last executing test programs: 18m53.05063015s ago: executing program 32 (id=2080): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$inet6(0xa, 0x80002, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 18m12.168752022s ago: executing program 33 (id=2342): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17m9.907913217s ago: executing program 34 (id=2716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r2, 0x65, 0x481, 0x0, &(0x7f00000002c0)) fgetxattr(r2, 0x0, &(0x7f0000000140)=""/73, 0x49) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r1, 0x540b, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x4c}}, 0x24000000) 11m50.845313515s ago: executing program 35 (id=4681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000002040)=0x80000001) 9m30.153603317s ago: executing program 5 (id=5637): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000840)="ff02040000ffffffffffffffff1f2be82db1af0000000000c92aa55625ed4ef5cbb86a41fe1e6a25357f3f27e4071ba4ba544a8f0e6c4812d60da6831a984fd8f0475b581a1c11ba4f51563b4f91335531dcb5edf5cba80db99712db1ebe43ffb683825df8549ff92098a42c7d4514aa133da10b5ef24174cfbb38ca53b9ce2c0dd536080c43a9a735c7182aedb7d21d6d48b24d5d1910e0292b1bd2c3a2909e58b2e86c5b1bce459f560d4400095e3f8a0ab33b972c822668530eb7dd3552fb0ac85f971b33a23cf20ade0d934953485fde0f5e58d6e6a7dc0fc69d8c027e", 0xdf) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000140)=0xfffffffffffffce3) timer_settime(r1, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, &(0x7f0000000040)=0x8, 0x4) r5 = syz_usb_connect$uac3(0x5, 0xae, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x60, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x5, 0x0, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x24, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x15, 0x7}, [@selector_unit={0xb, 0x24, 0xc, 0x7, 0x6, "8227e00acdbe"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x3c, 0x37, 'e'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x3, 0x2, 0xb, "1bad618d1d3f638500"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x7, 0x0, 0xb2}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x2, 0x1, {0xa, 0x25, 0x25, 0xd9b, 0x6, 0xe20}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x87, 0x5, 0x9, {0xa, 0x25, 0x25, 0x2, 0x3c}}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0xa, 0x3, 0x6, 0x10, 0x80}, 0x8a, &(0x7f0000000bc0)={0x5, 0xf, 0x8a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0xd68c083043fb92f1, 0xe, 0x8, 0x1, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x3, 0x2}, @ptm_cap={0x3}, @generic={0x55, 0x10, 0x2, "a634020e1ab7f6dc8a4b9012bc0bcac9c8739067cc00b2315814dd57b0a883e1877f7df7016c06779ca54b97c0c52b9ad49ea4c6321be85a390dbfc491c5abbc0ff02a9fe0f1f0b2d879f6f69174977596d7"}, @ssp_cap={0x1c, 0x10, 0xa, 0xa, 0x4, 0xe, 0xf008, 0x7, [0xc000, 0xf0, 0xff0030, 0xff30]}]}, 0x5, [{0x0, 0x0}, {0xb6, &(0x7f0000000d40)=ANY=[@ANYBLOB="b60358a150ed10184e839ee0aab89733ff24e5ae03c20349e0108c0e6da76ff57371da3c262ce6a8668747dc7fc856c8fa6c945fce4326ec667cf4af7b843998c1f8e5b53a3ba93ff162a903649f3afc06b42639ed90e90de75a317fca44d3ed5a84f381bd53d98327d7af148c357817b81c711db592ec011c897edf7da5c855faf76401e8902aeb99591229195e1fba5ca53431bbdde028b934d84d8750f632271b33373e792d68cad6817de14e11ec0e69447becc6"]}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0xab3222a2661ef167}}]}) syz_usb_control_io$uac3(r5, &(0x7f0000001000)={0x14, &(0x7f0000000f40)=ANY=[@ANYBLOB="40234d0000004d09290daaef8031772d48dd7e29f8adea1e77d65552d1ea46f498b465a554d69adcacef7b72d61a4c053b619b07e7c83ec30f7b4b90d41a50433706005b46d5188b3b3f2df785000000000000"], &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f00000012c0)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="001387000000f931f7b070d917aea97f7b8720f27e61c3bfec45a40d49ec0f76c60874e6fa6cb0e88ab13466437d75ff6743148f076f36808794351474eacbb23ba61dd784d15fbc3585c5d47ae91232ea4f1aff1cbbec9426da940a9168672bbdb04dba777396e633d3257125d0751d7e1620ce207c72b84dde5af65006e1fa26615714bffa02ddf0c95f6247a1e22ba1107e79b48a1eab8882c70591f3760e23c19e732ae4f54eddcdd38b98539ad5cdb344fab078e5892a626e7622"], &(0x7f0000001100)={0x0, 0xa, 0x1, 0xea}, &(0x7f0000001140)={0x0, 0x8, 0x1}, &(0x7f0000001180)=ANY=[], 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="000000601f6509"], &(0x7f0000001240)={0x20, 0x84, 0x1, '('}, &(0x7f0000001280)={0x20, 0x85, 0x3, "93994b"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000180)={0x0, 0xc, 0x4, "e8c7d131"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x4, 0xe6, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x3, 0x1, 0x7, 0xa0, 0x1, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xd, 0x0, 0x24, 0x9}, [@input_terminal={0x10, 0x24, 0x2, 0x2, 0x205, 0x6, 0x4d, 0xc, 0x1, 0x3, 0x4, 0x4}, @processing_unit={0xb, 0x24, 0x8, 0x6, 0x6, [0x3, 0x1, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x3, 0x81, 0x2c}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf, 0x4, 0x9, 0x59, "89", 'w'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x55, 0x4, 0xff, 0x88}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x22, 0x3, 0xb, {0x8, 0x25, 0x1, 0x3, 0x6, 0x7, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xc, 0x2, 0x10, 0x89, "a31f2dda733a015009"}, @as_header={0x10, 0x24, 0x1, 0xbb, 0x59, 0x0, 0x1002, 0xd4, 0x1, 0x6}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x0, 0x2, 'o', 'qW'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x514d, 0xe, 0x6, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x81, 0x80, 0x10, {0x8, 0x25, 0x1, 0x0, 0x3, 0x2, 0x8}}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x4, [{0x71, &(0x7f0000000480)=@string={0x71, 0x3, "9f9454c09bc0575246fe7e87a0b26c1576900729f9507525e26153d44528961950b88758231bda62bafde001abc9c32928abc9cfd8c74af5a81c15a42c517e7ef14d129fa50b3db6b003dddf3c7713b3ba7e5630982f8db3e86522bb67c136e6b2358578c6efe08b2d6e8ae1166f20"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42a}}, {0x34, &(0x7f0000000440)=@string={0x34, 0x3, "b8aad6f52f08b6026ae6145b9d2a1b975ce09ac9bf6fa6f168ffe33128ed6728c2cbf20518e36b9cc8288703875253a042aa"}}]}) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000708001000000000000000000070000002cfcddef2a982fbf9c513b970fed9461dbf1f6cd6c0c", @ANYBLOB="0c00018008000100000001000c0002", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x8057}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x400000, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_getevents(r7, 0x2, 0x1, &(0x7f0000001840)=[{}], &(0x7f0000001880)={0x77359400}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x1f, &(0x7f00000013c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x408, 0x210, 0x0, 0x0, 0x2d8, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, &(0x7f0000001340), {[{{@ip={@multicast1, @empty, 0xff000000, 0xffffffff, 'bond_slave_1\x00', 'pim6reg\x00', {0xff}, {}, 0xff, 0x3, 0x8c}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xe5}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @private=0xa010100, 0xffffffff, 0xffffff00, 'team_slave_0\x00', 'vlan0\x00', {}, {}, 0xff, 0x0, 0x29}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0xffffffffffffffff, 0x0, 0x1}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x6, @broadcast, 0x4e20}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x28}, @multicast2, 0x0, 0x2993041399f9fa0c, 'ip_vti0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x2, 0x2, 0x33}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) 9m30.077454519s ago: executing program 7 (id=5638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fcffffff000000009f09000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000f8500000083000000bf0900000000000055090100200000009564000000000000bf91000000000000b7020829fe68000085000000d400a16eb70000000064000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x1f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 9m30.010482902s ago: executing program 7 (id=5641): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0x8b, &(0x7f00000004c0)=ANY=[@ANYBLOB="120110010000002099045c1040000102030109027900030104c00a080b000201012007090400000001012000092401010004090009090401000001022000090401010101022000102401064a0202100000c30100010001090501094000080106082501820308a7060904020000010220000904020101010220001e058209ff03070cff0825010130400900c344dafa31c21598243b2fcb505f1b3e9f403a0391c008bd77c429514e6b307d5b84834f369de63d5a445dd25c08454f1756ee48aeb3b4392a678bf51bc2c94a12f882b01da2a4b69fd21638b8776384841db2"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10d000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="51814e7525160048294fcdbc7f8626fdcf59f606526022db9225c6c9445a416eeeb6a0dd0f5dfb", @ANYRES64=0x0], 0x20) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x7e4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x0, 0xfffffffe}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000b9b389fd00000000000000109500000000000000"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r6}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000002000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @mcast2, 0xe41c}, 0x5b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) 9m29.055290415s ago: executing program 4 (id=5644): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x20, 0x7800, 0xff, 0x5, {{0x6, 0x4, 0x1, 0xe, 0x18, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0x10}, {0x1, 0xe}, {0x7ff9, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0x3, 0x9, 0x7, 0x2, 0xf, 0x3, 0x1}}, {0x6, 0x2, [0x400]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x400) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$DVB_DEMUX_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f0000000180)={0x3ff, 0x80000, r5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000001b80)={&(0x7f0000000300)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000000000003400000001"], 0x18}, 0x0) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40, 0x0, 0x35c}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r2, r2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) writev(r7, &(0x7f0000000280), 0x0) 9m28.875619344s ago: executing program 4 (id=5645): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="84010000100001000000000000000000fc00000000000000000000080000ff03000000000000000000000000ffb2f6e8ffecdf000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000200000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000000000000000000000000800000000000000000000000000000000000000000ffffffff2dbd700000000000020004004c00000000000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400686d61632873686132353629"], 0x184}}, 0x0) 9m28.87524419s ago: executing program 4 (id=5646): syz_usb_connect(0x2, 0x68, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000a1121710950b2a17f477010203010902240001000000000904fb00026c5d650009050402110000fa000905820240"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33e}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x4) (async) io_uring_enter(r1, 0x3dbd, 0x771f, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00') (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x200a}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40)={0x2000000b}) (async, rerun: 32) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x20403, 0x0) (async, rerun: 32) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0xb4) (async, rerun: 32) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa08060001080006040003ffffffffffff64010102bbbbbbbbbbbb7f00000143adcbaee2e26bee6741c5ead6c3c3079b6948d5d4d4f164256fb7e3c7c20149dbf3f7f5a0fba7e9b9e023041f579c0654"], &(0x7f0000000180)={0x0, 0x4, [0x517, 0x9d9, 0x637, 0x480]}) (async, rerun: 64) sendmmsg(r6, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000380)="f359", 0x2}, {0x0}], 0x2}}], 0x1, 0x0) (rerun: 64) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_wakeup_irq', 0x400, 0x8) 9m28.317667911s ago: executing program 7 (id=5649): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00001a7000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB="20140400348b35e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9m27.880727322s ago: executing program 4 (id=5651): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r2, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000280)=""/103, 0x67}], 0x2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x230000, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000007980)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000007900)="86c0b4"}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001a56ea70879005a5919130102030109022400010b0420830904e20502ff5d810509050b0281ff17c6349667a0c48600029e6b0909050a00000210f908"], 0x0) 9m26.988883448s ago: executing program 7 (id=5656): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="84010000100001000000000000000000fc00000000000000000000080000ff03000000000000000000000000ffb2f6e8ffecdf000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) 9m26.877701801s ago: executing program 7 (id=5657): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x1, 0x21, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x1a, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "c478a4e950"}, {0x5, 0x24, 0x0, 0xfeff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfffa, 0x0, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @mdlm_detail={0x13, 0x24, 0x13, 0x0, "26ecfbaef0deb5504ca40986ee3c66"}, @network_terminal={0x7, 0x24, 0xa, 0xf2, 0x0, 0x60, 0x2a}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x0, 0xf6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xc9, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0xe, 0x5, 0x8, 0x6d}, 0x7c, &(0x7f0000000100)={0x5, 0xf, 0x7c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7f, 0x2, 0x800}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0xfa, 0xeb}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "5b9e7745c4274dda7e8fbdf393a04b0c"}, @generic={0x4c, 0x10, 0x1, "56e511da3a62e7584decab3b64a05aefa17083b01f2b9190f74cf1bb449e79e311799730f1062ec3c9d83d7c55bd7356c55bdca5cbc798ab8fc376dd551fb0f8a0d8868b12641b0169"}, @ptm_cap={0x3}]}, 0x2, [{0x6c, &(0x7f0000000180)=@string={0x6c, 0x3, "ffa76f5e8f7933191b3a30a5f8fe421b195d56938696bf03c605eb0f35885274d8ad0ac8dbb5dbbd875f08f10c51297403e92063fca049a79d2afc812e2244a6da443100a0afbd2dbe50936113bbcc841f0b1909722ca27be615bf1face5d454654234288be066e74e3e"}}, {0xff, &(0x7f0000000200)=@string={0xff, 0x3, "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"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x20, 0x16, 0x2, "f4ca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m26.547553209s ago: executing program 5 (id=5658): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x1d19, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0xfffe, @multicast1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) r2 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000240)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r6, r7, r8, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) creat(&(0x7f0000000140)='./file0\x00', 0x30) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m26.497392813s ago: executing program 5 (id=5659): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x400, @remote}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000640)="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", 0x1b9) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1000, 0x8001) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000080)={0x1, 0x2, 0xffff5f11, 0xfffd, 0xfffffffffffffff7, 0xc, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x26, 0x6, 0x2}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000080)={0x1, 0x2, 0xffff5f11, 0xfffd, 0xfffffffffffffff7, 0xc, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x26, 0x6, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000022c0), 0x165102, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000002240)={{r3, &(0x7f00000020c0)='@\\)\x00', 0x181002, &(0x7f0000002100)={@_ha_fsid={[0x0, 0x2]}, {0xd, 0x2, 0x2, 0x8001}}, 0x0, &(0x7f0000002140)={@_ha_fsid}, &(0x7f0000002180)=0x4}, {[0x6, 0x401, 0x7, 0x5]}, 0x9, 0x5a, &(0x7f00000021c0)=""/90}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) write$binfmt_aout(r3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000001000010000000000000000000500000a3c00000009a68d0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a3100000000001100010000000000000000000100000a00"/100], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a4c000000000900010073797a310000000014000380100000800c000180060000000000000000000200000a00"/104], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a4c000000000900010073797a310000000014000380100000800c000180060000000000000000000200000a00"/104], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x4008440) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000002300)) 9m26.349669592s ago: executing program 5 (id=5660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x284000, 0x0) ioctl$KVM_TDX_FINALIZE_VM(r3, 0xc008aeba, &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000001380)=[{&(0x7f00000007c0)={&(0x7f0000000740)={0x0, &(0x7f0000000640)="2a54f107d7e7617de971bff52a1ea1e5548c40b47842b4628e6f1c219d861255835b1c2f5b35b03472", 0x1, 0x29}, 0x0, 0x1}, &(0x7f0000000800)="7858b6020a73f1a5073bb82a46b252995b29c9e1abde110fa185524555f3e773204ef9e6763737aecc4398f85774aed55293", 0x0, 0x32}], 0x0) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000021c0)) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000180)) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) (async) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000180)={"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"}) 9m26.349215653s ago: executing program 4 (id=5661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtclass={0x2c, 0x28, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x2, 0xfff3}, {0x6, 0x1}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200c4810}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r10, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2040) syz_fuse_handle_req(r10, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x1, 0x3, 0x3, 0x8, 0x0, 0x80, {0x5, 0x80000000000, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x16f, 0xdbf, 0x40, 0x0, 0x0, 0x8000, 0x2, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x44, 0x21, 0x0, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x4, 0x5, 0xc, 0x0, 0x0, 0x0, 0x10000}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r11, r12}}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20044060) (async) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r13, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 9m26.336371745s ago: executing program 5 (id=5662): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x7f, 0x7, 0x10, 0x0, 0x3, 0x3, 0xf2dc, 0x3e, 0x40, 0x124, 0x46, 0xfff, 0x38, 0x3, 0x200, 0x9, 0x8}, [{0x5, 0x3, 0x8000000000000000, 0x28e, 0x0, 0x3, 0x6c, 0x5}, {0x0, 0x1ff, 0x5, 0x3, 0x3, 0x0, 0x80000000, 0x7f8000000000000}, {0x6, 0x1, 0xffffffffffffffff, 0x9, 0x1, 0x2, 0x2, 0x7fffffff}], "c29530b0c51e8a819b8aadbc8c59a73eae5998a3fa3d881c2851a3ebb4b88b92a62fda1bd0f1b2f9444c2d3ebfe2996930d53cdae3c4e850e2d6a4fd92045ce4cc1a8e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x82b) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000880)={0x0, 0x3a}, &(0x7f00000008c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000900)={r1, 0x3}, 0x8) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file1\x00', 0x0, 0x10, r0}, 0x18) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000009c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={r0}) readv(r3, &(0x7f0000001ac0)=[{&(0x7f0000000a40)=""/112, 0x70}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000001b00)=0x3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001b40)={r1, 0x4be, 0x4, [0xf3f, 0x1000, 0x101, 0x8]}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001b80)={r1, 0x6b, "818a4c164e371b672eafdb3b86498e36e59d1a7f6dffd0077bc8275878886dea68c5dc9901e823eb781efca5fdec59a6b8952959e6a1aeacdaa8ba2fc9866500ac739a6fbb55db507d096e08be0c99489f82963236a207a9d6892fee9d135fd2b09dcc435482a4f0eebccc"}, &(0x7f0000001c00)=0x73) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000001c40)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r3, {0x40}}, './file1\x00'}) fsopen(&(0x7f0000001cc0)='ntfs\x00', 0x1) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000001d00)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000001d40)=0x2) socket$alg(0x26, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001d80)='bridge_slave_1\x00', 0x10) timer_create(0x2, &(0x7f0000001dc0)={0x0, 0x21, 0x4}, &(0x7f0000001e00)=0x0) clock_gettime(0x0, &(0x7f0000001e40)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f0000001e80)={{r8, r9+60000000}}, &(0x7f0000001ec0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000001f00)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3}) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000001f40)={0xdd4e, 0x8, 0x2, 0x8000, 0x3, 0x0, [{0x100, 0x6, 0xe73}, {0x1fb, 0x6, 0x89, '\x00', 0x88d}, {0x4f, 0x9, 0x1, '\x00', 0x400}]}) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000002040)='\x00', &(0x7f0000002080)='}#,\'{#\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000020c0)={0x7ff, 0x400, 0x0, 0x6, 0x1, 0xe, 0x18, 0x9, r5}, &(0x7f0000002100)=0x20) r11 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f0000002140)={r10, 0x9, 0x72, "173dc78e97bdbf8ce59fd432e04d93c46a4726d373f4215502547154c778ac27d9bafb241a2684d1c7a466e18024aa114d164c54a52e821b9b916e769e687ed5176ed8f758e606f4334cc98e11d4a45fa95f316b2fd881ab24024f18976870dfd0642d5e8643881d6775a0f22d205105be30"}, 0x7a) userfaultfd(0x0) socket$qrtr(0x2a, 0x2, 0x0) 9m25.381894312s ago: executing program 5 (id=5665): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB="20140400348b35e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9m23.627744355s ago: executing program 4 (id=5666): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00001a7000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB="20140400348b35e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9m22.743166349s ago: executing program 7 (id=5667): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="84010000100001000000000000000000fc00000000000000000000080000ff03000000000000000000000000ffb2f6e8ffecdf000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) 9m3.41339236s ago: executing program 36 (id=5664): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') read(r0, &(0x7f0000000080)=""/248, 0xf8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000009000400000000005c0dbc4f0125f400", @ANYRES32=r0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000040000000f00"/28], 0x50) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000003440)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000880)="12", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1, 0xffff}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000d0a010800000000000000000a0000010900ffa899841e6b76f457df447a2ef9f4c4380009000100a19423852d7611300c000380"], 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x35, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xc, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 9m3.266017797s ago: executing program 37 (id=5663): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0x8c, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff50}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$MRT_TABLE(r8, 0x0, 0xcf, &(0x7f0000000200)=0xff, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0x200, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xfff3}, {0xfff1, 0xd}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "9e9de1a5b087bc6da5ae49611553ea76"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x4}) socket$inet(0x2, 0xa, 0x3) 9m3.028294179s ago: executing program 38 (id=5667): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="84010000100001000000000000000000fc00000000000000000000080000ff03000000000000000000000000ffb2f6e8ffecdf000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) 9m2.93993528s ago: executing program 39 (id=5665): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB="20140400348b35e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9m2.810909517s ago: executing program 40 (id=5666): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00001a7000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB="20140400348b35e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7m20.717472112s ago: executing program 1 (id=6236): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000010000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500fc01000000000000000000000000000100000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000000000000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000090000000100000000000000000c000000000000008f700000ac1e0101000000000000000000000000000004d23c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 7m20.569464811s ago: executing program 1 (id=6237): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x88d0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000380)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x8}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f00000020c0)=""/4082, 0xff2}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1bbc}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008054) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x1, @ANYBLOB="00b97bbc000000000000080000ff016d4b2357a1", @ANYRES32=r6, @ANYRES32, @ANYBLOB="acecae89b6753498fbf8daf5bcad6487d3cf619b1e37c418c43dfd0b5611c94636c7850d097328d0050bb57e20ca40f39509b67aa9eaa8af83b2381bcbf7739ca51159d7d9001646a29e339867a7eb06a357d1b13e31d6cf8129c8e39d58f7c233d3c9b4f0604b9335a743482535552a17e46751e094a72977bcf6da4a22aa28311dc69328abc2be9d489b526d79642445ddf3e268a89974342d903d81aeb8fa190762405b94f7b7b4d3a722b281cda880b5ad881be8aa79a9ecac42a814b638e7ab2bdc4e8737d4290d8662e7b950b21500b4e4e85fbfeac07dde1e733fac7fe3b849779d9bd32a0349cf8d"], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000b40)={'#! ', '', [], 0xa, "bc9de94c8e8d7c32dd04ac6a0e5fb052c61307f24baebaac62c19c0aec4f437d390842a1b72284ab928271866e0bc230683fada67e660413e20226aaabfdb8e76e6bdceece5cb7407a32d341260401a5201895994a8355382a530ce11f90df4b2302f93f163bfd27c8134e8af06bec00b8859b58ba48bbc22d771ca0cfb40b5450cd15e089d485d92d64ee8b3cb95dd816a58aba4c0620a9802e1cfec2a3d8a7b02e7aa7469e0b9df954cf7fa8b727d8e8eba214f76b15f1e64be671ef62a06032bbd3fbf7eb1d3db20420a811b34816d30a5f20b612062e661a573fea6ddb2271dd741d408043ed929d340d30d1643c65e1e9910000000000"}, 0xfd) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) ioperm(0x0, 0x6e, 0xe) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m17.40585685s ago: executing program 1 (id=6251): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$key(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x5c, 0xd, 0x9}, {0x6, 0x0, 0x4, 0x7ffffe39}]}) sendmsg$key(r2, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000020005000000000002"], 0x50}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681) fadvise64(r3, 0x9, 0x2, 0x4) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x20, 0xe, 0xc, "b89b939d2ee58edc0719a623"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x40, 0x1, 0x28, "f41d8cee9d5e423c1d90dd67c6c64bb005bd5fa31c4b410d79fae2393657920b7d605a1411f64da1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) modify_ldt$read(0x1100, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100050085"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x200205, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x458642, 0x0) 7m15.147461069s ago: executing program 1 (id=6259): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x7a, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x8, 0x10, 0xfa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x40, 0x1, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x81, 0x24, 0xed, {0x7, 0x25, 0x1, 0xc, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xb3, 0xc, 0x61, {0x7, 0x25, 0x1, 0xc, 0x6, 0xbc}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) close(r0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa10c4, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4751c2, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) syz_usb_connect$cdc_ecm(0x6, 0x8e, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x8, 0x10, 0xb6, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "4fe4bd3e491e"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x872a, 0x3b, 0x8, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2e35, 0xd2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x8}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2c0}, @mbim_extended={0x8, 0x24, 0x1c, 0x40, 0x1, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x1, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0xf3, 0x8}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0xfa, 0x7, 0xa, 0xff, 0x7}, 0x1ae, &(0x7f0000000680)={0x5, 0xf, 0x1ae, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x3, 0x7f, 0x2}, @ptm_cap={0x3}, @generic={0x102, 0x10, 0xb, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x80, 0xaa, 0x80}, @generic={0x8f, 0x10, 0x3, "9c8dea5c76b39e444635c28dd01685123b31fa20c38e9ab5819e8388fdd7d2fe17562f39173805311e6ea58d91d0fa872a12b320fd996ecc6ba98bd9deaa51c9ab5ec147dabe94ad6e7bfacb246997e3135b44b2f04786e4ecc00fffdc10869b7905ecf89151c8793cf0ce7e5b734b6ef794c1b1fc82605f181ed618485ac914b6d0a2f283d98198beda735f"}]}, 0x3, [{0xfa, &(0x7f0000000840)=@string={0xfa, 0x3, "d0b1ea6dd162996e13bcbfb4d1c88ee6d412665142cadc681762fcd87d568e337515ea4434e357c9fdc6a2aa81b2e82b2bdb1e1ae653ede8e31ff7074ed6efe98d97b9111b85333b416e31153074e6ac5a759728818a9a4dad1cfc74981d51854e64e68619b918579d1510672a154765172d44677a0e305be8d3e232f267b3bd0e313bbb82d59f20b53c6d393b01c2a9e8678f5a850e59f2c8bb803867a508ec45b379b1197aa85df5c0d824f4aa23f0a2a9feecb9bc11afca90fc9b23846e61359464ed099ac997f934c46b4e7fc2621ddb5a8a311276bbc40bff8c32d2a6421a6bb1e378736fb631861057d4a171b8a8edfbe7e8dbff2c"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x180a}}, {0x68, &(0x7f0000000980)=@string={0x68, 0x3, "cb4b47480b5fb827ac67fc138cbffa12bccce928ee37b41b2dc2b445dab8558b82898f74453050cbede3c37e98788fbb9327c0c59465db0c41fc198ef6ffb98ddec452b2089f6aee2167d6a4f389f74b06ab84d166b288dd65906a6642e983f8c811874b207d"}}]}) 7m13.562023359s ago: executing program 1 (id=6272): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002200)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00ed00000000000002000100000000000000030000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000020010016"], 0x68}, 0x1, 0x7}, 0x0) 7m13.04128993s ago: executing program 1 (id=6275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) getpeername$packet(r5, &(0x7f0000000040), &(0x7f00000000c0)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES32=r8], 0x3c}}, 0x0) sendmsg(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000580)="5f98ae17519dce399fa236cc7cded4dde97948b028b09b94ee506430e41cdd48a27ad4f6ffbfd6a98688fdc8f53ef17148eac76771aa7a49da7a97f31d989fe839d0fb7a3ffb9a8bc7587aa112a5c38e7ca0c8498b879b82e7", 0x59}, {&(0x7f0000000700)="be", 0x1}, {&(0x7f0000000740)="9d75948275165efa71e90657ea7da594543719a3357bdb4678c8f0060158d780cdebec6eeaf38400de0f2bf8ff365ef3b9a38810af242d548c6437c61685619e80b39d61bc9b1cd249c3dbef1b957a99", 0x50}, {&(0x7f00000007c0)="89b4d1282841f37f5a4b08832d463c2bc7c21e800d80ba85569a01d2020d8e51e29ea80e3b492ae2ce29ced128b586e90f237e7aab66d7f986c65c03a8d52a573feb5714f7042734f17918ae20d23b9a9d98cf375fae2c2afce3ea3e331930e30c226a715af7d2f6b22b748cdd23fa9ed189ba904940f083cc7f859cee877923cb5975249e7527cd077b7101b065d4e3b317eef2aca02d461356ac3a9a84e49ed3cf99715e33cf1419d8c7b76e9de5a40819b477b5155c4d20503cc7706a9c4b67560872138ea680dc", 0xc9}, {&(0x7f00000008c0)="a1db6d81a9f4bf1da66921d4657fde516a3f0d3951105b03ecaac09395054cf7eff04b7d6c52a25552dd2e04ac85283acabf8f096a9f19a08332f06b16c417ac9c305dfe76be4b5b12ac28258fe5b6eaa8e72e11b574e5f5316692448c4bccb4be9b23d43af955a1d797d1baec22b3c2e60968255995f9af9917f0288d411d4553af22ac04a3ba3a1f4d19dbb5157b76a02f4786f0577c85caae082d1367b30e49beb5b7830976420271e9ae856bb3feb534155f", 