last executing test programs: 27m32.269980683s ago: executing program 1 (id=1852): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5423, &(0x7f0000007000)) getsockopt(r0, 0x28, 0x1, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) unshare(0x22020600) socket$rds(0x15, 0x5, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200e02000000f426db5b423dc72869d57c4f61d38edbace0c86f2a0f7f4d37cf00"/45], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000e00)={0x18, &(0x7f0000000cc0)={0x40, 0xa, 0x2, "6597"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000580)={0x20, 0x7e0e36d0927102ef, 0x1, '_'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40, 0x2}}}]}, 0x24}}, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) writev(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)="dccb07ef399fa77311413e3cc9adf84d8610a42dae9b113a24288a1a7f834417b381ced900f61b5f7a9cd30a51dc432a6e27e25be626f6c476ba1378fbed11fd28d3409cebcf4ff5cabb", 0x4a}, {&(0x7f0000000040)="f583", 0x2}, {&(0x7f0000000180)="edd9041e7dd2ad65c24790ccddba4a8069e9", 0x12}, {&(0x7f0000000540)="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", 0xfa0}, {&(0x7f00000001c0)="c680", 0x2}], 0x5) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 27m24.912708836s ago: executing program 1 (id=1882): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x70bd26, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xe7ecab7b149847a4}, 0x20000000) 27m24.729489819s ago: executing program 1 (id=1885): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x100b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x2) listen(r7, 0x7f) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) read(r9, &(0x7f0000000340)=""/209, 0xd1) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) 27m21.275928465s ago: executing program 1 (id=1894): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000100)={0x2, "bb59e5a4a94522d3d3f206fed1bf7761d839ac1f26c31347f597973e01faad5d", 0x3, 0x7, 0x8008, 0xc000c, 0x8}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') writev(r5, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)="cd21d5", 0x3}], 0x2) (async) writev(r5, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)="cd21d5", 0x3}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 27m20.38395478s ago: executing program 1 (id=1898): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) (async) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 27m19.676742979s ago: executing program 1 (id=1902): syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x4e21, 0xc, 0x0, @opaque="75d0148a"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x0, 'wg1\x00', {0x4}, 0xa}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000240)={0xff, @broadcast, 0x4e22, 0x3, 'ovf\x00', 0x8, 0x8, 0x64}, 0x2c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r4, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x620b}, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x6}, {0x0, 0x1}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x29}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}]}}]}, 0x50}}, 0x801) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/121, 0x79}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) 27m19.365362924s ago: executing program 32 (id=1902): syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x4e21, 0xc, 0x0, @opaque="75d0148a"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x0, 'wg1\x00', {0x4}, 0xa}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000240)={0xff, @broadcast, 0x4e22, 0x3, 'ovf\x00', 0x8, 0x8, 0x64}, 0x2c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r4, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x620b}, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x6}, {0x0, 0x1}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x29}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}]}}]}, 0x50}}, 0x801) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/121, 0x79}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) 27m17.799708736s ago: executing program 3 (id=1914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500238e2aa08732b17000ea20102030109022d0002db0480e60904000400ff9e4d0509040002", @ANYRESHEX=0x0], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 27m15.668598795s ago: executing program 3 (id=1920): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x3e4, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffffff, 0x1fffffeff, 0xffffff00], [0x0, 0xff, 0xffffff00, 0xff], 'wlan1\x00', 'vcan0\x00', {0xff}, {0xff}, 0x8, 0x9, 0x1}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@frag={{}, {[0xfff, 0x7], 0x80, 0x28}}, @inet=@rpfilter={{}, {0x4}}]}, @common=@unspec=@IDLETIMER={0x0, 'IDLETIMER\x00', 0x0, {0x4, 'syz1\x00', {0xfffffffa}}}}, {{@uncond, 0x0, 0x15c, 0x1c8, 0x0, {}, [@common=@srh={{0x2c}, {0x2f, 0x2, 0xfa, 0x4, 0xfffe, 0x0, 0x2000}}, @inet=@rpfilter={{}, {0x1}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xc, 0x9, 0x100, 0x1, 0x0, "7a264c3fbd0dfc9e010000004448cb1a40232606daff84a2332f02cf434a447311ad2f0300a100000042a111586b1cff253529a4e60f644becfdc5d63b77b67b"}}}], {{'\x00', 0x0, 0xff0e, 0xc8}, {0x24}}}}, 0x479) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x10, 0x80002, 0x2) bind$netlink(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r5, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x3, 0x11, 0x2}}]}, 0x4c}}, 0x0) shutdown(r2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 27m15.490733916s ago: executing program 3 (id=1922): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x40800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f0000001d00)=[{{&(0x7f00000002c0)=@ax25={{0x3, @null}, [@null, @bcast, @rose, @netrom, @rose, @remote, @default, @default]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/104, 0x68}], 0x3, &(0x7f0000000500)=""/171, 0xab}, 0x6}, {{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/255, 0xff}], 0x1, &(0x7f0000000780)=""/155, 0x9b}, 0x3ec0}, {{&(0x7f0000000840)=@ax25={{0x3, @bcast}, [@rose, @null, @netrom, @bcast, @netrom, @remote, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/134, 0x86}], 0x1, &(0x7f00000009c0)=""/18, 0x12}, 0x9}, {{&(0x7f0000000a00)=@caif=@util, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a80)=""/14, 0xe}], 0x1, &(0x7f0000000b00)=""/67, 0x43}, 0x4}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b80)=""/123, 0x7b}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2, &(0x7f0000001c40)=""/142, 0x8e}, 0xe6}], 0x5, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) (async) select(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async, rerun: 32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xd) (rerun: 32) r2 = request_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='/dev/input/event#\x00', 0xffffffffffffffff) keyctl$revoke(0x3, r2) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x40281) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) (async, rerun: 64) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000001dc0)={0x5, "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"}) (async) ioctl$EVIOCGMASK(r3, 0x80104592, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000", 0x45}], 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) (async, rerun: 32) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) (rerun: 32) 27m15.207769709s ago: executing program 3 (id=1923): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x0, 0x2}, 0x18, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000040)={0x1, 0x2, 0x8}) r5 = openat$sw_sync_info(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) preadv(r5, &(0x7f0000000700), 0x0, 0x2, 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000082cbd7000fedbdf2502200007fc04fe0b00090000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc081) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) 27m14.30010177s ago: executing program 3 (id=1927): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) (async) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}, @TCA_INGRESS_BLOCK={0x3, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}]}, 0x48}}, 0x40080) r5 = socket$kcm(0x10, 0x100000000002, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x1b) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x1b) writev(r7, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)='H', 0x1}], 0x2) (async) writev(r7, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)='H', 0x1}], 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000fdffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000380), 0xa942, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c805100100003050000002ddcc494b501d2fb00", @ANYRES32=0x0, @ANYBLOB="00000000020802002c00128009000100626f6e64000000001c000280050001000500000005000c000200000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c805100100003050000002ddcc494b501d2fb00", @ANYRES32=0x0, @ANYBLOB="00000000020802002c00128009000100626f6e64000000001c000280050001000500000005000c000200000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) 27m11.686586568s ago: executing program 3 (id=1932): socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'veth0_vlan\x00'}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) (async, rerun: 64) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000000701020000000000000400010000080c000340000000000000008a0c00024000000000000000030c00064000000000000000040900010073797a30000000000800054000000300"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 27m11.252168309s ago: executing program 33 (id=1932): socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'veth0_vlan\x00'}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) (async, rerun: 64) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000000701020000000000000400010000080c000340000000000000008a0c00024000000000000000030c00064000000000000000040900010073797a30000000000800054000000300"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 27m8.88816055s ago: executing program 4 (id=1941): openat$vimc1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3f) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x0, 0x102000}) socket$kcm(0x11, 0x2, 0x0) r4 = socket(0x9, 0x80805, 0x2000) openat$rfkill(0xffffff9c, &(0x7f00000002c0), 0x80000, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r6, 0x9, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000010c0)={r6, @in6={{0xa, 0x4e21, 0x2, @empty, 0x956b}}, 0xab5, 0x7, 0x9, 0xffff8e69, 0x5c, 0x8, 0xc}, &(0x7f0000001180)=0x9c) r7 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="69d0e6c4a470567c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="144fe6000100012dbc2b3b048fd4971270480000", @ANYRES32=r9, @ANYBLOB="14000200000000000000000000000000000000010800080044030000"], 0x34}}, 0x0) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201f2c59620d016b8108edefcf054a60500eaab010000100009040002020083ec0009050602000202f5090905820200020001100000866b6a9921e2aeb658e8476e612531bb44dd0dd98a6a634fab20df58"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="2098f900000000681800000040f400bec073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000840)={0x40, 