry_exit+0x205/0x7e0
[ 1628.264343][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1628.270327][    C0] RIP: 0010:unwind_next_frame+0x1453/0x2090
[ 1628.276233][    C0] Code: 4c 89 ef c6 05 9d 70 59 12 01 e8 e8 e8 ff ff e9 0f ef ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 <0f> 85 a6 08 00 00 48 89 c8 4d 8b 7d 38 48 ba 00 00 00 00 00 fc ff
[ 1628.295841][    C0] RSP: 0018:ffffc90004c1f0a8 EFLAGS: 00000246
[ 1628.301909][    C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff918541bc
[ 1628.309880][    C0] RDX: 1ffff92000983e2a RSI: 0000000000000001 RDI: ffffffff90f9b250
[ 1628.317845][    C0] RBP: ffffc90004c1f160 R08: ffffffff918541c0 R09: 0000000000000007
[ 1628.325811][    C0] R10: 0000000000000200 R11: 000000000001738a R12: ffffc90004c1f168
[ 1628.333780][    C0] R13: ffffc90004c1f118 R14: 0000000000000003 R15: 0000000000000000
[ 1628.341762][    C0]  ? unwind_next_frame+0x2ec/0x2090
[ 1628.346985][    C0]  ? alloc_pages_noprof+0x1a/0x160
[ 1628.352103][    C0]  ? ktime_get+0x1a4/0x320
[ 1628.356523][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1628.362681][    C0]  arch_stack_walk+0x94/0xf0
[ 1628.367288][    C0]  ? alloc_pages_noprof+0x1a/0x160
[ 1628.372407][    C0]  stack_trace_save+0x8e/0xc0
[ 1628.377168][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1628.382550][    C0]  save_stack+0x162/0x1e0
[ 1628.386878][    C0]  ? __pfx_save_stack+0x10/0x10
[ 1628.391726][    C0]  ? post_alloc_hook+0x153/0x170
[ 1628.396675][    C0]  ? get_page_from_freelist+0x11a6/0x33b0
[ 1628.402402][    C0]  ? __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 1628.408480][    C0]  ? alloc_pages_mpol+0x1fb/0x540
[ 1628.413503][    C0]  ? alloc_pages_noprof+0x1a/0x160
[ 1628.418626][    C0]  ? __lock_acquire+0x4a5/0x2630
[ 1628.423572][    C0]  __set_page_owner+0x8c/0x540
[ 1628.428340][    C0]  ? __pfx___set_page_owner+0x10/0x10
[ 1628.433708][    C0]  ? bad_range+0x257/0x3f0
[ 1628.438128][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[ 1628.443346][    C0]  post_alloc_hook+0x153/0x170
[ 1628.448120][    C0]  get_page_from_freelist+0x11a6/0x33b0
[ 1628.453680][    C0]  ? __pfx___might_resched+0x10/0x10
[ 1628.458991][    C0]  __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 1628.464896][    C0]  ? stack_depot_save_flags+0x27/0x9d0
[ 1628.470358][    C0]  ? stack_depot_save_flags+0x27/0x9d0
[ 1628.475817][    C0]  ? kasan_save_stack+0x3f/0x50
[ 1628.480666][    C0]  ? kasan_save_stack+0x30/0x50
[ 1628.485509][    C0]  ? kasan_save_track+0x14/0x30
[ 1628.490357][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[ 1628.495116][    C0]  ? __kvmalloc_node_noprof+0x360/0xa00
[ 1628.500675][    C0]  ? __kvm_mmu_topup_memory_cache+0x455/0x5f0
[ 1628.506744][    C0]  ? mmu_topup_memory_caches+0xbc/0x170
[ 1628.512300][    C0]  ? kvm_mmu_load+0xd6/0x23e0
[ 1628.516984][    C0]  ? vcpu_run+0x39f4/0x5ca0
[ 1628.521491][    C0]  ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[ 1628.527216][    C0]  ? kvm_vcpu_ioctl+0x730/0x1720
[ 1628.532150][    C0]  ? __x64_sys_ioctl+0x18e/0x210
[ 1628.537090][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1628.543448][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1628.549346][    C0]  ? policy_nodemask+0xed/0x4f0
[ 1628.554199][    C0]  alloc_pages_mpol+0x1fb/0x540
[ 1628.559053][    C0]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1628.564428][    C0]  ? __kvmalloc_node_noprof+0x37b/0xa00
[ 1628.569981][    C0]  ? __kvm_mmu_topup_memory_cache+0x455/0x5f0
[ 1628.576051][    C0]  alloc_pages_noprof+0x1a/0x160
[ 1628.580990][    C0]  get_free_pages_noprof+0x10/0xb0
[ 1628.586099][    C0]  __kvm_mmu_topup_memory_cache+0x278/0x5f0