0xb4}, {&(0x7f0000000b40)="71544afd78369c10185b9023cc7ff79ffc3daabca34cbb8970d4a2aff0f91c4bf1e86761b1adff6a069a3233fcef719dd210006a9c91f8aca4a0e7e596cdb8b44866057a8c323d2e846aea3e934b272cb2f99c8c6e751bbbf9fd8ba2d5f3536f08f7200014f2fe1ec68b3a3a88794caae6cb452561a53bc9da738fb89409f3ee243cef5030c2d97678d74054127e80fd14126d3847559469ac01d34a0033f19991d3db9c2f27e7bd37b893d39cfba8f8e6d341918a44c2a9bf6e622434845e27aa2e3ccf98d17183514399a7cae1f5b2cbf85df2df4322bcb6d30879ac60d5cbe37b13cc7327bd98a8bcdc5a0e480ed88a0684345fc81439b61cd81098552c17b18b2c54b8d8533cdcb43b1d2483ce6d70d82c43833f929fb8ed86e762b7d70b960065dfad1d6569a943103c4d89c954aba014925e94973e9e1fcb16401e5ae3f7c9e3f61cc706858ac89b86b61f8749fd895789460cb8da1c0ce30e0aecc14ccb28216a93eae71c6c5ed26e56ece1461ca92467136a9e38b94b70d90e5712be081a9a593e3a6df337775934c0adbd6ba339993d7181ffa1e6e2738cbc6887f311a2b9ed1512dd490b876f55f3f5f30e3ffbf4b001ae05382776c6cd25ac57ace59094d4278f91ba99afb9e0908626b37a885c407c1ef9ab4d11d2a31169fb9636fee8c809a45bcf59e63006ef6aac30de8fa4385b59dea8418feaee10832d0309f098c8c1ab94c9f8513fac4a92abceef495de740da8b1623e61c6177ba7d7e0687c854d1c55cd8f3680f32ec0572112ae41a4194c398db09d98b962da5064f1e59a942a5c548a6885cd5829a49949ce569b3927c877b043abedefbd6a9e4f99d4787d0c0e31cd035ad2fb08d018cbd8a75e4c5b64e7358f00e0ec2687238d32e830ad61513d4a4d3eb7f6cc880f5e4cf098437ea36e612941e5def01796106d1a8b42570afaf840bd12107d8e3953aecad2e286330ced646972a44494664fb0660fb08a2ffcdcbc461b14e4772573d772ab5f57962586b2e28684de984744af069d88c03559571828e65e52191660fa8a337301e9d0e07d12c30303ae1043e03b92bd35f43161660d46387eab97b13d64a82220d835554375a767331a8ba56fc2b19f6b8b25ddd59bd8ee7436c6d4877637aa898f48212abfbe1bb93c1d1568d3db08d68525b4198e5349ade3b7d9155a28e080abafffec2606c6dd7c660462812bd6b6bcfc457b976db027ea41754d2c98b0a0f5283d5bdbc959167650c23beef5592e21bb71d9b004b5b4c32c7e3734315686bad5173c49e02bf8b2363edadb200a1fef0bb70db2fa5140f89c25f902832fb312889cc90efdf2bf3993060630d17c2124a4d3a35180580312a8c80a42ac70f7340388616343abfa55a305f581284f430e7558fe3875c29fba6ef188489a6490d03f77c54f61a224ea98578b261914c43fbe6198f408223252def433af7692c82657c3d8c26a28834416661a46b1faab29e3eee03f03a06fa575c34de586c9515b25dabee2c609f503e02a447602c844df3c3dbf9dc02d02640f2afe532760ce647fa9dd183d4441d0c3e8682ed6b4fb49e83f850020cb70082954f9086fafe45f6e6e83ed6d852bdfb231ddc9b1e5cd06c2b763dcdef8197da773707d830ea557bf7c1f6279778015381e63d1d85bb2eb353d9cf99209c0820c0495660447c297af5f62fb92a7bbef38260a717f8f2de4df8bf7ac09f6d2c7f56bad647d2ce1085a23e4943db6ef369febb03af00dd2248e50b7295a003409a3eff69dd4a6e2b16f9e9ae41765da25dadc0c038af16f9bd88024d75fdf206e3e37126e089f47d11d22db0ba84cb6a8a29f5a435000c2c4f30409f3d74e9fa8b7fde8c5a61980c0b0a6c166c3e238a6fa24d9db6e570ebaa24e03a54118131b74daa487e914a225bfb9508290c3db12a7ff5681106d650fc5d5a72340abefe982015d1041078d309f2ba52c6763e60bad8917baa7db3b0a3d33fa5ccbd1bbe2b449a815743b651537fd7711f88824368300575b866993cb1bc8fa72ac176b47ee4d689cc2690762eb215393c07f8636867e95b13ccb04beed2af6d0abca920d547552a322208456123b57b0f5207d339a215a92bdab4eac8a33e3f959f28a0bb4c71fe19186b8a74bbaaa974542c27a388ecb2697e495fe787d419545586e765bc3de9f333e03f828a19f22da1f08c3644477e3ea29c3fcb4b0746b63bb5f6f70ace206c45734c64d64774dafd1a432bebd8f1104f917f629beef372963aca798726d74400f374e22678d655765f2bb62f000cd9cad44609748ad58b4d326ba16eb9edd23e883bcc3aea8014bd3e0065fac580f0aec31711f7f6ab8dcd7095bceeb7eae74092650e4fc26c056c0d59c1cf8bfaaedb91aa152e78b374efafc335171637ebc54ce1364e8e127b6fde82f20566c4f41bda2efa26031746f3077bf8b8f770561212a632d61085455d79a443f324f0488ff37471d760836a91e9e14a70aaedd9162f30e1899a65d60ea07b22a18a8f84d5471fde4d8b43ca115d4ce8ecde4df7e5a7c355ddb68d44cf147969c56455e2e6122e374104d9919acd70e3f01b8e510cb322e209954b21252f1ff4b20e7e214967bb326f48dc15de3db5822a54b53b7f7aa8794c4a2f6ad03897783a485f865bf9b0fce573eed4487d430f2856e196ce48e5183625455956b8bd949712efeede6ad86b0cd928f5feb8c97f438720e189bbce217e0d63eab157e0380a8b6ecf582c3c8aef89167e879ec4a76c17098bf9feeca6aa37a2c0b1a1d9422b80273dc115493e91c0c31d3a6e77a308d66bd56defe321b579ca8e8453c1548933a1ed09c3b57a727bdc42601ca5e8dd757b34ffe046f44849800cedd551124fe662537352e0ec7131c4264dc21f5ff82a56b5144b75d2f487c74bc274c5b3d148f219a7319595044ac14aedefeac1bfef9677ea2c7351edbc142b986d0713f89a476905f67bc520492aeb4ac5ea6c66b128968dd3db77dc19bd314105e13d6fddbd3384df61304e669e85f0b79e54b6243c93679a7b3a16d7a18fc4d4b38856a69484330d1331207ddb800f4cafc763b87e34612bcfafb280b3260f42e4b55734986f73091e6a0f7180f9247bd1685ee2d06ec2cc0f6203c5df8dddb255f4a779f1d4603f0860307fc2f0f31c4348fb185266c6fde1832912d5805c3ad3716888c71a988401da18600697fe1a10b00b741be17f6ed1053dde804850badd7474d82357c5aaf5746dfbbd70bbb00a682887d127a054892f7b84ad3404cfb524c6bd1f728f43469cd50ccebb533d6c7eaa419f042c4d636ca5898f1ec39133dde5af38266a5f9d4ab27027a5157ab878bde5745d9835d7055f8520398cc5e78cf6f536fdddadb1290220e4ce8e8dedce1bbdd4a3db47343fe7dcaa6d996a2163b80b0623a595d2bd3eef693b5d35b7a4a3e5f8a03755ef1cc76b9e00af2e4162d6e1d9c79b1d5d3ff88f959164c5c50f090d6f17e91b826ab43fdc5132bcf40bb1be692b6873c9f4d6f19a270a21c27d4a880fbf1c45583e8676d919a8b0b1da5aea0631d09f69ed5c5107d43926ba16f8886a50d567a67fe87c4ab7eedf521b3c7943740ebcf9c08f535c08e715624a8c7e641d55b1509fac0fbb6e1195f235e850c4933ce9931af03ea1e7a27b73bdfb31928d627265fb159f9a530e1492f6b14c2ea8c7e2c8d6e782ccf03b697a115361e33706b054e694327c147b668c085e1f39e7af7922493724ac6dfbab25e0b74daa4a49537fa5b1c96ba7425340bf170ed77bd571dc3989a826975d832ce0534f83f14f19e7bf7a531b02a96448af3eea4efd97b31b1066f256e8c69a9aa714fe78679b77953a58b5c0d696450234ecc740f4f74b4bd1d152c4cd09d010aa30ed52d0c6e4addfcc77805ffbbea91824de0c42cd307778bc61f6e86658771492d91f685ca04e1c6d0f7717161ddb124b90f8dd5af4d1b5f169756f33c047b1fd0ce806411d1ffc866ee13aba3c0909c37d53c45c5d12811f6f00ae8a54ddee4e3bb68b901d6dbc2dc6bffd2276eddc45c24b2b12634d7d5b1b36986d1fc59d6acc2eae1799e706b468cb1daa18deefe977b8a8e2fc25c1e151a238c485cfb58f3047d93c39a99ecde459b13db1d0eb9dd6bf3a8e8fef54b17f85bee5afd1eb00b61203c939dd82c319c7ea299061128f8c75ee51ed649930a1f9307c62dd0595b247e6336fb97a96862be2aeae27919d4bfc55144da1975a3d844e6484141ef1c06b1c3c2c8a32ad7bc05e382a34c9b53610f86698a1eccf35b3de94b3624cfe1c7f4498bd4c3ee35a62a616a7bb4ef66ca1ba86badf46ab03a1dcdddc2ce41fbba8e1f9dd5e86f5cebaa82b27ccf870663750790a11f5ed2095eb5c7db95492d33c700ab59c98f7f888a95f3c2f38d8556c872afa0ac90e359af824dc8de665b0132193b8e336faa6d32578c03a0116ae413c6b105a76591170b2320c626a6d4e940e5a329cd2d09dc0b4cdb7bbb70554c383c3cf5399dc6eccfb2cb06ecb1d306421acf38b04f44bd394d377a683382f5fdae5920fc404900a0253a4a1b47373c47c9fa5d4f8ccadb57497096a3b25cf9af66056b8f09f42f3278ed38fdede479546a894f35261c6e4c7a2a5432c2cc83b408d196514dbd3121ee2640b8818392860114d581b3feb385d43dc63a0364c1a16f7b3cdb3313a432941b14fd04c6ed43d321bf437fc6cda3821df1018ac60afa02d44ae2fd9b99bc3783bd2fce6c237fd3427eadd6d6e7f91aa0596dd329f160aa0822d58faeee0ee01d750c212f7bec927791678d9864db116ffeed8775d8d6d15656ed59f701506e6c071380dfeb482598a0ce0e53b4c2bee3c1625e7c112f16c6cb3bb41d04c4b09aba50af3bbe054a1308c815f9b6cee721a8cb48e695b7685fa71e61f2be440b39814105066de7674cc98c42dd0adb51b31938b2b2c1ca679c466b6496ee57af966bffa6c6ca8d62f09f585d5f8f331d85ebf2cb59e8123d698e9a5d2e685ca76749044e23fcc057a6b9b292ea3bd3caf43779b148e27794e76e788bc381cb5bf20e2f9537e334e86b12e63395c1df2d86842ec1b49c4e98ad3b34f7580bb3ebc36fd02d9177cebccb8775bab9a18d4eead058832f6bb9e96d514ba13214c14450c5294fab2e3aec7edc011b35d95f795bd25472fb4b2448406bfc27c7a622a8d42e40e93203f874a74eb63a35a18412eb2b8e19e454f2e8c6b80fa017a27a8a8a890a9f924311da60905aab3c979ab8738e47e5f60430a4facf99bb6fa9490cbff00f164a18bee2e69306b8df3515d01ed9a2bbe91a34986ce43f2d59d82dfc27e9b01d9c03b76d8159637530923b231b51ec44e30ef6ca683a3d1f4a1f420e1462add5d19bf2e17619cddf1a57a59411cf8c9734119b1978930a0b938a510e051f8eb0ed80bc61e226eb33572adb3be2a5c07c8ee7594a43ea2cda62d84acc667462134b18f6d7d7e2614155a475ee400622acb14580a0432cc532ebeb9fa39f9351ec15a57cceceef054a64b7e90f1a8ad89e014c8db6295a0f24bf786d6a9e58e72b503f1e560783ebb2e57b384099e5b906e43c06ccbf8a4c51d3f1e917d00ae9fa4d64383567749ee68810cd1ae3e86c2480f2fd29fd361009893b87b82d7fbf6761e296a836524d32103abaa8fb9d7774ff20fa0539c3ed0dba3f9371d7326a72a7313fdd393af282d22c8711bd8a483c2ecb1a7e38bd0d808a0552c5ed6bf11802e85909c3305036d608f663a6efbb846b9", 0x1000}], 0x6, &(0x7f0000001bc0)=[{0x40, 0x109, 0x6, "52b88d7e2f4e5d7066edc14173dc24182a7e848b85d8b8221beca6197e24c87371c5a59d99c477c69a5e5c0a8694fb"}, {0xd0, 0x1, 0xb, "d2754445699719d275a05bfaf6ebfa683eb0944aace8d4a542d376ad8dc2003db0d3a2010713624f8d90f9da4e69ea5f3febd1aabb79ed7cb914c8b33bea966fbb07a034a8ea2f8d2443534f5f35130c3e8288e1965f74d9586b325c0fb59551dd00d280742cbdf6c060e4155d2e8b4e39a71f2baa2963ad704327a14e842e38ed74c86b978e7959153f00e22af3e428e9d555c5ec79a2a068548db0a355ca7119ac829da8f40957b0e93684a1824bdc6542551f72c339d43c96cebbfd"}], 0x110}, 0x4000) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=r8, @ANYBLOB="000000002800128009000100626f6e64000000001800028014000200e0000001ac1e0001ac1e01017f00b079464f2717160c37ff21a9c2c1548a43fe85cf567cd3026f85a479381101e4a3e0f8470f4a1e3b5d846f80ed24fe93faa7bbfc1f5ba4b1fbfec9b87c6e715c219cdedbdaffff0000a864b56193f9f7332ef6f49cbb183f5289ead58b1728e24949dd2e697100000000d3c04e447466184550e1cc97ca8c82f36948211851978f56a92e9616880309ec3d15131d6849c00930aab0ff7254b1688b3265c72e5892a1568aea2f4ec0c2e005d8d73b162b573ff0cb2b11ed5a99f144669019441f9f16770ec3bb57ef310ec085588348d26aad85c8b9547cbc5b5410de175606d4d80c71feed173482821222f2fe75aa3c06404dd3f79c45a0e716ada012"], 0x48}}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000180)={0xfffffffd, 0x81, 0x1, 0x6}, 0x10) 7m12.782171699s ago: executing program 41 (id=6275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) getpeername$packet(r5, &(0x7f0000000040), &(0x7f00000000c0)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES32=r8], 0x3c}}, 0x0) sendmsg(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000580)="5f98ae17519dce399fa236cc7cded4dde97948b028b09b94ee506430e41cdd48a27ad4f6ffbfd6a98688fdc8f53ef17148eac76771aa7a49da7a97f31d989fe839d0fb7a3ffb9a8bc7587aa112a5c38e7ca0c8498b879b82e7", 0x59}, {&(0x7f0000000700)="be", 0x1}, {&(0x7f0000000740)="9d75948275165efa71e90657ea7da594543719a3357bdb4678c8f0060158d780cdebec6eeaf38400de0f2bf8ff365ef3b9a38810af242d548c6437c61685619e80b39d61bc9b1cd249c3dbef1b957a99", 0x50}, {&(0x7f00000007c0)="89b4d1282841f37f5a4b08832d463c2bc7c21e800d80ba85569a01d2020d8e51e29ea80e3b492ae2ce29ced128b586e90f237e7aab66d7f986c65c03a8d52a573feb5714f7042734f17918ae20d23b9a9d98cf375fae2c2afce3ea3e331930e30c226a715af7d2f6b22b748cdd23fa9ed189ba904940f083cc7f859cee877923cb5975249e7527cd077b7101b065d4e3b317eef2aca02d461356ac3a9a84e49ed3cf99715e33cf1419d8c7b76e9de5a40819b477b5155c4d20503cc7706a9c4b67560872138ea680dc", 0xc9}, {&(0x7f00000008c0)="a1db6d81a9f4bf1da66921d4657fde516a3f0d3951105b03ecaac09395054cf7eff04b7d6c52a25552dd2e04ac85283acabf8f096a9f19a08332f06b16c417ac9c305dfe76be4b5b12ac28258fe5b6eaa8e72e11b574e5f5316692448c4bccb4be9b23d43af955a1d797d1baec22b3c2e60968255995f9af9917f0288d411d4553af22ac04a3ba3a1f4d19dbb5157b76a02f4786f0577c85caae082d1367b30e49beb5b7830976420271e9ae856bb3feb534155f", 0xb4}, {&(0x7f0000000b40)="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", 0x1000}], 0x6, &(0x7f0000001bc0)=[{0x40, 0x109, 0x6, "52b88d7e2f4e5d7066edc14173dc24182a7e848b85d8b8221beca6197e24c87371c5a59d99c477c69a5e5c0a8694fb"}, {0xd0, 0x1, 0xb, "d2754445699719d275a05bfaf6ebfa683eb0944aace8d4a542d376ad8dc2003db0d3a2010713624f8d90f9da4e69ea5f3febd1aabb79ed7cb914c8b33bea966fbb07a034a8ea2f8d2443534f5f35130c3e8288e1965f74d9586b325c0fb59551dd00d280742cbdf6c060e4155d2e8b4e39a71f2baa2963ad704327a14e842e38ed74c86b978e7959153f00e22af3e428e9d555c5ec79a2a068548db0a355ca7119ac829da8f40957b0e93684a1824bdc6542551f72c339d43c96cebbfd"}], 0x110}, 0x4000) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x48}}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000180)={0xfffffffd, 0x81, 0x1, 0x6}, 0x10) 6m58.614227377s ago: executing program 2 (id=6355): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000800)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m56.953072283s ago: executing program 2 (id=6371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x7, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r1], 0x0) recvmmsg(r1, 0x0, 0x0, 0x40, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 6m55.617853255s ago: executing program 2 (id=6373): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000400)={0x14, 0x0, 0x0}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x40, 0x14, 0x6, "d8f1404fc363"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20000040) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$inet(r7, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="dc3c2cf2", 0x4}], 0x1, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x82}}], 0x18}}], 0x2, 0x8084) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x1a6c42) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x1000084}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0xdae27cb1b3302389}, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) 6m53.72693528s ago: executing program 2 (id=6386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x128}) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x40, 0xb, 0x20000003, 0xceb, 0x4, 0x7, 0x10, 0x10003, 0x8000000000000000, 0x1, 0xffffffffffff986a, 0x3, 0x6, 0x1], 0x0, 0x110b03}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r6, &(0x7f0000000780)=""/185, 0xb9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'dvmrp0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@newtclass={0xa8, 0x28, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0xa}, {0xf, 0x4}, {0x9, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xe2}}, @TCA_RATE={0x6, 0x5, {0x0, 0x40}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x23}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x4, 0xc8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8001, 0x3, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_mq={0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40001) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m52.723900074s ago: executing program 2 (id=6392): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "a73c365f3eb62011", "0e0d791509948fee027ae445eaf24cafdbe6f768347cc419baaf41606b4eb150", "cfeafccc", "67f226a9c8fa450b"}, 0x38) r2 = dup3(r1, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085, 0x40f00}, 0x94) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x8d9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r3, 0x200, 0x10}, 0xc) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "a73c365f3eb62011", "0e0d791509948fee027ae445eaf24cafdbe6f768347cc419baaf41606b4eb150", "cfeafccc", "67f226a9c8fa450b"}, 0x38) (async) dup3(r1, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085, 0x40f00}, 0x94) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x8d9}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r3, 0x200, 0x10}, 0xc) (async) 6m52.652954264s ago: executing program 2 (id=6393): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x7, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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"/729, 0x2d9}, {&(0x7f0000000f40)="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", 0x1e9}], 0x2, 0x0, 0x0, 0x900}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 6m52.570703608s ago: executing program 42 (id=6393): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x7, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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"/729, 0x2d9}, {&(0x7f0000000f40)="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", 0x1e9}], 0x2, 0x0, 0x0, 0x900}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 22.173546739s ago: executing program 3 (id=8882): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x2900, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0xfffffffffffffffd, 0x7, 0x2000000000000003, 0xb3, 0x9], 0xeeee8000, 0x2010d3}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000bfd000/0x400000)=nil) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) 21.745464753s ago: executing program 9 (id=8885): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000540), 0x84000, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000d00)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000d40)={0x18, r3, 0x3}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000350001002cbd7000000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x44080) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200fe8000000000000008000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000003640)=0xfffffffd, 0x4) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) sched_setscheduler(r6, 0x3, &(0x7f0000003700)=0x1) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r7 = accept4(r0, 0x0, 0x0, 0x80000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003680)=@base={0x18, 0x0, 0x0, 0x8000, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c62d008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000100095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000580)=0xff) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0xfffffffe}, {0x1c}, {0x6}]}) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) (async) recvmmsg(r7, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/150, 0x96}, {&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f0000000500)=""/24, 0x18}], 0x6}, 0x7}, {{&(0x7f0000000640)=@rc={0x1f, @none}, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000007c0)=""/116, 0x74}, {&(0x7f0000000840)=""/86, 0x56}, {&(0x7f00000008c0)=""/118, 0x76}], 0x4, &(0x7f0000000980)=""/114, 0x72}, 0x8}, {{&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/120, 0x78}], 0x1, &(0x7f0000000b40)=""/84, 0x54}, 0x4}, {{&(0x7f0000000bc0)=@qipcrtr, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/215, 0xd7}, {&(0x7f0000000d80)=""/25, 0x19}], 0x3, &(0x7f0000000e00)=""/235, 0xeb}, 0x3d}, {{&(0x7f0000000f00)=@nfc_llcp, 0x80, &(0x7f0000003380)=[{&(0x7f0000000f80)=""/109, 0x6d}, {&(0x7f0000001000)=""/187, 0xbb}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/238, 0xee}, {&(0x7f00000031c0)=""/208, 0xd0}, {&(0x7f00000032c0)=""/137, 0x89}], 0x7, &(0x7f0000003400)=""/214, 0xd6}, 0xf}], 0x5, 0x200, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000f28c0)={{0x0, 0xa, 0x7951, 0x7fffffffffffffff, 0x2, 0x8964, 0xd022, 0x0, 0x5, 0x100, 0x6, 0xfffffffffffffff4, 0x9, 0x6}}) 21.5466698s ago: executing program 9 (id=8887): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r1, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, 0x0, 0x84000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 20.554092407s ago: executing program 0 (id=8899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000300)) (fail_nth: 3) 20.548743746s ago: executing program 8 (id=8900): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) ftruncate(r0, 0x8001) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x84000, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x20, &(0x7f0000002d00)={0x32, 0xffffffff, 0x58}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000180)=0x30) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000bc0)=@newchain={0x24, 0x64, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0x10, 0xfff1}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0xc054) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r5, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001880)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1}, 0x19c}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000000440)=""/235, 0xeb}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/255, 0xff}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/217, 0xd9}, {&(0x7f0000000a80)=""/119, 0x77}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000c80)=""/156, 0x9c}], 0x1}, 0x6}], 0x5, 0x10000, 0x0) 20.20975139s ago: executing program 0 (id=8901): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000002c0)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) preadv(r0, &(0x7f0000000080), 0x0, 0x4b, 0xeaff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="010000000000000083cc2f785ff1fa1400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002"], 0x50) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) 20.197354474s ago: executing program 8 (id=8902): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f00000001c0)='\x00', 0x9901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 20.160972338s ago: executing program 0 (id=8903): syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) 20.086486684s ago: executing program 8 (id=8904): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x7ff, &(0x7f00000005c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000300)) 19.964801988s ago: executing program 8 (id=8905): keyctl$link(0x8, 0x0, 0xfffffffffffffff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x10001, 0x1, 0x20000007, 0x7fffffff, 0x101}, 0x3, 0x8}, [{0xde, 0xe3, 0x1, 0x9, 0x8000, 0x4}, {0x2000000, 0x8, 0x5, 0x1, 0xa66, 0x100}, {0x4, 0x3ee1, 0x6, 0x5432, 0xd, 0x40}, {0x0, 0x9, 0x1, 0xbd, 0x9e3, 0xffffff49}, {0xfff, 0x0, 0x7, 0x80000000, 0x6, 0x55f}, {0x6, 0xb8c, 0x6, 0x3, 0x0, 0x10001}, {0x401, 0x9, 0x5, 0x10000, 0x9, 0x76}, {0x66, 0x7, 0x9, 0x4, 0x0, 0xc4}, {0x1, 0xcc, 0xf, 0x8, 0x0, 0x9}, {0x6, 0x5, 0x1, 0x401, 0x7, 0x4}, {0x6, 0x3, 0x2, 0x2, 0x5, 0x3}, {0x400, 0x8, 0xcf02, 0x876, 0x401, 0x7370d629}, {0x80000000, 0x7, 0x7fff, 0xdc0d, 0x6, 0x3}, {0xb, 0xe, 0x0, 0x80000001, 0x7, 0x4}, {0x0, 0x800, 0xa2e6, 0x10008000}, {0x6, 0x9, 0x1, 0xffffaf21, 0x8, 0x7}, {0xa6, 0x2, 0x1, 0x4, 0x6, 0xfffffffa}, {0x7, 0x100, 0x9, 0x1, 0x3, 0x401}, {0x2, 0x5, 0x4, 0x81, 0x3ff, 0x8000}, {0x7, 0x4, 0x1, 0x1, 0xfffffffa, 0x90e7}, {0x0, 0x2, 0x9, 0x7fff, 0x81, 0x45}, {0x7, 0x2, 0x10, 0x4, 0xffffffff, 0x2}, {0x5, 0x10, 0x8001, 0x5, 0x8, 0x1}, {0xffffffff, 0xffffff64, 0x5, 0xff, 0xc455, 0x4}, {0xb2, 0x1, 0x6, 0x1, 0x3, 0x1}, {0x2, 0x4, 0x200, 0x10000, 0x0, 0x6}, {0x8001, 0x7, 0x7, 0x9, 0xa39, 0x1}, {0xfaa8, 0x0, 0xc, 0x0, 0xa, 0xa}, {0x425, 0x6, 0x1, 0x4, 0x9, 0xbeaa}, {0x2, 0x80000001, 0x0, 0x8, 0x0, 0x7}, {0x101, 0x7, 0xfe3, 0x935, 0x9, 0x8001}, {0x829a, 0x3, 0x0, 0x10001, 0x1, 0x1}, {0xffffffff, 0x6, 0x100, 0x0, 0x9, 0x4}, {0x1, 0xde4c, 0x800, 0x7, 0x8, 0x646f}, {0x7, 0x81, 0x9, 0x6, 0x9}, {0x2, 0x9, 0x40, 0x5, 0x1, 0x71b0}, {0x80000001, 0x7, 0x1, 0xa00000, 0x10, 0x101}, {0x8, 0x80000001, 0x10001, 0x8, 0x7, 0x4}, {0x5, 0x8, 0xfffff6e0, 0xfffffffe, 0x5, 0x424}, {0x7, 0x5, 0x6, 0x5, 0x0, 0xfffffff7}, {0x53, 0xf, 0x7, 0x2, 0x400, 0x7}, {0x1, 0x1, 0x7, 0x401, 0x9cf58fe}, {0x1, 0xffffffff, 0x81c3, 0x1, 0x0, 0x80000001}, {0xffffffff, 0x7, 0x3, 0x8, 0x81, 0x6}, {0x9, 0xfff, 0x6, 0x1, 0x8, 0x6}, {0x7ff, 0x8, 0x7, 0x800, 0x81, 0x400}, {0x5, 0x7, 0x18000000, 0x0, 0x200, 0x8}, {0xfffff800, 0x6, 0x7, 0x12000, 0x6, 0xffffffff}, {0x9, 0x7f, 0x3, 0x9, 0xffffffff, 0xffffffff}, {0x9, 0x37, 0x8, 0x12b, 0x89e1, 0x101}, {0x9, 0x53, 0x1, 0x6, 0xfffffffa, 0x5}, {0x7, 0x1, 0x4, 0x7, 0xffffffff}, {0x63bd, 0x8, 0x3, 0xb63a, 0x1, 0x1}, {0x6, 0x0, 0x2e25, 0x81, 0xff, 0x3}, {0x4, 0xa, 0xc, 0x2, 0x800100, 0x2}, {0xee, 0x2, 0x5, 0x3, 0x2, 0x3}, {0x10000, 0xfffff7fe, 0x8, 0x8, 0x868, 0xb406}, {0x6, 0xb8ed, 0xeb, 0xffffffff, 0x0, 0x3}, {0x7bd, 0x5, 0x85, 0x4, 0x9, 0x7}, {0x7fff, 0x73b, 0x8001, 0xdcb, 0x8, 0x8}, {0xfffff001, 0x4, 0x9000000, 0x2, 0x7fffffff, 0x94}, {0x6, 0x8001, 0x8, 0x367, 0x8, 0x1}, {0x2, 0x40, 0x3, 0x800, 0xe66a, 0x698}, {0x7f, 0xf, 0xffff98b3, 0xa, 0x3}, {0xa, 0x4, 0x5, 0x2, 0x10001}, {0x30000, 0x1, 0x5, 0xf90, 0x6ed, 0x2}, {0x3, 0xfff, 0x8, 0x3, 0x66d9, 0xb}, {0x8000, 0x90000000, 0x7, 0x800, 0x10001, 0x6}, {0xa, 0xdd2fc5d, 0x8, 0xf1, 0x9, 0x6}, {0x9, 0xffffffff, 0xb38c, 0x6, 0x81, 0x891c}, {0x1, 0xe, 0x8000, 0x3, 0x3, 0x1}, {0x0, 0x3, 0x5fbb, 0x0, 0x5, 0xffff}, {0x1, 0x1, 0x400, 0x3, 0x3c12, 0x74a}, {0x20, 0x2, 0x5, 0x1, 0x2, 0xffff8000}, {0x0, 0x9, 0xaf4e, 0xe3, 0x4, 0x2800}, {0x7, 0x8, 0x9, 0x2, 0x5, 0x4}, {0x5, 0x7, 0x5, 0xa, 0x6, 0x7}, {0x9, 0xffffff81, 0x7, 0x0, 0x3, 0xd}, {0x9bd, 0x4, 0x8, 0x3, 0x0, 0xf}, {0x7, 0x7f, 0x3, 0x8, 0x3, 0x9}, {0x1, 0x800, 0xf, 0x5, 0x1000, 0x3}, {0x9, 0xa24, 0x2, 0x5, 0x400, 0xa}, {0x2b4e, 0x8, 0x5, 0x3, 0xf, 0x7800000}, {0x80000001, 0x100, 0x8c, 0x6, 0x7, 0x8}, {0x6, 0x2, 0xb5, 0x80000008, 0x9, 0x1000}, {0x7, 0x1, 0xe3c, 0x0, 0x3, 0x1}, {0x6, 0x5, 0x9, 0x5, 0x1, 0xc}, {0x8, 0x7, 0x800, 0x5, 0x9, 0x3}, {0xfff, 0x764, 0x400, 0xd7b, 0x0, 0x2}, {0x4, 0xfffffff7, 0x80000001, 0xce, 0xfffffffd, 0x1}, {0x3, 0x8, 0x10000, 0x5cf, 0xae9, 0xd}, {0x8, 0x5, 0x80000000, 0x6, 0x1, 0x1}, {0x5, 0x401, 0x1000, 0xaa, 0x3, 0xf}, {0x7ca, 0x2, 0x0, 0x401, 0x4, 0x2}, {0x1, 0xffffffff, 0x0, 0x4, 0x2, 0x7}, {0x2, 0x9, 0x5, 0xf, 0x2, 0x6}, {0x80000000, 0x0, 0xd041, 0x4, 0x734, 0x3ff}, {0x6, 0x3c00000, 0x5d51, 0x10001, 0x4, 0xffffffff}, {0x9, 0x5, 0x3, 0x2c28, 0xfffffff7, 0x4}, {0x2cb, 0x5, 0x8, 0x1, 0x5e6, 0x4}, {0x2, 0x1ff, 0xb, 0x2007, 0x3ff, 0x8}, {0x34, 0x3, 0x1, 0x6, 0x1000, 0x80}, {0x80000001, 0xd, 0x5, 0x9, 0xf4, 0x6}, {0x80, 0xf, 0x80000000, 0x0, 0x967, 0x3}, {0x3, 0xffffffff, 0xf44, 0xa51, 0x0, 0x5}, {0x4, 0x3, 0x6, 0xffffff1d, 0xbcd, 0x8}, {0x4, 0x100, 0x3, 0x9, 0xa, 0x5}, {0x4, 0x9, 0x4, 0x7fffffff, 0xffffffaf, 0x5}, {0x0, 0x5, 0x800, 0x6, 0x10001, 0x4}, {0x4, 0x7cbdf1ab, 0x3d7, 0x5, 0x8, 0x3}, {0x7, 0x8, 0xffffa250, 0x4, 0x3, 0x8}, {0x20004, 0x7fffffff, 0x4, 0xff, 0xffff, 0x7}, {0xe3, 0x5, 0x0, 0xd, 0x9, 0xffffffc0}, {0x7fff, 0x4, 0xffffffff, 0x3, 0x80, 0x9}, {0x8, 0xfffffff9, 0x0, 0x0, 0x38b, 0x6}, {0x4, 0x2, 0x8, 0x5, 0x5, 0x2}, {0x6784, 0xfff, 0x7, 0xd, 0x3, 0x7}, {0xfe52, 0x5, 0x2, 0x7, 0x4, 0xfffffffb}, {0xa, 0x4, 0x81, 0xe9ca, 0x7, 0x3}, {0x5, 0x9, 0x4, 0x7, 0x1, 0x472517a2}, {0x0, 0x0, 0x1, 0x6, 0x3, 0xfffffffa}, {0x1, 0x49c, 0x3d54902a, 0x2f4b, 0x724e88c2, 0x2}, {0xd, 0xfffffffc, 0x2, 0x9, 0x2ca, 0x401}, {0x7, 0x6, 0x9, 0x7ff, 0xc, 0x1ff}, {0xfff, 0x5, 0xb4d, 0x8, 0x1, 0x4}, {0xfffffff8, 0xffffffff, 0x3, 0x1, 0x2, 0x703d}, {0xc, 0x4, 0xe8b6, 0x0, 0x9, 0x3}, {0xf, 0x1c, 0x5, 0x5, 0x6, 0x7fffffff}], [{0x4}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x84be6f01e67e12d7, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x6, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0xe94b35fccb9c3a2a}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x2, 0x3}, {0x2}, {0x2}, {0x3, 0x1}, {}, {}, {0x3}, {0x3, 0x1}, {0x2}, {}, {}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x2}, {0x1, 0x1}, {}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x240440d5}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) fcntl$setlease(r2, 0x400, 0x1) r12 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r12, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 19.342008808s ago: executing program 9 (id=8906): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000140)={0xc9, "b9b99adf1d264ad272b7dcadbe73bf1097468c54ce2e180a87661afd4331efad20c356bcc535c475cb6f42be56414f55a9fa9aa35b9a356011ab5b149fb60b6e"}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=0x8) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x41, 0x3, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2}, 0x8010) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4}) 19.081927094s ago: executing program 9 (id=8907): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x1ab) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3c8, 0x110, 0x220, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010101, @broadcast, 0x8, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}, 0x4, 0xffffffff}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xff, 0xffffff00, 0xd1, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x27, 0x8, 0xffff, 0xa, 0x40, 0xfffa, 'wg2\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x240}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) (async) sendfile(r2, r2, 0x0, 0x1000000201005) 18.961052151s ago: executing program 8 (id=8908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40010) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r4, r4, 0x0, 0x68) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r6, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000080)=@buf) timer_create(0x0, &(0x7f0000000240)={0x0, 0x24, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) recvfrom(r3, &(0x7f00000000c0)=""/75, 0x4b, 0x101, 0x0, 0x0) 18.848958527s ago: executing program 3 (id=8910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0xfffffffe, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, 0x0, &(0x7f0000000280)) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000004c0)={"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"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}, {&(0x7f0000000b80)="4d14eb8b0cc7e80c5e8954be022211c7c52c74cd20459297467194305a40da3c8ba573ba22987f8b6923cc1f157eabc6dafa03efe8d1e044f5fb446ed8a7a9e0ac7cb406b8c843b7a0ab2c01c3d21be2a4fba2e0d9975d58a15c82b5e7e4f9e394e213462cdbcb9cb52fbebe2796f3adf0344f7e6f4f762bc728f901b4aa2bfdf08336b928992f43e5babdab5bbe5744e49ef1068f87add244db5f2c2a7f466d9a92c31176fd16a0611a9aafe99bfe347a1dd1ca79893da881b91947088d07834a05d6ab1227429a216a876ed89e802134f9ddb9bac22f08fac0ce3bb32b5ea6a1301ba162e9249a", 0xe8}], 0x2}, 0x20004005) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000100fefffffffddbdf25810a000000000000080001"], 0x20}}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xa0, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x29, {0x9, 0x21, 0xbb2, 0x5d, 0x1, {0x22, 0x10a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x5, 0x67}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x6, 0x60, 0xaf, 0x7}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x4, [{0x8d, &(0x7f00000001c0)=@string={0x8d, 0x3, "69cd8a0fbf673409e6144f43f89f077679d1f813a98ca1ff3f4c46f25fd1468856174a77ea5b52afb2b4cc86545ebf355c110ec683036396ba8483938168f6e9a2cb3ceeb2444a86f17509e790fa920cd9926619be5c0752a8daea0ec0179fc6fb7deea87bf18c340373802f283c4400d1c2baac8f8583d552bc08cada12f7462a9e9488879e5fd0ac3148"}}, {0xbf, &(0x7f00000002c0)=@string={0xbf, 0x3, "f3c93a139052626fb1b1462cc54468b873e0587b9ba352d74b01a1cde8c2142f27ef732a13ad79346837c45bae740d8be8a4814a7a28e06316b6f3e49260a01c161471040f26002588b7b8a70484f7e53a38e1809cf5fe0715efea73f8e4c767d77a5934d1b7a20c7ba399115ef2b589b6aef0dd94f4bf58fea6689e26e8f8708a7f9e9d256cb5aa3c1c2077149027c4161ca0ca1661d0d7e6244d79a280dfcc92cb7966a81b1103272526daf261325d9dcfd4e636550f2fda7965e7e3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3001}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 18.746883932s ago: executing program 9 (id=8912): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) ftruncate(r0, 0x8001) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x84000, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x20, &(0x7f0000002d00)={0x32, 0xffffffff, 0x58}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000180)=0x30) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000bc0)=@newchain={0x24, 0x64, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0x10, 0xfff1}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0xc054) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r5, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001880)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1}, 0x19c}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000000440)=""/235, 0xeb}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/255, 0xff}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/217, 0xd9}, {&(0x7f0000000a80)=""/119, 0x77}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000c80)=""/156, 0x9c}], 0x1}, 0x6}], 0x5, 0x10000, 0x0) 18.473473853s ago: executing program 0 (id=8913): capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f00000000c0)={0x7, 0x0, 0x1, 0x3, 0xc37, 0x80000001}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffffffffffff, 0x80140) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000600)={0x1, 0x0, {0x9, 0xfffffffa, 0xfffffff0}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 18.471498044s ago: executing program 0 (id=8915): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7, 0x0, 0xbf}}]}}}]}}]}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004700)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r1, 0x0, 0x1) ioctl$KDADDIO(r1, 