last executing test programs: 7m59.110965486s ago: executing program 2 (id=196): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010400000000000000000000000005000400000000000900020073797a31000000000c0007800800064000000000050005000a000000050001000600000012000300686173683a6e65742c706f7274000000a6032e19036cfc4d772a1b2605dd1169807840cfe2"], 0x58}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000180)=ANY=[@ANYBLOB="2573797a312e726561646f6e6c79009af8bdd2f8dff6724f92335aa798e562a95637b6a8034c390b9d687129921383a36973e7433d85f0cc7b3b65404419f7cd33af84b2cdf13bd7ea65473db93333539427d9537fec97cabdb16ba8b988fb6bd2b32b861188cdef0dd1fa3a28c82e0660bb5623a56b061176b5e1e15e2f8b85ece526218461a97f4249b6b9a95f732f549b884b1be26132740b0f7de5d3980cc657c8100da5727df5bdba630f6e9f6c2f88acb7f8681e4c8257af8dfcb142f89da6f047191d0b2cc4c311ce"], &(0x7f0000000a00)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup(0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8000000000008, 0x4, 0x0, 0xfffffffffffffa5a, 0x4000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfff}, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a0000000000005467920034db81e7abdddc259aee6063e57dfee0dab308ac44bd02bae33aa428c21e8527c5b32e2c96d0a0d523936e2a0c48ae51b0"], 0xd) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 7m57.61316811s ago: executing program 4 (id=205): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"}) syz_open_pts(r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r4, &(0x7f00000002c0)=""/109, 0x6d, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) 7m55.754913232s ago: executing program 2 (id=207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4008af25, &(0x7f00000000c0)=0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000140)='./file0\x00', 0xd6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x96b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r6, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 7m54.979027933s ago: executing program 4 (id=209): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 7m54.454895392s ago: executing program 4 (id=213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setparam(r0, &(0x7f00000001c0)=0x5) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x14, 0x2a, 0xb, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 7m54.325645705s ago: executing program 2 (id=215): socket$inet6(0xa, 0x1, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000480)={0x8, 0x4, 0x3, 0xff4, &(0x7f0000001280)=""/4084, 0xfffffffffffffc8b, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) io_uring_enter(0xffffffffffffffff, 0x533e, 0x6553, 0x1e, &(0x7f0000000240)={[0x81]}, 0x8) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004700)={0x1254, r3, 0x1, 0x9, 0x25dfdbfa, {}, [@TIPC_NLA_NODE={0x1014, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x5c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x59d0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x443}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc3fc96ce}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x48000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x17d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x209}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x21}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe6e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa65c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}, @TIPC_NLA_NET={0x4}]}, 0x1254}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r4, 0x0, 0x0) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) timer_settime(0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_open(0x0, 0x1, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f00000000c0)={0x7}) ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 7m53.374764103s ago: executing program 4 (id=217): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x10f4, 0x0, 0x0, 0x0, 0x0, 0x0) 7m53.322142041s ago: executing program 2 (id=218): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 7m53.039413004s ago: executing program 2 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x60, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0xd6bd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xaed}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4040800) 7m53.038870551s ago: executing program 4 (id=220): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x81, 0xc, 0x9, 0x8000, 0x4, {0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x10001, 0x8000, 0xfffffff8, 0x80000000, 0x3ac}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r1, 0x4, 0x10, 0x8, 0x8000000000000000}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000aca25840ba0d0030ea26000000010902120001000000000904e3ffffa002aa00"], 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m51.85370888s ago: executing program 2 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) setresuid(0x0, 0xee01, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) 7m51.479972105s ago: executing program 32 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) setresuid(0x0, 0xee01, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) 7m51.466542351s ago: executing program 4 (id=229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x40, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x5}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) personality(0x400000d) socket$inet6(0xa, 0x200000000003, 0x87) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000600000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x810) syz_emit_ethernet(0x0, 0x0, 0x0) 7m51.353868144s ago: executing program 33 (id=229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x40, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x5}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) personality(0x400000d) socket$inet6(0xa, 0x200000000003, 0x87) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000600000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x810) syz_emit_ethernet(0x0, 0x0, 0x0) 2m50.730490343s ago: executing program 0 (id=1449): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone(0x40, &(0x7f0000000100), 0xf400, 0x0, 0x0, 0x0) unshare(0x500) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m50.345528897s ago: executing program 0 (id=1451): syz_emit_vhci(0x0, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000006140)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001f1cfc35ae83e3380ab5e8bf50000000000000000000500000a28000000140a010200000000000000000300000a0900020073797a3000000000080003400000000a140000001100010000000000000000000200000a"], 0x50}, 0x1, 0x0, 0x0, 0x44091}, 0x4001) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='\x00', &(0x7f0000000480)={0x4000, 0x1a8, 0x30}, 0x18) fanotify_mark(0xffffffffffffffff, 0x0, 0x4000000b, r3, &(0x7f00000004c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0xfffffffffffffff0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) sync() r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r8}}, 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8040) sendmsg$can_bcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5, 0xa00, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a628860aa2e365024153d004359e2697b62baa11b2f3328e393725f8b9fe98c146d40da57ddab7e2249a37a90abbcee542190000000100"}}, 0x80}}, 0x0) close(r9) socket(0x11, 0x3, 0x0) 2m49.162680903s ago: executing program 0 (id=1458): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000090601020000fcffffff104f6a720007"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x30008090) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003700010324bd7002fcdbdf2510"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5) open$dir(&(0x7f0000000140)='./file0\x00', 0x28, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x11, 0x6}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x9) write$cgroup_int(r6, &(0x7f0000000300)=0x3fc, 0x12) 2m48.288880565s ago: executing program 0 (id=1463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kvm_ioapic_set_irq\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000380)={r4, 0x0, 0x0, 0x0, 0x2, [0x0], [0x0, 0x4, 0x0, 0x2], [0x0, 0xc6], [0x0, 0x1000000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={r5, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000240)={&(0x7f00000000c0)}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r8 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000240)='./file0\x00', 0x62000024) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f00000004c0)='./file0\x00', 0x80000000) inotify_add_watch(r10, &(0x7f0000000080)='./file0\x00', 0x20000004) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x9ea22000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f000000df00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="3968af416a40939a077a32c12fc3e5bc45e3348c8613c9af448b155570e3580e77b6a530b7f8a7281e7cce9b6aeedc9d8b88df8fa03587306b20cdfdfec6edd7aa403d2fab13d3bc59454e7001032562f6da04f810daa2d9dc8a0f61e373224580", 0x61}, {&(0x7f0000000340)="5e97d15340c798a7d69247ae3be958317dda56b23ba6", 0x16}, {&(0x7f0000000540)="6e34ae453442451d01fd37f6366671895693c4842e04b71aedc00116c16ae885311eda4d93f37e854fe56329472feaf06025b50c428f4fa692976febdc1713604ad2a85ad190f76f92", 0x49}, {&(0x7f00000005c0)="55f035b53dde294921f14abd4712fc5785d45cdc62d84bf5b9aab1e2014407a3a659a5abf458ec0b8db1042cbbde7f21a0d8c14afb4245227d325f52a45cc65f1a6070e0becdc9c2d893a14b54f8b4dc1aba02fe77894f29bc50b01dee494ce9e5aefda31eb12d7dccb352eb6c07d2294c5b069ff53595f66ab04b86c9e73295ef68c03319ab684d22f84558e8c6c7574d6affa321c47261b1caab2db9622a3f8fcbb5228fc6cc2b5fed3647f38198034658", 0xb2}, {&(0x7f0000000400)}, {&(0x7f0000000680)="49ec86d103666a65e45c05ba7643e8f1138754f661703b13908dc5bf3259172474b1c3c7a78c9a42a393e70f7818eecda1abbd863ffdb804d01eeeeb929731bb76e029bcac610b74fdc68f6dbf8241cd8dfc2716d78aa7788815b9d90279123aed0e33f8", 0x64}], 0x6, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x80, 0x40004}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000d40)="0204142dfd98e67750f681eb5431200737628d2cca1743731c34a57f9d2677fc1c4a0d36bca8202f93be13a98255e1149f086523ce96b4287639b0a6679c1b731579f7812af8aba8abc9143a5852be9a518929d140c4e552bc9fdfbc1aff2570b6fc914c2b94609e5caef5", 0x6b}, {&(0x7f0000000dc0)="cd7d79c0cf4351c11c1ee154df6c2d8108e8ba640dcc3fb68dd124bb533cd3312541ddfac4fac843b0fc3dedccb1c1860c9d9b4b54f5b3d150b0c64eeaee9ce6d1d1ad12c98cf88398b21630f83f909b1b99f7a3455b066d0c8d5247d9935f4919ef9dd25b8ad7c98c86784ced92a716125089a9456f6822a47de34d443a41b7690605ff3c6c332dcb8945021c10eaac35d0f69eaf7a038f82627dc4a323852873be03ea4dde3a02a0ca74e68681da297799d1501c144753d4f1b120978d6b401ccd20ae31c1ed831cb6b8bfaa", 0xcd}, {&(0x7f0000000ec0)="1a6297d94ef504a079f2267b62d95cb20c3cdf0a98e8721f6dc1c98255fb0d45cf61945d8ca6c42ad9", 0x29}, {&(0x7f0000000f00)="79b06ec8cc831b1bd353a7a060bc101931c35fc692e2ab9643509ddfc704b2191d85ca974f6c217728149d048933252deff74f85c9a571d2a0c52ecc0c7ee96eb3bb6af45c41f4eed3d4aca9398ee603457aca6881390c40c5e324deb6af8de4036583032df1ab3a35566bf22697bc463b78ded6f747683649b90f90c8b340a96ef6d8dfd89f3f1dadce996a699578f9eb0394b96b0d4471d92fd07911eb5708", 0xa0}, {&(0x7f0000000fc0)="eaafa3cb95ca", 0x6}], 0x5, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r7, 0xffffffffffffffff, r2, 0xffffffffffffffff, r7, r1, 0xffffffffffffffff, r9, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x110, 0x4}}, {{&(0x7f0000004380)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004640)=[{&(0x7f0000004400)="d39f49826c2605c18593f5df5069751feeb6e0730374868571017e100397b5172f624f1173dd785b661e76eb99a686b3d507024c2c37f2c7795fe8bda309a70073815cdad552514549cc71e3c4d8d86575570d891dcdd94abde947cf7052c8b745617ae06327522b385e0f7d83326a4ba56d4ae47c7b4b1559fca6b587b1078db9bec8c20e4d08705f28031d5eb6df90db3535cfa468a50df4a363358bdf9b35cea0d4c610963d2db9c831cc427ef747b5abc4cc36bea3ce06ba560c654f2d51dab60fc56348d999", 0xc8}, {&(0x7f0000004500)="7c551801b46a8dbd47e8b80af6b56a37ab9459595dabcf2b6e6796c36d082fc79d4a60f7ae2d0450ade6961d51a1a78d5e3739382c2b79a77794c0e76ded7bfa0d57d81c5808388f147421f1110a79b97637cafe49e79a08edc44788572774812bd8b0b9b31d11c285d435a7cf5a6d8c865c2413500aeaefbc1824d764a0f200a11c500866b528542750815ef4ef7d58e604e68058d6d559be78", 0x9a}, {&(0x7f0000006680)="27933b50fc38405b3021f3d08c4326db831460a2202f9cc973d77b521d99bb058b09d2e4b0f9160ddd7914f15f41b69fe66e095bc5587af3b351cd22474c1b3af6991dbd04db54e9806a2793af94e7ad79348af447eafee564045e269fcaac12e709305749620185754d0ab450e644824a3478638f56d74e3eb09f3a1d89994a5c73c1378be659380120c164cb54104974f8b8e0d39fde306d29d5120f6f96c85e2463e02a22", 0xa6}], 0x3, &(0x7f000000a300)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r10]}}], 0x40, 0x4008044}}, {{&(0x7f000000a340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000b900)=[{&(0x7f000000a3c0)="ea43b187006c5751ce349dbef04bc0daeaef2197d9233e688e10cc939a4afa4b8bba01c01f0c89b20d26b235a453afe9daa1ebdf060e8dbeb70951efba433e0f19015856a3aa4d52d61a6ee6b283737f44a2c2", 0x53}, {&(0x7f000000a440)="c0a84d16261b28d9d5e7d2fa0982ca12a5c5fb5fcae794db32f60cd0b33e9c82b431c92f577324e0b78a543ec4ec2f177963587506379bd5ac76ed2a70512f7b1e7e34ee35fc68d529015d13f06d9affaca34df3c386c430df418947f4096a5020e77b25c575320df060efff13ae92229dcffe1bff26201495121fe13f674d5d425b94734ec4ed0917a40da4bb561e4a2ad17cefa1646d827f05079c54d5f9fb86805d1e5df7ed5bc0333ccb617401276415e4c5f5beaeb3e261a46ca2a5767ec53d56b4b4f694c5a47f535b55c8be6c5f8e65c75127c3bc3ecbd8cee1dd43346c2cd23dc27ca97cce0107735cf0", 0xee}, {&(0x7f000000a540)="716eb1205fcd34582f6f5bb8f83d12b4a9182f94629a045195c791bdfc8d260c7dac286b109c9300689766e1b6fcfe9c990ce55db04c993a5896d67dc525a6b30b7a2b31dce972eb6bda3a824636638fddf2ae4d55754b75e69376c3bbada23c56091b486dfe89968dccb22439e193b78c76edd1f4f4ed05f251f9ddbc678fb401119d6fef1cf7fee64b42654d8e7924fbd5824c47154f1907797a5b504f21fdd737333053c280ff94d00d378b3b234dbd9d5486cdf4012431ddbf65fe68823f720da526f13fd7b7005f7c700718c3cea7f8b2ded1c4ad5ea3affaaf852e5bda", 0xe0}, {&(0x7f000000a640)="bb23054b0f02b252512b70640f9e761618c1e543efa578de6e6ed83d3566767920334d1fa0768b17d49154dfd8565fc6aaaaed0887437320e2b965946482ddb5ee85ad5bde3b85e8289620cb8f9a8d79bc065a97de8c22982700c285b1aac0bf1b0204fb8215f981b683d4b3656a15cb1beb202781046d339125f084b666f7619500d8e9cbb989560d51aa6d4b896c30367046d3716887d534ee4c8759b3eb41d465cf26e312c305377a3f1cc07e30691194d0d38153240f2f946408dc7d71dcb9e71cc1c50632eacb8acb6da032c66c30", 0xd1}, {&(0x7f000000a740)="815da8c17ad18ae7c69bb061db4bfdd443ad79d1c9cf4f8869bb98d21a58ff3038a700732b0229b693cdc2f8d8fee659c07e84ef62fce270b76fe1db95a82c1cef1ca76ea970769b368c8e187b85436449f641cdb367695ebd9285d3710e8f0e52dd42ec8cd5b8b9f5bc1b5584595ed0692caf15c659372ad2bb3791ac834b52db3297dab0e7038059f462dea07fc29962b75b03766a352fb284e8823bc47ed2fd8a8956722293b425d31b352ae91f7857f05f262bce38a52dce968bc330042a7e924a46529a77b6ebf8b2d841d303473c08cf698c30ede821669849f220ff0a7e79e840cb5d20f3283aaa", 0xeb}, {&(0x7f000000a840)="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", 0x1000}, {&(0x7f000000b840)="4ab2e93a0bdf4de5ad7388e2f28c8c975b19ff76d186e76287937697ebda95bcf7f4a910c375cad97fc9fe5e869131c8fe3a39d357293f1af7ad0132432b975cfd42de30843fabeafa8b72b664d9b140ffc7bc6624396b2d035934f26dab92930502f6491a4607e0022eec5e0a17da5a97092510465befb8415f3583eb1a5a6eb2f012272f8763925d3f25e438da09b7d07ce3fa946ee409aeb5ef6ba024dfaceb8cd78450c9cf245d42bdc8c4d6f878", 0xb0}], 0x7, &(0x7f000000b9c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x90, 0x20000000}}, {{&(0x7f000000ba80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000cb40)=[{&(0x7f000000bb00)="04c42f0c8fe87aac4af288094dce2f5bdc31d3572dfd12a6803a81", 0x1b}, {&(0x7f000000bb40)="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", 0x1000}], 0x2, &(0x7f000000cc40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r9]}}, @rights={{0x1c, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r11, 0xffffffffffffffff]}}], 0xc0, 0x4014}}, {{&(0x7f000000cd00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000cd80), 0x0, 0x0, 0x0, 0x4008000}}, {{&(0x7f000000cdc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f000000d240)=[{&(0x7f000000ce40)="e42cc2244743eeff047eae541b1bcafedf8b3956c6aa7ee4a57f3f700c4522803eee8103e2bb4fe5987bec20b8678814b0266953a04f92498b386c7dbc", 0x3d}, {&(0x7f000000ce80)="1b562f6b872bb03322d166292827f910216baf814addf8fcc75cdb6fdb9977ccda340d1c37e1c69f1958ee5c8f654a51f943fb535eba6d64f55364970f7ab5c34d6b021467d06dc488a7205de3639963227a6711bc28bcda24144613ced7b8dc053e4aeb6c91ebf00008d873fd903f3909270adb396458659b474f21a8ddf5d65aa9da39681bf8ca8d885964826204794b703ca479e222f58031b3fa5ee988394319a8e70e68d3e81248e5b68ef2e588fcf50acf9b32c2ad", 0xb8}, {&(0x7f000000cf40)="73ed032e1e6a09844379803832d6fb8ab810333a7208e14145424d066234eb8c982aea3d1d0810e23032a35dcf35748a4f8690549e454dd614e6b114a0fa45a190b2b4850386253d28275fc61c2a601835424b1ad8c97c3a21da850e946f5afbbafc926140ff02e674562481c4602df34b87b979fb587694dd618d711160899900cf69e8c1276024f4fbee4c820335443a", 0x91}, {&(0x7f000000d000)="9b6e426203e1e75ad61cf79655601cee6194a7c6739d2624d5f60965833e633e1cbbaaf63b0e669ac38d09bf381d034962dcacea9c365e46dc46a198fb03f68fc9ae1fd50551a229f7998f290c8d9c9f47445b352ca2da22cf474e9c467d721e76b189d11be2eb048c91d0640542396c7b9043151fdbd3277309b7782d9927f6cf8e1419024461c2aa17f7cbd84d439d6aa040439b90cf5b5a", 0x99}, {&(0x7f000000d0c0)="8cbccac872ada343580cbfc1d4aaf5a7a5486293cacda0064dbe8eecb9e8c091913a9a27b08f5ae9070f10162337d918f8bcb289ff048ca18164c88413131daf16d5c79141cb3859ac1fd4092643a09dff90a93ab7ead97a7798b072098d4ca95167587e98e891b3c4448e38d7ba6fb2000f2124b5f1", 0x76}, {&(0x7f000000d140)="2f911b7ca78221bf7c592c0fcc432811509522ec31d278411db62f1950c9c72e1dd405b41c7b664f9d675542a6d7004957a3c33b2faa39a875b8badd35b1333cd5bf67b19fbaec0d6f26ffc1c2ab6df1555eb446e38e626a1e354e24b4fc753eadcddc049469446196817375a29a1e4f833338c3ba59d8210a8ffe5079684d811d3d2b5033715c4d3b51bde8dbdde5bd7db2c4db8cb782d47645040b8b568b52c1e0a7d31d90ac35982deb8fbfd76fa180803b178c79347f9469b892ba149e62874743ec1ec191292cf72492e145d1e4ce6a2ab8fea0b6d90012e59951ad698b507ca33e9aceef2490e5", 0xea}], 0x6, &(0x7f000000d300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0, 0x24000000}}, {{0x0, 0x0, &(0x7f000000d580), 0x0, &(0x7f000000d5c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40001}}, {{0x0, 0x0, &(0x7f000000dc00)=[{&(0x7f000000d600)="5b4ae8d6d23fe2", 0x7}, {&(0x7f000000d640)="ac5c3d7b9fd40d8028d68976ba3bbb8fc892ab2facf4035673fc645b300b639e2386e15dd1f7413d2a0b395923d1a62b4646f7b681dee56a245cb7b3eb1f2d3e80fac6d8c8fa7c077047a211b21c1535343733e9fdcd41199ac54b398896300ec6f5d3a6a79b31a32263973fd5be07c93897", 0x72}, {&(0x7f000000d6c0)="f9da745a31dc42813ad6e89089f5809f350fff65ac2ff0282def1a25539a2a0b5a47364dc65605a367bb664936307a5aa7b79517a144a22e87ee1b0cb88c8fb5ef9a6767c58a124f89d6c5829cfd80a6e7b17b8fd54e64e94f296ba715d53e5f5ff4b335662862607ede7f056ca5980e85ce4f693459b5c317d1f40b2caa64ecb51395d4810d11a3b2976320ce8bcef2264a240daaeb6feebbbf3f09e4ff6576a24c7b03f510f0", 0xa7}, {&(0x7f000000d780)="1619cceaec6bf47ec36d7b298b5eb1228be113a2c66df697b1a8ca9ac3797f9030e161f94e9e450bec57c75257577f24ea3d325f32e7407c18891455e7d2a48f1978e712919d8013ce1c0db95a153fe0cdd010180a3ee69b149738e75a8d8c5140439627df0385d5591c47c28b4407b3660965cf9fd7665804a0e7c4020180b1dfc5d3ffe7a3358b4b44ca262f0977d8e2f1c1ffe3f6908ebf845fc2ffd5ac5ac1a023ca78e0c31844d0f9a73866890ee89a76736427dfa006e1102333f3975ef377e63c02326282526e27c9ffcd01aca0e57fd73232ae592727fdbf817d2c106be50e2e67ce", 0xe6}, {&(0x7f000000d880)="f68ac635c0ef18596c1741f611f718f24793ceb4a484970ebb0e345db5cf4a895eccd850b84aedf3da185b18f570dbf345f6adead7e871009e78851d2eaad5e33e463b121f9d89edd6e2da0655f98ff3c2290635f6c9f1d1477baeff06f5c0a5ef138b10238d3458ab2417be85a1d786ca8069e96679de0453b26eea028024c620d0910b2c34b797873a4ca8bde9f0f9b6d3fbadab71453461cf3e989a546ec84c43f9771f16b5e517f8bdfdb4e44f26118f03afc53a869fd8c467a67f2734b0231c9e97bddd76925975a57171bb377276ac3c29723d719e728ff7129936de06b211014b60e3b283471211", 0xeb}, {&(0x7f000000d980)="99cf19c52d6d678867f6d715f931d9e94471c86ca0ed086c481d23719de45769cc55b1809d15be97b59af66a97e8dec372a7c795f7b803cdf03f24904c93bcaa8380f0862e39cf96c9f36080b0699ec3bf44289fac7001a9dc7c2c48dd71d34140aa654c57dec5b701a9bb61b1cc2da01d9c9eae99f4f0b509", 0x79}, {&(0x7f000000da00)="e024a25270c49b000366bf09a44d25961182b204654402f40cc79b8904c018f579dbe19932cc90bb940b8bbd6498f88089ebedc9d647c0082b522dcf5c8366c10126d8176df7dd", 0x47}, {&(0x7f000000da80)="1baf2f2ecd298a5a7ec7b26b33cbea18eea60756b0f0cfa68d1a3ccce90b772c230e1eb9288154a9f7471454ba3838813026a37a04422fcf79f23b7fee771403cc12c2785747f9b47ee7c5dd993ff436e4406b58b7d6f9efc268a8c9d18b6b759a632ee941eee97ea76fad9c4f59b9039fcd7f4f1169cfbec77fc954b8ebc9eb5061c1672560927ff63ffdf2a8b986fb3a7b37af7237b2e317f8ebe642e7212a9d1215c28a5ab0abd5c12d36352b8118cede106dc1fc58c2c3459265306c623d7988c3c409e9a496f4eddc", 0xcb}, {&(0x7f000000db80)="51bcb0adfd7e6680ae06f28ef7ab3aafdee3af0c89a3399d13a786b67c7112ccceb3a915aa3a7bd286dee47dbc9970c63d211b1ea0a3fe14c0081b99bd5d0a69b24e595007db52e4e810fb554e7dec9cb45092cdab5b091edbd126b1e15c9d7b16a360daa6a5f4752a1293e740ca27b5e6e3f2", 0x73}], 0x9, &(0x7f000000de00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r9]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}], 0x9, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f00000001c0)='fusectl\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2m47.15480019s ago: executing program 0 (id=1469): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = dup3(r0, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="77ba00000000000000001f0000"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={0x0, 0x28}}, 0x80) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysfs$1(0x1, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001e40)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r6, 0x43) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, 