0x1, 0x28, "701dbca1a5199b006d954e287b2d0ada3a2c58411ee3414013c97f91e7bd851187baea760edcaf25"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x2c020400) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x8) r12 = fsopen(&(0x7f0000000580)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r12, 0x3, &(0x7f00000005c0)='\x00', 0x0, r11) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r13, 0xb701, 0x0) 27m8.128349157s ago: executing program 4 (id=1943): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@generic={0x8864, "118b9041ce8e89864b314a0b568cc69b"}}}, 0x0) userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x2, 0x4, 0x68, 0x6, 0x888}, 0x50) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff030000000905820300ab"], 0x0) 27m7.365058252s ago: executing program 4 (id=1946): getsockopt(0xffffffffffffffff, 0x8, 0x6, &(0x7f00000000c0)=""/104, &(0x7f0000000140)=0x68) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000400), 0x0, 0xfffffff9, 0x5) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 27m5.688831353s ago: executing program 4 (id=1952): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd00002800ff000000000060fc03000f982c00fe8000000000000000000000000000aaff020000000000000000000000000030"], 0xfce) 27m4.93325357s ago: executing program 4 (id=1954): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000003a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r8 = inotify_init1(0x80000) inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x775) close(r7) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x1, 0xb6cc, 0x7, 0x3b, 0x3, {0x1, 0xfffffffffffffc34, 0x1, 0x3, 0x7fff, 0x100, 0x5, 0xfffffffd, 0x7, 0x4000, 0x0, r5, r6, 0x8001, 0xdfb80000}}, {0x2, 0x4000009, 0x1, 0x4, '*'}}]}, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000006c00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000008c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r11, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0xe4, 0x24, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x5e, 0x3c, 0x0, 0x1, [@generic="91b85b130318a312d848881a7abcd93e980afb476a09a54eeaa4deafe3bd15d33245adc3f30547b789b68c593d64b0bea92c5ab96c9c70a43890a215bff742b4e062666f62c9b67843ca1c916bb71c726c867719c7b73acb11d6"]}, @generic="aa5ce3d104e0693722589ee1692d95f72c9f1867f355ede34851f5edfcb8b0166d07e9be823d1116e7b2ad0fdf11b0c66841dd620e27d8da40306025f7058b8d5fae086f785cc2d5c3cbb715ef8fc06e65dcfee593aabb7ee6961840ce3f89f9be31cc58770592789a70d9e7ddd6de8534be0c4c"]}, 0xe4}, {&(0x7f00000004c0)={0x600, 0x38, 0x300, 0x70bd29, 0x25dfdbfb, "", [@nested={0xfc, 0x107, 0x0, 0x1, [@generic="2479e560e71da92d7b03b35cf848c9eef3d93982da827655aaa884070bf93944f478b10af1b12fcd05164a88db4cc65295f740d0967eb10b3375915e34f37553de65a4aa0e821ea2d732c961381d8a313b29de23e2fb5bc50c0b5e59ebb0270fa0037af3c6cbbbff5e8e9527ca5e2b86568a188d49e450def97604253cd4f10209cb9df2dbbc34ec148b84f2435982faee9a3f3450cef476a226ad01bbdd157bed11a73650d84d2fe59fb8763e283d2c196b50af77c9d6131372d2e906b336cf35b0299b5f0fab405eee6751428657c6b89dfc99886c8fae8a3b432ac9baeac55bbac15edcade39c61bb9b4ee5362ddc65636138afdd8997"]}, @generic="c790145e633fa3ef01a654b8b0821629c17c3e5c1ebfba14fb823cd3e8292ce5d7a8987bc45628df3b5ff00028d02c20dfa3f1dc393e5662ea9276e7d0e19d864d428713fc0473479cdf88b94a1a5a", @nested={0x3a6, 0xc9, 0x0, 0x1, [@generic="40b171e86b6a51", @nested={0x4, 0xde}, @typed={0x101, 0x3b, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x84}, @generic="c52d8f183b538db7cc92fba407833bf5c98402dcb8759f6281511d0c940b6598c93ed84dd252e668da0d17aa6bd054311bf27d", @generic="b28ba1f3e80f84adfc4ade78c751a37c47352978b71bf4264b28df5c389352f8a3e6ca33a89e6b9abd831270648a2a1a3d1509243262edbe9d033795e8ce38999c0d09f2f2b7db7d42d102ede9f5907cb1d303bc72769032a0678abdcb6174c7f907ca64bb996749702cd7c7e33284b7617a1e6ff5222db861de498035f7aecbf9153d84cb286f40d5dca6f8d18d80a6ebfbaddbdb68de02e8b1d1e048d7", @generic="43dad9b9788b6b0f0ee88ab73d690f03a971d3df5066c9f11568957560edf21d3a4f08ddf1bf5a95d23e2eb183b93033e44b0f7fa99c53bcdb96b0bf05ff0c342b3d19d483b80388af3d65648b950290fa7c678368060188ae8f684518ff433a51d32bca1dd1ef40306e2a515bfb80d554ff6d94b489c5c0fa0cf19dcf567ffc13de", @typed={0xd7, 0x16, 0x0, 0x0, @binary="80867faff8620f58f5e1dcb98810ed105ad7c0fc786624933cde33ba76eb2826d78a69e5787424c15f91ff99f502d115fb47ff05c82680336f2dacc22499bfdf1ebc3bad5f03b8640f9faca44e65797e566703b292c3748be021024f7491229200f6d58c074fa234ef697496b6ea95c816816a420900bd59cec3ce691fe13de7e5b5b02f3f90d94d59342ab1bc20074da0a61cd9dc649b18bca5e29dd507fd2f3974b7411cbd5c67bf53ab0769f3bc20cfa7e1e24e8a1f599d47138b206909260e974653a146dc5223fc11c02516c20c294aa2"}, @typed={0x4, 0xed}, @generic="5c7a4e328201e359bfb4aa052fb82dae320ef986289b09d922e336c8a5dadc8f7ec1493ba32264589173e207d0cc04f71bbd8eab1b91d6e33ff6c2b2cd1322d2f4e76dfa2537c14dc7d9632b5cce88f8d1beaa6f786047a54e5c317078bde31b"]}, @generic="b7ebb88204876e55fd6f532192b21c08d99094bb6b7027e5f5b03228e459973842c9bb2f0dffc87fbf2b1f77c16c6180ac7b127aea8527b58091f0f9364d8c35805504e1ed8014ebd8f822be850cf195efa4bfae1bc48bceff91537a9aee63d3ccb6c8284fb13c0d452c9c3c9cf9a4d8f773620ccb54bdbdb66822424e19f3d4f74ea7a95171200d1ad1486131e49b78627fd210d2bc763cdfd7f78b78bdb7171470432a47fd73631d2fbaf24d8c6034849c8af398f615af62ca02eee98f36e7a109e5570e73e27a5d9492077086a107adfa5b216d5f6e53350bf8a36c1e1461aad5277a4795dd9831f4c23417dc257793bdcd9c2d6399f18211"]}, 0x600}, {&(0x7f0000000ac0)={0x424, 0x14, 0x1, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0x117, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@nested={0x4, 0x12}, @nested={0x4, 0x80}]}, @nested={0x18f, 0xc6, 0x0, 0x1, [@generic="fa26b1ce574e428a72747de963f4f55fb6bffedcb98baf7a1c06b133b08e6ec089e4760d5ebe7b0f37e511b838d412df335c5a81b0b1e6682b7d8ce3a1bb7faf1f782dac98dad7f8939d6e1593bf1444aab8e2881a30bf84ef0d9d54f653f1a56c31d57b44a0cebc67490275af", @nested={0x4, 0x7f}, @generic="31abb7caba23a5c4caeddf81d06d4ec60ed297b1b7e1d5e5", @nested={0x4, 0xc0}, @generic="7178a25d1bc7a0b420b818e1526bef52805a1315ea8490372bb85240d9f900a8ff4e46d28183c87f14f4e119dc111036dfad1e497b0c60fd705b0b82d791d028430571f5c10035753f3520efbaa809a01ea8", @generic="3269db32992aaef32a10ade178488bf0dd88f75e9975883234e8a2296697d9b34cff75b357ce1521a6beb18fc4bec65b78b6cff2dd7313b45d0a803a73699dc2de4f6b096e339deeb92a17c021dc6e6d89aa0827b0897e78915f3f5d3b3db87b976b2a722d8bd1e85f75dc6cf96a1e96605d5cc18b07412dedc753b137869238fa09f1feb663f64aa7ee98726aedbf6f30fa9f11e974b3a90d369ccbf6613a06ccb7795be50c7e25e707f5e2"]}, @typed={0x8, 0x67, 0x0, 0x0, @u32=0xfffffff8}, @generic="a2a309474fc9f375d5a98fcef58f4719223e9c3ff44887f35cca6cadb525b78fc1238112f57a87e638b02743fce1ac002232883730f96a4f9ec570680be64412f408f8eb8205ea462deb8eb872f2659cd8f3cf50bf570ab67cece32dc85c5534ed2d5de5b0b5291dd20fa5ce8067bdd5ed860ff69d98821060f728b73603fff942806937d577061f81dab463b8ebf79250", @typed={0x8, 0xdb, 0x0, 0x0, @fd=r1}, @typed={0xc, 0xe3, 0x0, 0x0, @u64}, @generic="c6debf2c9b6ad523aa45da7a6373bfb8d09bae51382845e450b30a40d60f6f9cca5c8621f4cceb9e705599251c9ecc156f29bd5615f8a2fa14ddc54b16c9fa9f3d392bb2adc5b2ed8af1646cc01c11921bc007128c1b85b258db39f8eca67ef7efbabb8d5147f2e41ee6f7d0b256cdeaab134116028e369a95a787fd0fe98fe48c2c3fc80d96f5054ada3a6f3399231439cabdc11667ce83d286f832ac21da3dedf53cc688ffa4a2f7829cc89146102ab958b3b5ca33b6af4c25d448e20e76c1c1c65ffd7f2dee498cc8ba46489191cd2f68ab5365681d793739753977a059f27d80a73e2aa4a510ea54d3c4e9b35d", @generic="91fa162168ac990f08244b401b0d19be2928c0fde8bde20733d5356d053996858f4ef05a31319c6114cc58d6867315da1ce8c5a2c607c3a01f14af0aad5d55f5734742d13a58271a5ec1d6a51c45a7cf681a9152b11d9180083778a29be3ffb31697ac17e4484de74e25f8c75e3e80e314b94a12adbdad61cc37af4f9cc89edd532ef73f066115188509ba260977f8e1af0d0c63c83c674c20e3e21c67b4cc942121f1dfef27e4c78cb92ccf61f276df2403cb851fdb0063299c3cf470a33162cae65656f534ea10a5da65d03a59b2acb47d21"]}, 0x424}, {&(0x7f0000000f00)={0x340, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@generic, @generic="3262235fdcc4ae93cde2179775862dc7943a73b565864f7ede43e9c401cdfc358130f0d037379039cd8e7e507ab7f4b9e52c0b9dbba6e58677a791353096a394368fabfe7a355cf69c285ab1ff56f0a8c316b070406e924c24fe8cc16aedcc2a54b18af2cca629ce299be8b8dbb45fa727909161c1bedfb202813b8e8d", @generic="98b77f2eda2e344de18ff7fe71b8a2a3471eec672524ff47fae3dd77b7ae3ea1a7873c79a0b538c505ae5edd1a2c9737adddbba5eef746cee6a3cd7a1848344cd63d627db37df1b11e503778b73a5c1542baeb605dedef1b2e483b131ae2e1573032bae56cf4c3b60c57127d83eed8f6e259d9901d88700ba61bc774aa31fc1e87f294fb55f63f1dd79251468bb67cdb9f0ca01054188b369272850e1a114fbe0da5642c0d193b1ab194f335ead616df43", @nested={0x1fd, 0x74, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @u32=0x2d}, @generic="a6cf1a359082297e2174869b42384406d31bd95b21718143d269a96d8cab26d17212176a6fbfa3b0f6cee9cc1258cac00e8994142dc927e6510dcf0c33b3d7f0a2f4ba871f2b9509f617faefa796bb9e90cc52aef47c425c986c4219353c059216701447c3cce34808d0c918b6cc", @typed={0x8, 0x82, 0x0, 0x0, @uid=r2}, @generic="cc0ee5da84710b65de838a3db01be75b34aa502c9feb9b7d3aaab3c71b01d01ad4947acaa4d2bb124a0da5243eaa62eb9642ac3c37ea29eee9e50bda7af90ba2f76e52a9b452b8cf0fafd1721effe18d87a66f1fbfecb48e48fe17d9c1975d929a705a11d0cfdfd347e93b5a95a65ad3918ccf980422cdbc0d0232b90cd7bd196399de129c23017d58ef5eed2db44269b2daaecb339ab013cfd6d707935048ed5751acf3cda894485b40f6da412f9b784a62d282b4c86fc01fca85cecbd784779e68e3", @typed={0xb8, 0x43, 0x0, 0x0, @binary="22495996118e398f685e64bdb1efe49041a6f7a6f25e41c4c5d2b6988972d7fa65006fa7a4bcc98ca06ba9827938b6917421597942c31807e493625612951518cabaca809e7d27b82a5145a8af3cf815ca39ac62ff6a419223b9b34a69ffe0067f78b2aea761db7f98ceeffb9d6b0d9106b8105bf47184c06651669888cb2b185bda70258c05c99573bb6f0dbf623a2d2ac99bc05100161ce7492e6a0b9d78a3b5a417f448e9c7b138add707c4caa14d759b0637"}]}]}, 0x340}, {&(0x7f0000005a80)={0x1158, 0x34, 0x100, 0x70bd2a, 0x25dfdbff, "", [@typed={0x14, 0xc2, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x129, 0x0, 0x0, @uid=r5}, @nested={0x10cf, 0x16, 0x0, 0x1, [@typed={0x10, 0x52, 0x0, 0x0, @str='\\.${-/.)$!