last executing test programs: 2m45.046722371s ago: executing program 3 (id=97): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x396}, 0x0) r1 = socket$isdn(0x22, 0x3, 0x27) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x8) r2 = syz_usb_connect$cdc_ecm(0x1, 0x111, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xef, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x1, 0x1, 0x6, 0xa0, 0xd8, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x7, 0x24, 0x6, 0x0, 0x0, "1ab6"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5929, 0x80, 0xdef, 0xf8}, [@mdlm_detail={0xb0, 0x24, 0x13, 0x8, "4a0190c9e1b13bd3945ad2d34a325d0eca41b99fbbacb9aadc9936349ff0c3553855c6ed453c82f01876e526b92f095ed67efd094a00f9d26b509c34dd2dbd9047130a6f67309720a92f1d4f14de5c97a62c2762c8f5eae96b079080c38c320200d1db9518c7d3a70a3405ffdf9e8054549b9dad84831aa4f76cff4d7c838b408b47f00f97756f5c52beec84acfd234df98360c2d4952b3ae7753d104d25c2211a2631aaccaad0b53dcd0905"}, @acm={0x4, 0x24, 0x2, 0x12}, @obex={0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x5, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x40, 0x5f, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x38f, 0x0, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x9, 0x6c, 0xb, 0x10, 0x6b}, 0xd9, &(0x7f0000000200)={0x5, 0xf, 0xd9, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xd, 0xbf, 0x6}, @generic={0xca, 0x10, 0xa, "e48ca3bf133b141ac00f5000f08fc7a4fef266e17e3683e0220f14ea63ee89072c29f529695df22db6547704ef6031759926ccbde4220a71232072c9f94ab0b7d7eaf0d13acefef5c7d3e537ace9c6cccb5e593b52856e98cad0f1aff7bc792ed53a93113f95b03fbce7a3cc8b6dbda8dcefdb259c860df5cf0f505a608d45fb8508c8d13deaf4a885647aac92b2926c0183149617462af1226a06b7bfd3450fd4ad95e1ecd71f64f76f5c4f7d74656bd2c95fba4d31f3132fa09d9965dbce3226608309c87c42"}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44d}}, {0x48, &(0x7f0000000340)=@string={0x48, 0x3, "877a331233d28c6426b25aae1ac581e57ea948760490305868ec60a796f71c2ff164c877c97be2e2836b1cdda32c329ea655737fa1e75033389e1cf0505e8929c026daf3b22c"}}, {0xb2, &(0x7f00000003c0)=@string={0xb2, 0x3, "17ed35cc4a9416684c0837668c3ef88d12f4aeef82da9779925e468aafbefe6882745691c8964355e90cf8006709c94d9a2cc13f9aa043f18152fe5a31f8c7a5c1ccc5b19a74d5925e3b3224eeed1e6b8f5c7b4094d2cca6935ebc183c80482e93db22e22c052eadc8a949843143c992b11c342270366c7d05e28a10b7c9a08bac565f5d63223f501d9ca97b33dc5203c22a9d6d0d34342a9b9577699cc485564244cda9f37113fb5c779a8d926cb17d"}}, {0x16, &(0x7f0000000480)=@string={0x16, 0x3, "fbbdea5498476310219512e463ae2e936da10096"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x457}}, {0x60, &(0x7f0000000500)=@string={0x60, 0x3, "96fba349e8019a7504f2abdf06cb3e413c532940b0a9c822229911669cd7df1143550516cb9468e5a706e72dd3e779a6de9e0094107588341b3a4b67a0c965c80a9eb3f5adad0cae50d33074b281a9493e7121e6ba3bec6ad94b7fc31a4a"}}, {0xef, &(0x7f0000000580)=@string={0xef, 0x3, "21a2c437efad9e001d6ec46c1ae24cfb402327440205bd66181a4149c895519469b08cdab71195be1247fd0209cf7de5826cbdc7f610f050eacf90f74d1ef30c987c52d1ec92eab4baa851b6938bfbccebfa5b263eb8d3e180d78aafd737961d2b28c27c7aa3a30a424604ce01fa7fa4cb4247c8456a3046b725836851e1af027585e34d3897e3848f5ca2bd0bddb5c32f8d0385bc92823b0b958610be7715419a94f0b696adc05efef574e4562108db0a77f67de2874c2457a34e621bbbb5a2befc0a1064165415ac4007397145ed11872c774e9d3062e9260506db5db851ba03a31b8aa99b67edc7b08e5224"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000800)={0x14, &(0x7f0000000700)={0x20, 0x21, 0xb2, {0xb2, 0x7, "358d51d81e036333552d61468567f1cd2a9ec0491aaa6e4e865050a763890a32aa8569e44e1ef6b8e93d8812a560b5cb1ddefec7f527c049fb4b51408a14fe7d6d685c03375955577b00a8cdf97ac17585d52ec0a8baf98aeb1bc4729e50bf4d3b678c3e4da790b62e13799f2f70a4fd47b79ffd54dbb6d5c8f83064705e5e76bf389d0eee5ba3264982376db2fc2d04922f7ab49115e1e067b6d326346e2712d83365fa818b9f1c93f2d53511bc15d6"}}, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000840)={0x20, 0xd, 0xa0, "80be76e93fab211978feb5c01c29a4a45f885e96300f056ddbb0e1a819f28461ee79f60d4417cbe6e493720abc18ea3e0ce6e428a5a4b205dea83bf7a44eef88bb0e861908990fccfa765ebf09541be01fa408753efba04125fd45bcca392697aa46d3406954b1ff517535b32337200968a9323e95de6c8239300350de52786e6b537e138cabd3a377937a70fdd2ead3526f9f542397f0a233a0d63e1af2e024"}, &(0x7f0000000900)={0x0, 0xa, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}}) r3 = add_key(&(0x7f00000009c0)='rxrpc_s\x00', &(0x7f0000000a00)={'syz', 0x3}, &(0x7f0000000a40)="415264f6cf4854c267c4c13866f7447ab4667074e710f6326e40db44f82bf66505fe4cf31018132fbad0f03a9c0f824ba02300969b0f0789b9c06af4fed28e8c39395f819d6b7d840c495233019a66394ee4773c9a8296a94972262589b83107f18b4abeb5db44847b865462fee47a7d479c5060403e4ad6fd6217b2a88310cad35e69209e0791ccd761544d8179185b3a60c53ca6316c88a410919719fe10857b96181fcd020e6c6fd795c26305804f5fb6953ba986c303aa6b84bbcd00b7b8f2e1623b9b3bbaff95d85a22add65a20", 0xd0, 0xfffffffffffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x80010, r1, 0x28871000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000b40)=@assoc_value, &(0x7f0000000b80)=0x8) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5) r7 = add_key$user(&(0x7f0000000c40), &(0x7f0000000c80)={'syz', 0x2}, &(0x7f0000000cc0)="75af6cc0395081476dbe49ac552f2dbf5a55c7f4b8e50da97c467510cbcf2a0699aeebb15f81a6d9780ea55c8b11db34caf08d94160aacf4b1469aeba198bb1504ba4035cae70707a7e8e65d27c7206394b29340ec49f680a88ae79178990b92297db71613647f442575efe50e7e9255727bfc13733ca289ed38c7f13e4d5a2f6db802cf8279e42f25ce078059aa329ff394cedfe92bb311cf5ff458931485bc3b", 0xa1, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r7, 0x1) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, r6, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0xa}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2008c001}, 0x20044000) openat$dir(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x50000, 0x60) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001000)={'ip6tnl0\x00', &(0x7f0000000f80)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0xd, 0x61, 0x32, @private2, @mcast1, 0x10, 0x80, 0x87a, 0x9}}) getpeername$packet(r5, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001080)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000010c0)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000001100)={@multicast1, @rand_addr, 0x0}, &(0x7f0000001140)=0xc) getsockname$packet(r5, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000011c0)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000002500)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000024c0)={&(0x7f0000001200)={0x12a0, r8, 0xd72275c6dd556d20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x78, 0x5, "c2749bb8cbb5f4186790f849ecdc203a6258789b3fa7a95284662cc357564a58bfb2619bbee9b24aaa246ea63966315ed9d2105c220c9ba7b42f9976aa7c4b8dfed9dceae108f813dbd7242b0792ee40b963aeb56deba257578a24a6de4ac8b4d566022c2dc8bc9ab7240dc641129743c17e8a4c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x33, 0x5, "164d6dc5fba746eebde0f65db84a4e5fc17d44205fb9cbe5257986b2e83470a02c2b5ac1760822da4fca128874a57b"}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/selinux/avc/hash_stats\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8f9116c586928b4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x48880}, 0x20000010) sendmsg$nl_route(r5, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)=@ipv4_getaddr={0x50, 0x16, 0x4, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xfe, r12}, [@IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0xffffffff, 0x56c, 0xd0b, 0x4}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LABEL={0x14, 0x3, 'veth0_vlan\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) r14 = add_key$keyring(&(0x7f0000002780), &(0x7f00000027c0)={'syz', 0x3}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000002680), &(0x7f00000026c0)={'fscrypt:', @desc1}, &(0x7f0000002700)={0x0, "8e8b578160c98d42e3f371b805d19808b03651e65176e63718eecc56dd34bb035c1120c427acdfae2b55964d3550f91489a96778d46180caa2c559e5ceb9e320", 0x33}, 0x48, r14) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x2000004, 0x2010, r5, 0x82000000) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000002800)={{0x1, 0x0, 0x80, {0x4000, 0x4, 0x1}}, "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", "247d4e9c6b31820a087a9d917b3cfecc25b8d80bcf681cc2cd75cbf9ab4e2e9fece581828d1c5e88164d9ee57ce3465ae7df53eb8607bbe4f7eefe4d40f9f871bf9ee5b6fc23e038383c72a280d499df49c4d2e0c3803ed124d2d00c3f631da71e28f02427fc2e1268b0f89b56b6150c7c590546307a9a2ddcbc953ed64a23b8abec262107654e3c4913fb9dd53202eeeb31e623f1999b21a3283bf224bdfdf6aaa11a186e1523da7ffbbff54e8d56af456e5c018cca9d4ffc34f0254fbd432122de1509b0a60f8976abcf79c8ababd84a2b550b3c9ec4c9ec436a4b526ce21a1cbcdb2731a0d1447c238687db619ec0d77ff6079a645fde32380075deb564373cb9e4b9e9b02ca27db381e7ed3b28bbbc276b6b4a32f4b6d9df949c64d6db8ed08f2cb43ad2894ca7e1b68eb7c2451530612214860c08746292193159b7d1ee1c9b75655d7ab874e3448196dffc9ef01ecbe72f85d782cf115e5eccba1b3e0bb23c3811c6c2a46c8a9221f22c053852a1e6708689853a92506d8a72631a60da8561d6d867c6abb949bbec489a35597bdde380f4e3d7a158ca4f590a775dbca6142d7a1e3ff171b5e062a0b2bf6c867683b1822d7c37e5b39db0275ea52ecd73406028dceb398bf2e6363465925cd95dbca8765ffa427ec2e1e16af344b4f9ea7256763baf25c65b6da1dc44f5d73f95e5a049fc6cf54b69d0918afa056deb322fb53f0b3dba0c379401aefbd4ce24d28014fc38292c4523d21b2ffd3aaaed770d54833dc2843e85283b8ef2e33493995484b058db71c6928e09c4849edf1ad3d09ca9c9fd2c20657635a22afbb6a017de9acc5c05e0325e51974e8f50677cc36d6d68536107e28b4aaef0da09b9e763c48b48077ae28572e2558bcd415aa424372369fea2e80e51e0ef530755aa7548b9d84c5ddf23aaa3a747082c4292a7191ac39a7d17c40fd9943cf1dade113c056ae70d3d9e7ec29587b16fdf15dd13a49e74d6a929aa494d63954c7e15bb3b4acd46a65856856668af7c740bafb514854ae2c97ec4487ec7d6dc7f402546a3e41b587a67d44a466a83a8930101f2cde93700b9b81190cfcb649086d8885c1d30a08cb6cbd5da0a096c8526feb918ef46b0961dacde38b5bccea294f8a9e58337a36360bfdc864d2bc89386e15fc54eb0552fabe2f8acb543b51491a0e53c9ff252c7a3432e5c0b539e76aa80df5feedcd1c254b50d3282b012d37e3bcb782238ead8d8b28555bebb6ade4a55b0e448b8f2f13f82d9042f2d5399e3428f8670d4855a37ef0aab5c71e4f920acbf279891e32f3ea9d897988de729dde828e082c5e402f21f5499942138f309acf51d1def41a3f9d30043eb4c27a9a39be44d2fb58b0ffa602f643d9abbed08b0987696c1aba41e0e1f013eb0239bc40e410831f269cbd7ad5565a148162fe6f79de2ecb8129576ba5946ff27cd235b526d8868509bba2d35eff7436c7c8cef2c0756d05d90c869a20461cdf03fa1eab95a9375acef27f518ef5dfb969e3995d9aca2cff68e199f0fe5a3e1bbcca5d87cb89f5b34509f2b18d7441686d4400f960dd16fcfa791d2e0fe3a949f544c727f4f04316ef1cdfa7de2535555cb42d0b9e6b8f0308d6e169b37c4dbe6f6f9d12d8a447d9c3da3491bf3a096bd36181d8221aa5a41702f24351b2b10d3a686231b625f3e762bb08c448a0bf6e92436b92d50a5a4f0334c5554263624ded029ce1265dd80e17b8aaa73b685b5cda1b376e5f6897267d8f40d9d483eb51d890ef55e5a0ebe4f9af802fd32c9a5e6f72bc707a0e9214cb50348ee72653f3685080ac508dae8579f1fd315381bdc87d83c037030802d07c4716457e03845a602c80a05e742a09ea33721bf276bc97c6db3ad9a6f6f19c08fb9a5b9606d24d2731e79ba1f4f87eb4e0981735a2c0e65635fa6da6e8588923509573da8a7107b165b1998f32b010f5b5d5da8bb094300257b4b2b973f4be2040f79d9b6970f24f7603a7a9e6af09394ee2df32184efa47a7dda30f3d9f4d3cbe98542c7a9e34bd2c7b802bfc19cad0814735291277eaf495107037b503b0f38806599760dbb09bda37284a673de8ec90bffdaaae5f28fbd1a7f7ff6ad9673d2ba0c8377e5b2086685f6056b665df8c110e41848a5af9a17a9bab485f29fa27fd8a2db95ca578d0fd414f0e723af064ea8229c880686782a8eb4ffe225ca2afa99f3d358246804307cd8e8be6035b816bed293bb1dd200940b78a37b7e034c42c24640c1661bec1831c2efa2a162828b6666fa1f02b63b025915179d0c079980c5c3daba5954db89bfb21362d7d5244d623e4635eb148d07068820efc38892d8c500620989fa83a20f34a5bf0deb3a09fa276836b22eae5d8c39e71d6e607ead33fd1397033fbc4952f992cf4e0e4572f7015d87de2fb88ce15ec6d32e90433fdbf5718d26c6d2fcbcd05607acbf2ddc33fd47edcc63874b8d5c593d96a36bfde0a7369f85cce8888e4809c3744ad4161cd500230ea3e921840718b0c6a7ce27e6450043597856203bc51c13c469cb520c1d2ce68bb47cc3c80264958b14e253a4fc49d3ade556a2f8a119dd630745b4a50ca9590df20ab8a661ce7131c70ead245b1ad1713b5c0e8969d3b13acd9d4445bf780a664c1318df3863d8c4ed1786d355d95f5e383c430c1f1df18564a7b954dafcf696e12c188c2fe3948fde9a95b1b91e7e7a921755120b70638f612cc9fa8427cdd20667374fa9a315d8cd7af3aeb388d65b84a1ccd6475937a45aae872fa75740a568a31cef2c681758e1434ec935a90497594613a57a51f1d53eeca19c83b07bd027ec4d47e86896528fc43c560db4dffdf05be78608fbc32d2a38592ad4c8bb8e29466663bf3ce2b84715bd9c5e9da9065a75b1d987c6da4c73b0e29a38d727c108c2a7283e406d4fd3a24bb8a6933aa1947120364da8d7731adeee527fa72ec53da371217797c773d7da00c128848f0c16588faeaccd34cf29891e923ca3bf800b5206c93defc650dc4d76e720544261f35ce82dd0208787cb3cc0a870dedfe6d762caf70c0243bcaf5f41ad2732205f9b11a9f074ee43ca48f5586744753c517b2622ceb586ee66dca4ee103b458ee9bf1e98f93e4c45775b59e15aa9d28a8d9686fbe2ede4653f3edb744b0a61b19481f162cf038f40ed7c2ea68d106a951924614c9bc56914796816b1a1fe8c3a7554c9fb82eda775818c98be64bf43660dab4de8216d256a23acd86b573e6bccfa4b739960f58f8af0fdba0dbefae57cd9bfe6570f9f5bf56a90b38bd70cc5fdee94047e787e46ed2d7cb0d64800935f9d28e0ff7c8f8b3f7bdf17be95891e2cfbaec632ba2a3b0c1148eef6d6c14c9233f537dd97c75d93dc9e506f63927ffd37d72c8ecbe651b32f1c2f5a931306e0f7deb725ea9165ac9b6a1ee0bdf2448bc53c795a6b11e9664a0163044e578140126953b80abee61f0bd8f619b48216e678ad8ab08ca267c1bc0421e9ad8845acdbfdd8fdd15d1711328fe12c36330931c2c9da931a00df6acae6f82f4e4701f892c1997e92b2981f1e8712e060ac8fe528307a73570c28f976a6321135c9cc5f40dc8b18a526028042fc804771ec969eebae78242f7ba4c9c4d2340813af7e10349e6763c5c90de76c344c844268fe7dd51fd28bd16190303356314f0e88879624dae24b66e015987cf2b907e3fddf9050f91066077852b96ab33942925e44ad56411529f1f60df35327058a55746b53eca8a710645da1a9078c80eba83aba4105fa7e54cc0c54a087d267e800274ea87569feed729368d9c779587160642109c969ae9bd103d95d3d2402242dd2e68d566bf80265d8f3b64894f68955584197f1cab453ed7b68b89e097b080902cba79f37e505cdf2e49edc6f4f8a9d1413ef082494d29f1c439b192928a55781676093a46a89f380f5636814e07a24d5e8e0604e534929defa8fd51a94424c7b57b61e5e758456f26b7adb9bdedaf04477243572aa5b1114e1e3089f467f1275601391260036675409fb649bdad994adfe18a1376b6e503a760a984a08d24e9ac3fceaedd664380e55972515b01dc62763ed3b9de132d32ce27665431f9081fd2a3ff8c9da751f8181fef10e34c4843af04512d3ffb7b0bf520c39ba1858f76e38a8d50978f6d313f9811d37a8b0e89387ecd056687a7cfdd3e4b8de37edfa7e911cb88f9b68c60c10eaa52b1bd8e6796519838e488fc9c26ccf5499045a1bd555796e1e59803a3f2f98d4cd630f1c10e3c285565ccf96339e7f09fb500c7de1a0d92c827f00e389838e9d7d2d76fcd8c27ac9e75c7548daa0003c5e2d95fc3bbb608eebfee0eb919fb694f70342ca922733b3f65c46e16e049e09bdc8140ef9753aed0f05c45bf07eabca01ce95c7136df3d42ba593e900732883767b3a85239226481caac37a7934ecb0ca5b3e9c1af903d875067c8b3b8e9893a65c220a5cc54e9cb4c111ad78f6a7489a4b3240000e5fdd602ca03f2d69ed323e92772d83b7c564e55ed11841f086636b0a26e17f045c83b855dfd6e8ab7673d63e8badc823d8e5e0bc70f3cfb63d97f121ca4c3f2be75ecdb88d5fd3006312abb6704c52cc52c22b9faded6b6b745cd585ac95d6165b73ed72258c8edfb66a3bb564376ab8592c8344cf63ff0c65f8616db0709eea6942da1d5104bde6c0b39fa25a48e36619e5c2e9c14e3b90e99533e783ed3ed3ad2b433fec5c53493dc00fff0d459639c76a98fc2939c60de10d5848652921e97e5f82e1a4e19f8c98d4f2a626162f7401973fb59814df63db3c63f1a00f6e04f3759c65d4a175090906450da8b9f4d018614dfa5d6ff7b56a3371814d678281fbc1460fd3258e5cff478e1a5ea7a013a086de9794f54828cd880c1726242b9c59fcd053af0c8e4b89d06b3e58c1a47cef4a591c8ded2c7fd18b24f405b210b55f75c712909dd5451c81b682a2c8767e24b13843d80ee0d2f271466f3baa3c97df25c2e24f6d4077a52e752e7d1acd7fec64ece345398610fdee12ec9ef7be5788af94fec1cd36e3c544304f682e01bba2f9dd43e35e14a78cecce7889d4aefdeaa72e51b384ba0be482998d035843b841cb84c3792b8beb1e0b241f1b1e2859bf1ec768935dd74516dd5d65c547cafa1500de83c52d642d29160268a3fed8a93de8f4b4fd72b4dfa03a69f8eddbcbcf93de737c5065412b9d000a88d73ae127840fbd94dccb7395be28fc868f47dcbc6f0ac60a6ac4a43926001623e1721594e7cb2b7180946970ac4304469d4ab752e576a793ce28407bfc542ba9da72bba8546550d5a8c97cc41377e847ff62785f511437d8c008937d8eb7cce8c3a2d6d65b84ded9820577ce053004bd9cbf6202fcc48393fa905dc6db11399c10fc1f2a02a4bacbba2ee5fc84d32d9e99661b973c696b05f19084747bb766fb9ba75ae91970b26aa3b75e78b937a33ec5dba001bf1546db3f1ff02e68ba084623da6e9e2c2e3eaa4f070b42565ac1885686d68285436297cb92693d3e784a0dd56431343df01e2f87821425e0c9b85db18765f28f00d2b60339029d75d322ece62cae79fad61d60d8a4af7eebad0018cd6d74a8921c0be7cda2d854a2167062b0b1305b1bf1ec6bec0a513d0e19a73c3a10e6162b2781c3855ff745ac1035a4560c4eaac781db7b3543324a824261d363ce43d409a25fad449f7ee6f785f935ae81e3732097230bfe4e6493c51cd12a8f63b6775c391b72ceca2e445712482ae2c85bbcffcc18339f89dce797464f91"}) r15 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r15, &(0x7f0000004c80)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004940)={0x2cc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x131e}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdfa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb9a}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc75}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffcd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004) 2m41.995594696s ago: executing program 3 (id=109): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3, 0x800000000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x10, 0x2, 0x7, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x41, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r6, &(0x7f0000000040)=""/36, 0x24) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf4, r7, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x73}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ee}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xde}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8752}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x962f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0xa, 0x4e24, 0x8, @empty, 0x5684}, @ib={0x1b, 0x8000, 0x3, {"a331293b799b3c543ac230e2084691e2"}, 0x8, 0x3, 0x5}}}, 0x118) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000000c0)=@md0, r9, &(0x7f00000001c0)='./file0\x00') syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x41, 0x5f, 0xbc, 0x10, 0xe8d, 0xa7, 0xb531, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x8, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000df713820f0031d58381f010203010902240001000010000904e50002ff"], 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r8, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x2}, {0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, r8, 0x3ff}}, 0x48) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000240)={0xf0f080, 0x1}) 2m38.757868231s ago: executing program 3 (id=119): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x21) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x20) read$watch_queue(r2, &(0x7f00000000c0)=""/11, 0xb) keyctl$revoke(0x3, r1) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'pcl818\x00', [0x2f00, 0x5, 0x3, 0x2, 0x9, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0xa, 0x800, 0xe2df, 0x3, 0x1, 0x80, 0x60, 0x4, 0x7, 0x70f]}) 2m37.448142363s ago: executing program 3 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0xfffffffffffffef7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 2m36.788020569s ago: executing program 3 (id=125): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10010, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0xffc99a3b, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) 2m36.623205993s ago: executing program 3 (id=126): arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xd8db) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x34) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x88201) ioctl$BLKFRAGET(r2, 0x1265, &(0x7f00000000c0)) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$packet_int(r3, 0x107, 0x1f, &(0x7f0000000140), &(0x7f0000000180)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3b64) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xec) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="d654f546e7a6e279dcaa3c520f6070a5c8a9d57997fa549ad4233d8a6e541dbff69ab8ab8897e57d318fef3ed0bff42b4ecb059e1eb5d99d", 0x38) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x29c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x83}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffe0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4e2c1812}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x667}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7dc2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x49, 