0x4b34, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="0f5342be660f3807320f1a9d0001360f01c50f01c866b9220a00000f32660f63c5baf80c66b8d8dffe8166efbafc0c66b88b94000066ef0f07baf80c66b877aea88766efbafc0cb005ee", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect(0x2, 0x46, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0xd9, 0x80, 0x83, 0x40, 0x421, 0x42d, 0x6712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x2, 0x7, 0x80, 0x10, "", [{{0x9, 0x4, 0x4d, 0x0, 0x0, 0x2, 0x2, 0xff, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x35e1, 0x1}, {0x6, 0x24, 0x1a, 0x3fe, 0x31}, [@mdlm_detail={0x5, 0x24, 0x13, 0xc, 'W'}]}]}}]}}]}}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x140, 0x4c, 0x1a, 0x0, 0x73, 0x220, 0x258, 0x258, 0x220, 0x258, 0x3, 0x0, {[{{@ipv6={@private2, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x10000, 0x2, 0x0, 0x6}}, @common=@unspec=@connbytes={{0x38}, {[], 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000001c0)={[{0x3, 0x4, 0xd1, 0x55, 0x81, 0x5, 0x6, 0x9, 0x4, 0x5, 0x3, 0x8b, 0xb}, {0x7, 0x7f, 0x10, 0xfd, 0x6, 0x2, 0x56, 0x3, 0xe, 0x3, 0x0, 0xff, 0x1}, {0x7, 0x3, 0x0, 0xfb, 0xce, 0x4, 0x2, 0x37, 0x40, 0x1, 0x42, 0xe, 0x1}], 0xf}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r10, r11, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.346449878s ago: executing program 9 (id=8917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r16, {0x0, 0xffe0}, {0x2, 0x8}, {0xc, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r17, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 17.660998283s ago: executing program 8 (id=8918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005f00000000f80000000000000001", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) syz_usb_connect$uac3(0x0, 0xa7, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0xff, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x31, 0xd12}, [@output_terminal={0x13, 0x24, 0x3, 0xff, 0x401, 0x6, 0x4, 0x2, 0x6, 0x5, 0x7f, 0x80}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x205, 0x3, 0xff, 0x3, 0x8, 0x8, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0x5, 0x5d}}}}}}}}]}}, 0x0) setns(r6, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200e0100000095"], 0x0, 0x0, 0x0, 0x0}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r12}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r13, &(0x7f0000000040), &(0x7f0000000400)=""/72}, 0x20) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0xe, 0x3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xc, 0x3, 0x26}, {0x7, 0x3, 0x3, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 17.652613934s ago: executing program 3 (id=8919): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000180)={{}, 0x12, 0x1, 0x7}, 0x18) 17.488393522s ago: executing program 3 (id=8920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3a3cc1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000300)) 17.376201031s ago: executing program 3 (id=8921): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0xfe, 0x7fff0006}]}) r0 = timerfd_create(0x7, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x1, @thr={&(0x7f00000003c0)="2065b6ea4cffee90afa2b2eb21a267618e7ba399c07ee1e1c7fad5732b8cc265cc077e1fa74372fb912c5403057ea02be36c74fd9d11d4d8314d1b8d3bb07050a32b12334a036598b19e36c843c822e5", &(0x7f0000000700)="1525a6eabf8f8a955a86c33393d94bf84c875d2a906d64dbefcc6cbd204a60eb9439cf0936a2f2ca5503becdcef979ac6317f68ebe302d0ea42f8740e382de99ec19934fef5fc21969e1e2e3e474bf806a991b9707dfd936f9a88bcccfad3c57ddd41c21fdff09b8613e0c5b8ad76e8a5a119b77b76ed9334f932ddf6f4ee01e13d8d48b486199e3a46480679bbafefd317090a3162950c40616dedf9ec475bf3a4364fe787c52b8de4d6c20b071ab1b3aa88b876e3ed32eab7a27b92899ff194cbf4ea3ebf5cd9a883be879c986a85456d7d21b637cecebd839d825f4a17eaa62db43daea3cda1090ce8e6b"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000380)={0x6, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="580000001114000128bd7000fedbdf25090000000000000008004f000200000008004a000100000008003e000100000008003e0001000000080003000200000008004a000200000008004b000000000008004b003b00000094b2382b41a6f131af9fe98a82df0558e5f51c7b703491f780ea0a4245d4b3958b3e876ff232d4b3c53edf0a2ccaae3e82d60351187c156620c543de6a41bc9e888e5b28b30bd0637e6e6bf620447f324ef5f01067c4305a6377f8fd9af20604c6e7560a39be6972402e5183a55743c4649189ad89dd58c9ba697ccc38ab2c42a0f87ddcc5ac22854ea0d456d60dd063f1907b98a8449be5dedd5345578378262663c0087b3eeb8ee56dd246c89e11acb02801c4ad313bbe2756b2ecef8850f7dde0bf4daec1eb4b5715aac2e7727874f034bfd68a783105653ec52d2e4e73153a4a56c1be28411a9b43668de1ecf43588b6d529438e83431412d60e9db9497cc802cb5820154012ceb2c15e0e2766f2c89a80fcd7cf4cf67d1c7bd2e8ebdde54f459d4dd1d098288579226e2b432b903bb450be382d86123b00eb69f2affb72b639d64f6c336a6297ba2b44c33074ffe87d2bf9e0cf89a598c693cf04e7bdc7cc"], 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0xc000041) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB="f69c2c888ac937c2244db7606d0e5490ea8be0022883550629c3f996f82f7bf667367e3a985ab206f8ab34fdc069dcaf27a35158e1820f714ea9c590bd49ec8a8706abdcf7d779f4219847514b116a82cb461a9c8aff9cd0e2b437e2354f6c063232dc4049d04a18e08cf83db13cb86c9b526ddb6088f9a852d398bab113f8438d5e1ebe0cdb2d3049428468970dee625527a9e5e9a4159f80a2108046cd0ea2b41947d69c437b5bc5a5c8e6ef9de304348912ee2044242b9802eab0c918ba54e0a87041eeb789d7d9c648deb396d401a4fc641df7d650c6d6612419d8b33e119d819a24f102c5", @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200000) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRESDEC=r6, @ANYRES64=r5, @ANYRES32=r0, @ANYRES64=r9, @ANYRESOCT=r8, @ANYRESHEX=r4, @ANYRESOCT=r1, @ANYRES64=r3], 0x50) sendfile(r9, r9, 0x0, 0x1002000ff) syz_fuse_handle_req(r7, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdbdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11e85e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f60200ca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f0100000000000000fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9dd56d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92d074a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a4043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6b00005b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e11567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a87e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c4f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2b357f46632d30c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea64f3d60a67dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 16.70945085s ago: executing program 0 (id=8922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x74, r2, 0xb11, 0x0, 0x25dfdbfe, {0x24}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x46, 0xa9, @random="1cea312a98fa93db5dc92b1bd49ad1ff3ff51fbe6be2112ad8ccc67fdb0dfcc243b3a52913c3cd23c180bd85aba038f8f0f8fe0af721f3c54573e75ac9ed791cf506"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x74}}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000940), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000980)={0x7, 0xe73d, 0x2, {0x4, @pix_mp={0x0, 0x1, 0x30324c4a, 0x5, 0x9, [{0x4e9, 0x8}, {0x8000, 0xfff}, {0x3, 0x1}, {0x0, 0x1000}, {0x48, 0x1}, {0x4, 0x10000}, {0x2, 0x7}, {0x790, 0xf}], 0xa9, 0x1, 0x8, 0x2, 0x2}}, 0x6}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x7ab000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 16.422111107s ago: executing program 3 (id=8924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FLAGS={0x8}]}}}]}, 0x44}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12015101000000206d041bc70000000000010902240001000040050904000bb79851020300060009212000800122280009058103ff03b30d09"], 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000009c0)={0x0}, &(0x7f00000002c0)=0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x0}, 0x0) 16.349188958s ago: executing program 6 (id=8925): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x6, 0x4) unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000000200), 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) msgctl$IPC_STAT(0x0, 0x2, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) fcntl$setownex(r1, 0xf, 0x0) sendmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x400, r0, 'id0\x00'}) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000380)={{&(0x7f0000000240)=""/231, 0xe7}, &(0x7f0000000340), 0x27}, 0x20) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0', [], 0xa, "59d7390b"}, 0xf) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x5, 0x10, 0x21e, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1bf, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x3, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x53, 0x3, 0x1ff, 0xf8, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0xfffffffd, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x5, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x1, 0x4, 0xffb, 0xc}, {0x6, 0x5, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x74, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000002, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0xeec3}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0xd, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x10, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x4, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x5, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x1, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xfffffffc, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x2, 0x2, 0x9, 0x1000, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x8007, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x8001, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x2, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000009}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x3, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x55d81519de704440}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16.208908972s ago: executing program 6 (id=8926): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f00000001c0)='\x00', 0x9901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 16.162307615s ago: executing program 6 (id=8927): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) (async) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) lseek(r0, 0x5, 0x0) 16.081460809s ago: executing program 6 (id=8928): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) (async) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) (async) fsopen(0x0, 0x0) r4 = socket(0x11, 0x6, 0xc) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) (async) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x8af, 0x7, 0x2, 0x401, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3f}, 0x4004814) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="74000000fb4ccc543b06b9d71a70dbddc5e4b41183b8a5e5ee7fe8489ff912a374960003c63166863da2a197fb42e81d07e6a94b428e9a33c254a902c134f677fad09b74521168bab33cc6b078c5d97bb88340013aeb28a09dafd5b3a79d35ea54db954849cadee0427daa58715c3492b98150bb0acbbdcea0d14cf7433d4cb40fd2702e4ca356000000879647d37fe6f47a7904c5c042cfbe24ec5f97054c760698dd4df770ebb08490d6eefdc677aa7807c072f74e6a47400320b0a1bff76417b375fcff7a56275d1c", @ANYRES16=r10, @ANYBLOB="200029bd7000fcdbdf251700000060000180080003000100000008000300020000000800010001059337696936b378410cedbe75fd1ea6ea265ef58141b220799c9f0f10ad10a3ac408c459c3394f4c63513064be415f08f1af83e51d8403d35f3024fd5048adc9bc5e86a3323f27eb15103750adce726f2db6f4fb66cfbc0d4e716dcd62e258134a4d0b7b704c469862f7dfd60e94dd4", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006e657464657673696d3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB, @ANYBLOB="080003000200000008000300030000000800030003000000"], 0x74}, 0x1, 0x0, 0x0, 0x40080}, 0x80) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d856b05d", @ANYRES16=r10, @ANYBLOB="010000000000040000801b00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) (async) userfaultfd(0x801) 15.886545103s ago: executing program 6 (id=8929): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00001ea000/0x400000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fallocate(r2, 0x1, 0x3, 0x2d22) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x5, 0x9) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x2008}, 0x5, 0x20000000, 0x1, 0x0, 0x0, 0x6, 'syz0\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read$ptp(r3, &(0x7f00000001c0)=""/184, 0xb8) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) 15.024014254s ago: executing program 6 (id=8930): syz_emit_ethernet(0x7e, &(0x7f0000000140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x8, 0x3a3, {0x15, 0x4, 0x1, 0x3d, 0x9, 0x67, 0x1c, 0x8, 0x33, 0x8, @empty, @remote, {[@rr={0x7, 0xb, 0x63, [@private=0xa010100, @private=0xa010101]}, @timestamp={0x44, 0x14, 0x7f, 0x0, 0x1, [0x1, 0x1c5a, 0x1, 0x3]}, @end, @generic={0x7, 0x9, "eef8a10556823e"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x4, [{@remote, 0x5}, {@remote, 0x7}]}]}}}}}}}, 0x0) (async) r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xa2d6, 0x2, 0xfffffffe, 0x25c}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001000010028bd70000000000000400000", @ANYRES32=0x0, @ANYBLOB="6cf2040000000000140003006e657464657673696d3000000000000014001680100001800c000700090000000a00000008002800d5290000"], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) close_range(r0, r0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') io_uring_setup(0x654e, &(0x7f0000000280)={0x0, 0xca4a, 0x40, 0x3, 0x6, 0x0, r0}) (async) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0xa) (async) ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) 3.000636183s ago: executing program 43 (id=8917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r16, {0x0, 0xffe0}, {0x2, 0x8}, {0xc, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r17, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.501863237s ago: executing program 44 (id=8918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005f00000000f80000000000000001", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) syz_usb_connect$uac3(0x0, 0xa7, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0xff, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x31, 0xd12}, [@output_terminal={0x13, 0x24, 0x3, 0xff, 0x401, 0x6, 0x4, 0x2, 0x6, 0x5, 0x7f, 0x80}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x205, 0x3, 0xff, 0x3, 0x8, 0x8, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0x5, 0x5d}}}}}}}}]}}, 0x0) setns(r6, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200e0100000095"], 0x0, 0x0, 0x0, 0x0}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r12}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r13, &(0x7f0000000040), &(0x7f0000000400)=""/72}, 0x20) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0xe, 0x3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xc, 0x3, 0x26}, {0x7, 0x3, 0x3, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 1.501760468s ago: executing program 45 (id=8922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x74, r2, 0xb11, 0x0, 0x25dfdbfe, {0x24}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x46, 0xa9, @random="1cea312a98fa93db5dc92b1bd49ad1ff3ff51fbe6be2112ad8ccc67fdb0dfcc243b3a52913c3cd23c180bd85aba038f8f0f8fe0af721f3c54573e75ac9ed791cf506"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x74}}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000940), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000980)={0x7, 0xe73d, 0x2, {0x4, @pix_mp={0x0, 0x1, 0x30324c4a, 0x5, 0x9, [{0x4e9, 0x8}, {0x8000, 0xfff}, {0x3, 0x1}, {0x0, 0x1000}, {0x48, 0x1}, {0x4, 0x10000}, {0x2, 0x7}, {0x790, 0xf}], 0xa9, 0x1, 0x8, 0x2, 0x2}}, 0x6}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x7ab000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 489.228743ms ago: executing program 46 (id=8924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FLAGS={0x8}]}}}]}, 0x44}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12015101000000206d041bc70000000000010902240001000040050904000bb79851020300060009212000800122280009058103ff03b30d09"], 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000009c0)={0x0}, &(0x7f00000002c0)=0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x0}, 0x0) 0s ago: executing program 47 (id=8930): syz_emit_ethernet(0x7e, &(0x7f0000000140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x8, 0x3a3, {0x15, 0x4, 0x1, 0x3d, 0x9, 0x67, 0x1c, 0x8, 0x33, 0x8, @empty, @remote, {[@rr={0x7, 0xb, 0x63, [@private=0xa010100, @private=0xa010101]}, @timestamp={0x44, 0x14, 0x7f, 0x0, 0x1, [0x1, 0x1c5a, 0x1, 0x3]}, @end, @generic={0x7, 0x9, "eef8a10556823e"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x4, [{@remote, 0x5}, {@remote, 0x7}]}]}}}}}}}, 0x0) (async) r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xa2d6, 0x2, 0xfffffffe, 0x25c}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001000010028bd70000000000000400000", @ANYRES32=0x0, @ANYBLOB="6cf2040000000000140003006e657464657673696d3000000000000014001680100001800c000700090000000a00000008002800d5290000"], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) close_range(r0, r0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') io_uring_setup(0x654e, &(0x7f0000000280)={0x0, 0xca4a, 0x40, 0x3, 0x6, 0x0, r0}) (async) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0xa) (async) ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.180478][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.227478][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.275295][T27655] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1400.302181][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.349376][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0 [ 1400.350909][T27637] gspca_spca508: reg_read err -110 [ 1400.355040][T22092] [U] [ 1400.355078][T22092] [U] [ 1400.355627][ C0] syzkaller0: tun_net_xmit 76 [ 1400.370739][T27637] gspca_spca508: reg_read err -32 [ 1400.376812][T27637] gspca_spca508: reg_read err -32 [ 1400.387659][T27637] gspca_spca508: reg_read err -32 [ 1400.392854][T22093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.394131][T27637] gspca_spca508: reg_read err -32 [ 1400.412065][T22093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.435311][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.482262][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.496620][T27655] usb 10-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1400.529174][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.529227][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.549022][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.676190][T27655] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1400.684358][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.712124][T27655] usb 10-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1400.738083][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.738142][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0 [ 1400.796287][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.879266][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.879499][T27655] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.926345][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1400.926399][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1401.030312][T27637] gspca_spca508: reg write: error -110 [ 1401.039729][T27637] spca508 9-1:0.0: probe with driver spca508 failed with error -110 [ 1401.058952][T27655] usb 10-1: config 0 descriptor?? [ 1401.059092][T22092] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1401.064290][T22028] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1401.093397][T22028] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1401.133580][T27637] usb 9-1: USB disconnect, device number 62 [ 1401.170978][T22107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.181407][T22107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.186853][T18677] usb usb40-port1: unable to enumerate USB device [ 1401.245064][T22110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8589'. [ 1401.385993][ C0] syzkaller0: tun_net_xmit 76 [ 1401.549729][T22116] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1401.556309][T22116] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1401.565464][T22116] vhci_hcd vhci_hcd.0: Device attached [ 1401.740670][T22122] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8591'. [ 1401.826581][T27655] usbhid 10-1:0.0: can't add hid device: -71 [ 1401.832698][T27655] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1401.834991][T18677] usb 34-1: SetAddress Request (2) to port 0 [ 1401.848715][T18677] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1401.864334][T27655] usb 10-1: USB disconnect, device number 43 [ 1402.142858][T27654] pwc: recv_control_msg error -71 req 02 val 2700 [ 1402.150535][T27654] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1402.157493][T27654] pwc: recv_control_msg error -71 req 04 val 1000 [ 1402.171571][T27654] pwc: recv_control_msg error -71 req 04 val 1300 [ 1402.217469][T27654] pwc: recv_control_msg error -71 req 04 val 1400 [ 1402.230809][T22117] vhci_hcd: connection reset by peer [ 1402.238047][T13883] vhci_hcd vhci_hcd.0: stop threads [ 1402.244541][T27654] pwc: recv_control_msg error -71 req 02 val 2000 [ 1402.259295][T13883] vhci_hcd vhci_hcd.0: release socket [ 1402.275912][T27654] pwc: recv_control_msg error -71 req 02 val 2100 [ 1402.285543][T13883] vhci_hcd vhci_hcd.0: disconnect device [ 1402.303163][T27654] pwc: recv_control_msg error -71 req 04 val 1500 [ 1402.341018][T27654] pwc: recv_control_msg error -71 req 02 val 2500 [ 1402.370311][T27654] pwc: recv_control_msg error -71 req 02 val 2400 [ 1402.399032][T27654] pwc: recv_control_msg error -71 req 02 val 2600 [ 1402.422435][T27654] pwc: recv_control_msg error -71 req 02 val 2900 [ 1402.429430][ C0] syzkaller0: tun_net_xmit 76 [ 1402.446412][T27654] pwc: recv_control_msg error -71 req 02 val 2800 [ 1402.459665][T27654] pwc: recv_control_msg error -71 req 04 val 1100 [ 1402.476554][T27654] pwc: recv_control_msg error -71 req 04 val 1200 [ 1402.488437][T27654] pwc: Registered as video103. [ 1402.507287][T27654] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input199 [ 1402.542182][T27654] usb 4-1: USB disconnect, device number 10 [ 1402.659472][T22177] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8597'. [ 1402.865378][T27654] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1402.916484][T22195] netlink: 'syz.0.8600': attribute type 7 has an invalid length. [ 1402.936551][T22199] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8599'. [ 1402.946700][T22199] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8599'. [ 1402.984784][T22199] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8599'. [ 1402.994952][T22199] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8599'. [ 1403.024977][T27654] usb 4-1: Using ep0 maxpacket: 32 [ 1403.048366][T27654] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1403.076152][T27654] usb 4-1: config 9 has an invalid interface number: 249 but max is 0 [ 1403.087352][T27654] usb 4-1: config 9 has no interface number 0 [ 1403.093571][T27654] usb 4-1: config 9 interface 249 has no altsetting 0 [ 1403.103005][T27654] usb 4-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=51.f3 [ 1403.112650][T27654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.121007][T27654] usb 4-1: Product: syz [ 1403.126616][T27654] usb 4-1: Manufacturer: syz [ 1403.131263][T27654] usb 4-1: SerialNumber: syz [ 1403.174548][T22199] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8599'. [ 1403.360713][T27654] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 1403.369658][T27654] usb 4-1: selecting invalid altsetting 0 [ 1403.377661][ T2365] usb 4-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 1403.379512][T27654] usb 4-1: USB disconnect, device number 11 [ 1403.402778][ T2365] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 1403.464926][ C0] syzkaller0: tun_net_xmit 76 [ 1403.804910][T27655] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1403.984147][T22269] fuse: Bad value for 'fd' [ 1403.998245][T22250] syzkaller0: entered promiscuous mode [ 1404.022765][T22250] syzkaller0: entered allmulticast mode [ 1404.099829][T27655] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1404.109085][T27655] usb 9-1: too many configurations: 148, using maximum allowed: 8 [ 1404.118333][T27655] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1404.127534][T27655] usb 9-1: can't read configurations, error -71 [ 1404.506292][ C0] syzkaller0: tun_net_xmit 76 [ 1404.648423][T22299] erspan0: entered promiscuous mode [ 1404.656791][T22299] vlan0: entered promiscuous mode [ 1405.545149][ C0] syzkaller0: tun_net_xmit 76 [ 1405.604904][T22360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.613942][T22360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.759374][T22392] __nla_validate_parse: 3 callbacks suppressed [ 1405.759395][T22392] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8620'. [ 1405.824098][T22395] input: syz1 as /devices/virtual/input/input200 [ 1406.147688][T22416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.156886][T22416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.225290][T27632] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 1406.305048][T27637] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1406.386121][T27632] usb 9-1: not running at top speed; connect to a high speed hub [ 1406.394699][T27632] usb 9-1: config 7 has an invalid interface number: 116 but max is 0 [ 1406.402974][T27632] usb 9-1: config 7 has no interface number 0 [ 1406.409584][T27632] usb 9-1: config 7 interface 116 has no altsetting 0 [ 1406.418263][T27632] usb 9-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ca.2d [ 1406.427420][T27632] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.435624][T27632] usb 9-1: Product: syz [ 1406.439797][T27632] usb 9-1: Manufacturer: syz [ 1406.444385][T27632] usb 9-1: SerialNumber: syz [ 1406.464972][T27637] usb 10-1: Using ep0 maxpacket: 32 [ 1406.471485][T27637] usb 10-1: config 0 has an invalid interface number: 151 but max is 0 [ 1406.485334][T27637] usb 10-1: config 0 has no interface number 0 [ 1406.498191][T27637] usb 10-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1406.512187][T27637] usb 10-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1406.528861][T27637] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.538590][T27637] usb 10-1: Product: syz [ 1406.543145][T27637] usb 10-1: Manufacturer: syz [ 1406.548753][T27637] usb 10-1: SerialNumber: syz [ 1406.555071][T27637] usb 10-1: config 0 descriptor?? [ 1406.584951][ C0] syzkaller0: tun_net_xmit 76 [ 1406.592979][T10291] udevd[10291]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1406.657965][T27632] usb-storage 9-1:7.116: USB Mass Storage device detected [ 1406.675574][T22437] fuse: Bad value for 'fd' [ 1406.763732][T27632] usb 9-1: USB disconnect, device number 65 [ 1406.905127][T18677] usb 34-1: device descriptor read/8, error -110 [ 1407.119745][T22470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.155067][T22470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.183371][T22475] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1407.315625][T18677] usb usb34-port1: attempt power cycle [ 1407.626383][ C0] syzkaller0: tun_net_xmit 76 [ 1407.644010][T22499] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8631'. [ 1407.744340][ T30] audit: type=1326 audit(1782159877.066:8407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22502 comm="syz.6.8632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f457999ce59 code=0x0 [ 1407.806364][T22507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.825439][T22507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.851539][T22507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.871055][T22507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.906400][T18677] usb usb34-port1: unable to enumerate USB device [ 1408.056111][T22461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.125484][T22461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.573856][T22550] FAULT_INJECTION: forcing a failure. [ 1408.573856][T22550] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.594194][T22550] CPU: 1 UID: 0 PID: 22550 Comm: syz.0.8640 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.594223][T22550] Tainted: [L]=SOFTLOCKUP [ 1408.594230][T22550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1408.594241][T22550] Call Trace: [ 1408.594248][T22550] [ 1408.594257][T22550] dump_stack_lvl+0xe8/0x150 [ 1408.594282][T22550] should_fail_ex+0x40c/0x560 [ 1408.594305][T22550] should_failslab+0xa8/0x100 [ 1408.594324][T22550] __kmalloc_noprof+0xe8/0x750 [ 1408.594343][T22550] ? percpu_ref_get_many+0x21/0x1e0 [ 1408.594365][T22550] ? io_cache_alloc_new+0x40/0x100 [ 1408.594388][T22550] io_cache_alloc_new+0x40/0x100 [ 1408.594408][T22550] __io_prep_rw+0x281/0xe70 [ 1408.594434][T22550] ? __pfx___io_prep_rw+0x10/0x10 [ 1408.594456][T22550] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1408.594479][T22550] ? trace_irq_enable+0x3b/0x140 [ 1408.594505][T22550] io_prep_write+0x36/0x110 [ 1408.594525][T22550] ? io_task_refs_refill+0xba/0x180 [ 1408.594545][T22550] io_submit_sqes+0xbde/0x2310 [ 1408.594576][T22550] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1408.594601][T22550] ? __fget_files+0x3a2/0x420 [ 1408.594623][T22550] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1408.594643][T22550] ? fput+0xa0/0xd0 [ 1408.594665][T22550] ? ksys_write+0x242/0x270 [ 1408.594684][T22550] ? __pfx_ksys_write+0x10/0x10 [ 1408.594703][T22550] ? rcu_is_watching+0x15/0xb0 [ 1408.594720][T22550] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1408.594737][T22550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.594751][T22550] do_syscall_64+0x174/0x580 [ 1408.594772][T22550] ? trace_irq_disable+0x3b/0x140 [ 1408.594793][T22550] ? clear_bhb_loop+0x40/0x90 [ 1408.594812][T22550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.594835][T22550] RIP: 0033:0x7f666219ce59 [ 1408.594852][T22550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.594865][T22550] RSP: 002b:00007f666308a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1408.594881][T22550] RAX: ffffffffffffffda RBX: 00007f6662415fa0 RCX: 00007f666219ce59 [ 1408.594892][T22550] RDX: 0000000000000022 RSI: 00000000000047d8 RDI: 0000000000000003 [ 1408.594901][T22550] RBP: 00007f666308a090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.594910][T22550] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 1408.594918][T22550] R13: 00007f6662416038 R14: 00007f6662415fa0 R15: 00007f666253fa48 [ 1408.594933][T22550] [ 1408.665117][ C0] syzkaller0: tun_net_xmit 76 [ 1408.903532][T22557] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8642'. [ 1408.989866][T22564] fuse: Bad value for 'fd' [ 1409.315119][T27652] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1409.474959][T27652] usb 9-1: Using ep0 maxpacket: 16 [ 1409.483200][T27652] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.494779][T27652] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.506628][T27652] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1409.520427][T27652] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1409.529868][T27652] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.540063][T27652] usb 9-1: config 0 descriptor?? [ 1409.595042][ T5684] usb 10-1: USB disconnect, device number 44 [ 1409.666021][T22586] syz.9.8645: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1409.681851][T22586] CPU: 0 UID: 0 PID: 22586 Comm: syz.9.8645 Tainted: G L syzkaller #0 PREEMPT(full) [ 1409.681886][T22586] Tainted: [L]=SOFTLOCKUP [ 1409.681894][T22586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1409.681907][T22586] Call Trace: [ 1409.681918][T22586] [ 1409.681927][T22586] dump_stack_lvl+0xe8/0x150 [ 1409.681955][T22586] warn_alloc+0x24c/0x270 [ 1409.681984][T22586] ? __pfx_warn_alloc+0x10/0x10 [ 1409.682019][T22586] ? __mutex_trylock_common+0x15f/0x270 [ 1409.682047][T22586] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1409.682076][T22586] ? rcu_is_watching+0x15/0xb0 [ 1409.682098][T22586] ? trace_contention_end+0x3d/0x140 [ 1409.682123][T22586] ? __mutex_lock+0x30d/0x1550 [ 1409.682150][T22586] ? rcu_is_watching+0x15/0xb0 [ 1409.682173][T22586] ? lock_release+0x4b/0x3c0 [ 1409.682189][T22586] ? kfree+0x1c5/0x640 [ 1409.682213][T22586] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1409.682243][T22586] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1409.682271][T22586] ? dvb_dvr_do_ioctl+0x76/0x220 [ 1409.682301][T22586] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1409.682328][T22586] ? do_vfs_ioctl+0x116f/0x1530 [ 1409.682354][T22586] ? get_signal+0x10dd/0x12c0 [ 1409.682379][T22586] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1409.682404][T22586] vmalloc_noprof+0xb2/0xe0 [ 1409.682431][T22586] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1409.682456][T22586] dvb_dvr_do_ioctl+0x12b/0x220 [ 1409.682485][T22586] dvb_usercopy+0x199/0x2e0 [ 1409.682507][T22586] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1409.682533][T22586] ? __pfx_dvb_usercopy+0x10/0x10 [ 1409.682558][T22586] ? __fget_files+0x3a2/0x420 [ 1409.682586][T22586] ? __fget_files+0x2a/0x420 [ 1409.682615][T22586] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1409.682651][T22586] dvb_dvr_ioctl+0x29/0x40 [ 1409.682676][T22586] __se_sys_ioctl+0xfc/0x170 [ 1409.682698][T22586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.682719][T22586] do_syscall_64+0x174/0x580 [ 1409.682747][T22586] ? trace_irq_disable+0x3b/0x140 [ 1409.682778][T22586] ? clear_bhb_loop+0x40/0x90 [ 1409.682800][T22586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.682820][T22586] RIP: 0033:0x7fede0d9ce59 [ 1409.682838][T22586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.682856][T22586] RSP: 002b:00007feddeff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1409.682879][T22586] RAX: ffffffffffffffda RBX: 00007fede1015fa0 RCX: 00007fede0d9ce59 [ 1409.682895][T22586] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 1409.682910][T22586] RBP: 00007fede0e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1409.682923][T22586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.682936][T22586] R13: 00007fede1016038 R14: 00007fede1015fa0 R15: 00007fede113fa48 [ 1409.682959][T22586] [ 1409.683001][T22586] Mem-Info: [ 1409.708670][ C0] syzkaller0: tun_net_xmit 76 [ 1409.980305][T22588] usb usb8: usbfs: process 22588 (syz.9.8645) did not claim interface 0 before use [ 1409.997762][T27652] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.009B/input/input201 [ 1410.010742][T22586] active_anon:24674 inactive_anon:4 isolated_anon:0 [ 1410.010742][T22586] active_file:13 inactive_file:27011 isolated_file:0 [ 1410.010742][T22586] unevictable:768 dirty:363 writeback:0 [ 1410.010742][T22586] slab_reclaimable:7405 slab_unreclaimable:156216 [ 1410.010742][T22586] mapped:38046 shmem:3087 pagetables:2739 [ 1410.010742][T22586] sec_pagetables:1 bounce:0 [ 1410.010742][T22586] kernel_misc_reclaimable:0 [ 1410.010742][T22586] free:1243875 free_pcp:10170 free_cma:0 [ 1410.056301][T22586] Node 0 active_anon:98696kB inactive_anon:16kB active_file:52kB inactive_file:107836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152136kB dirty:1448kB writeback:0kB shmem:10812kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:15776kB pagetables:10852kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1410.092917][T22586] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1410.128816][T27652] microsoft 0003:045E:07DA.009B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1410.158790][T22586] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.221990][T22597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.230881][T22586] lowmem_reserve[]: 0 2492 2492 2492 2492 [ 1410.237193][T22586] Node 0 DMA32 free:1014556kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:95196kB inactive_anon:16kB active_file:52kB inactive_file:107832kB unevictable:1536kB writepending:1448kB zspages:272kB present:3129332kB managed:2551980kB mlocked:0kB bounce:0kB free_pcp:41360kB local_pcp:17276kB free_cma:0kB [ 1410.244073][T22597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.273012][T22570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.288296][T22570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.305245][T27652] usb 9-1: USB disconnect, device number 66 [ 1410.308767][T22597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.322734][T22586] lowmem_reserve[]: 0 0 0 0 0 [ 1410.324001][T22597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.330064][T22586] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1410.370080][T22586] lowmem_reserve[]: 0 0 0 0 0 [ 1410.378408][T22586] Node 1 Normal free:3945316kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2316kB local_pcp:0kB free_cma:0kB [ 1410.410884][T22586] lowmem_reserve[]: 0 0 0 0 0 [ 1410.416795][T22586] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1410.434099][T22586] Node 0 DMA32: 1077*4kB (UME) 2527*8kB (UME) 1683*16kB (UME) 759*32kB (UME) 992*64kB (UME) 579*128kB (UME) 229*256kB (UME) 69*512kB (UME) 19*1024kB (M) 2*2048kB (UM) 167*4096kB (UM) = 1014876kB [ 1410.454231][T22586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1410.466138][T22586] Node 1 Normal: 5*4kB (UM) 6*8kB (UM) 6*16kB (UM) 3*32kB (UM) 6*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 960*4096kB (UM) = 3945348kB [ 1410.483685][T22586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1410.493439][T22586] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1410.503001][T22586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1410.513171][T22586] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1410.523008][T22586] 30137 total pagecache pages [ 1410.527984][T22586] 30 pages in swap cache [ 1410.532303][T22586] Free swap = 124816kB [ 1410.537453][T22586] Total swap = 124996kB [ 1410.541648][T22586] 2097051 pages RAM [ 1410.546624][T22586] 0 pages HighMem/MovableOnly [ 1410.551354][T22586] 427280 pages reserved [ 1410.555565][T22586] 0 pages cma reserved [ 1410.745916][ C0] syzkaller0: tun_net_xmit 76 [ 1410.868675][T18677] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 1410.930372][T22640] FAULT_INJECTION: forcing a failure. [ 1410.930372][T22640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.944678][T22640] CPU: 1 UID: 0 PID: 22640 Comm: syz.0.8651 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.944706][T22640] Tainted: [L]=SOFTLOCKUP [ 1410.944712][T22640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1410.944723][T22640] Call Trace: [ 1410.944730][T22640] [ 1410.944737][T22640] dump_stack_lvl+0xe8/0x150 [ 1410.944762][T22640] should_fail_ex+0x40c/0x560 [ 1410.944784][T22640] _copy_from_user+0x2d/0xb0 [ 1410.944811][T22640] __io_prep_rw+0x88c/0xe70 [ 1410.944834][T22640] ? __pfx___io_prep_rw+0x10/0x10 [ 1410.944857][T22640] ? trace_irq_enable+0x3b/0x140 [ 1410.944879][T22640] io_prep_write+0x36/0x110 [ 1410.944899][T22640] ? io_task_refs_refill+0xba/0x180 [ 1410.944917][T22640] io_submit_sqes+0xbde/0x2310 [ 1410.944948][T22640] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1410.944973][T22640] ? __fget_files+0x3a2/0x420 [ 1410.944998][T22640] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1410.945020][T22640] ? fput+0xa0/0xd0 [ 1410.945041][T22640] ? ksys_write+0x242/0x270 [ 1410.945059][T22640] ? __pfx_ksys_write+0x10/0x10 [ 1410.945077][T22640] ? rcu_is_watching+0x15/0xb0 [ 1410.945097][T22640] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1410.945118][T22640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.945137][T22640] do_syscall_64+0x174/0x580 [ 1410.945159][T22640] ? trace_irq_disable+0x3b/0x140 [ 1410.945191][T22640] ? clear_bhb_loop+0x40/0x90 [ 1410.945210][T22640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.945226][T22640] RIP: 0033:0x7f666219ce59 [ 1410.945243][T22640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.945257][T22640] RSP: 002b:00007f666308a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1410.945277][T22640] RAX: ffffffffffffffda RBX: 00007f6662415fa0 RCX: 00007f666219ce59 [ 1410.945292][T22640] RDX: 0000000000000022 RSI: 00000000000047d8 RDI: 0000000000000003 [ 1410.945303][T22640] RBP: 00007f666308a090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.945316][T22640] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 1410.945327][T22640] R13: 00007f6662416038 R14: 00007f6662415fa0 R15: 00007f666253fa48 [ 1410.945346][T22640] [ 1411.203388][T22648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8653'. [ 1411.330773][T18677] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1411.342533][T18677] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.352659][T18677] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1411.377229][T18677] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1411.386854][T18677] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.408584][T18677] usb 10-1: config 0 descriptor?? [ 1411.445169][T22672] loop5: detected capacity change from 0 to 7 [ 1411.462196][T22672] Dev loop5: unable to read RDB block 7 [ 1411.473652][T22672] loop5: unable to read partition table [ 1411.480902][T22672] loop5: partition table beyond EOD, truncated [ 1411.488494][T22672] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1411.748368][T22689] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1411.784914][ C0] syzkaller0: tun_net_xmit 76 [ 1411.790927][T22691] syzkaller0: entered promiscuous mode [ 1411.798516][T22691] syzkaller0: entered allmulticast mode [ 1411.853830][T22689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8660'. [ 1412.277296][T18677] acrux 0003:1A34:0802.009C: unknown main item tag 0x6 [ 1412.292056][T18677] acrux 0003:1A34:0802.009C: unknown main item tag 0x0 [ 1412.306643][T18677] acrux 0003:1A34:0802.009C: unknown main item tag 0x0 [ 1412.324738][T18677] acrux 0003:1A34:0802.009C: unknown main item tag 0x0 [ 1412.338126][T18677] acrux 0003:1A34:0802.009C: unknown main item tag 0x0 [ 1412.338830][T22710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8664'. [ 1412.378368][T18677] acrux 0003:1A34:0802.009C: unknown main item tag 0x0 [ 1412.388196][T18677] acrux 0003:1A34:0802.009C: unknown main item tag 0x0 [ 1412.397376][T18677] acrux 0003:1A34:0802.009C: unknown main item tag 0x0 [ 1412.405616][T18677] acrux 0003:1A34:0802.009C: unknown main item tag 0x0 [ 1412.413579][T18677] acrux 0003:1A34:0802.009C: unknown main item tag 0x0 [ 1412.438010][T18677] acrux 0003:1A34:0802.009C: hidraw0: USB HID v0.0a Device [HID 1a34:0802] on usb-dummy_hcd.9-1/input0 [ 1412.450098][T18677] acrux 0003:1A34:0802.009C: no inputs found [ 1412.512498][T18677] acrux 0003:1A34:0802.009C: Failed to enable force feedback support, error: -19 [ 1412.574774][T22622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.685465][T22622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.699259][T22720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.720812][T22720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.824913][ C0] syzkaller0: tun_net_xmit 76 [ 1413.032063][T22739] netlink: 'syz.9.8648': attribute type 13 has an invalid length. [ 1413.048977][T22739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.056183][T22739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.130404][T22746] input: syz1 as /devices/virtual/input/input202 [ 1413.333972][T22764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.344083][T22764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.665069][T27637] usb 10-1: reset full-speed USB device number 45 using dummy_hcd [ 1413.864888][ C0] syzkaller0: tun_net_xmit 76 [ 1414.108068][T22784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.118154][T22784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.130584][T22784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.140792][T22784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.649886][T22812] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8680'. [ 1414.884983][ T5684] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1414.904888][ C0] syzkaller0: tun_net_xmit 76 [ 1414.970781][T22845] syzkaller0: entered promiscuous mode [ 1414.978451][T22845] syzkaller0: entered allmulticast mode [ 1415.065472][ T5684] usb 9-1: Using ep0 maxpacket: 16 [ 1415.082428][ T5684] usb 9-1: config 6 has an invalid interface number: 221 but max is 0 [ 1415.097106][ T5684] usb 9-1: config 6 has no interface number 0 [ 1415.104181][ T5684] usb 9-1: config 6 interface 221 has no altsetting 0 [ 1415.114522][ T5684] usb 9-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 1415.124365][ T5684] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.136848][ T5684] usb 9-1: Product: syz [ 1415.141172][ T5684] usb 9-1: Manufacturer: syz [ 1415.157055][T18677] usb 10-1: USB disconnect, device number 45 [ 1415.169500][ T5684] usb 9-1: SerialNumber: syz [ 1415.235026][T22896] loop4: detected capacity change from 0 to 2640 [ 1415.242850][T22896] buffer_io_error: 323 callbacks suppressed [ 1415.242863][T22896] Buffer I/O error on dev loop4, logical block 0, async page read [ 1415.259126][T22896] Buffer I/O error on dev loop4, logical block 0, async page read [ 1415.269172][T22896] Buffer I/O error on dev loop4, logical block 0, async page read [ 1415.277392][T22896] Buffer I/O error on dev loop4, logical block 0, async page read [ 1415.286341][T22896] Buffer I/O error on dev loop4, logical block 0, async page read [ 1415.295637][T22896] Buffer I/O error on dev loop4, logical block 0, async page read [ 1415.303677][T22895] Buffer I/O error on dev loop4, logical block 0, async page read [ 1415.315557][T22895] Buffer I/O error on dev loop4, logical block 0, async page read [ 1415.323659][T22896] Buffer I/O error on dev loop4, logical block 0, async page read [ 1415.332434][T22896] Buffer I/O error on dev loop4, logical block 0, async page read [ 1415.341035][T22896] ldm_validate_partition_table(): Disk read failed. [ 1415.348655][T22896] Dev loop4: unable to read RDB block 0 [ 1415.355147][T22896] loop4: unable to read partition table [ 1415.361349][T22896] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1415.392816][ T4992] ldm_validate_partition_table(): Disk read failed. [ 1415.402574][ T5684] f81534a_ctrl 9-1:6.221: probe with driver f81534a_ctrl failed with error -71 [ 1415.412645][ T4992] Dev loop4: unable to read RDB block 0 [ 1415.423167][ T5684] usb 9-1: USB disconnect, device number 67 [ 1415.429451][ T4992] loop4: unable to read partition table [ 1415.855310][T27655] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1415.944919][ C0] syzkaller0: tun_net_xmit 76 [ 1416.008435][T27655] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 1416.017281][T27655] usb 10-1: config 0 has no interface number 0 [ 1416.023535][T27655] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1416.034682][T27655] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1416.048331][T27655] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1416.057973][T27655] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.066143][T27655] usb 10-1: Product: syz [ 1416.070501][T27655] usb 10-1: Manufacturer: syz [ 1416.076722][T27655] usb 10-1: SerialNumber: syz [ 1416.083250][T27655] usb 10-1: config 0 descriptor?? [ 1416.090300][T22921] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1416.098915][T27655] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1416.110049][T27655] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1416.214996][T27652] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1416.365639][T27652] usb 9-1: too many configurations: 65, using maximum allowed: 8 [ 1416.374513][T27652] usb 9-1: config 0 has no interfaces? [ 1416.381636][T27652] usb 9-1: config 0 has no interfaces? [ 1416.388642][T27652] usb 9-1: config 0 has no interfaces? [ 1416.395551][T27652] usb 9-1: config 0 has no interfaces? [ 1416.402203][T27652] usb 9-1: config 0 has no interfaces? [ 1416.408978][T27652] usb 9-1: config 0 has no interfaces? [ 1416.417427][T27652] usb 9-1: config 0 has no interfaces? [ 1416.423855][T27652] usb 9-1: config 0 has no interfaces? [ 1416.429947][T27652] usb 9-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1416.439466][T27652] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.449881][T27652] usb 9-1: config 0 descriptor?? [ 1416.611297][ T5684] usb 10-1: USB disconnect, device number 46 [ 1416.619377][ T5684] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1416.637912][ T5684] cyberjack 10-1:0.69: device disconnected [ 1416.984949][ C0] syzkaller0: tun_net_xmit 76 [ 1417.160092][T23007] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8699'. [ 1417.176812][ T5684] usb 9-1: USB disconnect, device number 68 [ 1417.299862][T23024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.317700][T23024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.408741][T23039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.418447][T23039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.446322][T23039] tipc: Resetting bearer [ 1417.456099][T23039] syzkaller0: left allmulticast mode [ 1417.755207][ T5684] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 1417.866635][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.873070][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.906326][ T5684] usb 9-1: config 0 has an invalid interface number: 11 but max is 0 [ 1417.914587][ T5684] usb 9-1: config 0 has no interface number 0 [ 1417.921200][ T5684] usb 9-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 5120, setting to 64 [ 1417.932547][ T5684] usb 9-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1417.944232][ T5684] usb 9-1: config 0 interface 11 has no altsetting 0 [ 1417.951324][ T5684] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1417.960685][ T5684] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.970390][ T5684] usb 9-1: config 0 descriptor?? [ 1417.977194][ T5684] keyspan 9-1:0.11: Keyspan 2 port adapter converter detected [ 1417.988005][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 81 [ 1417.997850][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 82 [ 1418.005705][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 1 [ 1418.013409][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 2 [ 1418.021388][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 85 [ 1418.029528][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 5 [ 1418.040345][ T5684] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1418.052305][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 83 [ 1418.060662][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 84 [ 1418.071275][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 3 [ 1418.080688][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 4 [ 1418.089715][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 86 [ 1418.098494][ T5684] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 6 [ 1418.107392][ T5684] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1418.192821][T27652] usb 9-1: USB disconnect, device number 69 [ 1418.200941][T23066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8707'. [ 1418.222026][T27652] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1418.254689][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8707'. [ 1418.265050][T27652] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1418.287107][T27652] keyspan 9-1:0.11: device disconnected [ 1418.952741][T23113] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8710'. [ 1419.004934][T18677] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1419.080294][T23126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.090000][T23126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.099383][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8711'. [ 1419.108583][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8711'. [ 1419.166387][T18677] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.176933][T18677] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1419.187013][T18677] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.197569][T18677] usb 9-1: config 0 descriptor?? [ 1419.214054][T18677] pwc: Askey VC010 type 2 USB webcam detected. [ 1419.325179][ T5684] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1419.371899][T23144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8713'. [ 1419.411969][T18677] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1419.439688][T18677] pwc: recv_control_msg error -71 req 02 val 2700 [ 1419.463096][T18677] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1419.471349][T18677] pwc: recv_control_msg error -71 req 04 val 1000 [ 1419.492093][T18677] pwc: recv_control_msg error -71 req 04 val 1300 [ 1419.502367][T18677] pwc: recv_control_msg error -71 req 04 val 1400 [ 1419.517156][T18677] pwc: recv_control_msg error -71 req 02 val 2000 [ 1419.524044][T18677] pwc: recv_control_msg error -71 req 02 val 2100 [ 1419.531680][T18677] pwc: recv_control_msg error -71 req 04 val 1500 [ 1419.543139][T18677] pwc: recv_control_msg error -71 req 02 val 2500 [ 1419.552116][T18677] pwc: recv_control_msg error -71 req 02 val 2400 [ 1419.559802][T18677] pwc: recv_control_msg error -71 req 02 val 2600 [ 1419.566829][T18677] pwc: recv_control_msg error -71 req 02 val 2900 [ 1419.573697][T18677] pwc: recv_control_msg error -71 req 02 val 2800 [ 1419.580873][T18677] pwc: recv_control_msg error -71 req 04 val 1100 [ 1419.587889][T18677] pwc: recv_control_msg error -71 req 04 val 1200 [ 1419.598358][T18677] pwc: Registered as video103. [ 1419.613833][T18677] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input204 [ 1419.655462][T18677] usb 9-1: USB disconnect, device number 70 [ 1419.870890][T23189] SET target dimension over the limit! [ 1419.899626][T23191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.921352][T23191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.974937][T18677] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1420.145558][T18677] usb 9-1: Using ep0 maxpacket: 16 [ 1420.153859][T18677] usb 9-1: config 0 descriptor has 1 excess byte, ignoring [ 1420.161281][T18677] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1420.174416][T18677] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1420.188978][T18677] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1420.200429][T18677] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.210060][T18677] usb 9-1: Product: syz [ 1420.214449][T18677] usb 9-1: Manufacturer: syz [ 1420.219927][T18677] usb 9-1: SerialNumber: syz [ 1420.231605][T18677] usb 9-1: config 0 descriptor?? [ 1420.466044][T18677] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1420.480152][T18677] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1420.555388][T18677] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1420.562917][T18677] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1420.574182][T18677] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1420.581953][T18677] em28xx 9-1:0.0: No AC97 audio processor [ 1420.620090][T18677] usb 9-1: USB disconnect, device number 71 [ 1420.640403][T18677] em28xx 9-1:0.0: Disconnecting em28xx [ 1420.651193][T18677] em28xx 9-1:0.0: Freeing device [ 1421.306518][T18677] usb 9-1: new full-speed USB device number 72 using dummy_hcd [ 1421.386639][T23242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.396955][T23242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.418187][T23245] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1421.424741][T23245] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1421.433769][T23245] vhci_hcd vhci_hcd.0: Device attached [ 1421.466192][T18677] usb 9-1: config 201 has an invalid interface number: 249 but max is 0 [ 1421.474783][T18677] usb 9-1: config 201 has no interface number 0 [ 1421.481268][T18677] usb 9-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 1421.493360][T18677] usb 9-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1421.505730][T18677] usb 9-1: config 201 interface 249 has no altsetting 0 [ 1421.514702][T18677] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1421.524063][T18677] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.532152][T18677] usb 9-1: Product: syz [ 1421.536449][T18677] usb 9-1: Manufacturer: syz [ 1421.541071][T18677] usb 9-1: SerialNumber: syz [ 1421.714976][T27637] usb 52-1: SetAddress Request (2) to port 0 [ 1421.721226][T27637] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1421.798779][T23246] vhci_hcd: connection reset by peer [ 1421.804655][ T138] vhci_hcd vhci_hcd.9: stop threads [ 1421.811205][ T138] vhci_hcd vhci_hcd.9: release socket [ 1421.818502][ T138] vhci_hcd vhci_hcd.9: disconnect device [ 1421.851820][T18677] ath6kl: Failed to submit usb control message: -71 [ 1421.862020][T18677] ath6kl: unable to send the bmi data to the device: -71 [ 1421.870660][T18677] ath6kl: Unable to send get target info: -71 [ 1421.877138][T18677] ath6kl: Failed to init ath6kl core: -71 [ 1421.884261][T18677] ath6kl_usb 9-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 1421.899418][T18677] usb 9-1: USB disconnect, device number 72 [ 1422.390123][T23268] loop5: detected capacity change from 0 to 7 [ 1422.397595][T23268] Dev loop5: unable to read RDB block 7 [ 1422.403399][T23268] loop5: unable to read partition table [ 1422.410151][T23268] loop5: partition table beyond EOD, truncated [ 1422.417623][T23268] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1422.460782][ T30] audit: type=1326 audit(1782159891.786:8408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23273 comm="syz.9.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede0d9ce59 code=0x7fc00000 [ 1422.574508][T23288] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 1422.581050][T23288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1422.592541][T23288] vhci_hcd vhci_hcd.0: Device attached [ 1422.644702][T23294] openvswitch: netlink: Actions may not be safe on all matching packets [ 1422.799469][T23314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.802470][T23316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8733'. [ 1422.809336][T23314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.825511][T27655] usb 49-1: new low-speed USB device number 3 using vhci_hcd [ 1422.845474][T18677] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1422.920356][T23324] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1422.929843][T23324] program syz.3.8735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1423.006345][T18677] usb 9-1: Using ep0 maxpacket: 8 [ 1423.027055][T18677] usb 9-1: config 0 has no interfaces? [ 1423.043095][T18677] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1423.056340][T18677] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.074663][T18677] usb 9-1: config 0 descriptor?? [ 1423.168531][T31551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1423.175886][T31551] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1423.183153][T31551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1423.191348][T31551] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1423.203046][T31551] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1423.230967][T21523] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1423.238414][T21523] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1423.247886][T21523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1423.260291][T21523] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1423.270786][T21523] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1423.435331][T23422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8738'. [ 1423.444755][T23422] tipc: Enabling of bearer rejected, failed to enable media [ 1423.481351][T23422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.496309][T23422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.543603][T23368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.551091][T23368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.558466][T23368] bridge_slave_0: entered allmulticast mode [ 1423.567810][T23368] bridge_slave_0: entered promiscuous mode [ 1423.589950][T23368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.598322][T23368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.606160][T23368] bridge_slave_1: entered allmulticast mode [ 1423.612831][T23368] bridge_slave_1: entered promiscuous mode [ 1423.662811][T23368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.677334][T23368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.851235][T27632] usb 9-1: USB disconnect, device number 73 [ 1423.863391][T23289] vhci_hcd: connection reset by peer [ 1423.881735][ T5964] vhci_hcd vhci_hcd.8: stop threads [ 1423.892146][ T5964] vhci_hcd vhci_hcd.8: release socket [ 1423.904432][ T5964] vhci_hcd vhci_hcd.8: disconnect device [ 1423.916570][T23525] loop5: detected capacity change from 0 to 7 [ 1423.925050][ T5967] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 1423.933736][ T5967] bridge5 (unregistering): left promiscuous mode [ 1423.940288][T23525] Dev loop5: unable to read RDB block 7 [ 1423.948742][T23525] loop5: unable to read partition table [ 1423.954571][T23525] loop5: partition table beyond EOD, truncated [ 1423.968323][T23525] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1423.994586][ T5967] bond0 (unregistering): Released all slaves [ 1424.016974][ T5967] bond1 (unregistering): Released all slaves [ 1424.032439][ T5967] bond2 (unregistering): Released all slaves [ 1424.047578][ T5967] bond3 (unregistering): Released all slaves [ 1424.059079][ T30] audit: type=1326 audit(1782159893.386:8409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.8.8740" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b8739ce59 code=0x0 [ 1424.105127][T23368] team0: Port device team_slave_0 added [ 1424.122680][T23368] team0: Port device team_slave_1 added [ 1424.153836][ T5967] tipc: Left network mode [ 1424.191867][T23368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.207382][T23368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.235449][T23368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.259242][T23368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.267876][T23368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.318849][T23368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.338163][T23588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.364915][T23588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.439986][ T5967] hsr_slave_0: left promiscuous mode [ 1424.449770][ T5967] hsr_slave_1: left promiscuous mode [ 1424.623743][T23584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.634406][T23584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.675844][T23368] hsr_slave_0: entered promiscuous mode [ 1424.682345][T23368] hsr_slave_1: entered promiscuous mode [ 1424.688776][T23368] debugfs: 'hsr0' already exists in 'hsr' [ 1424.694543][T23368] Cannot create hsr debugfs directory [ 1424.701408][ T5288] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1425.030259][ T5967] IPVS: stop unused estimator thread 0... [ 1425.099634][T23368] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1425.109598][T23368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1425.119421][T23733] syzkaller0: entered promiscuous mode [ 1425.126559][T23733] syzkaller0: entered allmulticast mode [ 1425.135817][T23368] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1425.147544][T23368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1425.158370][T23368] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1425.172440][T23368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1425.191542][T23368] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1425.203805][T23368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1425.280319][T23766] input: syz0 as /devices/virtual/input/input205 [ 1425.306270][T21523] Bluetooth: hci3: command tx timeout [ 1425.347725][T23368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.484632][T23368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.554398][T13883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.561607][T13883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.739158][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.746654][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.876001][T23368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1425.930097][T23368] veth0_vlan: entered promiscuous mode [ 