last executing test programs: 14m15.444527575s ago: executing program 4 (id=620): syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000000000a) close(r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3b5c00, 0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x840, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) (fail_nth: 15) 14m14.369251647s ago: executing program 4 (id=628): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xe79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86g\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf17\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\tA\xed\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x00', 0x42, 0x4c, 0x0) openat$kvm(0x0, &(0x7f00000001c0), 0x48000, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x17, 0x7, 0x9, 0xc, 0x2004cb, 0x0, 0xa1d, 0x7fffffff, 0x80000005, 0x3, 0x1000000000003, 0x7], 0x25000, 0x1202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m12.988363058s ago: executing program 4 (id=632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) r2 = syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="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", 0x1e0}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x8040010) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ptrace(0x10, r3) ptrace(0x4208, r3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2007300, 0x0, 0x0, 0x0, 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) (async) rt_sigqueueinfo(0x0, 0x20003a, &(0x7f0000000080)={0x3a, 0x4813, 0x9}) sigaltstack(&(0x7f0000001040)={&(0x7f00000030c0)=""/4110, 0x80000001, 0x100e}, 0x0) (async) sigaltstack(&(0x7f0000000700)={0x0, 0x40000001}, 0x0) (async) syz_open_procfs(r3, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) 14m12.308196144s ago: executing program 4 (id=637): io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0xb01f, 0x5601}]) r2 = epoll_create1(0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r3, r3, 0x0, 0x20000000008) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = dup(r5) unshare(0x22020600) r7 = fanotify_init(0x4000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) fanotify_mark(r7, 0x445, 0x1003, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f00000001c0)=0x5, 0x4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x3, r6}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x1, 0x772, 0x1, &(0x7f0000000080)=""/126}) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x40000000) 14m12.063986453s ago: executing program 4 (id=640): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103881, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000240)="2857e5671ef0d8e3c39651a014a3a298466c68130e5b77e37f04a5cec22a4cc681c424e649ef28c1bd78afcb20e74b1ad3ac2c75e5c03189383f8e1d3e61a1", 0x3f}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000010c0)={0x0, 0x40, 0x4}) clock_gettime(0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000100)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x3c}, {@loopback, 0x4e22, 0x10000, 0x80000c24, 0x6, 0xfffffffc}}, 0x44) 14m11.835130974s ago: executing program 4 (id=642): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x1, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1840}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x27f}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 13m56.769710531s ago: executing program 32 (id=642): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x1, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1840}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x27f}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 13m46.351952796s ago: executing program 1 (id=745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) syz_emit_ethernet(0xda, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x64, 0x3, 0x0, 0x89, 0x0, @private=0x2, @dev={0xac, 0x14, 0x14, 0x3d}, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0xfc, [@multicast1, @multicast1, @loopback, @rand_addr=0x64010100]}, @cipso={0x86, 0x48, 0x3, [{0x7, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x7, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x20, 0x9, 0x8, 0x0]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x71f43, 0x20b}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) 13m46.116682751s ago: executing program 1 (id=746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f00000000c0)={0x80, [0x1ff, 0xff, 0x6dc, 0x1b, 0x9, 0x8, 0x1, 0x1, 0x5, 0x4, 0x7, 0x10, 0x1000, 0x57, 0x6, 0xa, 0xfff7, 0x3, 0xb53, 0x4, 0x7, 0x0, 0x200, 0x64d, 0x0, 0x1, 0x45, 0xb, 0xd4, 0x759b, 0x4, 0x2c, 0x9, 0x10, 0xfff, 0x6, 0xf, 0xfc, 0x9, 0x3ff, 0x2, 0x3, 0x201, 0x4002, 0x9, 0x8007, 0x6, 0x6], 0xa}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x902) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x0, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "1deeb4f676da4962", "7ecb1ea357743604eb711fa022393075", "87b25346", "a5d8c5f811f00575"}, 0x28) recvfrom(r8, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) 13m44.948311948s ago: executing program 1 (id=747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x8f8}, 0x1, 0x0, 0x0, 0x8000}, 0x148a1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000000000001a000000200001801400020073797a6b616c6c65723100000000000008000100ba10afa6e8908a963675e69c2886", @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x4000800) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@private2, 0x6f, r6}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) fsopen(&(0x7f0000000280)='erofs\x00', 0x0) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xfffffffffffffdf5}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000b40)="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", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000004900)="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", 0xbd1}, {&(0x7f0000002f80)="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", 0x2db}], 0x8}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0, 0x38}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13m43.477393486s ago: executing program 1 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000400)={{&(0x7f000044b000/0x1000)=nil, 0x1000}}) chroot(&(0x7f0000000500)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x3b, 0x1333c135, 0x2, 0x4, 0x3fffffe, 0x70, 0x0, 0x0, 0x0, 0xb2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m43.139692469s ago: executing program 1 (id=755): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}], 0x2, 0x40000121, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/181, 0xb5}], 0x1}, 0x8021) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xb0, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_NAT_SRC={0x90, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x7}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="b5a45f19150f759570253f3687be4584942117689002d6424082224be21a5f1745c935b88df3f0f47967038ceead3b65e86f0c898df8f10bddc3980634e4567b470212307ef550a321ec34325ea421b21d905646e7ef8f1e29b715701053b2c5350d4dfaccd77c57323979b24f4cc5f2e02b219a9b4630ad5208190acb3fd71351", 0x81, 0x4040, &(0x7f0000000100)={0x11, 0x1b, r4, 0x1, 0x62, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4f9e2b3e73279198}}, 0x14) 13m42.912376977s ago: executing program 1 (id=758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x88, {0x0, 0x1}, {0x75, 0x2}, @const={0x2, {0x2, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r7 = socket(0x80000000000000a, 0x80000, 0x20000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000020000801000000180000000200b900861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000001280)={0x0, [[0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f3], [0x2, 0x9, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xc3d3, 0x0, 0x0, 0x20001]], '\x00', [{0x0, 0x3}, {0x1000000}, {0x3, 0x4}, {0x0, 0x803}, {0x1000}, {0x0, 0x1000}, {0x200000, 0x3}, {0xffffffff}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0x10000}], '\x00', 0x401, 0x0, 0x0, 0x2}) recvmmsg(r8, &(0x7f0000000d80), 0x0, 0x10162, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, 0x0, 0x0) 13m42.399140576s ago: executing program 33 (id=758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x88, {0x0, 0x1}, {0x75, 0x2}, @const={0x2, {0x2, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r7 = socket(0x80000000000000a, 0x80000, 0x20000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000020000801000000180000000200b900861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000001280)={0x0, [[0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f3], [0x2, 0x9, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xc3d3, 0x0, 0x0, 0x20001]], '\x00', [{0x0, 0x3}, {0x1000000}, {0x3, 0x4}, {0x0, 0x803}, {0x1000}, {0x0, 0x1000}, {0x200000, 0x3}, {0xffffffff}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0x10000}], '\x00', 0x401, 0x0, 0x0, 0x2}) recvmmsg(r8, &(0x7f0000000d80), 0x0, 0x10162, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, 0x0, 0x0) 2m30.856365165s ago: executing program 6 (id=3387): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'virt_wifi0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0x8001, './file0\x00'}}) r1 = syz_clone3(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009f00000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2}, 0x90) ptrace(0x8, r1) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) ptrace$pokeuser(0x6, r1, 0x569ac8ff, 0x1e) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'virt_wifi0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0x8001, './file0\x00'}}) (async) syz_clone3(0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009f00000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2}, 0x90) (async) ptrace(0x8, r1) (async) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) (async) ptrace$pokeuser(0x6, r1, 0x569ac8ff, 0x1e) (async) 2m30.373551122s ago: executing program 6 (id=3389): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) (async) r3 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100fe0f000003000000000000001300000008000500", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 2m27.940204043s ago: executing program 6 (id=3394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000009, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) recvmsg$unix(r2, &(0x7f0000000600)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000700)=""/115, 0x73}], 0x3, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}, 0x22000) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c010000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08010980040102800c0001"], 0x174}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x13, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0x85, 0x8, "ce94316bca24523e6e3e7fd7c36e9b1be20eb7da654abf9e3c57a7ddbf3337be1e478ac676a83a4e0ce0dbea436a4c1c120fc6fee8b8fe5e2208e0b3a12d631ea2563abf4586f099e72b313ffaf9578c20184824b67f1a53c3d9bccaa8ea7016280ab505762fa6284c2335a52770de0fbf6b152a005cca609b10be8e25c004dc37"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000001) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) fstat(r0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2m25.942762175s ago: executing program 6 (id=3399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x28, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc, 0x14}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 2m25.752143419s ago: executing program 6 (id=3402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}}, 0x0) 2m25.608947014s ago: executing program 6 (id=3403): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33424752}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0xa9, 0x9, 0x0, 0xfffffe0800000001, 0xfa0e, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0xfffffff9, 0x1, 0x4ddf, 0x1}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @rand_addr=0x64010101, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r7, 0x29, 0x21, 0x0, &(0x7f00000001c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x44000000, @private2}]}, &(0x7f0000000180)=0x10) ptrace$getsig(0x4202, 0x0, 0x5, &(0x7f00000011c0)) 2m10.354015205s ago: executing program 34 (id=3403): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33424752}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0xa9, 0x9, 0x0, 0xfffffe0800000001, 0xfa0e, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0xfffffff9, 0x1, 0x4ddf, 0x1}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @rand_addr=0x64010101, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r7, 0x29, 0x21, 0x0, &(0x7f00000001c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x44000000, @private2}]}, &(0x7f0000000180)=0x10) ptrace$getsig(0x4202, 0x0, 0x5, &(0x7f00000011c0)) 50.032228157s ago: executing program 7 (id=3686): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000140)={0x4, 0x0, 0x1000}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x400102, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={r5, 0x933b}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000640)={r5, @in6={{0xa, 0x4e21, 0x8, @local, 0x5}}, 0x7fff, 0x10000, 0x5, 0x5, 0x12ba}, &(0x7f0000000440)=0x98) r6 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/83, 0x53}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f0000000080)="47d6b73602fb2bd44a32460059450a408af5d793880d010a7d82197e910908c134a6db335c0e765caea7ced22a6007e27a30fcfc6907df63e970dcff8aeef1108a8ceb87a21617790c10f314e8e29afda166c4d97a46468f624b4e24b9de2776c1e6e3266b1902ee91ac484a2a2b9bbd512ef36266ed6ecada427bb37794779eb93ecb66e7a9cf548f3216496c8e9a70955cd8b09617a8d315e5310b51db0c6f9b3e258931d1198fbbe156cdb63434e1d17f923d69ee", 0xb6, 0x4065851, &(0x7f0000000340)={0xa, 0x4e21, 0x10000005, @local, 0x6}, 0x1c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) 49.633186004s ago: executing program 7 (id=3688): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x8000000000000001]}, 0x8, 0x80000) poll(&(0x7f0000000800)=[{r0, 0x200}], 0x1, 0x1ad) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) r5 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x2aa443, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000000c0)=0x40) (async) write$dsp(r6, &(0x7f0000000180)="000d3d4b70619d999b8e", 0xa) (async) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) (async) getsockname(r1, 0x0, 0x0) (async) fanotify_init(0x200, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r7, 0xb704, 0x0) 46.464375909s ago: executing program 7 (id=3699): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x8, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x22, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00160000000094c000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000050000000100"/28], 0x50) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x806, 0x0) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sendmsg$nl_route(r1, 0x0, 0x4404c004) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r8, &(0x7f00000003c0)=""/146) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f0000000200)="e30080670000ec67838717bd86dde148f0630962bb", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xd}, 0x50) r9 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r9, 0x1, &(0x7f0000000040)=0x85) 44.924504638s ago: executing program 7 (id=3704): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a", 0xa0, 0xffffffffffffffff) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 42.32149603s ago: executing program 7 (id=3712): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f1020"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) kexec_load(0x80000000, 0x0, 0x0, 0x160000) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200080d1) syz_usb_control_io(r3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000100)="11e5a68e291a6f297bca1e72499a1c0b73c1486bc5cd08a7132b5dc14cefffc62d", 0x21, 0x40, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x109202) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)={0x0, 0xe4, 0x5d}) syz_open_dev$tty20(0xc, 0x4, 0x1) 22.505697408s ago: executing program 35 (id=3712): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f1020"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) kexec_load(0x80000000, 0x0, 0x0, 0x160000) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200080d1) syz_usb_control_io(r3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000100)="11e5a68e291a6f297bca1e72499a1c0b73c1486bc5cd08a7132b5dc14cefffc62d", 0x21, 0x40, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x109202) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)={0x0, 0xe4, 0x5d}) syz_open_dev$tty20(0xc, 0x4, 0x1) 15.070772187s ago: executing program 5 (id=3749): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@newqdisc={0x24, 0x24, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff7}, {0x4, 0x6}, {0x1fff2, 0xfff0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x40010) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) (rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x8000000, 0x3000, 0x1}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in6=@private0, 0x4e20, 0x8f0, 0x4e24, 0x0, 0x2, 0xa0, 0x20, 0x33, 0x0, 0xee01}, {0x9, 0x7fffffffffffffff, 0x6, 0x80000001, 0xdf, 0x9, 0x1, 0x4}, {0x4, 0x6, 0x7fff, 0x5}, 0x10001, 0x6e6bbc, 0x0, 0x0, 0x1, 0x2}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@loopback, 0x3502, 0x3, 0x0, 0x9, 0x0, 0x2, 0xf75b}}, 0xe8) 11.204067459s ago: executing program 0 (id=3759): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x200000, 0x21fffd, 0xc, 0x0, 0x4, 0xfffffffe}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x10001}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r4 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r5, 0x7a5, &(0x7f0000000140)={{@host}, 0x1}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r4, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 9.33387928s ago: executing program 0 (id=3762): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xfa) (async) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x10000009, 0x4, 0x0, 0x8, 0x9, 0x8, 0x11bfffe}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@deltfilter={0x38, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xc}, {0xffff, 0xffff}, {0x0, 0x8abf833ddfa404b6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4c844) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x4}}, 0x10, 0x0}, 0x240448e1) socket$inet6(0xa, 0x800000000000002, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) 9.256716845s ago: executing program 5 (id=3763): r0 = io_uring_setup(0x4166, &(0x7f0000000140)={0x0, 0x4, 0x2, 0x3, 0x165}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffe90, 0x10001}}, 0x28) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd47, 0xb, 0x81, 0x117, 0xfff4, 0x7f, 0x8, 0x40000080008, 0x4bfe, 0x440004000713, 0x8, 0x0, 0x401, 0x5, 0x9, 0xffffffffffffffff], 0x39550adb9eb64ef, 