(\x00'}, @generic, @generic="b0ab90eb7224648eecf00e64f38a7565f7673818494167dc1dd1bd444a1806126c9f31b08eef2ceb96dc866239e9f74496b41bff46c88441e89c951f70935599f8b062c6c17cfd8bbd513bc0c4c26db86abc3a9856b0833857a39c8e7e5b4f64c55d179fda4995cff6a46b80709e8061879941bedaf1fc5924e433c32933aa00b55a469e521a11cde18e18d539440223421309127e92b9a565f73940f1d7c39956bcd5c5586d5c45cbd9e97bc114f65e34add4cba070bd", @nested={0x4, 0xc7}, @generic="365839528a0989d163fefccc4416ea50040e18095d080d9dc163899c86a625deaad5142e8586b0bf5c87cd58be80b02381d6f0864fc814d54bc5ef860eec3ffcf613fd298370d03872853ffd42c92d284808b80a650958748e6047e6558f4e139027599950467a7b22826dd87a806e0b7aad5b67d98b2090955eb8eb2c4ec9792bec82ca92161a7cf60948957c249d16679a34ac07f346dd013726ccc0f2899cd743855544a2ce44bd0bab02f16345edf585e8f24e70c52143e7150b46170def08b1c7540b0318687aef9b8b9143b112d5aac4bafb44d06b778a8616533de28cce511b0bf9e17e484928b572d3d3347cdd03a8366432ac675887b040d4a551eccb629aee0337dbbdc6d997e2d23a727328c1564ccf3e01bd814b93eaf47fffa6d0472b257ade32fce216ccf5ee32fb5fa039ce138f774fa6ab5ae2e733eec1fd506343ef2170e961f19e09251b658d604b86aa037225ea44e3da9a4074ef04f7274fbcb18b95a2f1e1d1712b1454b99d1a0bf8e55aedbcaaa07dfcdef813980ca137ed8148c068ff017900db0e0973e674dae7c17a78cdcb2787f4babae0b3890776fe27377c593d4539506f0d27cea76d9588cf6e4ab43ae4efbb3af21d4edcca7ce722db46b55cd65fe65bd4ca59f68c9dd037e7619c1118dcb55c078fcf6f64116a887c68fd3a27b222ddc7d67639306be09a66484544a660c890bc68a32a21498318d5e59334009a458b31d1fe75d0ff25c421ad3790170d78e9fde407530241978f90d26244d18a5e127cad24649e0a871dfd3d7789b8b8dc24634a77c7398ab5902886d6845480258257f1fb1fd738c7be11956157b46ac82b828fcec3b984d9350dfbf64d43dfa7de565f4009053f5819b9993263556a6ef7d2393264732e397e6b0aac19326ed6bb5fa8361ae391bd3c4a5d96b4c5f1ff0ec84e066afa71046b324ab0405066843784e709fb92bf80643190f1e89d8c20a6fe5b3a5ecec72fd916e8c6d7bd51c835ba6029c98925e3c1aefcd64abb8f4a12aa9d4384e20e67634e01dd931a61723281a4a6370998be727cc345ff724d7ee2cf50734d7db5c0243c358d024f5263b9f3015699af0a3bd2899b07d71b15a68ca23fc00727985331c73a16b17fb398092daef6ddfdc6fb92d4603ddacf58a0b14f5f3af2b6ba1681fe7b86c1b16d2baff897c654cae1c11ac2d4ed2f0b04c0f928a9ddc6817226caf6ec5227304c4d9b66f402f6850fd0a9730fb97798d6ca9b5d550610503065d3f8ec95157a21605c29cd99d39d4142c8f5bbb15873145509aa20a5867d2780dfad33be8752ce161b7456ae51f1a47576901c8f931beaa6f92789de304a4e710cf9d381d2b90fb835fab8f95469c6ac89c7d2936655b92fc049536dca0077a72c8117fbd7c4bb6a591c1e83b75fcad0e2db1bcd041a0f1c2c13342eadae07c0f6efd5008a38c3bc8c0a9ef7e0e306852f6ff17071f20a8c55d742dd2015972d16193ef8dd3602717a57fc354ca4f8d03b92644b2f8e350f9f99fc1d5aef684e78fbd19b648cf1356788c5996b5d96547cca43bf2d227afee7189bc2e89d4efa97ff5609eec9518ff2ca261fadc6a63747782d7c6a34a8354a7f6d4804381d9f607bd6538b01f6e9464981b9a41bd84d621070754ece5645c4a6a194d35d53d26a4fcb3f05d89896adfaa53f7dbe44e591750e8b73f21bfa98aa421968d5cada83728669d273c2c9fd586793e36fa3682aa52c37d63d27068a6e2d1c6c83a244189474ebc5d42b748e687f6d505cbeb3f18917cbc1c8c3ca33a722887e296335022c8c5c1d6b9f47a1141c2fc06d2f6bf286e0bd9e175969bbe845fcc5a812e09b1735c92dc3ba4046b5000b6646f958db12f089b36c80151b189a80175b0b5b1e3d6ff86690006791443f3426f3aedbca3c41d00eb10bd405b7fb1317201eba91b257460f7f8533f1e86e3572f2d8218332072d240470dd32318b2d464519d8fe818fdffc1dccb262f9764b46ca34af73c1b8b022e3a2a838a683746f5e31594bde973126bcf9063d5c6df55fb41f6d953f3cfb4b099891be56d76cc1f0e40fdc7ec736bbbf3fb7608dad399f78a5734d922cfe02a83d5e26525e78e314d57660163b41b2f89e8430580800baaec56b3ad345cc5ed92a351eaf0e06ea77dd9e6125489f1e90dfdf3e89567379229fdac51fbb20780812996e2af34c7a0fdf3b64c508b377aecf8e6473e199668c549ca76daa9b1fe7f37a8a9a22cb0cddee26daf20ec74d6fd7da31399c52e0e12ced36390a731376ad2d7bc572ede22db3a4ca9f3dcc09d16d97dfa3afdcf61da54e298222c9381a0bda0b34c58f4a091fef3ac12be5642775ea342e66d8d23e15556a63cdbf6e312d6c4b5f16d03bae19adaa455c1c3d14190a31fe3feed205b2ae238f9dc453a1bae01ed91e5693aeafb66deb482bc59c998a5ce575853268272c880afa326a64f48a36ced5b271bc1706ef24e5b7fff99184a7a80b0393bb613787d08c890f093d622bd1eddb5e0d8130ba06124ba5f770d82fc4ef8cc52e5d6e1370b0bb923a8b788a80a3be4944fc224c4c888e933bd10ff1d6bdd7bc1d770ae091fddff19fb559fd918f4e1d09d06c301b5970704a5c82e309077327cb91dfb0f2bed09011390b8253c21a7c43172f1ac39628dfb3bd4e4197f5335b1199a52bab5ddce3623b288024a0748409fe41655f4c508cf25b528f0c402cd54462fa022b4bdf52e53c9103cfae7e34de9a3392da5c33506e99bfb08b933dc3e98ae3e9eb156ace48e91ec22c12570ff1c043607bd5ad43d9d5acc98d0e91486ccf32e975196d2f3579cbbce713bccb4c4026ad17eaf75037165783ac1a1b7ca66b8bc7a7d4089ba2a1ca2a2b1d7b61c515ad151e01b345090f7bbe99c74c907d7b1670f7015e543e892f2e0730b07ca93d3aeddba66c7bd1f1eb0538ba4237eeb74ab4784a8b37d199f861504ea1eb9194d7211bd3afd79023e5b2069249fde2740b4076e8b8499b807b32f110f1eb0569f305f892dd6070f17894d8c73b3d1b1edd4ed6e30f30f14c2b7935e46f423a4cfe6b345fd48ab2f19f9b62be0700d9a5a5af10fb6b377f6de5ecb2d74c0ac36a3ded11f2984e29bf6dcb9f228f6060cbd06d9d4e70a9fd9c15842379756b778d548227b81f3c3ce0c8c271090975b53feac683440dc74fb3e0e08f1c599b685c0af4145a7d94a520aef922c0e6fae0a1ab8a7ad658287ea362b69a7d55ca955316d024c4121db5acd3c96a1aef811473383cb3e35554ffea2e55ddef5bfa3f34e901b823c6faeec9e515a48c6218a3d6c544e70d11d06f5c28badbea2bfe4ef5a76e9a304a84c95541a16d54e25d4dc81ba8ada5e2b815f24eb79fe1f1567e132f1153c18eafb973b03f217dd51f49747d63b5b42417ebe87bf9379710803a3e6a29d664774a02013e02370ca08dba442d8f681351733f0cee312bb0db10d146d6c108806cb6940250eff326ff189ca31b2fabe183a9883441c18db99ed3778fe69404c52d23674cddac7a56d487041db9ffe0039b81776560ec63e58e1273f6a54912d3d10022a243ec20bcf29dfe625e353ff3ac63d136237da8a1f4c494143485e6ae27c6c23d54ee4ad8413e54793d02e68f925a06d46e00dbc129e14157d4b41260262e29acb3bc636f37c8ca721d5e1b2652fc74b985cd286057ae59ca83dd2edf5d48e7c7e0d4d4f666d16adabd4e43a3cced2693806cbee8b5a872fbde3aaa60eaecc891b1e77feb726fd294832712b116cc39e9a2b76fd2fa7e5d83615809212ff609d7edb3b37aceff3885f2e374629b48e4fb628f50d8f731229165496218ebe19725bff4c374adbe84dc864caac1c907360f3442ffe51104828fa914c28842f39b00c91a89c9f6baf154ddbd7713f61f6f92c51290ea990fd40389ed5fb48d4e731601c2ab6ae668b719a6b5447e0b516e078ff6c36dc6b6083b506f28d842d5233e01c2a0380154906582d1d356582462d7c27768bf44b9cca9fb64ba05cbcf3bcf96df09e437df212c1e57f81f2776e2098c43d9bd0a9f24d46632b899bbf71c22b3a88d0e5b38500454feb48608dcec4a7d7b5129c1fc2581abe11355c08199f95cea86ae69c91cab37921d00b4ead6f7e68fd7dbe6b2a3bc963c4ad9ab04961efe4644d1eb9e5523c749651bf29f533191c99ddf791df4dff38d13bfe6649d259cd0e3333645fa3d3a13ef45d100d3e6dc5ed6b5cb2cd1b4edd90e3971837be64e56bfd4045a78fff35ec8e6a02edc16fa01b1994930f85c7eb422ef5ef820ad94fc1f317753540292f101b028cc5b61482c73867ab7ae8ddbaf36b0349f53bff6821cc386635a236bfc51ac82ca0a64008f7c3f0b78e476fa87960179bf7040843cce3c4749d686a9dc67568743349bbcfac598f6aad6c676312ac9204a1825f6adffcc5b0902820aa62664fc8c2e40a05c4a81d3f04d848a3bacdb4dca194039c7539368167563849271a6b0c75508f938acb08fab21f05f4af2442ede968ab44afe0ea3b024c01ab1629dd520be1cec27a79c804468d800f528c363d966330565c004b1e3f8b22d3731dfac0df81d925bb898dba840d978e473d9319a9285ce5c4a49249dc054dc008a2405aa6c1d9ebe28b95362ded957fc80f8dda905cacaad7b809981b5eb3ff217bd3742f3823de5d5166299e5ba4cf50aec91bff11a560ca02144ff9335da867000b86bae8701f5682ec808f203382d8493a01dcbd47f895972f9fccdc234719a8d20e95235531526684c1b4c5f730890f4a4fb59365e6764ab00aec47c7cbbaf351a8f51a71bba1bc682634452f2327e683a1fcb300241944bd66355d0555e9104ffb0a2dbb8a187974c35bf71c73f983c75ec97ece7031ce38fb1d74048576a1aba11e823cd8d0709aec7858bf3d34b1d95f14371c4793602d5d049bcd7b57c309f4f24e4ae578f8101d665a394408df2614507550818092262f753786b96e428c408917815a53730fbc75a579126da36299cc96b64e2901457a886a523bd17729830da9793688df49d8d60a97953b2fe22d568905220190b5c5dd71fcd3b3adbed65a6ce782dc16c4d15b3810fe8bfe2833451fdddc0ca6d894008e562011325c17c33c6d53123a2a3f2584b765661f9854097e73272469ebca01ddf5175b8b8c1005da262d2eede62af3ca02bb26ce4d56d4e482a387da129dd87af4f43de00334584cbc07e809fc4bada5057ec5f0bc470f0261787decee022bb684d2f952080aa8754e7ac9c138e65774e7173218a64d236ded1cc596212b04a8f31193748aac431e3ce0efa09f22355d3f88390c9fab9905dac02eaf897773aea3605e73ebab74d018db5c899cd84e8b2c25dda13065b9245c213b4dae01f887408f3c4af56e7b8b5920b7e1059bf81869b4b817b4cff63e0fd536c3ed895408ee1aa325e0b1bf2faeb0bb9f5b49c36500440146c757feb742ac376e50a0e6a90829a0dc58cf051efbb067a1dcf671a60e2e3f9f0cec746fe7350b1bc2459de973e8e13983c79c3d4cc0889a937a15b69d45c614a78b31ab3ae03f332def6e517269bb2244f83f54f3e926645aa1ce1bfdcd3d77e1dfe19045519f17a9c917c0ec2f27980f516a6433b3def2aea2d822f70de243a1bdae0e6bb4b589dc253e1f30920a93b19b67a5298ec92dcc657033dc1af81726875f43424625ad06c48f3aa31898890799d9448fe339a372e56e80129ce425c2a51a43504aa99574aa5c430092c789424ee7e60d3ca1d62a266"]}, @generic="a199597d2ec80e54e1a27c583c177b20cb70e312388dd56e153d39d4cf6e9c94a41271fb12f42d1bec0715a2e6e869d97407f8001962f371ad6465fbb65cd03661565bb6d24b1ad1c6550c3d1efa569220a95eda6601444e4a"]}, 0x1158}, {&(0x7f0000000100)={0x88, 0x1c, 0x10, 0x70bd29, 0x25dfdbfc, "", [@generic="f400e57e3658a081d20f09fff086b30144c1f0f998fb51c5ef3578bb956df4ddf36423ecffc18dfdd9b682dbabcb080cd4a42997e53a787c42b8a92aba4cfef30da675047ea967ffa48b168ebcb94e075280a0afb4b8ec40b5b3a5021e8b46984b9791954c006ac4abcfdc027b59eabf3631beeec206b2a5"]}, 0x88}, {&(0x7f0000001240)={0x47c, 0x3b, 0x400, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@local}, @generic="da5bce8f1523856de54f276fd9b6ad574cf114feb0db8efba0d5b9d7ffc0fb6f34074dbb14cd3cd49135d96eef7b0b271e190beec2515c739147dca8899f76a391848a5c2ed33f1ce48a13e4021d4f9752609ff522addbc8823d60c569b97badcf9b93ac5657557a4eb322fa8e0daa0a27aa903cd889", @generic="a113e427bae1c860424f383fe634e0ee4b8c1c8178bb28798461cae13f2b134d2671e03006731098542c2a46abdc08b1311619a9589a54019eb63e37f25c39d89a0ee426571fcdb3d2f195cea51f9eb007545a3e11118b", @nested={0x1d, 0x93, 0x0, 0x1, [@generic="2f1455f80a9ce79861d73a3e807b9fb5fd574c67d193e2ae65"]}, @generic="29b68c16f204311208a28ae6fa3d496ae0a7fe645c5b", @nested={0x1cd, 0x1c, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x7, 0x0, 0x0, @pid=r0}, @generic="01d4adc178973ab6d1a53d150e9f18c004c041147496c2e90341545a1d5ee3539fb2f3aac35bb2ea4fc9c8d097df46aed293f0b5c79bac0f4ac802deb4afd9565f440c6083616288f25bec2464df32df7e4c0271bf1cb53984357e65f2a3770c0dae29cd839b56b0f62531230f4f16ef6856232e1ae80c99b6ec259a292616ff278ff2f48271c64737e2e3ecdadfcfd41ff01a1e78c1260e8a3a8c938dfab87d2a10d21860806482c56bd2f5b4b0be59ac3a3382182a510b01f58b7f6fac5b725cca", @typed={0xc, 0x14b, 0x0, 0x0, @u64=0x5}, @generic="bb488c048584e2b6783994b15dc5d81a74a8c62ab49e830482102cdd1a894e7c09ba6771f09a959ba9efbb55bd7b2b03944cb26143cc2f1945a05fbdf2803f9f226387d21c738b837be5a17b9a9de204ace56f7026a3828c379a00f6fee5bec20c8d784b699d8a6fdf07aa41c8f70283af7a4c1e5a37b7229f54628762266c7124b4e465ec34010c68d15521dd86fc1b4a8979a1190879d6a5955ca501896c78bd048cbea76f83d5b8d06a1525bec2c73e64ee303bd8bd23b424aa31b69d85bf49506d06398500", @nested={0x4, 0xff}, @generic="a97c3039528a577a2a61a4add9b8f96794e0c5cdbcd387ae4270fde70aa6bd95"]}, @generic="afefd1be2bd804545d5073900276087f7ce2079661672bb48dd83cf4894a20140473d80433b0b4d390b7b219d70936790122b05344f8e7ec8f5093f2f5568ce89f2a91405455a6e959f5e6a55c9364ee0588e12a085ec51b87543382e041fc8e0941aec85b3f2334f5f5d3ca53add89fef0cd76b55c151edcea34e73575dcaa07b5f2208e0aa2b5997e9d8e4a0290f48dabda627f559217bfbd31acc6d929635521dbe044dcacefb37665c2a45484f4fc4e51e620dce548f3f4fca838a635acbed5a6fd7882cf00eef87967a", @generic="9239ffe8473cab5a2b9d64329d85d7b85a107823eb8542c0cf1b7b98b689df621f0df3d0db57c9dffcc8487d84491bf0ebee6fbbdc26ea0ca5cfe3ac887c43ffa44f20b618f50ebcf02e3c2047b0f39027f83e0915209bf4bf428891ba1f9a1d387584d75ac99e82a98740760cc5123cb9922b73bb553983675b3bab054ec066c57b26630d0bd018e878c3a03de1273e5560cd4429b70de449fd3dcc6c16929fc26723b5578f86f3c1b7f977e3f630c761ee6b1591d3"]}, 0x47c}], 0x7, &(0x7f0000000200)=[@cred={{0x18, 0x1, 0x2, {r0, r9, r10}}}], 0x18, 0x40000}, 