0x0, 0x40) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) sendmsg$NL80211_CMD_SET_WDS_PEER(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0001045050505050500000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4808) 2m43.769959477s ago: executing program 0 (id=1484): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240)) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) socket(0x2, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8087, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xb0400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0x0) 2m28.679570683s ago: executing program 34 (id=1484): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240)) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) socket(0x2, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8087, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xb0400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0x0) 19.986948707s ago: executing program 5 (id=2037): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000080)={0x0, 0x3, 0x2, {0x2, 0xd}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, 0x0}, &(0x7f0000000d80)={0x34, &(0x7f0000000240)={0x40, 0x7, 0x53, "28a010022a1665417dfb8b76ab0753820a2125205d703f413e5040d1ad48382c682647137e8d8c0743db9041f96cf587124a956fc0c614a4accb286cd1bedae8831622d920164feeec47dfa1eac055d9d9ae40"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xaf}, &(0x7f0000000b80)=ANY=[@ANYBLOB="20007e00000000002392d1f96e9ee10c99ad3e93f260a1832a467292ec26da9519ef234e64ea53f46173836cb4377577288a07d3ee4bcf3247407fd585d0f6937f5b8d5d9b7ae772219074e7a7fb24f2fbec78398551f8434a66f5e2f2c96d5c2f132e392667c8eea15c88172151041779ec0c0c5061e96710b10cfbf237b91599454f68"], &(0x7f0000000cc0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000d00)={0x20, 0x0, 0x1, 0xff}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 17.691824288s ago: executing program 5 (id=2043): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x8, @void}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d022dbd7000fcdbdf250100000008000600e000000208000b00ef6451cc1438b849ae93c5bbc8", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x20000000) 15.825781385s ago: executing program 5 (id=2046): r0 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0xc0) r1 = socket(0x10, 0x803, 0x0) socket(0x2, 0x80805, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$inet6(0xa, 0x80001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x10) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0x10000005}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0xf, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2e59}}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0xba, &(0x7f00000001c0)=""/186, 0x41000, 0x60, '\x00', r5, @fallback=0xa, r6, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xb, 0x9, 0x7}, 0x10, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15}, 0x18}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001400) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2a900007d6ac6e50830b61e20d6378030000000000"], 0x0}, 0x0) r12 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r12, 0x80284504, &(0x7f0000000100)=""/95) 11.690844767s ago: executing program 6 (id=2060): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000700)={0x3, 0xffffff32, 0xfa02, {{0x6000000, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0xa, 0x0, 0xc, @mcast2}}}, 0x48) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000003880)={0xbb, 0x7fffffff, {0x0}, {}, 0x1d8, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000038c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}], 0x20}}], 0x1, 0x40025) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) fstat(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r14 = gettid() r15 = geteuid() fstat(r0, &(0x7f00000059c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = socket$l2tp(0x2, 0x2, 0x73) r18 = getpid() sched_setscheduler(r18, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r18, &(0x7f0000002280)='net/wireless\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000006f00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000008f40)=@bloom_filter={0x1e, 0x6, 0x4, 0x8, 0x84d, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x7, @void, @value, @void, @value}, 0x50) r21 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000008fc0)={0x9, 0xffffffffffffffff, 0x1}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000090c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="423d9b57ff89fde96151b42205686b38777b197fdb60ea8712ac1d6b9dd34ae4b2b9093443a6631e7f673f7d823fb469e006cde0f01c56c70c79985f0d2e282e7d1aa1cd370ced214150d38704c29694054e27de89", 0x55}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x8000}}, {{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)="94d9bbaa03", 0x5}, {&(0x7f0000000580)="1715c498e99e846aa8359b3fa323a1700c38cf661cdef2ff762f33a88d5a69d68d9b9c8617b5aa90b1aafb614a94dbaf41a4ba872eccacc4c84bceeef3de44217582f4db5822cc", 0x47}], 0x2, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x10004085}}, {{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000940)="e0728c2e8a16da324f24d79cb60d3c19f12e7a57c1035cfeea562eea8111b3bc0cde9a8542a085a10c6bbd4a1a58c3809d4ac04028f1bae5b333c5a1613513c75b7feea1235d5a2b72f22d64691c7b1827256bd77f2ea5860793d123200da5c5b02e8d30a61fb55750c91f5d555cda9235d1eeee5d5ae8e59eb63ed98dc25f4a03da795c48aa5940cb34eff5f8d1072f50070250c2e9e73ffcc7", 0x9a}, {&(0x7f0000000a00)="4bf7334cbf8b752dc52c3cc63c8d7656031b61c53a439e97b0cab3b9e2c60a2b7d917914e92b4512e09cf4e22306166e3888cc8a5395de68205b12a6af0019f533a0a31c0512d23ea50ac67ba361a57310b75c1a08f8017ff28a0f5cd8fb3802786b599f91", 0x65}, {&(0x7f0000000a80)="90e69811113a46650ad173b0e33ac29875460b462535ef8158220c4a87395291ed0054aec2543cd92f0cc2e51cba3a8682982cff14f6de6152c3492eb828cc0db362aa90190a6df1c6c11c680bf58341b45b17e97995ddef8ce76ca4e52afc31b56f4cfadcc98245644cc4c457464f26b18b28740faa6e9f0253339d0599d1f2ba8fcecfa83bd30cad4714841c54fba1fc8a1cf86effeb9f87d9a277245b6d012ddf443038c234210367c4454a82b4c79b558202b1d01b72529f8e6d527e403e8533aebb7716eccd0d86fed5ad89969267", 0xd1}, {&(0x7f0000000b80)="54c95cfa0846d63840e8eb09ff7fdb6c26e7598f50d3ea9c82c892f621fb71f16d27d6f13b1e375315715381529ed9ef4537714cea89c7ecacd722a193d30efc66d21b15ee7447aecf43a73ec2c85c40c5d3463838e708a5cfc7ea7f839ce3c87f112979893e4a7e97091d64649709e3a7082f4a7d795b5428c9447a4533cb865538ac095d61a28e", 0x88}, {&(0x7f0000000c40)="9a1ce7ab3cc1154bea2ca6d99a1e3deb008db359a228c74a93f92059a25fdd89efab5297943159c4c66282f07e5e46c1c2ada0430195499d092075a29373be7859fb28fc0f26d268071a9f01c7e3fbdb9ba6b3e6d8015be241c6c817f3d37b29d47df2a54c220e26784de5d4605c41dc9b276ad165f951a3af2d588ad84f0ad2", 0x80}, {&(0x7f0000000cc0)="a03c7749c12d013797dd3b90aad5f03e7ca27c8f4da4868320a928f8f558225ec2ad7fe37ed90c9de37197b308034c0657bcb55062eedd639eb118f2ea033e88b532037d40539dbafe9b43adacc79ad46e0b41dfc97ad9db040eb7a1058f894a17872924843a31e558537698880fee74f4e2dfdf0aa8b6d719ec1aa29ad460dd44dcc09c9eb7dad11285c9b8d3f6e1272dd072b197a40d38f060d471ced901e2621cf765a079a0bb", 0xa8}, {&(0x7f0000000d80)="99630c88d751ac8a10bb1689abb0a9a62b53752457315d0b023a64cb3cdeae89f6002db5131275a403c2f5ef8743e6f2e02c900af2aec3a183a1478e8a8d6f3a22a1da5fa567b5f690ad28cc8182daf92e34972af53a7aa1cd5e51f641", 0x5d}, {&(0x7f0000000e00)="4babcfca08a00f3c63e84807a4afbb38a892d7b4356eb465b1b1500c4bc96a2cddbf90aea561737d9a56d1789b", 0x2d}, {&(0x7f0000000e40)="d7f28e37fbc1cfd2a11d6f74db394c3bae8551d8461009fb6077489974f23f832fb6ab47754095f39b6e194dc47886d64a98278afa3c85afff16c05869396ec5c91adaadc8633919502cf5327ec4c6c43d432ea76fdaabaedcb18c2c227fe1c970f795be3d68f3a4b8eacf8b15ddbf27bef05275e5abe12d20de29b8ea399d807afec8a392bbf9b4ba5b3890e400d972eba599a8f0de8695b80b98c66ecbd4e809901c14614fd38bf0eeee9bc8226223dee0ba436495d68aeb179a67e82dec4cc3124c2df739990eba5710aabcffe021bbf1e1376df7cfc43ed77ec699d54f65a5a5a7f8c717c6e1a46a03e7086b92b6", 0xf0}, {&(0x7f0000000f40)="8a9b0d701048f37719233e9ce656b13d8354f18381a413a3b64dfb6877cd7219f80860bb2176514bc7ffb489560def71f979838753bc8d79", 0x38}], 0xa, &(0x7f0000001180)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40000}}, {{&(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001240)="e5b18e16a6cbb46ddcd02e7fd7fa3a4dc0eee3adb2762ac60661ae52fce46f42bba392aafb2bcac5df0ad76bf4aa14f73c387db8120e719bfff93718bebc135195d4604522b6467f3b7c4ce6d28f059a2157a6efa3e5c3b153d68590f5e147cf39a44510800b83d887c3de5b4e1219afefdb", 0x72}], 0x1, &(0x7f0000001340)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40}}, {{&(0x7f0000001380)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001400)="e513f54e4cb23aa6bf45a92eb57945741264a647ce642d142f5e682ce688be8a1cd9a55a608aa8ed11e414936c050898bafb9737956c3c3a685c1090eeb7fb791fee3fb586f4be8af5ef036495b7242a6f1983489d94dc9233eab9f4992c15856da24969", 0x64}, {&(0x7f0000001480)="a2640434c33b1014345aebaa46b6884757b359bbcc334e2508fb4e3470b1c3af096aa9446cf725fdd4124869e3643b3741be048e7a6d81", 0x37}, {&(0x7f00000014c0)="0d2f97a7cb5f0556a1674bd0fea21cfd42c675a120e13d0a7759cebcd5cee2752678dfc19f5c1032aba8737719daa53e39aae9b429c732e478c2be6ab51fb10913bc3df10d0157ceccaddeb078ccd42273c710089a7f8dcae9da2ca22ad192210655523bc1d76d559eacc4a7876bea0083be7b670c49fe64d51cc71971312068a929c8ba76cab747fdfb5e1eca0d00d1cba4f1a2", 0x94}], 0x3, &(0x7f0000005a40)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0x128, 0x880}}, {{&(0x7f0000005b80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006e80)=[{&(0x7f0000005c00)="aae22d6b0bf28e274b30e74783e756d4dd89dd898431b81fd87feaf7e0d7246cf740eac360f845a2d41102bd787806a8b426ac1d497e18ec6e7959c5cc", 0x3d}, {&(0x7f0000005c40)="daae759cb378fc35c17f33c1fda920c5311c6db665b6a66f1f785a087ca0c3cb0d187c0ab4f1591ba4b0a593c152f6630bae67b51c76997daf0570a27e061cd09dcc75cfe865ae8b81cac60b60fe233e385a65c4e7ab15a1d98797beb7259c1786e2723c602b95e384ec333a42c3a045636df0f240a0cad569644746eb88144d841d91c9ae7c524b670512007d642ad3448b5bb3d5ee23a3e05a06c96c72b792957739b56143d4a1a10b602806c12c94a7f19eba57e96b7cad6920d7f81af63f1d68682b28d17abf66ecb48a50dcd0c51bcdb51ebec69ff805a41a3a4ae93d3b96956ddb3dae1258a732c8c3fd38b7c94caa", 0xf2}, {&(0x7f0000005d40)="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", 0x1000}, {&(0x7f0000006d40)="e047092e759a0ffad0713e78f9b68d07e3c0531b3c4ec1870045d27a979efee930d18b4e18ac11778f444a61800034ad382b201880f46403df2f8c283d6b696b72ace96ca9f2952522bb99e0305e87976ff225fa4e542cb8d1865a8f5b79d37bb105df9f0edf7089baabb531bc336b70c0402f6324b61853d2fcb08b17b5a11150cb08b52554403731413a8b14947ea496bee82a729d3d7734c012", 0x9b}, {&(0x7f0000006e00)="3b0edc873caeda4980592ba28a96f708243bd1941747f6ca333e7716a10c97f3ff265da6ba63e3ca76b620dbc4c4f17dcb1be1c6d4c7e91693f9422eaecaf106577286b4fc113cd050cb42511a", 0x4d}], 0x5, &(0x7f0000009000)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r17, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r18, 0x0, r19}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r20, r21, r22]}}], 0xa8, 0x4042803}}], 0x6, 0x4000064) 9.324762862s ago: executing program 6 (id=2064): socket$inet6(0xa, 0x1, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000480)={0x8, 0x4, 0x3, 0xff4, &(0x7f0000001280)=""/4084, 0xfffffffffffffc8b, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) io_uring_enter(0xffffffffffffffff, 0x533e, 0x6553, 0x1e, &(0x7f0000000240)={[0x81]}, 0x8) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004700)={0x124c, r3, 0x1, 0x9, 0x25dfdbfa, {}, [@TIPC_NLA_NODE={0x1004, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xff4, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x5c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x59d0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x443}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc3fc96ce}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x48000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x17d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x209}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x21}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe6e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa65c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}, @TIPC_NLA_NET={0x4}]}, 0x124c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r4, 0x0, 0x0) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) timer_settime(0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_open(0x0, 0x1, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f00000000c0)={0x7}) ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 9.258973818s ago: executing program 7 (id=2065): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) gettid() bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x30008090) open$dir(0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={r0, 0x11, 0x6}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) read$FUSE(r1, 0x0, 0x0) 9.258594681s ago: executing program 5 (id=2066): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$alg(0x26, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x6, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000014000100ff0200000000000000000000000000010800020003000000"], 0x38}}, 0x40080) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.513032476s ago: executing program 6 (id=2068): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000440)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}, "09cf88f0"}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty=0x60, @empty}, {0x0, 0x7, 0x8}}}}}, 0x0) 8.455767094s ago: executing program 7 (id=2069): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$alg(0x26, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x6, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000014000100ff0200000000000000000000000000010800020003000000"], 0x38}}, 0x40080) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x418200, 0x100) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, r5, 0x0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1, {0x0, r6}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.354029174s ago: executing program 5 (id=2070): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xf1, 0x88, 0xa}]}) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x1dff, &(0x7f0000000480)={0x0, 0xe643, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x1}) io_uring_enter(r2, 0x2def, 0x0, 0x4f, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00p'], 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r9 = syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0x2794, 0x10100}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r12, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0, 0x10042}) io_uring_enter(r9, 0x8c, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) 8.042869078s ago: executing program 6 (id=2071): sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x150) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000340)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x24008804) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xb, 0x10, 0x8, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, r4, 0x0, 0x80000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000196c0)={0x11, 0x2b, &(0x7f0000019780)=ANY=[@ANYBLOB="18000000ffffffff000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018490000f9ffffff0000000000000000b7080000000000007b8af8ff00000000b7080000410300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008d8a0200f0ffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000000710000002000000180000000d000000000000006d676e40bf91000000000000b7020000010000008500000085000000b700850000000000950000000000000074454252d9329d9635fc4a39948c702058b342c85088857b3fb5079a2eb662aced452339812da6dcec994c0ee3200b65721ff303e6c15a1294af87b53ed8e376dbda7943a7cdd350592ef7d3f153514c752cc18b6a97bbbe5ae38f158f53428b87"], &(0x7f00000194c0)='GPL\x00', 0x3ff, 0xde, &(0x7f0000019500)=""/222, 0x41100, 0x7a, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000019600)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000019640)={0x2, 0xf, 0x96, 0xfffffffd}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000019680)=[{0x4, 0x2, 0x10, 0x6}], 0x10, 0xfffffff8, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x490420, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 8.038333169s ago: executing program 1 (id=2072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000000180), 0x400000000000077, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x100000000000001c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 6.297378908s ago: executing program 1 (id=2074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000000180), 0x400000000000077, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x100000000000001c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5.838412871s ago: executing program 3 (id=2075): syz_io_uring_setup(0x360, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x29, 0x5, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='+-).!-\'.:\xdf\x00', &(0x7f00000000c0)='0$]\x00', 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioperm(0x8, 0x6a8, 0xa) modify_ldt$write2(0x11, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, 0x0) 3.858312347s ago: executing program 1 (id=2076): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000400)='\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0xffffffff) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0xb) connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0x2, 0x0, 0xa}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}, 0x1, 0x0, 0x0, 0x20002040}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa26aa50266a36eb7, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df718000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="47be0000020000002dbd7000ec000000"], 0x10}}, 0x44001) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="8f2cc2a4656a16724026ab55df51ce5bef5df6490a76382b75597467a6f6294da7af3c0a85578d490ae3e7795bbd3f1c36ffa5054defc644dfeacdd520106b7bb6c1442c9e023475306e726555eed248ca6d6dda6252d3aea42d3955db4a098366bf7ef3e5fa475f1f03e4d8f7f2efe376384c2f27bd4c56c2ffe05125ba96c4dce6b0caba53bf0a17bb15f0ff85a101db7fc58922fc8c9e05034abd9e484921b94a7eab040274cbd661592e6f0b691ed838a3d0ee90b9b855f5e8c7a234355d2f188517b6e3dc795ac4c597b7e7ed90254a3affb13a09cfa21085355b82c00f"], 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) 3.768830669s ago: executing program 6 (id=2077): iopl(0x3) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() prlimit64(0x0, 0xa, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r2, 0x10001) timer_delete(0x0) timer_delete(0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) writev(r6, &(0x7f0000000b00)=[{&(0x7f0000000940)='\n', 0xfdef}], 0x1) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000000)) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 3.724736207s ago: executing program 7 (id=2078): syz_open_dev$video4linux(0x0, 0x4000000000, 0x100) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r0, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='system.sockprotoname\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) r4 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) syz_open_procfs(r4, &(0x7f0000000000)='environ\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x214) semtimedop(0x0, 0x0, 0x0, 0x0) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1, 0x800, 0xfff) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x1, 0x5, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="1efdbe0f1940", @random="5aae2bb80217", @multicast]}) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 3.566952318s ago: executing program 3 (id=2079): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) gettid() bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x30008090) open$dir(0x0, 0x0, 0x0) creat(0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={r0, 0x11, 0x6}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) read$FUSE(r1, 0x0, 0x0) 3.540083674s ago: executing program 1 (id=2080): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$alg(0x26, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x6, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000014000100ff0200000000000000000000000000010800020003000000"], 0x38}}, 0x40080) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.51825181s ago: executing program 5 (id=2081): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = dup3(r0, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="77ba00000000000000001f0000"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="0c0099000600000066000000"], 0x28}}, 0x80) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysfs$1(0x1, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001e40)=ANY=[], 0x8) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x43) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r9, 0x0, 0x40) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0001045050505050500000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4808) 2.506203504s ago: executing program 7 (id=2082): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x11, 0x6}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x9) write$cgroup_int(r2, &(0x7f0000000300)=0x3fc, 0x12) 2.453248938s ago: executing program 3 (id=2083): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x4000000}, 0x0) 2.44638468s ago: executing program 1 (id=2084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000000180), 0x400000000000077, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x100000000000001c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2.146908078s ago: executing program 3 (id=2085): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00'}, 0x10) (async) write$selinux_access(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a"], 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$selinux_create(r6, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async, rerun: 