0x3, "3df7ce96b2bdb76cb49b786bddfe993718e49bbe15f2a4f4a4c234a90e9c8e2c0d34aa94659af1b8f3b7b2ec4c9a88b4f23fc3b6cf83507ca3adf72a3a528ea9bdaef1eaa9"}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "e0a345959b0bf7da51177dd2168d43ef4f5d3b52ffff48e07223a99fad8262420e5d1e2575f40d3ec04c6634fcb4ca8d6445034fc926fb8954ae841a909ff05f5b27df8af0bc4b1ba82f9d6970fc583f1211e2dab013096cde17dfeb08a0315ac2d4195ed796267adc0ef75a982f179fb02dea1beea7cd55c561a7dbd12943afcd261cabab419e0d0be5194c6a44087e2daa65f145a3c840d0d6755c5d716797a6dd777a350f7d9c228b7699736157055114ab44c7c41c6195a58ebdf2ca"}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x22da0}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4040040}, 0x20004010) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x952) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xa14) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, &(0x7f0000000640)="410f236764420fc7760f400f01f1c442f19dd866baf80cb8c8425e8bef66bafc0cedb805000000b9f9a900000f01c166baa100b00aee362e470f01cfb8010000000f01d966ba430066b8bc0066ef", 0x4e}], 0x1, 0x0, &(0x7f0000000700)=[@efer={0x2, 0xa000}], 0x1) r7 = accept(r3, &(0x7f0000000740)=@rc={0x1f, @none}, &(0x7f00000007c0)=0x80) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000800)) set_mempolicy(0x3, &(0x7f0000000840)=0x9ab, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0xf}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000008c0)=""/127, 0x28, 0x7f, 0x1, 0x7a}, 0x28) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000980), 0x40a001, 0x0) ioctl(r3, 0x459a4a5d, &(0x7f00000009c0)="efd694484b07689477ada7486c5ce614b58f2aba35ba") ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000b00)={0x4, 0x30000, 0x4, 0x2, 0x0, 0x3, 0x0, 0x5, 0x40, 0x7, 0xffffffff, 0x200, &(0x7f0000000a00)=[0x1000, 0x6, 0xfffffffe, 0xc, 0x8001, 0x2, 0x7796, 0xb0b2, 0x9, 0x400], 0xa, &(0x7f0000000a40)="349907226f5cd675513514669861485436914b06a7eb726fc897b9dbd878f1ce0fb9aa8ef0a1813efaf28e7184f9b36972243c59a15950d546e48db5427ff6a7b72786b8b4616cef5c26768fdd746bfeb8d7d9ed48b24373d93e2d09b0d7a23f1651658812630a4b29eedb477c1a4be412da83e3c3204b1c17634dd11dc8871d9e870d97303c2fc8a154b67c037e6ebe4407dce8f49781551452929793a2", 0x9e}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, 0x1410, 0x800, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) 2m20.974141336s ago: executing program 32 (id=126): arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xd8db) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x34) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x88201) ioctl$BLKFRAGET(r2, 0x1265, &(0x7f00000000c0)) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$packet_int(r3, 0x107, 0x1f, &(0x7f0000000140), &(0x7f0000000180)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3b64) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xec) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="d654f546e7a6e279dcaa3c520f6070a5c8a9d57997fa549ad4233d8a6e541dbff69ab8ab8897e57d318fef3ed0bff42b4ecb059e1eb5d99d", 0x38) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x29c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x83}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffe0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4e2c1812}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x667}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7dc2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x49, 0x3, "3df7ce96b2bdb76cb49b786bddfe993718e49bbe15f2a4f4a4c234a90e9c8e2c0d34aa94659af1b8f3b7b2ec4c9a88b4f23fc3b6cf83507ca3adf72a3a528ea9bdaef1eaa9"}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "e0a345959b0bf7da51177dd2168d43ef4f5d3b52ffff48e07223a99fad8262420e5d1e2575f40d3ec04c6634fcb4ca8d6445034fc926fb8954ae841a909ff05f5b27df8af0bc4b1ba82f9d6970fc583f1211e2dab013096cde17dfeb08a0315ac2d4195ed796267adc0ef75a982f179fb02dea1beea7cd55c561a7dbd12943afcd261cabab419e0d0be5194c6a44087e2daa65f145a3c840d0d6755c5d716797a6dd777a350f7d9c228b7699736157055114ab44c7c41c6195a58ebdf2ca"}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x22da0}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4040040}, 0x20004010) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x952) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xa14) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, &(0x7f0000000640)="410f236764420fc7760f400f01f1c442f19dd866baf80cb8c8425e8bef66bafc0cedb805000000b9f9a900000f01c166baa100b00aee362e470f01cfb8010000000f01d966ba430066b8bc0066ef", 0x4e}], 0x1, 0x0, &(0x7f0000000700)=[@efer={0x2, 0xa000}], 0x1) r7 = accept(r3, &(0x7f0000000740)=@rc={0x1f, @none}, &(0x7f00000007c0)=0x80) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000800)) set_mempolicy(0x3, &(0x7f0000000840)=0x9ab, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0xf}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000008c0)=""/127, 0x28, 0x7f, 0x1, 0x7a}, 0x28) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000980), 0x40a001, 0x0) ioctl(r3, 0x459a4a5d, &(0x7f00000009c0)="efd694484b07689477ada7486c5ce614b58f2aba35ba") ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000b00)={0x4, 0x30000, 0x4, 0x2, 0x0, 0x3, 0x0, 0x5, 0x40, 0x7, 0xffffffff, 0x200, &(0x7f0000000a00)=[0x1000, 0x6, 0xfffffffe, 0xc, 0x8001, 0x2, 0x7796, 0xb0b2, 0x9, 0x400], 0xa, &(0x7f0000000a40)="349907226f5cd675513514669861485436914b06a7eb726fc897b9dbd878f1ce0fb9aa8ef0a1813efaf28e7184f9b36972243c59a15950d546e48db5427ff6a7b72786b8b4616cef5c26768fdd746bfeb8d7d9ed48b24373d93e2d09b0d7a23f1651658812630a4b29eedb477c1a4be412da83e3c3204b1c17634dd11dc8871d9e870d97303c2fc8a154b67c037e6ebe4407dce8f49781551452929793a2", 0x9e}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, 0x1410, 0x800, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) 10.685933193s ago: executing program 0 (id=608): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000002640)=0x100, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)=ANY=[]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1000afe3ce584366e52df306994bf32c57ad000000090503000000be92950a6a0d5d2bc08a1700000000000000010058a00308b5953d7ee80247788caecab580b1a8f7f35f6f76499456e0a58b6d0041bdef3d31bb3475a4f38d5a9ce2"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8) memfd_secret(0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) syz_open_dev$sndctrl(&(0x7f00000020c0), 0x9f6a, 0xbd302536eb42e10a) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 9.3571134s ago: executing program 0 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="428758e2"]}]}, 0x2c}, 0x1, 0x300000000000000, 0x0, 0x4000c000}, 0xc000) 8.860003101s ago: executing program 0 (id=612): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() socket$nl_route(0x10, 0x3, 0x0) getpid() r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000280)=""/239, 0xef) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x2, 0xb49, 0x200000000002, 0x2000007, 0x8, 0x3}, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000180)={0x83, 0x88f3128209a80594, "8f60d3d40ffac33c5649c11db08a590f1b5befa17b8eb19cc880f2132d2779a7", 0x40, 0xfffffff3, 0x80000004, 0x8, 0x2}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840), 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) accept4$inet(r4, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000200)=0xfffffffffffffebd, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x5, &(0x7f0000000040)=""/56) 8.857715487s ago: executing program 2 (id=613): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000180)=[r1, r2]) r3 = fsopen(&(0x7f00000001c0)='fuse\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xb}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x59}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xe3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xed15}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xb}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x59}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xe3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xed15}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom0\x00', 0x2, 0x0) r9 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x7fff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000480)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000680)={{r10, 0x5, 0x10000, 0x3, 0x5, 0xde76, 0x4, 0x8, 0x2, 0x1, 0xa, 0x8000, 0x9, 0x9, 0x1}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000680)={{r10, 0x5, 0x10000, 0x3, 0x5, 0xde76, 0x4, 0x8, 0x2, 0x1, 0xa, 0x8000, 0x9, 0x9, 0x1}, 0x18, [0x0, 0x0, 0x0]}) r11 = socket$l2tp(0x2, 0x2, 0x73) readv(r0, &(0x7f0000002b80)=[{&(0x7f0000000740)=""/197, 0xc5}, {&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000940)=""/39, 0x27}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/29, 0x1d}, {&(0x7f00000029c0)=""/81, 0x51}, {&(0x7f0000002a40)=""/214, 0xd6}, {&(0x7f0000002b40)=""/54, 0x36}], 0x9) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000002cc0)=@nat={'nat\x00', 0x1b, 0x5, 0x440, 0x2d0, 0x118, 0xffffffff, 0x228, 0x228, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, &(0x7f0000002c40), {[{{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x0, 0x1, 0x3, 0x5, 0x3], 0x6, 0x1}}}, @common=@ah={{0x30}, {[0x1, 0x6]}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1d, @local, @local, @port=0x4e21, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x1ff, 0x5], 0x1}}, @common=@icmp={{0x28}, {0x4, "4af5", 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv4=@private=0xa010100, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x8, @gre_key=0x8}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffffff, 'veth0_virt_wifi\x00', 'syz_tun\x00', {}, {0xff}, 0x62, 0x0, 0x64}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @remote, @broadcast, @port=0x4e21, @icmp_id=0x67}}}}, {{@ip={@private=0xa010100, @broadcast, 0xff000000, 0xff, 'veth1_vlan\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x6c, 0x6164acf9c9d0c1e5, 0x4}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x280, 0x28a, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @icmp_id=0x65, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (async) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000002cc0)=@nat={'nat\x00', 0x1b, 0x5, 0x440, 0x2d0, 0x118, 0xffffffff, 0x228, 0x228, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, &(0x7f0000002c40), {[{{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x0, 0x1, 0x3, 0x5, 0x3], 0x6, 0x1}}}, @common=@ah={{0x30}, {[0x1, 0x6]}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1d, @local, @local, @port=0x4e21, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x1ff, 0x5], 0x1}}, @common=@icmp={{0x28}, {0x4, "4af5", 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv4=@private=0xa010100, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x8, @gre_key=0x8}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffffff, 'veth0_virt_wifi\x00', 'syz_tun\x00', {}, {0xff}, 0x62, 0x0, 0x64}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @remote, @broadcast, @port=0x4e21, @icmp_id=0x67}}}}, {{@ip={@private=0xa010100, @broadcast, 0xff000000, 0xff, 'veth1_vlan\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x6c, 0x6164acf9c9d0c1e5, 0x4}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x280, 0x28a, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @icmp_id=0x65, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) mount(&(0x7f0000003180)=@md0, &(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)='binfmt_misc\x00', 0x100000, &(0x7f0000003240)='syz_tun\x00') openat$comedi(0xffffffffffffff9c, &(0x7f0000003280)='/dev/comedi1\x00', 0x280, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000003380)={&(0x7f00000032c0), 0xc, &(0x7f0000003340)={&(0x7f0000003300)=@newnexthop={0x20, 0x68, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x2, 0x0, 0x6}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x24040044) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000033c0)={0x0, 'veth0_vlan\x00', {0x3}}) r13 = accept$packet(r4, &(0x7f0000003400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003440)=0x14) getsockname$packet(r13, &(0x7f0000003480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000034c0)=0x14) (async) getsockname$packet(r13, &(0x7f0000003480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000034c0)=0x14) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r14, 0xc0189376, &(0x7f0000003640)={{0x1, 0x1, 0x18, r3, {0xb}}, './file0\x00'}) r15 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003680)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f00000039c0)={0x70, 0x0, &(0x7f0000003880)=[@exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000037c0)={@flat=@weak_handle={0x77682a85, 0x1008, 0x3}, @flat=@binder={0x73622a85, 0x101, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000036c0)=""/206, 0xce, 0x2, 0x1d}}, &(0x7f0000003840)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r9}, @decrefs={0x40046307, 0x2}], 0x88, 0x0, &(0x7f0000003900)="0bb2bc87751090247a8cbf9a326f65d5035bf339f8e7a78df8a6a60e0c2bdb83c21d3fd5594bd0580c892212e00cd0e6574ca47148bf0d34ff842038c5b6d14e4ba7b36445c976de32659493ba2476dd3557fa5fd12e8011a62d67c25f20f0844588fd82d6acf781557d414bf954e973e9f339d384c080e57dcd81b65adca76683cc9824c97e4999"}) 8.568492293s ago: executing program 2 (id=614): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x3}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x0, 0xf6e4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000000, 0x0, 0x9, 0x0, 0x0, 0x10001, 0x2}, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000500)=""/55) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x2, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_create(r7, &(0x7f00000000c0)=@access={'system_u:object_r:ppp_device_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x3ff}, 0x47) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 7.327410699s ago: executing program 2 (id=618): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_emit_ethernet(0x62, &(0x7f0000000440)=ANY=[@ANYBLOB="31c1ddb11c"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002b027000ffdbdf25210000000a0001007770616e31000000050020000000000009001f0070687931000000000a0001007770616e3300000005002000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x4, 0x100010, r0, 0x8fe1e000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @private=0xa010101}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 7.311170283s ago: executing program 4 (id=619): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09000084583c75b9a5", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setresgid(0xee00, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) ioctl$int_in(r3, 0x5452, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 6.592046299s ago: executing program 1 (id=624): mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x17f) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) io_setup(0x0, &(0x7f0000000000)=0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r5 = eventfd(0xfffffffa) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) io_submit(r0, 0x5, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x54, r1, &(0x7f0000000140)="32de1cdef177ac00891870c506262b056cba2f0da2480889db8e1e99e10a36a3174eb208e626aa244bbc9ef0d225fd6028e3561f160f7c5f9fb8b13fb1e4ede9c992729c7ca0bb4849f27ff88caa3982e0ee2ac39639c24cd8f8d420a269af56226a198c52e3be9236e5f228a782db348e6fdd0b3e9e8ef3cf6b6bdca6ed97eba5d77d", 0x83, 0x8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r2, &(0x7f0000000340)="8fbb44d894106c2cbe7920ebbc30c5f8cca009814800762b88bcb7e6960b48b340040148a1dad7c74697c95785a07e460d466599ca3c484065301ac4fdd18ab044c97c1cb4dedb15ca698788f556e1b97c21d42f52eded43952e8ff150f01262d3b39b8ccaeeb36cabcc4cdcace18b4e2336237836dfb3ada6861b245cc118816631738a19d24ec7dcc682eadba444d1572606d6a395ddffb950e0a8d66b20619fda02fb31b19d530b29627fb238a2ec3a34bc0d2d2279bf186870707247747972964dcd19f4380241baebeab59f10ac0c44ff54b363e3232a4c369e8efa6ffd149ac9285aa5e59aba04338fc3", 0xed, 0x1, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x1, r3, &(0x7f0000000280)="6245e6616d2e829b89be941069acdd53af596cb0f52f01edca1570acd8febb3b1a4ff4ef17af8a77050a02598f3a351e3ce4bdcf9b622f9e455f5aa319fd7b8d0c78afaf99698578f53e0808291e800a857175110759c9d2b8c58729eb790211d1c44d", 0x63, 0x6, 0x0, 0x0, r5}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xd, 0x2, r6, &(0x7f00000004c0)="fca582b0ab559186845116567e814e040c0baa6e79cda795b3af1853ea70d1ea12a4ecf36c4bfea18aaf1300fbec044c338095ea07e3e7b0aeb2336571b31488e382797a9b7d3f2df72ba8a43aec0e1d17e74c8738cd6ad5db424f0e3b49cc9368c950d998eb0f0ecc97c217", 0x6c, 0xffffffff, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6d, r7, &(0x7f0000000580)="70f0ef1335c496e57daf870ef0f6b9808aadc848b4f616669a73e85ddfee805b42a62824a304a9716f2707eff34fd2ce128af5897ce2419d862b7430995675fc3d6eae51615affa2b99f64f666d29be58818fa6c0eff5975c93c9a5d9cad5051135bd3407a2b3b216cbc2bb5677c9067a56e4eef728e25f8930ed79dd86b6296ea730c8e200a543a50cdb5cee0542a1a9a235dc152a166ec298c3e742c19f6f5414f097e9ee916849ad9cf5a8ca926cbd26e7e876b74c76e2ee1647a722c16b0cf2ba6fc15fedfb11a69b1f8441d642cced6e7455ad1ce7f5db5dec5", 0xdc, 0x9, 0x0, 0x1}]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xd05c0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$CAIFSO_REQ_PARAM(r12, 0x116, 0x80, 0x0, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000a00)=ANY=[@ANYBLOB="010000000000002cff000040"]) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r13, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002640)={0x14, 0x2a, 0x201, 0x0, 0x0, "", [@generic='Y']}, 0x14}], 0x1}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x286449c, &(0x7f0000002140)=ANY=[@ANYBLOB="2cf13d", @ANYRES64=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r9, @ANYRES32=r11, @ANYRESDEC=0x0, @ANYBLOB]) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="2a00000006000000000000000000000004000000000000000000081a82b39822c9b6"], 0x2a) 6.447566323s ago: executing program 1 (id=625): r0 = fsopen(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getownex(r1, 0x10, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000280)={0xb87, 0x1}, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001500"/25], 0x48) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = open(&(0x7f00000001c0)='./file1\x00', 0x41, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @jmp={0x5, 0x1, 0x6, 0x5, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc05d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.370693158s ago: executing program 4 (id=626): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000003c0), 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x25, 0x8, @val=@tcx={@void, @value=r4}}, 0x1c) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYBLOB="36bf5ffe022277a36fad1f1b27d4891f023a68f8001d1c6addfd99b82861038c1b2957406a452f80b2d963148f3d56763b6ad67bbe22e438c771344c28acad42e1f698d9b3ab613fba0203caa9ba1726af71ed45f47d04759d5f3ea0dc2b110dc1f5941f7c0d6aa80e059c3a5e1be1cb60e4e8dc5defc72eefe0d2e5498cc266480f811979ebf498a279e067ab712812cacc9f685d36a873483360", @ANYRESOCT, @ANYRES16=r2, @ANYRES8=r1, @ANYRESHEX=r6, @ANYRES32=r4, @ANYRES16=r6]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) accept$inet(r7, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r3, 0x59967000) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.153332629s ago: executing program 4 (id=627): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) close(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r7}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0x8, 0x5}, {0x5, 0x3}, {0xe, 0x3}]}, @enum={0x3, 0x8, 0x0, 0x6, 0x4, [{0x3, 0x6e0c}, {0xc, 0x5}, {0xe, 0x2}, {0xc, 0x5}, {0x0, 0x7ff}, {0x8, 0x5}, {0x6, 0x5}, {}]}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @enum64={0xf, 0x1, 0x0, 0x13, 0x0, 0x5, [{0xa, 0x8, 0x7}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x51, 0x93]}}, &(0x7f0000000680)=""/186, 0xc4, 0xba, 0x1, 0x8000}, 0x28) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000040)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.595432419s ago: executing program 0 (id=628): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r3, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0xd0, r3, 0x100, 0x78bd2a, 0x25dfdbf6, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20044061}, 0x240048d5) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x200, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0x7, 