0x348800}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0xa, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(0xffffffffffffffff, &(0x7f0000006b40)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) ptrace(0x10, r6) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x7e}, {&(0x7f0000000580)=""/154, 0x9a}], 0x2) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x5, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) read$dsp(r3, 0x0, 0x0) close(0x3) 7.78223752s ago: executing program 3 (id=3765): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20005032}, 0xc, &(0x7f0000000300)={&(0x7f0000000c80)={0xe4, 0x42, 0x4, 0x70bd28, 0x25dfdbfb, {0xf}, [@nested={0x4, 0x5f}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x14, 0x144, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @nested={0x2a, 0xf0, 0x0, 0x1, [@nested={0x4, 0x86}, @generic="514b18a221d11070808aad918c2cd454b68151d120ff5247658cf468a79637c1f71b"]}, @generic="61b1841d59c232ac5a7f13a9f902624d3c0a0f3c15a2e868d8cf21f771c8a4a65826c4a9132f344aa4ceb1f2d11253ec5a7ac24aa3db272c7bda247d0b01763dee2440d833e261dd6c7fd7cb8dc1d69f71912cc413d8cc1468cb7af54d4f7dc3e665e4241fa8b2e728eb930de4f28ec9cf4a331b8ee1a66b"]}, 0xe4}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0xe7, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_usb_connect$uac1(0x0, 0x7b, &(0x7f0000000580)=ANY=[@ANYBLOB="1201010000000040392ad43f400001020301090269000301f180400904000000010100000a2401780e13000201020924060305010600800904a160188e2daaa6f704494f0100000102000009040101010102000009050109ff030307ee072501042802000904020000010200000904020101010200000905820940"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) 7.027766412s ago: executing program 2 (id=3766): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) unshare(0x2040400) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x4, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0x0, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x80000008, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x81, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x2, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) 6.980300587s ago: executing program 0 (id=3767): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88840) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2024) (async) lseek(r1, 0xfffffffffffffff5, 0x1) (async) r2 = socket$inet6(0xa, 0x80003, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x1) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000021c0)={r1, 0x1, 0x0, r1}) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x80, 0x6c}, {0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bb9, 0x1}, {{@in=@private=0x10000000, 0x0, 0x33}, 0x2, @in=@rand_addr=0x64010101, 0x3, 0x3, 0x1, 0x7, 0x0, 0x0, 0x1}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) 6.578613525s ago: executing program 2 (id=3768): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fd, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x49f2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x1000009, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x10008, 0x7, 0x1, 0x4, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0x3, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0xfffffffb, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x40, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xa, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x7, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x10000000, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x5, 0x0, 0x109, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xea, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x1, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x5, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0x3, 0xfff, 0x8, 0x9, 0x7, 0x7, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x5, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x7, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x40200, 0x0, 0x9, 0x8001, 0x2, 0xe, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x1, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x4, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.82443796s ago: executing program 5 (id=3769): ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f00000000c0)={r5, 0x0, 0x7, 0x8, 0x19b, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001180)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001300)="997c0871dd59232bcfdd74d0951203fafc57c569b6a5b15b17b50307db7e617d671c7590ef975de46807c4bc251555781f6d703897b324283f448aa15e4795000bc798511ed1684ba23fd5b8400643d8578566555a99bb699034400cd33c51edc2fe27e594c809759f6b3df10e31865e0091c5aa24aebc9112e8b3172e23b20ca3330d9b6e97ea37ac00b7e6448016cf42a4360a1c111695d33d17af439684ab13446f551969e6145aa804c4c4544235894836ab6b0ab6dfd2b2a06dd452593e027d3d290f2e45668347a6a51dd49d4c3f57d79ed2c991c4ce3a67b583c3849bf6d393170bc4e5ee591e8f216b88823b11cbf8dc588960e12431234de17481b55f17353451b4f2cbbc8f79f87c57b6b53ad8a65798faf6616142af9a24e817976e5cddbf29e93f3f44fb2f2dfd705cadb06833b84774f9c3e7eb93b43e9989725bf8e079ab628159eb645868ba00fe729fc2eaae5a35c254bb48e1e0923026240e576579ddfde40a3f4bc01df46346af0487ae32aff74e68094f9e28d3f64da9d70c7a98975296c868e4f48ae2ff011c7a2524e15a2573805f130712fdc973913611cc3bbdbb03931ec471e9b6b0acc3ae797f7c88d51992e679f6831caaf159029cab4d22cc42f09dcf30717fbab5e5f62f588bfbf78a1b04c80f661e61315feaca9debc78a21f9ab1860345291d6342c6d2ee881ca61d90f28ad4cadaee41da7e508dd5de563f02b1fb5125f998db6862ac923628985a24bfc7db63ba352a0d4362ee9fae972b6aca538dbbac688e7c62e0670145918c3f17bb38af6390cc077315aa475c005158e11665409cdd9c03a1578e0d60d2f03730d9ded68586897efa733c7077e609232301876f2962b227cd4c11c1e8f58fbbf43539c9b56e1aecb7a189eca0cdbb670ce0bc43d286f6d174745124cbb7bd50cf28553d177000de3127742b3c27015c034cc471941a1cb179c6726d5792593c75ed14525089d6ec1d55e1344924ab8fe246b05b5a208f1eac846cffbdf5e55d851e75e9532c7581904cbc623e62e371bbbae53e63530740320d4b9fdde20f536c2c7a3cad63cea799bc3475267debc8214ed71a0efe46e66dd9074e813c536a3cc8c8a64b9d89033c353d852a8f009e9f2a19a8bd9f092f8acd400b28bae40f1145bbc9e3f617ebb5a461135fa4771e2819d1f1378741e8c6f0eb22dd5a22a46b15f48c88b8238d86f4aca94c9d8ec93ec061a451f0da37095feccc2fddfc2d4e1ca3d5f092d997f5a93ea065ece9df6ef70510df7039117ff325f13c3cfc3a103834a5dc79acb66f7c0f074cd146739655b4053d0ea9fcfcec0d17876172c5ea2145e783f66b0237c154424ba8464df887cc6a96cb7a2f670080d0a93fb54089d4c3efc034be0fe6561dd2292a7c739ccdbc95e964e417e3de625ec96668d4a22cdac1d5ac76785cf5c927500713eb9a8ab7d537699eb63f8184b1d6bfac5367997091c9149e70a112ab3412b036206d33d0c441a9fcec08c4f4fd0ddc3f4d1f859c0fcbd38da5d95979c8ad48459585148ad4d75748dece943c7db96d3579a8fcd4acef7961b03944d6b9891c5cd49fbc3bee256410963a192ac531a6b24e810a341bd98c0e2d99e7ef9b634b48b680dbc8504e7f1f4c885caa8441e22c019aa7a668a19b87ac371a4a82019d85dd508588c173787d4e1ded797fea4d18775d753c498bc68d9460396c74fd908495c761907f4a362e384e49934d37cb543a73225171c8a1a831c0f0fd21ae64a6b2313618a676b7062274377ad989e67b4babf20ad415fa43253f58099e85dac27c2176ae6eebe25de04edf6310c9a94399c8aedd186f1e55bc1c20c5dde6724f8eaa17e4dab258334af50e12592a081dcb4ed32d23e0b72b8d28b537236fe14deaf804c3ff52d313bfa324f947aabc9bb1c20f41383895fee29b031952fba53566b87016d3ab365fcf99309367e5dc7699ad6862878bae675cdb77ae455442454178aab2e1bad2bb88eae9e31846475a5a0c3c95bc46566ac4e0e97ffa28b900441b6ca8ddfff3744ead124d17dc2431e0f345121179a705f442ca96c60d79064747bf198e3a65fd86e45d058c52f9bdd2a27b47811223de13d17cf9f93a21aac331783320f1f1b32824f6f2296e9aaeb6fa65dbf510237d65ae834eb7bac06a11915ff747d2bfe740013c7f81000890ac9d776e226546e485b19311aeb90fe73c11850963d3d93dbccc9d017f1d9bc2c9536df7a50f7058199102d04b83a67bba990b791698c4df1f5b9b13f099c8c5f017c2d6999bc94b70b57c5c495ebe98263c89e488a1d75c3e642fc4e01297f89cf03911dfe849b700e23474a6282c0cd3cd7e2ca421789a6011c074ac21838f64c704aa7eb5387884e254a290509becef6e87016d039f3539691d6739675e32b940f019985751b3bd9383cbc6343908c1ad3f3337759a3d301d6d9fd87cbfb797517bdaf30a3883977ed3e868c79ba03ebe7adb95f0217066708bf13beb5633357ad7d0e4cc899dfa326f78f3b6e477ff4c73275f6d9d718b5327f33904c347b796cd99730e604457796db16d21849e681e2de6b868837f22cf44e0596a1d3a5a6e7306d2058c0b0ebdb9ceafd3b45df40f7c147e5c15a2cc510bec6a220ee227ac93df9f00ebea0e77652999cb5c34f766b631b27bf9a99a40188d15e2924860d519924396f793686f3a0dab62522692b4d513d4382b84bc0f049daeae35f75bb6eaa20d6b5cf5c31548f3d48d6f7e87698af3fd51c8f82ba9ebac4d4cec4daefebfcf4a030271c03c726052eeacc4fb3957c3c4ceb7214cfe26ebb192bac2a63a0fc6bee5dce708a7bbb2e41ab1f12032045d85c5b5c16e8161ec3eb021e5bc7b442721ec6ae6515ff07629e4ebaa5e9223b5d0e840c84b0c8f875527f8d57b445e94a0f66391b445e9fe00a20b1a8f66a05bd3d90be738b47eea1456df6740e365aef8ec46a750afb93e1a8b14e06bd2a193f8c3c8a43005afd32d4a827b4869eb613491d97b415fafc3a73a9c20837793dbb24ef82bfb4ae6f629a26c08d26ed4e896f9507f5b2d51b74615d9de69e5ee7d761cd4b4500560a91b47352b7a00bc7a1344803515ceef40114529e0805720013ac24a7c515e29498d9d536f864a30149fc6ad49ad97f624fb0bd5128a28d33861116f30e5fff16282fae749b5244b37bc0e75b8138162dd03edaf8e902456b3e837804cf8d91c57d467aa16c824ec8302ce4e4ab3c333f23cca9d0154338cb13ab121944f7eb729ed882794eb4ebbbc0d229bfe6bced845cb8e20ca72aa87960a3b33a3af11d5b26ab059a26c0b4193660c6ca3660cace7b1a0071e15bbbefbaf2a5cad17dca0f51970be4a6b43b386507261b2e6af7e939a01b281b7cb813acec20354de6942d8c87a7243b7511116ea12935fa5590c5417be30d416f0558d511a78834ea01dbb216350343cdcfcb082f227e36209c4108ccf95393ae6252ad638e75c9621ab49721037418d1436cf0216bc58e3c687c314e9d24ac64c8be29089603789c6250c178d5445f793cb26df58a4c7901ffdacd4e51189fe9a481f6fd78321c7181f018b49d4fb457ac6542f452d535241dcf0e543d621804328e9d4dbc669f49f6f814f29184bf00402c6c43d22f1d0c1ef1a088a4d12de3312707ac453e8ec92ba99e87650c6f48261368be7124c4b5ad4b9cd2cb189e46058c7692bdddb34c7f8db97e395b39969e2d0e81a00be0d0852cada051b0cec8ef9846ea14aaccf6626c3bb92e72dc6165032313253b7aab867438ad38501ba67bce4fff609dc14244310baf72581c78caf5e69a7b1c93307de38363653bc06de70f5744ba657e901ece15b0f3aed93165759bcafa438ac45e552740e30cac910fff90e0a42a793dabcb17580e2b4b99b3512ebe108cb54eb7d7b21e15bce3bd6013143a40cf4cd00b908f40a009b9aab045b63f01ca8f0b6683056b52a5542758c012669b18eb18b8b5a8e38a36c7bc067b8a072157401fac46a8d244ba274d34c63d8236e08e1d2346214efc40247197ade7ef08c676a4f7fce778804e0fb4b46597e1c241b2567b2b921674379aec0e36b95b766819e68ca25a624e4f9f7161b1d8209ae502cc432304301aa065ba83b06b70a9fb67b97bbf251ec5d69d84dbc6a6d64d602d9807ad203d475f10cfbfb12f15ca97fe8b10c04b0c2153b4d76785e78c654d995d3fcf7a8e480bf0fba54d177e60e8cf757a586f31d80f2a92441262bb00482a1ff1ebdccf651f82bea37ea0ba169e800903ed47fa66509b51f28863d5474476b7296aede7215989b288694336b877f0e811135d889333b81bfc5ea944b5cb2ca9bffea409e06a77989348e27e2b2a545395ea044608379a8f7b2f84200a9af3a36f6dbf7d16a3336300a1bcc8ceb0e28ef7f09472679c29c8f38eab60222438f8950fb084c834a6bb1af759e9b6f865cf258980d0798d3ccc7aac8475c115b210dea195ebe70e4fdf9dcef5ab50b8f220bde3aca901478397e18b5cb0ae37c493621a468b2b341ec498448417fa1216dae4a47fec56e5a6165c3643ecf27de47d18c93e85685ae9520576068897451d1e8aed70cc3f17d3df93ec372c292cdf32e2b5119da3b4719095672687f67af4b0942a98142080c5fd8cf27d0157d7e0c43b0f9cb95282c86546d822dff1da75f49aaccd5223e1c671", 0xd09}], 0x1, 0x0, 0x0, 0xc000}], 0x1, 0x44051) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.924811649s ago: executing program 0 (id=3770): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x1138c0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80d00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c660fc73366ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0xff, 0x5, 0x9, 0x0, 0x8, 0x3, 0x1, 0x6, 0x7, 0x7f, 0xa, 0x0, 0x0, 0x3, 0x0, 0x6, 0x7, 0x6, 0x80, '\x00', 0xc9, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x4, 0xfff}, 0x0, &(0x7f0000001340)={0x8000000000000002, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x6, 0x1, 0x2}, 0x0, 0x0) r3 = socket(0x2d, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4000014) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8014) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xff68, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 4.914188321s ago: executing program 3 (id=3771): r0 = socket(0x3, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="00000000100000001c"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) open(&(0x7f00000002c0)='./file0\x00', 0x66842, 0x6010461ec2d22531) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000340)='./file0\x00', 0x203) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000080)={0x6, 'veth0_to_team\x00', {0xf6}, 0x7a5a}) 4.608738926s ago: executing program 3 (id=3772): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet(0x2, 0x6, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x1a8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, 0x9, 0xe, [0x29, 0x2f, 0xd, 0x12, 0x38, 0x13, 0x3f, 0xd, 0x1e, 0x26, 0x3d, 0x2f, 0x29, 0x2a, 0xd, 0x3d], 0x2, 0xfffffffb, 0x8}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0xffffff00, 'veth1\x00', 'syz_tun\x00', {}, {0xff}, 0x33, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x2, 0x1, 0x5, 0x3], 0x4, 0x3}, {0x3, [0x0, 0x4, 0x4, 0x7, 0x1, 0x5], 0x6, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x6) socket$netlink(0x10, 0x3, 0x4) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="47c7a398366ed6526d4901dd70d360d7c4b95fc4c6d3ca979259d1f2d43669133b1ff90fbce2b950e84f3793c04de7f0895f110648c313389c528bc1e40133f6e4a76b2a8423687231f34de80b25a1e673d993619764941c5028c22d03277dfa2333d0158c6c8c9ba72284755fea266da48c2e1983019020c778d2a93e6e2f", 0x7f}, {&(0x7f00000000c0)="535ec32f2e899df2e3df1b2f298e955a6142e2e1365f6c4d9e0189ecefb49e64df94f73a4bdfd487eae61e8f85ec609a53ccc1e5fbf5d278eee1bb80a09dffe6a6d88ea2ce26482456dbd77e2a24d4dc4a6bb6", 0x53}, {&(0x7f0000000140)="3150765b08137bf45904a07ba4d70cb41f6116cb3fd57c764607c45a9a969f9d007f1ddd38a61997647b5279249308de8b11a9b2ac1e90e04379bb3e09cfe453f353ad59ed816e05500e4b9a72292a3439207c3dca29656603a86d79291b75ba5242639ad52d5b3082ef953851fced201a490bc1227fee4895765d8c54ad6051e9ef619f00e7e1d3507ed517ebb05a572aa7f4d14696fa40", 0x98}, {&(0x7f0000000200)="f89548ac033e6e90d76cee673b4aee0dbc7fe907f1f752102bb3c6920c8c78ee10f393f696ce700170a1712563435ee6e1656001198a8bc79cf1492c9384b1fb83b9bbce06413ae2489f77f6e0b54a", 0x4f}, {&(0x7f0000000280)="f5", 0x1}, {&(0x7f00000002c0)="29bd5c1fb5fae8b6e01562ca8e459d5e18661b25a4c2b5e01a127221aff0b3dbe9871c5b6f932f83119dc34bf2adcb66f421db34fc61ab35d556ced5fe0d476f2465cc5656daf66bb7c22e010705803083671a2c3a693e161f82604416b2aef630fde0b0b32ce1dde5b9cf4c2c065d765a60076b0d1d42e4d3dc642c", 0x7c}], 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) socket$inet(0x2, 0x6, 0x8) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x1a8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, 0x9, 0xe, [0x29, 0x2f, 0xd, 0x12, 0x38, 0x13, 0x3f, 0xd, 0x1e, 0x26, 0x3d, 0x2f, 0x29, 0x2a, 0xd, 0x3d], 0x2, 0xfffffffb, 0x8}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0xffffff00, 'veth1\x00', 'syz_tun\x00', {}, {0xff}, 0x33, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x2, 0x1, 0x5, 0x3], 0x4, 0x3}, {0x3, [0x0, 0x4, 0x4, 0x7, 0x1, 0x5], 0x6, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x6) (async) socket$netlink(0x10, 0x3, 0x4) (async) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="47c7a398366ed6526d4901dd70d360d7c4b95fc4c6d3ca979259d1f2d43669133b1ff90fbce2b950e84f3793c04de7f0895f110648c313389c528bc1e40133f6e4a76b2a8423687231f34de80b25a1e673d993619764941c5028c22d03277dfa2333d0158c6c8c9ba72284755fea266da48c2e1983019020c778d2a93e6e2f", 0x7f}, {&(0x7f00000000c0)="535ec32f2e899df2e3df1b2f298e955a6142e2e1365f6c4d9e0189ecefb49e64df94f73a4bdfd487eae61e8f85ec609a53ccc1e5fbf5d278eee1bb80a09dffe6a6d88ea2ce26482456dbd77e2a24d4dc4a6bb6", 0x53}, {&(0x7f0000000140)="3150765b08137bf45904a07ba4d70cb41f6116cb3fd57c764607c45a9a969f9d007f1ddd38a61997647b5279249308de8b11a9b2ac1e90e04379bb3e09cfe453f353ad59ed816e05500e4b9a72292a3439207c3dca29656603a86d79291b75ba5242639ad52d5b3082ef953851fced201a490bc1227fee4895765d8c54ad6051e9ef619f00e7e1d3507ed517ebb05a572aa7f4d14696fa40", 0x98}, {&(0x7f0000000200)="f89548ac033e6e90d76cee673b4aee0dbc7fe907f1f752102bb3c6920c8c78ee10f393f696ce700170a1712563435ee6e1656001198a8bc79cf1492c9384b1fb83b9bbce06413ae2489f77f6e0b54a", 0x4f}, {&(0x7f0000000280)="f5", 0x1}, {&(0x7f00000002c0)="29bd5c1fb5fae8b6e01562ca8e459d5e18661b25a4c2b5e01a127221aff0b3dbe9871c5b6f932f83119dc34bf2adcb66f421db34fc61ab35d556ced5fe0d476f2465cc5656daf66bb7c22e010705803083671a2c3a693e161f82604416b2aef630fde0b0b32ce1dde5b9cf4c2c065d765a60076b0d1d42e4d3dc642c", 0x7c}], 0x6) (async) 4.223935337s ago: executing program 0 (id=3773): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x16, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003fd000000ec03"]}, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.189317501s ago: executing program 3 (id=3774): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x0, 0xbf00}) r4 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) preadv2(r4, &(0x7f0000000680)=[{&(0x7f0000001380)=""/117, 0x75}], 0x1, 0x8000, 0x4, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=@polexpire={0x120, 0x1b, 0x20, 0x70bd27, 0x25dfdbfc, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x1f88, 0x4e20, 0x8, 0xa, 0x0, 0x0, 0x16}, {0x6, 0x4, 0x5, 0x401, 0x1, 0x100, 0x7ffffffb, 0x1}, {0x3, 0x6b5961a9, 0x0, 0x81}, 0xd1a10, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6}, [@mark={0xc, 0x15, {0x35075a, 0xc312}}, @offload={0xc, 0x1c, {r7, 0x1}}, @replay_thresh={0x8, 0xb, 0x5}, @coaddr={0x14, 0xe, @in=@broadcast}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010102, @in=@loopback, 0x0, 0x2}}]}, 0x120}, 0x1, 0x0, 0x0, 0x48882}, 0x4008000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0200001800dd8d0000000000000000020000000000000500000000060015000500000098021680ab0101"], 0x2bc}}, 0x0) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYRESOCT=r8, @ANYRES16=r5], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x7, {0x7, 0xe, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x22) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x4100, 0x1, &(0x7f0000000c40)) 4.168644188s ago: executing program 2 (id=3775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="210000000d000000060000000400000018090600", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98848cd14e9a88d4ea84136ad1b0fa"], 0x50) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000001c0)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x812}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x810) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.023924444s ago: executing program 5 (id=3776): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x100000b}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 3.714092642s ago: executing program 5 (id=3777): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f0000000840)="94", 0x1, 0x4065851, &(0x7f0000000340)={0xa, 0x4e21, 0x10000005, @local, 0x6}, 0x1c) (fail_nth: 13) 3.624408869s ago: executing program 2 (id=3778): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() mkdir(&(0x7f0000000200)='./file0\x00', 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001", @ANYBLOB="30d96f"], 