32) socket$inet6(0xa, 0x80001, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x24, 0x64, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x10}, {0x8, 0xfff4}, {0xc, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 978.125789ms ago: executing program 1 (id=2086): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r1 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r0], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a008700"], 0x4c}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x2000020, &(0x7f0000000700)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38, 0x38, 0x53, 0x36, 0x25]}}]}) syz_open_dev$video(&(0x7f0000000440), 0x4, 0x0) syz_usb_disconnect(r1) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x700, 0x80, 0x4, 0x30000, {{0x19, 0x4, 0x1, 0x6, 0x64, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast, {[@cipso={0x86, 0x41, 0xffffffffffffffff, [{0x5, 0xf, "8a1784686ae716ecf5c2bf8c23"}, {0x2, 0xf, "e61798d8c80b94c76541d94811"}, {0x1, 0x3, "89"}, {0x5, 0x6, "2e291d69"}, {0x1, 0x3, 'Z'}, {0x1, 0x11, "049a854955e17986abbd61b6a3cbf6"}]}, @generic={0x88, 0xf, "0886d0c97bac0673879f046624"}]}}}}}) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000200)=0x16) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100fa2a00090400000190f19c000905eced"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$uac1(r11, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000140)={0x0, 0x14, 0x3, "fa554f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r9], 0x28}}, 0x0) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x6, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000c0f0ffff0000000004000000185b00000f0000000004000200000000694930001000000018120000bb96e7c46cabc5e13c766a0c31e3162a09c7abf6b4295bb1e03e8c6b12481cfb14db6006fa94901f32ae994804373093a25cf7f2234f2cfc57dbe37b335ffbdc1c535ba7f920178b1861496b4632ad392af840c222e4fdae9fbb7ab41ca533736a653b9fadcb4a4b5642223e241b176698a803cfadf06acc", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018220000", @ANYRES32=r6, @ANYBLOB="0000000005000000183000000100000000000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x22cf, 0x0, 0x0, 0x41000, 0x4, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xe, 0x8, 0x9}, 0x10, 0x6, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r9, r12], &(0x7f0000000580)=[{0x3, 0x4, 0x2, 0x3}, {0x5, 0x4, 0x1, 0x3}], 0x10, 0x10001, @void, @value}, 0x94) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 489.720742ms ago: executing program 3 (id=2087): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a000100feffffff0000000002010000000400000000000005001b0001000000"], 0x24}}, 0x24008800) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e040080e00f80ecdb34b9f20700000000000001ffc500c50083b800"/42, 0x2a}], 0x1, 0x0, 0x0, 0x5865}, 0x20000010) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) 420.980413ms ago: executing program 7 (id=2088): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) syz_io_uring_setup(0x416c, &(0x7f00000001c0)={0x0, 0x5aa1, 0x10100, 0x0, 0x3f}, &(0x7f0000000100), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(0x0, 0x8b, 0x0, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x28b}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) 290.895224ms ago: executing program 6 (id=2089): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1226) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001100)=[{&(0x7f0000000800)=""/92, 0x5c}], 0x1, 0x8000012e, 0x81) 290.502026ms ago: executing program 3 (id=2090): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$alg(0x26, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', r1, 0x400, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=2091): ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)={0x1, 0xfffffffffffffffd, 0x101, 0x2, 0x1ff, 0x10000, "0ebd22ffffff0800", 0x66, 0xf, 0xfb, 0x0, 0xb, 0x43, 0xfa}) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000019c0)={0x2020}, 0x91) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000001c0)=0x9) write$dsp(r1, &(0x7f0000000140)='u', 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x1f5, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="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", 0x200}], 0x1}}], 0x1, 0x81) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r3, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x2, 0x8090) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000100)}, 0x1}], 0x1, 0x1, 0x0) kernel console output (not intermixed with test programs): : Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 451.309766][T11929] Call Trace: [ 451.309771][T11929] [ 451.309777][T11929] dump_stack_lvl+0x16c/0x1f0 [ 451.309799][T11929] __getblk_slow+0x4fe/0x5c0 [ 451.309817][T11929] ? __pfx___might_resched+0x10/0x10 [ 451.309841][T11929] ? fs_reclaim_acquire+0xae/0x150 [ 451.309866][T11929] bdev_getblk+0xb1/0xc0 [ 451.309885][T11929] __bread_gfp+0x86/0x340 [ 451.309903][T11929] udf_read_tagged+0xae/0x740 [ 451.309927][T11929] udf_check_anchor_block+0x8a/0x4b0 [ 451.309945][T11929] ? udf_get_last_block+0x1cf/0x2b0 [ 451.309967][T11929] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 451.309986][T11929] ? __brelse+0x8c/0xb0 [ 451.310008][T11929] udf_load_vrs+0x3b0/0x1050 [ 451.310032][T11929] ? __pfx_udf_load_vrs+0x10/0x10 [ 451.310048][T11929] ? lockdep_init_map_type+0x16d/0x7d0 [ 451.310071][T11929] ? __pfx_udf_get_last_session+0x10/0x10 [ 451.310098][T11929] udf_fill_super+0x79b/0x1e00 [ 451.310118][T11929] ? __pfx_udf_fill_super+0x10/0x10 [ 451.310133][T11929] ? do_raw_spin_lock+0x12d/0x2c0 [ 451.310147][T11929] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 451.310161][T11929] ? set_blocksize+0x2a8/0x360 [ 451.310177][T11929] ? sb_set_blocksize+0xf6/0x120 [ 451.310192][T11929] ? setup_bdev_super+0x369/0x730 [ 451.310214][T11929] get_tree_bdev_flags+0x38b/0x620 [ 451.310234][T11929] ? __pfx_udf_fill_super+0x10/0x10 [ 451.310252][T11929] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 451.310277][T11929] ? bpf_lsm_capable+0x9/0x10 [ 451.310294][T11929] ? security_capable+0x7e/0x260 [ 451.310312][T11929] vfs_get_tree+0x8b/0x340 [ 451.310331][T11929] path_mount+0x14e6/0x1f10 [ 451.310349][T11929] ? kmem_cache_free+0x2e2/0x4d0 [ 451.310363][T11929] ? __pfx_path_mount+0x10/0x10 [ 451.310381][T11929] ? putname+0x13c/0x180 [ 451.310401][T11929] __x64_sys_mount+0x28f/0x310 [ 451.310416][T11929] ? __pfx___x64_sys_mount+0x10/0x10 [ 451.310432][T11929] ? do_user_addr_fault+0x83d/0x13f0 [ 451.310457][T11929] do_syscall_64+0xcd/0x250 [ 451.310474][T11929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.310495][T11929] RIP: 0033:0x7fb13138cda9 [ 451.310508][T11929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.310522][T11929] RSP: 002b:00007fb13214c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 451.310538][T11929] RAX: ffffffffffffffda RBX: 00007fb1315a6240 RCX: 00007fb13138cda9 [ 451.310548][T11929] RDX: 0000000020000040 RSI: 0000000020004a00 RDI: 0000000020000500 [ 451.310557][T11929] RBP: 00007fb13140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 451.310566][T11929] R10: 0000000000008087 R11: 0000000000000246 R12: 0000000000000000 [ 451.310574][T11929] R13: 0000000000000001 R14: 00007fb1315a6240 R15: 00007ffe4799c7f8 [ 451.310595][T11929] [ 451.310601][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 451.627394][ T5826] usb 8-1: Using ep0 maxpacket: 32 [ 451.641095][ T5826] usb 8-1: config 0 interface 0 has no altsetting 0 [ 451.659611][T11929] getblk(): invalid block size 512 requested [ 451.659683][ T5826] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 451.728530][T11927] nbd5: detected capacity change from 0 to 4 [ 451.862790][T11929] logical block size: 1024 [ 452.052388][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.065024][ T5826] usb 8-1: Product: syz [ 452.075120][ T5826] usb 8-1: Manufacturer: syz [ 452.103245][ T5826] usb 8-1: SerialNumber: syz [ 452.108629][T11929] CPU: 1 UID: 0 PID: 11929 Comm: syz.5.1614 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 452.108650][T11929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 452.108659][T11929] Call Trace: [ 452.108664][T11929] [ 452.108671][T11929] dump_stack_lvl+0x16c/0x1f0 [ 452.108692][T11929] __getblk_slow+0x4fe/0x5c0 [ 452.108712][T11929] ? __pfx___might_resched+0x10/0x10 [ 452.108738][T11929] ? fs_reclaim_acquire+0xae/0x150 [ 452.108766][T11929] bdev_getblk+0xb1/0xc0 [ 452.108786][T11929] __bread_gfp+0x86/0x340 [ 452.108805][T11929] udf_read_tagged+0xae/0x740 [ 452.108832][T11929] udf_check_anchor_block+0x8a/0x4b0 [ 452.108853][T11929] ? udf_get_last_block+0x1cf/0x2b0 [ 452.108885][T11929] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 452.108907][T11929] ? __brelse+0x8c/0xb0 [ 452.108933][T11929] udf_load_vrs+0x668/0x1050 [ 452.108960][T11929] ? __pfx_udf_load_vrs+0x10/0x10 [ 452.108978][T11929] ? lockdep_init_map_type+0x16d/0x7d0 [ 452.109005][T11929] ? __pfx_udf_get_last_session+0x10/0x10 [ 452.109037][T11929] udf_fill_super+0x79b/0x1e00 [ 452.109061][T11929] ? __pfx_udf_fill_super+0x10/0x10 [ 452.109079][T11929] ? do_raw_spin_lock+0x12d/0x2c0 [ 452.109095][T11929] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 452.109112][T11929] ? set_blocksize+0x2a8/0x360 [ 452.109130][T11929] ? sb_set_blocksize+0xf6/0x120 [ 452.109147][T11929] ? setup_bdev_super+0x369/0x730 [ 452.109172][T11929] get_tree_bdev_flags+0x38b/0x620 [ 452.109196][T11929] ? __pfx_udf_fill_super+0x10/0x10 [ 452.109214][T11929] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 452.109241][T11929] ? bpf_lsm_capable+0x9/0x10 [ 452.109260][T11929] ? security_capable+0x7e/0x260 [ 452.109280][T11929] vfs_get_tree+0x8b/0x340 [ 452.109301][T11929] path_mount+0x14e6/0x1f10 [ 452.109319][T11929] ? kmem_cache_free+0x2e2/0x4d0 [ 452.109334][T11929] ? __pfx_path_mount+0x10/0x10 [ 452.109354][T11929] ? putname+0x13c/0x180 [ 452.109374][T11929] __x64_sys_mount+0x28f/0x310 [ 452.109391][T11929] ? __pfx___x64_sys_mount+0x10/0x10 [ 452.109409][T11929] ? do_user_addr_fault+0x83d/0x13f0 [ 452.109437][T11929] do_syscall_64+0xcd/0x250 [ 452.109457][T11929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.109480][T11929] RIP: 0033:0x7fb13138cda9 [ 452.109494][T11929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.109509][T11929] RSP: 002b:00007fb13214c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 452.109525][T11929] RAX: ffffffffffffffda RBX: 00007fb1315a6240 RCX: 00007fb13138cda9 [ 452.109537][T11929] RDX: 0000000020000040 RSI: 0000000020004a00 RDI: 0000000020000500 [ 452.109547][T11929] RBP: 00007fb13140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 452.109556][T11929] R10: 0000000000008087 R11: 0000000000000246 R12: 0000000000000000 [ 452.109565][T11929] R13: 0000000000000001 R14: 00007fb1315a6240 R15: 00007ffe4799c7f8 [ 452.109588][T11929] [ 452.109595][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 452.146103][ T5826] usb 8-1: config 0 descriptor?? [ 452.159080][ T6151] buffer_io_error: 7 callbacks suppressed [ 452.159091][ T6151] Buffer I/O error on dev nbd5, logical block 0, async page read [ 452.438071][T11939] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11939 comm=syz.3.1621 [ 452.468780][T11922] nbd5: detected capacity change from 4 to 67108884 [ 452.468789][ T6151] Buffer I/O error on dev nbd5, logical block 1, async page read [ 452.468859][ T6151] Buffer I/O error on dev nbd5, logical block 2, async page read [ 452.507985][T11925] block nbd5: shutting down sockets [ 452.541097][ T6151] Buffer I/O error on dev nbd5, logical block 3, async page read [ 452.552185][T11929] blk_print_req_error: 7 callbacks suppressed [ 452.552198][T11929] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 452.572172][ T6151] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 452.675531][ T5826] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 452.891491][ T5826] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 452.902450][ T6151] Buffer I/O error on dev nbd5, logical block 0, async page read [ 452.902474][ T5826] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 452.945838][T11929] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 452.969678][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 452.971804][ T6151] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 453.012821][ T6151] Buffer I/O error on dev nbd5, logical block 1, async page read [ 453.021511][T11929] I/O error, dev nbd5, sector 67108882 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 453.022210][ T6151] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 453.046665][ T6151] Buffer I/O error on dev nbd5, logical block 2, async page read [ 453.055781][ T6151] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 453.064930][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554441, location=33554441 [ 453.066477][ T6151] Buffer I/O error on dev nbd5, logical block 3, async page read [ 453.085626][ T6151] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 453.128058][ T6151] Buffer I/O error on dev nbd5, logical block 0, async page read [ 453.136061][T11929] I/O error, dev nbd5, sector 67108370 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 453.148562][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554185, location=33554185 [ 453.176001][ T29] audit: type=1400 audit(1738464696.870:1268): avc: denied { map } for pid=11953 comm="syz.1.1624" path="socket:[37937]" dev="sockfs" ino=37937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 453.205396][ T6151] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 453.234781][ T5826] usb 8-1: USB disconnect, device number 3 [ 453.235351][ T6151] Buffer I/O error on dev nbd5, logical block 1, async page read [ 453.265864][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554440, location=33554440 [ 453.305660][ T29] audit: type=1400 audit(1738464696.960:1269): avc: denied { create } for pid=11955 comm="syz.1.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 453.336202][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554184, location=33554184 [ 453.348588][ T6151] ldm_validate_partition_table(): Disk read failed. [ 453.364936][ T6151] Dev nbd5: unable to read RDB block 0 [ 453.418850][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554439, location=33554439 [ 453.437702][ T6151] nbd5: unable to read partition table [ 453.443721][ T29] audit: type=1400 audit(1738464697.000:1270): avc: denied { write } for pid=11955 comm="syz.1.1625" path="socket:[37947]" dev="sockfs" ino=37947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 453.452032][T11963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1626'. [ 453.479829][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554183, location=33554183 [ 453.530504][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554291, location=33554291 [ 453.589051][ T6151] ldm_validate_partition_table(): Disk read failed. [ 453.622523][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554035, location=33554035 [ 453.625411][ T6151] Dev nbd5: unable to read RDB block 0 [ 453.648030][ T6151] nbd5: unable to read partition table [ 453.661527][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554289, location=33554289 [ 453.853215][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554033, location=33554033 [ 453.866482][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 454.122517][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 454.154168][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777220, location=16777220 [ 454.208463][ T6151] ldm_validate_partition_table(): Disk read failed. [ 454.251276][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776964, location=16776964 [ 454.469757][ T6151] Dev nbd5: unable to read RDB block 0 [ 455.406317][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777219, location=16777219 [ 455.417166][ T6151] nbd5: unable to read partition table [ 455.438064][ T6151] ldm_validate_partition_table(): Disk read failed. [ 455.449584][ T6151] Dev nbd5: unable to read RDB block 0 [ 455.517338][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776963, location=16776963 [ 455.578696][ T5826] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 455.583592][ T6151] nbd5: unable to read partition table [ 455.725621][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777218, location=16777218 [ 455.743955][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776962, location=16776962 [ 455.765103][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777070, location=16777070 [ 455.779147][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776814, location=16776814 [ 455.799956][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777068, location=16777068 [ 455.869754][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776812, location=16776812 [ 456.517179][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 456.528940][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 456.540313][ T5826] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 456.541981][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388609, location=8388609 [ 456.558375][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388353, location=8388353 [ 456.568751][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388608, location=8388608 [ 456.579156][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388352, location=8388352 [ 456.589697][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388607, location=8388607 [ 456.601591][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388351, location=8388351 [ 456.605477][ T5826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 456.623228][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388459, location=8388459 [ 456.702074][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388203, location=8388203 [ 456.748459][ T5826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 456.985966][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388457, location=8388457 [ 457.023754][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388201, location=8388201 [ 457.049471][ T5826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 457.062502][T11929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 457.072518][ T5826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 457.074186][ T29] audit: type=1400 audit(1738464700.790:1271): avc: denied { bind } for pid=11989 comm="syz.6.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 457.085562][T11929] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 457.146572][ T5826] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 457.158502][ T5826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 457.395519][ T5871] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 457.535917][ T5826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 457.578995][ T5826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 457.607863][ T5826] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 457.626222][ T5826] usb 2-1: unable to read config index 2 descriptor/start: -71 [ 457.691814][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 457.730196][ T5871] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 457.782831][T12004] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1641'. [ 457.785343][ T5826] usb 2-1: can't read configurations, error -71 [ 457.792087][ T5873] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 457.815830][ T5871] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 457.965390][ T5871] usb 4-1: Product: syz [ 458.033067][ T5873] usb 7-1: Using ep0 maxpacket: 8 [ 458.229632][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 458.234877][ T5871] usb 4-1: Manufacturer: syz [ 458.319156][ T5871] usb 4-1: SerialNumber: syz [ 458.336723][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 458.351366][ T5871] usb 4-1: config 0 descriptor?? [ 458.378350][ T5873] usb 7-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 458.418682][ T5871] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 458.447623][T12012] fuse: Bad value for 'fd' [ 458.452122][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.481745][ T5873] usb 7-1: config 0 descriptor?? [ 458.911063][ T5873] usbhid 7-1:0.0: can't add hid device: -71 [ 459.049305][ T5871] gspca_zc3xx: reg_w_i err -110 [ 459.220988][ T5873] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 459.259750][ T5871] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 459.303503][T11999] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11999 comm=syz.6.1638 [ 459.311998][ T29] audit: type=1400 audit(1738464703.010:1272): avc: denied { write } for pid=11998 comm="syz.6.