0x6}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000001f00)) socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x5) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x65f, 0x1, 0x1}) 5.297677952s ago: executing program 1 (id=629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) (async) semget$private(0x0, 0x6, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000f80)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) (async) lsm_set_self_attr(0x66, &(0x7f00000000c0)={0x68, 0x8, 0x20}, 0x20, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 4.62421013s ago: executing program 2 (id=630): syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x2) syz_open_dev$loop(&(0x7f0000000080), 0x522, 0x42200) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x4800, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000200)={0x0, 0x2, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996e6e7d479db86fe609ea2029b", 0x80, 0x2}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x3, 0x2, 0xae2e, 0x5, 0x15, "1e138cc9534fc777"}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000001100)=ANY=[@ANYBLOB="03000000"]) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) pipe2$9p(&(0x7f0000000240), 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000015290000f8cea1bd6c2b00000000000007120000000000"], 0x30}, 0x0) r4 = memfd_create(0x0, 0x7) dup(r4) fanotify_init(0x2, 0x40000) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000180)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040884}, 0x4000000) close(0x3) 4.596933654s ago: executing program 5 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r1, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x2002, 0x0) ioctl$COMEDI_CANCEL(r2, 0x6407) 4.547475705s ago: executing program 0 (id=632): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[]) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x0, 0xb4c, 0x67, 0x8, 0x0, 0x3}, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r6, @ANYBLOB="8cf6589d53b5c9b372ffa53ed1", @ANYRES8=r6, @ANYRES64=r0, @ANYRES8=r4, @ANYRES32=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000004babf0fa00000000000a20000000120a01010000000000000000010000080c000640000000000000000414000000080a0101000000000000000002000003140000001100010000000000000000000600000a"], 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) 4.311625063s ago: executing program 5 (id=633): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="130000000800000003"], 0x50) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@my=0x1, 0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x54, r3, 0x29, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7f}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xe1e}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x9}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc080}, 0x4004010) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@hyper, 0x4}, @hyper, 0x8, 0x4, 0xf, 0x9, 0xfffffffffffffff7, 0x8, 0x9}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a47f22b2c23f061ede0bfbff9b9b16782e30e2f5ed5f9bb46429abf4974182fecb6cf53805732513b66176b4234217420facb695381e65a0e851060754d1e7f5c4", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.473881621s ago: executing program 2 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x20, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) dup2(r5, r4) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1baa887990000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) 3.470579826s ago: executing program 5 (id=635): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x4200000400000000, 0x4, 0x344}, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$packet(0x11, 0xa, 0x300) sendmmsg$sock(r4, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011) 3.216119399s ago: executing program 1 (id=636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 3.089139449s ago: executing program 2 (id=637): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000003c0), 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x25, 0x8, @val=@tcx={@void, @value=r4}}, 0x1c) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYBLOB="36bf5ffe022277a36fad1f1b27d4891f023a68f8001d1c6addfd99b82861038c1b2957406a452f80b2d963148f3d56763b6ad67bbe22e438c771344c28acad42e1f698d9b3ab613fba0203caa9ba1726af71ed45f47d04759d5f3ea0dc2b110dc1f5941f7c0d6aa80e059c3a5e1be1cb60e4e8dc5defc72eefe0d2e5498cc266480f811979ebf498a279e067ab712812cacc9f685d36a873483360", @ANYRESOCT, @ANYRES16=r2, @ANYRES8=r1, @ANYRESHEX=r6, @ANYRES32=r4, @ANYRES16=r6]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) accept$inet(r7, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r3, 0x59967000) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.300618008s ago: executing program 4 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffa, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x5f}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.159023513s ago: executing program 1 (id=639): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) pipe2$watch_queue(0x0, 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbc, 0x80000000, 0x102f, 0x5, 0x1, 0x83, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0xff, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x3, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x2, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x6, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2b, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x6, 0x8, 0x0, 0x5, 0x96, 0x8, 0x401, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]}) socket$nl_route(0x10, 0x3, 0x0) 1.237433348s ago: executing program 4 (id=640): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (fail_nth: 17) 946.706124ms ago: executing program 5 (id=641): r0 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x3, 0x2, 0x2, 0x4000020}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$HCIINQUIRY(r3, 0x800448f0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) close_range(r0, 0xffffffffffffffff, 0x0) 367.211141ms ago: executing program 0 (id=642): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) pipe2$watch_queue(0x0, 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbc, 0x80000000, 0x102f, 0x5, 0x1, 0x83, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0xff, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x3, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x2, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x6, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2b, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x6, 0x8, 0x0, 0x5, 0x96, 0x8, 0x401, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]}) socket$nl_route(0x10, 0x3, 0x0) 247.590446ms ago: executing program 5 (id=643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000066c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {0x0, 0xfff1}, {0x7, 0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)={0x58, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044890}, 0x24008000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000280)={'erspan0\x00', r3, 0x8000, 0x80, 0x0, 0x5, {{0x11, 0x4, 0x3, 0x5, 0x44, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xfa, 0x3, 0x6, [{@private=0xa010100, 0x2}, {@multicast1, 0x8}, {@broadcast, 0xc}, {@remote, 0xc}]}, @timestamp={0x44, 0xc, 0x9, 0x0, 0x2, [0xc, 0x1ee2ae4d]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000440)={@dev, 0x0}, &(0x7f0000000480)=0x14) r14 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r16, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3, 0x80000754, 0x1, 0x0, 0xf, 0xf, 0x6}}, @TCA_RED_STAB={0x104, 0x2, "d34729612e41aeeee58ef726b179b9d576792c4e53c3999e2560ee366634ae2518134449169c923aa4a4285b6e662c64abb19dfbba1333b2bb28afd773ec0aec9a78803ae0c27b68c6311d098281c015a3272113e12867daa80128c6e76cdb928f4e9993ae893e001e11ed8f0599b538fbe8d6e31bc7d6053353eeec84e2d7ea2992d148a70d996cbd0e657080589e44364afb5b754d6856406dda35edface652139d92f3cf02887c812ce5179dcab63ca3b00be93ebd3c0fd66e2b9dc920260fafa1986ccf87a7ae51ebc29d7ea9a7944447ed7b4b29f02d1283f0eaf0eb19a4b35a345d80d838e6b8bb894171e026f0b5084c7514562ab1d5fdca1bd79dfd1"}]}}]}, 0x148}}, 0x44090) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x10, 0x1, 0x6, 0x6d0c8601, {{0x6, 0x4, 0x1, 0x28, 0x18, 0x66, 0x0, 0x4, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc1202010}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)={0x788, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r3}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe3c}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r11}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdcea}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}]}, 0x788}}, 0x2000000) 98.964625ms ago: executing program 1 (id=644): syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x2) syz_open_dev$loop(&(0x7f0000000080), 0x522, 0x42200) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x4800, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000200)={0x0, 0x2, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996e6e7d479db86fe609ea2029b", 0x80, 0x2}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x3, 0x2, 0xae2e, 0x5, 0x15, "1e138cc9534fc777"}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000001100)=ANY=[@ANYBLOB="03000000"]) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) pipe2$9p(&(0x7f0000000240), 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000015290000f8cea1bd6c2b00000000000007120000000000"], 0x30}, 0x0) r4 = memfd_create(0x0, 0x7) dup(r4) fanotify_init(0x2, 0x40000) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000180)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040884}, 0x4000000) close(0x3) 76.029757ms ago: executing program 4 (id=645): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b000003ffffffffffffe8000000040000430000195cdfc19558098f7e29ccf8e7c90ce594b929c90c438aa7402798751413e7df1eb03f4b4aeb8811dfdfc53836055bbadc4575ec5559fc41dbcd", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000bc0)={0x7d, "9984a69e26edfdb7000300000000000000ff03ba91f6a27a0603c6de995ae34b81fb4dec3d44ad144088e68b88dbaea386f1283b716c35f680777326309719e45e5b36835640fdd1dd6c7876adcaa1a9beb8d03de6dfcfdaecb9d67597e890bc9dd646e82aa45e00"}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/66, 0x42}, {0x0}], 0x2, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, 0x0, 0x0, 0xe7b, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5c08cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891f648bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sendto$inet6(r5, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r5, 0x88, 0x1, &(0x7f0000000080), 0x4) 0s ago: executing program 5 (id=646): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b000003ffffffffffffe8000000040000430000195cdfc19558098f7e29ccf8e7c90ce594b929c90c438aa7402798751413e7df1eb03f4b4aeb8811dfdfc53836055bbadc4575ec5559fc41dbcd", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000bc0)={0x7d, "9984a69e26edfdb7000300000000000000ff03ba91f6a27a0603c6de995ae34b81fb4dec3d44ad144088e68b88dbaea386f1283b716c35f680777326309719e45e5b36835640fdd1dd6c7876adcaa1a9beb8d03de6dfcfdaecb9d67597e890bc9dd646e82aa45e00"}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/66, 0x42}, {0x0}], 0x2, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, 0x0, 0x0, 0xe7b, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x51, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5c08cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891f648bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sendto$inet6(r5, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r5, 0x88, 0x1, &(0x7f0000000080), 0x4) kernel console output (not intermixed with test programs): ble to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.501952][ T30] audit: type=1400 audit(1752691280.960:366): avc: denied { create } for pid=7161 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.785765][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.811553][ T5911] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 164.864301][ T30] audit: type=1400 audit(1752691280.960:367): avc: denied { connect } for pid=7161 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.909761][ T7168] nbd1: detected capacity change from 0 to 63 [ 164.919236][ T7169] block nbd1: NBD_DISCONNECT [ 164.926544][ T7169] block nbd1: Disconnected due to user request. [ 164.936929][ T7169] block nbd1: shutting down sockets [ 164.953554][ C0] blk_print_req_error: 138 callbacks suppressed [ 164.953564][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.969559][ C0] buffer_io_error: 138 callbacks suppressed [ 164.969570][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 164.985420][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.994467][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 165.002236][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.011256][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 165.019009][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.028045][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 165.035862][ T5827] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.052638][ T5827] Buffer I/O error on dev nbd1, logical block 0, async page read [ 165.059762][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 165.070487][ T5910] usbhid 2-1:0.0: can't add hid device: -71 [ 165.076137][ T5827] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.100162][ T3529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.108628][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.124191][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 165.133125][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.133956][ T5827] Buffer I/O error on dev nbd1, logical block 1, async page read [ 165.156769][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.161835][ T5827] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.203851][ T5827] Buffer I/O error on dev nbd1, logical block 2, async page read [ 165.213014][ T5827] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.225928][ T5827] Buffer I/O error on dev nbd1, logical block 3, async page read [ 165.230056][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.237940][ T5827] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.256434][ T5827] Buffer I/O error on dev nbd1, logical block 0, async page read [ 165.291794][ T5910] usb 2-1: USB disconnect, device number 14 [ 165.320336][ T5827] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.335927][ T5911] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 165.363793][ T5827] Buffer I/O error on dev nbd1, logical block 1, async page read [ 165.370350][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 165.387422][ T5911] usb 5-1: Product: syz [ 165.412867][ T5911] usb 5-1: config 0 descriptor?? [ 165.424805][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.431787][ T5827] ldm_validate_partition_table(): Disk read failed. [ 165.463765][ T5827] Dev nbd1: unable to read RDB block 0 [ 165.522522][ T5827] nbd1: unable to read partition table [ 165.559317][ T5827] ldm_validate_partition_table(): Disk read failed. [ 165.572574][ T5827] Dev nbd1: unable to read RDB block 0 [ 165.581858][ T5877] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 165.652549][ T5827] nbd1: unable to read partition table [ 165.691417][ T5877] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 166.167981][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.178554][ T30] audit: type=1400 audit(1752691282.590:368): avc: denied { write } for pid=7165 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.198069][ T5877] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.199801][ T5877] usb 3-1: USB disconnect, device number 9 [ 166.225063][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.226219][ T5911] appleir 0003:05AC:8241.0005: item fetching failed at offset 3/5 [ 166.260100][ T5911] appleir 0003:05AC:8241.0005: parse failed [ 166.266132][ T5911] appleir 0003:05AC:8241.0005: probe with driver appleir failed with error -22 [ 166.350359][ T5877] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 166.370242][ T5877] ftdi_sio 3-1:0.0: device disconnected [ 167.011987][ T5911] usb 5-1: USB disconnect, device number 13 [ 167.123745][ T7194] netlink: 'syz.5.328': attribute type 4 has an invalid length. [ 167.719714][ T5877] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 167.821114][ T5844] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 167.830113][ T5844] Bluetooth: hci4: Injecting HCI hardware error event [ 167.837593][ T5844] Bluetooth: hci4: hardware error 0x00 [ 167.939811][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.959745][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.969598][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.982723][ T5877] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.992085][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.017056][ T5877] usb 3-1: config 0 descriptor?? [ 168.153696][ T30] audit: type=1400 audit(1752691284.610:369): avc: denied { setopt } for pid=7206 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.583156][ T7215] netlink: 'syz.4.336': attribute type 4 has an invalid length. [ 168.651850][ T7216] netlink: 'syz.4.336': attribute type 4 has an invalid length. [ 169.129006][ T7219] nbd: nbd2 already in use [ 169.149872][ T7219] block nbd2: NBD_DISCONNECT [ 169.154748][ T7219] block nbd2: Send disconnect failed -32 [ 169.162645][ T7219] block nbd2: shutting down sockets [ 169.530306][ T5911] net_ratelimit: 7 callbacks suppressed [ 169.530323][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.544336][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.586199][ T6197] ldm_validate_partition_table(): Disk read failed. [ 169.640683][ T5877] usbhid 3-1:0.0: can't add hid device: -71 [ 169.686453][ T6197] Dev nbd2: unable to read RDB block 0 [ 169.687008][ T5877] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 169.705993][ T6197] nbd2: unable to read partition table [ 169.743850][ T5877] usb 3-1: USB disconnect, device number 10 [ 169.757669][ T6197] ldm_validate_partition_table(): Disk read failed. [ 169.812310][ T6197] Dev nbd2: unable to read RDB block 0 [ 169.845659][ T6197] nbd2: unable to read partition table [ 169.906262][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 170.619870][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.859728][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.894167][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.959729][ T30] audit: type=1400 audit(1752691286.760:370): avc: denied { accept } for pid=7226 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 171.006295][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.059606][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.110127][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.122266][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.140998][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.700063][ T30] audit: type=1400 audit(1752691290.110:371): avc: denied { setopt } for pid=7270 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.340321][ T5911] net_ratelimit: 8 callbacks suppressed [ 175.340338][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.451585][ T5877] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 175.464809][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.613745][ T7293] geneve2: entered promiscuous mode [ 175.640220][ T30] audit: type=1400 audit(1752691292.090:372): avc: denied { search } for pid=5497 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.641477][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 175.662885][ T7293] geneve2: entered allmulticast mode [ 175.720273][ T30] audit: type=1400 audit(1752691292.090:373): avc: denied { search } for pid=5497 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.725495][ T5877] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 175.785501][ T30] audit: type=1400 audit(1752691292.090:374): avc: denied { search } for pid=5497 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.819652][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.830227][ T30] audit: type=1400 audit(1752691292.090:375): avc: denied { read } for pid=5497 comm="dhcpcd" name="n100" dev="tmpfs" ino=3508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.915473][ T5877] usb 1-1: config 0 has no interface number 0 [ 176.089436][ T30] audit: type=1400 audit(1752691292.090:376): avc: denied { open } for pid=5497 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.220373][ T5877] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 176.236787][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.278065][ T5877] usb 1-1: Product: syz [ 176.280313][ T30] audit: type=1400 audit(1752691292.090:377): avc: denied { getattr } for pid=5497 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.327839][ T5877] usb 1-1: Manufacturer: syz [ 176.380025][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.417677][ T5877] usb 1-1: SerialNumber: syz [ 176.438755][ T5877] usb 1-1: config 0 descriptor?? [ 176.455162][ T30] audit: type=1400 audit(1752691292.800:378): avc: denied { read open } for pid=7306 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.484326][ T5877] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 176.540734][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.572713][ T30] audit: type=1400 audit(1752691292.800:379): avc: denied { getattr } for pid=7306 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.611511][ T30] audit: type=1400 audit(1752691292.980:380): avc: denied { connect } for pid=7307 comm="syz.5.