0x4000000) read$FUSE(r1, &(0x7f0000001a00)={0x2020}, 0x2020) rt_sigqueueinfo(r0, 0xb, &(0x7f0000000440)={0x0, 0x0, 0xfffffffb}) r12 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r12, r12, r12}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000340)={&(0x7f0000000300)={'rmd160-generic\x00'}}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r13, 0x5411, &(0x7f00000001c0)) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r14, &(0x7f0000000640)={0x2020}, 0x2020) getdents64(r14, &(0x7f000000ac80)=""/4096, 0x1000) 27m2.756192733s ago: executing program 4 (id=1964): openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x402c0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000280), 0x80) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0xc055) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) unshare(0x20000480) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xfffffffd, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff4}, 0x0, &(0x7f00000000c0)={0x7ff, 0xfffffffffffffffc, 0x0, 0xffffffff, 0xffffffffffffffff, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0x2, 0x4) sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="f75177d40300e9172ba6000000008c995fa0f4ebaa855e4dbc03dd53d5b052e9a10943bd40b0bbb749ffa4da02adb79f2ade9e2b25fa1b84f24201003ef11fffc8d2a41456dbda6790d1f8631b0672e6cf10660becaab307bbfa9c9fa74a7323f51d05d4b9570dd16415716a67b2bfab95a2d9a02ec97562dad332322e36a248", 0x80}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup2(0xffffffffffffffff, r2) r7 = fsmount(r6, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r7, &(0x7f0000000080)='./file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000000140)) readlinkat(r7, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000800)=""/208, 0xd0) 26m47.493245698s ago: executing program 34 (id=1964): openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x402c0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000280), 0x80) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0xc055) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) unshare(0x20000480) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xfffffffd, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff4}, 0x0, &(0x7f00000000c0)={0x7ff, 0xfffffffffffffffc, 0x0, 0xffffffff, 0xffffffffffffffff, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0x2, 0x4) sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="f75177d40300e9172ba6000000008c995fa0f4ebaa855e4dbc03dd53d5b052e9a10943bd40b0bbb749ffa4da02adb79f2ade9e2b25fa1b84f24201003ef11fffc8d2a41456dbda6790d1f8631b0672e6cf10660becaab307bbfa9c9fa74a7323f51d05d4b9570dd16415716a67b2bfab95a2d9a02ec97562dad332322e36a248", 0x80}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup2(0xffffffffffffffff, r2) r7 = fsmount(r6, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r7, &(0x7f0000000080)='./file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000000140)) readlinkat(r7, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000800)=""/208, 0xd0) 11.383794034s ago: executing program 7 (id=7710): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) truncate(&(0x7f0000000200)='./mnt\x00', 0x2) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0xfffffffffffffd85) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) socket(0x25, 0x80000, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000003080)=[{{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/232, 0xe8}, {&(0x7f0000000880)=""/138, 0x8a}, {&(0x7f0000000a40)=""/254, 0xfe}, {&(0x7f00000030c0)=""/111, 0x6f}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x5, &(0x7f0000001b40)=""/134, 0x86}, 0x10001}, {{&(0x7f0000001c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000002f80)=[{&(0x7f00000009c0)=""/17, 0x11}, {&(0x7f0000003140)=""/4100, 0x1004}, {&(0x7f0000002c80)=""/253, 0xfd}, {&(0x7f0000000940)=""/95, 0x5f}, {&(0x7f0000002e00)=""/211, 0xd3}, {&(0x7f0000002f00)=""/36, 0x24}, {&(0x7f0000002f40)=""/60, 0x3c}], 0x7, &(0x7f0000002fc0)=""/154, 0x9a}, 0x3e3}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) r4 = syz_open_dev$video(0x0, 0xa7, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) writev(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3801000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r4], 0x138}}, 0x4040000) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000600)="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", 0x135) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x74}}, 0x20044000) r8 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0x40045730, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000f24060ef00216cbfebfcf9ed8e141fd22de93e0b2819d2fffcdbdf25027c0000040001805de930"], 0x18}}, 0x810) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003600010000000000ffdbdf250400008045bc4a"], 0x14}], 0x1}, 0x0) 10.395618826s ago: executing program 7 (id=7713): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd24, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x99d411631b5903aa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r4, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x7, r3, 0x1, 0xfd, 0x6, @local}, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x9, 0x0, 0x7}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0205fc090c0000000f0f0000000000000500060000000e000a004e24fffffffdfc010000000000000000000000000000988500000000000005000500000000000a004e22fffff800fc0100000000000000000000000000010600000000000000d3ebde15c70a36c11a304d20943630d88a5e3e5872dfa380952195d9b0310cfc99ab5a847a237b8ca233c37fcbe8624b050df63458228d0951ed8bef784968b50261560f09d865d9a2834f50f1c31a39f3aa4a0df39fec808075a33ba421aaa6096583e6b818892fcb4ffc91ac6865bfa8055681d2837b972dded2d8b965981bd17eb1d83413a96f791f16d3c92e76f1deaef8f0a023c264b121b7c5f039cd039c4a21be4688a72663d38414c897cf35cdc896037ef39abcef247096ebc67e3c72175539107de37c8e86a74427e5b812ff8a44db84573f4deb88cdb047fd5aad3b864fe3dac309c7cfa2b1d448585bfc443df5ac21cbf41713e19c301a2a0cc50c4f2a041ff12d81f0df40d800c8a2352c957db4500b254fb7a36cb4eb9ca912f9e41e435f0eb245a464dffc91aa901de9fdefe51b7b68453d30f3b095c89898c5bfb06d740daa2a24f3a50c8bca3216edf943fa3e48565bc5423377677f7d8a2cdb6fd603d5a5d646000e2da04ebb"], 0x60}, 0x1, 0x400000000000000}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_setup(0x466, &(0x7f0000000440)={0x0, 0x86ed, 0x40, 0x2}, &(0x7f0000000280), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={0xfd00, @l2tp={0x2, 0x0, @empty, 0x3, 0x1000000}, @in={0x2, 0x0, @broadcast}, @llc={0x1a, 0x201, 0x8, 0x2, 0xf8, 0x1, @remote}, 0x4fe, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfd, 0xffffffff, 0xfffd}) 9.485819111s ago: executing program 7 (id=7718): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x0, 0x0) io_uring_enter(r1, 0x7cc5, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4a, &(0x7f0000000600)=0x3fa, 0x4) r6 = fcntl$dupfd(r4, 0x0, r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x81, 0x5, 0xf8, 0xfffffffa}, {0x6, 0x10, 0x3, 0x8}]}, 0x8) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000200)=0x8001100) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) fchdir(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x4004) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r8], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94) 8.516698423s ago: executing program 7 (id=7721): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640011800a0001006c696d6974000000540002800c00024000000000000000030c000140000000000000010108000440000000010c000240000000000000000508000540000000000c0001400000000000000009080005400000000c"], 0x120}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000380050800800030008ac0f0011000100cabee339084eeef109002471f4000000080007000000004005"], 0x60}}, 0xd0) r5 = socket(0x2, 0x80805, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2000400}, 0x1c) socket$netlink(0x10, 0x3, 0xf) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x40000e, 0x28500) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000580)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r9 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\x04\x00\x00\x00\x00\x00\x00\x00\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\xdf$2dUU\x18\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\xb2W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11\xb2', 0x3) r10 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r9, 0x310f000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0xc0804124, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYRES16=r7], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000ffff25bd6000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000340012800c0001006d6163766c616e002400028008000700020000000800010010000000100005800a000400aaaaaaaaaabb000008000500", @ANYRES32=r13, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x8000002) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.094451722s ago: executing program 0 (id=7728): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfff7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtclass={0xdc, 0x28, 0x400, 0x70bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r4, {0x6, 0x6}, {0x8, 0xf}, {0x0, 0xf}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8000}}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_hfsc={{0x9}, {0x64, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7fff, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x800, 0x33a}}, @TCA_HFSC_USC={0x10, 0x3, {0x756, 0x5, 0x200}}, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x401, 0xfffffff6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x0, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x3, 0x8000}}]}}, @tclass_kind_options=@c_prio={0x9}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="586744429338"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d", 0x66) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f0000000480)=ANY=[]) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r12, 0x0, 0x4004) bind$alg(r11, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) 6.970293897s ago: executing program 5 (id=7729): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000c00), 0x800) eventfd(0x3) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf25000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0xfffffffffffffe90, &(0x7f0000000200)="3125000600000000a09f9bc289437bc3001400") readv(r1, &(0x7f0000000300)=[{&(0x7f00000019c0)=""/196, 0xc4}], 0x41) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0xffffffff, 0xbfe00000}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x4000000) 5.669114741s ago: executing program 6 (id=7730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x88b, &(0x7f0000000240)={0x0, 0xa5e6, 0x800, 0x2003, 0x276}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) io_uring_enter(r5, 0x3a53, 0xf8ac, 0x2, 0x0, 0xfffffffffffffec1) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r1, 0x0, 0x0, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r7, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 