[ 1628.592015][    C0]  mmu_topup_memory_caches+0xbc/0x170
[ 1628.597392][    C0]  kvm_mmu_load+0xd6/0x23e0
[ 1628.601900][    C0]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[ 1628.607356][    C0]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[ 1628.613250][    C0]  ? __pfx_kvm_mmu_load+0x10/0x10
[ 1628.618280][    C0]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[ 1628.624173][    C0]  ? kvm_check_and_inject_events+0x961/0x1070
[ 1628.630247][    C0]  ? record_steal_time+0x430/0xbc0
[ 1628.635397][    C0]  vcpu_run+0x39f4/0x5ca0
[ 1628.639753][    C0]  ? __pfx_vcpu_run+0x10/0x10
[ 1628.644454][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1628.649230][    C0]  ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[ 1628.654956][    C0]  kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[ 1628.660609][    C0]  kvm_vcpu_ioctl+0x730/0x1720
[ 1628.665373][    C0]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1628.670571][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1628.676466][    C0]  ? do_vfs_ioctl+0x226/0x13e0
[ 1628.681231][    C0]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1628.686258][    C0]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1628.693121][    C0]  ? __fget_files+0x215/0x3d0
[ 1628.697800][    C0]  ? hook_file_ioctl_common+0x149/0x410
[ 1628.703368][    C0]  ? selinux_file_ioctl+0x13b/0x290
[ 1628.708574][    C0]  ? selinux_file_ioctl+0xb6/0x290
[ 1628.713692][    C0]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1628.718898][    C0]  __x64_sys_ioctl+0x18e/0x210
[ 1628.723666][    C0]  do_syscall_64+0x10b/0xf80
[ 1628.728266][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1628.732950][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1628.738855][    C0] RIP: 0033:0x7f60bcf9ce59
[ 1628.743263][    C0] RSP: 002b:00007f60bde09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1628.751671][    C0] RAX: ffffffffffffffda RBX: 00007f60bd216090 RCX: 00007f60bcf9ce59
[ 1628.759655][    C0] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[ 1628.767633][    C0] RBP: 00007f60bd032d6f R08: 0000000000000000 R09: 0000000000000000
[ 1628.775596][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1628.783559][    C0] R13: 00007f60bd216128 R14: 00007f60bd216090 R15: 00007ffcd11c8d48
[ 1628.791542][    C0]  </TASK>
[ 1628.794553][    C0] task:kworker/0:6     state:R  running task     stack:23128 pid:18614 tgid:18614 ppid:2      task_flags:0x4208160 flags:0x00080000
[ 1628.808143][    C0] Workqueue: events_power_efficient gc_worker
[ 1628.814213][    C0] Call Trace:
[ 1628.817544][    C0]  <TASK>
[ 1628.820468][    C0]  __schedule+0x1295/0x67a0
[ 1628.824972][    C0]  ? ktime_get+0x1a4/0x320
[ 1628.829408][    C0]  ? __pfx___schedule+0x10/0x10
[ 1628.834262][    C0]  ? mark_held_locks+0x40/0x70
[ 1628.839031][    C0]  preempt_schedule_irq+0x50/0x90
[ 1628.844062][    C0]  irqentry_exit+0x205/0x7e0
[ 1628.848661][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1628.854644][    C0] RIP: 0010:gc_worker+0x2bb/0x1630
[ 1628.859753][    C0] Code: 00 00 48 c7 c7 c8 6e d8 90 e8 01 51 35 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 7f 67 59 f8 58 48 85 db 0f 85 97 0f 00 00 <e8> 90 6c 59 f8 8b 1d 6a 3c 29 07 89 dd 31 ff 83 e5 01 89 ee e8 2c
[ 1628.879361][    C0] RSP: 0018:ffffc9000472fb40 EFLAGS: 00000293
[ 1628.885439][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89af3ce6
[ 1628.893418][    C0] RDX: ffff8880274da500 RSI: ffffffff89af3cf5 RDI: ffff8880274da500
[ 1628.901388][    C0] RBP: 000000000003fe3b R08: 0000000000000007 R09: 0000000000000000
[ 1628.909352][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 1628.917314][    C0] R13: 0000000000040000 R14: 000000000001ff1e R15: 0000000000001770