0xd4}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) 2.940161664s ago: executing program 5 (id=3779): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000004300010029bd7000fcdbdf250a000000080002000b00000008000200000001000c0006800800080000000000080004000700000008000200a68a0b30050001"], 0x50}}, 0x814) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x1ffc, &(0x7f00000000c0)={0x0, 0xdffd, 0x10800, 0x0, 0x2e9}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x4, 0x800000004, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x4265c2, 0x0) write$proc_mixer(r8, &(0x7f0000000180)=ANY=[], 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) 2.545789169s ago: executing program 2 (id=3780): pipe2$watch_queue(&(0x7f00000001c0), 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_open_procfs$pagemap(r1, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x3) ptrace(0x4207, r1) ptrace$poke(0x2, r1, 0x0, 0xfffffffffffffffd) r3 = socket(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0xfeffffff, r3, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) sendto$inet(r3, &(0x7f00000000c0)="d302491d7a3757589d96dec105964ee31a9a2be85ae6757dd44c7efaef45d38eeabbd3709c9d54af975cb80ed9219b4e5424622953e16661267963d8ed7b1d1dd41ebd4ab7945c6d35771808c3ee9f91672de4525428394f528be5f1aeb6ee50ce53f2f32248dc0fafbb570b40d9194f68c911df1b0ee45204bc5932462c3d8999c6cd39edd53c6580b9cf28", 0x8c, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x800, 0x4, 0x5, 0x0, r0}, 0x50) 2.064709576s ago: executing program 2 (id=3781): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x13}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x8, 0x5, 0x178}, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_complete(r5) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) clock_gettime(0x0, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x8000, 0x0, 0x4, 0x40, 0x7, {0x77359400}, {0x2, 0x8, 0x1, 0x81, 0xe, 0xe4, "96214627"}, 0xfffffffa, 0x2, {&(0x7f00000003c0)=[{0xc, 0x7, {&(0x7f00000002c0)}, 0x9}, {0xfffffff9, 0x81, {&(0x7f0000000300)}, 0x9}]}, 0x2}) io_uring_enter(r4, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 1.097043049s ago: executing program 8 (id=3727): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r2, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xffffffff, 0x7, 0x65aa}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8995, &(0x7f0000000040)={'batadv0\x00', @random="010021201000"}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000380)={0x0, 0x10, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f00000003c0)="39038a2f652190955e63cca784a8de0676a4c8f6a050fd4733802d74226efa7d2b5f709fded5a97aef3517f95b2027e7f15b3222294be7831b789211bd0ded2029ea", 0x42}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@gettaction={0x5c, 0x32, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7a}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd15}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x20000051) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) 596.506186ms ago: executing program 3 (id=3782): syz_open_dev$sndctrl(0x0, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x1, 0x0) r2 = socket(0x1, 0x803, 0x0) (async) ioctl$SIOCGETSGCNT(r0, 0x89e1, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32, @ANYBLOB="14000200"], 0x34}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x200000000006}]}) (async) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f"], 0x4c}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x12) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f00000001c0)=0x7) readv(r8, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/130, 0x82}], 0x1) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 349.088083ms ago: executing program 0 (id=3783): r0 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000001800000008000000600000010"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x20) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000000)) (async) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000000c0)=0x6, 0x4) (async) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) accept4$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, 0x407}, 0x10) 0s ago: executing program 3 (id=3784): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1409, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x7f) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_mtu(r5, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x100, 0x1, 0x1ff, 0x4}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x10000}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): driver usbhid failed with error -71 [ 1007.749884][T32030] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1007.761193][T27590] usb 8-1: USB disconnect, device number 3 [ 1007.881385][ T1160] syz.3.3529 (1160) used greatest stack depth: 18024 bytes left [ 1007.954826][T32030] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 1008.025005][T32030] usb 3-1: config 0 has no interface number 0 [ 1008.066237][T32030] usb 3-1: config 0 interface 30 has no altsetting 0 [ 1008.088796][T32030] usb 3-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 1008.106484][T32030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.136413][T32030] usb 3-1: Product: syz [ 1008.177498][T32030] usb 3-1: Manufacturer: syz [ 1008.202297][T32030] usb 3-1: SerialNumber: syz [ 1008.228993][T32030] usb 3-1: config 0 descriptor?? [ 1008.306219][T32030] hub 3-1:0.30: bad descriptor, ignoring hub [ 1008.315228][T32030] hub 3-1:0.30: probe with driver hub failed with error -5 [ 1008.326598][T32030] keyspan 3-1:0.30: Keyspan - (without firmware) converter detected [ 1008.621555][ T1480] tipc: Started in network mode [ 1008.651815][ T1480] tipc: Node identity 6e3220d287ed, cluster identity 4711 [ 1008.755424][ T1480] tipc: Enabled bearer , priority 0 [ 1008.860879][ T5916] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1008.877131][ T1480] tipc: Resetting bearer [ 1009.112768][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1009.184634][ T5916] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1009.260656][ T5916] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.283603][ T1477] tipc: Disabling bearer [ 1009.326578][ T5916] usb 1-1: config 63 has no interface number 0 [ 1009.377080][ T5916] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1009.385990][T15513] hsr_slave_0: left promiscuous mode [ 1009.438023][ T5916] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1009.449103][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.464364][T15513] hsr_slave_1: left promiscuous mode [ 1009.479558][T15513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.523263][T15513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.546456][ T5916] usb 1-1: Product: syz [ 1009.569670][T15513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.591017][ T5916] usb 1-1: Manufacturer: syz [ 1009.601636][T15513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.618933][ T5916] usb 1-1: SerialNumber: syz [ 1009.718395][T15513] C: left promiscuous mode [ 1009.723463][T15513] team_slave_1: left promiscuous mode [ 1009.774146][T15513] veth1_macvtap: left promiscuous mode [ 1009.792494][T15513] veth0_macvtap: left promiscuous mode [ 1009.906151][ T5916] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1009.951173][ T5916] uvcvideo 1-1:63.66: No valid video chain found. [ 1010.032454][ T5916] usb 1-1: USB disconnect, device number 57 [ 1010.280936][ T1552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.456144][ T1558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3568'. [ 1010.566812][T32030] usb 3-1: USB disconnect, device number 71 [ 1010.581466][T32030] keyspan 3-1:0.30: device disconnected [ 1011.287725][T15513] team0 (unregistering): Port device team_slave_1 removed [ 1011.382832][T15513] team0 (unregistering): Port device C removed [ 1011.880452][T32030] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1012.033286][T32030] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 1012.056936][T32030] usb 6-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1012.108243][T32030] usb 6-1: config 0 has no interface number 0 [ 1012.120954][T32030] usb 6-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1012.158904][T32030] usb 6-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1012.187264][T32030] usb 6-1: config 0 interface 49 has no altsetting 0 [ 1012.212955][T32030] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1012.290750][T32030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.305139][T32030] usb 6-1: Product: syz [ 1012.310858][T32030] usb 6-1: Manufacturer: syz [ 1012.316448][T32030] usb 6-1: SerialNumber: syz [ 1012.400955][T32030] usb 6-1: config 0 descriptor?? [ 1012.754338][ T1599] fuse: Unknown parameter 'gidCOM RS232 Adapter converter detected [ 1033.175606][T27590] cyphidcom ttyUSB0: required endpoint is missing [ 1033.237482][T27590] usb 8-1: USB disconnect, device number 6 [ 1033.278159][T27590] cypress_m8 8-1:2.0: device disconnected [ 1033.441411][T32034] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1033.751503][T32034] usb 3-1: device descriptor read/64, error -71 [ 1034.020337][T32034] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1034.200455][T32034] usb 3-1: device descriptor read/64, error -71 [ 1034.221195][ T2364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1034.351813][T32034] usb usb3-port1: attempt power cycle [ 1034.720627][T32034] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1034.761316][T32034] usb 3-1: device descriptor read/8, error -71 [ 1035.040372][T32034] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1035.170395][T32034] usb 3-1: device descriptor read/8, error -71 [ 1035.295100][ T2377] netlink: 'syz.0.3640': attribute type 16 has an invalid length. [ 1035.300700][T32034] usb usb3-port1: unable to enumerate USB device [ 1035.446581][ T2377] netlink: 'syz.0.3640': attribute type 2 has an invalid length. [ 1035.500542][ T2377] netlink: 64102 bytes leftover after parsing attributes in process `syz.0.3640'. [ 1036.390386][T32024] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1036.568238][T32024] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1036.602008][T32024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.611397][T32024] usb 1-1: Product: syz [ 1036.616109][T32024] usb 1-1: Manufacturer: syz [ 1036.624401][T32024] usb 1-1: SerialNumber: syz [ 1037.211226][T32024] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1037.226772][T32024] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1037.491251][T28774] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1037.713104][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1037.713122][ T29] audit: type=1800 audit(1772347856.359:1858): pid=2389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3642" name=2321200A dev="tmpfs" ino=750 res=0 errno=0 [ 1039.124190][T32024] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1039.201636][T32024] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1039.224876][T32024] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1039.354127][T32024] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1039.437722][T32024] usb 1-1: USB disconnect, device number 58 [ 1039.760538][ T5918] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1039.933479][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 1040.087695][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.113773][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1040.241375][ T5918] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1040.280530][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.342185][ T5918] usb 4-1: config 0 descriptor?? [ 1040.430923][T32024] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1040.611093][T32024] usb 3-1: Using ep0 maxpacket: 8 [ 1040.623208][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 1040.644127][T32024] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 1040.655289][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1040.658931][ T2480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.711402][T32024] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1040.736248][ T5918] usb 4-1: USB disconnect, device number 100 [ 1040.751337][ T2480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.757141][T32024] usb 3-1: config 3 has no interface number 0 [ 1040.789856][T32024] usb 3-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1040.822787][ T2466] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 1040.843161][T32034] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1040.915170][T32024] usb 3-1: config 3 interface 45 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1040.941266][T32024] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1040.986204][T32024] usb 3-1: config 3 interface 45 has no altsetting 0 [ 1041.020371][T32034] usb 1-1: Using ep0 maxpacket: 32 [ 1041.022395][T32024] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1041.038544][T32024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.046084][T32034] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1041.056539][T32024] usb 3-1: Product: syz [ 1041.097193][T32024] usb 3-1: Manufacturer: syz [ 1041.105303][T32024] usb 3-1: SerialNumber: syz [ 1041.129234][T32034] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 1041.208466][T32034] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 1041.304201][T32034] usb 1-1: config 0 interface 0 has no altsetting 1 [ 1041.387222][T32034] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1041.449743][T32024] usb 3-1: USB disconnect, device number 83 [ 1041.456153][T32034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1041.534182][T32034] usb 1-1: SerialNumber: syz [ 1041.538321][T14730] udevd[14730]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.616723][T32034] usb 1-1: config 0 descriptor?? [ 1041.669983][T32034] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1041.742047][T32034] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1042.105317][T32024] usb 1-1: USB disconnect, device number 59 [ 1042.420817][ T1210] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1042.465934][ T2577] netlink: 'syz.7.3658': attribute type 7 has an invalid length. [ 1042.559836][ T2568] syzkaller0: entered promiscuous mode [ 1042.589410][ T2568] syzkaller0: entered allmulticast mode [ 1042.592559][ T1210] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1042.644910][ T1210] usb 3-1: config 0 has no interface number 0 [ 1042.670423][ T1210] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1042.750933][ T1210] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1042.801209][ T1210] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1042.837192][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.056699][ T1210] usb 3-1: config 0 descriptor?? [ 1043.120412][ T5916] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1043.265050][ T2549] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1043.319523][ T1210] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1043.341060][ T5916] usb 8-1: too many configurations: 65, using maximum allowed: 8 [ 1043.398159][ T5916] usb 8-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1043.471118][ T5916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.563043][ T5916] uvcvideo 8-1:250.0: Found UVC 0.00 device (046d:08c1) [ 1043.639337][ T5916] uvcvideo 8-1:250.0: No valid video chain found. [ 1043.792067][ T2568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.873467][ T2549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.898607][ T2568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.911309][ T5916] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1043.949165][ T2549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.973684][ T5916] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1043.984894][T32024] usb 8-1: USB disconnect, device number 7 [ 1045.245278][ T2664] program syz.3.3666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1045.760730][T32024] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1045.930329][ T5916] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1045.987395][T32024] usb 8-1: Using ep0 maxpacket: 32 [ 1046.147968][T32024] usb 8-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1046.202144][T32024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.246288][T32024] usb 8-1: Product: syz [ 1046.278653][ T5916] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1046.290546][T32024] usb 8-1: Manufacturer: syz [ 1046.317561][ T5916] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.336201][T32024] usb 8-1: SerialNumber: syz [ 1046.375395][ T5916] usb 6-1: config 8 has no interface number 0 [ 1046.428693][ T5916] usb 6-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1046.497705][ T5916] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1046.520936][ T5916] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1046.700706][ T5916] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1046.713273][T32024] usb 8-1: palm_os_4_probe - error -110 getting connection info [ 1046.750672][T32024] visor 8-1:1.0: Handspring Visor / Palm OS converter detected [ 1046.781021][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.841447][T32024] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1046.904007][ T5916] usb 6-1: NFC: intf ffff888079702000 id ffffffff8f1d1280 [ 1046.955518][T32024] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1047.163073][ T2659] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3664'. [ 1047.208491][ T5916] usb 3-1: USB disconnect, device number 84 [ 1048.259495][ T2673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.320874][ T2673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.551538][T32024] usb 6-1: USB disconnect, device number 53 [ 1048.779344][ T2755] syzkaller0: entered promiscuous mode [ 1048.849342][ T2755] syzkaller0: entered allmulticast mode [ 1048.939247][T27590] usb 8-1: USB disconnect, device number 8 [ 1048.957051][T27590] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1049.041870][T27590] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1049.060339][T32034] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1049.081799][T32024] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1049.114215][T27590] visor 8-1:1.0: device disconnected [ 1049.277348][T32034] usb 6-1: Using ep0 maxpacket: 32 [ 1049.280349][T32024] usb 3-1: Using ep0 maxpacket: 16 [ 1049.313763][T32034] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1049.314860][T32024] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1049.364424][T32024] usb 3-1: config 0 has no interface number 0 [ 1049.384617][T32024] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.433633][T32024] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.466157][T32024] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1049.475354][T32034] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1049.499643][T32024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.505505][T32034] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.550717][T32034] usb 