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.716161][ T5877] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 176.796276][ T5877] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 176.899824][ T5911] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 177.019745][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.028460][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.053978][ T5911] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 177.088671][ T5911] usb 3-1: config 5 has no interface number 0 [ 177.104602][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.114039][ T7290] fuse: Unknown parameter '' [ 177.119727][ T5911] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 177.128253][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 177.141743][ T6002] usb 1-1: USB disconnect, device number 10 [ 177.155574][ T6002] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 177.166834][ T5911] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0x16, changing to 0x6 [ 177.183566][ T6002] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 177.352015][ T5911] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x6 has invalid maxpacket 157, setting to 64 [ 177.412997][ T5911] usb 3-1: config 5 interface 123 has no altsetting 0 [ 177.440188][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.442785][ T6002] quatech2 1-1:0.51: device disconnected [ 177.524596][ T5911] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 177.556343][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.565315][ T5911] usb 3-1: Product: syz [ 177.579943][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.588354][ T5911] usb 3-1: Manufacturer: syz [ 177.616684][ T5911] usb 3-1: SerialNumber: syz [ 177.649031][ T7313] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 178.063282][ T5911] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 178.650705][ T5911] usb 3-1: USB disconnect, device number 11 [ 179.121331][ T5989] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 90 seconds [ 179.132049][ T5989] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 90 seconds [ 179.145623][ T5989] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 90 seconds [ 179.159661][ T5989] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 90 seconds [ 179.351983][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 179.351992][ T30] audit: type=1400 audit(1752691295.810:392): avc: denied { read } for pid=7366 comm="syz.5.374" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.523123][ T30] audit: type=1400 audit(1752691295.900:393): avc: denied { module_request } for pid=7366 comm="syz.5.374" kmod="net-pf-16-proto-25" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 179.807210][ T7371] input: syz1 as /devices/virtual/input/input13 [ 180.148707][ T30] audit: type=1400 audit(1752691809.607:394): avc: denied { listen } for pid=7396 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 180.173043][ T30] audit: type=1400 audit(1752691809.607:395): avc: denied { accept } for pid=7396 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 180.199566][ T5910] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.218453][ T5911] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 180.239216][ T30] audit: type=1400 audit(1752691809.637:396): avc: denied { read } for pid=7400 comm="syz.2.383" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 180.280960][ T30] audit: type=1400 audit(1752691809.637:397): avc: denied { map } for pid=7400 comm="syz.2.383" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 180.390013][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 180.395203][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 180.401921][ T5911] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.415526][ T5938] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.423518][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.431552][ T5910] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 180.439853][ T5911] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 180.448865][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.457211][ T5910] usb 1-1: config 0 has no interface number 0 [ 180.463996][ T5910] usb 1-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 180.474756][ T5910] usb 1-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 180.485662][ T5911] usb 5-1: config 0 descriptor?? [ 180.504646][ T5910] usb 1-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 180.514163][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.522184][ T5910] usb 1-1: Product: syz [ 180.526344][ T5910] usb 1-1: Manufacturer: syz [ 180.531326][ T5910] usb 1-1: SerialNumber: syz [ 180.537588][ T5910] usb 1-1: config 0 descriptor?? [ 180.544560][ T7384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.552363][ T7384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.561511][ T5910] option 1-1:0.13: GSM modem (1-port) converter detected [ 180.589961][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 180.599135][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.611286][ T5938] usb 2-1: config 0 has no interfaces? [ 180.618529][ T5938] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 180.627964][ T2148] net_ratelimit: 7 callbacks suppressed [ 180.627976][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.642927][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.651054][ T5938] usb 2-1: Product: syz [ 180.655217][ T5938] usb 2-1: Manufacturer: syz [ 180.660202][ T5938] usb 2-1: SerialNumber: syz [ 180.666208][ T5938] usb 2-1: config 0 descriptor?? [ 180.739861][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 180.746209][ T43] usb 3-1: config 5 has an invalid interface number: 162 but max is 0 [ 180.754542][ T43] usb 3-1: config 5 has no interface number 0 [ 180.761038][ T43] usb 3-1: config 5 interface 162 has no altsetting 0 [ 180.767257][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.771899][ T43] usb 3-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 180.778669][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.785517][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.803109][ T43] usb 3-1: Product: syz [ 180.805998][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.807271][ T43] usb 3-1: Manufacturer: syz [ 180.821528][ T43] usb 3-1: SerialNumber: syz [ 180.824238][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.836114][ T5938] usb 1-1: USB disconnect, device number 11 [ 180.846524][ T5938] option 1-1:0.13: device disconnected [ 180.876739][ T9] usb 2-1: USB disconnect, device number 15 [ 180.905300][ T5911] corsair-psu 0003:1B1C:1C0D.0006: unknown main item tag 0x0 [ 180.914303][ T5911] corsair-psu 0003:1B1C:1C0D.0006: unknown main item tag 0x0 [ 180.922057][ T5911] corsair-psu 0003:1B1C:1C0D.0006: unknown main item tag 0x0 [ 180.929442][ T5911] corsair-psu 0003:1B1C:1C0D.0006: unknown main item tag 0x0 [ 180.937471][ T5911] corsair-psu 0003:1B1C:1C0D.0006: unknown main item tag 0x0 [ 180.947209][ T5911] corsair-psu 0003:1B1C:1C0D.0006: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.4-1/input0 [ 181.010243][ T5911] corsair-psu 0003:1B1C:1C0D.0006: unable to initialize device (-38) [ 181.155607][ T43] usb-storage 3-1:5.162: USB Mass Storage device detected [ 181.165020][ T43] usb-storage 3-1:5.162: This device (04e6,0009,0200 S 4b P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.16.0-rc6-syzkaller-00002-g155a3c003e55) [ 181.165020][ T43] Please send a copy of this message to and [ 181.193721][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.205017][ T5911] corsair-psu 0003:1B1C:1C0D.0006: probe with driver corsair-psu failed with error -38 [ 181.243387][ T5911] usb 5-1: USB disconnect, device number 14 [ 181.664856][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.694664][ T43] usb 3-1: USB disconnect, device number 12 [ 182.134498][ T30] audit: type=1400 audit(1752691811.597:398): avc: denied { create } for pid=7416 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.221502][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.342844][ T30] audit: type=1400 audit(1752691811.677:399): avc: denied { ioctl } for pid=7416 comm="syz.0.388" path="socket:[15094]" dev="sockfs" ino=15094 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.405362][ T7424] overlayfs: overlapping lowerdir path [ 182.428817][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.439376][ T30] audit: type=1400 audit(1752691811.697:400): avc: denied { map } for pid=7414 comm="syz.1.387" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 182.466161][ T30] audit: type=1400 audit(1752691811.697:401): avc: denied { execute } for pid=7414 comm="syz.1.387" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 182.649752][ T7434] input: syz1 as /devices/virtual/input/input14 [ 182.700042][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.741142][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 182.863018][ T7439] capability: warning: `syz.5.395' uses deprecated v2 capabilities in a way that may be insecure [ 182.980291][ T7442] FAULT_INJECTION: forcing a failure. [ 182.980291][ T7442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.993379][ T7442] CPU: 0 UID: 0 PID: 7442 Comm: syz.1.396 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 182.993403][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.993413][ T7442] Call Trace: [ 182.993419][ T7442] [ 182.993426][ T7442] dump_stack_lvl+0x16c/0x1f0 [ 182.993455][ T7442] should_fail_ex+0x512/0x640 [ 182.993483][ T7442] _copy_to_user+0x32/0xd0 [ 182.993510][ T7442] environ_read+0x287/0x450 [ 182.993536][ T7442] ? __pfx_environ_read+0x10/0x10 [ 182.993552][ T7442] vfs_readv+0x5be/0x8b0 [ 182.993579][ T7442] ? __pfx_vfs_readv+0x10/0x10 [ 182.993600][ T7442] ? find_held_lock+0x2b/0x80 [ 182.993637][ T7442] ? __fget_files+0x20e/0x3c0 [ 182.993667][ T7442] ? do_preadv+0x1a6/0x270 [ 182.993686][ T7442] do_preadv+0x1a6/0x270 [ 182.993707][ T7442] ? __pfx_do_preadv+0x10/0x10 [ 182.993735][ T7442] do_syscall_64+0xcd/0x4c0 [ 182.993762][ T7442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.993779][ T7442] RIP: 0033:0x7f321b18e929 [ 182.993794][ T7442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.993810][ T7442] RSP: 002b:00007f321bf86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 182.993827][ T7442] RAX: ffffffffffffffda RBX: 00007f321b3b6080 RCX: 00007f321b18e929 [ 182.993839][ T7442] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000009 [ 182.993850][ T7442] RBP: 00007f321bf86090 R08: 0000000000000000 R09: 0000000000000000 [ 182.993860][ T7442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.993870][ T7442] R13: 0000000000000000 R14: 00007f321b3b6080 R15: 00007ffee6772dd8 [ 182.993893][ T7442] [ 183.255938][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.502536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.513332][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.747124][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.759831][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.773788][ T43] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.817816][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.817952][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.842096][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.865080][ T43] usb 5-1: config 0 descriptor?? [ 184.239566][ T5938] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 184.369628][ T5938] usb 2-1: device descriptor read/64, error -71 [ 184.650215][ T30] audit: type=1400 audit(1752691813.957:402): avc: denied { bind } for pid=7452 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.689552][ T5877] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.852909][ T5877] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.879172][ T5877] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.891533][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.899103][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.907477][ T5877] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.909585][ T5938] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 184.916645][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.110614][ T7461] syz.0.401 uses obsolete (PF_INET,SOCK_PACKET) [ 185.286501][ T7450] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 185.314487][ T5877] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.329623][ T7459] nbd4: detected capacity change from 0 to 63 [ 185.341330][ T7460] block nbd4: NBD_DISCONNECT [ 185.349958][ T7460] block nbd4: Disconnected due to user request. [ 185.360622][ T7460] block nbd4: shutting down sockets [ 185.374371][ T6197] blk_print_req_error: 286 callbacks suppressed [ 185.374385][ T6197] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.411054][ T5938] usb 2-1: device descriptor read/64, error -71 [ 185.446948][ T6197] buffer_io_error: 286 callbacks suppressed [ 185.446960][ T6197] Buffer I/O error on dev nbd4, logical block 0, async page read [ 185.479410][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.493249][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.509045][ T5877] usb 3-1: USB disconnect, device number 13 [ 185.536768][ T6005] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 185.546651][ T5938] usb usb2-port1: attempt power cycle [ 185.554020][ T6005] Buffer I/O error on dev nbd4, logical block 1, async page read [ 185.562036][ T6005] Buffer I/O error on dev nbd4, logical block 2, async page read [ 185.569911][ T6005] Buffer I/O error on dev nbd4, logical block 3, async page read [ 185.581684][ T6197] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.593826][ T6197] Buffer I/O error on dev nbd4, logical block 0, async page read [ 185.617307][ T6197] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.629105][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 185.635340][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 185.644581][ T6197] Buffer I/O error on dev nbd4, logical block 1, async page read [ 185.655115][ T6197] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.666634][ T43] usb 5-1: USB disconnect, device number 15 [ 185.676477][ T6197] Buffer I/O error on dev nbd4, logical block 2, async page read [ 185.685424][ T6197] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.694885][ T6197] Buffer I/O error on dev nbd4, logical block 3, async page read [ 185.703972][ T6197] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.714373][ T6197] Buffer I/O error on dev nbd4, logical block 0, async page read [ 185.722287][ T6197] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.732528][ T6197] Buffer I/O error on dev nbd4, logical block 1, async page read [ 185.742264][ T6197] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.766964][ T6197] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.780588][ T7457] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.790218][ T7457] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.801221][ T6197] ldm_validate_partition_table(): Disk read failed. [ 185.807984][ T7457] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.818607][ T6197] Dev nbd4: unable to read RDB block 0 [ 185.826602][ T6197] nbd4: unable to read partition table [ 185.832356][ T7457] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.846715][ T6197] ldm_validate_partition_table(): Disk read failed. [ 185.854462][ T6197] Dev nbd4: unable to read RDB block 0 [ 185.873781][ T6197] nbd4: unable to read partition table [ 185.929732][ T5938] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 185.960146][ T5938] usb 2-1: device descriptor read/8, error -71 [ 185.979686][ T43] net_ratelimit: 4 callbacks suppressed [ 185.979698][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.289630][ T5938] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 186.798628][ T30] audit: type=1800 audit(1752691815.647:403): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.402" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 186.909522][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.971797][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.991071][ T5938] usb 2-1: device descriptor read/8, error -71 [ 187.029394][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.123558][ T5938] usb usb2-port1: unable to enumerate USB device [ 187.813610][ T7486] tipc: Started in network mode [ 187.818666][ T7486] tipc: Node identity 7614855168, cluster identity 4711 [ 187.854933][ T7486] tipc: Enabled bearer , priority 0 [ 187.869236][ T7486] syzkaller0: entered promiscuous mode [ 187.875144][ T7486] syzkaller0: entered allmulticast mode [ 188.292532][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.328330][ T30] audit: type=1400 audit(1752691817.787:404): avc: denied { module_load } for pid=7490 comm="syz.4.409" path="/sys/kernel/notes" dev="sysfs" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 188.328452][ T7493] Invalid ELF header magic: != ELF [ 188.540107][ T7498] FAULT_INJECTION: forcing a failure. [ 188.540107][ T7498] name failslab, interval 1, probability 0, space 0, times 0 [ 188.553187][ T7498] CPU: 0 UID: 0 PID: 7498 Comm: syz.5.411 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 188.553210][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.553219][ T7498] Call Trace: [ 188.553225][ T7498] [ 188.553229][ T7498] dump_stack_lvl+0x16c/0x1f0 [ 188.553249][ T7498] should_fail_ex+0x512/0x640 [ 188.553263][ T7498] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 188.553280][ T7498] should_failslab+0xc2/0x120 [ 188.553297][ T7498] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 188.553311][ T7498] ? trace_kmalloc+0x2b/0xd0 [ 188.553327][ T7498] ? getname_kernel+0x52/0x370 [ 188.553347][ T7498] getname_kernel+0x52/0x370 [ 188.553365][ T7498] kern_path+0x1d/0x50 [ 188.553379][ T7498] ovl_mount_dir+0x13e/0x1f0 [ 188.553392][ T7498] ovl_parse_param+0x10ae/0x1570 [ 188.553407][ T7498] ? __pfx_ovl_parse_param+0x10/0x10 [ 188.553421][ T7498] ? static_key_count+0x5a/0x70 [ 188.553433][ T7498] ? __pfx_ovl_parse_param+0x10/0x10 [ 188.553446][ T7498] vfs_parse_fs_param+0x208/0x3c0 [ 188.553463][ T7498] vfs_parse_fs_string+0xe9/0x150 [ 188.553479][ T7498] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 188.553500][ T7498] ? ovl_next_opt+0x143/0x1c0 [ 188.553511][ T7498] ? __pfx_ovl_next_opt+0x10/0x10 [ 188.553522][ T7498] vfs_parse_monolithic_sep+0x16f/0x1f0 [ 188.553539][ T7498] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 188.553556][ T7498] ? alloc_fs_context+0x59b/0x9c0 [ 188.553575][ T7498] path_mount+0x13cd/0x2020 [ 188.553593][ T7498] ? kmem_cache_free+0x2d1/0x4d0 [ 188.553606][ T7498] ? __pfx_path_mount+0x10/0x10 [ 188.553625][ T7498] ? putname+0x154/0x1a0 [ 188.553636][ T7498] __x64_sys_mount+0x28d/0x310 [ 188.553653][ T7498] ? __pfx___x64_sys_mount+0x10/0x10 [ 188.553675][ T7498] do_syscall_64+0xcd/0x4c0 [ 188.553692][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.553703][ T7498] RIP: 0033:0x7f35f878e929 [ 188.553712][ T7498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.553723][ T7498] RSP: 002b:00007f35f95f2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.553733][ T7498] RAX: ffffffffffffffda RBX: 00007f35f89b6160 RCX: 00007f35f878e929 [ 188.553740][ T7498] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 188.553746][ T7498] RBP: 00007f35f95f2090 R08: 0000200000000380 R09: 0000000000000000 [ 188.553753][ T7498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.553759][ T7498] R13: 0000000000000000 R14: 00007f35f89b6160 R15: 00007ffc1b2318d8 [ 188.553773][ T7498] [ 188.553790][ T7498] overlayfs: failed to resolve './file1': -12 [ 188.919464][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.941419][ T7485] tipc: Resetting bearer [ 188.980312][ T7485] tipc: Disabling bearer [ 188.999893][ T30] audit: type=1400 audit(1752691818.457:405): avc: denied { read write } for pid=7490 comm="syz.4.409" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.044813][ T30] audit: type=1400 audit(1752691818.457:406): avc: denied { open } for pid=7490 comm="syz.4.409" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.116276][ T30] audit: type=1400 audit(1752691818.457:407): avc: denied { ioctl } for pid=7490 comm="syz.4.409" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.333165][ T7509] FAULT_INJECTION: forcing a failure. [ 189.333165][ T7509] name failslab, interval 1, probability 0, space 0, times 0 [ 189.339731][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.352133][ T7509] CPU: 0 UID: 0 PID: 7509 Comm: syz.1.415 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 189.352154][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.352163][ T7509] Call Trace: [ 189.352168][ T7509] [ 189.352174][ T7509] dump_stack_lvl+0x16c/0x1f0 [ 189.352200][ T7509] should_fail_ex+0x512/0x640 [ 189.352220][ T7509] ? fs_reclaim_acquire+0xae/0x150 [ 189.352237][ T7509] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 189.352259][ T7509] should_failslab+0xc2/0x120 [ 189.352281][ T7509] __kmalloc_noprof+0xd2/0x510 [ 189.352306][ T7509] tomoyo_realpath_from_path+0xc2/0x6e0 [ 189.352329][ T7509] ? tomoyo_profile+0x47/0x60 [ 189.352355][ T7509] tomoyo_path_number_perm+0x245/0x580 [ 189.352371][ T7509] ? tomoyo_path_number_perm+0x237/0x580 [ 189.352392][ T7509] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.352411][ T7509] ? find_held_lock+0x2b/0x80 [ 189.352452][ T7509] ? find_held_lock+0x2b/0x80 [ 189.352470][ T7509] ? hook_file_ioctl_common+0x145/0x410 [ 189.352489][ T7509] ? __fget_files+0x20e/0x3c0 [ 189.352514][ T7509] security_file_ioctl+0x9b/0x240 [ 189.352536][ T7509] __x64_sys_ioctl+0xb7/0x210 [ 189.352555][ T7509] do_syscall_64+0xcd/0x4c0 [ 189.352579][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.352594][ T7509] RIP: 0033:0x7f321b18e929 [ 189.352606][ T7509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.352620][ T7509] RSP: 002b:00007f321bfae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.352635][ T7509] RAX: ffffffffffffffda RBX: 00007f321b3b5fa0 RCX: 00007f321b18e929 [ 189.352645][ T7509] RDX: 00002000000021c0 RSI: 00000000c0106401 RDI: 0000000000000003 [ 189.352655][ T7509] RBP: 00007f321bfae090 R08: 0000000000000000 R09: 0000000000000000 [ 189.352664][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.352672][ T7509] R13: 0000000000000000 R14: 00007f321b3b5fa0 R15: 00007ffee6772dd8 [ 189.352693][ T7509] [ 189.352699][ T7509] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.037672][ T7501] delete_channel: no stack [ 190.201482][ T30] audit: type=1400 audit(1752691819.667:408): avc: denied { map } for pid=7514 comm="syz.2.420" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.380110][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.499705][ T974] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 190.529580][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 190.755877][ T30] audit: type=1400 audit(1752691820.217:409): avc: denied { read append } for pid=7526 comm="syz.0.422" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.799534][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 190.805928][ T974] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.821231][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.823921][ T30] audit: type=1800 audit(1752691820.287:410): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.422" name="/" dev="9p" ino=2 res=0 errno=0 [ 190.840048][ T974] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.862075][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 190.883728][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 190.896495][ T974] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.905932][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 190.925931][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.935110][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 190.951366][ T9] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 190.951390][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 190.951410][ T9] usb 6-1: Product: syz [ 190.951424][ T9] usb 6-1: Manufacturer: syz [ 190.951439][ T9] usb 6-1: SerialNumber: syz [ 190.954038][ T9] usb 6-1: config 0 descriptor?? [ 190.957204][ T7518] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.962538][ T974] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.969141][ T7527] syz.0.422 (7527) used greatest stack depth: 21016 bytes left [ 191.166080][ T9] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 191.173796][ T43] usb 5-1: USB disconnect, device number 16 [ 191.181264][ T9] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 191.366953][ T9] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 191.429086][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.437961][ T9] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 191.546118][ T9] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 191.590067][ T9] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 191.679546][ T9] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 191.737784][ T9] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 191.758417][ T9] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 191.776947][ T9] usb 6-1: USB disconnect, device number 7 [ 191.979841][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.303791][ T30] audit: type=1400 audit(1752691821.767:411): avc: denied { read } for pid=7545 comm="syz.2.428" path="socket:[16028]" dev="sockfs" ino=16028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.409834][ T5844] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 192.437655][ T30] audit: type=1400 audit(1752691821.897:412): avc: denied { mount } for pid=7550 comm="syz.5.429" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 192.460243][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.539977][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 192.998231][ T30] audit: type=1400 audit(1752691822.457:413): avc: denied { unmount } for pid=6634 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 193.502321][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.628052][ T30] audit: type=1400 audit(1752691823.087:414): avc: denied { accept } for pid=7559 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.746816][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.753116][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.813572][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.934055][ T30] audit: type=1400 audit(1752691823.087:415): avc: denied { read } for pid=7559 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.249707][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 194.556364][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.561120][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.575554][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 194.585077][ T30] audit: type=1400 audit(1752691824.017:416): avc: denied { mount } for pid=7569 comm="syz.0.434" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 194.595723][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.827133][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.030019][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.096418][ T7571] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 195.130972][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.598775][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.662927][ T5938] usb 6-1: USB disconnect, device number 8 [ 196.942363][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.393832][ T7608] netlink: 'syz.1.442': attribute type 4 has an invalid length. [ 198.012235][ T6002] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 198.124934][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.529880][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 198.581534][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.789674][ T6002] usb 6-1: Using ep0 maxpacket: 16 [ 198.791055][ T43] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.820525][ T6002] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.829510][ T43] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 198.844525][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.861184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.873131][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.881148][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.890249][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.890275][ T6002] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 198.890297][ T6002] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.891249][ T6002] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.918589][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 198.923817][ T6002] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 198.951664][ T6002] usb 6-1: Manufacturer: syz [ 198.966691][ T6002] usb 6-1: config 0 descriptor?? [ 199.081978][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 199.126129][ T43] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.138245][ T43] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.175141][ T43] usb 1-1: Product: syz [ 199.179338][ T43] usb 1-1: Manufacturer: syz [ 199.217806][ T5910] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 199.649782][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.680312][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.694134][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 199.699343][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 199.699567][ T6002] rc_core: IR keymap rc-hauppauge not found [ 199.713873][ T6002] Registered IR keymap rc-empty [ 199.719032][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.719531][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 199.734779][ T43] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 199.739847][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.749532][ T43] cdc_wdm 1-1:1.0: Unknown control protocol [ 199.756161][ T5910] usb 3-1: config 0 has an invalid interface number: 13 but max is 0 [ 199.764457][ T5911] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 199.773154][ T6002] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 199.779731][ T5910] usb 3-1: config 0 has no interface number 0 [ 199.799546][ T5910] usb 3-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 199.809371][ T5910] usb 3-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 199.816799][ T6002] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input15 [ 199.848437][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.850470][ T5910] usb 3-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 199.870461][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.885502][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.889595][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.899505][ T5910] usb 3-1: Product: syz [ 199.904792][ T5910] usb 3-1: Manufacturer: syz [ 199.919688][ T30] audit: type=1400 audit(1752692342.373:417): avc: denied { read write } for pid=7610 comm="syz.0.445" name="cdc-wdm0" dev="devtmpfs" ino=3041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 199.920772][ T5910] usb 3-1: SerialNumber: syz [ 199.944446][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.948928][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 199.956385][ T30] audit: type=1400 audit(1752692342.373:418): avc: denied { open } for pid=7610 comm="syz.0.445" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 199.999581][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 200.011196][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.019814][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 200.033676][ T5910] usb 3-1: config 0 descriptor?? [ 200.038867][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.049699][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 200.060602][ T7622] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 200.067851][ T7622] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 200.069548][ T5911] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 200.084045][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 200.092998][ T5910] option 3-1:0.13: GSM modem (1-port) converter detected [ 200.104401][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 200.152485][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.161651][ T6002] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 200.190244][ T5911] usb 5-1: config 0 descriptor?? [ 200.207818][ T7634] binder: 7633:7634 ioctl c0306201 200000000640 returned -22 [ 200.235426][ T6002] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 200.246863][ T7634] fuse: Unknown parameter '0xffffffffffffffff' [ 200.265120][ T6002] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 200.372405][ T6002] usb 6-1: USB disconnect, device number 9 [ 200.396441][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.432859][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.928238][ T5911] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 200.958040][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.061626][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.330585][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.416087][ T5877] usb 3-1: USB disconnect, device number 14 [ 201.568836][ T5877] option 3-1:0.13: device disconnected [ 201.815433][ T30] audit: type=1400 audit(1752692344.273:419): avc: denied { ioctl } for pid=7646 comm="syz.5.455" path="socket:[16241]" dev="sockfs" ino=16241 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.920198][ T5910] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 202.005045][ T2148] usb 1-1: USB disconnect, device number 12 [ 202.082824][ T5910] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.104945][ T5910] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.130006][ T5910] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.167515][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.187670][ T7645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 202.225299][ T5910] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.404286][ T5877] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 202.424394][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.441612][ T5911] ft260 0003:0403:6030.0007: failed to retrieve system status [ 202.449468][ T5911] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -71 [ 202.463485][ T6002] usb 2-1: USB disconnect, device number 20 [ 202.490631][ T5911] usb 5-1: USB disconnect, device number 17 [ 202.539924][ T7655] tipc: Started in network mode [ 202.547516][ T7655] tipc: Node identity 36f8bbc22e9a, cluster identity 4711 [ 202.568374][ T7655] tipc: Enabled bearer , priority 0 [ 202.590189][ T7655] syzkaller0: entered promiscuous mode [ 202.609865][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 202.617159][ T7655] syzkaller0: entered allmulticast mode [ 202.627814][ T5877] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 202.653138][ T5877] usb 3-1: config 0 has no interface number 0 [ 202.665484][ T5877] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.685591][ T7655] tipc: Resetting bearer [ 202.699781][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.718053][ T5877] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 202.762492][ T5877] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 202.828198][ T5877] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 202.844345][ T5877] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 202.854997][ T5877] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.879167][ T5877] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 202.893211][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.901741][ T5877] usb 3-1: Product: syz [ 202.906501][ T5877] usb 3-1: Manufacturer: syz [ 202.936389][ T5877] usb 3-1: SerialNumber: syz [ 202.969846][ T5877] usb 3-1: config 0 descriptor?? [ 203.002558][ T7651] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 203.014995][ T7651] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 203.408162][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.549978][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.557970][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.671222][ T5911] tipc: Node number set to 409123778 [ 203.806327][ T7669] overlayfs: failed to resolve './file1': -2 [ 203.809997][ T5877] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 203.831354][ T7669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.840124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.854164][ T7667] netlink: 'syz.1.461': attribute type 4 has an invalid length. [ 203.911131][ T5877] etas_es58x 3-1:0.219: could not retrieve the product info string [ 203.952835][ T5877] usb 3-1: USB disconnect, device number 15 [ 203.962439][ T5877] etas_es58x 3-1:0.219: Disconnecting syz syz [ 204.169855][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 204.180326][ T7678] netlink: 'syz.0.463': attribute type 21 has an invalid length. [ 204.348791][ T7678] netlink: 'syz.0.463': attribute type 15 has an invalid length. [ 204.374041][ T7678] netlink: 156 bytes leftover after parsing attributes in process `syz.0.463'. [ 204.384332][ T7678] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.392634][ T7678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.400126][ T7678] IPv6: NLM_F_CREATE should be set when creating new route [ 204.407372][ T7678] IPv6: NLM_F_CREATE should be set when creating new route [ 204.414664][ T7678] IPv6: NLM_F_CREATE should be set when creating new route [ 204.622328][ T43] usb 5-1: device descriptor read/64, error -71 [ 204.632325][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.859709][ T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 205.173468][ T7690] Bluetooth: hci6: Frame reassembly failed (-84) [ 205.183044][ T59] Bluetooth: hci6: Frame reassembly failed (-84) [ 205.269558][ T43] usb 5-1: device descriptor read/64, error -71 [ 205.416764][ T43] usb usb5-port1: attempt power cycle [ 205.432801][ T5911] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 205.539806][ T6002] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 205.591255][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.600178][ T5911] usb 3-1: config 1 has no interface number 0 [ 205.606507][ T5911] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.617935][ T5911] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 205.627471][ T5911] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 205.640934][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.650205][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.658224][ T5911] usb 3-1: Product: syz [ 205.663311][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.671809][ T5911] usb 3-1: Manufacturer: syz [ 205.676930][ T5911] usb 3-1: SerialNumber: syz [ 205.729668][ T6002] usb 6-1: Using ep0 maxpacket: 16 [ 205.742233][ T6002] usb 6-1: config 0 has an invalid interface number: 13 but max is 0 [ 205.753099][ T6002] usb 6-1: config 0 has no interface number 0 [ 205.759257][ T6002] usb 6-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 205.759561][ T43] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 205.769287][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.789580][ T6002] usb 6-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 205.810266][ T43] usb 5-1: device descriptor read/8, error -71 [ 205.814978][ T6002] usb 6-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 205.838975][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.850504][ T6002] usb 6-1: Product: syz [ 205.857098][ T6002] usb 