[ 1628.925290][    C0]  ? gc_worker+0xd56/0x1630
[ 1628.929793][    C0]  ? gc_worker+0xd65/0x1630
[ 1628.934307][    C0]  ? __pfx_gc_worker+0x10/0x10
[ 1628.939119][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1628.943898][    C0]  process_one_work+0xa0e/0x1980
[ 1628.948854][    C0]  ? __pfx_process_one_work+0x10/0x10
[ 1628.954241][    C0]  ? __pfx_gc_worker+0x10/0x10
[ 1628.959009][    C0]  worker_thread+0x5ef/0xe50
[ 1628.963614][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1628.968732][    C0]  ? kthread+0x13a/0x450
[ 1628.972978][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1628.978094][    C0]  kthread+0x370/0x450
[ 1628.982169][    C0]  ? __pfx_kthread+0x10/0x10
[ 1628.986766][    C0]  ret_from_fork+0x72b/0xd50
[ 1628.991367][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1628.996491][    C0]  ? __switch_to+0x800/0x1100
[ 1629.001177][    C0]  ? __pfx_kthread+0x10/0x10
[ 1629.005775][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1629.010580][    C0]  </TASK>
[ 1629.013613][    C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g126369 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1629.024894][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1629.034854][    C0] rcu: RCU grace-period kthread stack dump:
[ 1629.040732][    C0] task:rcu_preempt     state:R  running task     stack:27752 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1629.054224][    C0] Call Trace:
[ 1629.057495][    C0]  <TASK>
[ 1629.060424][    C0]  __schedule+0x1295/0x67a0
[ 1629.064953][    C0]  ? __pfx___schedule+0x10/0x10
[ 1629.069807][    C0]  ? find_held_lock+0x2b/0x80
[ 1629.074484][    C0]  ? schedule+0x2bf/0x390
[ 1629.078821][    C0]  schedule+0xdd/0x390
[ 1629.082893][    C0]  schedule_timeout+0x127/0x280
[ 1629.087747][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1629.093117][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1629.098404][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1629.104213][    C0]  ? prepare_to_swait_event+0xdf/0x4a0
[ 1629.109772][    C0]  rcu_gp_fqs_loop+0x1a9/0x900
[ 1629.114540][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1629.119833][    C0]  ? prepare_to_swait_event+0xae/0x4a0
[ 1629.125294][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1629.130242][    C0]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[ 1629.135444][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1629.141255][    C0]  rcu_gp_kthread+0x179/0x230
[ 1629.145937][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1629.151137][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1629.156952][    C0]  ? __kthread_parkme+0x18c/0x230
[ 1629.161978][    C0]  ? kthread+0x13a/0x450
[ 1629.166221][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1629.171419][    C0]  kthread+0x370/0x450
[ 1629.175491][    C0]  ? __pfx_kthread+0x10/0x10
[ 1629.180092][    C0]  ret_from_fork+0x72b/0xd50
[ 1629.184686][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1629.189804][    C0]  ? __switch_to+0x800/0x1100
[ 1629.194490][    C0]  ? __pfx_kthread+0x10/0x10
[ 1629.199090][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1629.203880][    C0]  </TASK>
[ 1629.206992][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1629.213334][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 1629.218561][    C1] NMI backtrace for cpu 1
[ 1629.218582][    C1] CPU: 1 UID: 0 PID: 20325 Comm: syz.0.3944 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1629.218607][    C1] Tainted: [L]=SOFTLOCKUP
[ 1629.218614][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1629.218625][    C1] RIP: 0010:timerqueue_linked_add+0x1b0/0x430