6-1: config 0 has no interface number 0 [ 1049.572955][T32034] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1049.590395][T32034] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.601673][T32024] usb 3-1: config 0 descriptor?? [ 1049.636869][T32034] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1049.652543][T32034] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.684043][T32034] usb 6-1: config 0 has no interface number 0 [ 1049.703892][T32034] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1049.730572][T32034] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.793376][T32034] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1049.802477][T32034] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.859445][T32034] usb 6-1: config 0 has no interface number 0 [ 1049.880257][T32034] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1049.900123][T32034] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.942010][T32034] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1049.960584][T32034] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.990618][T32034] usb 6-1: config 0 has no interface number 0 [ 1050.003432][T32034] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1050.049759][T32034] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.153847][T32034] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1050.170423][T32034] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.216087][T32034] usb 6-1: config 0 has no interface number 0 [ 1050.256938][T32034] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1050.296392][T32034] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.459070][T32034] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1050.490643][T32034] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.590429][T32034] usb 6-1: config 0 has no interface number 0 [ 1050.597613][T32034] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1050.660544][T32034] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.736973][T32034] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1050.779849][T32034] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.836706][T32034] usb 6-1: config 0 has no interface number 0 [ 1050.869454][T32034] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1050.916130][T32034] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.977040][T32034] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1050.997954][T32034] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.048896][T32034] usb 6-1: config 0 has no interface number 0 [ 1051.091578][T32034] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1051.134440][T32034] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1051.199999][T32034] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1051.210860][T32034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.249891][T32034] usb 6-1: Product: syz [ 1051.267640][T32034] usb 6-1: Manufacturer: syz [ 1051.286292][T32034] usb 6-1: SerialNumber: syz [ 1051.318778][T32034] usb 6-1: config 0 descriptor?? [ 1051.368441][T32034] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 1051.553881][T32034] usb 6-1: USB disconnect, device number 54 [ 1051.993838][T32024] uclogic 0003:28BD:0071.0030: failed retrieving string descriptor #100: -71 [ 1052.033015][T32024] uclogic 0003:28BD:0071.0030: failed retrieving pen parameters: -71 [ 1052.123562][T32024] uclogic 0003:28BD:0071.0030: pen probing failed: -71 [ 1052.161344][T32024] uclogic 0003:28BD:0071.0030: failed probing parameters: -71 [ 1052.200912][ T5916] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1052.230734][T32024] uclogic 0003:28BD:0071.0030: probe with driver uclogic failed with error -71 [ 1052.267682][T32024] usb 3-1: USB disconnect, device number 85 [ 1052.430397][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 1052.557129][ T5916] usb 1-1: config 0 has no interfaces? [ 1052.627259][ T5916] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1052.709653][ T5916] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1052.771699][ T5916] usb 1-1: Manufacturer: syz [ 1052.818700][ T5916] usb 1-1: config 0 descriptor?? [ 1052.930783][T32034] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1053.219117][ T2828] lo: entered allmulticast mode [ 1053.310827][ T2828] tunl0: entered allmulticast mode [ 1053.324229][ T2828] gre0: entered allmulticast mode [ 1053.339062][ T2828] gretap0: entered allmulticast mode [ 1053.345787][ T2828] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1053.363152][T32034] usb 3-1: Using ep0 maxpacket: 16 [ 1053.373671][T32034] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.386773][T32034] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1053.720296][T32034] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1053.754630][T32034] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 1053.787222][T32034] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1053.800935][T32034] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1053.824853][T32034] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1053.835121][T32034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1053.845964][T32034] usb 3-1: SerialNumber: syz [ 1053.878895][ T2884] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1053.887692][ T2884] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1054.226921][ T2935] netlink: 'syz.5.3685': attribute type 4 has an invalid length. [ 1054.282112][T32034] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1054.479250][T32034] usb 3-1: USB disconnect, device number 86 [ 1054.585059][ T2945] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1054.791392][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.797928][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.111476][T32034] usb 1-1: USB disconnect, device number 60 [ 1055.590503][T32034] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1055.760615][ T24] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1055.798555][T32034] usb 1-1: Using ep0 maxpacket: 8 [ 1055.835095][T32034] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1055.866400][T32034] usb 1-1: config 0 has no interface number 0 [ 1055.900850][T32034] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1055.973295][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1056.002639][T32034] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1056.045575][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1056.080663][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1056.096652][T32034] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1056.171301][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1056.194153][T32034] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1056.229244][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1056.242134][T32034] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1056.242167][T32034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.403846][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1056.430512][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1056.454445][T32034] usb 1-1: config 0 descriptor?? [ 1056.495351][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1056.547258][T32034] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1056.600711][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1056.667021][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1056.706287][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1056.811398][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1056.865531][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1056.996844][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1057.057631][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1057.109564][ T24] usb 3-1: string descriptor 0 read error: -22 [ 1057.154168][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1057.216649][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.224006][ T3002] Cannot find add_set index 0 as target [ 1057.361054][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1057.880886][ T24] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1057.982687][ T3071] program syz.7.3699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1058.031367][T32034] usb 1-1: USB disconnect, device number 61 [ 1058.052586][T32034] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1058.080891][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1058.097228][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.113106][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1058.124015][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1058.140764][ T24] usb 6-1: SerialNumber: syz [ 1058.197470][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1058.410838][ T3019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.422357][ T3019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.465235][ T3019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1058.545497][ T3097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1058.563185][ T10] usb 6-1: USB disconnect, device number 55 [ 1058.590429][T32034] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1058.730551][T32034] usb 1-1: device descriptor read/64, error -71 [ 1058.980391][T32034] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1059.110430][T32034] usb 1-1: device descriptor read/64, error -71 [ 1059.225436][ T10] usb 3-1: USB disconnect, device number 87 [ 1059.235116][T32034] usb usb1-port1: attempt power cycle [ 1059.415995][ T3132] FAULT_INJECTION: forcing a failure. [ 1059.415995][ T3132] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.436511][ T3132] CPU: 0 UID: 0 PID: 3132 Comm: syz.2.3706 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.436547][ T3132] Tainted: [L]=SOFTLOCKUP [ 1059.436554][ T3132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1059.436566][ T3132] Call Trace: [ 1059.436574][ T3132] [ 1059.436583][ T3132] dump_stack_lvl+0xe8/0x150 [ 1059.436634][ T3132] should_fail_ex+0x412/0x560 [ 1059.436663][ T3132] should_failslab+0xa8/0x100 [ 1059.436687][ T3132] __kmalloc_cache_noprof+0x88/0x660 [ 1059.436709][ T3132] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1059.436733][ T3132] ? __genradix_ptr+0x1e1/0x220 [ 1059.436764][ T3132] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1059.436800][ T3132] sctp_association_new+0x15d3/0x25e0 [ 1059.436843][ T3132] sctp_connect_new_asoc+0x2e4/0x6b0 [ 1059.436876][ T3132] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1059.436910][ T3132] ? __local_bh_enable_ip+0xd0/0x130 [ 1059.436935][ T3132] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1059.436955][ T3132] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1059.436989][ T3132] sctp_sendmsg+0x1528/0x2c10 [ 1059.437030][ T3132] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1059.437059][ T3132] ? aa_sk_perm+0x6d5/0x900 [ 1059.437086][ T3132] ? __pfx_aa_sk_perm+0x10/0x10 [ 1059.437108][ T3132] ? sock_rps_record_flow+0x19/0x400 [ 1059.437131][ T3132] ? inet_sendmsg+0x2f4/0x370 [ 1059.437150][ T3132] __sys_sendto+0x627/0x7a0 [ 1059.437169][ T3132] ? __pfx___sys_sendto+0x10/0x10 [ 1059.437182][ T3132] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1059.437202][ T3132] ? __fget_files+0x3a0/0x420 [ 1059.437224][ T3132] ? ksys_write+0x242/0x270 [ 1059.437238][ T3132] ? __pfx_ksys_write+0x10/0x10 [ 1059.437252][ T3132] __x64_sys_sendto+0xde/0x100 [ 1059.437270][ T3132] do_syscall_64+0x14d/0xf80 [ 1059.437280][ T3132] ? trace_irq_disable+0x3b/0x150 [ 1059.437296][ T3132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.437308][ T3132] ? clear_bhb_loop+0x40/0x90 [ 1059.437322][ T3132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.437334][ T3132] RIP: 0033:0x7f3e2479c799 [ 1059.437348][ T3132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.437358][ T3132] RSP: 002b:00007f3e229f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1059.437372][ T3132] RAX: ffffffffffffffda RBX: 00007f3e24a15fa0 RCX: 00007f3e2479c799 [ 1059.437381][ T3132] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1059.437389][ T3132] RBP: 00007f3e229f6090 R08: 0000200000000340 R09: 000000000000001c [ 1059.437396][ T3132] R10: 0000000004065851 R11: 0000000000000246 R12: 0000000000000001 [ 1059.437404][ T3132] R13: 00007f3e24a16038 R14: 00007f3e24a15fa0 R15: 00007f3e24b3fa48 [ 1059.437437][ T3132] [ 1060.143247][T32035] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1060.153142][T32034] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1060.181173][T32034] usb 1-1: device descriptor read/8, error -71 [ 1060.230602][ T5918] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1060.327321][T32035] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1060.364156][T32035] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1060.400539][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 1060.406810][T32035] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1060.411634][ T5918] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1060.440448][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.443584][T27590] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1060.451840][ T5918] usb 6-1: Product: syz [ 1060.462212][T32034] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1060.467453][ T5918] usb 6-1: Manufacturer: syz [ 1060.491996][ T5918] usb 6-1: SerialNumber: syz [ 1060.503920][ T5918] usb 6-1: config 0 descriptor?? [ 1060.524190][T32035] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1060.534923][T32035] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.554150][T32034] usb 1-1: device descriptor read/8, error -71 [ 1060.580599][T32035] usb 8-1: Product: syz [ 1060.585004][T32035] usb 8-1: Manufacturer: syz [ 1060.610411][T32035] usb 8-1: SerialNumber: syz [ 1060.625972][T32035] usb 8-1: config 0 descriptor?? [ 1060.649040][ T3120] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1060.671081][ T3120] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1060.683437][T32035] usb 8-1: ucan: probing device on interface #0 [ 1060.692239][T32034] usb usb1-port1: unable to enumerate USB device [ 1060.707854][T27590] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1060.769802][T27590] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1060.797322][T27590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1060.804553][ T5918] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 056 [ 1060.826536][T27590] usb 3-1: SerialNumber: syz [ 1060.922036][T32035] usb 8-1: ucan: could not read protocol version, ret=0 [ 1060.940143][T32035] usb 8-1: ucan: probe failed; try to update the device firmware [ 1060.950780][ T5916] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1061.030284][ T3124] m920x_read = error: -19 [ 1061.125696][ T5918] usb 8-1: USB disconnect, device number 9 [ 1061.140600][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 1061.183631][ T5916] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1061.213236][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1061.233882][ T5916] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1061.245380][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.255144][ T5916] usb 4-1: Product: syz [ 1061.260168][ T5916] usb 4-1: Manufacturer: syz [ 1061.266197][ T5916] usb 4-1: SerialNumber: syz [ 1061.318858][ T5916] usb 4-1: config 0 descriptor?? [ 1061.532842][T27590] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1061.870570][ T5918] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1061.911484][ T3149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.944696][ T3149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.042766][T27590] usb 3-1: USB disconnect, device number 88 [ 1062.043673][ T5918] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1062.076909][ T5918] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1062.107427][ T5918] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1062.113454][T27590] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1062.140591][T32035] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1062.173533][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.323197][T32035] usb 8-1: config 0 has an invalid interface number: 106 but max is 0 [ 1062.354395][T32035] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.417774][T32035] usb 8-1: config 0 has no interface number 0 [ 1062.458465][T32035] usb 8-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1062.468479][ T5918] usb 1-1: GET_CAPABILITIES returned 0 [ 1062.526233][T32035] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1062.531737][ T5918] usbtmc 1-1:16.0: can't read capabilities [ 1062.582980][T32035] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.625231][T32035] usb 8-1: config 0 descriptor?? [ 1062.669469][T32035] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1062.673619][ T3208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.700648][T27590] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1062.774719][ T3208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.877859][T27590] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1062.887646][T27590] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.919122][ T3208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.928907][T27590] usb 3-1: config 220 has no interface number 2 [ 1062.951206][T27590] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1062.985638][ T3208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.002163][ T3265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.043123][T27590] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1063.065008][T27590] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1063.122522][T27590] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1063.145585][ T3208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.210878][T27590] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1063.238987][ T3208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.241123][ T3265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.341048][T27590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.393178][ T5918] usb 6-1: USB disconnect, device number 56 [ 1063.563777][T32024] usb 1-1: USB disconnect, device number 66 [ 1063.606602][T27590] usb 3-1: Product: syz [ 1063.739377][T15513] usb 8-1: Failed to submit usb control message: -110 [ 1063.800751][T27590] usb 3-1: Manufacturer: syz [ 1063.808285][T27590] usb 3-1: SerialNumber: syz [ 1063.845234][T15513] usb 8-1: unable to send the bmi data to the device: -110 [ 1063.874478][T15513] usb 8-1: unable to get target info from device [ 1063.931732][T15513] usb 8-1: could not get target info (-110) [ 1063.958204][ T3265] program syz.7.3712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1064.020512][T15513] usb 8-1: could not probe fw (-110) [ 1064.075388][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1064.078300][ T5916] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input80 [ 1064.098075][ T3288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1064.138364][ T5916] imon:send_packet: packet tx failed (-71) [ 1064.153196][ T5916] imon 4-1:0.0: panel buttons/knobs setup failed [ 1064.361035][T27590] usb 3-1: selecting invalid altsetting 0 [ 1064.361536][T27590] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1064.361571][T27590] uvcvideo 3-1:220.0: No valid video chain found. [ 1064.522837][T27590] usb 3-1: selecting invalid altsetting 0 [ 1064.522875][T27590] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1064.634732][T27590] usb 3-1: USB disconnect, device number 89 [ 1064.791471][ T5916] rc_core: IR keymap rc-imon-pad not found [ 1064.791495][ T5916] Registered IR keymap rc-empty [ 1064.791572][ T5916] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1064.791589][ T5916] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1064.792009][ T5916] imon:send_packet: packet tx failed (-71) [ 1064.830701][ T5916] imon 4-1:0.0: remote input dev register failed [ 1064.830896][ T5916] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1064.864814][ T3345] FAULT_INJECTION: forcing a failure. [ 1064.864814][ T3345] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.864947][ T3345] CPU: 1 UID: 0 PID: 3345 Comm: syz.2.3718 Tainted: G L syzkaller #0 PREEMPT(full) [ 1064.864974][ T3345] Tainted: [L]=SOFTLOCKUP [ 1064.864982][ T3345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1064.864994][ T3345] Call Trace: [ 1064.865003][ T3345] [ 1064.865013][ T3345] dump_stack_lvl+0xe8/0x150 [ 1064.865046][ T3345] should_fail_ex+0x412/0x560 [ 1064.865077][ T3345] should_failslab+0xa8/0x100 [ 1064.865103][ T3345] __kmalloc_cache_noprof+0x88/0x660 [ 1064.865125][ T3345] ? sctp_add_bind_addr+0x8c/0x370 [ 1064.865157][ T3345] sctp_add_bind_addr+0x8c/0x370 [ 1064.865186][ T3345] sctp_copy_local_addr_list+0x314/0x4f0 [ 1064.865216][ T3345] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1064.865240][ T3345] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1064.865268][ T3345] ? sctp_v6_is_any+0x64/0x80 [ 1064.865296][ T3345] ? sctp_copy_one_addr+0x93/0x360 [ 1064.865325][ T3345] sctp_bind_addr_copy+0xb3/0x3c0 [ 1064.865363][ T3345] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1064.865390][ T3345] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1064.865421][ T3345] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1064.865454][ T3345] ? __local_bh_enable_ip+0xd0/0x130 [ 1064.865590][ T3345] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1064.865616][ T3345] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1064.865654][ T3345] sctp_sendmsg+0x1528/0x2c10 [ 1064.865819][ T3345] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1064.865864][ T3345] ? aa_sk_perm+0x6d5/0x900 [ 1064.865897][ T3345] ? __pfx_aa_sk_perm+0x10/0x10 [ 1064.865922][ T3345] ? sock_rps_record_flow+0x19/0x400 [ 1064.865955][ T3345] ? inet_sendmsg+0x2f4/0x370 [ 1064.865987][ T3345] __sys_sendto+0x627/0x7a0 [ 1064.866018][ T3345] ? __pfx___sys_sendto+0x10/0x10 [ 1064.866049][ T3345] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1064.866083][ T3345] ? __fget_files+0x3a0/0x420 [ 1064.866122][ T3345] ? ksys_write+0x242/0x270 [ 1064.866145][ T3345] ? __pfx_ksys_write+0x10/0x10 [ 1064.866172][ T3345] __x64_sys_sendto+0xde/0x100 [ 1064.866201][ T3345] do_syscall_64+0x14d/0xf80 [ 1064.866219][ T3345] ? trace_irq_disable+0x3b/0x150 [ 1064.866245][ T3345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.866265][ T3345] ? clear_bhb_loop+0x40/0x90 [ 1064.866290][ T3345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.866310][ T3345] RIP: 0033:0x7f3e2479c799 [ 1064.866332][ T3345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.866348][ T3345] RSP: 002b:00007f3e229f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1064.866370][ T3345] RAX: ffffffffffffffda RBX: 00007f3e24a15fa0 RCX: 00007f3e2479c799 [ 1064.866383][ T3345] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1064.866394][ T3345] RBP: 00007f3e229f6090 R08: 0000200000000340 R09: 000000000000001c [ 1064.866405][ T3345] R10: 0000000004065851 R11: 0000000000000246 R12: 0000000000000001 [ 1064.866415][ T3345] R13: 00007f3e24a16038 R14: 00007f3e24a15fa0 R15: 00007f3e24b3fa48 [ 1064.866442][ T3345] [ 1065.166952][ T3343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3717'. [ 1065.207996][ T5916] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1065.208014][ T5916] imon:imon_probe: failed to initialize context! [ 1065.208024][ T5916] imon 4-1:0.0: unable to register, err -19 [ 1065.217699][ T5916] usb 4-1: USB disconnect, device number 101 [ 1065.600907][ T3348] vivid-000: kernel_thread() failed [ 1065.923146][ T3348] syz.5.3717 (3348) used greatest stack depth: 17576 bytes left [ 1067.321074][T27590] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1067.492927][T27590] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1067.492983][T27590] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1067.493007][T27590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.665054][T27590] usb 3-1: config 0 descriptor?? [ 1067.670951][ T3353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1067.986541][ T3353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.987899][ T3353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.290805][T32035] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 1068.475465][T32035] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1068.475530][T32035] usb 4-1: config 0 has no interface number 0 [ 1068.475577][T32035] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1068.475608][T32035] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1068.475681][T32035] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1068.475707][T32035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.511624][T32035] usb 4-1: config 0 descriptor?? [ 1068.553019][T32035] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1068.771645][ T3353] 8021q: VLANs not supported on caif0 [ 1068.775599][T27590] ath6kl: Failed to submit usb control message: -110 [ 1068.775663][T27590] ath6kl: unable to send the bmi data to the device: -110 [ 1068.775681][T27590] ath6kl: Unable to send get target info: -110 [ 1068.802332][T27590] ath6kl: Failed to init ath6kl core: -110 [ 1068.803913][T27590] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1069.510843][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1069.862330][T32024] usb 3-1: USB disconnect, device number 90 [ 1070.442053][T32035] usb 4-1: USB disconnect, device number 102 [ 1073.792989][T14734] udevd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 1073.887472][T14734] CPU: 1 UID: 0 PID: 14734 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1073.887508][T14734] Tainted: [L]=SOFTLOCKUP [ 1073.887516][T14734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1073.887528][T14734] Call Trace: [ 1073.887537][T14734] [ 1073.887546][T14734] dump_stack_lvl+0xe8/0x150 [ 1073.887592][T14734] dump_header+0xd3/0x4c0 [ 1073.887620][T14734] oom_kill_process+0x3ab/0x970 [ 1073.887647][T14734] out_of_memory+0x1141/0x1410 [ 1073.887678][T14734] ? __pfx_out_of_memory+0x10/0x10 [ 1073.887710][T14734] __alloc_pages_may_oom+0x1ea/0x330 [ 1073.887740][T14734] ? lockdep_hardirqs_on+0x7a/0x110 [ 1073.887772][T14734] ? __pfx___alloc_pages_may_oom+0x10/0x10 [ 1073.887800][T14734] ? unreserve_highatomic_pageblock+0x3e3/0x610 [ 1073.887849][T14734] __alloc_pages_slowpath+0x6c2/0xd40 [ 1073.887896][T14734] __alloc_frozen_pages_noprof+0x322/0x380 [ 1073.887924][T14734] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1073.887954][T14734] ? __pfx_policy_nodemask+0x10/0x10 [ 1073.887990][T14734] alloc_pages_mpol+0x232/0x4a0 [ 1073.888022][T14734] alloc_pages_noprof+0xa8/0x190 [ 1073.888049][T14734] folio_alloc_noprof+0x1e/0x30 [ 1073.888073][T14734] filemap_alloc_folio_noprof+0x111/0x470 [ 1073.888110][T14734] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1073.888153][T14734] __filemap_get_folio_mpol+0x3fc/0xb00 [ 1073.888186][T14734] filemap_fault+0x9ac/0x1320 [ 1073.888218][T14734] ? __pfx_filemap_fault+0x10/0x10 [ 1073.888242][T14734] ? handle_mm_fault+0x2cd8/0x3310 [ 1073.888271][T14734] ? __pfx_filemap_map_pages+0x10/0x10 [ 1073.888307][T14734] __do_fault+0x138/0x390 [ 1073.888332][T14734] do_pte_missing+0x228f/0x3750 [ 1073.888352][T14734] ? do_pte_missing+0x130a/0x3750 [ 1073.888385][T14734] ? handle_mm_fault+0xee/0x3310 [ 1073.888417][T14734] handle_mm_fault+0x1bec/0x3310 [ 1073.888461][T14734] ? handle_mm_fault+0xee/0x3310 [ 1073.888498][T14734] ? __pfx_handle_mm_fault+0x10/0x10 [ 1073.888523][T14734] ? lock_vma_under_rcu+0x45a/0x500 [ 1073.888572][T14734] do_user_addr_fault+0xa73/0x1340 [ 1073.888616][T14734] ? rcu_is_watching+0x15/0xb0 [ 1073.888644][T14734] ? trace_page_fault_user+0x84/0x210 [ 1073.888673][T14734] exc_page_fault+0x6a/0xc0 [ 1073.888705][T14734] asm_exc_page_fault+0x26/0x30 [ 1073.888725][T14734] RIP: 0033:0x7fd419a76340 [ 1073.888753][T14734] Code: Unable to access opcode bytes at 0x7fd419a76316. [ 1073.888764][T14734] RSP: 002b:00007ffc07615f18 EFLAGS: 00010297 [ 1073.888784][T14734] RAX: 0000000000000006 RBX: 00007ffc07616420 RCX: 00007fd419a7d80d [ 1073.888798][T14734] RDX: 0000000000000006 RSI: 0000555609fc9460 RDI: 00007ffc07616420 [ 1073.888811][T14734] RBP: 0000555609fc9460 R08: 0000000000000073 R09: 0000000000000001 [ 1073.888824][T14734] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000006 [ 1073.888836][T14734] R13: 00007ffc07616548 R14: 00000000fffffffa R15: 0000000000000000 [ 1073.888870][T14734] [ 1073.888878][T14734] Mem-Info: [ 1075.183446][T32219] syz.6.3403: page allocation failure: order:0, mode:0xd00(GFP_NOIO|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1075.290265][T32219] CPU: 0 UID: 0 PID: 32219 Comm: syz.6.3403 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.290297][T32219] Tainted: [L]=SOFTLOCKUP [ 1075.290302][T32219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1075.290310][T32219] Call Trace: [ 1075.290316][T32219] [ 1075.290324][T32219] dump_stack_lvl+0xe8/0x150 [ 1075.290348][T32219] warn_alloc+0x249/0x340 [ 1075.290366][T32219] ? __pfx_warn_alloc+0x10/0x10 [ 1075.290389][T32219] __alloc_pages_slowpath+0xcac/0xd40 [ 1075.290414][T32219] __alloc_frozen_pages_noprof+0x322/0x380 [ 1075.290429][T32219] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1075.290446][T32219] ? __pfx_policy_nodemask+0x10/0x10 [ 1075.290459][T32219] ? irqentry_exit+0x59e/0x620 [ 1075.290477][T32219] ? trace_irq_disable+0x3b/0x150 [ 1075.290499][T32219] alloc_pages_mpol+0x232/0x4a0 [ 1075.290516][T32219] alloc_pages_noprof+0xa8/0x190 [ 1075.290531][T32219] relay_open_buf+0x28c/0xde0 [ 1075.290553][T32219] relay_open+0x427/0x920 [ 1075.290571][T32219] blk_trace_setup_prepare+0x425/0x5a0 [ 1075.290593][T32219] blk_trace_setup+0x2f8/0x520 [ 1075.290614][T32219] ? __pfx_blk_trace_setup+0x10/0x10 [ 1075.290642][T32219] ? snprintf+0xe8/0x140 [ 1075.290667][T32219] blk_trace_ioctl+0x37f/0x920 [ 1075.290682][T32219] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1075.290696][T32219] ? kasan_quarantine_put+0xbb/0x1f0 [ 1075.290712][T32219] ? tomoyo_path_number_perm+0x219/0x630 [ 1075.290726][T32219] ? tomoyo_path_number_perm+0x219/0x630 [ 1075.290740][T32219] ? do_vfs_ioctl+0x1166/0x1530 [ 1075.290754][T32219] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1075.290774][T32219] ? do_futex+0x395/0x420 [ 1075.290800][T32219] blkdev_ioctl+0x4c1/0x740 [ 1075.290815][T32219] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1075.290826][T32219] ? __fget_files+0x2a/0x420 [ 1075.290843][T32219] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1075.290857][T32219] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1075.290869][T32219] __se_sys_ioctl+0xfc/0x170 [ 1075.290883][T32219] do_syscall_64+0x14d/0xf80 [ 1075.290894][T32219] ? trace_irq_disable+0x3b/0x150 [ 1075.290909][T32219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.290921][T32219] ? clear_bhb_loop+0x40/0x90 [ 1075.290935][T32219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.290947][T32219] RIP: 0033:0x7fadd4f9c799 [ 1075.290966][T32219] Code: Unable to access opcode bytes at 0x7fadd4f9c76f. [ 1075.290972][T32219] RSP: 002b:00007fadd5ec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.290986][T32219] RAX: ffffffffffffffda RBX: 00007fadd5216180 RCX: 00007fadd4f9c799 [ 1075.290994][T32219] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000008 [ 1075.291002][T32219] RBP: 00007fadd5032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1075.291010][T32219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1075.291017][T32219] R13: 00007fadd5216218 R14: 00007fadd5216180 R15: 00007fadd533fa48 [ 1075.291035][T32219] [ 1075.291041][T32219] Mem-Info: [ 1075.689841][T32219] active_anon:10 inactive_anon:227 isolated_anon:0 [ 1075.689841][T32219] active_file:38 inactive_file:45 isolated_file:0 [ 1075.689841][T32219] unevictable:768 dirty:0 writeback:0 [ 1075.689841][T32219] slab_reclaimable:6957 slab_unreclaimable:114814 [ 1075.689841][T32219] mapped:35842 shmem:768 pagetables:3903 [ 1075.689841][T32219] sec_pagetables:0 bounce:0 [ 1075.689841][T32219] kernel_misc_reclaimable:0 [ 1075.689841][T32219] free:25511 free_pcp:415 free_cma:0 [ 1075.907699][ T31] oom_reaper: reaped process 32219 (syz.6.3403), now anon-rss:0kB, file-rss:36864kB, shmem-rss:0kB [ 1075.940178][T14734] active_anon:0 inactive_anon:215 isolated_anon:0 [ 1075.940178][T14734] active_file:22 inactive_file:61 isolated_file:0 [ 1075.940178][T14734] unevictable:768 dirty:0 writeback:0 [ 1075.940178][T14734] slab_reclaimable:6957 slab_unreclaimable:114895 [ 1075.940178][T14734] mapped:35842 shmem:768 pagetables:3903 [ 1075.940178][T14734] sec_pagetables:0 bounce:0 [ 1075.940178][T14734] kernel_misc_reclaimable:0 [ 1075.940178][T14734] free:25487 free_pcp:453 free_cma:0 [ 1076.007454][T14734] Node 0 active_anon:24kB inactive_anon:32kB active_file:4kB inactive_file:152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143368kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14048kB pagetables:5752kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 1076.208678][T32219] Node 0 active_anon:24kB inactive_anon:32kB active_file:0kB inactive_file:228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143368kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14048kB pagetables:5752kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 1076.296332][T14734] Node 1 active_anon:0kB inactive_anon:552kB active_file:0kB inactive_file:36kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:448kB pagetables:9860kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 1076.414323][T32219] Node 1 active_anon:0kB inactive_anon:808kB active_file:0kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:448kB pagetables:9860kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 1076.490347][T14734] Node 0 DMA free:10076kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1076.654438][T32219] Node 0 DMA free:10076kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1076.698888][T14734] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1076.740493][T14734] Node 0 DMA32 free:49072kB boost:69632kB min:103832kB low:112380kB high:120928kB reserved_highatomic:26624KB free_highatomic:0KB active_anon:76kB inactive_anon:0kB active_file:108kB inactive_file:48kB unevictable:1536kB writepending:0kB zspages:856kB present:3129332kB managed:2552828kB mlocked:0kB bounce:0kB free_pcp:580kB local_pcp:368kB free_cma:0kB [ 1076.824730][T32219] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1076.870414][T32219] Node 0 DMA32 free:49072kB boost:69632kB min:103832kB low:112380kB high:120928kB reserved_highatomic:26624KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:100kB inactive_file:56kB unevictable:1536kB writepending:0kB zspages:856kB present:3129332kB managed:2552828kB mlocked:0kB bounce:0kB free_pcp:480kB local_pcp:284kB free_cma:0kB [ 1076.952249][T14734] lowmem_reserve[]: 0 0 0 0 0 [ 1076.957179][T14734] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1077.072283][T32219] lowmem_reserve[]: 0 0 0 0 0 [ 1077.077440][T32219] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1077.166673][T14734] lowmem_reserve[]: 0 0 0 0 0 [ 1077.190636][T14734] Node 1 Normal free:42124kB boost:28672kB min:84360kB low:98280kB high:112200kB reserved_highatomic:0KB free_highatomic:0KB active_anon:340kB inactive_anon:192kB active_file:116kB inactive_file:60kB unevictable:1536kB writepending:0kB zspages:5440kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:556kB free_cma:0kB [ 1077.230309][T32219] lowmem_reserve[]: 0 0 0 0 0 [ 1077.284734][T32219] Node 1 Normal free:42124kB boost:28672kB min:84360kB low:98280kB high:112200kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:780kB active_file:12kB inactive_file:160kB unevictable:1536kB writepending:0kB zspages:5440kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:556kB free_cma:0kB [ 1077.430955][T32219] lowmem_reserve[]: 0 0 0 0 0 [ 1077.436643][T32219] Node 0 DMA: 3*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10076kB [ 1077.491124][T14734] lowmem_reserve[]: 0 0 0 0 0 [ 1077.496736][T14734] Node 0 DMA: 3*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10076kB [ 1077.582447][T32219] Node 0 DMA32: 229*4kB (ME) 404*8kB (UME) 463*16kB (UME) 410*32kB (UME) 185*64kB (UME) 74*128kB (UME) 3*256kB (U) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 47268kB [ 1077.634603][T14734] Node 0 DMA32: 229*4kB (ME) 404*8kB (UME) 463*16kB (UME) 410*32kB (UME) 185*64kB (UME) 74*128kB (UME) 3*256kB (U) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 47268kB [ 1077.698618][T32219] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1077.747882][T14734] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1077.781673][T32219] Node 1 Normal: 409*4kB (UME) 291*8kB (UME) 231*16kB (UME) 165*32kB (UME) 126*64kB (UME) 65*128kB (UM) 32*256kB (UM) 7*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 42124kB [ 1077.844599][T14734] Node 1 Normal: 409*4kB (UME) 291*8kB (UME) 231*16kB (UME) 165*32kB (UME) 126*64kB (UME) 65*128kB (UM) 32*256kB (UM) 7*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 42124kB [ 1077.931169][T32219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.006121][T14734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.039252][T32219] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1078.085050][T14734] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1078.101533][T32219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.169433][T14734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.190523][T32219] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1078.238291][T14734] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1078.256056][T32219] 1057 total pagecache pages [ 1078.293880][T32219] 210 pages in swap cache [ 1078.298399][T32219] Free swap = 94480kB [ 1078.393789][T14734] 