6-1: Manufacturer: syz [ 205.869551][ T6002] usb 6-1: SerialNumber: syz [ 205.886499][ T6002] usb 6-1: config 0 descriptor?? [ 205.910445][ T7692] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 205.938049][ T7692] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 205.961189][ T6002] option 6-1:0.13: GSM modem (1-port) converter detected [ 206.078799][ T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 206.142218][ T43] usb 5-1: device descriptor read/8, error -71 [ 206.167145][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.192873][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.206305][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 206.228477][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.250161][ T43] usb usb5-port1: unable to enumerate USB device [ 206.274537][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.303091][ T30] audit: type=1400 audit(1752692861.755:420): avc: denied { create } for pid=7699 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 206.362725][ T6002] usb 6-1: USB disconnect, device number 10 [ 206.386271][ T6002] option 6-1:0.13: device disconnected [ 206.451579][ T30] audit: type=1400 audit(1752692861.765:421): avc: denied { bind } for pid=7699 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 206.486293][ T7703] FAULT_INJECTION: forcing a failure. [ 206.486293][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.504338][ T5911] cdc_ncm 3-1:1.1: bind() failure [ 206.534115][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.4.471 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 206.534139][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.534149][ T7703] Call Trace: [ 206.534155][ T7703] [ 206.534162][ T7703] dump_stack_lvl+0x16c/0x1f0 [ 206.534191][ T7703] should_fail_ex+0x512/0x640 [ 206.534217][ T7703] _copy_to_user+0x32/0xd0 [ 206.534244][ T7703] simple_read_from_buffer+0xcb/0x170 [ 206.534269][ T7703] proc_fail_nth_read+0x197/0x270 [ 206.534292][ T7703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.534316][ T7703] ? rw_verify_area+0xcf/0x680 [ 206.534334][ T7703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.534356][ T7703] vfs_read+0x1e1/0xc60 [ 206.534381][ T7703] ? __pfx___mutex_lock+0x10/0x10 [ 206.534404][ T7703] ? __pfx_vfs_read+0x10/0x10 [ 206.534432][ T7703] ? __fget_files+0x20e/0x3c0 [ 206.534464][ T7703] ksys_read+0x12a/0x250 [ 206.534483][ T7703] ? __pfx_ksys_read+0x10/0x10 [ 206.534501][ T7703] ? v4l2_ioctl+0x1c5/0x250 [ 206.534523][ T7703] ? fput+0x70/0xf0 [ 206.534542][ T7703] do_syscall_64+0xcd/0x4c0 [ 206.534569][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.534586][ T7703] RIP: 0033:0x7f5176f8d33c [ 206.534600][ T7703] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.534616][ T7703] RSP: 002b:00007f5174df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.534632][ T7703] RAX: ffffffffffffffda RBX: 00007f51771b5fa0 RCX: 00007f5176f8d33c [ 206.534643][ T7703] RDX: 000000000000000f RSI: 00007f5174df60a0 RDI: 0000000000000004 [ 206.534653][ T7703] RBP: 00007f5174df6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.534663][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.534673][ T7703] R13: 0000000000000000 R14: 00007f51771b5fa0 R15: 00007ffc3148d1b8 [ 206.534696][ T7703] [ 206.745906][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.145150][ T7710] fuse: root generation should be zero [ 207.180885][ T5833] Bluetooth: hci6: command 0x1003 tx timeout [ 207.187822][ T5844] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 207.365171][ T30] audit: type=1400 audit(1752692862.825:422): avc: denied { setopt } for pid=7716 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 207.365655][ T7717] netlink: 380 bytes leftover after parsing attributes in process `syz.0.475'. [ 207.629799][ T5911] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 207.828332][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.836901][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 207.878049][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.909589][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.926281][ T5911] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 207.945776][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.954354][ T30] audit: type=1400 audit(1752692863.405:423): avc: denied { read } for pid=7723 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.975874][ T5911] usb 6-1: config 0 descriptor?? [ 208.728856][ T6002] usb 3-1: USB disconnect, device number 16 [ 208.830727][ T7734] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1073741828, id = 0 [ 208.950700][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.106699][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.139859][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.802159][ T5989] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 120 seconds [ 209.813034][ T5989] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 120 seconds [ 209.825532][ T5989] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 120 seconds [ 209.837200][ T5989] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 120 seconds [ 209.870164][ T30] audit: type=1400 audit(1752692865.185:424): avc: denied { setopt } for pid=7715 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.241860][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.384971][ T30] audit: type=1400 audit(1752692865.705:425): avc: denied { write } for pid=7744 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 210.499565][ T6002] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.731021][ T6002] usb 1-1: Using ep0 maxpacket: 8 [ 210.740539][ T6002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.757057][ T6002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.767024][ T6002] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 210.776310][ T6002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.817228][ T6002] usb 1-1: config 0 descriptor?? [ 211.273191][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.144644][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.169037][ T7760] FAULT_INJECTION: forcing a failure. [ 212.169037][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 212.184253][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.1.487 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 212.184276][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.184286][ T7760] Call Trace: [ 212.184292][ T7760] [ 212.184298][ T7760] dump_stack_lvl+0x16c/0x1f0 [ 212.184331][ T7760] should_fail_ex+0x512/0x640 [ 212.184353][ T7760] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 212.184379][ T7760] should_failslab+0xc2/0x120 [ 212.184403][ T7760] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 212.184425][ T7760] ? __alloc_skb+0x2b2/0x380 [ 212.184452][ T7760] __alloc_skb+0x2b2/0x380 [ 212.184473][ T7760] ? __pfx___alloc_skb+0x10/0x10 [ 212.184498][ T7760] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 212.184531][ T7760] netlink_alloc_large_skb+0x69/0x130 [ 212.184548][ T7760] netlink_sendmsg+0x6a1/0xdd0 [ 212.184569][ T7760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.184596][ T7760] ____sys_sendmsg+0xa98/0xc70 [ 212.184614][ T7760] ? copy_msghdr_from_user+0x10a/0x160 [ 212.184644][ T7760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.184673][ T7760] ___sys_sendmsg+0x134/0x1d0 [ 212.184696][ T7760] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.184717][ T7760] ? __lock_acquire+0x622/0x1c90 [ 212.184762][ T7760] __sys_sendmsg+0x16d/0x220 [ 212.184786][ T7760] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.184824][ T7760] do_syscall_64+0xcd/0x4c0 [ 212.184850][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.184869][ T7760] RIP: 0033:0x7f321b18e929 [ 212.184883][ T7760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.184898][ T7760] RSP: 002b:00007f321bfae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.184916][ T7760] RAX: ffffffffffffffda RBX: 00007f321b3b5fa0 RCX: 00007f321b18e929 [ 212.184928][ T7760] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 212.184938][ T7760] RBP: 00007f321bfae090 R08: 0000000000000000 R09: 0000000000000000 [ 212.184947][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.184957][ T7760] R13: 0000000000000000 R14: 00007f321b3b5fa0 R15: 00007ffee6772dd8 [ 212.184980][ T7760] [ 212.411039][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.425209][ T5911] usbhid 6-1:0.0: can't add hid device: -71 [ 212.432184][ T5911] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 212.452701][ T5911] usb 6-1: USB disconnect, device number 11 [ 212.550820][ T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 212.881972][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 212.888500][ T43] usb 5-1: config 0 has an invalid interface number: 13 but max is 0 [ 212.902727][ T43] usb 5-1: config 0 has no interface number 0 [ 212.909232][ T43] usb 5-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 212.922136][ T43] usb 5-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 212.936224][ T43] usb 5-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 212.946725][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.955649][ T43] usb 5-1: Product: syz [ 212.963363][ T43] usb 5-1: Manufacturer: syz [ 212.968009][ T43] usb 5-1: SerialNumber: syz [ 212.981440][ T43] usb 5-1: config 0 descriptor?? [ 212.987280][ T7755] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 212.995543][ T7755] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 213.019413][ T43] option 5-1:0.13: GSM modem (1-port) converter detected [ 213.026988][ T30] audit: type=1400 audit(1752693381.479:426): avc: denied { write } for pid=7768 comm="syz.5.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 213.520024][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.520050][ T6002] usbhid 1-1:0.0: can't add hid device: -71 [ 213.534577][ T6002] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 213.604511][ T6002] usb 1-1: USB disconnect, device number 13 [ 213.675415][ T7774] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 213.715143][ T30] audit: type=1400 audit(1752693382.169:427): avc: denied { lock } for pid=7773 comm="syz.0.491" path="socket:[17029]" dev="sockfs" ino=17029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 213.751225][ T7755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.792947][ T7755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.847395][ T7755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.873466][ T7755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.902537][ T6002] usb 5-1: USB disconnect, device number 22 [ 213.912501][ T6002] option 5-1:0.13: device disconnected [ 214.069956][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 214.269561][ T43] usb 3-1: device descriptor read/64, error -71 [ 214.898513][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.182750][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.342915][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 215.501405][ T43] usb 3-1: device descriptor read/64, error -71 [ 215.583247][ T7797] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.640553][ T43] usb usb3-port1: attempt power cycle [ 215.739770][ T2148] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 215.920970][ T7806] block nbd5: NBD_DISCONNECT [ 216.349005][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.501'. [ 216.366857][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.519816][ T2148] usb 5-1: Using ep0 maxpacket: 8 [ 216.526556][ T2148] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 216.539955][ T2148] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 216.549018][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.589703][ T2148] usb 5-1: config 0 descriptor?? [ 216.709567][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 216.732392][ T43] usb 3-1: device descriptor read/8, error -71 [ 216.979676][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 217.009541][ T30] audit: type=1326 audit(1752693385.319:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 217.104573][ T43] usb 3-1: device descriptor read/8, error -71 [ 217.155224][ T30] audit: type=1326 audit(1752693385.319:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 217.242432][ T43] usb usb3-port1: unable to enumerate USB device [ 217.399560][ T30] audit: type=1326 audit(1752693385.329:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 217.423689][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.432736][ T30] audit: type=1326 audit(1752693385.339:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 217.481535][ T30] audit: type=1326 audit(1752693385.339:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 217.528154][ T30] audit: type=1326 audit(1752693385.339:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 217.556715][ T30] audit: type=1326 audit(1752693385.369:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 217.582528][ T30] audit: type=1326 audit(1752693385.369:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 218.186554][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.220482][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.459859][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.652114][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 218.652128][ T30] audit: type=1326 audit(1752693387.089:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 218.681313][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.691330][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.710136][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.998561][ T30] audit: type=1326 audit(1752693387.089:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 219.057608][ T30] audit: type=1326 audit(1752693387.149:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5176f8d290 code=0x7ffc0000 [ 219.080816][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.116634][ T2148] lenovo 0003:17EF:6009.0008: hidraw0: USB HID vff.fa Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 219.127910][ T30] audit: type=1326 audit(1752693387.149:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5176f8e52b code=0x7ffc0000 [ 219.127952][ T30] audit: type=1326 audit(1752693387.149:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5176f8e52b code=0x7ffc0000 [ 219.127988][ T30] audit: type=1326 audit(1752693387.279:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 219.128024][ T30] audit: type=1326 audit(1752693387.279:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5176f8e929 code=0x7ffc0000 [ 219.128059][ T30] audit: type=1326 audit(1752693387.279:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5176f8e52b code=0x7ffc0000 [ 219.128094][ T30] audit: type=1326 audit(1752693387.279:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5176f8e52b code=0x7ffc0000 [ 219.128130][ T30] audit: type=1326 audit(1752693387.349:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5176fc11e5 code=0x7ffc0000 [ 219.300644][ T6002] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 219.329109][ T2148] usb 5-1: USB disconnect, device number 23 [ 219.370329][ T974] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 219.469649][ T6002] usb 2-1: Using ep0 maxpacket: 16 [ 219.480840][ T6002] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 219.489148][ T6002] usb 2-1: config 0 has no interface number 0 [ 219.499773][ T6002] usb 2-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 219.515295][ T6002] usb 2-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 219.530602][ T6002] usb 2-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 219.544583][ T6002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.552932][ T5877] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 219.563439][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.569921][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.587064][ T6002] usb 2-1: Product: syz [ 219.591558][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.606579][ T6002] usb 2-1: Manufacturer: syz [ 219.611347][ T6002] usb 2-1: SerialNumber: syz [ 219.616077][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.635616][ T6002] usb 2-1: config 0 descriptor?? [ 219.650486][ T7836] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 219.659827][ T7836] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 219.667082][ T974] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.688587][ T6002] option 2-1:0.13: GSM modem (1-port) converter detected [ 219.703014][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.727121][ T974] usb 3-1: config 0 descriptor?? [ 219.738651][ T5877] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 219.758050][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.786921][ T5877] usb 6-1: config 0 descriptor?? [ 219.892138][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.900973][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.909933][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.963403][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.990002][ T2148] usb 2-1: USB disconnect, device number 21 [ 220.016129][ T2148] option 2-1:0.13: device disconnected [ 220.032456][ T5877] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 220.056477][ T5877] [drm:udl_init] *ERROR* Selecting channel failed [ 220.078626][ T5877] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 220.095032][ T5877] [drm] Initialized udl on minor 2 [ 220.102361][ T5877] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.112936][ T5877] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 220.122413][ T6002] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.136394][ T5877] usb 6-1: USB disconnect, device number 12 [ 220.145331][ T6002] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 220.509631][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 220.619962][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.669665][ T7840] nbd2: detected capacity change from 0 to 63 [ 220.678252][ T7852] block nbd2: NBD_DISCONNECT [ 220.684253][ T7852] block nbd2: Disconnected due to user request. [ 220.689915][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 220.692634][ T7852] block nbd2: shutting down sockets [ 220.698355][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.722011][ C1] blk_print_req_error: 136 callbacks suppressed [ 220.722025][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.737293][ C1] buffer_io_error: 138 callbacks suppressed [ 220.737303][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.752554][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.761604][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 220.769332][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.778371][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 220.786124][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.795132][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 220.808770][ T5827] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.824779][ T974] usbhid 3-1:0.0: can't add hid device: -71 [ 220.837155][ T5827] Buffer I/O error on dev nbd2, logical block 0, async page read [ 220.840311][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.847177][ T5827] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.859653][ T974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 220.884940][ T5827] Buffer I/O error on dev nbd2, logical block 1, async page read [ 220.894821][ T5827] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.902930][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.913603][ T5827] Buffer I/O error on dev nbd2, logical block 2, async page read [ 220.949895][ T974] usb 3-1: USB disconnect, device number 21 [ 220.958333][ T7856] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[7856] [ 220.975370][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 220.986627][ T5827] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.025667][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.029532][ T5827] Buffer I/O error on dev nbd2, logical block 3, async page read [ 221.102655][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.125361][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.126405][ T5827] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.143934][ T10] usb 5-1: Manufacturer: syz [ 221.152049][ T10] usb 5-1: config 0 descriptor?? [ 221.180164][ T5827] Buffer I/O error on dev nbd2, logical