1425.941933][T23368] veth1_vlan: entered promiscuous mode [ 1425.999841][T23368] veth0_macvtap: entered promiscuous mode [ 1426.033069][T23368] veth1_macvtap: entered promiscuous mode [ 1426.088336][T23368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.121430][T23368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.142705][T23855] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1426.149695][T23855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1426.172599][ T5964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.176387][T23860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.187059][T23855] vhci_hcd vhci_hcd.0: Device attached [ 1426.198542][ T5964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.216475][T23860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.224055][ T5964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.253631][ T5964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.273985][T23867] loop5: detected capacity change from 0 to 7 [ 1426.293845][T23867] Dev loop5: unable to read RDB block 7 [ 1426.300227][T23867] loop5: unable to read partition table [ 1426.306889][T23867] loop5: partition table beyond EOD, truncated [ 1426.321763][T23867] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1426.389480][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.410945][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.419683][ T5684] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 1426.441090][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.473006][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.810908][T23909] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1426.817467][T23909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1426.827000][T27637] usb 52-1: device descriptor read/8, error -110 [ 1426.835571][T23856] vhci_hcd: connection reset by peer [ 1426.840187][T23909] vhci_hcd vhci_hcd.0: Device attached [ 1426.848951][ T5972] vhci_hcd vhci_hcd.0: stop threads [ 1426.854409][ T5972] vhci_hcd vhci_hcd.0: release socket [ 1426.855021][ T54] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1426.881767][ T5972] vhci_hcd vhci_hcd.0: disconnect device [ 1426.969941][T23918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.980736][T23917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.980936][T23918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.010314][T23917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.036392][ T54] usb 9-1: Using ep0 maxpacket: 32 [ 1427.046458][ T54] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 1427.059188][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1427.082055][ T54] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1427.101587][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.119682][ T54] usb 9-1: Product: syz [ 1427.128508][ T54] usb 9-1: Manufacturer: syz [ 1427.134923][T27636] usb 40-1: SetAddress Request (10) to port 0 [ 1427.143355][T27636] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1427.156645][ T54] usb 9-1: SerialNumber: syz [ 1427.168356][ T54] usb 9-1: config 0 descriptor?? [ 1427.182683][T23904] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1427.235642][T27637] usb usb52-port1: attempt power cycle [ 1427.385585][T21523] Bluetooth: hci3: command tx timeout [ 1427.400440][T23904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.426179][T23904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.463951][T23910] vhci_hcd: connection reset by peer [ 1427.471065][ T138] vhci_hcd vhci_hcd.3: stop threads [ 1427.478753][ T138] vhci_hcd vhci_hcd.3: release socket [ 1427.484356][ T138] vhci_hcd vhci_hcd.3: disconnect device [ 1427.598711][T23943] xt_socket: unknown flags 0x8 [ 1427.684405][T23947] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8758'. [ 1427.699632][T23947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8758'. [ 1427.714064][ T54] gs_usb 9-1:0.0: Couldn't get device config: (err=-71) [ 1427.730598][ T54] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -71 [ 1427.743142][ T54] usb 9-1: USB disconnect, device number 74 [ 1427.756446][T23947] netlink: 'syz.0.8758': attribute type 2 has an invalid length. [ 1427.764881][T23947] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8758'. [ 1427.796272][T27637] usb usb52-port1: unable to enumerate USB device [ 1427.814953][T14412] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1427.934934][T27655] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1427.969204][T14412] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1427.978591][T14412] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1427.992806][T14412] usb 10-1: Product: syz [ 1428.002335][T14412] usb 10-1: SerialNumber: syz [ 1428.016734][T14412] usb 10-1: config 0 descriptor?? [ 1428.246970][T14412] hso 10-1:0.0: Failed to find BULK eps [ 1428.447113][ T54] usb 10-1: USB disconnect, device number 48 [ 1428.665654][T27637] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1428.827354][T27637] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1428.836098][T27637] usb 9-1: config 129 has an invalid interface number: 135 but max is 0 [ 1428.844678][T27637] usb 9-1: config 129 has an invalid interface number: 5 but max is 0 [ 1428.852976][T27637] usb 9-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1428.862440][T27637] usb 9-1: config 129 has no interface number 0 [ 1428.869053][T27637] usb 9-1: config 129 has no interface number 1 [ 1428.875535][T27637] usb 9-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1428.889546][T27637] usb 9-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1428.901422][T27637] usb 9-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1428.917535][T27637] usb 9-1: config 129 interface 135 has no altsetting 0 [ 1428.926238][T27637] usb 9-1: config 129 interface 5 has no altsetting 0 [ 1428.937587][T27637] usb 9-1: string descriptor 0 read error: -22 [ 1428.943968][T27637] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1428.953682][T27637] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.974218][T27637] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1428.981881][T27637] usb 9-1: MIDIStreaming interface descriptor not found [ 1429.010788][T24003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8762'. [ 1429.091828][T24015] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8763'. [ 1429.102833][T24021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.113177][T24021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.324963][T18677] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1429.455025][T18677] usb 10-1: device descriptor read/64, error -71 [ 1429.475060][T21523] Bluetooth: hci3: command tx timeout [ 1429.715556][T18677] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1429.855540][T18677] usb 10-1: device descriptor read/64, error -71 [ 1429.976237][T18677] usb usb10-port1: attempt power cycle [ 1430.314981][T18677] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1430.345949][T18677] usb 10-1: device descriptor read/8, error -71 [ 1430.595521][T18677] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1430.617160][T24030] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1430.623685][T24030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1430.637010][T18677] usb 10-1: device descriptor read/8, error -71 [ 1430.650475][T24030] vhci_hcd vhci_hcd.0: Device attached [ 1430.705950][T24042] random: crng reseeded on system resumption [ 1430.755669][T18677] usb usb10-port1: unable to enumerate USB device [ 1430.831781][T18677] usb 1-1: USB disconnect, device number 111 [ 1430.877523][T16726] tipc: Disabling bearer [ 1430.884970][T27632] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 1430.928583][T31551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1430.937422][T31551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1430.944746][T31551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1430.952590][T31551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1430.960211][T31551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1431.106147][T13883] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.153121][T13883] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.210726][T13883] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.237248][T24062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.244426][T24062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.252493][T24062] bridge_slave_0: entered allmulticast mode [ 1431.259513][T24062] bridge_slave_0: entered promiscuous mode [ 1431.267192][T24062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.274318][T24062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.281882][T24062] bridge_slave_1: entered allmulticast mode [ 1431.290618][T24062] bridge_slave_1: entered promiscuous mode [ 1431.310758][T13883] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1431.319832][T13883] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.350165][T24062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.361832][T24062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.393265][T24062] team0: Port device team_slave_0 added [ 1431.401111][T24062] team0: Port device team_slave_1 added [ 1431.417401][T27652] usb 9-1: USB disconnect, device number 75 [ 1431.482631][T24062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.494687][T24062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.522067][T24062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.534955][ T5684] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1431.545425][T21523] Bluetooth: hci3: command tx timeout [ 1431.556031][T24244] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1431.564741][T24062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.572495][T24062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.604054][T24062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.670723][T13883] pimreg: left allmulticast mode [ 1431.764596][T13883] bond0 (unregistering): Released all slaves [ 1431.772555][T13883] bond1 (unregistering): Released all slaves [ 1431.782089][T13883] bond2 (unregistering): Released all slaves [ 1431.791822][T13883] bond3 (unregistering): Released all slaves [ 1431.806862][T13883] bond4 (unregistering): Released all slaves [ 1431.817059][T13883] bond5 (unregistering): Released all slaves [ 1431.844170][T24062] hsr_slave_0: entered promiscuous mode [ 1431.861332][T24062] hsr_slave_1: entered promiscuous mode [ 1431.879760][T24062] debugfs: 'hsr0' already exists in 'hsr' [ 1431.885916][T24062] Cannot create hsr debugfs directory [ 1431.897829][T13883] H: left promiscuous mode [ 1431.906074][T14425] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1431.962161][T13883] tipc: Left network mode [ 1431.979799][T13883] IPVS: stopping backup sync thread 17963 ... [ 1432.078852][T14425] usb 9-1: Using ep0 maxpacket: 8 [ 1432.114202][T14425] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1432.130255][T13883] veth1_vlan: left promiscuous mode [ 1432.132986][T14425] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1432.140083][T13883] veth0_vlan: left promiscuous mode [ 1432.144612][T14425] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.166305][T14425] usb 9-1: config 0 descriptor?? [ 1432.184990][T27636] usb 40-1: device descriptor read/8, error -110 [ 1432.381343][T14425] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1432.411340][ T5288] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1432.443458][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8772'. [ 1432.607686][T27636] usb usb40-port1: attempt power cycle [ 1432.696115][T13883] IPVS: stop unused estimator thread 0... [ 1432.793598][T24062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1432.806470][T24062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1432.813866][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8770'. [ 1432.814465][T24062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1432.827855][T24413] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8770'. [ 1432.844469][T24062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1432.852953][T24062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1432.861818][T24062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1432.869709][T24062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1432.879090][T24062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1432.940756][T24062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.961695][T24062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.973735][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.980912][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.990943][T21523] Bluetooth: hci4: command tx timeout [ 1433.019574][T13883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.026795][T13883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.128763][T24062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.167653][T24062] veth0_vlan: entered promiscuous mode [ 1433.180767][T24062] veth1_vlan: entered promiscuous mode [ 1433.205617][T27636] usb usb40-port1: unable to enumerate USB device [ 1433.210746][T24062] veth0_macvtap: entered promiscuous mode [ 1433.235919][T24062] veth1_macvtap: entered promiscuous mode [ 1433.282263][T24062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.310329][T24062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1433.338713][ T5967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.354945][ T5967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.379030][ T5967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.397960][ T5967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.470982][T13883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.489091][T13883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.513587][T13883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.523632][T13883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.632299][T24031] vhci_hcd: connection reset by peer [ 1433.652711][T13883] vhci_hcd vhci_hcd.6: stop threads [ 1433.671194][T13883] vhci_hcd vhci_hcd.6: release socket [ 1433.683416][T13883] vhci_hcd vhci_hcd.6: disconnect device [ 1433.824993][ T54] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1433.834997][T14412] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1433.977360][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.988640][T14412] usb 10-1: Using ep0 maxpacket: 8 [ 1433.993969][ T54] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1434.006320][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.017770][T14412] usb 10-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 1434.027709][ T54] usb 1-1: config 0 descriptor?? [ 1434.033239][T14412] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.047413][T14412] usb 10-1: config 0 descriptor?? [ 1434.055685][T14412] usblcd 10-1:0.0: USBLCD model not supported. [ 1434.247286][ T54] usbhid 1-1:0.0: can't add hid device: -71 [ 1434.254186][T27637] usb 10-1: USB disconnect, device number 53 [ 1434.255084][ T54] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1434.278725][ T54] usb 1-1: USB disconnect, device number 112 [ 1434.672525][T27655] usb 9-1: USB disconnect, device number 76 [ 1434.694886][T27637] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1434.856607][T27637] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.867731][T27637] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1434.877645][T27637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.887457][T27637] usb 1-1: config 0 descriptor?? [ 1435.065006][T21523] Bluetooth: hci4: command tx timeout [ 1435.084932][ T54] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1435.237049][ T54] usb 10-1: Using ep0 maxpacket: 16 [ 1435.260637][ T54] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1435.270084][ T54] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1435.288628][ T54] usb 10-1: Product: syz [ 1435.297795][ T54] usb 10-1: SerialNumber: syz [ 1435.307957][ T54] usb 10-1: config 0 descriptor?? [ 1435.317339][ T54] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1435.324280][ T54] dvb_usb_af9015 10-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1435.344784][ T54] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1435.354485][ T54] dvb_usb_af9035 10-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1435.607358][ T54] usb 10-1: USB disconnect, device number 54 [ 1435.716032][T27637] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 1435.733757][T27637] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input206 [ 1436.015187][T27632] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1436.414271][T24596] fuse: Bad value for 'fd' [ 1436.624892][T27637] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1436.776101][T27637] usb 9-1: Using ep0 maxpacket: 32 [ 1436.784296][T27637] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1436.794326][T27637] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.807160][T27637] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1436.816814][T27637] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.825103][T27637] usb 9-1: Product: syz [ 1436.829787][T27637] usb 9-1: Manufacturer: syz [ 1436.834420][T27637] usb 9-1: SerialNumber: syz [ 1437.130802][T18677] usb 1-1: USB disconnect, device number 113 [ 1437.137045][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1437.146716][T21523] Bluetooth: hci4: command tx timeout [ 1437.356658][T27637] usb 9-1: Cannot retrieve CPort count: -110 [ 1437.362835][T27637] usb 9-1: Cannot retrieve CPort count: -110 [ 1437.370204][T27637] es2_ap_driver 9-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 1437.565162][T14412] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1437.593658][T24638] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1437.714944][T14412] usb 1-1: Using ep0 maxpacket: 8 [ 1437.722027][T14412] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1437.730811][T14412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1437.741796][T14412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1437.752569][T14412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1437.763747][T14412] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1437.775969][T14412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1437.787720][T14412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1437.797513][T14412] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1437.809232][T14412] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1437.818416][T14412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.826613][T14412] usb 1-1: Product: syz [ 1437.830787][T14412] usb 1-1: Manufacturer: syz [ 1437.835426][T14412] usb 1-1: SerialNumber: syz [ 1437.841404][T14412] usb 1-1: config 0 descriptor?? [ 1437.847035][T24627] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1437.857082][T14412] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1437.888906][T14412] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1437.920017][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1438.060847][T27637] usb 1-1: USB disconnect, device number 114 [ 1438.643573][T24702] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8799'. [ 1438.756843][T24710] io-wq is not configured for unbound workers [ 1438.864932][T14412] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1439.026844][T14412] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.037991][T14412] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1439.049393][T14412] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1439.060715][T14412] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1439.079129][T14412] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1439.090075][T14412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.099324][T14412] usb 1-1: Product: syz [ 1439.104502][T14412] usb 1-1: Manufacturer: syz [ 1439.110193][T14412] usb 1-1: SerialNumber: syz [ 1439.122150][T24695] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1439.225252][T21523] Bluetooth: hci4: command tx timeout [ 1439.461208][ T54] usb 9-1: USB disconnect, device number 77 [ 1439.954964][ T54] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1439.997017][T24792] netlink: 'syz.3.8810': attribute type 1 has an invalid length. [ 1440.010906][T24792] erspan1: entered allmulticast mode [ 1440.049489][T24792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8810'. [ 1440.058815][T24792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1440.074607][T24792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.135963][ T54] usb 9-1: Using ep0 maxpacket: 8 [ 1440.142403][ T54] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1440.151042][T14412] cdc_ncm 1-1:1.0: bind() failure [ 1440.158663][ T54] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1440.168905][T14412] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1440.175969][T14412] cdc_ncm 1-1:1.1: bind() failure [ 1440.181020][ T54] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1440.193768][ T54] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1440.205207][ T54] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1440.218818][ T54] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1440.228455][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.255018][T27652] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1440.414982][T27652] usb 10-1: Using ep0 maxpacket: 8 [ 1440.421563][T27652] usb 10-1: config 149 has an invalid interface number: 79 but max is 0 [ 1440.430302][T27652] usb 10-1: config 149 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.440966][T27652] usb 10-1: config 149 has no interface number 0 [ 1440.449675][ T54] usb 9-1: usb_control_msg returned -71 [ 1440.455799][T27652] usb 10-1: config 149 interface 79 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1440.469201][ T54] usbtmc 9-1:16.0: can't read capabilities [ 1440.475717][T27652] usb 10-1: config 149 interface 79 has no altsetting 0 [ 1440.485168][ T54] usb 9-1: USB disconnect, device number 78 [ 1440.494399][T27652] usb 10-1: New USB device found, idVendor=05ac, idProduct=6940, bcdDevice=ff.a3 [ 1440.507255][T27652] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.516357][T27652] usb 10-1: Product: syz [ 1440.520645][T27652] usb 10-1: Manufacturer: syz [ 1440.526102][T27652] usb 10-1: SerialNumber: syz [ 1441.217628][T24840] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1441.224190][T24840] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1441.236755][T24840] vhci_hcd vhci_hcd.0: Device attached [ 1441.509272][T27637] usb 50-1: SetAddress Request (2) to port 0 [ 1441.515737][T27637] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1441.747827][T27655] usb 1-1: USB disconnect, device number 115 [ 1441.950870][T24841] vhci_hcd: connection reset by peer [ 1441.960408][ T5971] vhci_hcd vhci_hcd.8: stop threads [ 1441.975094][ T5971] vhci_hcd vhci_hcd.8: release socket [ 1441.994889][ T5971] vhci_hcd vhci_hcd.8: disconnect device [ 1442.204874][T27655] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1442.374930][T27655] usb 1-1: Using ep0 maxpacket: 32 [ 1442.382852][T27655] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1442.391835][T27655] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 96, changing to 7 [ 1442.404722][T27655] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1442.414057][T27655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.426424][T27655] usb 1-1: Product: syz [ 1442.435263][T27655] usb 1-1: Manufacturer: syz [ 1442.445014][T27655] usb 1-1: SerialNumber: syz [ 1442.470798][T27655] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1442.657205][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8818'. [ 1442.834206][T24890] netlink: 'syz.3.8817': attribute type 11 has an invalid length. [ 1442.866196][T27655] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1442.894084][T27655] usb 1-1: USB disconnect, device number 116 [ 1442.925040][T27636] usb 9-1: new full-speed USB device number 79 using dummy_hcd [ 1442.950964][T10291] udevd[10291]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1443.086641][T27636] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1443.100822][T27636] usb 9-1: config 0 has no interface number 0 [ 1443.109612][T27636] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1443.129620][T27636] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1443.146697][T27636] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.155332][T27636] usb 9-1: Product: syz [ 1443.159656][T27636] usb 9-1: Manufacturer: syz [ 1443.164612][T27636] usb 9-1: SerialNumber: syz [ 1443.176908][T27636] usb 9-1: config 0 descriptor?? [ 1443.304417][T27652] usb 10-1: USB disconnect, device number 55 [ 1443.506026][T27655] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1443.595284][T24964] gretap1: entered allmulticast mode [ 1443.596568][T27636] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1443.615881][T27636] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1443.631715][T27636] usb 9-1: USB disconnect, device number 79 [ 1443.699706][T24941] syzkaller0: entered promiscuous mode [ 1443.705526][T24941] syzkaller0: entered allmulticast mode [ 1443.716503][T27652] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1443.780016][T27655] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1443.796854][T27655] usb 1-1: too many configurations: 148, using maximum allowed: 8 [ 1443.816266][T27655] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1443.833368][T27655] usb 1-1: can't read configurations, error -71 [ 1443.862447][T24990] loop2: detected capacity change from 0 to 7 [ 1443.870365][T24990] Dev loop2: unable to read RDB block 7 [ 1443.876372][T24990] loop2: unable to read partition table [ 1443.882271][T24990] loop2: partition table beyond EOD, truncated [ 1443.889084][T24990] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1443.898400][T27652] usb 10-1: Using ep0 maxpacket: 8 [ 1443.907304][T27652] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1443.929403][T27652] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1443.940159][T27652] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1443.951847][T27652] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1443.962522][T27652] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1443.976618][T27652] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1443.985890][T27652] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.203479][T27652] usb 10-1: usb_control_msg returned -71 [ 1444.215654][T27652] usbtmc 10-1:16.0: can't read capabilities [ 1444.231468][T27652] usb 10-1: USB disconnect, device number 56 [ 1445.621577][T25047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8835'. [ 1445.850765][T25061] vivid-002: disconnect [ 1445.868622][T25060] vivid-002: reconnect [ 1445.905414][T27636] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1446.054963][T27652] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1446.074902][T27636] usb 9-1: Using ep0 maxpacket: 32 [ 1446.082720][T27636] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 1446.094421][T27636] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1446.103627][T27636] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1446.114841][T27636] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.123654][T27636] usb 9-1: Product: syz [ 1446.128649][T27636] usb 9-1: Manufacturer: syz [ 1446.133797][T27636] usb 9-1: SerialNumber: syz [ 1446.140590][T27636] usb 9-1: config 0 descriptor?? [ 1446.146527][T25040] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1446.221598][T27652] usb 10-1: device descriptor read/64, error -71 [ 1446.332355][T25085] picdev_read: 79 callbacks suppressed [ 1446.332375][T25085] kvm: pic: non byte read [ 1446.343811][T25085] kvm: pic: level sensitive irq not supported [ 1446.343872][T25085] kvm: pic: non byte read [ 1446.358736][T25085] kvm: pic: level sensitive irq not supported [ 1446.358797][T25085] kvm: pic: non byte read [ 1446.371421][T25085] kvm: pic: level sensitive irq not supported [ 1446.371501][T25085] kvm: pic: non byte read [ 1446.387140][T25085] kvm: pic: level sensitive irq not supported [ 1446.387202][T25085] kvm: pic: non byte read [ 1446.399069][T25085] kvm: pic: level sensitive irq not supported [ 1446.399127][T25085] kvm: pic: non byte read [ 1446.410707][T25085] kvm: pic: level sensitive irq not supported [ 1446.410766][T25085] kvm: pic: non byte read [ 1446.422494][T25085] kvm: pic: level sensitive irq not supported [ 1446.422553][T25085] kvm: pic: non byte read [ 1446.433991][T25085] kvm: pic: level sensitive irq not supported [ 1446.434052][T25085] kvm: pic: non byte read [ 1446.450488][T25085] kvm: pic: level sensitive irq not supported [ 1446.450670][T25085] kvm: pic: non byte read [ 1446.463006][T25085] kvm: pic: level sensitive irq not supported [ 1446.465065][T27652] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1446.568138][T27636] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 1446.584990][T27637] usb 50-1: device descriptor read/8, error -110 [ 1446.614911][T27652] usb 10-1: device descriptor read/64, error -71 [ 1446.728072][T27652] usb usb10-port1: attempt power cycle [ 1446.970544][T27636] gs_usb 9-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1446.981588][T27637] usb usb50-port1: attempt power cycle [ 1447.075332][T27652] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1447.097345][T27652] usb 10-1: device descriptor read/8, error -71 [ 1447.197537][T27636] usb 9-1: USB disconnect, device number 80 [ 1447.365679][T27652] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1447.394827][T27652] usb 10-1: device descriptor read/8, error -71 [ 1447.515088][T27652] usb usb10-port1: unable to enumerate USB device [ 1447.546007][T27637] usb usb50-port1: unable to enumerate USB device [ 1448.754888][T25154] loop5: detected capacity change from 0 to 7 [ 1448.766209][T25154] Dev loop5: unable to read RDB block 7 [ 1448.781159][T25154] loop5: unable to read partition table [ 1448.789063][T25154] loop5: partition table beyond EOD, truncated [ 1448.799911][T25154] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1448.904188][T25158] syzkaller0: entered promiscuous mode [ 1448.909919][T25158] syzkaller0: entered allmulticast mode [ 1449.237100][T25187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8857'. [ 1449.259518][T25187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8857'. [ 1449.303554][T25189] C: renamed from veth1_to_team (while UP) [ 1449.312145][T25189] netlink: 'syz.0.8858': attribute type 2 has an invalid length. [ 1449.321509][T25189] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8858'. [ 1449.331616][T25189] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1449.837985][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8860'. [ 1449.862013][T25195] openvswitch: netlink: Flow actions attr not present in new flow. [ 1450.054905][T14425] usb 9-1: new full-speed USB device number 81 using dummy_hcd [ 1450.119970][T27652] hid_parser_main: 16 callbacks suppressed [ 1450.119992][T27652] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 1450.141954][T25228] fuse: Bad value for 'fd' [ 1450.148449][T27652] hid-generic 0000:0000:0000.009D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1450.230311][T25231] fido_id[25231]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1450.230313][T14425] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1450.230344][T14425] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1450.328359][T14425] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1450.347949][T14425] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.372612][T25238] syzkaller0: entered promiscuous mode [ 1450.383798][T14425] usb 9-1: config 0 descriptor?? [ 1450.396555][T25238] syzkaller0: entered allmulticast mode [ 1450.403747][T25198] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1450.434488][T14425] hub 9-1:0.0: USB hub found [ 1450.643958][T25198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8861'. [ 1450.673940][T25198] usb usb7: usbfs: process 25198 (syz.8.8861) did not claim interface 0 before use [ 1450.686608][T25198] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1450.711913][T14425] hub 9-1:0.0: 1 port detected [ 