1057 total pagecache pages [ 1078.398703][T14734] 210 pages in swap cache [ 1078.499187][T32219] Total swap = 124996kB [ 1078.670372][T14734] Free swap = 94480kB [ 1078.674775][T14734] Total swap = 124996kB [ 1078.679075][T14734] 2097051 pages RAM [ 1078.693258][T32219] 2097051 pages RAM [ 1078.697299][T32219] 0 pages HighMem/MovableOnly [ 1078.747268][T32219] 427008 pages reserved [ 1078.780370][T14734] 0 pages HighMem/MovableOnly [ 1078.787394][T32219] 0 pages cma reserved [ 1078.820572][T14734] 427008 pages reserved [ 1078.845212][T14734] 0 pages cma reserved [ 1078.849458][T14734] Unreclaimable slab info: [ 1078.951377][T14734] Name Used Total [ 1078.990836][T14734] bio-184 13KB 16KB [ 1078.997426][T14734] pid_3 10KB 23KB [ 1079.085487][T14734] pid_2 54KB 110KB [ 1079.150638][T14734] bio-464 17KB 22KB [ 1079.188338][T14734] bio-528 19KB 31KB [ 1079.230472][T14734] bio-544 19KB 31KB [ 1079.237169][T14734] bio-560 19KB 31KB [ 1079.317873][T14734] zswap_entry 642KB 755KB [ 1079.358470][T14734] AF_VSOCK 39KB 183KB [ 1079.407891][T14734] sw_flow_stats 11KB 16KB [ 1079.453003][T14734] sw_flow 23KB 47KB [ 1079.459210][T14734] batadv_tt_change_cache 0KB 4KB [ 1079.544584][T14734] batadv_tl_cache 11KB 12KB [ 1079.600476][T14734] SMC6 34KB 93KB [ 1079.661285][T14734] SMC 59KB 156KB [ 1079.668713][T14734] TIPC 39KB 123KB [ 1079.742516][T14734] rds_tcp_incoming 0KB 3KB [ 1079.749756][T14734] rds_tcp_connection 12KB 47KB [ 1079.782246][T14734] RDS 39KB 61KB [ 1079.788568][T14734] rds_connection 12KB 18KB [ 1079.795398][T14734] SCTPv6 60KB 150KB [ 1079.817209][T14734] SCTP 30KB 122KB [ 1079.845265][T14734] sctp_chunk 6KB 18KB [ 1079.920924][T14734] sctp_bind_bucket 0KB 4KB [ 1079.928740][T14734] L2TP/IPv6 15KB 95KB [ 1080.018096][T14734] L2TP/IP 17KB 63KB [ 1080.076220][T14734] KCM 31KB 124KB [ 1080.119186][T14734] kcm_psock 18KB 31KB [ 1080.182341][T14734] kcm_mux 19KB 79KB [ 1080.189758][T14734] RXRPC 24KB 96KB [ 1080.275763][T14734] rxrpc_call_jar 180KB 318KB [ 1080.342694][T14734] can_receiver 10KB 23KB [ 1080.415230][T14734] net_bridge_fdb_entry 21KB 35KB [ 1080.495421][T14734] nf-frags 0KB 7KB [ 1080.518100][T14734] MPTCPv6 35KB 95KB [ 1080.599834][T14734] ip6-frags 0KB 7KB [ 1080.660493][T14734] fib6_node 166KB 204KB [ 1080.667611][T14734] ip6_dst_cache 167KB 333KB [ 1080.754913][T14734] mfc6_cache 12KB 16KB [ 1080.812964][T14734] PINGv6 22KB 30KB [ 1080.819970][T14734] RAWv6 105KB 185KB [ 1080.893891][T14734] UDPLITEv6 22KB 94KB [ 1081.007331][T14734] UDPv6 81KB 157KB [ 1081.121514][T14734] tw_sock_TCPv6 0KB 7KB [ 1081.127839][T14734] request_sock_TCPv6 0KB 7KB [ 1081.220492][T14734] TCPv6 175KB 327KB [ 1081.227383][T14734] ip_vs_conn 1KB 7KB [ 1081.317126][T14734] nf_conntrack 6KB 31KB [ 1081.376434][T14734] wg_peer 141KB 178KB [ 1081.400466][T14734] allowedips_node 19KB 23KB [ 1081.408540][T14734] t10_alua_lu_gp_cache 8KB 11KB [ 1081.524560][T14734] scsi_sense_cache 1318KB 1328KB [ 1081.562402][T14734] virtio_scsi_cmd 21KB 24KB [ 1081.569436][T14734] bio-136 52KB 76KB [ 1081.620483][T14734] io_kiocb 2070KB 2085KB [ 1081.637889][T14734] bio-264 2KB 31KB [ 1081.697363][T14734] mqueue_inode_cache 47KB 91KB [ 1081.784688][T14734] f2fs_bio_post_read_ctx 30KB 31KB [ 1081.823957][T14734] jfs_mp 14KB 15KB [ 1081.880644][T32024] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1081.910108][T14734] fuse_request 4KB 19KB [ 1081.961309][T14734] cifs_small_rq 28KB 32KB [ 1081.967813][T14734] cifs_request 67KB 67KB [ 1082.060508][T14734] cifs_mpx_ids 8KB 11KB [ 1082.089797][ T3438] FAULT_INJECTION: forcing a failure. [ 1082.089797][ T3438] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.138543][T32024] usb 6-1: config 0 has an invalid interface number: 224 but max is 0 [ 1082.182279][T32024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.194230][T14734] cifs_io_subrequest 42KB 47KB [ 1082.220935][ T3438] CPU: 1 UID: 0 PID: 3438 Comm: syz.2.3729 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.220971][ T3438] Tainted: [L]=SOFTLOCKUP [ 1082.220978][ T3438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.220990][ T3438] Call Trace: [ 1082.220998][ T3438] [ 1082.221007][ T3438] dump_stack_lvl+0xe8/0x150 [ 1082.221040][ T3438] should_fail_ex+0x412/0x560 [ 1082.221069][ T3438] should_failslab+0xa8/0x100 [ 1082.221103][ T3438] __kmalloc_cache_noprof+0x88/0x660 [ 1082.221120][ T3438] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1082.221144][ T3438] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1082.221166][ T3438] ? sctp_add_bind_addr+0x8c/0x370 [ 1082.221193][ T3438] sctp_add_bind_addr+0x8c/0x370 [ 1082.221222][ T3438] sctp_copy_local_addr_list+0x314/0x4f0 [ 1082.221253][ T3438] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1082.221278][ T3438] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1082.221304][ T3438] ? sctp_v6_is_any+0x64/0x80 [ 1082.221331][ T3438] ? sctp_copy_one_addr+0x93/0x360 [ 1082.221360][ T3438] sctp_bind_addr_copy+0xb3/0x3c0 [ 1082.221385][ T3438] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1082.221411][ T3438] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1082.221444][ T3438] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1082.221481][ T3438] ? __local_bh_enable_ip+0xd0/0x130 [ 1082.221505][ T3438] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1082.221528][ T3438] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1082.221571][ T3438] sctp_sendmsg+0x1528/0x2c10 [ 1082.221617][ T3438] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1082.221648][ T3438] ? aa_sk_perm+0x6d5/0x900 [ 1082.221677][ T3438] ? __pfx_aa_sk_perm+0x10/0x10 [ 1082.221702][ T3438] ? sock_rps_record_flow+0x19/0x400 [ 1082.221732][ T3438] ? inet_sendmsg+0x2f4/0x370 [ 1082.221763][ T3438] __sys_sendto+0x627/0x7a0 [ 1082.221793][ T3438] ? __pfx___sys_sendto+0x10/0x10 [ 1082.221816][ T3438] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1082.221851][ T3438] ? __fget_files+0x3a0/0x420 [ 1082.221898][ T3438] ? ksys_write+0x242/0x270 [ 1082.221927][ T3438] ? __pfx_ksys_write+0x10/0x10 [ 1082.221965][ T3438] __x64_sys_sendto+0xde/0x100 [ 1082.222002][ T3438] do_syscall_64+0x14d/0xf80 [ 1082.222020][ T3438] ? trace_irq_disable+0x3b/0x150 [ 1082.222054][ T3438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.222075][ T3438] ? clear_bhb_loop+0x40/0x90 [ 1082.222099][ T3438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.222119][ T3438] RIP: 0033:0x7f3e2479c799 [ 1082.222139][ T3438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.222156][ T3438] RSP: 002b:00007f3e229f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1082.222188][ T3438] RAX: ffffffffffffffda RBX: 00007f3e24a15fa0 RCX: 00007f3e2479c799 [ 1082.222202][ T3438] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1082.222215][ T3438] RBP: 00007f3e229f6090 R08: 0000200000000340 R09: 000000000000001c [ 1082.222228][ T3438] R10: 0000000004065851 R11: 0000000000000246 R12: 0000000000000001 [ 1082.222241][ T3438] R13: 00007f3e24a16038 R14: 00007f3e24a15fa0 R15: 00007f3e24b3fa48 [ 1082.222274][ T3438] [ 1082.250338][T14734] cifs_io_request 105KB 111KB [ 1082.347417][T32024] usb 6-1: config 0 has no interface number 0 [ 1082.581623][ T3437] syz.3.3728 (3437): drop_caches: 2 [ 1082.770728][T14734] nfs_commit_data 24KB 31KB [ 1082.779416][T14734] nfs_write_data 38KB 47KB [ 1082.789899][T14734] jbd2_inode 10KB 11KB [ 1082.797210][T14734] ext4_system_zone 1KB 3KB [ 1082.840351][T14734] ext4_io_end_vec 1KB 11KB [ 1082.849720][T14734] kioctx 9KB 31KB [ 1082.870530][T14734] aio_kiocb 11KB 18KB [ 1082.890065][T14734] userfaultfd_ctx_cache 11KB 47KB [ 1082.898478][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1082.970891][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1082.983728][T32024] usb 6-1: config 0 interface 224 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1083.001207][T32024] usb 6-1: config 0 interface 224 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1083.017065][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1083.028681][T32024] usb 6-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1083.054417][T32024] usb 6-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 1083.065198][T14734] fanotify_fid_event 11KB 15KB [ 1083.065265][T32024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.085898][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1083.095386][T32024] usb 6-1: Product: syz [ 1083.101624][T32024] usb 6-1: Manufacturer: syz [ 1083.108052][T32024] usb 6-1: SerialNumber: syz [ 1083.114585][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1083.115635][T14734] fanotify_mark 19KB 23KB [ 1083.127546][T32024] usb 6-1: config 0 descriptor?? [ 1083.150657][T32024] ldusb 6-1:0.224: Interrupt in endpoint not found [ 1083.200465][T14734] dnotify_mark 21KB 23KB [ 1083.207526][T14734] dnotify_struct 5KB 7KB [ 1083.214760][T14734] fasync_cache 18KB 19KB [ 1083.222520][T14734] zspage 126KB 153KB [ 1083.231937][T14734] zs_handle 229KB 692KB [ 1083.240004][T14734] pid_namespace 23KB 46KB [ 1083.248251][T14734] kvm_gmem_inode_cache 26KB 31KB [ 1083.263900][T14734] kvm_async_pf 0KB 15KB [ 1083.273835][T14734] kvm_vcpu 41KB 156KB [ 1083.281927][T14734] kvm_mmu_page_header 19KB 38KB [ 1083.292559][T14734] pte_list_desc 15KB 31KB [ 1083.301903][T14734] x86_emulator 57KB 126KB [ 1083.341791][T32024] usb 6-1: USB disconnect, device number 57 [ 1083.350425][T14734] rpc_buffers 25KB 31KB [ 1083.357693][T14734] rpc_tasks 8KB 11KB [ 1083.420632][T14734] UNIX-STREAM 52KB 122KB [ 1083.428334][T14734] UNIX 190KB 459KB [ 1083.535486][T14734] ip4-frags 0KB 7KB [ 1083.573142][T14734] mfc_cache 11KB 16KB [ 1083.600367][T32033] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1083.643022][T14734] UDP-Lite 34KB 127KB [ 1083.674724][T14734] MPTCP 42KB 91KB [ 1083.694916][T14734] request_sock_subflow_v4 0KB 7KB [ 1083.727845][T14734] tcp_bind2_bucket 1KB 12KB [ 1083.761236][T14734] tcp_bind_bucket 4KB 16KB [ 1083.777037][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.780379][T32033] usb 3-1: Using ep0 maxpacket: 16 [ 1083.784967][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.836901][T14734] inet_peer 2KB 4KB [ 1083.871510][T32024] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1083.875349][T14734] xfrm_dst 0KB 39KB [ 1083.894702][T32033] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1083.911145][T32033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.922884][T14734] xfrm_state 2KB 15KB [ 1083.930493][T32033] usb 3-1: Product: syz [ 1083.935868][T14734] ip_fib_trie 30KB 36KB [ 1083.943280][T32033] usb 3-1: Manufacturer: syz [ 1083.948441][T32033] usb 3-1: SerialNumber: syz [ 1083.968387][T14734] ip_fib_alias 92KB 110KB [ 1083.978892][T14734] rtable 15KB 72KB [ 1083.986818][T32033] usb 3-1: config 0 descriptor?? [ 1083.997898][T32033] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1084.018428][T14734] PING 19KB 31KB [ 1084.035122][T32024] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.070340][T32033] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1084.077417][T14734] RAW 43KB 127KB [ 1084.105979][T14734] UDP 85KB 159KB [ 1084.117834][T32024] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1084.147866][T14734] tw_sock_TCP 0KB 7KB [ 1084.158540][T32024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.191784][T14734] request_sock_TCP 0KB 7KB [ 1084.191815][T32024] usb 1-1: Product: syz [ 1084.228872][T14734] TCP 239KB 478KB [ 1084.239873][T32024] usb 1-1: Manufacturer: syz [ 1084.255164][ T3460] bridge_slave_0: left allmulticast mode [ 1084.263678][T14734] hugetlbfs_inode_cache 7KB 60KB [ 1084.277309][ T3460] bridge_slave_0: left promiscuous mode [ 1084.289809][T14734] netfs_subrequest 35KB 37KB [ 1084.296971][T32024] usb 1-1: SerialNumber: syz [ 1084.309885][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.326507][T14734] netfs_request 105KB 111KB [ 1084.336111][T14734] bio-280 21KB 23KB [ 1084.342440][T32024] usb 1-1: config 0 descriptor?? [ 1084.355163][T14734] ep_head 1KB 16KB [ 1084.365783][T14734] eventpoll_pwq 4KB 15KB [ 1084.377647][T14734] eventpoll_epi 22KB 39KB [ 1084.396191][ T3460] bridge_slave_1: left allmulticast mode [ 1084.427960][T32024] CoreChips 1-1:0.0: probe with driver CoreChips failed with error -22 [ 1084.450000][ T3460] bridge_slave_1: left promiscuous mode [ 1084.459392][T14734] inotify_inode_mark 25KB 39KB [ 1084.467966][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.478458][T14734] sgpool-128 17KB 29KB [ 1084.486056][T14734] sgpool-64 195KB 382KB [ 1084.510492][T14734] sgpool-32 95KB 173KB [ 1084.531263][T14734] sgpool-16 46KB 82KB [ 1084.569838][ T3460] bond0: (slave bond_slave_0): Releasing backup interface [ 1084.608551][T14734] sgpool-8 68KB 93KB [ 1084.646673][T32024] usb 1-1: USB disconnect, device number 68 [ 1084.649097][T14734] bio_crypt_ctx 9KB 11KB [ 1084.664618][T32033] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1084.675710][ T3460] bond0: (slave bond_slave_1): Releasing backup interface [ 1084.692708][T32034] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1084.772567][T14734] bio_integrity_data 7KB 8KB [ 1084.789162][ T3460] team0: Port device team_slave_0 removed [ 1084.807791][T14734] request_queue 162KB 309KB [ 1084.881100][T32034] usb 6-1: Using ep0 maxpacket: 32 [ 1084.888790][T14734] blkdev_ioc 0KB 7KB [ 1084.900575][T14734] bio-200 309KB 333KB [ 1084.908844][ T3460] team0: Port device team_slave_1 removed [ 1084.926612][T32034] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1084.952641][T32034] usb 6-1: config 0 has no interface number 0 [ 1084.966357][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.977843][T14734] biovec-max 633KB 871KB [ 1084.986047][T14734] biovec-128 227KB 384KB [ 1084.999939][T32034] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1085.023800][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.033103][T32034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.043141][T14734] biovec-64 160KB 252KB [ 1085.051320][T32034] usb 6-1: Product: syz [ 1085.057592][T14734] biovec-16 43KB 63KB [ 1085.067240][T32034] usb 6-1: Manufacturer: syz [ 1085.079426][T32034] usb 6-1: SerialNumber: syz [ 1085.088378][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.100870][T14734] mm_slot 4KB 7KB [ 1085.109227][T14734] ksm_mm_slot 6KB 8KB [ 1085.118761][T32034] usb 6-1: config 0 descriptor?? [ 1085.136410][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.148709][T14734] ksm_rmap_item 5KB 7KB [ 1085.158101][T32034] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1085.191320][T14734] user_namespace 28KB 30KB [ 1085.227408][T14734] uid_cache 7KB 11KB [ 1085.250668][ T51] Bluetooth: hci6: command tx timeout [ 1085.264569][ T3460] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1085.289639][T14734] dmaengine-unmap-256 26KB 30KB [ 1085.431972][T14734] dmaengine-unmap-128 14KB 15KB [ 1085.484113][T14734] dmaengine-unmap-16 7KB 8KB [ 1085.494682][T32034] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1085.505811][T14734] dmaengine-unmap-2 3KB 4KB [ 1085.518934][T14734] QIPCRTR 9KB 125KB [ 1085.528536][T32034] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1085.568743][T14734] audit_buffer 0KB 15KB [ 1085.584576][T14734] skbuff_ext_cache 1KB 16KB [ 1085.592119][T14734] skbuff_small_head 4269KB 4325KB [ 1085.599035][T14734] skbuff_fclone_cache 41KB 105KB [ 1085.606528][T14734] skbuff_head_cache 8637KB 8688KB [ 1085.614133][T32033] em28xx 3-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 1085.627646][T32033] em28xx 3-1:0.0: board has no eeprom [ 1085.636301][T14734] configfs_dir_cache 15KB 16KB [ 1085.669975][T14734] file_lease_cache 5KB 15KB [ 1085.687797][T14734] file_lock_cache 4KB 35KB [ 1085.710780][T14734] file_lock_ctx 14KB 23KB [ 1085.726315][T14734] fsnotify_inode_mark_connector 17KB 31KB [ 1085.757454][T14734] fsnotify_mark_connector 13KB 15KB [ 1085.770980][T14734] posix_timers_cache 40KB 48KB [ 1085.867113][T32034] usb 8-1: USB disconnect, device number 10 [ 1085.892142][T32033] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1085.906134][T14734] taskstats 60KB 79KB [ 1085.940986][T32033] em28xx 3-1:0.0: dvb set to bulk mode. [ 1085.957368][T14734] mem_cgroup_per_node 80KB 92KB [ 1085.969906][ T10] em28xx 3-1:0.0: Binding DVB extension [ 1085.989858][T14734] mem_cgroup 79KB 89KB [ 1086.003324][T32033] usb 3-1: USB disconnect, device number 91 [ 1086.014430][T14734] proc_dir_entry 905KB 975KB [ 1086.026834][T32033] em28xx 3-1:0.0: Disconnecting em28xx [ 1086.082144][T14734] pde_opener 3KB 15KB [ 1086.110734][T14734] seq_file 86KB 101KB [ 1086.166995][T14734] sigqueue 15KB 43KB [ 1086.187629][T14734] shmem_inode_cache 7891KB 8480KB [ 1086.200954][ T10] em28xx 3-1:0.0: Registering input extension [ 1086.207918][T14734] kernfs_iattrs_cache 18KB 23KB [ 1086.219651][T32033] em28xx 3-1:0.0: Closing input extension [ 1086.231391][T14734] kernfs_node_cache 32023KB 32600KB [ 1086.240119][T14734] mnt_cache 119KB 133KB [ 1086.266605][T14734] filp 948KB 1393KB [ 1086.278501][T32033] em28xx 3-1:0.0: Freeing device [ 1086.317111][T14734] names_cache 800KB 824KB [ 1086.355880][T14734] net_namespace 124KB 200KB [ 1086.396238][T14734] ima_iint_cache 28KB 47KB [ 1086.479859][T14734] lsm_inode_cache 1419KB 1937KB [ 1086.527616][T14734] lsm_file_cache 272KB 436KB [ 1086.535521][T14734] key_jar 26KB 55KB [ 1086.543780][T14734] uts_namespace 45KB 77KB [ 1086.613049][T14734] nsproxy 10KB 15KB [ 1086.622888][T14734] vm_area_struct 1788KB 1863KB [ 1086.633176][T14734] fs_cache 76KB 136KB [ 1086.640519][T14734] files_cache 274KB 510KB [ 1086.648156][T14734] signal_cache 1237KB 2218KB [ 1086.657128][T14734] sighand_cache 1563KB 2525KB [ 1086.681237][T14734] task_struct 5596KB 7123KB [ 1086.704902][T14734] cred 240KB 428KB [ 1086.738956][ T3591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1086.763136][T14734] anon_vma_chain 551KB 602KB [ 1086.837673][T14734] anon_vma 579KB 629KB [ 1086.865481][T15496] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.883803][T14734] pid 209KB 326KB [ 1086.962167][T14734] Acpi-Operand 118KB 205KB [ 1086.990435][T14734] Acpi-ParseExt 4KB 19KB [ 1087.048700][T14734] Acpi-Parse 2KB 15KB [ 1087.061103][T14734] Acpi-State 4KB 23KB [ 1087.068774][T14734] Acpi-Namespace 26KB 32KB [ 1087.145014][T14734] shared_policy_node 5KB 8KB [ 1087.153064][T14734] numa_policy 4KB 7KB [ 1087.159720][T14734] perf_event 10KB 31KB [ 1087.196424][T14734] trace_event_file 540KB 540KB [ 1087.205245][T14734] ftrace_event_field 1020KB 1023KB [ 1087.213021][T14734] pool_workqueue 756KB 816KB [ 1087.296887][T14734] task_group 43KB 46KB [ 1087.336533][ T51] Bluetooth: hci6: command tx timeout [ 1087.339765][ T3614] input: syz0 as /devices/virtual/input/input84 [ 1087.343075][T14734] maple_node 1342KB 1760KB [ 1087.367216][T15496] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.389106][T14734] mm_struct 422KB 673KB [ 1087.415080][T14734] vmap_area 548KB 788KB [ 1087.443162][T14734] debug_objects_cache 4542KB 4806KB [ 1087.475139][T14734] page->ptl 