block 0, async page read [ 221.213854][ T5827] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.228469][ T5827] Buffer I/O error on dev nbd2, logical block 1, async page read [ 221.239033][ T5827] ldm_validate_partition_table(): Disk read failed. [ 221.248208][ T5827] Dev nbd2: unable to read RDB block 0 [ 221.257880][ T5827] nbd2: unable to read partition table [ 221.260686][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.278968][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.520'. [ 221.301038][ T5827] ldm_validate_partition_table(): Disk read failed. [ 221.308834][ T5827] Dev nbd2: unable to read RDB block 0 [ 221.318053][ T5827] nbd2: unable to read partition table [ 221.401731][ T10] rc_core: IR keymap rc-hauppauge not found [ 221.414085][ T10] Registered IR keymap rc-empty [ 221.428499][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.449950][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.481242][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 221.483741][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 221.495588][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 221.539804][ T974] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 221.629555][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.659579][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.659990][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.689852][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 221.716850][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.752466][ T43] usb 1-1: config 0 has no interface number 0 [ 221.769657][ T974] usb 2-1: device descriptor read/64, error -71 [ 221.781416][ T43] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 221.782199][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.790656][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.838599][ T43] usb 1-1: Product: syz [ 221.865423][ T43] usb 1-1: Manufacturer: syz [ 221.865527][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.897672][ T43] usb 1-1: SerialNumber: syz [ 221.897764][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.914718][ T43] usb 1-1: config 0 descriptor?? [ 221.929607][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.944130][ T43] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 221.961301][ T43] usb 1-1: selecting invalid altsetting 1 [ 221.961342][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 221.967015][ T43] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 221.981469][ T43] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.981793][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 222.013093][ T43] usb 1-1: media controller created [ 222.022618][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 222.038708][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.049649][ T974] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 222.075921][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 222.102539][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 222.141255][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 222.157687][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 222.177250][ T10] usb 5-1: USB disconnect, device number 24 [ 222.241808][ T974] usb 2-1: device descriptor read/64, error -71 [ 222.451490][ T43] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 222.565614][ T43] zl10353_read_register: readreg error (reg=127, ret==-71) [ 222.592153][ T43] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 222.884715][ T974] usb usb2-port1: attempt power cycle [ 222.888248][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.988060][ T43] usb 1-1: USB disconnect, device number 14 [ 222.990320][ T5827] udevd[5827]: failed to send result of seq 13919 to main daemon: Connection refused [ 223.260320][ T6002] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 223.280007][ T974] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 223.321706][ T974] usb 2-1: device descriptor read/8, error -71 [ 223.430301][ T6002] usb 3-1: Using ep0 maxpacket: 8 [ 223.481228][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.547761][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.591572][ T974] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 223.606095][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 223.623374][ T6002] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 223.671391][ T974] usb 2-1: device descriptor read/8, error -71 [ 223.672857][ T43] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 223.681179][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.786805][ T6002] usb 3-1: config 0 descriptor?? [ 223.810963][ T974] usb usb2-port1: unable to enumerate USB device [ 223.850797][ T10] usb 1-1: too many configurations: 50, using maximum allowed: 8 [ 223.898118][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 223.907420][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.924896][ T10] usb 1-1: can't read configurations, error -61 [ 224.209088][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 224.299902][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.876852][ T10] usb 1-1: too many configurations: 50, using maximum allowed: 8 [ 224.957546][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 225.040198][ T10] usb 1-1: can't read configurations, error -61 [ 225.146125][ T10] usb usb1-port1: attempt power cycle [ 225.213103][ T7898] 9pnet_fd: Insufficient options for proto=fd [ 225.540273][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 225.635370][ T10] usb 1-1: too many configurations: 50, using maximum allowed: 8 [ 225.733950][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 225.811744][ T10] usb 1-1: can't read configurations, error -61 [ 225.864531][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.055151][ T6002] usbhid 3-1:0.0: can't add hid device: -71 [ 226.090049][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 226.092590][ T6002] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 226.102086][ T43] usb 6-1: config 0 has an invalid interface number: 13 but max is 0 [ 226.150241][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 226.154372][ T43] usb 6-1: config 0 has no interface number 0 [ 226.230607][ T43] usb 6-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 226.253697][ T6002] usb 3-1: USB disconnect, device number 22 [ 226.257221][ T43] usb 6-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 226.346214][ T10] usb 1-1: device descriptor read/8, error -71 [ 226.376009][ T43] usb 6-1: string descriptor 0 read error: -71 [ 226.398637][ T43] usb 6-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 226.408884][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.422056][ T7908] loop6: detected capacity change from 0 to 524288000 [ 226.429171][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 226.429183][ T30] audit: type=1400 audit(1752694420.886:471): avc: denied { read write } for pid=7907 comm="syz.2.534" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.431587][ T43] usb 6-1: config 0 descriptor?? [ 226.435661][ T30] audit: type=1400 audit(1752694420.886:472): avc: denied { open } for pid=7907 comm="syz.2.534" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.490335][ T43] usb 6-1: can't set config #0, error -71 [ 226.495585][ T10] usb usb1-port1: unable to enumerate USB device [ 226.508403][ T43] usb 6-1: USB disconnect, device number 13 [ 226.519622][ T30] audit: type=1400 audit(1752694420.886:473): avc: denied { append } for pid=7907 comm="syz.2.534" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.712876][ T7908] ubi10: attaching mtd0 [ 226.719433][ T7908] ubi10: scanning is finished [ 226.725170][ T7908] ubi10: empty MTD device detected [ 226.861218][ T7908] ubi10: attached mtd0 (name "mtdram test device", size 0 MiB) [ 226.869579][ T7908] ubi10: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 226.879161][ T7908] ubi10: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 226.888191][ T7908] ubi10: VID header offset: 64 (aligned 64), data offset: 128 [ 226.897744][ T7908] ubi10: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 226.905818][ T7908] ubi10: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 226.914673][ T7908] ubi10: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1680679758 [ 226.925214][ T7908] ubi10: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 226.948496][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.001031][ T7918] ubi10: background thread "ubi_bgt10d" started, PID 7918 [ 227.240351][ T7924] input: syz1 as /devices/virtual/input/input17 [ 227.337697][ T7930] QAT: Device 11 not found [ 227.346655][ T30] audit: type=1400 audit(1752694421.806:474): avc: denied { block_suspend } for pid=7920 comm="syz.5.538" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 227.368171][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.379841][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.424124][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.436155][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.442990][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.466928][ T7928] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 231.477234][ T7928] overlayfs: missing 'lowerdir' [ 231.594827][ T30] audit: type=1400 audit(1752694426.056:475): avc: denied { setopt } for pid=7938 comm="syz.5.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 231.807705][ T7947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.522827][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.077158][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 233.077204][ T43] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 233.165295][ T30] audit: type=1326 audit(1752694427.626:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c78e929 code=0x7fc00000 [ 233.279633][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 233.584370][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.823426][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.079792][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.089725][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.103072][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.111867][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.112464][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.130300][ T43] usb 2-1: config 0 descriptor?? [ 234.133772][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.164098][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.190833][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 234.224383][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.244793][ T10] usb 1-1: config 0 descriptor?? [ 234.449738][ T5884] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 234.479743][ T5877] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 235.190146][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.211548][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 235.231606][ T5877] usb 5-1: config 0 has an invalid interface number: 13 but max is 0 [ 235.241240][ T5877] usb 5-1: config 0 has no interface number 0 [ 235.320042][ T5877] usb 5-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 235.375345][ T5877] usb 5-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 235.440196][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.469578][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.519941][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.533597][ T7972] nbd1: detected capacity change from 0 to 63 [ 235.550927][ T5877] usb 5-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 235.593406][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.593638][ T7973] block nbd1: NBD_DISCONNECT [ 235.607906][ T7973] block nbd1: Disconnected due to user request. [ 235.615779][ T7973] block nbd1: shutting down sockets [ 235.632807][ T5884] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.662222][ T5877] usb 5-1: Product: syz [ 235.696309][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.708652][ T5877] usb 5-1: Manufacturer: syz [ 235.721811][ T5877] usb 5-1: SerialNumber: syz [ 235.736182][ T5884] usb 6-1: config 0 descriptor?? [ 235.747608][ T5877] usb 5-1: config 0 descriptor?? [ 235.754375][ T7965] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 235.761704][ T7965] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 235.771089][ T5877] option 5-1:0.13: GSM modem (1-port) converter detected [ 235.954262][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 235.962647][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 235.973847][ T43] usb 2-1: USB disconnect, device number 26 [ 235.977271][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.991165][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.015465][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.027950][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.078638][ T2148] usb 5-1: USB disconnect, device number 25 [ 236.094718][ T2148] option 5-1:0.13: device disconnected [ 236.220131][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.533774][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 236.545481][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 236.560084][ T10] usb 1-1: USB disconnect, device number 19 [ 236.869562][ T7966] nbd5: detected capacity change from 0 to 63 [ 237.435739][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.444707][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.456824][ T7981] block nbd5: NBD_DISCONNECT [ 237.456887][ T7981] block nbd5: Disconnected due to user request. [ 237.456935][ T7981] block nbd5: shutting down sockets [ 237.507885][ T5884] usbhid 6-1:0.0: can't add hid device: -71 [ 237.507967][ T5884] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 237.518386][ T5884] usb 6-1: USB disconnect, device number 14 [ 237.964570][ T30] audit: type=1400 audit(1752694945.424:477): avc: denied { setattr } for pid=7989 comm="syz.1.555" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.079979][ T7995] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.089949][ T2148] IPVS: starting estimator thread 0... [ 238.110869][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 238.121759][ T8004] openvswitch: netlink: nsh attr 0 has unexpected len 2044 expected 0 [ 238.130055][ T8004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.192224][ T8003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8003 comm=syz.1.559 [ 238.205615][ T8001] IPVS: using max 40 ests per chain, 96000 per kthread [ 238.524669][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.497058][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 239.581518][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.639570][ T2148] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 239.749557][ T5911] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 239.828281][ T5989] block nbd3: Possible stuck request ffff888026ebe000: control (read@0,1024B). Runtime 150 seconds [ 239.839119][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.847383][ T5989] block nbd3: Possible stuck request ffff888026ebe1c0: control (read@1024,1024B). Runtime 150 seconds [ 239.867741][ T5989] block nbd3: Possible stuck request ffff888026ebe380: control (read@2048,1024B). Runtime 150 seconds [ 239.869566][ T2148] usb 5-1: Using ep0 maxpacket: 8 [ 239.879717][ T5989] block nbd3: Possible stuck request ffff888026ebe540: control (read@3072,1024B). Runtime 150 seconds [ 239.915429][ T5911] usb 3-1: device descriptor read/64, error -71 [ 239.950384][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.971286][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.039980][ T2148] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 240.228560][ T5911] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 240.249904][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.278849][ T2148] usb 5-1: config 0 descriptor?? [ 240.409597][ T5911] usb 3-1: device descriptor read/64, error -71 [ 240.459698][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.670706][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.820661][ T5911] usb usb3-port1: attempt power cycle [ 241.563886][ T30] audit: type=1400 audit(1752694949.024:478): avc: denied { write } for pid=8034 comm="syz.1.568" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 241.587540][ T8035] random: crng reseeded on system resumption [ 241.653158][ T30] audit: type=1400 audit(1752694949.044:479): avc: denied { ioctl } for pid=8034 comm="syz.1.568" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 242.097244][ T8047] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 242.103945][ T8047] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 242.120735][ T8047] vhci_hcd vhci_hcd.0: Device attached [ 242.164034][ T8047] vhci_hcd vhci_hcd.0: port 0 already used [ 242.272867][ T8048] vhci_hcd: connection closed [ 242.275466][ T59] vhci_hcd: stop threads [ 242.284845][ T8057] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 242.284845][ T8057] program syz.2.572 not setting count and/or reply_len properly [ 242.308442][ T59] vhci_hcd: release socket [ 242.329964][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 242.338173][ T59] vhci_hcd: disconnect device [ 242.440558][ T2148] usbhid 5-1:0.0: can't add hid device: -71 [ 242.446600][ T2148] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 242.779703][ T5938] net_ratelimit: 1 callbacks suppressed [ 242.779715][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.500288][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.545630][ T2148] usb 5-1: USB disconnect, device number 26 [ 243.740058][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 243.748985][ T43] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 243.783120][ T43] usb 1-1: config 0 has no interface number 0 [ 243.800297][ T43] usb 1-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 243.824728][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.840520][ T43] usb 1-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 243.889012][ T43] usb 1-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 243.907687][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.965743][ T43] usb 1-1: Product: syz [ 244.007446][ T43] usb 1-1: Manufacturer: syz [ 244.054700][ T43] usb 1-1: SerialNumber: syz [ 244.125316][ T43] usb 1-1: config 0 descriptor?? [ 244.210360][ T8045] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 244.221939][ T8045] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 244.231155][ T43] option 1-1:0.13: GSM modem (1-port) converter detected [ 244.432777][ T30] audit: type=1400 audit(1752695464.879:480): avc: denied { ioctl } for pid=8077 comm="syz.2.579" path="socket:[19049]" dev="sockfs" ino=19049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.473089][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.502326][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.523386][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.553886][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.802132][ T30] audit: type=1400 audit(1752695465.189:481): avc: denied { getattr } for pid=8080 comm="syz.1.583" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 244.878818][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.941467][ T30] audit: type=1400 audit(1752695465.229:482): avc: denied { setopt } for pid=8080 comm="syz.1.