1451.115922][T14425] usb 9-1: USB disconnect, device number 81 [ 1451.264600][T25274] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1451.295692][T27655] usb 10-1: new low-speed USB device number 61 using dummy_hcd [ 1451.296986][T25274] vlan2: entered allmulticast mode [ 1451.309402][T25274] team0: entered allmulticast mode [ 1451.314556][T25274] team_slave_0: entered allmulticast mode [ 1451.320758][T25274] team_slave_1: entered allmulticast mode [ 1451.446365][T27655] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1451.454321][T27655] usb 10-1: can't read configurations, error -61 [ 1451.585146][T14412] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1451.592902][T27655] usb 10-1: new low-speed USB device number 62 using dummy_hcd [ 1451.661018][T25284] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8873'. [ 1451.670181][T25284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.678210][T25284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.687345][T25284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.694763][T25284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.756762][T27655] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1451.765305][T27655] usb 10-1: can't read configurations, error -61 [ 1451.772148][T14412] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1451.783918][T27655] usb usb10-port1: attempt power cycle [ 1451.791354][T14412] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59357, setting to 1024 [ 1451.804764][T14412] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1451.814357][T14412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.822565][T14412] usb 1-1: Product: syz [ 1451.828124][T14412] usb 1-1: Manufacturer: syz [ 1451.832777][T14412] usb 1-1: SerialNumber: syz [ 1452.124938][T27655] usb 10-1: new low-speed USB device number 63 using dummy_hcd [ 1452.158887][T27655] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1452.166633][T27655] usb 10-1: can't read configurations, error -61 [ 1452.234960][T14425] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1452.294875][T27655] usb 10-1: new low-speed USB device number 64 using dummy_hcd [ 1452.316987][T27655] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1452.324833][T27655] usb 10-1: can't read configurations, error -61 [ 1452.331447][T27655] usb usb10-port1: unable to enumerate USB device [ 1452.385075][T14425] usb 9-1: Using ep0 maxpacket: 32 [ 1452.391941][T14425] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.403810][T14425] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.413953][T14425] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1452.423141][T14425] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.432558][T14425] usb 9-1: config 0 descriptor?? [ 1452.645167][T14425] usbhid 9-1:0.0: can't add hid device: -71 [ 1452.653179][T14425] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1452.665645][T14425] usb 9-1: USB disconnect, device number 82 [ 1452.854199][T14412] cdc_ncm 1-1:1.0: bind() failure [ 1452.863332][T14412] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1452.872007][T14412] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1452.880905][T14412] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1452.892586][T14412] usb 1-1: USB disconnect, device number 119 [ 1453.190044][T25337] FAULT_INJECTION: forcing a failure. [ 1453.190044][T25337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.203224][T25337] CPU: 1 UID: 0 PID: 25337 Comm: syz.8.8879 Tainted: G L syzkaller #0 PREEMPT(full) [ 1453.203244][T25337] Tainted: [L]=SOFTLOCKUP [ 1453.203248][T25337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1453.203255][T25337] Call Trace: [ 1453.203259][T25337] [ 1453.203264][T25337] dump_stack_lvl+0xe8/0x150 [ 1453.203283][T25337] should_fail_ex+0x40c/0x560 [ 1453.203295][T25337] _copy_from_user+0x2d/0xb0 [ 1453.203310][T25337] udmabuf_ioctl+0x143/0x300 [ 1453.203440][T25337] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1453.203455][T25337] ? __fget_files+0x2a/0x420 [ 1453.203469][T25337] ? __fget_files+0x3a2/0x420 [ 1453.203482][T25337] ? __fget_files+0x2a/0x420 [ 1453.203495][T25337] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1453.203511][T25337] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1453.203526][T25337] __se_sys_ioctl+0xfc/0x170 [ 1453.203544][T25337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.203562][T25337] do_syscall_64+0x174/0x580 [ 1453.203584][T25337] ? trace_irq_disable+0x3b/0x140 [ 1453.203607][T25337] ? clear_bhb_loop+0x40/0x90 [ 1453.203621][T25337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.203631][T25337] RIP: 0033:0x7f4b8739ce59 [ 1453.203642][T25337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.203652][T25337] RSP: 002b:00007f4b88199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.203664][T25337] RAX: ffffffffffffffda RBX: 00007f4b87615fa0 RCX: 00007f4b8739ce59 [ 1453.203671][T25337] RDX: 0000200000000500 RSI: 0000000040087543 RDI: 0000000000000007 [ 1453.203678][T25337] RBP: 00007f4b88199090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.203684][T25337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.203690][T25337] R13: 00007f4b87616038 R14: 00007f4b87615fa0 R15: 00007f4b8773fa48 [ 1453.203701][T25337] [ 1453.571810][T25345] netlink: 'syz.0.8881': attribute type 4 has an invalid length. [ 1454.111667][T25359] fuse: Bad value for 'fd' [ 1454.416022][T25376] netlink: 132 bytes leftover after parsing attributes in process `syz.9.8885'. [ 1454.807851][T25392] fuse: Unknown parameter 'grou00000000000000000000' [ 1455.096384][T25403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8894'. [ 1455.391887][T25424] syzkaller0: entered promiscuous mode [ 1455.408902][T25424] syzkaller0: entered allmulticast mode [ 1455.473499][T25435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8898'. [ 1455.570888][T25440] FAULT_INJECTION: forcing a failure. [ 1455.570888][T25440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.588491][T25440] CPU: 1 UID: 0 PID: 25440 Comm: syz.0.8899 Tainted: G L syzkaller #0 PREEMPT(full) [ 1455.588513][T25440] Tainted: [L]=SOFTLOCKUP [ 1455.588517][T25440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1455.588524][T25440] Call Trace: [ 1455.588529][T25440] [ 1455.588534][T25440] dump_stack_lvl+0xe8/0x150 [ 1455.588552][T25440] should_fail_ex+0x40c/0x560 [ 1455.588565][T25440] _copy_from_user+0x2d/0xb0 [ 1455.588580][T25440] kvm_arch_dev_ioctl+0x1ae/0x9e0 [ 1455.588592][T25440] ? do_vfs_ioctl+0x116f/0x1530 [ 1455.588604][T25440] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 1455.588615][T25440] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1455.588626][T25440] ? rcu_is_watching+0x15/0xb0 [ 1455.588639][T25440] ? hook_file_ioctl+0x1f0/0x5f0 [ 1455.588651][T25440] kvm_dev_ioctl+0x59e/0x1590 [ 1455.588663][T25440] ? lock_release+0x4b/0x3c0 [ 1455.588674][T25440] ? __fget_files+0x2a/0x420 [ 1455.588694][T25440] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1455.588705][T25440] ? __fget_files+0x2a/0x420 [ 1455.588718][T25440] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1455.588732][T25440] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1455.588743][T25440] __se_sys_ioctl+0xfc/0x170 [ 1455.588754][T25440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.588764][T25440] do_syscall_64+0x174/0x580 [ 1455.588780][T25440] ? trace_irq_disable+0x3b/0x140 [ 1455.588804][T25440] ? clear_bhb_loop+0x40/0x90 [ 1455.588822][T25440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.588840][T25440] RIP: 0033:0x7f9289b9ce59 [ 1455.588853][T25440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.588862][T25440] RSP: 002b:00007f928a9bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1455.588874][T25440] RAX: ffffffffffffffda RBX: 00007f9289e15fa0 RCX: 00007f9289b9ce59 [ 1455.588881][T25440] RDX: 0000200000000300 RSI: 00000000c004ae02 RDI: 0000000000000003 [ 1455.588888][T25440] RBP: 00007f928a9bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.588894][T25440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.588900][T25440] R13: 00007f9289e16038 R14: 00007f9289e15fa0 R15: 00007f9289f3fa48 [ 1455.588918][T25440] [ 1455.854509][T25442] Option ' [ 1455.854509][T25442] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 1455.854509][T25442] :ÖúÕ?Çý&*»|&' to dns_resolver key: bad/missing value [ 1455.971132][T25447] fuse: Unknown parameter 'grou00000000000000000000' [ 1456.235159][T14412] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1456.434993][T14412] usb 1-1: Using ep0 maxpacket: 8 [ 1456.450329][T14412] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1456.469960][T14412] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1456.493806][T14412] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1456.521653][T14412] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1456.544975][T14412] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1456.579002][T14412] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1456.606381][T14412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.845461][T14412] usb 1-1: usb_control_msg returned -71 [ 1456.854249][T14412] usbtmc 1-1:16.0: can't read capabilities [ 1456.896115][T14412] usb 1-1: USB disconnect, device number 120 [ 1457.040153][ T30] audit: type=1804 audit(1782159926.366:8410): pid=25490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.8907" name="bus" dev="ramfs" ino=214302 res=1 errno=0 [ 1457.063651][ T30] audit: type=1804 audit(1782159926.366:8411): pid=25489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.8907" name="bus" dev="ramfs" ino=214302 res=1 errno=0 [ 1457.086302][ T30] audit: type=1804 audit(1782159926.366:8412): pid=25489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.8907" name="bus" dev="ramfs" ino=214302 res=1 errno=0 [ 1457.114128][ T30] audit: type=1804 audit(1782159926.416:8413): pid=25489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.8907" name="bus" dev="ramfs" ino=214302 res=1 errno=0 [ 1457.134416][ T30] audit: type=1804 audit(1782159926.416:8414): pid=25489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.8907" name="bus" dev="ramfs" ino=214302 res=1 errno=0 [ 1457.156703][ T30] audit: type=1804 audit(1782159926.416:8415): pid=25489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.8907" name="bus" dev="ramfs" ino=214302 res=1 errno=0 [ 1457.204658][T25502] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8909'. [ 1457.206027][ T30] audit: type=1804 audit(1782159926.416:8416): pid=25489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.8907" name="bus" dev="ramfs" ino=214302 res=1 errno=0 [ 1457.239253][ T30] audit: type=1804 audit(1782159926.416:8417): pid=25489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.8907" name="bus" dev="ramfs" ino=214302 res=1 errno=0 [ 1457.260935][ T30] audit: type=1804 audit(1782159926.416:8418): pid=25489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.8907" name="bus" dev="ramfs" ino=214302 res=1 errno=0 [ 1457.308601][T25511] FAULT_INJECTION: forcing a failure. [ 1457.308601][T25511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1457.323561][T25511] CPU: 0 UID: 0 PID: 25511 Comm: syz.6.8911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.323602][T25511] Tainted: [L]=SOFTLOCKUP [ 1457.323609][T25511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1457.323620][T25511] Call Trace: [ 1457.323627][T25511] [ 1457.323635][T25511] dump_stack_lvl+0xe8/0x150 [ 1457.323661][T25511] should_fail_ex+0x40c/0x560 [ 1457.323682][T25511] _copy_to_user+0x31/0xb0 [ 1457.323708][T25511] kvm_arch_dev_ioctl+0x452/0x9e0 [ 1457.323727][T25511] ? do_vfs_ioctl+0x116f/0x1530 [ 1457.323747][T25511] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 1457.323764][T25511] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1457.323785][T25511] ? rcu_is_watching+0x15/0xb0 [ 1457.323807][T25511] ? hook_file_ioctl+0x1f0/0x5f0 [ 1457.323829][T25511] kvm_dev_ioctl+0x59e/0x1590 [ 1457.323850][T25511] ? lock_release+0x4b/0x3c0 [ 1457.323868][T25511] ? __fget_files+0x2a/0x420 [ 1457.323892][T25511] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1457.323911][T25511] ? __fget_files+0x2a/0x420 [ 1457.323938][T25511] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1457.323961][T25511] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1457.323981][T25511] __se_sys_ioctl+0xfc/0x170 [ 1457.324000][T25511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.324018][T25511] do_syscall_64+0x174/0x580 [ 1457.324042][T25511] ? trace_irq_disable+0x3b/0x140 [ 1457.324067][T25511] ? clear_bhb_loop+0x40/0x90 [ 1457.324086][T25511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.324102][T25511] RIP: 0033:0x7f457999ce59 [ 1457.324118][T25511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.324134][T25511] RSP: 002b:00007f457a894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1457.324154][T25511] RAX: ffffffffffffffda RBX: 00007f4579c15fa0 RCX: 00007f457999ce59 [ 1457.324168][T25511] RDX: 0000200000000300 RSI: 00000000c004ae02 RDI: 0000000000000003 [ 1457.324180][T25511] RBP: 00007f457a894090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.324191][T25511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.324203][T25511] R13: 00007f4579c16038 R14: 00007f4579c15fa0 R15: 00007f4579d3fa48 [ 1457.324222][T25511] [ 1457.617462][T25521] fuse: Unknown parameter 'group_i00000000000000000000' [ 1457.633983][T25523] input: syz1 as /devices/virtual/input/input208 [ 1457.668522][T25512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.675951][T25512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.743553][T25512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.894888][T14412] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1458.043501][ T5971] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.054900][T14412] usb 1-1: Using ep0 maxpacket: 16 [ 1458.065500][T14412] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.082729][ T5971] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.101198][ T5971] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.113342][T14412] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.123539][ T5971] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.138943][T14412] usb 1-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1458.160680][T14412] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1458.179382][T25538] tipc: Enabled bearer , priority 0 [ 1458.187109][T14412] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1458.202077][T14412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.219667][T14412] usb 1-1: config 0 descriptor?? [ 1458.259523][T25541] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8916'. [ 1458.397706][T25545] syzkaller0: entered promiscuous mode [ 1458.448776][T25523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.473380][T25552] input: syz1 as /devices/virtual/input/input209 [ 1458.486260][T25523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.524367][T25523] xt_l2tp: v2 sid > 0xffff: 65536 [ 1458.570146][T25545] syzkaller0: entered allmulticast mode [ 1458.646816][T14412] usbhid 1-1:0.0: can't add hid device: -71 [ 1458.669738][T14412] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1458.675753][T25555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.715704][T14412] usb 1-1: USB disconnect, device number 121 [ 1458.762968][T25533] netlink: 'syz.6.8916': attribute type 3 has an invalid length. [ 1458.800935][T25579] fuse: Bad value for 'fd' [ 1459.060710][T25535] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1459.522964][T25590] input: syz0 as /devices/virtual/input/input210 [ 1459.533962][T25590] input: failed to attach handler leds to device input210, error: -6 [ 1459.891507][T25614] fuse: Unknown parameter 'group_i00000000000000000000' [ 1459.894113][T25563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.949815][T25563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.957086][T25563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.019826][T25563] veth1_vlan: left promiscuous mode [ 1460.027325][T25563] veth0_vlan: left promiscuous mode [ 1460.034301][T25563] veth0_vlan: entered promiscuous mode [ 1460.047632][T25563] veth1_vlan: entered promiscuous mode [ 1460.059295][T25563] veth1_macvtap: left promiscuous mode [ 1460.067346][T25563] veth0_macvtap: left promiscuous mode [ 1460.075797][T25563] veth0_macvtap: entered promiscuous mode [ 1460.083655][T25563] veth1_macvtap: entered promiscuous mode [ 1460.097589][T25563] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 1460.106343][T25563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1463.946031][ T2365] pvrusb2: request_firmware fatal error with code=-110 [ 1463.955123][ T2365] pvrusb2: Failure uploading firmware1 [ 1463.960624][ T2365] pvrusb2: Device initialization was not successful. [ 1463.967919][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1463.978836][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1463.988959][T27654] pvrusb2: Device being rendered inoperable [ 1464.285016][T27654] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1469.435019][T27654] usb 4-1: device descriptor read/64, error -110 [ 1469.675016][T27654] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1469.805000][T27654] usb 4-1: device descriptor read/64, error -32 [ 1469.915574][T27654] usb usb4-port1: attempt power cycle [ 1470.255207][T27654] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1470.275821][T27654] usb 4-1: device descriptor read/8, error -32 [ 1470.385425][T27654] raw-gadget.0 gadget.3: failed to queue suspend event [ 1470.392567][T27654] raw-gadget.0 gadget.3: failed to queue reset event [ 1470.465022][T27654] raw-gadget.0 gadget.3: failed to queue resume event [ 1470.525032][T27654] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1470.545150][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1470.552280][T27654] usb 4-1: device descriptor read/8, error -32 [ 1470.665456][T27654] raw-gadget.0 gadget.3: failed to queue suspend event [ 1470.672513][T27654] usb usb4-port1: unable to enumerate USB device [ 1473.145136][T31551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1473.158362][T31551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1473.165880][T31551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1473.173656][T31551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1473.181785][T31551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1473.636856][T21523] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1473.644295][T21523] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1473.651823][T21523] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1473.659904][T21523] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1473.668411][T21523] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1474.626258][T31551] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1474.633975][T31551] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1474.641390][T31551] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1474.649163][T31551] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1474.657044][T31551] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1475.225083][T31551] Bluetooth: hci0: command tx timeout [ 1475.643293][T21523] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1475.650673][T21523] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1475.657984][T21523] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1475.666082][T21523] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1475.673583][T21523] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1475.704920][T31551] Bluetooth: hci5: command tx timeout [ 1476.139395][T21523] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1476.149952][T21523] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1476.157941][T21523] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1476.165878][T21523] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1476.173339][T21523] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1476.745118][T31551] Bluetooth: hci6: command tx timeout [ 1477.304972][T31551] Bluetooth: hci0: command tx timeout [ 1477.715036][T31551] Bluetooth: hci7: command tx timeout [ 1477.785117][T31551] Bluetooth: hci5: command tx timeout [ 1478.184977][T31551] Bluetooth: hci8: command tx timeout [ 1478.825040][T31551] Bluetooth: hci6: command tx timeout [ 1479.305981][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.312338][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.385230][T31551] Bluetooth: hci0: command tx timeout [ 1479.785034][T31551] Bluetooth: hci7: command tx timeout [ 1479.865001][T31551] Bluetooth: hci5: command tx timeout [ 1480.275019][T31551] Bluetooth: hci8: command tx timeout [ 1480.904957][T31551] Bluetooth: hci6: command tx timeout [ 1481.465062][T31551] Bluetooth: hci0: command tx timeout [ 1481.865293][T31551] Bluetooth: hci7: command tx timeout [ 1481.945156][T31551] Bluetooth: hci5: command tx timeout [ 1482.345022][T31551] Bluetooth: hci8: command tx timeout [ 1482.985035][T31551] Bluetooth: hci6: command tx timeout [ 1483.944985][T31551] Bluetooth: hci7: command tx timeout [ 1484.425251][T31551] Bluetooth: hci8: command tx timeout [ 1533.182797][T21523] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1533.191109][T21523] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1533.199213][T21523] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1533.209151][T21523] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1533.217550][T21523] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1533.684474][T31551] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1533.692085][T31551] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1533.700051][T31551] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1533.708404][T31551] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1533.716288][T31551] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1535.184276][T31551] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1535.192539][T31551] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1535.200241][T31551] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1535.208496][T31551] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1535.217907][T31551] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1535.305189][T21523] Bluetooth: hci10: command tx timeout [ 1535.682324][T31551] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1535.689997][T31551] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1535.697537][T31551] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1535.707751][T31551] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1535.715557][T31551] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1535.785143][T21523] Bluetooth: hci11: command tx timeout [ 1536.693853][T31551] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1536.701469][T31551] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1536.708935][T31551] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1536.717407][T31551] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1536.726020][T31551] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1537.305116][T21523] Bluetooth: hci12: command tx timeout [ 1537.385102][T21523] Bluetooth: hci10: command tx timeout [ 1537.785776][T21523] Bluetooth: hci13: command tx timeout [ 1537.864974][T21523] Bluetooth: hci11: command tx timeout [ 1538.744948][T21523] Bluetooth: hci14: command tx timeout [ 1539.385513][T21523] Bluetooth: hci12: command tx timeout [ 1539.464992][T21523] Bluetooth: hci10: command tx timeout [ 1539.865051][T21523] Bluetooth: hci13: command tx timeout [ 1539.954901][T21523] Bluetooth: hci11: command tx timeout [ 1540.746131][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.753176][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1540.825111][T21523] Bluetooth: hci14: command tx timeout [ 1541.465269][T21523] Bluetooth: hci12: command tx timeout [ 1541.545189][T21523] Bluetooth: hci10: command tx timeout [ 1541.945058][T21523] Bluetooth: hci13: command tx timeout [ 1542.025046][T21523] Bluetooth: hci11: command tx timeout [ 1542.905238][T21523] Bluetooth: hci14: command tx timeout [ 1543.544897][T21523] Bluetooth: hci12: command tx timeout [ 1544.024954][T21523] Bluetooth: hci13: command tx timeout [ 1544.985013][T21523] Bluetooth: hci14: command tx timeout [ 1547.944915][T31551] Bluetooth: hci3: command 0x0406 tx timeout [ 1553.064982][T31551] Bluetooth: hci4: command 0x0406 tx timeout [ 1593.248571][T31551] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1593.256284][T31551] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1593.263696][T31551] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1593.271890][T31551] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1593.280326][T31551] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1593.752288][T31551] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1593.759766][T31551] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1593.767234][T31551] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1593.775415][T31551] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1593.783113][T31551] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1595.255982][T31551] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1595.263436][T31551] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1595.271000][T31551] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1595.278833][T31551] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1595.286613][T31551] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1595.304870][T31551] Bluetooth: hci15: command tx timeout [ 1595.773763][T21523] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1595.781198][T21523] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1595.791101][T21523] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1595.799209][T21523] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1595.807298][T21523] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1595.865094][T31551] Bluetooth: hci16: command tx timeout [ 1597.255516][T25773] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1597.263032][T25773] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1597.270547][T25773] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1597.278445][T25773] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1597.286150][T25773] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1597.314881][T25774] Bluetooth: hci17: command tx timeout [ 1597.385136][T25774] Bluetooth: hci15: command tx timeout [ 1597.864980][T25774] Bluetooth: hci18: command tx timeout [ 1597.945020][T25774] Bluetooth: hci16: command tx timeout [ 1599.144950][T25774] Bluetooth: hci7: command 0x0406 tx timeout [ 1599.144963][T25773] Bluetooth: hci0: command 0x0406 tx timeout [ 1599.144991][T25773] Bluetooth: hci5: command 0x0406 tx timeout [ 1599.151275][T25774] Bluetooth: hci6: command 0x0406 tx timeout [ 1599.157654][T25773] Bluetooth: hci8: command 0x0406 tx timeout [ 1599.305074][T25771] Bluetooth: hci19: command tx timeout [ 1599.384938][T25771] Bluetooth: hci17: command tx timeout [ 1599.464972][T25771] Bluetooth: hci15: command tx timeout [ 1599.944910][T25771] Bluetooth: hci18: command tx timeout [ 1600.024987][T25771] Bluetooth: hci16: command tx timeout [ 1601.385162][T25771] Bluetooth: hci19: command tx timeout [ 1601.464911][T25771] Bluetooth: hci17: command tx timeout [ 1601.544879][T25771] Bluetooth: hci15: command tx timeout [ 1602.024905][T25771] Bluetooth: hci18: command tx timeout [ 1602.104903][T25771] Bluetooth: hci16: command tx timeout [ 1602.186356][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1602.194376][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1603.464985][T25771] Bluetooth: hci19: command tx timeout [ 1603.544968][T25771] Bluetooth: hci17: command tx timeout [ 1604.104900][T25771] Bluetooth: hci18: command tx timeout [ 1605.544930][T25771] Bluetooth: hci19: command tx timeout [ 1611.785670][ T31] INFO: task kworker/1:14:14425 blocked for more than 143 seconds. [ 1611.793712][ T31] Tainted: G L syzkaller #0 [ 1611.800299][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1611.809026][ T31] task:kworker/1:14 state:D stack:22728 pid:14425 tgid:14425 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1611.821194][ T31] Workqueue: events netdev_rx_mode_work [ 1611.827184][ T31] Call Trace: [ 1611.830526][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1611.833733][ T31] __schedule+0x17d9/0x56c0 [ 1611.838336][ T31] ? kasan_save_track+0x3e/0x80 [ 1611.843209][ T31] ? kasan_save_free_info+0x40/0x50 [ 1611.848559][ T31] ? __kasan_slab_free+0x5c/0x80 [ 1611.853532][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1611.858673][ T31] ? __pfx___schedule+0x10/0x10 [ 1611.863577][ T31] ? rcu_is_watching+0x15/0xb0 [ 1611.868518][ T31] ? rcu_is_watching+0x15/0xb0 [ 1611.873321][ T31] ? lock_release+0x4b/0x3c0 [ 1611.877972][ T31] ? rcu_is_watching+0x15/0xb0 [ 1611.882769][ T31] ? schedule+0x90/0x360 [ 1611.887076][ T31] ? trace_irq_enable+0x3b/0x140 [ 1611.892023][ T31] schedule+0x164/0x360 [ 1611.896299][ T31] schedule_preempt_disabled+0x13/0x30 [ 1611.901799][ T31] __mutex_lock+0x7bf/0x1550 [ 1611.906517][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1611.911328][ T31] ? netdev_rx_mode_work+0x18/0x3c0 [ 1611.916597][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1611.921806][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1611.927254][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1611.933016][ T31] ? rcu_is_watching+0x15/0xb0 [ 1611.938387][ T31] ? lock_acquire+0x5f/0x350 [ 1611.943014][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1611.949020][ T31] netdev_rx_mode_work+0x18/0x3c0 [ 1611.954084][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1611.960116][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1611.965939][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1611.971957][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1611.977342][ T31] ? assign_work+0x3cf/0x5d0 [ 1611.981987][ T31] worker_thread+0xa47/0xfb0 [ 1611.986941][ T31] kthread+0x388/0x470 [ 1611.991054][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1611.996504][ T31] ? __pfx_kthread+0x10/0x10 [ 1612.001365][ T31] ret_from_fork+0x514/0xb70 [ 1612.006170][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1612.011316][ T31] ? __switch_to+0xc89/0x1420 [ 1612.016298][ T31] ? __pfx_kthread+0x10/0x10 [ 1612.020923][ T31] ret_from_fork_asm+0x1a/0x30 [ 1612.026119][ T31] [ 1612.029192][ T31] INFO: task kworker/1:18:18677 blocked for more than 143 seconds. [ 1612.038237][ T31] Tainted: G L syzkaller #0 [ 1612.054818][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1612.065714][ T31] task:kworker/1:18 state:D stack:18920 pid:18677 tgid:18677 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1612.078355][ T31] Workqueue: events switchdev_deferred_process_work [ 1612.085261][ T31] Call Trace: [ 1612.088598][ T31] [ 1612.091561][ T31] __schedule+0x17d9/0x56c0 [ 1612.096526][ T31] ? __pfx___schedule+0x10/0x10 [ 1612.101440][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.106650][ T31] ? lock_release+0x4b/0x3c0 [ 1612.111284][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.116546][ T31] ? schedule+0x90/0x360 [ 1612.120941][ T31] ? trace_irq_enable+0x3b/0x140 [ 1612.125931][ T31] schedule+0x164/0x360 [ 1612.130215][ T31] schedule_preempt_disabled+0x13/0x30 [ 1612.135820][ T31] __mutex_lock+0x7bf/0x1550 [ 1612.140813][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1612.145727][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 1612.151926][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1612.156997][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1612.162843][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.167665][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.172567][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1612.178353][ T31] switchdev_deferred_process_work+0xe/0x20 [ 1612.184381][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1612.191455][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1612.197525][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1612.202717][ T31] ? assign_work+0x3cf/0x5d0 [ 1612.207388][ T31] worker_thread+0xa47/0xfb0 [ 1612.212112][ T31] kthread+0x388/0x470 [ 1612.216223][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1612.221440][ T31] ? __pfx_kthread+0x10/0x10 [ 1612.226146][ T31] ret_from_fork+0x514/0xb70 [ 1612.230854][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1612.236085][ T31] ? __switch_to+0xc89/0x1420 [ 1612.241172][ T31] ? __pfx_kthread+0x10/0x10 [ 1612.245862][ T31] ret_from_fork_asm+0x1a/0x30 [ 1612.250745][ T31] [ 1612.253826][ T31] INFO: task kworker/u8:1:25460 blocked for more than 143 seconds. [ 1612.261771][ T31] Tainted: G L syzkaller #0 [ 1612.268618][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1612.277327][ T31] task:kworker/u8:1 state:D stack:22648 pid:25460 tgid:25460 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1612.289488][ T31] Workqueue: events_unbound linkwatch_event [ 1612.295448][ T31] Call Trace: [ 1612.298829][ T31] [ 1612.301766][ T31] __schedule+0x17d9/0x56c0 [ 1612.306361][ T31] ? debug_object_activate+0xb7/0x410 [ 1612.311930][ T31] ? __pfx___schedule+0x10/0x10 [ 1612.316841][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.321713][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.326522][ T31] ? lock_release+0x4b/0x3c0 [ 1612.331233][ T31] ? wq_worker_sleeping+0x66/0x250 [ 1612.336388][ T31] schedule+0x164/0x360 [ 1612.340665][ T31] schedule_preempt_disabled+0x13/0x30 [ 1612.346842][ T31] __mutex_lock+0x7bf/0x1550 [ 1612.351490][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1612.356362][ T31] ? linkwatch_event+0xe/0x60 [ 1612.361171][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1612.366280][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1612.372144][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.376970][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.381909][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1612.387677][ T31] linkwatch_event+0xe/0x60 [ 1612.392309][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1612.397922][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1612.404027][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1612.409117][ T31] ? assign_work+0x3cf/0x5d0 [ 1612.413846][ T31] worker_thread+0xa47/0xfb0 [ 1612.418516][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1612.423473][ T31] kthread+0x388/0x470 [ 1612.428346][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1612.433519][ T31] ? __pfx_kthread+0x10/0x10 [ 1612.438165][ T31] ret_from_fork+0x514/0xb70 [ 1612.442977][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1612.448577][ T31] ? __switch_to+0xc89/0x1420 [ 1612.453300][ T31] ? __pfx_kthread+0x10/0x10 [ 1612.457926][ T31] ret_from_fork_asm+0x1a/0x30 [ 1612.462838][ T31] [ 1612.466068][ T31] INFO: task kworker/u8:3:5964 blocked for more than 144 seconds. [ 1612.473917][ T31] Tainted: G L syzkaller #0 [ 1612.480477][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1612.489309][ T31] task:kworker/u8:3 state:D stack:21656 pid:5964 tgid:5964 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1612.501395][ T31] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 1612.509260][ T31] Call Trace: [ 1612.512661][ T31] [ 1612.515636][ T31] __schedule+0x17d9/0x56c0 [ 1612.520273][ T31] ? __pfx___schedule+0x10/0x10 [ 1612.525156][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.530051][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.534877][ T31] ? lock_release+0x4b/0x3c0 [ 1612.539481][ T31] ? wq_worker_sleeping+0x66/0x250 [ 1612.544839][ T31] schedule+0x164/0x360 [ 1612.549386][ T31] schedule_preempt_disabled+0x13/0x30 [ 1612.554946][ T31] __mutex_lock+0x7bf/0x1550 [ 1612.559681][ T31] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1612.565929][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1612.570822][ T31] ? udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 1612.577114][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1612.582271][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1612.587373][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1612.592871][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.597702][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1612.603523][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.608342][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1612.614188][ T31] udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 1612.620336][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.625226][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1612.631017][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1612.636622][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1612.642729][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1612.647811][ T31] ? assign_work+0x3cf/0x5d0 [ 1612.652860][ T31] worker_thread+0xa47/0xfb0 [ 1612.657593][ T31] kthread+0x388/0x470 [ 1612.661668][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1612.666986][ T31] ? __pfx_kthread+0x10/0x10 [ 1612.671624][ T31] ret_from_fork+0x514/0xb70 [ 1612.676265][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1612.681502][ T31] ? __switch_to+0xc89/0x1420 [ 1612.686224][ T31] ? __pfx_kthread+0x10/0x10 [ 1612.690912][ T31] ret_from_fork_asm+0x1a/0x30 [ 1612.695746][ T31] [ 1612.698869][ T31] INFO: task kworker/u8:8:5971 blocked for more than 144 seconds. [ 1612.707464][ T31] Tainted: G L syzkaller #0 [ 1612.713992][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1612.722699][ T31] task:kworker/u8:8 state:D stack:22648 pid:5971 tgid:5971 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1612.734932][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 1612.741014][ T31] Call Trace: [ 1612.744277][ T31] [ 1612.747252][ T31] __schedule+0x17d9/0x56c0 [ 1612.751898][ T31] ? arch_stack_walk+0x11b/0x150 [ 1612.757243][ T31] ? __pfx___schedule+0x10/0x10 [ 1612.762146][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.767064][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.771997][ T31] ? lock_release+0x4b/0x3c0 [ 1612.776708][ T31] ? wq_worker_sleeping+0x66/0x250 [ 1612.781997][ T31] schedule+0x164/0x360 [ 1612.786224][ T31] schedule_preempt_disabled+0x13/0x30 [ 1612.791833][ T31] __mutex_lock+0x7bf/0x1550 [ 1612.796486][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1612.801385][ T31] ? addrconf_dad_work+0x116/0x15c0 [ 1612.806636][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1612.811684][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.816491][ T31] ? trace_hrtimer_start+0x82/0x200 [ 1612.821701][ T31] addrconf_dad_work+0x116/0x15c0 [ 1612.827130][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1612.832561][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1612.838084][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.842855][ T31] ? lock_acquire+0x5f/0x350 [ 1612.847495][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.852264][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1612.858376][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1612.863970][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1612.870046][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1612.875117][ T31] ? assign_work+0x3cf/0x5d0 [ 1612.879723][ T31] worker_thread+0xa47/0xfb0 [ 1612.884309][ T31] kthread+0x388/0x470 [ 1612.888432][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1612.893559][ T31] ? __pfx_kthread+0x10/0x10 [ 1612.898221][ T31] ret_from_fork+0x514/0xb70 [ 1612.902838][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1612.908095][ T31] ? __switch_to+0xc89/0x1420 [ 1612.912902][ T31] ? __pfx_kthread+0x10/0x10 [ 1612.917654][ T31] ret_from_fork_asm+0x1a/0x30 [ 1612.922622][ T31] [ 1612.925736][ T31] INFO: task syz.9.8917:25534 blocked for more than 144 seconds. [ 1612.933479][ T31] Tainted: G L syzkaller #0 [ 1612.940090][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1612.948806][ T31] task:syz.9.8917 state:D stack:24824 pid:25534 tgid:25534 ppid:3691 task_flags:0x400040 flags:0x00080002 [ 1612.961141][ T31] Call Trace: [ 1612.964455][ T31] [ 1612.967419][ T31] __schedule+0x17d9/0x56c0 [ 1612.971937][ T31] ? stack_trace_save+0xa9/0x100 [ 1612.976912][ T31] ? __pfx___schedule+0x10/0x10 [ 1612.981785][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.986593][ T31] ? rcu_is_watching+0x15/0xb0 [ 1612.991372][ T31] ? lock_release+0x4b/0x3c0 [ 1612.996007][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.000778][ T31] schedule+0x164/0x360 [ 1613.004985][ T31] schedule_preempt_disabled+0x13/0x30 [ 1613.010458][ T31] __mutex_lock+0x7bf/0x1550 [ 1613.015110][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1613.019902][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1613.024593][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1613.029704][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1613.034855][ T31] tun_chr_close+0x3e/0x1c0 [ 1613.039368][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1613.044469][ T31] __fput+0x418/0xa50 [ 1613.048516][ T31] task_work_run+0x1d9/0x270 [ 1613.053105][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1613.058270][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.063331][ T31] exit_to_user_mode_loop+0x1fa/0x730 [ 1613.070584][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.075470][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.081585][ T31] do_syscall_64+0x353/0x580 [ 1613.086224][ T31] ? trace_irq_disable+0x3b/0x140 [ 1613.091258][ T31] ? clear_bhb_loop+0x40/0x90 [ 1613.095972][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.101869][ T31] RIP: 0033:0x7fede0d9ce59 [ 1613.106352][ T31] RSP: 002b:00007fede113fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1613.114837][ T31] RAX: 0000000000000000 RBX: 00007fede1017da0 RCX: 00007fede0d9ce59 [ 1613.122821][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1613.130858][ T31] RBP: 00007fede1017da0 R08: 0000000000000006 R09: 0000000000000000 [ 1613.138960][ T31] R10: 00007fede1017cb0 R11: 0000000000000246 R12: 000000000016476e [ 1613.147246][ T31] R13: 00007fede1015fac R14: 0000000000164726 R15: 00007fede1015fa0 [ 1613.155283][ T31] [ 1613.158346][ T31] INFO: task syz.9.8917:25537 blocked for more than 144 seconds. [ 1613.166481][ T31] Tainted: G L syzkaller #0 [ 1613.172986][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1613.181726][ T31] task:syz.9.8917 state:D stack:28792 pid:25537 tgid:25534 ppid:3691 task_flags:0x400040 flags:0x00080002 [ 1613.193693][ T31] Call Trace: [ 1613.197021][ T31] [ 1613.199953][ T31] __schedule+0x17d9/0x56c0 [ 1613.204486][ T31] ? __pfx___schedule+0x10/0x10 [ 1613.209388][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.214179][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.219011][ T31] ? lock_release+0x4b/0x3c0 [ 1613.223605][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.229995][ T31] schedule+0x164/0x360 [ 1613.234180][ T31] schedule_preempt_disabled+0x13/0x30 [ 1613.239676][ T31] __mutex_lock+0x7bf/0x1550 [ 1613.244285][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1613.249112][ T31] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1613.254148][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1613.259230][ T31] ? lock_release+0x4b/0x3c0 [ 1613.263852][ T31] ? __might_fault+0xaf/0x130 [ 1613.268946][ T31] ? __might_fault+0xcb/0x130 [ 1613.273657][ T31] __tun_chr_ioctl+0x3bc/0x1e10 [ 1613.278605][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1613.283932][ T31] ? __fget_files+0x2a/0x420 [ 1613.288566][ T31] ? __fget_files+0x3a2/0x420 [ 1613.293251][ T31] ? __fget_files+0x2a/0x420 [ 1613.297905][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1613.302853][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1613.308104][ T31] __se_sys_ioctl+0xfc/0x170 [ 1613.312738][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.318851][ T31] do_syscall_64+0x174/0x580 [ 1613.323451][ T31] ? trace_irq_disable+0x3b/0x140 [ 1613.328551][ T31] ? clear_bhb_loop+0x40/0x90 [ 1613.333260][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.339218][ T31] RIP: 0033:0x7fede0d9ce59 [ 1613.343637][ T31] RSP: 002b:00007feddefd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1613.352105][ T31] RAX: ffffffffffffffda RBX: 00007fede1016090 RCX: 00007fede0d9ce59 [ 1613.360117][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000008 [ 1613.368520][ T31] RBP: 00007fede0e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1613.376669][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.384683][ T31] R13: 00007fede1016128 R14: 00007fede1016090 R15: 00007fede113fa48 [ 1613.392720][ T31] [ 1613.395854][ T31] INFO: task syz.9.8917:25538 blocked for more than 144 seconds. [ 1613.403586][ T31] Tainted: G L syzkaller #0 [ 1613.410336][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1613.419076][ T31] task:syz.9.8917 state:D stack:25768 pid:25538 tgid:25534 ppid:3691 task_flags:0x400140 flags:0x00080002 [ 1613.431120][ T31] Call Trace: [ 1613.434422][ T31] [ 1613.437417][ T31] __schedule+0x17d9/0x56c0 [ 1613.441962][ T31] ? trace_irq_enable+0x3b/0x140 [ 1613.446989][ T31] ? __pfx___schedule+0x10/0x10 [ 1613.451847][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.456648][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.461447][ T31] ? lock_release+0x4b/0x3c0 [ 1613.466085][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.471140][ T31] schedule+0x164/0x360 [ 1613.475373][ T31] schedule_preempt_disabled+0x13/0x30 [ 1613.480861][ T31] __mutex_lock+0x7bf/0x1550 [ 1613.485475][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1613.490245][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1613.495404][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1613.500435][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1613.505585][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.510349][ T31] ? lock_release+0x4b/0x3c0 [ 1613.514983][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1613.519660][ T31] ? security_capable+0x7e/0x2c0 [ 1613.524588][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 1613.529596][ T31] ? trace_irq_disable+0x3b/0x140 [ 1613.534630][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1613.539792][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1613.545417][ T31] ? ref_tracker_free+0x689/0x830 [ 1613.550456][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1613.555873][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1613.560641][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1613.566156][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1613.571447][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1613.577044][ T31] netlink_unicast+0x7bb/0x940 [ 1613.581853][ T31] netlink_sendmsg+0x813/0xb40 [ 1613.586727][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.592045][ T31] ? futex_unqueue+0x22/0x240 [ 1613.596767][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1613.603186][ T31] ? lock_release+0x4b/0x3c0 [ 1613.607809][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.613133][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1613.618234][ T31] ____sys_sendmsg+0x54e/0x850 [ 1613.623008][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1613.629167][ T31] ? lock_release+0x4b/0x3c0 [ 1613.633757][ T31] ? import_iovec+0x73/0xa0 [ 1613.638287][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1613.642974][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1613.648242][ T31] ? futex_wait+0x2a2/0x390 [ 1613.652851][ T31] ? __fget_files+0x2a/0x420 [ 1613.657493][ T31] ? __fget_files+0x3a2/0x420 [ 1613.662214][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1613.667199][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1613.672751][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.677921][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.684037][ T31] do_syscall_64+0x174/0x580 [ 1613.688668][ T31] ? trace_irq_disable+0x3b/0x140 [ 1613.693707][ T31] ? clear_bhb_loop+0x40/0x90 [ 1613.698440][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.704341][ T31] RIP: 0033:0x7fede0d9ce59 [ 1613.708901][ T31] RSP: 002b:00007feddefb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1613.717386][ T31] RAX: ffffffffffffffda RBX: 00007fede1016180 RCX: 00007fede0d9ce59 [ 1613.725396][ T31] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000b [ 1613.733391][ T31] RBP: 00007fede0e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1613.741431][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.749447][ T31] R13: 00007fede1016218 R14: 00007fede1016180 R15: 00007fede113fa48 [ 1613.757463][ T31] [ 1613.760493][ T31] INFO: task syz.9.8917:25545 blocked for more than 145 seconds. [ 1613.768690][ T31] Tainted: G L syzkaller #0 [ 1613.775233][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1613.784296][ T31] task:syz.9.8917 state:D stack:27320 pid:25545 tgid:25534 ppid:3691 task_flags:0x400140 flags:0x00080002 [ 1613.797707][ T31] Call Trace: [ 1613.801019][ T31] [ 1613.803937][ T31] __schedule+0x17d9/0x56c0 [ 1613.808505][ T31] ? trace_irq_enable+0x3b/0x140 [ 1613.813481][ T31] ? __pfx___schedule+0x10/0x10 [ 1613.818427][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.823223][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.828086][ T31] ? lock_release+0x4b/0x3c0 [ 1613.832742][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.837583][ T31] schedule+0x164/0x360 [ 1613.841801][ T31] schedule_preempt_disabled+0x13/0x30 [ 1613.847302][ T31] __mutex_lock+0x7bf/0x1550 [ 1613.851899][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1613.856737][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1613.861878][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1613.867062][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1613.872343][ T31] ? rcu_is_watching+0x15/0xb0 [ 1613.877212][ T31] ? lock_release+0x4b/0x3c0 [ 1613.882122][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1613.886885][ T31] ? security_capable+0x7e/0x2c0 [ 1613.891848][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 1613.896903][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1613.902051][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1613.907671][ T31] ? ref_tracker_free+0x689/0x830 [ 1613.912752][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1613.918219][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1613.923177][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1613.928704][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1613.934008][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1613.939294][ T31] netlink_unicast+0x7bb/0x940 [ 1613.944100][ T31] netlink_sendmsg+0x813/0xb40 [ 1613.949004][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.954327][ T31] ? futex_unqueue+0x22/0x240 [ 1613.959090][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1613.965646][ T31] ? lock_release+0x4b/0x3c0 [ 1613.970223][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.975582][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1613.980657][ T31] ____sys_sendmsg+0x54e/0x850 [ 1613.985864][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1613.991190][ T31] ? lock_release+0x4b/0x3c0 [ 1613.995858][ T31] ? import_iovec+0x73/0xa0 [ 1614.000385][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1614.005106][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1614.010305][ T31] ? futex_wait+0x2a2/0x390 [ 1614.014920][ T31] ? __fget_files+0x2a/0x420 [ 1614.019541][ T31] ? __fget_files+0x3a2/0x420 [ 1614.024247][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1614.029323][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1614.034903][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.039698][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.045820][ T31] do_syscall_64+0x174/0x580 [ 1614.050417][ T31] ? trace_irq_disable+0x3b/0x140 [ 1614.055524][ T31] ? clear_bhb_loop+0x40/0x90 [ 1614.060227][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.066235][ T31] RIP: 0033:0x7fede0d9ce59 [ 1614.070700][ T31] RSP: 002b:00007feddeb91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1614.079260][ T31] RAX: ffffffffffffffda RBX: 00007fede1016270 RCX: 00007fede0d9ce59 [ 1614.087622][ T31] RDX: 0000000000004094 RSI: 00002000000003c0 RDI: 000000000000000c [ 1614.095733][ T31] RBP: 00007fede0e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1614.103767][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.111921][ T31] R13: 00007fede1016308 R14: 00007fede1016270 R15: 00007fede113fa48 [ 1614.119990][ T31] [ 1614.123021][ T31] INFO: task syz.9.8917:25591 blocked for more than 145 seconds. [ 1614.130832][ T31] Tainted: G L syzkaller #0 [ 1614.137368][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1614.146185][ T31] task:syz.9.8917 state:D stack:27536 pid:25591 tgid:25534 ppid:3691 task_flags:0x400140 flags:0x00080002 [ 1614.158173][ T31] Call Trace: [ 1614.161458][ T31] [ 1614.164411][ T31] __schedule+0x17d9/0x56c0 [ 1614.169011][ T31] ? trace_irq_enable+0x3b/0x140 [ 1614.173959][ T31] ? __pfx___schedule+0x10/0x10 [ 1614.178897][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.183663][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.188851][ T31] ? lock_release+0x4b/0x3c0 [ 1614.193467][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.198271][ T31] schedule+0x164/0x360 [ 1614.202439][ T31] schedule_preempt_disabled+0x13/0x30 [ 1614.207952][ T31] __mutex_lock+0x7bf/0x1550 [ 1614.212607][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1614.217412][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1614.222537][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1614.227706][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1614.232874][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.237681][ T31] ? lock_release+0x4b/0x3c0 [ 1614.242273][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1614.247000][ T31] ? security_capable+0x7e/0x2c0 [ 1614.251968][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 1614.256953][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1614.262108][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1614.269693][ T31] ? ref_tracker_free+0x689/0x830 [ 1614.274904][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1614.280301][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1614.285132][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1614.290886][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1614.296234][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1614.301433][ T31] netlink_unicast+0x7bb/0x940 [ 1614.306292][ T31] netlink_sendmsg+0x813/0xb40 [ 1614.311089][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1614.316439][ T31] ? futex_unqueue+0x22/0x240 [ 1614.321118][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1614.327582][ T31] ? lock_release+0x4b/0x3c0 [ 1614.332374][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1614.337697][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1614.342747][ T31] ____sys_sendmsg+0x54e/0x850 [ 1614.347863][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1614.353188][ T31] ? lock_release+0x4b/0x3c0 [ 1614.357818][ T31] ? import_iovec+0x73/0xa0 [ 1614.362352][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1614.367066][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1614.372263][ T31] ? futex_wait+0x2a2/0x390 [ 1614.376821][ T31] ? __fget_files+0x2a/0x420 [ 1614.381471][ T31] ? __fget_files+0x3a2/0x420 [ 1614.386260][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1614.391537][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1614.397085][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.401871][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.407968][ T31] do_syscall_64+0x174/0x580 [ 1614.412585][ T31] ? trace_irq_disable+0x3b/0x140 [ 1614.417633][ T31] ? clear_bhb_loop+0x40/0x90 [ 1614.422318][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.428531][ T31] RIP: 0033:0x7fede0d9ce59 [ 1614.432985][ T31] RSP: 002b:00007fedde76e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1614.441440][ T31] RAX: ffffffffffffffda RBX: 00007fede1016360 RCX: 00007fede0d9ce59 [ 1614.449555][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 1614.457593][ T31] RBP: 00007fede0e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1614.465710][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.473717][ T31] R13: 00007fede10163f8 R14: 00007fede1016360 R15: 00007fede113fa48 [ 1614.481741][ T31] [ 1614.484800][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1614.494125][ T31] INFO: task syz.9.8917:25606 blocked for more than 146 seconds. [ 1614.502536][ T31] Tainted: G L syzkaller #0 [ 1614.509228][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1614.517964][ T31] task:syz.9.8917 state:D stack:27536 pid:25606 tgid:25534 ppid:3691 task_flags:0x400140 flags:0x00080002 [ 1614.529926][ T31] Call Trace: [ 1614.533204][ T31] [ 1614.536173][ T31] __schedule+0x17d9/0x56c0 [ 1614.540695][ T31] ? trace_irq_enable+0x3b/0x140 [ 1614.545749][ T31] ? __pfx___schedule+0x10/0x10 [ 1614.550632][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.555458][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.560223][ T31] ? lock_release+0x4b/0x3c0 [ 1614.564844][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.569612][ T31] schedule+0x164/0x360 [ 1614.573760][ T31] schedule_preempt_disabled+0x13/0x30 [ 1614.579272][ T31] __mutex_lock+0x7bf/0x1550 [ 1614.583869][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1614.588779][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1614.593930][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1614.599321][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1614.604452][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.609311][ T31] ? lock_release+0x4b/0x3c0 [ 1614.613941][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1614.618669][ T31] ? security_capable+0x7e/0x2c0 [ 1614.623725][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 1614.628871][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1614.634010][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1614.639535][ T31] ? ref_tracker_free+0x689/0x830 [ 1614.644599][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1614.650024][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1614.654923][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1614.660390][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1614.665778][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1614.671005][ T31] netlink_unicast+0x7bb/0x940 [ 1614.675814][ T31] netlink_sendmsg+0x813/0xb40 [ 1614.680612][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1614.685933][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1614.692359][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1614.697700][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1614.703040][ T31] ____sys_sendmsg+0x54e/0x850 [ 1614.707933][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1614.713520][ T31] ? lock_release+0x4b/0x3c0 [ 1614.718158][ T31] ? import_iovec+0x73/0xa0 [ 1614.722675][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1614.727402][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1614.732634][ T31] ? futex_wake+0x51b/0x5f0 [ 1614.737187][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.741967][ T31] ? __fget_files+0x2a/0x420 [ 1614.746682][ T31] ? __fget_files+0x3a2/0x420 [ 1614.751396][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1614.756371][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1614.761833][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.766647][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.772721][ T31] do_syscall_64+0x174/0x580 [ 1614.777363][ T31] ? trace_irq_disable+0x3b/0x140 [ 1614.782419][ T31] ? clear_bhb_loop+0x40/0x90 [ 1614.787202][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.793125][ T31] RIP: 0033:0x7fede0d9ce59 [ 1614.797596][ T31] RSP: 002b:00007fedde34b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1614.806312][ T31] RAX: ffffffffffffffda RBX: 00007fede1016450 RCX: 00007fede0d9ce59 [ 1614.814330][ T31] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000007 [ 1614.822351][ T31] RBP: 00007fede0e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1614.830497][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.838543][ T31] R13: 00007fede10164e8 R14: 00007fede1016450 R15: 00007fede113fa48 [ 1614.846647][ T31] [ 1614.850046][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1614.859125][ T31] INFO: task syz.8.8918:25563 blocked for more than 146 seconds. [ 1614.866966][ T31] Tainted: G L syzkaller #0 [ 1614.873491][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1614.882223][ T31] task:syz.8.8918 state:D stack:21512 pid:25563 tgid:25551 ppid:32168 task_flags:0x400140 flags:0x00080002 [ 1614.894199][ T31] Call Trace: [ 1614.897523][ T31] [ 1614.900458][ T31] __schedule+0x17d9/0x56c0 [ 1614.905628][ T31] ? __pfx___schedule+0x10/0x10 [ 1614.910522][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.915347][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.920259][ T31] ? lock_release+0x4b/0x3c0 [ 1614.924895][ T31] ? rcu_is_watching+0x15/0xb0 [ 1614.929684][ T31] schedule+0x164/0x360 [ 1614.933830][ T31] schedule_preempt_disabled+0x13/0x30 [ 1614.939332][ T31] __mutex_lock+0x7bf/0x1550 [ 1614.943929][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1614.948792][ T31] ? __ethtool_get_link_ksettings+0x109/0x250 [ 1614.955033][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1614.960063][ T31] ? igmp_group_added+0x238/0x910 [ 1614.965133][ T31] ? igmpv3_del_delrec+0x204/0x710 [ 1614.970254][ T31] __ethtool_get_link_ksettings+0x109/0x250 [ 1614.976213][ T31] bond_netdev_event+0x643/0xf80 [ 1614.981271][ T31] ? __pfx_bond_netdev_event+0x10/0x10 [ 1614.986908][ T31] ? __pfx_inetdev_event+0x10/0x10 [ 1614.992091][ T31] ? ipmr_device_event+0x1f6/0x220 [ 1614.997339][ T31] notifier_call_chain+0x1a5/0x3d0 [ 1615.002993][ T31] __dev_notify_flags+0x1aa/0x310 [ 1615.008417][ T31] ? __pfx___dev_notify_flags+0x10/0x10 [ 1615.014029][ T31] ? __dev_change_flags+0x5f1/0x820 [ 1615.019301][ T31] ? __pfx___dev_change_flags+0x10/0x10 [ 1615.024907][ T31] ? __kmalloc_cache_noprof+0x318/0x660 [ 1615.030534][ T31] netif_change_flags+0xde/0x1b0 [ 1615.035514][ T31] dev_change_flags+0x128/0x260 [ 1615.040380][ T31] vlan_device_event+0x1b4e/0x1f00 [ 1615.045541][ T31] ? packet_notifier+0xf1b/0xf70 [ 1615.050484][ T31] ? br_device_event+0x282/0x9c0 [ 1615.055440][ T31] ? __pfx_phonet_device_notify+0x10/0x10 [ 1615.061295][ T31] ? __pfx_vlan_device_event+0x10/0x10 [ 1615.066814][ T31] ? bcm_notifier+0xa9/0x890 [ 1615.071416][ T31] ? raw_notifier+0x9d/0x7d0 [ 1615.076038][ T31] ? cgw_notifier+0x314/0x380 [ 1615.080747][ T31] notifier_call_chain+0x1a5/0x3d0 [ 1615.085914][ T31] __dev_notify_flags+0x1aa/0x310 [ 1615.090959][ T31] ? __pfx___dev_notify_flags+0x10/0x10 [ 1615.096612][ T31] ? __dev_change_flags+0x64b/0x820 [ 1615.101851][ T31] ? __pfx___dev_change_flags+0x10/0x10 [ 1615.107451][ T31] ? do_setlink+0x3c9f/0x4670 [ 1615.112436][ T31] netif_change_flags+0xde/0x1b0 [ 1615.117485][ T31] do_setlink+0xdd6/0x4670 [ 1615.122169][ T31] ? trace_sched_exit_tp+0x3a/0x130 [ 1615.127413][ T31] ? __schedule+0x17ef/0x56c0 [ 1615.132118][ T31] ? __pfx_do_setlink+0x10/0x10 [ 1615.136995][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1615.142026][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.146896][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.151674][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.156487][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.161284][ T31] ? trace_irq_enable+0x3b/0x140 [ 1615.166282][ T31] ? __mutex_lock+0x1092/0x1550 [ 1615.171145][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1615.175960][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 1615.180764][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1615.185831][ T31] ? ns_capable+0x89/0xe0 [ 1615.190258][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 1615.196045][ T31] rtnl_newlink+0x148e/0x1bd0 [ 1615.200747][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1615.205840][ T31] ? do_syscall_64+0x174/0x580 [ 1615.210997][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.217149][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.222096][ T31] ? trace_irq_enable+0x3b/0x140 [ 1615.227320][ T31] ? nlmon_xmit+0xb0/0x100 [ 1615.231896][ T31] ? kmem_cache_free+0x182/0x650 [ 1615.236887][ T31] ? dev_hard_start_xmit+0x7c7/0x830 [ 1615.242204][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1615.247366][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1615.252481][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.257299][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1615.262445][ T31] ? trace_irq_enable+0x3b/0x140 [ 1615.267423][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1615.272541][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1615.277701][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 1615.283027][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1615.288187][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1615.293311][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.298153][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1615.303196][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.309432][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1615.314835][ T31] ? lock_release+0x4b/0x3c0 [ 1615.319461][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1615.324132][ T31] ? security_capable+0x7e/0x2c0 [ 1615.329182][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1615.334224][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1615.339234][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1615.344358][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1615.349867][ T31] ? ref_tracker_free+0x689/0x830 [ 1615.354942][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1615.360341][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1615.365421][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1615.370907][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1615.376235][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1615.381460][ T31] netlink_unicast+0x7bb/0x940 [ 1615.386368][ T31] netlink_sendmsg+0x813/0xb40 [ 1615.391174][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1615.396522][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1615.402957][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1615.408282][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1615.413344][ T31] ____sys_sendmsg+0x54e/0x850 [ 1615.418518][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1615.423821][ T31] ? lock_release+0x4b/0x3c0 [ 1615.428455][ T31] ? import_iovec+0x73/0xa0 [ 1615.432992][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1615.437732][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1615.442963][ T31] ? futex_wake+0x51b/0x5f0 [ 1615.447545][ T31] ? __fget_files+0x2a/0x420 [ 1615.452148][ T31] ? __fget_files+0x3a2/0x420 [ 1615.456877][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1615.461857][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1615.467375][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.472153][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.478294][ T31] do_syscall_64+0x174/0x580 [ 1615.482974][ T31] ? trace_irq_disable+0x3b/0x140 [ 1615.488055][ T31] ? clear_bhb_loop+0x40/0x90 [ 1615.492750][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.498730][ T31] RIP: 0033:0x7f4b8739ce59 [ 1615.503153][ T31] RSP: 002b:00007f4b88178028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1615.511641][ T31] RAX: ffffffffffffffda RBX: 00007f4b87616090 RCX: 00007f4b8739ce59 [ 1615.520016][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 1615.528081][ T31] RBP: 00007f4b87432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1615.536119][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1615.544085][ T31] R13: 00007f4b87616128 R14: 00007f4b87616090 R15: 00007f4b8773fa48 [ 1615.552207][ T31] [ 1615.555359][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1615.564393][ T31] INFO: task syz.8.8918:25571 blocked for more than 147 seconds. [ 1615.572254][ T31] Tainted: G L syzkaller #0 [ 1615.578801][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1615.587524][ T31] task:syz.8.8918 state:D stack:27128 pid:25571 tgid:25551 ppid:32168 task_flags:0x400140 flags:0x00080002 [ 1615.599546][ T31] Call Trace: [ 1615.602844][ T31] [ 1615.605851][ T31] __schedule+0x17d9/0x56c0 [ 1615.610375][ T31] ? __pfx___schedule+0x10/0x10 [ 1615.615477][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.620564][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.625520][ T31] ? lock_release+0x4b/0x3c0 [ 1615.630166][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.635071][ T31] schedule+0x164/0x360 [ 1615.639262][ T31] schedule_preempt_disabled+0x13/0x30 [ 1615.644760][ T31] __mutex_lock+0x7bf/0x1550 [ 1615.649384][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1615.654147][ T31] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1615.659235][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1615.664297][ T31] ? lock_release+0x4b/0x3c0 [ 1615.668948][ T31] ? __might_fault+0xaf/0x130 [ 1615.673651][ T31] ? __might_fault+0xcb/0x130 [ 1615.678374][ T31] __tun_chr_ioctl+0x3bc/0x1e10 [ 1615.683262][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1615.688620][ T31] ? __fget_files+0x2a/0x420 [ 1615.693568][ T31] ? __fget_files+0x3a2/0x420 [ 1615.698319][ T31] ? __fget_files+0x2a/0x420 [ 1615.702926][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1615.708195][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1615.713344][ T31] __se_sys_ioctl+0xfc/0x170 [ 1615.717979][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.724345][ T31] do_syscall_64+0x174/0x580 [ 1615.729042][ T31] ? trace_irq_disable+0x3b/0x140 [ 1615.734079][ T31] ? clear_bhb_loop+0x40/0x90 [ 1615.738817][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.744793][ T31] RIP: 0033:0x7f4b8739ce59 [ 1615.749232][ T31] RSP: 002b:00007f4b855f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1615.757686][ T31] RAX: ffffffffffffffda RBX: 00007f4b87616180 RCX: 00007f4b8739ce59 [ 1615.765720][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 1615.773696][ T31] RBP: 00007f4b87432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1615.781820][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1615.790066][ T31] R13: 00007f4b87616218 R14: 00007f4b87616180 R15: 00007f4b8773fa48 [ 1615.798160][ T31] [ 1615.801186][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1615.810261][ T31] INFO: task syz.8.8918:25581 blocked for more than 147 seconds. [ 1615.818018][ T31] Tainted: G L syzkaller #0 [ 1615.824850][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1615.833638][ T31] task:syz.8.8918 state:D stack:26776 pid:25581 tgid:25551 ppid:32168 task_flags:0x400140 flags:0x00080002 [ 1615.845624][ T31] Call Trace: [ 1615.848903][ T31] [ 1615.851843][ T31] __schedule+0x17d9/0x56c0 [ 1615.856391][ T31] ? __pfx___schedule+0x10/0x10 [ 1615.861265][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.866094][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.870879][ T31] ? lock_release+0x4b/0x3c0 [ 1615.875549][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.880350][ T31] schedule+0x164/0x360 [ 1615.884498][ T31] schedule_preempt_disabled+0x13/0x30 [ 1615.889980][ T31] __mutex_lock+0x7bf/0x1550 [ 1615.894590][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1615.899427][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1615.904559][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1615.909655][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1615.914816][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.919601][ T31] ? lock_release+0x4b/0x3c0 [ 1615.924367][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1615.929506][ T31] ? security_capable+0x7e/0x2c0 [ 1615.934497][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 1615.939469][ T31] ? kasan_save_track+0x3e/0x80 [ 1615.944331][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1615.949618][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1615.955281][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 1615.960267][ T31] ? rcu_is_watching+0x15/0xb0 [ 1615.965101][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1615.969876][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1615.975379][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1615.980696][ T31] ? net_generic+0x1e/0x240 [ 1615.985261][ T31] ? net_generic+0x1e/0x240 [ 1615.989777][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1615.995029][ T31] netlink_unicast+0x7bb/0x940 [ 1615.999829][ T31] netlink_sendmsg+0x813/0xb40 [ 1616.004621][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.009945][ T31] ? futex_unqueue+0x22/0x240 [ 1616.014686][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1616.021170][ T31] ? lock_release+0x4b/0x3c0 [ 1616.025901][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.031545][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1616.036657][ T31] ____sys_sendmsg+0x54e/0x850 [ 1616.041429][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1616.046804][ T31] ? lock_release+0x4b/0x3c0 [ 1616.051413][ T31] ? import_iovec+0x73/0xa0 [ 1616.055958][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1616.060653][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1616.065943][ T31] ? futex_wait+0x2a2/0x390 [ 1616.070460][ T31] ? __fget_files+0x2a/0x420 [ 1616.075122][ T31] ? __fget_files+0x3a2/0x420 [ 1616.079834][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1616.084810][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1616.090274][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.095069][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.101163][ T31] do_syscall_64+0x174/0x580 [ 1616.105866][ T31] ? clear_bhb_loop+0x40/0x90 [ 1616.110556][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.116601][ T31] RIP: 0033:0x7f4b8739ce59 [ 1616.121028][ T31] RSP: 002b:00007f4b851d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1616.129506][ T31] RAX: ffffffffffffffda RBX: 00007f4b87616270 RCX: 00007f4b8739ce59 [ 1616.137815][ T31] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000009 [ 1616.145888][ T31] RBP: 00007f4b87432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1616.153887][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.161942][ T31] R13: 00007f4b87616308 R14: 00007f4b87616270 R15: 00007f4b8773fa48 [ 1616.169998][ T31] [ 1616.173007][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1616.182106][ T31] INFO: task syz.0.8922:25584 blocked for more than 147 seconds. [ 1616.189962][ T31] Tainted: G L syzkaller #0 [ 1616.196506][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1616.205199][ T31] task:syz.0.8922 state:D stack:28792 pid:25584 tgid:25583 ppid:24062 task_flags:0x400040 flags:0x00080002 [ 1616.217175][ T31] Call Trace: [ 1616.220454][ T31] [ 1616.223406][ T31] __schedule+0x17d9/0x56c0 [ 1616.227986][ T31] ? __pfx___schedule+0x10/0x10 [ 1616.232888][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.238104][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.242889][ T31] ? lock_release+0x4b/0x3c0 [ 1616.247583][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.252358][ T31] schedule+0x164/0x360 [ 1616.256556][ T31] schedule_preempt_disabled+0x13/0x30 [ 1616.262049][ T31] __mutex_lock+0x7bf/0x1550 [ 1616.266840][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1616.271694][ T31] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1616.276899][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1616.281979][ T31] ? lock_release+0x4b/0x3c0 [ 1616.286630][ T31] ? __might_fault+0xaf/0x130 [ 1616.291311][ T31] ? __might_fault+0xcb/0x130 [ 1616.296039][ T31] __tun_chr_ioctl+0x3bc/0x1e10 [ 1616.300898][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1616.306210][ T31] ? __fget_files+0x2a/0x420 [ 1616.310895][ T31] ? __fget_files+0x3a2/0x420 [ 1616.315625][ T31] ? __fget_files+0x2a/0x420 [ 1616.320223][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1616.325194][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1616.330329][ T31] __se_sys_ioctl+0xfc/0x170 [ 1616.334943][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.341344][ T31] do_syscall_64+0x174/0x580 [ 1616.348044][ T31] ? trace_irq_disable+0x3b/0x140 [ 1616.353083][ T31] ? clear_bhb_loop+0x40/0x90 [ 1616.357805][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.363723][ T31] RIP: 0033:0x7f9289b9ce59 [ 1616.368180][ T31] RSP: 002b:00007f928a9bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1616.376630][ T31] RAX: ffffffffffffffda RBX: 00007f9289e15fa0 RCX: 00007f9289b9ce59 [ 1616.384622][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 1616.392637][ T31] RBP: 00007f9289c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1616.400680][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.408710][ T31] R13: 00007f9289e16038 R14: 00007f9289e15fa0 R15: 00007f9289f3fa48 [ 1616.416724][ T31] [ 1616.419733][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1616.429072][ T31] INFO: task syz.0.8922:25588 blocked for more than 148 seconds. [ 1616.436870][ T31] Tainted: G L syzkaller #0 [ 1616.443674][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1616.452493][ T31] task:syz.0.8922 state:D stack:26960 pid:25588 tgid:25583 ppid:24062 task_flags:0x400140 flags:0x00080002 [ 1616.464494][ T31] Call Trace: [ 1616.467844][ T31] [ 1616.470784][ T31] __schedule+0x17d9/0x56c0 [ 1616.475358][ T31] ? trace_irq_enable+0x3b/0x140 [ 1616.480343][ T31] ? __pfx___schedule+0x10/0x10 [ 1616.485260][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.490030][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.494834][ T31] ? lock_release+0x4b/0x3c0 [ 1616.499450][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.504204][ T31] schedule+0x164/0x360 [ 1616.508618][ T31] schedule_preempt_disabled+0x13/0x30 [ 1616.514120][ T31] __mutex_lock+0x7bf/0x1550 [ 1616.518783][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1616.523558][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1616.528767][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1616.533802][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1616.538961][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.544047][ T31] ? lock_release+0x4b/0x3c0 [ 1616.548701][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1616.553466][ T31] ? security_capable+0x7e/0x2c0 [ 1616.558446][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 1616.563419][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1616.568572][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1616.574063][ T31] ? ref_tracker_free+0x689/0x830 [ 1616.579148][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1616.584755][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1616.589531][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1616.595046][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1616.600395][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1616.605727][ T31] netlink_unicast+0x7bb/0x940 [ 1616.610502][ T31] netlink_sendmsg+0x813/0xb40 [ 1616.615317][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.620603][ T31] ? futex_unqueue+0x22/0x240 [ 1616.625338][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1616.631787][ T31] ? lock_release+0x4b/0x3c0 [ 1616.636439][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.641730][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1616.647174][ T31] ____sys_sendmsg+0x54e/0x850 [ 1616.651957][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1616.657282][ T31] ? lock_release+0x4b/0x3c0 [ 1616.661910][ T31] ? import_iovec+0x73/0xa0 [ 1616.666496][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1616.671198][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1616.676466][ T31] ? futex_wait+0x2a2/0x390 [ 1616.681007][ T31] ? __fget_files+0x2a/0x420 [ 1616.685647][ T31] ? __fget_files+0x3a2/0x420 [ 1616.690337][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1616.695311][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1616.700783][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.705616][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.711705][ T31] do_syscall_64+0x174/0x580 [ 1616.716395][ T31] ? trace_irq_disable+0x3b/0x140 [ 1616.721463][ T31] ? clear_bhb_loop+0x40/0x90 [ 1616.726173][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.732098][ T31] RIP: 0033:0x7f9289b9ce59 [ 1616.736580][ T31] RSP: 002b:00007f928a99a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1616.745681][ T31] RAX: ffffffffffffffda RBX: 00007f9289e16090 RCX: 00007f9289b9ce59 [ 1616.753968][ T31] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1616.762061][ T31] RBP: 00007f9289c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1616.770097][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.778133][ T31] R13: 00007f9289e16128 R14: 00007f9289e16090 R15: 00007f9289f3fa48 [ 1616.786177][ T31] [ 1616.789195][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1616.798309][ T31] INFO: task syz.3.8924:25604 blocked for more than 148 seconds. [ 1616.806075][ T31] Tainted: G L syzkaller #0 [ 1616.812581][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1616.821293][ T31] task:syz.3.8924 state:D stack:26936 pid:25604 tgid:25603 ppid:23368 task_flags:0x400140 flags:0x00080002 [ 1616.833403][ T31] Call Trace: [ 1616.836744][ T31] [ 1616.839684][ T31] __schedule+0x17d9/0x56c0 [ 1616.844189][ T31] ? __pfx___schedule+0x10/0x10 [ 1616.849487][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.854300][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.859103][ T31] ? lock_release+0x4b/0x3c0 [ 1616.863722][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.868526][ T31] schedule+0x164/0x360 [ 1616.872698][ T31] schedule_preempt_disabled+0x13/0x30 [ 1616.878204][ T31] __mutex_lock+0x7bf/0x1550 [ 1616.882822][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1616.887907][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 1616.892691][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1616.897793][ T31] ? ns_capable+0x89/0xe0 [ 1616.902131][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 1616.907954][ T31] rtnl_newlink+0x8a3/0x1bd0 [ 1616.912593][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1616.917657][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1616.922942][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.927747][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1616.932974][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.937773][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1616.942891][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.947712][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1616.953275][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.958128][ T31] ? rcu_is_watching+0x15/0xb0 [ 1616.962918][ T31] ? lock_release+0x4b/0x3c0 [ 1616.967556][ T31] ? lock_release+0x4b/0x3c0 [ 1616.972147][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 1616.977474][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1616.982695][ T31] ? kernel_text_address+0xa5/0xe0 [ 1616.987916][ T31] ? __kernel_text_address+0xd/0x30 [ 1616.993382][ T31] ? unwind_get_return_address+0x4d/0x90 [ 1616.999111][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1617.005317][ T31] ? arch_stack_walk+0xfb/0x150 [ 1617.010192][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1617.015249][ T31] ? lock_release+0x4b/0x3c0 [ 1617.019842][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1617.024507][ T31] ? security_capable+0x7e/0x2c0 [ 1617.029493][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1617.034525][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1617.039495][ T31] ? kasan_save_track+0x3e/0x80 [ 1617.044363][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1617.049534][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1617.055444][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 1617.060400][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.065298][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1617.070097][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1617.075604][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1617.080935][ T31] ? net_generic+0x1e/0x240 [ 1617.085486][ T31] ? net_generic+0x1e/0x240 [ 1617.089998][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1617.095234][ T31] netlink_unicast+0x7bb/0x940 [ 1617.100015][ T31] netlink_sendmsg+0x813/0xb40 [ 1617.104811][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.110100][ T31] ? futex_unqueue+0x22/0x240 [ 1617.114836][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1617.121255][ T31] ? lock_release+0x4b/0x3c0 [ 1617.125890][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.131202][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1617.136278][ T31] ____sys_sendmsg+0x54e/0x850 [ 1617.141044][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1617.146370][ T31] ? lock_release+0x4b/0x3c0 [ 1617.150960][ T31] ? import_iovec+0x73/0xa0 [ 1617.155499][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1617.160560][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1617.165839][ T31] ? futex_wait+0x2a2/0x390 [ 1617.170370][ T31] ? __fget_files+0x2a/0x420 [ 1617.175020][ T31] ? __fget_files+0x3a2/0x420 [ 1617.179739][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1617.184676][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1617.190230][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.195047][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.201101][ T31] do_syscall_64+0x174/0x580 [ 1617.205754][ T31] ? trace_irq_disable+0x3b/0x140 [ 1617.210791][ T31] ? clear_bhb_loop+0x40/0x90 [ 1617.215515][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.221418][ T31] RIP: 0033:0x7f4d78d9ce59 [ 1617.225931][ T31] RSP: 002b:00007f4d76ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1617.234387][ T31] RAX: ffffffffffffffda RBX: 00007f4d79015fa0 RCX: 00007f4d78d9ce59 [ 1617.242503][ T31] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1617.250532][ T31] RBP: 00007f4d78e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1617.258902][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.266943][ T31] R13: 00007f4d79016038 R14: 00007f4d79015fa0 R15: 00007f4d7913fa48 [ 1617.274957][ T31] [ 1617.277968][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1617.287074][ T31] INFO: task syz.6.8930:25636 blocked for more than 148 seconds. [ 1617.294837][ T31] Tainted: G L syzkaller #0 [ 1617.301470][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1617.310616][ T31] task:syz.6.8930 state:D stack:26936 pid:25636 tgid:25635 ppid:25479 task_flags:0x400140 flags:0x00080002 [ 1617.322644][ T31] Call Trace: [ 1617.325972][ T31] [ 1617.328945][ T31] __schedule+0x17d9/0x56c0 [ 1617.333482][ T31] ? __pfx___schedule+0x10/0x10 [ 1617.338368][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.343145][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.347971][ T31] ? lock_release+0x4b/0x3c0 [ 1617.352602][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.357402][ T31] schedule+0x164/0x360 [ 1617.361873][ T31] schedule_preempt_disabled+0x13/0x30 [ 1617.367418][ T31] __mutex_lock+0x7bf/0x1550 [ 1617.372022][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1617.376838][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 1617.381633][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1617.388020][ T31] ? ns_capable+0x89/0xe0 [ 1617.392383][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 1617.398172][ T31] rtnl_newlink+0x8a3/0x1bd0 [ 1617.402776][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1617.407883][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1617.413067][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.417876][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1617.423091][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.427902][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1617.433042][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.437862][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1617.443074][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.447889][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.452655][ T31] ? lock_release+0x4b/0x3c0 [ 1617.457272][ T31] ? lock_release+0x4b/0x3c0 [ 1617.461891][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 1617.467643][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1617.472883][ T31] ? kernel_text_address+0xa5/0xe0 [ 1617.478023][ T31] ? __kernel_text_address+0xd/0x30 [ 1617.483258][ T31] ? unwind_get_return_address+0x4d/0x90 [ 1617.488973][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1617.495175][ T31] ? arch_stack_walk+0xfb/0x150 [ 1617.500018][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1617.505172][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.509946][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1617.515009][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.519785][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1617.524855][ T31] ? lock_release+0x4b/0x3c0 [ 1617.529479][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1617.534174][ T31] ? security_capable+0x7e/0x2c0 [ 1617.539166][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1617.544210][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1617.574766][ T31] ? kasan_save_track+0x3e/0x80 [ 1617.584768][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1617.594757][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1617.604764][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 1617.614755][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.624811][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1617.630816][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1617.636314][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1617.641615][ T31] ? net_generic+0x1e/0x240 [ 1617.646174][ T31] ? net_generic+0x1e/0x240 [ 1617.650687][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1617.656008][ T31] netlink_unicast+0x7bb/0x940 [ 1617.660818][ T31] netlink_sendmsg+0x813/0xb40 [ 1617.665660][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.671247][ T31] ? futex_unqueue+0x22/0x240 [ 1617.675983][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1617.682425][ T31] ? lock_release+0x4b/0x3c0 [ 1617.687059][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.692346][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1617.697414][ T31] ____sys_sendmsg+0x54e/0x850 [ 1617.702186][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1617.707548][ T31] ? lock_release+0x4b/0x3c0 [ 1617.712169][ T31] ? import_iovec+0x73/0xa0 [ 1617.716720][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1617.721406][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1617.726642][ T31] ? futex_wait+0x2a2/0x390 [ 1617.731184][ T31] ? __fget_files+0x2a/0x420 [ 1617.735811][ T31] ? __fget_files+0x3a2/0x420 [ 1617.740504][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1617.745485][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1617.750958][ T31] ? rcu_is_watching+0x15/0xb0 [ 1617.755759][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.761851][ T31] do_syscall_64+0x174/0x580 [ 1617.766509][ T31] ? trace_irq_disable+0x3b/0x140 [ 1617.771830][ T31] ? clear_bhb_loop+0x40/0x90 [ 1617.776581][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.782511][ T31] RIP: 0033:0x7f457999ce59 [ 1617.787484][ T31] RSP: 002b:00007f457a894028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1617.796014][ T31] RAX: ffffffffffffffda RBX: 00007f4579c15fa0 RCX: 00007f457999ce59 [ 1617.804003][ T31] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000004 [ 1617.812059][ T31] RBP: 00007f4579a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1617.820361][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.828422][ T31] R13: 00007f4579c16038 R14: 00007f4579c15fa0 R15: 00007f4579d3fa48 [ 1617.836439][ T31] [ 1617.839453][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1617.848578][ T31] INFO: lockdep is turned off. [ 1617.853340][ T31] NMI backtrace for cpu 0 [ 1617.853361][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.853376][ T31] Tainted: [L]=SOFTLOCKUP [ 1617.853379][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1617.853386][ T31] Call Trace: [ 1617.853392][ T31] [ 1617.853397][ T31] dump_stack_lvl+0xe8/0x150 [ 1617.853414][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1617.853491][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1617.853502][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1617.853514][ T31] sys_info+0x135/0x170 [ 1617.853524][ T31] watchdog+0xfd7/0x1030 [ 1617.853539][ T31] ? watchdog+0x1c7/0x1030 [ 1617.853553][ T31] kthread+0x388/0x470 [ 1617.853563][ T31] ? __pfx_watchdog+0x10/0x10 [ 1617.853575][ T31] ? __pfx_kthread+0x10/0x10 [ 1617.853584][ T31] ret_from_fork+0x514/0xb70 [ 1617.853594][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1617.853604][ T31] ? __switch_to+0xc89/0x1420 [ 1617.853618][ T31] ? __pfx_kthread+0x10/0x10 [ 1617.853627][ T31] ret_from_fork_asm+0x1a/0x30 [ 1617.853641][ T31] [ 1617.853645][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1617.970029][ C1] NMI backtrace for cpu 1 [ 1617.970052][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.970075][ C1] Tainted: [L]=SOFTLOCKUP [ 1617.970082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1617.970092][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1617.970119][ C1] Code: 6c 7a 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 d8 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1617.970134][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 1617.970150][ C1] RAX: ffff888125351000 RBX: ffffffff819a72e0 RCX: 0000000080000001 [ 1617.970163][ C1] RDX: 0000000000000001 RSI: ffffffff8c2a8d60 RDI: ffffffff819a72e0 [ 1617.970175][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 1617.970187][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 1617.970198][ C1] R13: 1ffff11003b5f000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 1617.970211][ C1] FS: 0000000000000000(0000) GS:ffff888125351000(0000) knlGS:0000000000000000 [ 1617.970225][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1617.970237][ C1] CR2: 00005599c3c69ee8 CR3: 000000000e746000 CR4: 00000000003526f0 [ 1617.970252][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1617.970263][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1617.970275][ C1] Call Trace: [ 1617.970284][ C1] [ 1617.970291][ C1] default_idle+0x9/0x20 [ 1617.970313][ C1] default_idle_call+0x72/0xb0 [ 1617.970329][ C1] do_idle+0x2e0/0x540 [ 1617.970353][ C1] ? __pfx_do_idle+0x10/0x10 [ 1617.970378][ C1] cpu_startup_entry+0x43/0x60 [ 1617.970392][ C1] start_secondary+0x101/0x110 [ 1617.970407][ C1] common_startup_64+0x13e/0x157 [ 1617.970433][ C1] [ 1618.153536][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1618.160398][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1618.171060][ T31] Tainted: [L]=SOFTLOCKUP [ 1618.175374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1618.185429][ T31] Call Trace: [ 1618.188700][ T31] [ 1618.191619][ T31] vpanic+0x56c/0xa60 [ 1618.195597][ T31] ? __pfx___schedule+0x10/0x10 [ 1618.200446][ T31] ? __pfx_vpanic+0x10/0x10 [ 1618.204951][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1618.211128][ T31] panic+0xc5/0xd0 [ 1618.214849][ T31] ? __pfx_panic+0x10/0x10 [ 1618.219273][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1618.224727][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1618.230103][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1618.236254][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1618.242400][ T31] watchdog+0x1030/0x1030 [ 1618.246757][ T31] ? watchdog+0x1c7/0x1030 [ 1618.251171][ T31] kthread+0x388/0x470 [ 1618.255237][ T31] ? __pfx_watchdog+0x10/0x10 [ 1618.259911][ T31] ? __pfx_kthread+0x10/0x10 [ 1618.264494][ T31] ret_from_fork+0x514/0xb70 [ 1618.269075][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1618.274263][ T31] ? __switch_to+0xc89/0x1420 [ 1618.278942][ T31] ? __pfx_kthread+0x10/0x10 [ 1618.283527][ T31] ret_from_fork_asm+0x1a/0x30 [ 1618.288296][ T31] [ 1618.291590][ T31] Kernel Offset: disabled [ 1618.295907][ T31] Rebooting in 86400 seconds..