188KB 299KB [ 1087.532336][T14734] kmalloc-cg-8k 2560KB 2816KB [ 1087.539608][T14734] kmalloc-cg-4k 23032KB 25952KB [ 1087.610616][ T3612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3742'. [ 1087.647341][T14734] kmalloc-cg-2k 13540KB 15008KB [ 1087.713000][T14734] kmalloc-cg-1k 3988KB 4576KB [ 1087.749227][T14734] kmalloc-cg-512 2280KB 2720KB [ 1087.772843][T14734] kmalloc-cg-256 550KB 632KB [ 1087.810429][T14734] kmalloc-cg-128 331KB 372KB [ 1087.817015][T14734] kmalloc-cg-64 69KB 112KB [ 1087.870284][T14734] kmalloc-cg-32 70KB 244KB [ 1087.903488][T15496] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.933414][T14734] kmalloc-cg-16 4KB 8KB [ 1087.956986][T14734] kmalloc-cg-8 29KB 36KB [ 1087.998746][T14734] kmalloc-cg-192 56KB 76KB [ 1088.035591][T14734] kmalloc-cg-96 83KB 120KB [ 1088.061579][T14734] kmalloc-8k 8832KB 9280KB [ 1088.088575][T14734] kmalloc-4k 161216KB 161624KB [ 1088.119464][T14734] kmalloc-2k 13732KB 15840KB [ 1088.145772][T14734] kmalloc-1k 18634KB 19204KB [ 1088.180747][T14734] kmalloc-512 13661KB 18256KB [ 1088.210606][T14734] kmalloc-256 10620KB 10664KB [ 1088.250522][T14734] kmalloc-128 6122KB 10220KB [ 1088.270323][T32033] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1088.285383][T14734] kmalloc-64 3490KB 3996KB [ 1088.310802][T14734] kmalloc-32 3007KB 4288KB [ 1088.359852][T14734] kmalloc-16 540KB 580KB [ 1088.421069][ T3641] ±ÿ: renamed from bond_slave_0 (while UP) [ 1088.428189][T14734] kmalloc-8 503KB 556KB [ 1088.449759][T14734] kmalloc-192 2276KB 3968KB [ 1088.481084][ T3643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3742'. [ 1088.502422][T14734] kmalloc-96 2292KB 2344KB [ 1088.508926][T14734] kmem_cache_node 213KB 220KB [ 1088.560494][T14734] kmem_cache 177KB 195KB [ 1088.590017][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1088.590717][T32024] usb 6-1: USB disconnect, device number 58 [ 1088.612009][T14734] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=udevd,pid=14734,uid=0 [ 1088.613773][T14734] Out of memory (oom_kill_allocating_task): Killed process 14734 (udevd) total-vm:20876kB, anon-rss:0kB, file-rss:4kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1088.703032][ T5192] udevd[5192]: worker [14734] terminated by signal 9 (Killed) [ 1088.703089][ T5192] udevd[5192]: worker [14734] failed while handling '/devices/platform/dummy_udc.3/gadget.3' [ 1088.703415][T32024] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1088.753931][T32024] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1088.754821][T32024] quatech2 6-1:0.51: device disconnected [ 1088.814610][T15496] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.870558][ T3702] FAULT_INJECTION: forcing a failure. [ 1088.870558][ T3702] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.870600][ T3702] CPU: 0 UID: 0 PID: 3702 Comm: syz.5.3747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.870624][ T3702] Tainted: [L]=SOFTLOCKUP [ 1088.870630][ T3702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1088.870641][ T3702] Call Trace: [ 1088.870649][ T3702] [ 1088.870656][ T3702] dump_stack_lvl+0xe8/0x150 [ 1088.870691][ T3702] should_fail_ex+0x412/0x560 [ 1088.870721][ T3702] should_failslab+0xa8/0x100 [ 1088.870745][ T3702] __kmalloc_cache_noprof+0x88/0x660 [ 1088.870764][ T3702] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1088.870791][ T3702] ? sctp_add_bind_addr+0x8c/0x370 [ 1088.870820][ T3702] sctp_add_bind_addr+0x8c/0x370 [ 1088.870848][ T3702] sctp_copy_local_addr_list+0x314/0x4f0 [ 1088.870874][ T3702] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1088.870895][ T3702] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1088.870921][ T3702] ? sctp_v6_is_any+0x64/0x80 [ 1088.870947][ T3702] ? sctp_copy_one_addr+0x93/0x360 [ 1088.870974][ T3702] sctp_bind_addr_copy+0xb3/0x3c0 [ 1088.870998][ T3702] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1088.871023][ T3702] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1088.871054][ T3702] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1088.871090][ T3702] ? __local_bh_enable_ip+0xd0/0x130 [ 1088.871113][ T3702] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1088.871135][ T3702] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1088.871169][ T3702] sctp_sendmsg+0x1528/0x2c10 [ 1088.871213][ T3702] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1088.871241][ T3702] ? aa_sk_perm+0x6d5/0x900 [ 1088.871268][ T3702] ? __pfx_aa_sk_perm+0x10/0x10 [ 1088.871292][ T3702] ? sock_rps_record_flow+0x19/0x400 [ 1088.871322][ T3702] ? inet_sendmsg+0x2f4/0x370 [ 1088.871354][ T3702] __sys_sendto+0x627/0x7a0 [ 1088.871384][ T3702] ? __pfx___sys_sendto+0x10/0x10 [ 1088.871407][ T3702] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1088.871441][ T3702] ? __fget_files+0x3a0/0x420 [ 1088.871486][ T3702] ? ksys_write+0x242/0x270 [ 1088.871508][ T3702] ? __pfx_ksys_write+0x10/0x10 [ 1088.871533][ T3702] __x64_sys_sendto+0xde/0x100 [ 1088.871562][ T3702] do_syscall_64+0x14d/0xf80 [ 1088.871579][ T3702] ? trace_irq_disable+0x3b/0x150 [ 1088.871603][ T3702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.871624][ T3702] ? clear_bhb_loop+0x40/0x90 [ 1088.871646][ T3702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.871664][ T3702] RIP: 0033:0x7fda7739c799 [ 1088.871683][ T3702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.871700][ T3702] RSP: 002b:00007fda78228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1088.871721][ T3702] RAX: ffffffffffffffda RBX: 00007fda77615fa0 RCX: 00007fda7739c799 [ 1088.871736][ T3702] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1088.871748][ T3702] RBP: 00007fda78228090 R08: 0000200000000340 R09: 000000000000001c [ 1088.871760][ T3702] R10: 0000000004065851 R11: 0000000000000246 R12: 0000000000000002 [ 1088.871773][ T3702] R13: 00007fda77616038 R14: 00007fda77615fa0 R15: 00007fda7773fa48 [ 1088.871806][ T3702] [ 1089.392704][ T3466] chnl_net:caif_netlink_parms(): no params data found [ 1089.420649][ T51] Bluetooth: hci6: command tx timeout [ 1091.181111][ T24] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1091.207976][T15496] bond0 (unregistering): Released all slaves [ 1091.330996][ T24] usb 4-1: device descriptor read/64, error -71 [ 1091.491643][ T51] Bluetooth: hci6: command tx timeout [ 1091.505510][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.529586][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.609682][ T3860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3755'. [ 1091.623720][ T3466] bridge_slave_0: entered allmulticast mode [ 1091.633959][ T24] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1091.642457][ T3466] bridge_slave_0: entered promiscuous mode [ 1091.804111][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.841555][ T24] usb 4-1: device descriptor read/64, error -71 [ 1091.852860][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.873032][ T3466] bridge_slave_1: entered allmulticast mode [ 1091.959048][ T3466] bridge_slave_1: entered promiscuous mode [ 1091.996719][ T24] usb usb4-port1: attempt power cycle [ 1092.339351][ T3466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.382919][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1092.385365][ T3466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.452880][ T24] usb 4-1: device descriptor read/8, error -71 [ 1092.770675][ T24] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1092.806107][ T3466] team0: Port device team_slave_0 added [ 1092.833141][ T24] usb 4-1: device descriptor read/8, error -71 [ 1092.921442][ T3466] team0: Port device team_slave_1 added [ 1092.955816][ T24] usb usb4-port1: unable to enumerate USB device [ 1093.359904][ T3949] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1093.466318][T15496] hsr_slave_0: left promiscuous mode [ 1093.758571][T15496] hsr_slave_1: left promiscuous mode [ 1093.805493][T15496] veth1_macvtap: left promiscuous mode [ 1093.910113][T15496] veth0_macvtap: left promiscuous mode [ 1094.169880][T15496] veth1_vlan: left promiscuous mode [ 1094.196361][T15496] veth0_vlan: left promiscuous mode [ 1094.368273][ T3963] sock: sock_timestamping_bind_phc: sock not bind to device [ 1094.421333][ T3963] fuse: Bad value for 'user_id' [ 1094.460864][ T3963] fuse: Bad value for 'user_id' [ 1094.563387][ T3969] netlink: 'syz.2.3761': attribute type 5 has an invalid length. [ 1094.571601][ T3969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3761'. [ 1094.662143][ T3971] netlink: 'syz.2.3761': attribute type 5 has an invalid length. [ 1094.670878][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3761'. [ 1095.395547][T32033] hid-generic 000A:0004:0009.0031: unknown main item tag 0x3 [ 1095.490541][T32033] hid-generic 000A:0004:0009.0031: unknown main item tag 0x3 [ 1095.581718][T32033] hid-generic 000A:0004:0009.0031: unknown main item tag 0x3 [ 1095.592401][T32033] hid-generic 000A:0004:0009.0031: unknown main item tag 0x3 [ 1095.640416][T32033] hid-generic 000A:0004:0009.0031: unknown main item tag 0x3 [ 1095.780446][T32033] hid-generic 000A:0004:0009.0031: unknown main item tag 0x3 [ 1095.818429][T32033] hid-generic 000A:0004:0009.0031: unknown main item tag 0x3 [ 1095.853847][T32033] hid-generic 000A:0004:0009.0031: unknown main item tag 0x3 [ 1095.905664][T32033] hid-generic 000A:0004:0009.0031: unknown main item tag 0x3 [ 1096.011372][T32033] hid-generic 000A:0004:0009.0031: unknown main item tag 0x3 [ 1096.083699][T32033] hid-generic 000A:0004:0009.0031: hidraw0: HID v0.04 Device [syz1] on syz0 [ 1096.398799][ T3466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.411317][ T3466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.462301][ T3998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1096.504616][ T3998] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1096.526524][ T3466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.609709][ T3969] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1096.611247][ T3971] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1096.642106][ T3998] netlink: 'syz.3.3765': attribute type 21 has an invalid length. [ 1096.697252][ T3466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.712826][ T3466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.752101][ T3998] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1096.841679][ T3466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.030606][T32033] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1097.100642][ T3466] hsr_slave_0: entered promiscuous mode [ 1097.182406][ T3466] hsr_slave_1: entered promiscuous mode [ 1097.199459][ T3466] debugfs: 'hsr0' already exists in 'hsr' [ 1097.234119][ T3466] Cannot create hsr debugfs directory [ 1097.278443][T32033] usb 4-1: config 1 has an invalid interface number: 161 but max is 2 [ 1097.316629][T32033] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1097.364706][T32033] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1097.416266][T32033] usb 4-1: config 1 has no interface number 1 [ 1097.449276][T32033] usb 4-1: config 1 interface 161 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 1097.539454][T32033] usb 4-1: config 1 interface 161 has no altsetting 0 [ 1097.572429][T32033] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1097.616736][T32033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.624447][T15496] IPVS: stop unused estimator thread 0... [ 1097.647561][T32033] usb 4-1: Product: syz [ 1097.663319][T32033] usb 4-1: Manufacturer: syz [ 1097.700662][T32033] usb 4-1: SerialNumber: syz [ 1097.850698][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1098.030377][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1098.075240][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1098.094755][T32033] usb 4-1: 0:1 : does not exist [ 1098.099750][T32033] usb 4-1: 0:2 : does not exist [ 1098.138937][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.214301][ T24] usb 3-1: Product: syz [ 1098.219070][ T24] usb 3-1: Manufacturer: syz [ 1098.270725][ T24] usb 3-1: SerialNumber: syz [ 1098.349844][ T24] usb 3-1: config 0 descriptor?? [ 1098.381726][ T24] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1098.514381][T32033] usb 4-1: USB disconnect, device number 107 [ 1098.647398][T14730] udevd[14730]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1098.865286][ T3466] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1098.913980][ T3466] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1098.985283][ T3466] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1099.068223][ T3466] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1099.221936][ T24] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 1099.317864][ T24] usb 3-1: USB disconnect, device number 92 [ 1099.695248][ T3466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.823801][ T3466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.942619][T15496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.950316][T15496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.088692][T15522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.096068][T15522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.242464][T32034] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1100.260451][ T4223] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3774'. [ 1100.450512][T32034] usb 1-1: Using ep0 maxpacket: 16 [ 1100.482547][T32034] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1100.510546][ T1210] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1100.537715][T32034] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.549116][ T3466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.571723][ T4233] FAULT_INJECTION: forcing a failure. [ 1100.571723][ T4233] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.588707][T32034] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1100.610399][ T4233] CPU: 0 UID: 0 PID: 4233 Comm: syz.5.3777 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.610477][ T4233] Tainted: [L]=SOFTLOCKUP [ 1100.610485][ T4233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1100.610498][ T4233] Call Trace: [ 1100.610506][ T4233] [ 1100.610516][ T4233] dump_stack_lvl+0xe8/0x150 [ 1100.610549][ T4233] should_fail_ex+0x412/0x560 [ 1100.610580][ T4233] should_failslab+0xa8/0x100 [ 1100.610606][ T4233] __kmalloc_cache_noprof+0x88/0x660 [ 1100.610626][ T4233] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1100.610653][ T4233] ? sctp_add_bind_addr+0x8c/0x370 [ 1100.610691][ T4233] sctp_add_bind_addr+0x8c/0x370 [ 1100.610721][ T4233] sctp_copy_local_addr_list+0x314/0x4f0 [ 1100.610751][ T4233] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1100.610777][ T4233] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1100.610803][ T4233] ? sctp_v6_is_any+0x64/0x80 [ 1100.610829][ T4233] ? sctp_copy_one_addr+0x93/0x360 [ 1100.610857][ T4233] sctp_bind_addr_copy+0xb3/0x3c0 [ 1100.610883][ T4233] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1100.610907][ T4233] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1100.610939][ T4233] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1100.610988][ T4233] ? __local_bh_enable_ip+0xd0/0x130 [ 1100.611012][ T4233] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1100.611033][ T4233] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1100.611068][ T4233] sctp_sendmsg+0x1528/0x2c10 [ 1100.611121][ T4233] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1100.611151][ T4233] ? aa_sk_perm+0x6d5/0x900 [ 1100.611180][ T4233] ? __pfx_aa_sk_perm+0x10/0x10 [ 1100.611205][ T4233] ? sock_rps_record_flow+0x19/0x400 [ 1100.611235][ T4233] ? inet_sendmsg+0x2f4/0x370 [ 1100.611266][ T4233] __sys_sendto+0x627/0x7a0 [ 1100.611295][ T4233] ? __pfx___sys_sendto+0x10/0x10 [ 1100.611317][ T4233] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1100.611350][ T4233] ? __fget_files+0x3a0/0x420 [ 1100.611385][ T4233] ? ksys_write+0x242/0x270 [ 1100.611408][ T4233] ? __pfx_ksys_write+0x10/0x10 [ 1100.611434][ T4233] __x64_sys_sendto+0xde/0x100 [ 1100.611465][ T4233] do_syscall_64+0x14d/0xf80 [ 1100.611483][ T4233] ? trace_irq_disable+0x3b/0x150 [ 1100.611511][ T4233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.611531][ T4233] ? clear_bhb_loop+0x40/0x90 [ 1100.611556][ T4233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.611576][ T4233] RIP: 0033:0x7fda7739c799 [ 1100.611596][ T4233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.611625][ T4233] RSP: 002b:00007fda78228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1100.611648][ T4233] RAX: ffffffffffffffda RBX: 00007fda77615fa0 RCX: 00007fda7739c799 [ 1100.611662][ T4233] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1100.611675][ T4233] RBP: 00007fda78228090 R08: 0000200000000340 R09: 000000000000001c [ 1100.611696][ T4233] R10: 0000000004065851 R11: 0000000000000246 R12: 0000000000000002 [ 1100.611709][ T4233] R13: 00007fda77616038 R14: 00007fda77615fa0 R15: 00007fda7773fa48 [ 1100.611742][ T4233] [ 1101.025908][ T3466] veth0_vlan: entered promiscuous mode [ 1101.038852][ T3466] veth1_vlan: entered promiscuous mode [ 1101.050625][ T1210] usb 4-1: device descriptor read/64, error -71 [ 1101.102278][T32034] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1101.114817][T32034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.124813][T32034] usb 1-1: Product: syz [ 1101.129621][T32034] usb 1-1: Manufacturer: syz [ 1101.135311][T32034] usb 1-1: SerialNumber: syz [ 1101.175812][ T3466] veth0_macvtap: entered promiscuous mode [ 1101.191203][ T3466] veth1_macvtap: entered promiscuous mode [ 1101.211981][ T3466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.268852][ T3466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.282523][T15523] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.295259][ T1210] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1101.387379][T15523] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.459939][T15523] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.472354][ T1210] usb 4-1: device descriptor read/64, error -71 [ 1101.493189][T28774] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1101.574550][T15523] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.640435][ T5918] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1101.640761][T32034] usb 1-1: 0:2 : does not exist [ 1101.654926][ T1210] usb usb4-port1: attempt power cycle [ 1101.830873][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 1101.858586][ T5918] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1101.888772][ T5918] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1101.923618][ T5918] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1102.010859][ T1210] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1102.020832][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1102.037738][T15522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.071192][ T1210] usb 4-1: device descriptor read/8, error -71 [ 1102.079929][ T5918] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1102.103617][T15522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.159248][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1102.205257][ T5918] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1102.265954][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.320628][ T1210] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1102.342940][ T5918] usb 6-1: config 0 descriptor?? [ 1102.439942][T15523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.460574][ T4211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.475205][ T1210] usb 4-1: device descriptor read/8, error -71 [ 1102.530015][T15523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.566834][ T4211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.684457][ T1210] usb usb4-port1: unable to enumerate USB device [ 1102.717172][ T5918] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1102.764717][ T5918] usb 6-1: USB disconnect, device number 59 [ 1102.784849][ T5918] usblp0: removed [ 1102.834833][ T1210] usb 1-1: USB disconnect, device number 70 [ 1103.230724][ T5918] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1103.350343][ T29] audit: type=1326 audit(1772347921.959:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.8.