5.439396557s ago: executing program 7 (id=7731): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000015c0)=""/4096, &(0x7f0000000000)=0x1000) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001580)={0x24, &(0x7f0000001300)={0x40, 0xb, 0x4, "8621979e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001580)={0x24, &(0x7f0000001300)={0x40, 0xb, 0x4, "8621979e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x40, 0xc, 0x4, "ecfe0e18"}, 0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="400cb2050000f756891c002f75950c13bc9cf9ae5a426a52dc648850b5fc8e1a6ae0248805"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="400cb2050000f756891c002f75950c13bc9cf9ae5a426a52dc648850b5fc8e1a6ae0248805"], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.321178358s ago: executing program 6 (id=7732): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) listen(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.262710676s ago: executing program 6 (id=7733): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014101a695fe20ca0700b8269b0102030109021b00010000110009044e070103"], 0x0) 4.031136721s ago: executing program 0 (id=7738): r0 = syz_io_uring_setup(0x4b7, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000600)={0x7, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000380)=""/141, 0x8d}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000000300)=""/30, 0x1e}, {&(0x7f00000004c0)=""/54, 0x36}, {&(0x7f0000000500)=""/116, 0x74}], &(0x7f00000005c0)=[0x7fffffffffffffff]}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r3 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x17, r4, 0x1, 0x2, 0x6, @remote}, 0x14) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xb, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0x8b}) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x3, 0x10}, 0xc) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000200)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0xf, 0x10, 0x6, 0xb}, 0x10) 3.949176356s ago: executing program 6 (id=7740): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000010400000000fbdbdf250000000046fbbde957b4f4357f520dcc459774c3dc527254afc579850708f04ede32e4ac29", @ANYRES32=0x0, @ANYBLOB="0900000000000000480012800e0001006970366772657461700000003400028014000700ff000000000000000000000000000001060010004e2200001400060000000000000000000000ffff00000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_io_uring_setup(0xa04, &(0x7f0000000000)={0x0, 0x64d6, 0x800, 0x1, 0x5d}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) 3.801543094s ago: executing program 5 (id=7742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x58}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x9, 0x10, "46460d3cea7ac9e83fc9cbec9de9c6c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x24, "6e32be2293281d5cad78a604388bc86bab21555bef66c3ceed77a62de9f9d63c25671e7d"}, 0x0}) 3.716384803s ago: executing program 0 (id=7743): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x8, 0x8, 0x6, 0x10, 0x8001, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x24, 0x2, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7ffd, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010002080000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08009f00060000000800a120000000000800a000f9ffffff08002600b409"], 0x3c}}, 0x4000084) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getresuid(&(0x7f0000003fc0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 3.640542454s ago: executing program 6 (id=7744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffd) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1eb640) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001000000000004dcc5be3400"/32], 0x50) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x1a00, 0x0, 0xffffffffffffffff, 0x2fc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) pipe2$watch_queue(0x0, 0x80) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x8850) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x3, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x21}]}, 0x1c) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r9, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) 3.479015917s ago: executing program 0 (id=7745): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x39, 0x0, @thr={&(0x7f0000000100)="c4b85e74c68e5c44b5f012662f2ce3d4726840f244b35e336e3088194cad125c5e9f3c7fd04debfb0e3cf81f338168f4dda4fd279e7d7f8d6e474cda52c47569b8cdfa05a9665d4558817bc257e05d0aa1ff", &(0x7f0000000200)="6c1b32186bdade6e3a91ae3e53a5a84c49fd03bbe61129c53de65dbb745ddc1cb9a905b9b26de7dcf6e7b1a93b4566e9c53394b0630778afa5d72ce401fdff5f6aed3155aac69bcebe7d508bd96ac3fa6ccf"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x92c9) clock_getres(0x4, &(0x7f0000000300)) close(r5) r8 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0xa, 0x0, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000f2ffffff100000001800018014000200776c616e3000000000000100000000000800090005000000"], 0x34}}, 0x0) sendmmsg$unix(r1, &(0x7f0000001b40)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000003c0)="e703974f9d48df64a6ed637091698e2543fd6773a892f0456419fcd7c9751e6a8b80292f64ed02a36dd1ef3c7c18fd2bf972f601a77781eb6e6afcfbc64c0549dc78c9302f3ccd967d7cc72467c40524d49a3dc0", 0x54}, {&(0x7f0000000440)="638e08592338d99ae5cee786293745785a9496fe7c22aa69a7d4524c9f3b6437a33b66678eff3d63bcdbd4c8fdbbf4002fc3a1c5135b3fb5fed13ec92ff1ebda78df3b24263231991c99e5383391ee0941c1ee4927d40a01c1974020322408f4b96141702e4127558557caa1cc78992e1d8b85d60b7cfe4c22da3f75bbdb1809e65b28d06cf0082fc8c6ffa4492e2671cca64ad9a1796bc0bd99713c8bdcdac234c1b8f92f506b411442324ce12a3bd16daf8c5feada3658", 0xb8}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000100000001000000", @ANYRES32=r6, @ANYBLOB="280000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r0, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="35072600010000005ff30e01eafdffffff4751ea33eacf05a7010000000ce3f883a68608caa2c7a1ad4ea245a2c838887389621aa87e24", @ANYRES32, @ANYRES32=r10, @ANYRES32=r8], 0x68, 0x4000}}, {{&(0x7f0000000a80)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="9de072669173b5fdb0bab9799d6e97a5588318191d08f0a298fabff72239e7eca0be4e902de5c388d0c77ce9b65e9af83f928948dd1a34666a66b23265394487126eb4230396595b4db8198d65456f38b80dd9cfa50f211c3527635033870d9d8077bbd7ea96a5fbcb2ab96343ec601e5cbfb46fb82e0c258746fe3863cbde79ff9ad6bda0b85c721f882c", 0x8b}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="10ee004000010000008100ff", @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x7c, 0x4}}, {{&(0x7f0000000f00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000f80)="117c8b0579301cc9f051ff4edf7cf7cf4246d673a9dc5683829062612ab19b1daf9b2e3b18d81aee0fc624f8ae39dbc82f03aab5935bbd7cefef8f2576348822ae10cd220a18bccb8af697a772d393936c1ab226", 0x54}, {&(0x7f0000001000)="fa0b7c33c11acc8fa00be767b329dba2f70ea51048c056044915c5922f1063190cb23231382db3d63d9a9a8235ffab7cc6c406c229684db8e28affc1443dc42d7b5f8d6bdc47d79661ab8f50430c153f0be8e00f88f2ac6b636b597c81a4f06809a4178a39b8bef8d295c0cf8226f445e80dc7a89e4502537901aa30f1ca5d84516635ef6574fcedef2ca31885f70243025a1d46213ac4f902ee6cd83dd70bd440e42cc417e6cde7f7acd84e8f0931af09", 0xb1}, {&(0x7f00000010c0)="51b9d99a4ec3b4b94ce31c3f22d2290b23a86c7d6089102d6be1bfd1f3e17289c5ba85dc33154c1ea2995785faf8b78c363e8f04a3e4e0ae8c94b3dc5a09bb26fd8c4188cc1d0cfbacbd584842dc8283c5039cc73e62218e456f2d66148632c26e5ae3488491f079498d9dc0df213f4930f4d750171fc82e72d007bd747b22d308a04224bbf817adbe9df1403a0f0c68a754d93f816ea542149b7ab7", 0x9c}, {&(0x7f0000001180)="ec2902103a6c52af1e8704e9cb89bb2af13e065dc99d1467bba79ed2eeaaca91daca518aa5599306124007572a45fef3be260b5340887a16d73e94f1a7be32c5aac20a016e3f0f3a6698faf06c42d4e16bb973ff770cf3ac48fe19664913352170384254518550c02b0d5fdd00ac63bf09d19408d5781771e9f6af4ea9a1e3c0c752a7fbd86b74a8564a259458cac8bf90fc472da857", 0x96}, {&(0x7f0000001240)="55fc2ae4a5d68276a2f7647a95e601537a3321196733f22425e246969948a81274ddd9223993dcd06242fb6c0a8538943721c5b0e9a5e894ed20f601f71fbf2b9122a88b", 0x44}], 0x5, 0x0, 0x0, 0x40}}, {{&(0x7f0000001300)=@file={0x1, './file1/file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001380)="ccc53ab7d659bdca31a7b4db7ae76dac9c21ccdce34c74c3a7435706f692b04653ba634763a7e1da2fcb73b1950ba6df63a696cb0ab7dea1dcfbca087e28c83ff3163b12eb831eef4cc11c2674c436ca883c5a1402c16d074b9da1f29aa16319ce5f7e72ae3afb5523e36a5e66de62e265702decef8270ed2ac05b28f73b27e64620435202a5c50e730b5e4fd4e782d7224863b354339f10d6d3253c4e94ea050f8d2e4e4d6897b2e70fe1cac1412f97c433db1c61d16ac8d19a995c6fdf5b276e35915cace32a4538cf43deff7c955a4e02f5", 0xd3}], 0x1, 0x0, 0x0, 0x840}}, {{&(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001540)}, {&(0x7f0000001580)="62c5e9a7a38487327c76876d73835fc9551274aae88d688908d48bc5f582dfc772f7101f9b994db46cb8774226cfce2b663b094a60faf669b1b2ea3f17", 0x3d}, {&(0x7f00000015c0)="03f0e42387031978fc6789e522c6a7911967d3c82b59c4b0046a4aa3e3c057a0d4d8032cbe2dfbb4687000b445a470ca51f58ebaec7d9e37c7a402d40db5c9ece7835c79c3b67f152270bc2f7c764a2017ccbfdd2c3a7f058aacb39c94bbed59614aa92ceac30131326aa21470fdeef986f7a5fbf2d1d581962f3ebdd4fa3f7525293ebaab6b9453c954c9384d22430c32f483aae4a0ea42d3dcb1c165abe79a43f03aac8f8e0542a1d8e6d5f4accb37f8a4433abddfb52af1a774a72bd09e71fdc90a50be8152ec2af57c1b", 0xcc}], 0x3, &(0x7f0000001700)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18d6e2495882cd35de34e2c8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2], 0x70, 0x20}}, {{&(0x7f0000001780)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001840)="2699c7a04f1224e0191a2fe3f4e1a73ca8871bc14a02806df83bce563310c38f1670e9791600674442dd28e8ff20bd79ef86cf93a3c54a2f7834a46fc063eccf5ac1fae4f5a938ec4b4c5ceb4cb627f5c7c480be3e3a2d55c428d9d58fa46eae2ba0d58fe671c77532c2153f7ba7d543fb9c37f4956fe71c8601e48018aae71ad2504e80db", 0x85}, {&(0x7f0000006300)="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", 0x1000}, {&(0x7f0000001900)="c57c3b2ceb8da0517a7c56b0507b84ab526ed053452068", 0x17}, {&(0x7f00000019c0)="a6ba565c9739126b906bde9904a7f5a65f39a002be47facd4101935dc3802e0322ad07d8197eddaafbfe23204e97dcb36300db1eaf1ad997e3043e330994968ffef8835bbd475016df0ee41bb9a6f13308aa3c801afdd2f0e6b82811a23fb76750f9c6009cbdb6edeaee5199af800d3b3c544bdea96166f5336c91138bc1913ba13acc213a7982e9d06e3aaf509eb746", 0x90}, {&(0x7f0000001a80)="9e337a7c2f99d0088064ab3df5", 0xd}], 0x5, &(0x7f0000001b00)=ANY=[@ANYBLOB="240000000100180001007a00", @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x24, 0x4040000}}], 0x6, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000005c0)={0x1}) 2.339795565s ago: executing program 7 (id=7749): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_io_uring_setup(0x4fff, &(0x7f00000000c0)={0x0, 0x6e62, 0x100, 0x2, 0x199}, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) dup(0xffffffffffffffff) (async) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40011) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000836000/0x1000)=nil, 