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.376587][ T5873] usb 7-1: USB disconnect, device number 40 [ 459.433197][T12025] lo speed is unknown, defaulting to 1000 [ 459.635584][ T5874] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 459.816619][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 459.835432][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 459.887231][T12025] GUP no longer grows the stack in syz.7.1647 (12025): 20004000-2000a000 (20002000) [ 459.896942][T12025] CPU: 1 UID: 0 PID: 12025 Comm: syz.7.1647 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 459.896965][T12025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 459.896976][T12025] Call Trace: [ 459.896981][T12025] [ 459.896988][T12025] dump_stack_lvl+0x16c/0x1f0 [ 459.897011][T12025] gup_vma_lookup+0x1d2/0x220 [ 459.897040][T12025] __get_user_pages+0x236/0x36f0 [ 459.897069][T12025] ? find_held_lock+0x2d/0x110 [ 459.897093][T12025] ? mtree_load+0x30a/0xa40 [ 459.897111][T12025] ? __pfx_lock_release+0x10/0x10 [ 459.897135][T12025] ? __pfx___get_user_pages+0x10/0x10 [ 459.897173][T12025] get_user_pages_remote+0x25e/0xb30 [ 459.897206][T12025] ? __pfx_get_user_pages_remote+0x10/0x10 [ 459.897245][T12025] __access_remote_vm+0x235/0x7a0 [ 459.897273][T12025] ? __pfx___access_remote_vm+0x10/0x10 [ 459.897295][T12025] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 459.897319][T12025] proc_pid_cmdline_read+0x4f5/0x900 [ 459.897346][T12025] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 459.897373][T12025] ? rw_verify_area+0xcf/0x680 [ 459.897397][T12025] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 459.897422][T12025] vfs_readv+0x6c2/0x8a0 [ 459.897444][T12025] ? __pfx___lock_acquire+0x10/0x10 [ 459.897474][T12025] ? __pfx_vfs_readv+0x10/0x10 [ 459.897504][T12025] ? __fget_files+0x1fc/0x3a0 [ 459.897520][T12025] ? __pfx_lock_release+0x10/0x10 [ 459.897552][T12025] ? __fget_files+0x206/0x3a0 [ 459.897573][T12025] ? do_preadv+0x1b1/0x270 [ 459.897596][T12025] do_preadv+0x1b1/0x270 [ 459.897620][T12025] ? __pfx_do_preadv+0x10/0x10 [ 459.897653][T12025] do_syscall_64+0xcd/0x250 [ 459.897673][T12025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.897697][T12025] RIP: 0033:0x7f06d838cda9 [ 459.897712][T12025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.897729][T12025] RSP: 002b:00007f06d92bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 459.897745][T12025] RAX: ffffffffffffffda RBX: 00007f06d85a5fa0 RCX: 00007f06d838cda9 [ 459.897757][T12025] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000008 [ 459.897766][T12025] RBP: 00007f06d840e2a0 R08: 0000000021000008 R09: 0000000000000000 [ 459.897776][T12025] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 459.897791][T12025] R13: 0000000000000000 R14: 00007f06d85a5fa0 R15: 00007ffd340f8fc8 [ 459.897815][T12025] [ 459.902952][ T5874] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 460.125454][ T5871] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 460.130829][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.173683][ T5874] usb 2-1: config 0 descriptor?? [ 460.183191][T12022] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 460.449070][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 460.623846][ T5871] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 460.624091][ T5873] usb 4-1: USB disconnect, device number 43 [ 460.669838][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.700996][ T5871] usb 6-1: Product: syz [ 460.723508][ T5871] usb 6-1: Manufacturer: syz [ 460.740295][ T5871] usb 6-1: SerialNumber: syz [ 460.745521][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'. [ 460.778759][ T5871] usb 6-1: config 0 descriptor?? [ 460.832320][ T5871] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 460.967397][ T5874] cherry 0003:046A:0023.0012: item fetching failed at offset 5/7 [ 460.986385][ T5874] cherry 0003:046A:0023.0012: probe with driver cherry failed with error -22 [ 461.031219][T12049] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1655'. [ 461.219273][T12050] 9pnet_fd: Insufficient options for proto=fd [ 461.725777][ T5871] gspca_sonixj: reg_r err -32 [ 461.750148][ T25] usb 2-1: USB disconnect, device number 67 [ 461.750841][ T5871] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 461.870974][T12055] FAULT_INJECTION: forcing a failure. [ 461.870974][T12055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.887621][T12055] CPU: 1 UID: 0 PID: 12055 Comm: syz.6.1657 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 461.887644][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 461.887654][T12055] Call Trace: [ 461.887659][T12055] [ 461.887665][T12055] dump_stack_lvl+0x16c/0x1f0 [ 461.887687][T12055] should_fail_ex+0x50a/0x650 [ 461.887714][T12055] strncpy_from_user+0x3b/0x2d0 [ 461.887737][T12055] getname_flags.part.0+0x8f/0x550 [ 461.887762][T12055] getname_flags+0x93/0xf0 [ 461.887786][T12055] user_path_at+0x24/0x60 [ 461.887810][T12055] do_fchownat+0xfa/0x200 [ 461.887829][T12055] ? __pfx_do_fchownat+0x10/0x10 [ 461.887846][T12055] ? ksys_write+0x1ba/0x250 [ 461.887868][T12055] ? __pfx_ksys_write+0x10/0x10 [ 461.887897][T12055] __x64_sys_lchown+0x7e/0xc0 [ 461.887915][T12055] ? lockdep_hardirqs_on+0x7c/0x110 [ 461.887941][T12055] do_syscall_64+0xcd/0x250 [ 461.887959][T12055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.887983][T12055] RIP: 0033:0x7f0ccfd8cda9 [ 461.887995][T12055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.888011][T12055] RSP: 002b:00007f0cd0bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 461.888027][T12055] RAX: ffffffffffffffda RBX: 00007f0ccffa5fa0 RCX: 00007f0ccfd8cda9 [ 461.888037][T12055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 461.888046][T12055] RBP: 00007f0cd0bee090 R08: 0000000000000000 R09: 0000000000000000 [ 461.888055][T12055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.888064][T12055] R13: 0000000000000000 R14: 00007f0ccffa5fa0 R15: 00007fffcd57d228 [ 461.888085][T12055] [ 462.072194][ T5874] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 462.265478][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 462.299296][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 462.412302][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 462.513594][ T5874] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 462.524234][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.576215][T12068] loop6: detected capacity change from 0 to 64 [ 462.589189][ T5874] usb 4-1: config 0 descriptor?? [ 462.957202][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 462.965323][ C0] blk_print_req_error: 225 callbacks suppressed [ 462.965338][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 462.971514][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 462.993033][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 463.000054][T12075] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12075 comm=syz.3.1656 [ 463.002184][ C1] buffer_io_error: 188 callbacks suppressed [ 463.002194][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 463.064344][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 463.073493][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 463.102712][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 463.111877][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 463.123783][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 463.132986][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 463.141463][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 463.150615][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 463.175333][ T29] audit: type=1400 audit(1738464706.810:1273): avc: denied { block_suspend } for pid=12069 comm="syz.1.1661" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 463.261069][ T5874] usb 4-1: USB disconnect, device number 44 [ 463.295558][ T5871] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 463.625685][ T5871] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 463.641606][ T5871] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.681820][ T5871] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 463.700268][ T9] usb 6-1: USB disconnect, device number 39 [ 463.715172][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.737858][ T5871] usb 7-1: Product: syz [ 463.742067][ T5871] usb 7-1: Manufacturer: syz [ 463.769061][ T5871] usb 7-1: SerialNumber: syz [ 463.915355][ T5874] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 464.090946][ T5871] usb 7-1: 0:2 : does not exist [ 464.165474][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 465.093371][ T5871] usb 7-1: USB disconnect, device number 41 [ 465.103555][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.319805][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.848422][ T5874] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 465.849572][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.857506][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.859149][ T5874] usb 2-1: config 0 descriptor?? [ 465.968106][ T29] audit: type=1400 audit(1738464709.680:1274): avc: denied { ioctl } for pid=12104 comm="syz.7.1670" path="socket:[39013]" dev="sockfs" ino=39013 ioctlcmd=0x4b41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 467.165360][ T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 467.215775][ T25] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 467.327067][ T8] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 467.345483][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 467.355132][ T8] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 467.370031][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.379413][ T8] usb 8-1: Product: syz [ 467.383897][ T8] usb 8-1: Manufacturer: syz [ 467.388814][ T8] usb 8-1: SerialNumber: syz [ 467.425466][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 467.622240][ T25] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.634119][ T5874] usb 2-1: can't set config #0, error -71 [ 467.634779][ T8] usb 8-1: config 0 descriptor?? [ 467.641663][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 467.658943][ T8] usb 8-1: selecting invalid altsetting 0 [ 467.831393][ T5874] usb 2-1: USB disconnect, device number 68 [ 467.856335][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 467.873695][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.885647][ T8] usb 8-1: USB disconnect, device number 4 [ 467.959949][ T25] usb 4-1: config 0 descriptor?? [ 468.137491][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.315519][ T5874] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 468.355543][ T5871] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 468.442882][ T56] Bluetooth: hci6: Frame reassembly failed (-84) [ 468.448135][ T25] apple 0003:05AC:0247.0013: unknown main item tag 0x0 [ 468.465521][ T25] apple 0003:05AC:0247.0013: unknown main item tag 0x0 [ 468.567683][ T5874] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 468.583739][ T5871] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 468.585796][ T25] apple 0003:05AC:0247.0013: unexpected long global item [ 468.599858][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.599880][ T5871] usb 6-1: Product: syz [ 468.599893][ T5871] usb 6-1: Manufacturer: syz [ 468.599907][ T5871] usb 6-1: SerialNumber: syz [ 468.601228][ T5871] usb 6-1: config 0 descriptor?? [ 468.713306][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.731901][T12135] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1682'. [ 468.737322][ T5874] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.755669][ T5871] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 468.773987][ T25] apple 0003:05AC:0247.0013: parse failed [ 468.800297][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.820992][ T25] apple 0003:05AC:0247.0013: probe with driver apple failed with error -22 [ 468.837800][ T5874] usb 2-1: Product: syz [ 468.843328][ T5874] usb 2-1: Manufacturer: syz [ 468.876321][ T5874] usb 2-1: SerialNumber: syz [ 469.187453][ T5874] usb 2-1: 0:2 : does not exist [ 469.191561][ T5871] usb 6-1: USB disconnect, device number 40 [ 469.198906][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.251220][ T5874] usb 2-1: USB disconnect, device number 69 [ 469.412343][T12142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.476621][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.273220][ T8] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 470.447562][T12159] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1692'. [ 470.465919][ T5834] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 470.465981][ T5831] Bluetooth: hci6: command 0x1003 tx timeout [ 470.481343][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 470.492398][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 470.505365][ T8] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 470.586655][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.628452][ T8] usb 2-1: config 0 descriptor?? [ 470.645571][ T25] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 470.654980][T12147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 470.871471][ T9] usb 4-1: USB disconnect, device number 45 [ 470.926082][T12161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=12161 comm=syz.5.1691 [ 470.961670][ T29] audit: type=1400 audit(1738464714.660:1275): avc: denied { map } for pid=12163 comm="syz.3.1693" path="socket:[39129]" dev="sockfs" ino=39129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 470.984977][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.085820][ T25] usb 7-1: device descriptor read/64, error -71 [ 471.320119][ T8] asus 0003:048D:CE50.0014: item fetching failed at offset 5/7 [ 471.332749][ T8] asus 0003:048D:CE50.0014: Asus hid parse failed: -22 [ 471.345448][ T25] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 471.364369][ T8] asus 0003:048D:CE50.0014: probe with driver asus failed with error -22 [ 471.485951][ T25] usb 7-1: device descriptor read/64, error -71 [ 471.596278][ T25] usb usb7-port1: attempt power cycle [ 471.812965][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.832412][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.851574][ T5874] usb 2-1: USB disconnect, device number 70 [ 471.905350][ T5826] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 471.986053][ T25] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 472.016226][ T25] usb 7-1: device descriptor read/8, error -71 [ 472.067065][ T5826] usb 8-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 472.086800][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.106168][ T5826] usb 8-1: config 0 descriptor?? [ 472.225665][ T5914] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 472.265470][ T25] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 472.340684][ T5826] usb 8-1: string descriptor 0 read error: -71 [ 472.341381][ T25] usb 7-1: device descriptor read/8, error -71 [ 472.441300][ T5914] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 472.442779][ T5826] pwc: Samsung MPC-C10 USB webcam detected. [ 472.494108][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.525117][ T25] usb usb7-port1: unable to enumerate USB device [ 472.556393][ T5914] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.566625][ T5826] pwc: send_video_command error -71 [ 472.590579][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.595672][ T5826] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 472.663560][ T5826] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 472.676913][ T5914] usb 4-1: Product: syz [ 472.681099][ T5914] usb 4-1: Manufacturer: syz [ 472.701479][ T5914] usb 4-1: SerialNumber: syz [ 472.713737][ T5826] usb 8-1: USB disconnect, device number 5 [ 472.970544][ T5914] usb 4-1: 0:2 : does not exist [ 473.117155][ T5914] usb 4-1: USB disconnect, device number 46 [ 473.380108][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.737092][ T29] audit: type=1400 audit(1738464717.450:1276): avc: denied { accept } for pid=12227 comm="syz.6.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 474.095639][ T25] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 474.316153][ T8] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 474.342913][ T25] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 474.385653][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.393902][ T25] usb 6-1: Product: syz [ 474.525382][ T25] usb 6-1: Manufacturer: syz [ 474.546245][ T25] usb 6-1: SerialNumber: syz [ 474.624422][ T25] usb 6-1: config 0 descriptor?? [ 474.668405][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.790962][ T8] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 474.852398][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.928061][ T8] usb 4-1: config 0 descriptor?? [ 474.951101][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 475.134226][ T25] airspy 6-1:0.0: Board ID: 00 [ 475.145971][ T25] airspy 6-1:0.0: Firmware version: [ 475.465474][ T8] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 475.547561][T12236] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 475.573659][ T5826] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 475.590101][T12236] veth0_to_team: Caught tx_queue_len zero misconfig [ 475.627011][ T8] usb 8-1: config 0 has an invalid interface number: 156 but max is 1 [ 475.636254][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.656440][ T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 475.673630][ T8] usb 8-1: config 0 has no interface number 0 [ 475.682018][ T8] usb 8-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 475.702219][ T8] usb 8-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 475.715558][ T5826] usb 7-1: device descriptor read/64, error -71 [ 475.725871][ T8] usb 8-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 475.735001][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 475.743436][ T8] usb 8-1: SerialNumber: syz [ 475.765980][ T8] usb 8-1: config 0 descriptor?? [ 475.774188][ T8] gspca_main: spca561-2.14.0 probing abcd:cdee [ 475.955621][ T5826] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 475.980992][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.992596][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.019203][ T8] spca561 8-1:0.156: probe with driver spca561 failed with error -22 [ 476.036869][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.052008][ T8] usb 8-1: MIDIStreaming interface descriptor not found [ 476.095595][ T5826] usb 7-1: device descriptor read/64, error -71 [ 476.111149][ T8] usb 8-1: USB disconnect, device number 6 [ 476.220438][ T25] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 476.236306][ T5826] usb usb7-port1: attempt power cycle [ 476.249302][ T25] airspy 6-1:0.0: Registered as swradio24 [ 476.255046][ T25] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 476.300523][ T25] usb 6-1: USB disconnect, device number 41 [ 476.468753][ T6216] udevd[6216]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.588343][ T5826] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 476.651569][ T5826] usb 7-1: device descriptor read/8, error -71 [ 476.945535][ T5826] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 477.055889][ T5826] usb 7-1: device descriptor read/8, error -71 [ 477.074966][ T8] usb 4-1: USB disconnect, device number 47 [ 477.196507][ T5826] usb usb7-port1: unable to enumerate USB device [ 477.254241][T12271] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 477.375443][ T5872] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 477.425463][ T25] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 477.505458][ T5874] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 477.545525][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 477.547820][ T5872] usb 8-1: config 0 has an invalid interface number: 226 but max is 0 [ 477.547853][ T5872] usb 8-1: config 0 has no interface number 0 [ 477.547881][ T5872] usb 8-1: too many endpoints for config 0 interface 226 altsetting 56: 144, using maximum allowed: 30 [ 477.547916][ T5872] usb 8-1: config 0 interface 226 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 477.547948][ T5872] usb 8-1: config 0 interface 226 has no altsetting 0 [ 477.554067][ T5872] usb 8-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 477.554100][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.554126][ T5872] usb 8-1: Product: syz [ 477.554147][ T5872] usb 8-1: Manufacturer: syz [ 477.554169][ T5872] usb 8-1: SerialNumber: syz [ 477.566598][ T5872] usb 8-1: config 0 descriptor?? [ 477.617317][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.665430][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.691859][ T25] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.701749][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 477.711762][ T5874] usb 2-1: config 0 interface 0 has no altsetting 0 [ 477.718567][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.733359][ T25] usb 6-1: Product: syz [ 477.742642][ T5874] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 477.754299][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.764397][ T25] usb 6-1: Manufacturer: syz [ 477.770617][ T25] usb 6-1: SerialNumber: syz [ 477.776521][ T5874] usb 2-1: Product: syz [ 477.781538][ T5874] usb 2-1: Manufacturer: syz [ 477.791833][ T5874] usb 2-1: SerialNumber: syz [ 477.832136][ T5872] pcwd_usb: The device isn't a Human Interface Device [ 477.853976][ T5872] usb 8-1: USB disconnect, device number 7 [ 477.854607][ T5874] usb 2-1: config 0 descriptor?? [ 478.014883][ T25] usb 6-1: 0:2 : does not exist [ 478.044295][ T25] usb 6-1: USB disconnect, device number 42 [ 478.262733][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.308727][ T5874] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 478.716557][ T5874] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 478.729905][ T5874] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 478.752953][ T5874] usb 2-1: USB disconnect, device number 71 [ 478.858920][ T5872] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 478.895374][ T5873] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 479.028248][ T5872] usb 8-1: Using ep0 maxpacket: 32 [ 479.034987][ T5872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 479.043212][ T5872] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 479.052853][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.055469][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 479.060922][ T5872] usb 8-1: Product: syz [ 479.070198][ T5872] usb 8-1: Manufacturer: syz [ 479.074788][ T5872] usb 8-1: SerialNumber: syz [ 479.078763][ T5873] usb 4-1: config 0 has no interfaces? [ 479.080891][ T5872] usb 8-1: config 0 descriptor?? [ 479.088585][ T5873] usb 4-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 479.100724][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.105486][ T8] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 479.116428][ T5873] usb 4-1: Product: syz [ 479.120815][ T5873] usb 4-1: Manufacturer: syz [ 479.126028][ T5873] usb 4-1: SerialNumber: syz [ 479.133264][ T5873] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 479.275445][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 479.310877][ T8] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 479.326917][ T8] usb 6-1: config 0 has no interface number 0 [ 479.354575][ T29] audit: type=1400 audit(1738464723.060:1277): avc: denied { create } for pid=12299 comm="syz.6.