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3869b9c799 code=0x7ffc0000 [ 1103.528938][ T29] audit: type=1326 audit(1772347921.959:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.8.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3869b9c799 code=0x7ffc0000 [ 1103.600949][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 1103.633302][ T5918] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1103.660677][ T5918] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1103.690898][ T5918] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1103.733149][ T29] audit: type=1326 audit(1772347921.959:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.8.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3869b9c799 code=0x7ffc0000 [ 1103.780389][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1103.837007][ T5918] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1103.968578][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1103.984620][ T29] audit: type=1326 audit(1772347921.959:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.8.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3869b9c799 code=0x7ffc0000 [ 1104.040083][ T5918] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1104.060740][ T30] INFO: task syz.6.3403:32227 blocked for more than 143 seconds. [ 1104.112211][ T30] Tainted: G L syzkaller #0 [ 1104.130331][ T29] audit: type=1326 audit(1772347921.959:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.8.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3869b9c799 code=0x7ffc0000 [ 1104.158307][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.187717][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1104.248056][ T5918] usb 6-1: config 0 descriptor?? [ 1104.261329][ T30] task:syz.6.3403 state:D stack:27360 pid:32227 tgid:32193 ppid:9678 task_flags:0x400040 flags:0x00080002 [ 1104.320955][ T29] audit: type=1326 audit(1772347921.959:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.8.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3869b9c799 code=0x7ffc0000 [ 1104.360478][ T30] Call Trace: [ 1104.373427][ T30] [ 1104.392718][ T30] __schedule+0x1585/0x5340 [ 1104.424024][ T30] ? __pfx___schedule+0x10/0x10 [ 1104.521086][ T5918] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1104.541622][ T30] ? schedule+0x90/0x360 [ 1104.551503][ T29] audit: type=1326 audit(1772347921.959:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.8.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3869b9c799 code=0x7ffc0000 [ 1104.593559][ T30] schedule+0x164/0x360 [ 1104.613870][ T30] schedule_preempt_disabled+0x13/0x30 [ 1104.664454][ T30] __mutex_lock+0x7fe/0x1300 [ 1104.677989][ T5918] usb 6-1: USB disconnect, device number 60 [ 1104.698339][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1104.729323][ T30] ? blk_trace_startstop+0x8f/0x610 [ 1104.745905][ T5918] usblp0: removed [ 1104.760383][ T29] audit: type=1326 audit(1772347921.959:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.8.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3869b9c799 code=0x7ffc0000 [ 1104.803757][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1104.830252][ T30] ? unwind_next_frame+0xa5/0x23c0 [ 1104.920727][ T30] blk_trace_startstop+0x8f/0x610 [ 1104.975806][ T30] ? __pfx_blk_trace_startstop+0x10/0x10 [ 1104.983612][ T29] audit: type=1326 audit(1772347921.959:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.8.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3869b9c799 code=0x7ffc0000 [ 1105.030382][ T30] blk_trace_ioctl+0x314/0x920 [ 1105.050395][ T30] ? kernel_text_address+0xa5/0xe0 [ 1105.071195][ T30] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1105.139699][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1105.151658][ T29] audit: type=1326 audit(1772347921.969:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.8.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3869b9c799 code=0x7ffc0000 [ 1105.190422][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1105.205800][ T30] ? arch_stack_walk+0xfb/0x150 [ 1105.215987][ T30] ? stack_trace_save+0xa9/0x100 [ 1105.241673][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1105.267516][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1105.323735][ T30] ? format_decode+0xd0/0xe10 [ 1105.348492][ T30] ? kasan_save_track+0x4f/0x80 [ 1105.360081][ T30] ? kasan_save_track+0x3e/0x80 [ 1105.375367][ T30] ? kasan_save_free_info+0x46/0x50 [ 1105.401766][ T30] ? __kasan_slab_free+0x5c/0x80 [ 1105.421522][ T30] ? kfree+0x1c1/0x630 [ 1105.438666][ T30] ? tomoyo_path_number_perm+0x501/0x630 [ 1105.463165][ T30] ? security_file_ioctl+0xc3/0x2a0 [ 1105.492240][ T30] ? __se_sys_ioctl+0x47/0x170 [ 1105.530437][ T30] ? do_syscall_64+0x14d/0xf80 [ 1105.548416][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.591192][ T30] blkdev_common_ioctl+0x13a7/0x3250 [ 1105.617697][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1105.645075][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 1105.675488][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1105.703561][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1105.735649][ T30] ? do_vfs_ioctl+0x1166/0x1530 [ 1105.767893][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1105.788020][ T30] ? irqentry_exit+0x59e/0x620 [ 1105.809970][ T30] blkdev_ioctl+0x528/0x740 [ 1105.846893][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1105.870257][ T30] ? __fget_files+0x2a/0x420 [ 1105.890242][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1105.923568][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1105.947709][ T30] __se_sys_ioctl+0xfc/0x170 [ 1105.970434][ T30] do_syscall_64+0x14d/0xf80 [ 1105.991815][ T30] ? trace_irq_disable+0x3b/0x150 [ 1106.032405][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.060670][ T30] ? clear_bhb_loop+0x40/0x90 [ 1106.082622][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.115687][ T30] RIP: 0033:0x7fadd4f9c799 [ 1106.134599][ T30] RSP: 002b:00007fadd5ea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.175707][ T30] RAX: ffffffffffffffda RBX: 00007fadd5216270 RCX: 00007fadd4f9c799 [ 1106.214576][ T30] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000008 [ 1106.253225][ T30] RBP: 00007fadd5032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1106.285292][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.318826][ T30] R13: 00007fadd5216308 R14: 00007fadd5216270 R15: 00007fadd533fa48 [ 1106.353716][ T30] [ 1106.369862][ T30] INFO: task syz.6.3403:32234 blocked for more than 145 seconds. [ 1106.421850][ T30] Tainted: G L syzkaller #0 [ 1106.447698][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1106.511165][ T30] task:syz.6.3403 state:D stack:28696 pid:32234 tgid:32193 ppid:9678 task_flags:0x400040 flags:0x00080002 [ 1106.580686][ T30] Call Trace: [ 1106.591255][ T30] [ 1106.617487][ T30] __schedule+0x1585/0x5340 [ 1106.642052][ T30] ? __pfx___schedule+0x10/0x10 [ 1106.670761][ T30] ? schedule+0x90/0x360 [ 1106.683379][ T30] schedule+0x164/0x360 [ 1106.702349][ T30] schedule_preempt_disabled+0x13/0x30 [ 1106.727387][ T30] __mutex_lock+0x7fe/0x1300 [ 1106.804351][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1106.827213][ T30] ? blk_trace_ioctl+0x39a/0x920 [ 1106.856021][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1106.878679][ T30] blk_trace_ioctl+0x39a/0x920 [ 1106.903433][ T30] ? kernel_text_address+0xa5/0xe0 [ 1106.940307][ T30] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1106.953877][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1106.980572][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1107.006572][ T30] ? arch_stack_walk+0xfb/0x150 [ 1107.032289][ T30] ? stack_trace_save+0xa9/0x100 [ 1107.056177][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1107.079460][ T30] ? kasan_save_free_info+0x46/0x50 [ 1107.103854][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1107.125579][ T30] ? format_decode+0xd0/0xe10 [ 1107.145571][ T30] ? kasan_save_track+0x4f/0x80 [ 1107.165598][ T30] ? kasan_save_track+0x3e/0x80 [ 1107.187071][ T30] ? kasan_save_free_info+0x46/0x50 [ 1107.205069][ T30] ? __kasan_slab_free+0x5c/0x80 [ 1107.225615][ T30] ? kfree+0x1c1/0x630 [ 1107.239310][ T30] ? tomoyo_path_number_perm+0x501/0x630 [ 1107.271556][ T30] ? security_file_ioctl+0xc3/0x2a0 [ 1107.290120][ T30] ? __se_sys_ioctl+0x47/0x170 [ 1107.308907][ T30] ? do_syscall_64+0x14d/0xf80 [ 1107.326406][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.355329][ T30] blkdev_common_ioctl+0x13a7/0x3250 [ 1107.380545][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1107.386442][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 1107.414180][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1107.432445][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1107.439834][ T30] ? do_vfs_ioctl+0x1166/0x1530 [ 1107.465800][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1107.489324][ T30] ? trace_irq_disable+0x3b/0x150 [ 1107.512773][ T30] blkdev_ioctl+0x528/0x740 [ 1107.517812][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1107.539636][ T30] ? __fget_files+0x2a/0x420 [ 1107.564925][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1107.580385][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1107.601663][ T30] __se_sys_ioctl+0xfc/0x170 [ 1107.623066][ T30] do_syscall_64+0x14d/0xf80 [ 1107.645454][ T30] ? trace_irq_disable+0x3b/0x150 [ 1107.664108][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.680336][ T30] ? clear_bhb_loop+0x40/0x90 [ 1107.697167][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.722175][ T30] RIP: 0033:0x7fadd4f9c799 [ 1107.734736][ T30] RSP: 002b:00007fadd5e83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.766338][ T30] RAX: ffffffffffffffda RBX: 00007fadd5216360 RCX: 00007fadd4f9c799 [ 1107.787641][ T30] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000008 [ 1107.826516][ T30] RBP: 00007fadd5032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1107.862104][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.880315][ T30] R13: 00007fadd52163f8 R14: 00007fadd5216360 R15: 00007fadd533fa48 [ 1107.900718][ T30] [ 1107.911937][ T30] [ 1107.911937][ T30] Showing all locks held in the system: [ 1108.242597][ T30] 3 locks held by kworker/0:1/10: [ 1108.264920][ T30] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1108.295486][ T30] #1: ffffc900000f7c40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1108.340532][ T30] #2: ffffffff8e880088 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 1108.367065][ T30] 1 lock held by khungtaskd/30: [ 1108.388464][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1108.432226][ T30] 2 locks held by getty/5581: [ 1108.450615][ T30] #0: ffff888036aa00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1108.479578][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1108.516184][ T30] 2 locks held by kworker/0:7/32033: [ 1108.527653][ T30] 2 locks held by syz.6.3403/32219: [ 1108.554025][ T30] 1 lock held by syz.6.3403/32227: [ 1108.585650][ T30] #0: ffff888026059bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0x8f/0x610 [ 1108.610790][ T30] 1 lock held by syz.6.3403/32234: [ 1108.622145][ T30] #0: ffff888026059bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x39a/0x920 [ 1108.650929][ T30] 2 locks held by dhcpcd/4369: [ 1108.672269][ T30] #0: ffff88807bdf0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1108.719984][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1108.746027][ T30] [ 1108.751225][ T30] ============================================= [ 1108.751225][ T30] [ 1108.776114][ T30] NMI backtrace for cpu 1 [ 1108.776142][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.776171][ T30] Tainted: [L]=SOFTLOCKUP [ 1108.776179][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1108.776191][ T30] Call Trace: [ 1108.776199][ T30] [ 1108.776209][ T30] dump_stack_lvl+0xe8/0x150 [ 1108.776243][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1108.776269][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1108.776297][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1108.776331][ T30] sys_info+0x135/0x170 [ 1108.776353][ T30] watchdog+0xfd9/0x1030 [ 1108.776387][ T30] ? watchdog+0x21a/0x1030 [ 1108.776423][ T30] kthread+0x388/0x470 [ 1108.776442][ T30] ? __pfx_watchdog+0x10/0x10 [ 1108.776468][ T30] ? __pfx_kthread+0x10/0x10 [ 1108.776488][ T30] ret_from_fork+0x51e/0xb90 [ 1108.776517][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.776541][ T30] ? __switch_to+0xc7d/0x1450 [ 1108.776567][ T30] ? __pfx_kthread+0x10/0x10 [ 1108.776588][ T30] ret_from_fork_asm+0x1a/0x30 [ 1108.776632][ T30] [ 1108.776640][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1108.907561][ C0] NMI backtrace for cpu 0 [ 1108.907587][ C0] CPU: 0 UID: 0 PID: 32033 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.907610][ C0] Tainted: [L]=SOFTLOCKUP [ 1108.907617][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1108.907627][ C0] Workqueue: events purge_vmap_node [ 1108.907652][ C0] RIP: 0010:deref_stack_reg+0x1bd/0x230 [ 1108.907677][ C0] Code: 30 4c 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 a3 10 b9 00 <4c> 89 33 b0 01 eb 02 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f [ 1108.907691][ C0] RSP: 0018:ffffc90004a873a0 EFLAGS: 00000246 [ 1108.907704][ C0] RAX: 1ffff92000950ea1 RBX: ffffc90004a87508 RCX: 0000000000000001 [ 1108.907717][ C0] RDX: ffffc90004a87508 RSI: dffffc0000000000 RDI: ffffc90004a87f38 [ 1108.907729][ C0] RBP: 1ffff92000950e99 R08: ffffc90004a87f38 R09: 0000000000000000 [ 1108.907739][ C0] R10: ffffc90004a87518 R11: fffff52000950ea5 R12: 1ffff92000950e9a [ 1108.907750][ C0] R13: 1ffff92000950e9b R14: 0000000000000000 R15: dffffc0000000000 [ 1108.907762][ C0] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 1108.907775][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.907791][ C0] CR2: 00007ffcc54d5c60 CR3: 0000000075c5a000 CR4: 00000000003526f0 [ 1108.907808][ C0] Call Trace: [ 1108.907815][ C0] [ 1108.907826][ C0] unwind_next_frame+0x18c6/0x23c0 [ 1108.907851][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1108.907872][ C0] ? ret_from_fork+0x51e/0xb90 [ 1108.907893][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1108.907910][ C0] arch_stack_walk+0x11b/0x150 [ 1108.907933][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1108.907957][ C0] stack_trace_save+0xa9/0x100 [ 1108.907972][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1108.907992][ C0] save_stack+0x122/0x230 [ 1108.908009][ C0] ? __pfx_save_stack+0x10/0x10 [ 1108.908023][ C0] ? __free_frozen_pages+0xc2b/0xdb0 [ 1108.908038][ C0] ? kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 1108.908060][ C0] ? __apply_to_page_range+0xbdc/0x1420 [ 1108.908078][ C0] ? __kasan_release_vmalloc+0xa2/0xd0 [ 1108.908115][ C0] ? purge_vmap_node+0x220/0x960 [ 1108.908131][ C0] ? process_scheduled_works+0xb02/0x1830 [ 1108.908150][ C0] ? worker_thread+0xa50/0xfc0 [ 1108.908168][ C0] ? kthread+0x388/0x470 [ 1108.908181][ C0] ? ret_from_fork+0x51e/0xb90 [ 1108.908204][ C0] ? page_ext_put+0x97/0xc0 [ 1108.908221][ C0] __reset_page_owner+0x71/0x1f0 [ 1108.908237][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 1108.908255][ C0] ? ___free_pages+0xb2/0x220 [ 1108.908273][ C0] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 1108.908296][ C0] __apply_to_page_range+0xbdc/0x1420 [ 1108.908321][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 1108.908346][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 1108.908369][ C0] __kasan_release_vmalloc+0xa2/0xd0 [ 1108.908391][ C0] purge_vmap_node+0x220/0x960 [ 1108.908414][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 1108.908433][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1108.908450][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1108.908469][ C0] process_scheduled_works+0xb02/0x1830 [ 1108.908499][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.908520][ C0] ? assign_work+0x3d5/0x5e0 [ 1108.908540][ C0] worker_thread+0xa50/0xfc0 [ 1108.908570][ C0] kthread+0x388/0x470 [ 1108.908585][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1108.908603][ C0] ? __pfx_kthread+0x10/0x10 [ 1108.908619][ C0] ret_from_fork+0x51e/0xb90 [ 1108.908638][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.908657][ C0] ? __switch_to+0xc7d/0x1450 [ 1108.908676][ C0] ? __pfx_kthread+0x10/0x10 [ 1108.908691][ C0] ret_from_fork_asm+0x1a/0x30 [ 1108.908718][ C0] [ 1109.345877][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1109.353317][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.365045][ T30] Tainted: [L]=SOFTLOCKUP [ 1109.369405][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.379799][ T30] Call Trace: [ 1109.383194][ T30] [ 1109.386315][ T30] vpanic+0x56c/0xa60 [ 1109.390583][ T30] ? __pfx___schedule+0x10/0x10 [ 1109.397314][ T30] ? __pfx_vpanic+0x10/0x10 [ 1109.402585][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1109.408976][ T30] panic+0xc5/0xd0 [ 1109.413223][ T30] ? __pfx_panic+0x10/0x10 [ 1109.418374][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1109.425432][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1109.432239][ T30] watchdog+0x1023/0x1030 [ 1109.437051][ T30] ? watchdog+0x21a/0x1030 [ 1109.442827][ T30] kthread+0x388/0x470 [ 1109.447533][ T30] ? __pfx_watchdog+0x10/0x10 [ 1109.452705][ T30] ? __pfx_kthread+0x10/0x10 [ 1109.457659][ T30] ret_from_fork+0x51e/0xb90 [ 1109.463656][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1109.469232][ T30] ? __switch_to+0xc7d/0x1450 [ 1109.474546][ T30] ? __pfx_kthread+0x10/0x10 [ 1109.479893][ T30] ret_from_fork_asm+0x1a/0x30 [ 1109.485670][ T30] [ 1109.488980][ T30] Kernel Offset: disabled [ 1109.493686][ T30] Rebooting in 86400 seconds..