0x1000, 0xa) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ced000/0x4000)=nil) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ced000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3454, &(0x7f0000000340)={0x0, 0x0, 0x8000, 0x0, 0xa7}) (async) r4 = io_uring_setup(0x3454, &(0x7f0000000340)={0x0, 0x0, 0x8000, 0x0, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f00000001c0)=0x7f, &(0x7f0000000300)=0xa) (async) migrate_pages(0x0, 0x3, &(0x7f00000001c0)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x3, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x3, r1}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 2.240695272s ago: executing program 0 (id=7750): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r3 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r3}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xdf59}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000000800), 0x800, 0x0) 1.945426988s ago: executing program 2 (id=7751): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) fcntl$setlease(r0, 0x400, 0x2) memfd_create(&(0x7f0000000000)=':}\x00', 0xb795b0f33e38be83) 1.844857239s ago: executing program 2 (id=7752): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x7, 0x31d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4004, @fd_index, 0xf, &(0x7f0000000bc0), 0x0, 0x2}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0}, 0x810) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0x98}}, 0x8000000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f00000005c0)={0x40, 0x14, 0x6, "a554764d64e2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x7, 0x31d}, &(0x7f00000001c0), &(0x7f0000000300)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4004, @fd_index, 0xf, &(0x7f0000000bc0), 0x0, 0x2}) (async) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0}, 0x810) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0x98}}, 0x8000000) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f00000005c0)={0x40, 0x14, 0x6, "a554764d64e2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 1.441784625s ago: executing program 2 (id=7753): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdfff800400468004000800dce8a7bd2872087f7547d687cea778d6f508fa0fe978ad376e9d865183187e3dc2c73629e2c838f9f0baf7187bae91fe64a5296bd6a61f2f7e00"/94], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="e4bd9dd29bc6a30e7b0039b6622f6b2467f17fc7d52a61e1ddda34e1d18c63f037bd3ac0cbad5fc38ebc8ea06f4dfead8a5c0ceae4ae162d16276c08a8515366a07b9c8a4e398610ce1d9562e1cd7a7270e2558e12d18711fb1d28f8107a59a9d2c2c9f5b5f4f265251893c61c499dd19c42a5efa06499", 0x77}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.252394876s ago: executing program 2 (id=7754): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$key(0xf, 0x3, 0x2) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 64) r1 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in6=@local, 0x4e22, 0x7f, 0x4e20, 0x2, 0xa, 0xa0, 0x80, 0x37, 0x0, r5}, {0x9, 0x10001, 0x3fe, 0x5, 0x9, 0x7, 0x8000000000000000, 0xf062}, {0xa1, 0x8, 0x2, 0x7ff}, 0x1, 0x6e6bb1, 0x1, 0x1, 0x1, 0x3}, {{@in6=@mcast1, 0x4d5, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3500, 0x2, 0x3, 0xa, 0xfffff001, 0xcc9, 0x9}}, 0xe4) (async, rerun: 64) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) (async, rerun: 64) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 1.108743231s ago: executing program 2 (id=7755): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000c0413a4f89785292ac544d441d87b87bc9bb5dea35c93cea56bc995299c671cd5c2d901d19a78ab4487a804b1741c3bd7051fed038077f836ffe696956ef0473cf75451f2b61872f988e39c22c67bb8a58005af4a0aba17b152b08229d97556a9f7dce006cdfb2d2a15b47ed9495e1ca0048f9aae1f3fbca78485f86c489c2a55062bac873f078857f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00008bc6000200", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r2, &(0x7f00000001c0)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r2, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240), 0x8) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0x8000}, 0xb) writev(r1, &(0x7f0000000900)=[{&(0x7f00000002c0)="c9780c04b7352ad5eec3fbb9f82520cc7d0d674a4212c18d51fc41e0ce64c35bdb84b48cc1e38f78f897c840315de459fab7473a2c7780ce315dfc4b768d038ddb97a770415f8196629bd71629c7fbc3d71238424c25d6dffe15c2ed3a600f003f7d64b46a724a49c4c3457d9f8d54f1e75ed730bce7c45cd0b9f18d346a0fcd44744f47dba91f7fc83687a0edacbcbdb20c739029a1bfaf0a580d50aa41f1fb35cdd7eb98a6", 0xa6}, {&(0x7f0000000080)="c45bde98b0610581c8285352bdf62453fe34e4b28d3627cad3b6fe51a439ec7f0fb66a0683a7c73bfd", 0x29}, {&(0x7f0000000380)="7e33058bab0c96c93e4bbf4576d8773f94b94ed85cb65fc3fd9562cb4dc24d7fb821e6710511bc64a1a15dcaed5fcea9618d1f29a55341bd4eb63db308cf2144b88510537100d5bf0d3c436eb4211e280ae8c5e1f688efe8d14a9504d398cf1e2635778075bd697fd586fabf4438e472fefa229abbadc2ad23762e", 0x7b}, {&(0x7f0000000400)="35f5019a0ca0039a24f2f44d6328116f76f72d4bd09aa78d130e830e28edff63dad19d218f8480ee9689a3b270d6ed29295b256043f058f4f9827f259cdff6f8bccbb17baa26f1b98c34f3f35d0885036574985cbb15b4088e7dfb21bccde858d08b990a96d66e70e3aab94fbb164d542d0db800633df3a0f1d204b88bd8fd16da9a6aa2b82a59bc84166e58d443db734d97c4afaac2d791d1c212ae2e5d5dd9ab8d6614856f49a6defd48de70459e16dc6e6355025d8319bc0bf95d2b25189039061142d1d04e474c844961f2dc85acb2593e415450f3715b85fff1fc293a2240cb14446154367744cf91d9ec", 0xed}, {0x0}, {&(0x7f0000000600)="98edbaa6685e397c26b6ca1b1f13b56af6a9e5acb80d357d26e1e448023e079e2633e42a66649fa95f28318d44cdff5d893b99d1be377202b161d484621cbd0b953b4265f4a539dc1d44d34505c2369cfd07a633566bbe060666f5354e8be1fa09833f0d888ef7b1f19e23ce580d85de0596755bb4831f5500ae3f1df3353ded9394a5b269cb760d6cf946a8f2a43d15660dc7d5b98dcc977e5be11ca3e0e76ec06d63b3c3640cdb112dda253b14da20cf983a9b7bab7cc5164671e3a2165d43e009c5c91d69ef5106b64267a7201860059f84d77b11d347db8090b718a41c2f49ae6162", 0xe4}, {&(0x7f0000000700)="83ab8ab590a5a094b034f363e2e5c1279c6c958849e12e5599af2cbdb066a4f357e7dbffea8e4c4f3ac743a709627fab8daa336fca7f5c06555bc9ae9d38910a4c57c04b86002d97c3233ca23cffa94012f6f6ece03706a4902e4c4d48ff1c954bad3fc8e909d26563ea928320d53a444fb98ca7284863454f580801045f7b834e400d7738061fda29468dcda1ff", 0x8e}, {&(0x7f00000007c0)="644adc6422a900f73a8b956758debd4195cbc3837e486bb53263267f9e849a3b27901996da7ce5e01bf90568a660c5892c268a43584ba8ad5e17b83da1a43365465a7594391a44b189ef094f07ae8d02fa4b73c52a07bb0a1748de8c6d9207ca707931662f001da552535d525fdaacbc29fd02d6e4d8a2dc6f8642a2168296c75c36ba29672b4b3af6820be74e3b6076e00466050096fb50dc6b213aa054d0d7fc2ef4", 0xa3}, {&(0x7f0000000880)}, {&(0x7f0000000880)="ec4ee2ef8031d0f80107238fbaac323798c28935c280ca506dbbc5", 0x1b}], 0xa) r3 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x800e, 0xfff, 0x2, r4}, &(0x7f0000000200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x18, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x0, 0x3a}, &(0x7f0000000200)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r5, 0x6, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) socket$nl_route(0x10, 0x3, 0x0) 1.061033709s ago: executing program 5 (id=7756): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x8, 0x8, 0x6, 0x10, 0x8001, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x24, 0x2, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7ffd, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010002080000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08009f00060000000800a120000000000800a000f9ffffff08002600b409"], 0x3c}}, 0x4000084) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getresuid(&(0x7f0000003fc0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 1.059320772s ago: executing program 0 (id=7766): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 926.556641ms ago: executing program 5 (id=7757): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53420b4648c", 0x14}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = dup(0xffffffffffffffff) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, '[\xfe\xa8\xf0NGaX=\x00m\xe8\x8a\xaaJ\x05{~\xc1\xe4\b\xbd\x8d\xce\xa5)Wi~\xe9\x11\xf9\x8dM\x96\x01\x00\x00\x00\x00\x00\x00\x80\x0f\x8d@\x7f\xc8\x1cI\xe4\xb2J\x17\xdf\xf8\xff\x85\x9c\x8d\xfa\x85\xf5W\x9c\'/\xa5\xa0\x90G\x1a\x86\x88\x8e3Qb\b', 0x3a, '(&%', 0x3a, './file0', 0x3a, [0x50]}, 0x7a) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') 864.750398ms ago: executing program 5 (id=7758): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 566.412442ms ago: executing program 5 (id=7759): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x0, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x30) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r7, 0x402, 0x40000029) fcntl$notify(r6, 0x402, 0x1c) open(&(0x7f0000000180)='./file1\x00', 0x143b82, 0xd) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random='|D@\x00', @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) socket$inet(0xa, 0x801, 0x84) 149.966598ms ago: executing program 2 (id=7760): syz_open_dev$sg(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffe0000000000, 0xfa11, 0xfffffffe}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = io_uring_setup(0x6b4a, &(0x7f00000001c0)={0x0, 0x22c6, 0x4000, 0x0, 0x26c}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, 0x0, 0x21) sched_setattr(r2, &(0x7f0000000000)={0x38, 0x0, 0x1000003c, 0xe, 0x2, 0x2, 0x3fc0000000000, 0x3, 0x9, 0x8}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xb, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0x8b}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x60600) poll(&(0x7f00000000c0)=[{r5, 0x2187}], 0x1, 0x3ff) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) unshare(0x20040600) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x0, 0x0, 0x148, 0xf0, 0x148, 0x29c, 0x240, 0x240, 0x29c, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}, @common=@unspec=@connmark={{0x2c}, {0xfffffffc, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x3, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x188, 0x1ac, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x8, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@unspec=@state={{0x24}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x0, 0x3ff}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x38c) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000004900010026bd7000000000000a000000be0b14757b2a8b65414d96e2c9cdd3ae46dd5ec010a92b28ec128ee98ff7260e8b0b95e14f7885ea961d48a87bd034fffe7eb4f57765470887412aa9ca99dadcb5f169402b62f5686377a5b99c6f18f6618c047a3f371d2c492278f7c1a861fbacd3c869f627b2a283d75d9fbf8be8", @ANYRES32=r8, @ANYBLOB="00000000080002000400000014000100fc00"/30], 0x38}}, 0x20048000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 0s ago: executing program 6 (id=7761): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1984.092874][ T2079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1984.092901][ T2079] [ 1984.101224][ T2078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1984.407212][ T402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1984.415360][T14025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1984.443924][ T2083] bond0: Unable to set down delay as MII monitoring is disabled [ 1984.467914][ T1364] IPVS: stop unused estimator thread 0... [ 1984.537708][T32748] Bluetooth: hci5: command tx timeout [ 1984.601952][ T2090] netlink: 'syz.2.7241': attribute type 29 has an invalid length. [ 1984.623637][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1984.642593][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1984.722473][ T1962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1984.745033][ T1962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1984.806189][ T1962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1984.886372][ T1962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1985.096567][ T1962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1985.121804][ T1962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1985.151508][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1985.158709][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1985.248469][ T760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1985.255704][ T760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1985.474422][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1985.482927][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1985.590043][ T1962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1985.637942][ T2132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1985.651811][ T2132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1985.722081][ T1962] veth0_vlan: entered promiscuous mode [ 1985.768654][ T1962] veth1_vlan: entered promiscuous mode [ 1985.804495][ T1962] veth0_macvtap: entered promiscuous mode [ 1985.813027][ T1962] veth1_macvtap: entered promiscuous mode [ 1985.856938][ T1962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1985.877038][ T1962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1985.905560][ T6010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.929086][ T6010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.967392][ T6010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.990740][ T6010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.234578][ T1368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1986.263378][ T1368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1986.352672][ T1368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1986.384849][ T2164] FAULT_INJECTION: forcing a failure. [ 1986.384849][ T2164] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1986.419449][ T2164] CPU: 0 UID: 0 PID: 2164 Comm: syz.2.7251 Tainted: G L syzkaller #0 PREEMPT(full) [ 1986.419479][ T2164] Tainted: [L]=SOFTLOCKUP [ 1986.419488][ T2164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1986.419500][ T2164] Call Trace: [ 1986.419509][ T2164] [ 1986.419518][ T2164] dump_stack_lvl+0xe8/0x150 [ 1986.419549][ T2164] should_fail_ex+0x414/0x560 [ 1986.419585][ T2164] prepare_alloc_pages+0x22b/0x650 [ 1986.419616][ T2164] __alloc_frozen_pages_noprof+0x123/0x370 [ 1986.419644][ T2164] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1986.419686][ T2164] alloc_pages_mpol+0x232/0x4a0 [ 1986.419717][ T2164] alloc_pages_noprof+0xa9/0x190 [ 1986.419742][ T2164] __pmd_alloc+0x3a/0x5d0 [ 1986.419776][ T2164] handle_mm_fault+0xe51/0x32b0 [ 1986.419818][ T2164] ? handle_mm_fault+0xdb/0x32b0 [ 1986.419852][ T2164] ? __pfx_handle_mm_fault+0x10/0x10 [ 1986.419891][ T2164] ? __lock_acquire+0x6b6/0x2cf0 [ 1986.419916][ T2164] ? lock_mm_and_find_vma+0x9c/0x300 [ 1986.419938][ T2164] do_user_addr_fault+0x764/0x1380 [ 1986.419976][ T2164] exc_page_fault+0x71/0xd0 [ 1986.419998][ T2164] asm_exc_page_fault+0x26/0x30 [ 1986.420017][ T2164] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1986.420043][ T2164] Code: c4 10 e9 14 41 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 1986.420073][ T2164] RSP: 0018:ffffc9000d9bf8f8 EFLAGS: 00050202 [ 1986.420091][ T2164] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1986.420105][ T2164] RDX: 0000000000000001 RSI: 0000000080000080 RDI: ffffc9000d9bf9d0 [ 1986.420119][ T2164] RBP: ffffc9000d9bfd08 R08: 0000000000000003 R09: 0000000000000004 [ 1986.420133][ T2164] R10: dffffc0000000000 R11: fffff52001b37f3a R12: ffffc9000d9bf9a0 [ 1986.420149][ T2164] R13: 0000000080000080 R14: ffffc9000d9bf9d0 R15: 0000000080000080 [ 1986.420182][ T2164] _copy_from_user+0x7a/0xb0 [ 1986.420207][ T2164] do_tcp_getsockopt+0x1dd/0x2680 [ 1986.420248][ T2164] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1986.420277][ T2164] ? sock_recv_errqueue+0x470/0x510 [ 1986.420308][ T2164] ? __lock_acquire+0x6b6/0x2cf0 [ 1986.420332][ T2164] ? _parse_integer_limit+0x1ae/0x1f0 [ 1986.420369][ T2164] ? aa_label_sk_perm+0x4c4/0x610 [ 1986.420395][ T2164] ? kstrtoull+0x12f/0x1d0 [ 1986.420426][ T2164] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1986.420450][ T2164] ? get_pid_task+0x20/0x1f0 [ 1986.420477][ T2164] ? get_pid_task+0x20/0x1f0 [ 1986.420508][ T2164] ? get_pid_task+0x20/0x1f0 [ 1986.420531][ T2164] ? get_pid_task+0x20/0x1f0 [ 1986.420553][ T2164] ? get_pid_task+0x20/0x1f0 [ 1986.420590][ T2164] ? aa_sk_perm+0x15f/0x920 [ 1986.420615][ T2164] ? aa_sk_perm+0x7ee/0x920 [ 1986.420643][ T2164] ? __pfx_aa_sk_perm+0x10/0x10 [ 1986.420664][ T2164] ? handle_mm_fault+0xdb/0x32b0 [ 1986.420698][ T2164] tcp_getsockopt+0x83/0x130 [ 1986.420715][ T2164] ? sock_recv_errqueue+0x470/0x510 [ 1986.420744][ T2164] ? sock_recv_errqueue+0x470/0x510 [ 1986.420772][ T2164] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1986.420804][ T2164] do_sock_getsockopt+0x2b4/0x3d0 [ 1986.420831][ T2164] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1986.420858][ T2164] ? ksys_write+0x1e1/0x250 [ 1986.420883][ T2164] __ia32_sys_getsockopt+0x1a5/0x250 [ 1986.420916][ T2164] __do_fast_syscall_32+0x1dc/0x560 [ 1986.420938][ T2164] ? lockdep_hardirqs_on+0x7b/0x110 [ 1986.420956][ T2164] ? do_fast_syscall_32+0x34/0x80 [ 1986.420978][ T2164] ? irqentry_exit+0x10f/0x660 [ 1986.421001][ T2164] do_fast_syscall_32+0x34/0x80 [ 1986.421023][ T2164] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1986.421046][ T2164] RIP: 0023:0xf70cd539 [ 1986.421063][ T2164] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1986.421080][ T2164] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1986.421099][ T2164] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 1986.421112][ T2164] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000080000080 [ 1986.421125][ T2164] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1986.421137][ T2164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1986.421149][ T2164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1986.421180][ T2164] [ 1986.443765][ T1368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1986.643853][ T5881] net_ratelimit: 2 callbacks suppressed [ 1986.643870][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1987.053451][T14286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1987.211192][ T2172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1987.322410][ T2172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1987.368926][ T2172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1987.401865][ T2172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1987.716124][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1987.903417][ T5881] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1988.053408][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 1988.064361][ T5881] usb 6-1: config 251 has an invalid interface number: 2 but max is 0 [ 1988.072543][ T5881] usb 6-1: config 251 has no interface number 0 [ 1988.142126][ T5881] usb 6-1: config 251 interface 2 has no altsetting 0 [ 1988.169624][ T5881] usb 6-1: New USB device found, idVendor=09fb, idProduct=602d, bcdDevice=92.76 [ 1988.187860][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.218073][ T5881] usb 6-1: Product: syz [ 1988.225571][T14286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1988.234422][ T5881] usb 6-1: Manufacturer: syz [ 1988.239310][ T5881] usb 6-1: SerialNumber: syz [ 1988.764156][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1988.913609][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.344625][ T2937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.428578][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1989.438740][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.641860][ T30] audit: type=1326 audit(1766764831.717:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2235 comm="syz.7.7265" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad539 code=0x0 [ 1989.803548][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.849183][ T2238] netlink: 'syz.6.7262': attribute type 10 has an invalid length. [ 1989.864969][ T2238] veth0_vlan: entered allmulticast mode [ 1989.882306][ T2238] veth0_vlan: left promiscuous mode [ 1989.890482][ T2238] veth0_vlan: entered promiscuous mode [ 1989.908316][ T2238] team0: Device veth0_vlan failed to register rx_handler [ 1990.208161][ T2245] input: syz1 as /devices/virtual/input/input115 [ 1990.473629][ T2937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1990.847456][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1991.884384][ T8516] net_ratelimit: 1 callbacks suppressed [ 1991.884415][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1991.954445][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.232973][ T2245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7267'. [ 1992.607859][ T2280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1992.618015][ T2280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1992.649974][ T5881] ftdi_sio 6-1:251.2: FTDI USB Serial Device converter detected [ 1992.675893][ T5881] ftdi_sio ttyUSB0: unknown device type: 0x9276 [ 1992.702541][ T5881] usb 6-1: USB disconnect, device number 13 [ 1992.723963][ T2937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.733055][ T5881] ftdi_sio 6-1:251.2: device disconnected [ 1992.913536][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.964927][ T2287] netlink: 'syz.5.7279': attribute type 10 has an invalid length. [ 1993.035392][ T2287] team0: Device veth0_macvtap failed to register rx_handler [ 1993.300297][ T2245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7267'. [ 1993.315253][ T2301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1993.590735][ T2307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1993.605252][ T2307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1993.873924][T14286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1993.958275][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1994.106473][ T2311] ptrace attach of "./syz-executor exec"[1962] was attempted by "./syz-executor exec"[2311] [ 1994.145186][ T2311] loop6: detected capacity change from 0 to 7 [ 1994.324569][ T2317] input: syz1 as /devices/virtual/input/input116 [ 1994.457301][ T2312] loop6: detected capacity change from 7 to 0 [ 1994.457322][ T2311] ldm_validate_partition_table(): Disk read failed. [ 1994.471046][ T2311] Dev loop6: unable to read RDB block 0 [ 1994.509215][ T2311] loop6: unable to read partition table [ 1994.589060][ T2311] loop6: partition table beyond EOD, truncated [ 1994.597565][ T2311] loop_reread_partitions: partition scan of loop6 (SJ_+]֋ S'(J^Z (633)eeDϫ?