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 479.376093][ T8] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 479.385626][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.393653][ T8] usb 6-1: Product: syz [ 479.397557][T12302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1731'. [ 479.403039][ T29] audit: type=1400 audit(1738464723.060:1278): avc: denied { ioctl } for pid=12299 comm="syz.6.1730" path="socket:[39412]" dev="sockfs" ino=39412 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 479.439950][ T8] usb 6-1: Manufacturer: syz [ 479.445020][ T8] usb 6-1: SerialNumber: syz [ 479.460863][ T8] usb 6-1: config 0 descriptor?? [ 479.526165][ T8] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 479.552670][ T5872] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 480.272000][T12291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.323452][ T5872] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 480.327400][T12291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.355571][ T5872] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 480.401589][ T26] block nbd0: Possible stuck request ffff888025e439c0: control (read@0,4096B). Runtime 60 seconds [ 480.572792][ T5872] usb 8-1: USB disconnect, device number 8 [ 480.716023][ T5874] apple-mfi-fastcharge 4-1: USB disconnect, device number 48 [ 481.169033][ T29] audit: type=1400 audit(1738464724.880:1279): avc: denied { listen } for pid=12318 comm="syz.1.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 482.056765][T12338] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1744'. [ 482.125389][ T5872] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 482.149328][ T5873] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 482.285530][ T5874] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 482.341934][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.357458][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 482.357942][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.387303][ T5873] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.397689][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.410990][ T5873] usb 2-1: Product: syz [ 482.416915][ T5873] usb 2-1: Manufacturer: syz [ 482.422309][ T5873] usb 2-1: SerialNumber: syz [ 482.423039][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 482.465657][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 482.509408][ T5874] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 482.545665][ T5874] usb 4-1: config 0 has no interface number 0 [ 482.551553][ T5872] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 482.557600][ T5874] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 482.583879][ T5872] usb 8-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 482.591067][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.597755][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.610883][ T5874] usb 4-1: Product: syz [ 482.615164][ T5874] usb 4-1: Manufacturer: syz [ 482.620975][ T5874] usb 4-1: SerialNumber: syz [ 482.646041][ T5872] usb 8-1: config 0 descriptor?? [ 482.646056][ T5874] usb 4-1: config 0 descriptor?? [ 482.648443][ T5874] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 482.687342][ T5873] usb 2-1: 0:2 : does not exist [ 482.706704][ T5873] usb 2-1: USB disconnect, device number 72 [ 483.016633][ T5872] usbhid 8-1:0.0: can't add hid device: -71 [ 483.043403][ T5874] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 483.057914][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.058595][T12326] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12326 comm=syz.7.1738 [ 483.167181][ T5872] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 483.188032][ T5874] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 483.205841][ T5872] usb 8-1: USB disconnect, device number 9 [ 483.451605][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 483.451940][ T5872] usb 4-1: USB disconnect, device number 49 [ 483.611179][ T5872] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 483.615628][ T5874] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 483.667693][ T8] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 483.736947][ T5872] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 483.755340][ T8] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 483.792027][ T5872] quatech2 4-1:0.51: device disconnected [ 483.795567][ T5874] usb 7-1: Using ep0 maxpacket: 32 [ 483.797569][ T5874] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.802162][ T8] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 483.844226][ T5874] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 483.905162][ T8] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 483.919746][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.958196][ T5874] usb 7-1: Product: syz [ 483.973440][ T8] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input42 [ 483.976014][ T5874] usb 7-1: Manufacturer: syz [ 484.079596][ T5874] usb 7-1: SerialNumber: syz [ 484.233845][ T5874] usb 7-1: config 0 descriptor?? [ 484.357854][ T8] usb 6-1: USB disconnect, device number 43 [ 484.456954][T12358] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12358 comm=syz.1.1750 [ 484.895465][ T5874] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 485.019048][T12369] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1755'. [ 485.286162][ T5874] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 485.416224][ T5874] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 485.560275][T12376] 9pnet_fd: Insufficient options for proto=fd [ 485.777297][ T5874] usb 7-1: USB disconnect, device number 50 [ 486.486266][T12387] nbd7: detected capacity change from 0 to 4 [ 486.562373][ T8] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 486.742941][ T6151] block nbd7: Send control failed (result -89) [ 486.755381][T12388] nbd7: detected capacity change from 4 to 67108884 [ 486.775081][ T6151] block nbd7: Request send failed, requeueing [ 486.788961][ T5834] block nbd7: Receive control failed (result -32) [ 486.790588][ T26] block nbd7: Dead connection, failed to find a fallback [ 486.806179][ T26] block nbd7: shutting down sockets [ 486.811390][ T26] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 486.820734][ T26] Buffer I/O error on dev nbd7, logical block 0, async page read [ 486.828607][ T6151] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 486.837889][ T6151] Buffer I/O error on dev nbd7, logical block 0, async page read [ 486.846291][ T6151] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 486.847367][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.855583][ T6151] Buffer I/O error on dev nbd7, logical block 0, async page read [ 486.873551][ T6151] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 486.895536][ T6151] Buffer I/O error on dev nbd7, logical block 0, async page read [ 486.904237][ T6151] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 486.907042][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.914286][ T6151] Buffer I/O error on dev nbd7, logical block 0, async page read [ 486.931247][ T6151] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 487.013475][ T6151] Buffer I/O error on dev nbd7, logical block 0, async page read [ 487.091020][ T6151] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 487.139688][ T6151] Buffer I/O error on dev nbd7, logical block 0, async page read [ 487.258297][ T6151] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 487.282619][T12398] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12398 comm=syz.5.1764 [ 487.516621][ T6151] Buffer I/O error on dev nbd7, logical block 0, async page read [ 487.548164][ T8] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.560087][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.568628][ T6151] ldm_validate_partition_table(): Disk read failed. [ 487.582110][ T29] audit: type=1400 audit(1738464731.290:1280): avc: denied { create } for pid=12399 comm="syz.3.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 487.588385][ T8] usb 7-1: Product: syz [ 487.609617][ T6151] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 487.648170][ T6151] Buffer I/O error on dev nbd7, logical block 0, async page read [ 487.656652][ T6151] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 487.666040][ T29] audit: type=1400 audit(1738464731.290:1281): avc: denied { bind } for pid=12399 comm="syz.3.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 487.675844][ T8] usb 7-1: Manufacturer: syz [ 487.712364][ T8] usb 7-1: SerialNumber: syz [ 487.722868][ T6151] Buffer I/O error on dev nbd7, logical block 0, async page read [ 487.749430][ T6151] Dev nbd7: unable to read RDB block 0 [ 487.771580][T12407] lo speed is unknown, defaulting to 1000 [ 487.786578][ T6151] nbd7: unable to read partition table [ 487.799322][T12392] ldm_validate_partition_table(): Disk read failed. [ 487.811118][T12392] Dev nbd7: unable to read RDB block 0 [ 487.829643][T12392] nbd7: unable to read partition table [ 487.852524][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 487.866574][ T6151] ldm_validate_partition_table(): Disk read failed. [ 487.873791][ T6151] Dev nbd7: unable to read RDB block 0 [ 487.893646][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554441, location=33554441 [ 487.900331][ T6151] nbd7: unable to read partition table [ 487.905051][ T29] audit: type=1400 audit(1738464731.600:1282): avc: denied { mount } for pid=12406 comm="syz.1.1768" name="/" dev="pstore" ino=4226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 487.955894][ T6151] ldm_validate_partition_table(): Disk read failed. [ 487.963509][ T6151] Dev nbd7: unable to read RDB block 0 [ 487.977811][ T6151] nbd7: unable to read partition table [ 487.985187][ T8] usb 7-1: 0:2 : does not exist [ 487.991090][ T6151] ldm_validate_partition_table(): Disk read failed. [ 487.991230][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554185, location=33554185 [ 487.999019][ T6151] Dev nbd7: unable to read RDB block 0 [ 488.008367][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 488.014728][ T6151] nbd7: unable to read partition table [ 488.051758][ T8] usb 7-1: USB disconnect, device number 51 [ 488.061929][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554440, location=33554440 [ 488.083053][T12414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1770'. [ 488.095482][ T5874] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 488.098745][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554184, location=33554184 [ 488.128451][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554439, location=33554439 [ 488.140657][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554183, location=33554183 [ 488.176027][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554291, location=33554291 [ 488.205356][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 488.208566][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554035, location=33554035 [ 488.222224][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554289, location=33554289 [ 488.238746][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554033, location=33554033 [ 488.249419][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 488.260995][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 488.282480][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 488.283195][ T5874] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 488.369526][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.439902][ T5874] usb 4-1: Product: syz [ 488.455493][ T9] usb 6-1: config 14 has an invalid interface number: 87 but max is 0 [ 488.460284][ T5874] usb 4-1: Manufacturer: syz [ 488.532235][ T5874] usb 4-1: SerialNumber: syz [ 488.588095][ T5874] usb 4-1: config 0 descriptor?? [ 488.598383][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 488.608135][ T9] usb 6-1: config 14 has no interface number 0 [ 488.621893][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 488.647735][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777220, location=16777220 [ 488.655324][ T9] usb 6-1: config 14 interface 87 has no altsetting 0 [ 488.667800][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776964, location=16776964 [ 488.678805][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=2b.d9 [ 488.679706][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777219, location=16777219 [ 488.734736][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776963, location=16776963 [ 488.748524][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.765355][ T9] usb 6-1: Product: syz [ 488.773055][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777218, location=16777218 [ 488.774684][ T9] usb 6-1: Manufacturer: syz [ 488.801773][ T9] usb 6-1: SerialNumber: syz [ 488.803949][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776962, location=16776962 [ 488.895538][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777070, location=16777070 [ 489.003436][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776814, location=16776814 [ 489.041302][ T5874] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 489.171939][T12424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.230998][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777068, location=16777068 [ 489.242869][T12424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.283488][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776812, location=16776812 [ 489.297877][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 489.315672][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 489.333909][ T9] ttusb-dec 6-1:14.87: probe with driver ttusb-dec failed with error -22 [ 489.378832][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 489.387307][ T9] usb 6-1: USB disconnect, device number 44 [ 489.458117][ T5874] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 489.772406][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388609, location=8388609 [ 489.826192][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388353, location=8388353 [ 489.826570][ T5874] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 489.877930][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388608, location=8388608 [ 489.895607][ T5874] usb 4-1: USB disconnect, device number 50 [ 489.924794][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388352, location=8388352 [ 489.959305][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388607, location=8388607 [ 490.005571][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388351, location=8388351 [ 490.020721][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388459, location=8388459 [ 490.033131][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388203, location=8388203 [ 490.043631][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388457, location=8388457 [ 490.081703][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388201, location=8388201 [ 490.110645][T12392] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 490.124333][T12392] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 490.541421][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 490.737203][T12459] 9pnet_fd: Insufficient options for proto=fd [ 490.957163][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 490.966754][ T9] usb 6-1: config 128 has an invalid interface number: 115 but max is 1 [ 490.999620][ T9] usb 6-1: config 128 has an invalid interface number: 163 but max is 1 [ 491.035301][ T9] usb 6-1: config 128 has no interface number 0 [ 491.041587][ T9] usb 6-1: config 128 has no interface number 1 [ 491.060865][ T9] usb 6-1: config 128 interface 115 altsetting 0 endpoint 0x88 has invalid maxpacket 1527, setting to 64 [ 491.084922][ T9] usb 6-1: config 128 interface 115 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 491.132453][ T9] usb 6-1: config 128 interface 115 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 491.154109][T12466] tipc: Started in network mode [ 491.157840][ T9] usb 6-1: config 128 interface 115 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 491.168845][T12456] kvm: kvm [12455]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 491.179840][T12466] tipc: Node identity 52ad2e72d7c4, cluster identity 4711 [ 491.184338][ T9] usb 6-1: config 128 interface 115 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 491.235503][ T5874] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 491.244960][ T9] usb 6-1: config 128 interface 115 altsetting 0 endpoint 0xE has an invalid bInterval 129, changing to 11 [ 491.254433][T12466] tipc: Enabled bearer , priority 0 [ 491.282702][ T9] usb 6-1: config 128 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 491.432052][ T5874] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 491.460106][ T5874] usb 4-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 491.544763][ T5874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.612896][T12470] syzkaller0: entered promiscuous mode [ 491.623571][T12456] kvm: kvm [12455]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 491.633836][ T5874] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.653227][T12470] syzkaller0: entered allmulticast mode [ 491.669757][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.685976][T12470] tipc: Resetting bearer [ 491.690791][ T5874] usb 4-1: Product: syz [ 491.691739][ T9] usb 6-1: config 128 interface 115 altsetting 0 endpoint 0xB has invalid maxpacket 36111, setting to 64 [ 491.696165][ T5874] usb 4-1: Manufacturer: syz [ 491.719726][ T5874] usb 4-1: SerialNumber: syz [ 491.766709][ T9] usb 6-1: config 128 interface 115 altsetting 0 endpoint 0xC has invalid maxpacket 520, setting to 64 [ 491.784246][ T9] usb 6-1: config 128 interface 115 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 491.801301][T12465] tipc: Resetting bearer [ 491.807133][ T9] usb 6-1: config 128 interface 115 altsetting 0 endpoint 0x2 has invalid maxpacket 10949, setting to 1024 [ 491.819043][ T9] usb 6-1: config 128 interface 115 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 491.865344][ T9] usb 6-1: config 128 interface 115 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 491.885441][ T9] usb 6-1: config 128 interface 115 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 491.915902][ T9] usb 6-1: config 128 interface 115 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 491.950462][ T9] usb 6-1: config 128 interface 163 altsetting 255 endpoint 0x3 has invalid maxpacket 30978, setting to 64 [ 491.958832][ T5874] usb 4-1: 0:2 : does not exist [ 491.981924][ T9] usb 6-1: config 128 interface 163 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 491.997009][ T9] usb 6-1: config 128 interface 163 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 492.005039][ T5874] usb 4-1: USB disconnect, device number 51 [ 492.025159][ T9] usb 6-1: config 128 interface 163 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 492.064134][ T9] usb 6-1: config 128 interface 163 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 492.092224][ T9] usb 6-1: config 128 interface 163 altsetting 255 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 492.118879][ T9] usb 6-1: config 128 interface 163 has no altsetting 0 [ 492.130100][ T9] usb 6-1: New USB device found, idVendor=1608, idProduct=0306, bcdDevice=2d.37 [ 492.139447][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.165099][ T9] usb 6-1: Product: syz [ 492.179699][ T9] usb 6-1: Manufacturer: syz [ 492.189806][ T9] usb 6-1: SerialNumber: syz [ 492.203210][T12448] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 492.215509][ T5826] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 492.223742][T12448] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 492.246936][ T8] tipc: Node number set to 2238262898 [ 492.397063][ T5826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.414091][ T5826] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.440496][ T5826] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 492.463393][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 492.491552][ T5826] usb 2-1: SerialNumber: syz [ 492.497858][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.516625][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.557068][ T29] audit: type=1400 audit(1738464736.260:1283): avc: denied { setattr } for pid=12447 comm="syz.5.1778" name="SCTPv6" dev="sockfs" ino=40123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 492.590224][ T9] io_ti 6-1:128.115: required endpoints missing [ 492.603147][ T9] io_ti 6-1:128.163: required endpoints missing [ 492.614382][ T9] usb 6-1: USB disconnect, device number 45 [ 492.730422][ T5826] usb 2-1: 0:2 : does not exist [ 492.739473][ T5826] usb 2-1: unit 5: unexpected type 0x09 [ 492.775093][ T5826] usb 2-1: USB disconnect, device number 73 [ 492.969485][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.214757][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1790'. [ 493.301716][T12489] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1790'. [ 494.414203][T12465] tipc: Disabling bearer [ 494.443659][T12493] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 496.017187][ T5873] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 496.270899][ T5873] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 496.419746][ T5873] usb 4-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 496.463778][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.491076][ T5873] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.509288][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.534779][ T5873] usb 4-1: Product: syz [ 496.547127][ T5873] usb 4-1: Manufacturer: syz [ 496.552000][ T5873] usb 4-1: SerialNumber: syz [ 496.601183][T12532] ip6gretap0: entered promiscuous mode [ 496.655837][T12532] batadv_slave_0: entered promiscuous mode [ 496.690607][T12532] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 496.741459][T12532] Cannot create hsr debugfs directory [ 496.767648][T12532] ip6gretap0: left promiscuous mode [ 496.774348][T12532] batadv_slave_0: left promiscuous mode [ 496.786222][ T5873] usb 4-1: 0:2 : does not exist [ 496.833931][ T5873] usb 4-1: USB disconnect, device number 52 [ 496.906950][ T29] audit: type=1804 audit(1738464740.610:1284): pid=12536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1804" name="/newroot/359/file1/file2" dev="tmpfs" ino=1923 res=1 errno=0 [ 497.084864][T12542] tmpfs: Unknown parameter 'appraise' [ 497.206858][T12546] tipc: Started in network mode [ 497.211761][T12546] tipc: Node identity 9e89f945fdd8, cluster identity 4711 [ 497.219171][T12546] tipc: Enabled bearer , priority 0 [ 497.234401][T12546] syzkaller0: entered promiscuous mode [ 497.240233][T12546] syzkaller0: entered allmulticast mode [ 497.395777][ T5826] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 497.581024][ T5826] usb 2-1: config 0 has an invalid interface number: 142 but max is 1 [ 497.686100][ T5826] usb 2-1: config 0 has no interface number 0 [ 497.770633][ T5826] usb 2-1: config 0 interface 1 has no altsetting 0 [ 497.861967][ T5826] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 497.878778][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.902425][ T5826] usb 2-1: Product: syz [ 497.915297][ T5826] usb 2-1: Manufacturer: syz [ 497.926098][ T5826] usb 2-1: SerialNumber: syz [ 498.235552][ T5826] usb 2-1: config 0 descriptor?? [ 498.255410][ T5874] tipc: Node number set to 1666316613 [ 499.015443][ T5826] msi2500 2-1:0.1: Registered as swradio24 [ 499.027845][ T5826] msi2500 2-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 499.135146][ T5826] videodev: could not get a free minor [ 499.154558][ T5826] msi2500 2-1:0.142: Failed to register as video device (-23) [ 499.188112][ T5826] msi2500 2-1:0.142: probe with driver msi2500 failed with error -23 [ 499.241081][ T5826] usb 2-1: USB disconnect, device number 74 [ 499.348155][T12583] netlink: 'syz.7.1820': attribute type 2 has an invalid length. [ 499.355993][T12583] netlink: 16138 bytes leftover after parsing attributes in process `syz.7.1820'. [ 499.382813][T12585] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1822'. [ 499.405455][ T5874] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 499.518006][ T29] audit: type=1400 audit(1738464743.220:1285): avc: denied { mount } for pid=12584 comm="syz.3.1822" name="/" dev="hugetlbfs" ino=41380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 499.575742][ T9] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 499.794474][ T5874] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 499.836313][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.885775][ T5874] usb 7-1: Product: syz [ 499.889988][ T5874] usb 7-1: Manufacturer: syz [ 499.911888][ T5874] usb 7-1: SerialNumber: syz [ 499.912532][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 499.941938][ T9] usb 6-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 499.953921][ T5874] usb 7-1: config 0 descriptor?? [ 499.977756][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.433543][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 500.444194][ T5826] usb 7-1: USB disconnect, device number 52 [ 500.461595][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.513685][ T9] usb 6-1: Product: syz [ 500.538347][ T9] usb 6-1: Manufacturer: syz [ 500.543014][ T9] usb 6-1: SerialNumber: syz [ 501.190004][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.240799][ T9] usb 6-1: 0:2 : does not exist [ 501.284641][ T9] usb 6-1: USB disconnect, device number 46 [ 501.529698][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.995045][ T29] audit: type=1400 audit(1738464745.700:1286): avc: denied { execute } for pid=12615 comm="syz.7.1832" path="/dev/vbi8" dev="devtmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 502.955951][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 503.290524][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 503.356809][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.386573][ T8] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 503.404560][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 503.444520][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.492366][ T9] usb 7-1: config 0 descriptor?? [ 503.867300][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.089489][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.099456][ T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 504.110609][ T9] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 504.125284][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.186306][ T8] usb 2-1: config 0 descriptor?? [ 504.621931][ T5872] usb 7-1: USB disconnect, device number 53 [ 504.911209][ T29] audit: type=1400 audit(1738464748.620:1287): avc: denied { unmount } for pid=6745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 505.056702][ T8] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 505.064581][ T8] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 505.071809][ T8] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 505.078902][ T8] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 505.085935][ T8] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 505.101204][ T8] lenovo 0003:17EF:6047.0015: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 505.325406][ T5874] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 505.616568][ T5874] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 505.625053][ T5874] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 505.634141][ T5874] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 505.643321][ T5874] usb 6-1: config 0 has no interface number 0 [ 505.657523][ T5874] usb 6-1: New USB device found, idVendor=04b4, idProduct=931f, bcdDevice=2a.80 [ 505.669089][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.678634][ T5874] usb 6-1: Product: syz [ 505.683323][ T5874] usb 6-1: Manufacturer: syz [ 505.691693][ T5874] usb 6-1: SerialNumber: syz [ 505.706239][ T5874] usb 6-1: config 0 descriptor?? [ 506.844428][ T8] lenovo 0003:17EF:6047.0015: Failed to switch F7/9/11 mode: -71 [ 506.897712][ T8] lenovo 0003:17EF:6047.0015: Failed to switch middle button: -71 [ 506.994771][ T8] lenovo 0003:17EF:6047.0015: Fn-lock setting failed: -71 [ 507.131284][ T8] lenovo 0003:17EF:6047.0015: Sensitivity setting failed: -71 [ 507.172262][ T8] usb 2-1: USB disconnect, device number 75 [ 507.348359][ T5834] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 508.263006][T12703] syz.7.1855: attempt to access beyond end of device [ 508.263006][T12703] loop7: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 508.341214][ T5193] udevd[5193]: worker [6209] terminated by signal 33 (Unknown signal 33) [ 508.437700][T12703] XFS (loop7): SB validate failed with error -5. [ 508.617613][T12719] 9pnet_fd: Insufficient options for proto=fd [ 508.854036][T12717] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1859'. [ 509.122564][ T29] audit: type=1400 audit(1738464752.590:1288): avc: denied { write } for pid=12716 comm="syz.6.1859" name="dev_mcast" dev="proc" ino=4026533743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 509.373106][T12723] syzkaller1: entered promiscuous mode [ 509.390976][T12723] syzkaller1: entered allmulticast mode [ 510.420618][ T5874] usb 6-1: can't set first interface for hiFace device. [ 510.441177][ T5874] snd-usb-hiface 6-1:0.191: probe with driver snd-usb-hiface failed with error -5 [ 510.453730][T12731] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 510.458215][ T6151] udevd[6151]: failed to send result of seq 18531 to main daemon: Connection refused [ 510.481153][ T5874] usb 6-1: USB disconnect, device number 47 [ 510.787983][ T26] block nbd0: Possible stuck request ffff888025e439c0: control (read@0,4096B). Runtime 90 seconds [ 510.892021][ T29] audit: type=1326 audit(1738464754.600:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.7.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d838cda9 code=0x7ffc0000 [ 511.036986][ T29] audit: type=1326 audit(1738464754.640:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.7.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d838cda9 code=0x7ffc0000 [ 511.194140][ T29] audit: type=1326 audit(1738464754.640:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.7.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f06d838cda9 code=0x7ffc0000 [ 511.217622][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.277595][ T29] audit: type=1326 audit(1738464754.640:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.7.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d838cda9 code=0x7ffc0000 [ 511.301063][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.355333][ T29] audit: type=1326 audit(1738464754.640:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.7.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d838cda9 code=0x7ffc0000 [ 511.431718][ T5834] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 511.440644][ T5834] Bluetooth: hci4: Injecting HCI hardware error event [ 511.449446][ T29] audit: type=1326 audit(1738464754.640:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.7.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06d838cda9 code=0x7ffc0000 [ 511.449518][ T5831] Bluetooth: hci4: hardware error 0x00 [ 511.480245][ T29] audit: type=1326 audit(1738464754.640:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.7.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d838cda9 code=0x7ffc0000 [ 511.503722][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.544957][ T29] audit: type=1326 audit(1738464754.640:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.7.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d838cda9 code=0x7ffc0000 [ 511.609288][ T29] audit: type=1326 audit(1738464754.640:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.7.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f06d838cda9 code=0x7ffc0000 [ 511.633525][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.048424][T12764] syz.1.1870: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 513.146649][T12764] CPU: 1 UID: 0 PID: 12764 Comm: syz.1.1870 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 513.146678][T12764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 513.146690][T12764] Call Trace: [ 513.146696][T12764] [ 513.146704][T12764] dump_stack_lvl+0x16c/0x1f0 [ 513.146729][T12764] warn_alloc+0x24d/0x3a0 [ 513.146750][T12764] ? __pfx_warn_alloc+0x10/0x10 [ 513.146780][T12764] ? __get_vm_area_node+0x1b0/0x2f0 [ 513.146806][T12764] ? __get_vm_area_node+0x1dc/0x2f0 [ 513.146839][T12764] __vmalloc_node_range_noprof+0x1102/0x1530 [ 513.146875][T12764] ? xp_create_and_assign_umem+0x1be/0xe20 [ 513.146905][T12764] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 513.146929][T12764] ? rcu_is_watching+0x12/0xc0 [ 513.146946][T12764] ? trace_kmalloc+0x2d/0xd0 [ 513.146965][T12764] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 513.146983][T12764] ? xp_create_and_assign_umem+0x1be/0xe20 [ 513.147006][T12764] __kvmalloc_node_noprof+0x14f/0x1a0 [ 513.147032][T12764] ? xp_create_and_assign_umem+0x1be/0xe20 [ 513.147057][T12764] xp_create_and_assign_umem+0x1be/0xe20 [ 513.147082][T12764] ? lock_acquire+0x2f/0xb0 [ 513.147102][T12764] ? dev_get_by_index+0x37/0x380 [ 513.147127][T12764] xsk_bind+0x45a/0x13c0 [ 513.147150][T12764] ? __pfx_xsk_bind+0x10/0x10 [ 513.147177][T12764] __sys_bind+0x213/0x260 [ 513.147194][T12764] ? __pfx___sys_bind+0x10/0x10 [ 513.147209][T12764] ? do_user_addr_fault+0xe50/0x13f0 [ 513.147242][T12764] ? xfd_validate_state+0x5d/0x180 [ 513.147271][T12764] __x64_sys_bind+0x72/0xb0 [ 513.147287][T12764] ? lockdep_hardirqs_on+0x7c/0x110 [ 513.147314][T12764] do_syscall_64+0xcd/0x250 [ 513.147335][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.147360][T12764] RIP: 0033:0x7f5b1438cda9 [ 513.147375][T12764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.147393][T12764] RSP: 002b:00007f5b15257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 513.147411][T12764] RAX: ffffffffffffffda RBX: 00007f5b145a6240 RCX: 00007f5b1438cda9 [ 513.147422][T12764] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000005 [ 513.147433][T12764] RBP: 00007f5b1440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 513.147444][T12764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.147455][T12764] R13: 0000000000000001 R14: 00007f5b145a6240 R15: 00007ffd30227c68 [ 513.147480][T12764] [ 513.147487][T12764] Mem-Info: [ 513.423817][T12764] active_anon:9308 inactive_anon:0 isolated_anon:0 [ 513.423817][T12764] active_file:19374 inactive_file:3358 isolated_file:0 [ 513.423817][T12764] unevictable:768 dirty:387 writeback:0 [ 513.423817][T12764] slab_reclaimable:11818 slab_unreclaimable:110105 [ 513.423817][T12764] mapped:42511 shmem:4335 pagetables:1075 [ 513.423817][T12764] sec_pagetables:0 bounce:0 [ 513.423817][T12764] kernel_misc_reclaimable:0 [ 513.423817][T12764] free:1313195 free_pcp:5405 free_cma:0 [ 513.469044][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.515710][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 513.525399][T12764] Node 0 active_anon:37132kB inactive_anon:0kB active_file:77496kB inactive_file:13428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:170044kB dirty:1548kB writeback:0kB shmem:15804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11696kB pagetables:4300kB sec_pagetables:0kB all_unreclaimable? no [ 513.837391][T12764] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 513.867384][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.947555][T12764] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.048613][T12764] lowmem_reserve[]: 0 2487 2487 0 0 [ 514.083855][T12764] Node 0 DMA32 free:1336436kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:36732kB inactive_anon:0kB active_file:77496kB inactive_file:13336kB unevictable:1536kB writepending:548kB present:3129332kB managed:2547472kB mlocked:0kB bounce:0kB free_pcp:24532kB local_pcp:1596kB free_cma:0kB [ 514.237667][T12764] lowmem_reserve[]: 0 0 0 0 0 [ 514.243256][T12764] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 514.389525][T12764] lowmem_reserve[]: 0 0 0 0 0 [ 514.422689][T12764] Node 1 Normal free:3900088kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2052kB local_pcp:2052kB free_cma:0kB [ 514.593071][T12764] lowmem_reserve[]: 0 0 0 0 0 [ 514.617254][T12764] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 514.703276][T12764] Node 0 DMA32: 16*4kB (UME) 5*8kB (UE) 15*16kB (UME) 482*32kB (UME) 344*64kB (UME) 31*128kB (UME) 33*256kB (M) 16*512kB (M) 18*1024kB (UME) 6*2048kB (M) 305*4096kB (M) = 1338392kB [ 514.773074][T12764] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 514.851448][T12764] Node 1 Normal: 198*4kB (UM) 56*8kB (UME) 34*16kB (UME) 200*32kB (UME) 99*64kB (UME) 26*128kB (UME) 13*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 4*2048kB (UME) 943*4096kB (UM) = 3900088kB [ 515.010575][T12764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.035463][T12764] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=3 hugepages_size=2048kB [ 515.052448][T12764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.065421][T12764] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 515.075331][T12764] 26397 total pagecache pages [ 515.080014][T12764] 0 pages in swap cache [ 515.084165][T12764] Free swap = 124720kB [ 515.096805][T12764] Total swap = 124996kB [ 515.105449][T12764] 2097051 pages RAM [ 515.109399][T12764] 0 pages HighMem/MovableOnly [ 515.124302][T12764] 428525 pages reserved [ 515.128570][T12764] 0 pages cma reserved [ 515.202773][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 517.584734][T12885] trusted_key: encrypted_key: master key parameter '*'˜Ýñˆ' is invalid [ 518.221632][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 518.221649][ T29] audit: type=1400 audit(1738464761.310:1334): avc: denied { bind } for pid=12876 comm="syz.3.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 518.404128][ T29] audit: type=1400 audit(1738464762.010:1335): avc: denied { listen } for pid=12883 comm="syz.5.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 518.576682][T12890] overlay: Unknown parameter 'fowner>00000000000000000000' [ 519.608770][ T29] audit: type=1400 audit(1738464763.310:1336): avc: denied { unmount } for pid=11674 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 520.149740][T12915] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 520.206113][T12916] lo speed is unknown, defaulting to 1000 [ 520.222117][T12916] lo speed is unknown, defaulting to 1000 [ 520.229761][T12916] lo speed is unknown, defaulting to 1000 [ 520.560102][T12916] infiniband sz1: set active [ 520.565099][T12916] infiniband sz1: added lo [ 520.590976][ T8] lo speed is unknown, defaulting to 1000 [ 520.717902][T12916] RDS/IB: sz1: added [ 520.722604][T12916] smc: adding ib device sz1 with port count 1 [ 520.728978][T12916] smc: ib device sz1 port 1 has pnetid [ 520.736952][T12916] lo speed is unknown, defaulting to 1000 [ 520.819051][T12916] lo speed is unknown, defaulting to 1000 [ 520.894433][T12916] lo speed is unknown, defaulting to 1000 [ 520.903358][ T25] lo speed is unknown, defaulting to 1000 [ 520.969148][T12916] lo speed is unknown, defaulting to 1000 [ 521.064456][T12916] lo speed is unknown, defaulting to 1000 [ 521.210280][T12916] lo speed is unknown, defaulting to 1000 [ 521.260929][T12916] lo speed is unknown, defaulting to 1000 [ 522.784420][ T29] audit: type=1400 audit(1738464766.490:1337): avc: denied { write } for pid=12948 comm="syz.3.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 523.425724][ T5874] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 523.465572][ T5873] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 523.529899][T12961] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20002 [ 523.605494][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 523.625206][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.638776][ T5874] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 523.638933][ T5873] usb 4-1: config 0 has an invalid interface number: 76 but max is 2 [ 523.660280][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.678731][ T5873] usb 4-1: config 0 has an invalid descriptor of length 98, skipping remainder of the config [ 523.690491][ T5874] usb 6-1: config 0 descriptor?? [ 523.710111][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 523.775004][ T5873] usb 4-1: config 0 has no interface number 0 [ 523.781748][ T5873] usb 4-1: config 0 interface 76 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 523.796835][ T5873] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 523.823314][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.929092][ T5873] usb 4-1: config 0 descriptor?? [ 524.268075][ T5874] nzxt-kraken2 0003:1E71:170E.0016: unknown main item tag 0x0 [ 524.289955][ T5874] nzxt-kraken2 0003:1E71:170E.0016: unknown main item tag 0x0 [ 524.317164][ T5874] nzxt-kraken2 0003:1E71:170E.0016: unknown main item tag 0x0 [ 524.338352][ T5874] nzxt-kraken2 0003:1E71:170E.0016: unknown main item tag 0x0 [ 524.360157][ T5874] nzxt-kraken2 0003:1E71:170E.0016: unknown main item tag 0x0 [ 524.380260][ T5874] nzxt-kraken2 0003:1E71:170E.0016: hidraw0: USB HID v0.05 Device [HID 1e71:170e] on usb-dummy_hcd.5-1/input0 [ 524.546518][ T5874] usb 6-1: USB disconnect, device number 48 [ 525.401887][ T25] IPVS: starting estimator thread 0... [ 526.950136][ T5873] usb 4-1: string descriptor 0 read error: -71 [ 527.085881][ T5873] usb 4-1: USB disconnect, device number 53 [ 527.095750][T12987] IPVS: using max 37 ests per chain, 88800 per kthread [ 527.288005][ T29] audit: type=1400 audit(1738464770.940:1338): avc: denied { write } for pid=12985 comm="syz.6.1925" path="socket:[42497]" dev="sockfs" ino=42497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 527.377737][ T29] audit: type=1400 audit(1738464770.950:1339): avc: denied { accept } for pid=12985 comm="syz.6.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 527.676496][T13002] delete_channel: no stack [ 527.687029][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'. [ 527.711028][ T29] audit: type=1400 audit(1738464771.420:1340): avc: denied { read } for pid=12985 comm="syz.6.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 527.997399][ T29] audit: type=1400 audit(1738464771.710:1341): avc: denied { append } for pid=13007 comm="syz.6.1929" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 528.028528][ T29] audit: type=1400 audit(1738464771.710:1342): avc: denied { listen } for pid=13007 comm="syz.6.