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 245.650119][ T5884] usb 1-1: USB disconnect, device number 20 [ 245.665457][ T5884] option 1-1:0.13: device disconnected [ 245.736042][ T30] audit: type=1400 audit(1752695466.179:483): avc: denied { read } for pid=8099 comm="syz.2.586" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 245.757980][ T8102] capability: warning: `syz.5.587' uses 32-bit capabilities (legacy support in use) [ 245.809894][ T30] audit: type=1400 audit(1752695466.179:484): avc: denied { open } for pid=8099 comm="syz.2.586" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 245.989372][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.034693][ T30] audit: type=1400 audit(1752695466.179:485): avc: denied { ioctl } for pid=8099 comm="syz.2.586" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 246.060166][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.262561][ T30] audit: type=1400 audit(1752695466.209:486): avc: denied { write } for pid=8101 comm="syz.5.587" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 246.729914][ T5910] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 246.897080][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.955381][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.019746][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.041931][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.052946][ T8118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.592'. [ 247.084754][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.114633][ T5910] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.146424][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.206622][ T5910] usb 2-1: config 0 descriptor?? [ 247.570231][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.049729][ T8114] nbd1: detected capacity change from 0 to 63 [ 248.056007][ T8132] block nbd1: NBD_DISCONNECT [ 248.065468][ T8133] syz.0.595: attempt to access beyond end of device [ 248.065468][ T8133] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 248.080258][ T8133] hfsplus: unable to find HFS+ superblock [ 248.093547][ T8132] block nbd1: Disconnected due to user request. [ 248.639277][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.676406][ T8132] block nbd1: shutting down sockets [ 249.089586][ T5910] usbhid 2-1:0.0: can't add hid device: -71 [ 249.120593][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 249.146016][ T5910] usb 2-1: USB disconnect, device number 27 [ 249.269577][ T5884] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 249.498200][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.581130][ T8150] ubi: mtd0 is already attached to ubi10 [ 249.659708][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 249.659782][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.665373][ T5884] usb 3-1: too many configurations: 247, using maximum allowed: 8 [ 249.803819][ T5884] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 249.819528][ T5884] usb 3-1: can't read configurations, error -71 [ 249.854992][ T30] audit: type=1400 audit(1752695470.309:487): avc: denied { ioctl } for pid=8157 comm="syz.1.604" path="socket:[19664]" dev="sockfs" ino=19664 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 249.989682][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.084430][ T8165] 9pnet_virtio: no channels available for device syz [ 250.091563][ T30] audit: type=1400 audit(1752695470.539:488): avc: denied { ioctl } for pid=8161 comm="syz.4.603" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 250.279631][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 250.429526][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 250.440774][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.487213][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.589027][ T8169] netlink: 'syz.5.606': attribute type 4 has an invalid length. [ 250.740389][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.756507][ T43] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 250.759486][ T30] audit: type=1400 audit(1752695471.099:489): avc: denied { ioctl } for pid=8167 comm="syz.5.606" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 250.765839][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.790689][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.937873][ T43] usb 2-1: config 0 descriptor?? [ 251.819955][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.712285][ T8183] openvswitch: netlink: Actions may not be safe on all matching packets [ 252.815597][ T30] audit: type=1400 audit(1752695473.269:490): avc: denied { accept } for pid=8188 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.939966][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.021774][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.130356][ T5877] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 253.430342][ T5877] usb 1-1: device descriptor read/64, error -71 [ 254.065915][ T30] audit: type=1400 audit(1752695474.169:491): avc: denied { ioctl } for pid=8197 comm="syz.2.614" path="socket:[19722]" dev="sockfs" ino=19722 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 254.068041][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.114743][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 254.139800][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 254.149530][ T5877] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 254.190184][ T43] usb 2-1: USB disconnect, device number 28 [ 254.279716][ T5877] usb 1-1: device descriptor read/64, error -71 [ 254.305420][ T8209] dlm: non-version read from control device 8224 [ 254.406125][ T5877] usb usb1-port1: attempt power cycle [ 254.485356][ T8214] netlink: 'syz.5.620': attribute type 25 has an invalid length. [ 254.535781][ T5910] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 254.540679][ T30] audit: type=1400 audit(1752695474.999:492): avc: denied { ioctl } for pid=8213 comm="syz.5.620" path="socket:[19751]" dev="sockfs" ino=19751 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 254.699593][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 254.721777][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 254.779831][ T5910] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 254.799046][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.809658][ T5877] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 254.821586][ T5910] usb 3-1: config 0 descriptor?? [ 254.830989][ T5877] usb 1-1: device descriptor read/8, error -71 [ 254.840445][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 255.011208][ T30] audit: type=1400 audit(1752695475.469:493): avc: denied { setopt } for pid=8224 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 255.048658][ T5187] bcm5974 3-1:0.0: could not read from device [ 255.100418][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.108566][ T5877] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 255.121843][ T5187] bcm5974 3-1:0.0: could not read from device [ 255.144995][ T5877] usb 1-1: device descriptor read/8, error -71 [ 255.153506][ T5910] bcm5974 3-1:0.0: could not read from device [ 255.176338][ T5910] input: failed to attach handler mousedev to device input19, error: -5 [ 255.187503][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.187564][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.426162][ T5187] bcm5974 3-1:0.0: could not read from device [ 255.433105][ T5910] usb 3-1: USB disconnect, device number 28 [ 255.451942][ T5877] usb usb1-port1: unable to enumerate USB device [ 256.229595][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.289546][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 256.318901][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.329346][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 256.449933][ T8239] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.451743][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 256.458819][ T8239] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.473152][ T8239] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.481995][ T8239] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.642548][ T8239] vxlan0: entered promiscuous mode [ 256.975819][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.999777][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.017203][ T43] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 257.059765][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.225585][ T43] usb 5-1: config 0 descriptor?? [ 257.340529][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.294544][ T8272] overlayfs: missing 'workdir' [ 258.381276][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.902934][ T30] audit: type=1400 audit(1752695479.309:494): avc: denied { ioctl } for pid=8273 comm="syz.5.635" path="socket:[19828]" dev="sockfs" ino=19828 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.298054][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 259.299620][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.304218][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 259.312176][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.420782][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.233898][ T43] usb 5-1: USB disconnect, device number 27 [ 260.263931][ T8287] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 260.619737][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.649153][ T8292] FAULT_INJECTION: forcing a failure. [ 260.649153][ T8292] name failslab, interval 1, probability 0, space 0, times 0 [ 260.679056][ T8292] CPU: 0 UID: 0 PID: 8292 Comm: syz.4.640 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 260.679080][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.679090][ T8292] Call Trace: [ 260.679095][ T8292] [ 260.679102][ T8292] dump_stack_lvl+0x16c/0x1f0 [ 260.679131][ T8292] should_fail_ex+0x512/0x640 [ 260.679157][ T8292] ? __kmalloc_noprof+0xbf/0x510 [ 260.679182][ T8292] ? constrain_params_by_rules+0x175/0xca0 [ 260.679209][ T8292] should_failslab+0xc2/0x120 [ 260.679234][ T8292] __kmalloc_noprof+0xd2/0x510 [ 260.679254][ T8292] ? kasan_quarantine_put+0x10a/0x240 [ 260.679275][ T8292] ? constrain_params_by_rules+0xa09/0xca0 [ 260.679307][ T8292] constrain_params_by_rules+0x175/0xca0 [ 260.679346][ T8292] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 260.679379][ T8292] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 260.679412][ T8292] ? __lock_acquire+0xb8a/0x1c90 [ 260.679444][ T8292] snd_pcm_hw_refine+0x7de/0xad0 [ 260.679466][ T8292] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 260.679487][ T8292] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 260.679509][ T8292] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 260.679538][ T8292] snd_pcm_hw_param_first+0x334/0x6f0 [ 260.679567][ T8292] ? trace_hw_mask_param+0x18b/0x200 [ 260.679593][ T8292] snd_pcm_hw_params+0x5ad/0x1b40 [ 260.679619][ T8292] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 260.679639][ T8292] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 260.679671][ T8292] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 260.679699][ T8292] ? __asan_memset+0x23/0x50 [ 260.679721][ T8292] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 260.679742][ T8292] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 260.679782][ T8292] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 260.679812][ T8292] ? __pfx___mutex_lock+0x10/0x10 [ 260.679854][ T8292] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 260.679873][ T8292] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 260.679892][ T8292] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.679919][ T8292] snd_pcm_oss_poll+0x549/0xaf0 [ 260.679934][ T8292] ? __pfx_aio_poll_queue_proc+0x10/0x10 [ 260.679959][ T8292] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 260.679975][ T8292] ? __might_fault+0xe3/0x190 [ 260.680005][ T8292] io_submit_one+0xbe2/0x1df0 [ 260.680032][ T8292] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 260.680053][ T8292] ? __pfx_io_submit_one+0x10/0x10 [ 260.680076][ T8292] ? __pfx_aio_poll_queue_proc+0x10/0x10 [ 260.680106][ T8292] ? __might_fault+0xe3/0x190 [ 260.680126][ T8292] ? __might_fault+0x13b/0x190 [ 260.680154][ T8292] ? __x64_sys_io_submit+0x1a9/0x350 [ 260.680177][ T8292] __x64_sys_io_submit+0x1a9/0x350 [ 260.680204][ T8292] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 260.680227][ T8292] ? fput+0x70/0xf0 [ 260.680255][ T8292] do_syscall_64+0xcd/0x4c0 [ 260.680282][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.680300][ T8292] RIP: 0033:0x7f5176f8e929 [ 260.680315][ T8292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.680332][ T8292] RSP: 002b:00007f5174df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 260.680351][ T8292] RAX: ffffffffffffffda RBX: 00007f51771b5fa0 RCX: 00007f5176f8e929 [ 260.680363][ T8292] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 00007f5177cf5000 [ 260.680374][ T8292] RBP: 00007f5174df6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.680390][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.680400][ T8292] R13: 0000000000000000 R14: 00007f51771b5fa0 R15: 00007ffc3148d1b8 [ 260.680425][ T8292] [ 261.676718][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.710523][ T31] INFO: task syz.3.126:6413 blocked for more than 143 seconds. [ 261.772635][ T31] Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 [ 261.776411][ T8313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.087804][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.097396][ T31] task:syz.3.126 state:D stack:28264 pid:6413 tgid:6412 ppid:5826 task_flags:0x400040 flags:0x00004004 [ 262.239401][ T31] Call Trace: [ 262.249058][ T31] [ 262.258563][ T31] __schedule+0x116a/0x5de0 [ 262.274428][ T31] ? __lock_acquire+0x622/0x1c90 [ 262.299180][ T31] ? __pfx___schedule+0x10/0x10 [ 262.323874][ T31] ? find_held_lock+0x2b/0x80 [ 262.345081][ T31] ? schedule+0x2d7/0x3a0 [ 262.361061][ T31] schedule+0xe7/0x3a0 [ 262.369323][ T31] schedule_preempt_disabled+0x13/0x30 [ 262.377170][ T31] __mutex_lock+0x6c7/0xb90 [ 262.388073][ T31] ? __pfx___might_resched+0x10/0x10 [ 262.393523][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.418769][ T31] ? bdev_open+0x41a/0xe40 [ 262.433494][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 262.447813][ T31] ? __pfx_ilookup+0x10/0x10 [ 262.466570][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 262.528666][ T31] ? bdev_open+0x41a/0xe40 [ 262.538973][ T31] bdev_open+0x41a/0xe40 [ 262.545556][ T31] blkdev_open+0x280/0x3f0 [ 262.574363][ T31] do_dentry_open+0x741/0x1c10 [ 262.592572][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 262.603466][ T31] vfs_open+0x82/0x3f0 [ 262.612221][ T31] path_openat+0x1de4/0x2cb0 [ 262.636280][ T31] ? __pfx_path_openat+0x10/0x10 [ 262.657571][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 262.674378][ T31] do_filp_open+0x20b/0x470 [ 262.698505][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 262.703847][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.726500][ T31] ? alloc_fd+0x471/0x7d0 [ 262.740567][ T31] do_sys_openat2+0x11b/0x1d0 [ 262.752491][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.759404][ T31] ? find_held_lock+0x2b/0x80 [ 262.765254][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 262.771945][ T31] __x64_sys_openat+0x174/0x210 [ 262.776907][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 262.782696][ T31] ? do_user_addr_fault+0x843/0x1370 [ 262.788217][ T31] do_syscall_64+0xcd/0x4c0 [ 262.793021][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.799742][ T31] RIP: 0033:0x7f699418d290 [ 262.809549][ T31] RSP: 002b:00007f6994f2db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 262.819033][ T31] RAX: ffffffffffffffda RBX: 0000000000088201 RCX: 00007f699418d290 [ 262.827423][ T31] RDX: 0000000000088201 RSI: 00007f6994f2dc10 RDI: 00000000ffffff9c [ 262.835558][ T31] RBP: 00007f6994f2dc10 R08: 0000000000000000 R09: 002364626e2f7665 [ 262.844019][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 262.854585][ T31] R13: 0000000000000000 R14: 00007f69943b5fa0 R15: 00007ffede3a28b8 [ 262.865209][ T31] [ 262.899613][ T31] [ 262.899613][ T31] Showing all locks held in the system: [ 262.907633][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 262.958495][ T31] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 262.970552][ T31] 1 lock held by khungtaskd/31: [ 262.989583][ T31] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 262.999712][ T31] 2 locks held by syslogd/5184: [ 263.009686][ T31] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 263.063902][ T31] #1: ffff8880b8524088 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 263.076907][ T31] 2 locks held by getty/5596: [ 263.088546][ T31] #0: ffff88814c4ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 263.105390][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 263.115614][ T31] 1 lock held by udevd/5845: [ 263.154725][ T31] #0: ffff888142b41358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 263.175628][ T31] 1 lock held by syz.3.126/6413: [ 263.182621][ T31] #0: ffff888142b41358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 263.194217][ T31] 2 locks held by syz.0.642/8300: [ 263.204812][ T31] [ 263.207186][ T31] ============================================= [ 263.207186][ T31] [ 263.217068][ T31] NMI backtrace for cpu 0 [ 263.217079][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 263.217092][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.217099][ T31] Call Trace: [ 263.217103][ T31] [ 263.217111][ T31] dump_stack_lvl+0x116/0x1f0 [ 263.217130][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 263.217143][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.217159][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 263.217173][ T31] watchdog+0xf70/0x12c0 [ 263.217188][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.217199][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.217215][ T31] ? __kthread_parkme+0x19e/0x250 [ 263.217232][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.217243][ T31] kthread+0x3c5/0x780 [ 263.217254][ T31] ? __pfx_kthread+0x10/0x10 [ 263.217266][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.217280][ T31] ? __pfx_kthread+0x10/0x10 [ 263.217291][ T31] ret_from_fork+0x5d7/0x6f0 [ 263.217307][ T31] ? __pfx_kthread+0x10/0x10 [ 263.217318][ T31] ret_from_fork_asm+0x1a/0x30 [ 263.217336][ T31] [ 263.217340][ T31] Sending NMI from CPU 0 to CPUs 1: [ 263.337717][ C1] NMI backtrace for cpu 1 [ 263.337729][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 263.337745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.337753][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 263.337772][ C1] Code: cb 6b 02 e9 83 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b9 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 263.337784][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 263.337795][ C1] RAX: 0000000001272a79 RBX: 0000000000000001 RCX: ffffffff8b885c99 [ 263.337803][ C1] RDX: 0000000000000000 RSI: ffffffff8de32e47 RDI: ffffffff8c158f60 [ 263.337811][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6645 [ 263.337820][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 263.337828][ C1] R13: ffff88801e2b2440 R14: ffffffff90a98750 R15: 0000000000000000 [ 263.337836][ C1] FS: 0000000000000000(0000) GS:ffff888124813000(0000) knlGS:0000000000000000 [ 263.337849][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.337857][ C1] CR2: 0000200000404030 CR3: 000000007df39000 CR4: 00000000003526f0 [ 263.337866][ C1] Call Trace: [ 263.337870][ C1] [ 263.337874][ C1] default_idle+0x13/0x20 [ 263.337892][ C1] default_idle_call+0x6d/0xb0 [ 263.337903][ C1] do_idle+0x391/0x510 [ 263.337921][ C1] ? __pfx_do_idle+0x10/0x10 [ 263.337936][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 263.337955][ C1] cpu_startup_entry+0x4f/0x60 [ 263.337970][ C1] start_secondary+0x21d/0x2b0 [ 263.337987][ C1] ? __pfx_start_secondary+0x10/0x10 [ 263.338005][ C1] common_startup_64+0x13e/0x148 [ 263.338023][ C1] [ 263.522172][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 263.529014][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 263.540791][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.550822][ T31] Call Trace: [ 263.554076][ T31] [ 263.556985][ T31] dump_stack_lvl+0x3d/0x1f0 [ 263.561568][ T31] panic+0x71c/0x800 [ 263.565443][ T31] ? __pfx_panic+0x10/0x10 [ 263.569843][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 263.575199][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.581163][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 263.586518][ T31] ? watchdog+0xdda/0x12c0 [ 263.590910][ T31] ? watchdog+0xdcd/0x12c0 [ 263.595304][ T31] watchdog+0xdeb/0x12c0 [ 263.599533][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.604186][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.609362][ T31] ? __kthread_parkme+0x19e/0x250 [ 263.614367][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.619018][ T31] kthread+0x3c5/0x780 [ 263.623069][ T31] ? __pfx_kthread+0x10/0x10 [ 263.627638][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.632388][ T31] ? __pfx_kthread+0x10/0x10 [ 263.636968][ T31] ret_from_fork+0x5d7/0x6f0 [ 263.641540][ T31] ? __pfx_kthread+0x10/0x10 [ 263.646104][ T31] ret_from_fork_asm+0x1a/0x30 [ 263.650850][ T31] [ 263.654053][ T31] Kernel Offset: disabled [ 263.658355][ T31] Rebooting in 86400 seconds..