[ 1629.218661][    C1] Code: ea 03 80 3c 02 00 0f 85 48 02 00 00 4d 89 66 18 e8 25 2e 82 f6 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 e2 01 00 00 49 8d 7c 24 08 49 89 1c 24 48 b8 00 00 00 00 00
[ 1629.218677][    C1] RSP: 0018:ffffc90000a08e20 EFLAGS: 00000046
[ 1629.218692][    C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001
[ 1629.218708][    C1] RDX: 1ffff11006d53460 RSI: ffffffff8b8670bb RDI: ffff8880b8528658
[ 1629.218720][    C1] RBP: ffff8880b8528658 R08: 0000000000000005 R09: 000000000000001f
[ 1629.218731][    C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888036a9a300
[ 1629.218742][    C1] R13: ffff888036a9a318 R14: ffff8880b8528608 R15: ffff8880b8528658
[ 1629.218754][    C1] FS:  00007f2b684036c0(0000) GS:ffff888124470000(0000) knlGS:0000000000000000
[ 1629.218772][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1629.218784][    C1] CR2: 00007f2b68402ff8 CR3: 000000008676d000 CR4: 00000000003526f0
[ 1629.218795][    C1] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081
[ 1629.218806][    C1] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1629.218817][    C1] Call Trace:
[ 1629.218825][    C1]  <IRQ>
[ 1629.218835][    C1]  enqueue_hrtimer+0x1ad/0x2f0
[ 1629.218864][    C1]  __hrtimer_run_queues+0x73d/0xa00
[ 1629.218897][    C1]  hrtimer_interrupt+0x3e5/0x940
[ 1629.218921][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x460
[ 1629.218949][    C1]  sysvec_apic_timer_interrupt+0x9e/0xc0
[ 1629.218974][    C1]  </IRQ>
[ 1629.218979][    C1]  <TASK>
[ 1629.218986][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1629.219007][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[ 1629.219031][    C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 02 57 f6 48 89 df e8 1e 52 57 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 a5 1b 47 f6 65 8b 05 1e 7f 7d 08 85 c0 74 16 5b
[ 1629.219048][    C1] RSP: 0018:ffffc900040a7d78 EFLAGS: 00000246
[ 1629.219062][    C1] RAX: 0000000000000002 RBX: ffffffff9b1ab118 RCX: 0000000000000000
[ 1629.219073][    C1] RDX: 0000000000000000 RSI: ffffffff8df215d0 RDI: ffffffff8c1c3800
[ 1629.219084][    C1] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000
[ 1629.219095][    C1] R10: 0000000000000001 R11: 0000007700000000 R12: 1ffff92000814fb6
[ 1629.219107][    C1] R13: 000000000d2f14d5 R14: 000000000d2f14d5 R15: 0000000000000000
[ 1629.219127][    C1]  do_settimeofday64+0x326/0x4d0
[ 1629.219150][    C1]  ? __pfx_do_settimeofday64+0x10/0x10
[ 1629.219171][    C1]  ? security_capable+0x80/0x260
[ 1629.219190][    C1]  ? hidinput_configure_usage+0x1937/0x7df0
[ 1629.219216][    C1]  ? capable+0xd3/0xf0
[ 1629.219242][    C1]  do_sys_settimeofday64+0x1dc/0x260
[ 1629.219267][    C1]  __x64_sys_clock_settime+0x1c1/0x2a0
[ 1629.219286][    C1]  ? __pfx___x64_sys_clock_settime+0x10/0x10
[ 1629.219306][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1629.219335][    C1]  do_syscall_64+0x10b/0xf80
[ 1629.219360][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1629.219380][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1629.219398][    C1] RIP: 0033:0x7f2b6759ce59
[ 1629.219414][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1629.219430][    C1] RSP: 002b:00007f2b68403028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3
[ 1629.219446][    C1] RAX: ffffffffffffffda RBX: 00007f2b67816360 RCX: 00007f2b6759ce59
[ 1629.219458][    C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000
[ 1629.219469][    C1] RBP: 00007f2b67632d6f R08: 0000000000000000 R09: 0000000000000000
[ 1629.219480][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1629.219491][    C1] R13: 00007f2b678163f8 R14: 00007f2b67816360 R15: 00007ffcdddac2d8
[ 1629.219510][    C1]  </TASK>