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 528.845363][ T5874] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 529.007245][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 529.017970][ T5874] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 529.045293][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.053322][ T5874] usb 4-1: Product: syz [ 529.065341][ T5874] usb 4-1: Manufacturer: syz [ 529.069990][ T5874] usb 4-1: SerialNumber: syz [ 529.085396][ T5872] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 529.086090][ T5874] usb 4-1: config 0 descriptor?? [ 529.116653][ T5874] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 529.255435][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 529.263340][ T5872] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 529.277082][ T5872] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 529.285388][ T5872] usb 2-1: config 0 has no interface number 0 [ 529.291479][ T5872] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 529.304198][ T5872] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 529.315321][ T5872] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 529.327957][ T5872] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 529.340795][ T5872] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 529.353136][ T5872] usb 2-1: Product: syz [ 529.357447][ T5872] usb 2-1: Manufacturer: syz [ 529.364165][ T5872] usb 2-1: config 0 descriptor?? [ 529.395405][T13019] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 530.206734][ T5872] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input44 [ 530.987895][ T5874] gspca_sonixj: reg_r err -71 [ 530.993026][ T5874] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 531.019325][ T5874] usb 4-1: USB disconnect, device number 54 [ 531.043812][ T5914] usb 2-1: USB disconnect, device number 76 [ 531.043936][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 532.116340][T13043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13043 comm=syz.6.1940 [ 532.905625][T13053] rdma_rxe: rxe_newlink: failed to add lo [ 532.916116][ T29] audit: type=1400 audit(1738464776.620:1343): avc: denied { create } for pid=13052 comm="syz.3.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 532.935815][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.950979][T13053] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.958344][T13053] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.155320][ T5874] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 533.319080][ T5874] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 533.329168][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.515591][ T5914] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 533.720903][ T5914] usb 4-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 533.834182][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.850834][ T5874] usb 7-1: config 0 descriptor?? [ 533.866826][ T5914] usb 4-1: config 0 descriptor?? [ 533.873292][ T5914] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 533.912501][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1948'. [ 534.095612][T13057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.104192][T13057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.125631][ T5874] kaweth 7-1:0.0: Firmware present in device. [ 534.144031][T13057] program syz.3.1946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.153834][T13057] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 534.164063][ T5914] gspca_sn9c20x: Write register 1000 failed -71 [ 534.170628][ T5914] gspca_sn9c20x: Device initialization failed [ 534.176894][ T5914] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 534.187792][ T5914] usb 4-1: USB disconnect, device number 55 [ 534.288255][ T5874] kaweth 7-1:0.0: Statistics collection: 0 [ 534.294280][ T5874] kaweth 7-1:0.0: Multicast filter limit: 0 [ 534.301556][ T5874] kaweth 7-1:0.0: MTU: 0 [ 534.314590][ T29] audit: type=1400 audit(1738464778.020:1344): avc: denied { write } for pid=13070 comm="syz.5.1951" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 534.337915][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.344741][T13072] netlink: zone id is out of range [ 534.347125][ T5874] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 534.350053][T13072] netlink: zone id is out of range [ 534.361881][T13072] netlink: zone id is out of range [ 534.367114][T13072] netlink: zone id is out of range [ 534.372258][T13072] netlink: zone id is out of range [ 534.377415][T13072] netlink: zone id is out of range [ 534.382530][T13072] netlink: zone id is out of range [ 534.387689][T13072] netlink: zone id is out of range [ 534.725481][ T5872] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 535.092201][ T5874] kaweth 7-1:0.0: kaweth interface created at eth5 [ 535.095323][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 535.112063][ T5874] usb 7-1: USB disconnect, device number 54 [ 535.123261][ T5872] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 535.132500][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.140884][ T5872] usb 2-1: Product: syz [ 535.145021][ T5872] usb 2-1: Manufacturer: syz [ 535.149723][ T5872] usb 2-1: SerialNumber: syz [ 535.170791][ T5872] usb 2-1: config 0 descriptor?? [ 535.181827][ T5872] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 536.123814][T13096] lo speed is unknown, defaulting to 1000 [ 536.136675][T13096] lo speed is unknown, defaulting to 1000 [ 536.577513][ T5872] gspca_sonixj: reg_w1 err -110 [ 536.582447][ T5872] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 536.879642][T13103] 9pnet_fd: Insufficient options for proto=fd [ 537.842570][T13110] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1961'. [ 539.245403][ T5872] usb 2-1: USB disconnect, device number 77 [ 540.412909][T13145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.765422][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 540.972418][ T26] block nbd0: Possible stuck request ffff888025e439c0: control (read@0,4096B). Runtime 120 seconds [ 541.194338][T13148] 9pnet_fd: Insufficient options for proto=fd [ 541.250735][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 541.355270][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.384228][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 541.423224][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.494762][ T9] usb 2-1: config 0 descriptor?? [ 541.545018][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 543.399541][ T9] gspca_vc032x: reg_w err -71 [ 543.404280][ T9] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 543.422582][ T9] usb 2-1: USB disconnect, device number 78 [ 543.889894][ T29] audit: type=1400 audit(1738464787.600:1345): avc: denied { nlmsg_write } for pid=13175 comm="syz.6.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 543.960206][ T29] audit: type=1400 audit(1738464787.600:1346): avc: denied { setopt } for pid=13175 comm="syz.6.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 544.443005][T13190] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13190 comm=syz.3.1986 [ 545.636047][ T29] audit: type=1326 audit(1738464789.340:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13191 comm="syz.5.1987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb13138cda9 code=0x0 [ 546.030339][T13194] lo speed is unknown, defaulting to 1000 [ 546.038216][T13194] lo speed is unknown, defaulting to 1000 [ 546.355183][T13202] SELinux: syz.6.1988 (13202) set checkreqprot to 1. This is no longer supported. [ 546.454143][T13205] tmpfs: Unknown parameter 'ulrquta' [ 546.766105][T13210] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1991'. [ 548.703699][T13225] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1996'. [ 551.882058][T13290] lo speed is unknown, defaulting to 1000 [ 551.948470][T13290] lo speed is unknown, defaulting to 1000 [ 553.044727][T13308] ebt_among: src integrity fail: 30a [ 555.003266][T13326] trusted_key: encrypted_key: master key parameter '*'˜Ýñˆ' is invalid [ 558.724018][T13380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61212 sclass=netlink_route_socket pid=13380 comm=syz.6.2019 [ 559.596483][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 559.626623][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 559.696514][ T5874] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 560.115641][ T29] audit: type=1400 audit(1738464803.780:1348): avc: denied { append } for pid=13404 comm="syz.3.2027" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 560.136635][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.252481][ T5874] usb 2-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config [ 560.998858][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 561.008049][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.057112][ T9] usb 6-1: config 0 descriptor?? [ 561.242698][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.256307][ T5874] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 561.285257][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.293306][ T5874] usb 2-1: Product: syz [ 561.385798][ T5874] usb 2-1: Manufacturer: syz [ 561.390436][ T5874] usb 2-1: SerialNumber: syz [ 561.533868][ T974] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 561.567979][ T9] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 561.608398][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0017/input/input45 [ 561.635280][T13443] netlink: 1256 bytes leftover after parsing attributes in process `syz.6.2030'. [ 561.679663][ T5874] usb 2-1: 0:2 : does not exist [ 561.733173][ T5874] usb 2-1: USB disconnect, device number 79 [ 561.733273][ T974] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.734852][ T9] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 561.762788][ T974] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 561.806701][ T974] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 561.816064][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.824308][ T974] usb 4-1: Product: syz [ 561.833554][ T974] usb 4-1: Manufacturer: syz [ 561.838232][ T974] usb 4-1: SerialNumber: syz [ 562.289152][T13437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.309794][ T25] usb 6-1: USB disconnect, device number 49 [ 562.630209][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.695579][ T9] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 563.005339][ T9] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 563.013440][ T9] usb 7-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 563.046259][ T9] usb 7-1: config 0 has no interface number 0 [ 563.055378][ T9] usb 7-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice=e4.f5 [ 563.064424][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.091998][ T9] usb 7-1: Product: syz [ 563.114053][ T9] usb 7-1: Manufacturer: syz [ 563.118852][ T9] usb 7-1: SerialNumber: syz [ 563.145929][ T9] usb 7-1: config 0 descriptor?? [ 563.203499][T13437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 563.265544][ T5871] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 563.373945][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.404159][ T9] snd-usb-audio 7-1:0.20: probe with driver snd-usb-audio failed with error -2 [ 563.418115][ T5871] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 563.429200][ T9] usb 7-1: USB disconnect, device number 55 [ 563.436880][ T974] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 563.448946][ T974] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 563.454436][ T5871] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 563.465299][ T974] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 563.475309][ T5871] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 563.485158][ T5871] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 563.494554][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.506463][ T25] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 563.508186][ T5871] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.556685][ T5871] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 563.651575][ T974] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 563.668491][ T974] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 563.684006][ T974] wwan wwan0: port wwan0mbim0 attached [ 563.702578][ T974] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 563.714508][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.727976][ T25] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 563.738788][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.750896][ T5874] usb 2-1: USB disconnect, device number 80 [ 563.761738][ T25] usb 6-1: config 0 descriptor?? [ 563.812711][T13468] tipc: Enabled bearer , priority 0 [ 563.836256][T13468] syzkaller0: entered promiscuous mode [ 563.841790][T13468] syzkaller0: entered allmulticast mode [ 563.848174][T13468] tipc: Resetting bearer [ 563.886873][T13467] tipc: Resetting bearer [ 564.233313][ T25] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 564.249474][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0018/input/input46 [ 564.527775][ T9] usb 4-1: USB disconnect, device number 56 [ 564.551999][ T9] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 564.590967][ T25] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 564.922280][ T8] usb 6-1: USB disconnect, device number 50 [ 565.399262][T13484] netlink: 'syz.6.2042': attribute type 10 has an invalid length. [ 565.407272][T13484] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2042'. [ 565.545615][ T29] audit: type=1400 audit(1738464809.240:1349): avc: denied { ioctl } for pid=13478 comm="syz.3.2041" path="socket:[44488]" dev="sockfs" ino=44488 ioctlcmd=0x64a6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 567.249131][T13467] tipc: Disabling bearer [ 567.265590][T13484] bridge0: port 3(macvlan1) entered blocking state [ 567.280263][T13484] bridge0: port 3(macvlan1) entered disabled state [ 567.287670][T13484] macvlan1: entered allmulticast mode [ 567.293585][T13484] veth1_vlan: entered allmulticast mode [ 567.307537][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 567.310394][T13484] macvlan1: entered promiscuous mode [ 567.327998][T13484] bridge0: port 3(macvlan1) entered blocking state [ 567.334599][T13484] bridge0: port 3(macvlan1) entered forwarding state [ 567.543015][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2046'. [ 568.115724][ T5914] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 568.239074][T13504] tipc: Started in network mode [ 568.252080][T13504] tipc: Node identity cac69e81842d, cluster identity 4711 [ 568.277160][T13504] tipc: Enabled bearer , priority 0 [ 568.497036][T13514] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 568.509543][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 568.539816][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.542694][T13504] syzkaller0: entered promiscuous mode [ 568.606619][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.608598][T13504] syzkaller0: entered allmulticast mode [ 569.098262][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 569.111426][ T5914] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 569.121011][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.218883][ T5914] usb 6-1: config 0 descriptor?? [ 569.224308][T13504] tipc: Resetting bearer [ 569.282928][T13502] tipc: Resetting bearer [ 569.445642][ T5874] tipc: Node number set to 1324064385 [ 569.693842][ T5914] microsoft 0003:045E:07DA.0019: unknown main item tag 0x6 [ 569.761470][ T5914] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 569.795267][ T5914] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 569.812819][ T5914] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 569.835987][ T5914] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 569.843457][ T5914] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 569.879855][ T5914] microsoft 0003:045E:07DA.0019: No inputs registered, leaving [ 570.605406][T13529] nbd3: detected capacity change from 0 to 4 [ 570.665933][T13529] nbd3: detected capacity change from 4 to 67108884 [ 570.691944][T13529] block nbd3: Send control failed (result -89) [ 570.715394][T13529] block nbd3: Request send failed, requeueing [ 570.746704][ T5834] block nbd3: Receive control failed (result -32) [ 570.758546][ T10] block nbd3: Dead connection, failed to find a fallback [ 570.765732][ T10] block nbd3: shutting down sockets [ 570.770928][ T10] blk_print_req_error: 263 callbacks suppressed [ 570.770936][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 570.787174][ T10] buffer_io_error: 222 callbacks suppressed [ 570.787186][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 570.811862][T13529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 570.821773][T13529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 570.829826][T13529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 570.838934][T13529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 570.846952][T13529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 570.856136][T13529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 570.866725][T13529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 570.876669][T13529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 570.884625][T13529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 570.894213][T13529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 570.902512][T13529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 570.911738][T13529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 570.922995][T13529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 570.932384][T13529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 570.940251][T13529] ldm_validate_partition_table(): Disk read failed. [ 570.947346][T13529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 570.956504][T13529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 570.968742][T13529] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 571.018341][T13529] Buffer I/O error on dev nbd3, logical block 0, async page read [ 571.020752][ T5914] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 571.035489][T13529] Dev nbd3: unable to read RDB block 0 [ 571.053526][ T5914] microsoft 0003:045E:07DA.0019: no inputs found [ 571.060359][T13529] nbd3: unable to read partition table [ 571.069674][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 571.092600][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554441, location=33554441 [ 571.098698][ T5914] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 571.126230][ T5914] usb 6-1: USB disconnect, device number 51 [ 571.147325][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554185, location=33554185 [ 571.158018][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554440, location=33554440 [ 571.174314][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554184, location=33554184 [ 571.192837][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554439, location=33554439 [ 571.210617][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554183, location=33554183 [ 571.226329][T13542] syz.7.2058: attempt to access beyond end of device [ 571.226329][T13542] loop7: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 571.250124][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554291, location=33554291 [ 571.268418][T13542] XFS (loop7): SB validate failed with error -5. [ 571.281084][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554035, location=33554035 [ 571.298387][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554289, location=33554289 [ 571.310834][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554033, location=33554033 [ 571.321554][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 571.342910][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 571.374192][ T29] audit: type=1400 audit(1738464815.070:1350): avc: denied { setcurrent } for pid=13550 comm="syz.6.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 571.408652][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777220, location=16777220 [ 571.419663][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776964, location=16776964 [ 571.430830][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777219, location=16777219 [ 571.447059][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776963, location=16776963 [ 571.469551][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777218, location=16777218 [ 571.531895][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776962, location=16776962 [ 571.556804][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777070, location=16777070 [ 571.569973][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776814, location=16776814 [ 571.594437][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777068, location=16777068 [ 571.604964][ T26] block nbd0: Possible stuck request ffff888025e439c0: control (read@0,4096B). Runtime 150 seconds [ 571.605133][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776812, location=16776812 [ 571.698444][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 571.738068][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 571.770434][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388609, location=8388609 [ 571.805922][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388353, location=8388353 [ 571.831742][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388608, location=8388608 [ 571.843707][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388352, location=8388352 [ 571.855094][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388607, location=8388607 [ 571.866639][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388351, location=8388351 [ 571.877757][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388459, location=8388459 [ 571.889124][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388203, location=8388203 [ 571.899984][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388457, location=8388457 [ 571.918329][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388201, location=8388201 [ 571.934288][T13529] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 571.943956][T13529] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 573.772479][T13502] tipc: Disabling bearer [ 574.096393][T13569] 9pnet_fd: Insufficient options for proto=fd [ 574.430424][T13572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13572 comm=syz.7.2065 [ 575.166966][ T29] audit: type=1326 audit(1738464818.880:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.5.2070" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb13138cda9 code=0x0 [ 580.050883][T13684] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13684 comm=syz.3.2079 [ 580.359920][T13688] netlink: 'syz.6.2077': attribute type 1 has an invalid length. [ 580.695124][T13688] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2077'. [ 580.798620][T13691] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2081'. [ 580.921659][ T29] audit: type=1326 audit(1738464824.620:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13138cda9 code=0x7ffc0000 [ 580.945692][ T29] audit: type=1326 audit(1738464824.620:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13138cda9 code=0x7ffc0000 [ 581.265526][ T8] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 582.128241][ T29] audit: type=1326 audit(1738464824.630:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fb13138cda9 code=0x7ffc0000 [ 582.158042][ T8] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 582.279000][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.355252][ T8] usb 6-1: Product: syz [ 582.359457][ T8] usb 6-1: Manufacturer: syz [ 582.364059][ T8] usb 6-1: SerialNumber: syz [ 582.374061][ T29] audit: type=1326 audit(1738464824.630:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13138cda9 code=0x7ffc0000 [ 582.715458][ T29] audit: type=1326 audit(1738464824.630:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb13138b710 code=0x7ffc0000 [ 582.739693][ T8] usb 6-1: config 0 descriptor?? [ 582.744786][ T29] audit: type=1326 audit(1738464824.630:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb13138c9ab code=0x7ffc0000 [ 582.850180][T13745] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2086'. [ 582.854869][ T29] audit: type=1326 audit(1738464824.630:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb13138c9ab code=0x7ffc0000 [ 582.948858][ T29] audit: type=1326 audit(1738464824.630:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb13138c9ab code=0x7ffc0000 [ 583.186222][ T30] INFO: task udevd:6146 blocked for more than 143 seconds. [ 583.193517][ T30] Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 583.328014][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 583.486605][ T30] task:udevd state:D stack:23856 pid:6146 tgid:6146 ppid:1 task_flags:0x400140 flags:0x00000002 [ 583.637667][ T29] audit: type=1326 audit(1738464824.630:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb13138c9ab code=0x7ffc0000 [ 583.638681][ T30] Call Trace: [ 583.693390][ T30] [ 583.697107][ T29] audit: type=1326 audit(1738464824.860:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13690 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb13138c9ab code=0x7ffc0000 [ 583.703004][ T30] __schedule+0xf43/0x5890 [ 583.744039][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 583.750270][ T30] ? __pfx___schedule+0x10/0x10 [ 583.755353][ T974] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 583.766163][ T30] ? schedule+0x298/0x350 [ 583.770763][ T30] ? __pfx_lock_release+0x10/0x10 [ 583.776570][ T30] ? __mutex_trylock_common+0x78/0x250 [ 583.782283][ T30] ? lock_acquire+0x2f/0xb0 [ 583.787073][ T30] ? schedule+0x1fd/0x350 [ 583.792145][ T30] schedule+0xe7/0x350 [ 583.796500][ T30] schedule_preempt_disabled+0x13/0x30 [ 583.802276][ T30] __mutex_lock+0x6bd/0xb10 [ 583.807200][ T30] ? bdev_open+0x41a/0xe20 [ 583.811968][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 583.817448][ T30] ? ilookup+0x1cf/0x320 [ 583.821949][ T30] ? __pfx_ilookup+0x10/0x10 [ 583.826944][ T30] ? bdev_open+0x41a/0xe20 [ 583.831576][ T30] bdev_open+0x41a/0xe20 [ 583.836008][ T30] blkdev_open+0x272/0x3f0 [ 583.840524][ T30] do_dentry_open+0x735/0x1c40 [ 583.845964][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 583.851018][ T30] vfs_open+0x82/0x3f0 [ 583.855219][ T30] ? may_open+0x1f2/0x400 [ 583.859683][ T30] path_openat+0x1e88/0x2d80 [ 583.864380][ T30] ? __pfx_path_openat+0x10/0x10 [ 583.869582][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 583.874903][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 583.880675][ T30] ? find_held_lock+0x2d/0x110 [ 583.885662][ T30] do_filp_open+0x20c/0x470 [ 583.890266][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 583.895395][ T30] ? find_held_lock+0x2d/0x110 [ 583.900306][ T30] ? alloc_fd+0x41f/0x760 [ 583.904739][ T30] do_sys_openat2+0x17a/0x1e0 [ 583.909931][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 583.915302][ T30] ? __sys_recvmsg+0x197/0x220 [ 583.920165][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 583.925458][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 583.930741][ T30] __x64_sys_openat+0x175/0x210 [ 583.935873][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 583.941909][ T30] do_syscall_64+0xcd/0x250 [ 583.947380][ T974] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 583.959152][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 583.970349][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.976540][ T30] RIP: 0033:0x7f47bb5169a4 [ 583.981471][ T30] RSP: 002b:00007fffb4cb5680 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 583.990996][ T30] RAX: ffffffffffffffda RBX: 0000556fab552a10 RCX: 00007f47bb5169a4 [ 583.999346][ T974] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 584.008559][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.016735][ T974] usb 2-1: Product: syz [ 584.020996][ T974] usb 2-1: Manufacturer: syz [ 584.025855][ T30] RDX: 00000000000a0800 RSI: 0000556fab4ef010 RDI: 00000000ffffff9c [ 584.034157][ T974] usb 2-1: SerialNumber: syz [ 584.040460][ T974] usb 2-1: config 0 descriptor?? [ 584.045628][ T30] RBP: 0000556fab4ef010 R08: 0000000000000001 R09: 00007f47bb949000 [ 584.053824][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 584.062736][ T30] R13: 0000556fab552410 R14: 0000000000000001 R15: 0000556fab4d82c0 [ 584.071101][ T30] [ 584.074322][ T30] INFO: task syz.0.1484:11441 blocked for more than 144 seconds. [ 584.082331][ T30] Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 584.090322][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.100987][ T30] task:syz.0.1484 state:D stack:26048 pid:11441 tgid:11441 ppid:5815 task_flags:0x400040 flags:0x00004004 [ 584.113290][ T30] Call Trace: [ 584.116727][ T30] [ 584.119761][ T30] __schedule+0xf43/0x5890 [ 584.124325][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 584.129797][ T30] ? __pfx___schedule+0x10/0x10 [ 584.134788][ T30] ? schedule+0x298/0x350 [ 584.139268][ T30] ? __pfx_lock_release+0x10/0x10 [ 584.144410][ T30] ? __mutex_trylock_common+0x78/0x250 [ 584.150206][ T30] ? lock_acquire+0x2f/0xb0 [ 584.154823][ T30] ? schedule+0x1fd/0x350 [ 584.159287][ T30] schedule+0xe7/0x350 [ 584.163500][ T30] schedule_preempt_disabled+0x13/0x30 [ 584.169265][ T30] __mutex_lock+0x6bd/0xb10 [ 584.173902][ T30] ? bdev_release+0x15a/0x6d0 [ 584.178727][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 584.183854][ T30] ? __pfx_lock_release+0x10/0x10 [ 584.189665][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 584.194979][ T30] ? bdev_release+0x15a/0x6d0 [ 584.199811][ T30] bdev_release+0x15a/0x6d0 [ 584.204356][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 584.225375][ T30] blkdev_release+0x15/0x20 [ 584.229928][ T30] __fput+0x3ff/0xb70 [ 584.245291][ T30] task_work_run+0x14e/0x250 [ 584.250000][ T30] ? __pfx_task_work_run+0x10/0x10 [ 584.255377][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 584.261243][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 584.277903][ T30] do_syscall_64+0xda/0x250 [ 584.291000][ T974] usb 2-1: USB disconnect, device number 81 [ 584.299350][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.305935][ T30] RIP: 0033:0x7fa41a98cda9 [ 584.310632][ T30] RSP: 002b:00007ffcceae1ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 584.345234][ T30] RAX: 0000000000000000 RBX: 00007fa41aba7ba0 RCX: 00007fa41a98cda9 [ 584.353260][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 584.361457][ T30] RBP: 00007fa41aba7ba0 R08: 000000000002f234 R09: 00007ffcceae21ef [ 584.369524][ T30] R10: 00007fa41aba7ac0 R11: 0000000000000246 R12: 00000000000669b5 [ 584.377575][ T30] R13: 00007fa41aba6080 R14: 0000000000000032 R15: ffffffffffffffff [ 584.386059][ T8] airspy 6-1:0.0: usb_control_msg() failed -110 request 0a [ 584.393985][ T8] airspy 6-1:0.0: Could not detect board [ 584.399746][ T8] airspy 6-1:0.0: probe with driver airspy failed with error -110 [ 584.407607][ T30] [ 584.410631][ T30] INFO: task syz.0.1484:11442 blocked for more than 144 seconds. [ 584.426177][ T30] Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 584.433470][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.442178][ T30] task:syz.0.1484 state:D stack:27200 pid:11442 tgid:11441 ppid:5815 task_flags:0x400140 flags:0x00004004 [ 584.454107][ T30] Call Trace: [ 584.457453][ T30] [ 584.460391][ T30] __schedule+0xf43/0x5890 [ 584.464822][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 584.470209][ T30] ? __pfx___schedule+0x10/0x10 [ 584.475073][ T30] ? schedule+0x298/0x350 [ 584.479466][ T30] ? __pfx_lock_release+0x10/0x10 [ 584.484501][ T30] ? __mutex_trylock_common+0x78/0x250 [ 584.490025][ T30] ? lock_acquire+0x2f/0xb0 [ 584.495115][ T30] ? schedule+0x1fd/0x350 [ 584.499527][ T30] schedule+0xe7/0x350 [ 584.503610][ T30] schedule_preempt_disabled+0x13/0x30 [ 584.509132][ T30] __mutex_lock+0x6bd/0xb10 [ 584.513644][ T30] ? bdev_release+0x15a/0x6d0 [ 584.518371][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 584.523398][ T30] ? __pfx_lock_release+0x10/0x10 [ 584.528476][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 584.533671][ T30] ? bdev_release+0x15a/0x6d0 [ 584.538485][ T30] bdev_release+0x15a/0x6d0 [ 584.542982][ T30] ? task_work_run+0x126/0x250 [ 584.547774][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 584.552993][ T30] blkdev_release+0x15/0x20 [ 584.557563][ T30] __fput+0x3ff/0xb70 [ 584.561578][ T30] task_work_run+0x14e/0x250 [ 584.566211][ T30] ? __pfx_task_work_run+0x10/0x10 [ 584.571343][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 584.577036][ T30] do_syscall_64+0xda/0x250 [ 584.581552][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.587483][ T30] RIP: 0033:0x7fa41a98cda9 [ 584.591892][ T30] RSP: 002b:00007fa41b80f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.600888][ T30] RAX: 0000000000000000 RBX: 00007fa41aba5fa0 RCX: 00007fa41a98cda9 [ 584.609090][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 000000000000000a [ 584.617187][ T30] RBP: 00007fa41aa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 584.625355][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.633383][ T30] R13: 0000000000000000 R14: 00007fa41aba5fa0 R15: 00007ffcceae1d88 [ 584.641564][ T30] [ 584.644577][ T30] INFO: task syz.0.1484:11444 blocked for more than 144 seconds. [ 584.652494][ T30] Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 584.659829][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.668592][ T30] task:syz.0.1484 state:D stack:24096 pid:11444 tgid:11441 ppid:5815 task_flags:0x400140 flags:0x00004004 [ 584.681564][ T30] Call Trace: [ 584.684906][ T30] [ 584.687913][ T30] __schedule+0xf43/0x5890 [ 584.692385][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 584.698319][ T30] ? __pfx___schedule+0x10/0x10 [ 584.703270][ T30] ? schedule+0x298/0x350 [ 584.708090][ T30] ? __pfx_lock_release+0x10/0x10 [ 584.713230][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 584.718933][ T30] ? lock_acquire+0x2f/0xb0 [ 584.723531][ T30] ? schedule+0x1fd/0x350 [ 584.728011][ T30] schedule+0xe7/0x350 [ 584.732184][ T30] io_schedule+0xbf/0x130 [ 584.736647][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 584.742031][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 584.747616][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 584.753480][ T30] ? mark_held_locks+0x9f/0xe0 [ 584.758438][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 584.764018][ T30] ? __filemap_get_folio+0x333/0xbd0 [ 584.769368][ T30] do_read_cache_folio+0x342/0x5c0 [ 584.774489][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 584.780013][ T30] read_part_sector+0xd4/0x310 [ 584.784802][ T30] adfspart_check_POWERTEC+0x8f/0x710 [ 584.790228][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 584.796314][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 584.802971][ T30] bdev_disk_changed+0x71f/0x1520 [ 584.808043][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 584.813523][ T30] blkdev_get_whole+0x187/0x290 [ 584.826989][ T30] bdev_open+0x2c7/0xe20 [ 584.831272][ T30] bdev_file_open_by_dev+0x17d/0x210 [ 584.836640][ T30] setup_bdev_super+0x78/0x730 [ 584.841416][ T30] get_tree_bdev_flags+0x365/0x620 [ 584.846566][ T30] ? __pfx_udf_fill_super+0x10/0x10 [ 584.851766][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 584.857453][ T30] ? bpf_lsm_capable+0x9/0x10 [ 584.862135][ T30] ? security_capable+0x7e/0x260 [ 584.873011][ T30] vfs_get_tree+0x8b/0x340 [ 584.877502][ T30] path_mount+0x14e6/0x1f10 [ 584.881987][ T30] ? kmem_cache_free+0x2e2/0x4d0 [ 584.886938][ T30] ? __pfx_path_mount+0x10/0x10 [ 584.891796][ T30] ? putname+0x13c/0x180 [ 584.896105][ T30] __x64_sys_mount+0x28f/0x310 [ 584.900872][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 584.906589][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 584.911884][ T30] do_syscall_64+0xcd/0x250 [ 584.916420][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.922322][ T30] RIP: 0033:0x7fa41a98cda9 [ 584.926757][ T30] RSP: 002b:00007fa41b7cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 584.935171][ T30] RAX: ffffffffffffffda RBX: 00007fa41aba6160 RCX: 00007fa41a98cda9 [ 584.943211][ T30] RDX: 0000000020000040 RSI: 0000000020004a00 RDI: 0000000020000500 [ 584.951200][ T30] RBP: 00007fa41aa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 584.959191][ T30] R10: 0000000000008087 R11: 0000000000000246 R12: 0000000000000000 [ 584.967187][ T30] R13: 0000000000000001 R14: 00007fa41aba6160 R15: 00007ffcceae1d88 [ 584.975155][ T30] [ 584.979235][ T30] [ 584.979235][ T30] Showing all locks held in the system: [ 584.989514][ T974] usb 6-1: USB disconnect, device number 52 [ 584.994129][ T30] 1 lock held by khungtaskd/30: [ 585.000928][ T30] #0: ffffffff8e1bcbc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 585.011718][ T30] 3 locks held by kworker/1:2/974: [ 585.016902][ T30] #0: ffff8881442ac948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 585.028418][ T30] #1: ffffc9000392fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 585.039713][ T30] #2: ffff888145305190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 585.048686][ T30] 2 locks held by getty/5577: [ 585.053356][ T30] #0: ffff8880366490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 585.063185][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 585.073314][ T30] 1 lock held by udevd/6146: [ 585.077923][ T30] #0: ffff8881433084c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 585.087458][ T30] 3 locks held by kworker/u8:11/6431: [ 585.092838][ T30] 1 lock held by syz.0.1484/11441: [ 585.097989][ T30] #0: ffff8881433084c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 585.109883][ T30] 1 lock held by syz.0.1484/11442: [ 585.115005][ T30] #0: ffff8881433084c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 585.124667][ T30] 2 locks held by syz.0.1484/11444: [ 585.129890][ T30] #0: ffff88802fb920e0 (&type->s_umount_key#78/1){+.+.}-{4:4}, at: alloc_super+0x23d/0xbd0 [ 585.140169][ T30] #1: ffff8881433084c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe20 [ 585.149486][ T30] [ 585.151808][ T30] ============================================= [ 585.151808][ T30] [ 585.161499][ T30] NMI backtrace for cpu 0 [ 585.161508][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 585.161519][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 585.161524][ T30] Call Trace: [ 585.161527][ T30] [ 585.161532][ T30] dump_stack_lvl+0x116/0x1f0 [ 585.161545][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 585.161557][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 585.161570][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 585.161583][ T30] watchdog+0xf62/0x12b0 [ 585.161598][ T30] ? __pfx_watchdog+0x10/0x10 [ 585.161610][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 585.161625][ T30] ? __kthread_parkme+0x148/0x220 [ 585.161635][ T30] ? __pfx_watchdog+0x10/0x10 [ 585.161647][ T30] kthread+0x3af/0x750 [ 585.161658][ T30] ? __pfx_kthread+0x10/0x10 [ 585.161671][ T30] ? __pfx_kthread+0x10/0x10 [ 585.161681][ T30] ret_from_fork+0x45/0x80 [ 585.161693][ T30] ? __pfx_kthread+0x10/0x10 [ 585.161703][ T30] ret_from_fork_asm+0x1a/0x30 [ 585.161718][ T30] [ 585.161722][ T30] Sending NMI from CPU 0 to CPUs 1: [ 585.274475][ C1] NMI backtrace for cpu 1 [ 585.274487][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 585.274503][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 585.274511][ C1] Workqueue: events_unbound toggle_allocation_gate [ 585.274529][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 [ 585.274550][ C1] Code: cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 54 2a 4a 7e <65> 8b 05 55 2a 4a 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 [ 585.274562][ C1] RSP: 0018:ffffc90000ab7910 EFLAGS: 00000006 [ 585.274572][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff815e0b20 [ 585.274581][ C1] RDX: ffff888143eb2440 RSI: 0000000000000000 RDI: 0000000000000007 [ 585.274589][ C1] RBP: ffffffff821266d7 R08: 0000000000000007 R09: 0000000000000000 [ 585.274597][ C1] R10: 0000000000000200 R11: 0000000000000006 R12: 00000000000006d8 [ 585.274605][ C1] R13: 0000000000000007 R14: ffffffff8e358200 R15: 0000000000000000 [ 585.274613][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 585.274626][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.274635][ C1] CR2: 00007fb131578ab8 CR3: 000000000df80000 CR4: 00000000003526f0 [ 585.274644][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 585.274651][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 585.274658][ C1] Call Trace: [ 585.274663][ C1] [ 585.274669][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 585.274688][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 585.274704][ C1] ? nmi_handle+0x1ac/0x5d0 [ 585.274722][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 585.274740][ C1] ? default_do_nmi+0x6a/0x160 [ 585.274756][ C1] ? exc_nmi+0x170/0x1e0 [ 585.274771][ C1] ? end_repeat_nmi+0xf/0x53 [ 585.274789][ C1] ? kmem_cache_alloc_noprof+0x87/0x3d0 [ 585.274803][ C1] ? __text_poke+0x5e0/0xca0 [ 585.274815][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 585.274833][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 585.274851][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 585.274868][ C1] [ 585.274872][ C1] [ 585.274876][ C1] __text_poke+0x8d0/0xca0 [ 585.274887][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 585.274901][ C1] ? __pfx___text_poke+0x10/0x10 [ 585.274913][ C1] ? kmem_cache_alloc_noprof+0x87/0x3d0 [ 585.274927][ C1] text_poke_bp_batch+0x3e0/0x760 [ 585.274940][ C1] ? kmem_cache_alloc_noprof+0x87/0x3d0 [ 585.274953][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 585.274966][ C1] ? text_poke_queue+0xef/0x180 [ 585.274982][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 585.274999][ C1] text_poke_finish+0x30/0x40 [ 585.275011][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 585.275026][ C1] jump_label_update+0x1d7/0x400 [ 585.275042][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 585.275057][ C1] static_key_disable+0x1a/0x20 [ 585.275071][ C1] toggle_allocation_gate+0x147/0x260 [ 585.275084][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 585.275096][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 585.275110][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 585.275127][ C1] ? lock_acquire+0x2f/0xb0 [ 585.275142][ C1] ? process_one_work+0x921/0x1ba0 [ 585.275159][ C1] process_one_work+0x9c5/0x1ba0 [ 585.275181][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 585.275196][ C1] ? __pfx_process_one_work+0x10/0x10 [ 585.275217][ C1] ? assign_work+0x1a0/0x250 [ 585.275233][ C1] worker_thread+0x6c8/0xf00 [ 585.275252][ C1] ? __pfx_worker_thread+0x10/0x10 [ 585.275273][ C1] kthread+0x3af/0x750 [ 585.275288][ C1] ? __pfx_kthread+0x10/0x10 [ 585.275301][ C1] ? lock_acquire+0x2f/0xb0 [ 585.275318][ C1] ? __pfx_kthread+0x10/0x10 [ 585.275332][ C1] ret_from_fork+0x45/0x80 [ 585.275347][ C1] ? __pfx_kthread+0x10/0x10 [ 585.275361][ C1] ret_from_fork_asm+0x1a/0x30 [ 585.275379][ C1] [ 585.275530][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 585.275540][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 585.275556][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 585.275565][ T30] Call Trace: [ 585.275570][ T30] [ 585.275576][ T30] dump_stack_lvl+0x3d/0x1f0 [ 585.275594][ T30] panic+0x71d/0x800 [ 585.275610][ T30] ? __pfx_panic+0x10/0x10 [ 585.275625][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 585.275646][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 585.275664][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 585.275683][ T30] ? watchdog+0xdcc/0x12b0 [ 585.275702][ T30] ? watchdog+0xdbf/0x12b0 [ 585.275725][ T30] watchdog+0xddd/0x12b0 [ 585.275748][ T30] ? __pfx_watchdog+0x10/0x10 [ 585.275767][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 585.275789][ T30] ? __kthread_parkme+0x148/0x220 [ 585.275804][ T30] ? __pfx_watchdog+0x10/0x10 [ 585.275825][ T30] kthread+0x3af/0x750 [ 585.275842][ T30] ? __pfx_kthread+0x10/0x10 [ 585.275862][ T30] ? __pfx_kthread+0x10/0x10 [ 585.275879][ T30] ret_from_fork+0x45/0x80 [ 585.275896][ T30] ? __pfx_kthread+0x10/0x10 [ 585.275912][ T30] ret_from_fork_asm+0x1a/0x30 [ 585.275936][ T30] [ 585.783846][ T30] Kernel Offset: disabled [ 585.788144][ T30] Rebooting in 86400 seconds..