Ƣ4+) failed (rc=-5) [ 1994.861546][ T2328] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7293'. [ 1994.994045][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1995.002186][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1995.043707][T14286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1995.095295][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1995.153479][ T2329] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7293'. [ 1995.167663][ T30] audit: type=1326 audit(1766764837.237:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2331 comm="syz.5.7294" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed539 code=0x0 [ 1995.304498][ T2337] tipc: Enabling of bearer rejected, already enabled [ 1995.623760][ T913] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 1995.825018][ T913] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1995.835738][ T913] usb 7-1: config 0 has no interface number 0 [ 1995.841967][ T913] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1995.852860][ T913] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1995.862457][ T913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.873700][ T913] usb 7-1: Product: syz [ 1995.877966][ T913] usb 7-1: Manufacturer: syz [ 1995.882770][ T913] usb 7-1: SerialNumber: syz [ 1995.904508][ T913] usb 7-1: config 0 descriptor?? [ 1996.560939][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053799000: rx timeout, send abort [ 1997.061010][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053799400: rx timeout, send abort [ 1997.069383][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053799000: abort rx timeout. Force session deactivation [ 1997.080131][ T5881] net_ratelimit: 2 callbacks suppressed [ 1997.080146][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1997.146220][ T913] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1997.185430][ T913] usb 7-1: USB disconnect, device number 77 [ 1997.323669][ T1368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1997.345597][ T2376] fuse: blksize only supported for fuseblk [ 1997.461774][ T2379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.471232][ T2379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.569298][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053799400: abort rx timeout. Force session deactivation [ 1997.993415][ T5881] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1998.036049][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1998.072013][ T2393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.083029][ T2393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.107009][ T2393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.116359][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1998.129970][ T2393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.138593][ T5881] usb 7-1: device descriptor read/64, error -71 [ 1998.291461][ T2400] hfs: unable to load iocharset "I#hIars8Ύ wѷ}+[S_. ,s$nFBlbSR,.R]^kRL/J}&o9b6\wm$xCdeOjocڅ`1҆m#CX^ݾO;;󣫭Xp!+ƇK=A a2HKA rp" [ 1998.323931][ T2398] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20000 [ 1998.394844][ T5881] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1998.453759][ T3664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1998.535015][ T5881] usb 7-1: device descriptor read/64, error -71 [ 1998.663764][ T5881] usb usb7-port1: attempt power cycle [ 1998.826568][ T2419] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7314'. [ 1999.050334][ T5881] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1999.094066][ T5881] usb 7-1: device descriptor read/8, error -71 [ 1999.154264][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1999.353328][ T5881] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1999.394263][ T5881] usb 7-1: device descriptor read/8, error -71 [ 1999.505829][ T5881] usb usb7-port1: unable to enumerate USB device [ 1999.564378][ T1368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2000.110723][ T2434] syzkaller0: entered promiscuous mode [ 2000.128575][ T2434] syzkaller0: entered allmulticast mode [ 2000.196746][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2000.700391][ T2454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7320'. [ 2000.738124][T14286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2000.761723][ T2456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7321'. [ 2000.771404][ T2456] tc_dump_action: action bad kind [ 2001.075327][T27642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2001.449676][ T2473] syzkaller0: entered promiscuous mode [ 2001.458307][ T2473] syzkaller0: entered allmulticast mode [ 2001.618443][ T2480] : renamed from bond_slave_0 (while UP) [ 2001.735212][ T2484] netlink: 11 bytes leftover after parsing attributes in process `syz.7.7328'. [ 2002.273805][ T360] net_ratelimit: 2 callbacks suppressed [ 2002.273823][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.013652][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.323729][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.583836][ T2527] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7335'. [ 2003.818649][ T2537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7338'. [ 2003.831359][ T2537] netlink: 'syz.2.7338': attribute type 18 has an invalid length. [ 2004.116440][T27642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.175874][ T3664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.354782][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.504798][T27642] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 2004.601547][ T2550] FAULT_INJECTION: forcing a failure. [ 2004.601547][ T2550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2004.616438][ T2550] CPU: 1 UID: 0 PID: 2550 Comm: syz.7.7342 Tainted: G L syzkaller #0 PREEMPT(full) [ 2004.616466][ T2550] Tainted: [L]=SOFTLOCKUP [ 2004.616471][ T2550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2004.616477][ T2550] Call Trace: [ 2004.616482][ T2550] [ 2004.616487][ T2550] dump_stack_lvl+0xe8/0x150 [ 2004.616505][ T2550] should_fail_ex+0x414/0x560 [ 2004.616524][ T2550] _copy_to_user+0x31/0xb0 [ 2004.616537][ T2550] simple_read_from_buffer+0xe1/0x170 [ 2004.616553][ T2550] proc_fail_nth_read+0x1b3/0x220 [ 2004.616566][ T2550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2004.616579][ T2550] ? rw_verify_area+0x2a6/0x4d0 [ 2004.616594][ T2550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2004.616606][ T2550] vfs_read+0x200/0xa30 [ 2004.616616][ T2550] ? handle_mm_fault+0xdb/0x32b0 [ 2004.616632][ T2550] ? __pfx_vfs_read+0x10/0x10 [ 2004.616642][ T2550] ? tcp_getsockopt+0x83/0x130 [ 2004.616651][ T2550] ? sock_recv_errqueue+0x470/0x510 [ 2004.616668][ T2550] ? sock_recv_errqueue+0x470/0x510 [ 2004.616682][ T2550] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2004.616698][ T2550] ? do_sock_getsockopt+0x2b4/0x3d0 [ 2004.616716][ T2550] ksys_read+0x145/0x250 [ 2004.616726][ T2550] ? __pfx_ksys_read+0x10/0x10 [ 2004.616736][ T2550] ? __ia32_sys_getsockopt+0x1a5/0x250 [ 2004.616752][ T2550] __do_fast_syscall_32+0x1dc/0x560 [ 2004.616764][ T2550] ? lockdep_hardirqs_on+0x7b/0x110 [ 2004.616773][ T2550] ? do_fast_syscall_32+0x34/0x80 [ 2004.616784][ T2550] ? irqentry_exit+0x10f/0x660 [ 2004.616796][ T2550] do_fast_syscall_32+0x34/0x80 [ 2004.616807][ T2550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2004.616820][ T2550] RIP: 0023:0xf70ad539 [ 2004.616830][ T2550] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2004.616839][ T2550] RSP: 002b:00000000f549d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2004.616851][ T2550] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d620 [ 2004.616858][ T2550] RDX: 000000000000000f RSI: 00000000f7446ff4 RDI: 0000000000000000 [ 2004.616865][ T2550] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2004.616871][ T2550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2004.616877][ T2550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2004.616892][ T2550] [ 2004.861254][T27642] usb 6-1: device descriptor read/64, error -71 [ 2004.867806][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.966366][ T2554] usb usb8: usbfs: process 2554 (syz.2.7344) did not claim interface 0 before use [ 2005.103375][T27642] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 2005.222889][ T2562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2005.233401][T27642] usb 6-1: device descriptor read/64, error -71 [ 2005.247465][ T2562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2005.343696][T27642] usb usb6-port1: attempt power cycle [ 2005.405527][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2005.425506][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2005.683450][T27642] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 2005.703798][T27642] usb 6-1: device descriptor read/8, error -71 [ 2005.805459][ T2575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2005.817040][ T2575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2005.943351][T27642] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 2005.964200][T27642] usb 6-1: device descriptor read/8, error -71 [ 2006.073694][T27642] usb usb6-port1: unable to enumerate USB device [ 2006.430912][ T2580] nvme_fabrics: missing parameter 'transport=%s' [ 2006.443848][ T2580] nvme_fabrics: missing parameter 'nqn=%s' [ 2006.445702][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.473935][ T8516] net_ratelimit: 2 callbacks suppressed [ 2007.473954][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.663695][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.733558][T27642] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 2007.764472][ T913] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2007.893683][T27642] usb 7-1: Using ep0 maxpacket: 32 [ 2007.900460][T27642] usb 7-1: config 9 interface 0 has no altsetting 0 [ 2007.910782][T27642] usb 7-1: New USB device found, idVendor=0471, idProduct=2093, bcdDevice=e6.1a [ 2007.919893][ T913] usb 6-1: Using ep0 maxpacket: 8 [ 2007.925105][T27642] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.933079][T27642] usb 7-1: Product: syz [ 2007.937406][T27642] usb 7-1: Manufacturer: syz [ 2007.942042][T27642] usb 7-1: SerialNumber: syz [ 2007.947860][ T913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.961672][ T913] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2007.971092][ T913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.979245][ T913] usb 6-1: Product: syz [ 2007.986189][ T913] usb 6-1: Manufacturer: syz [ 2007.990821][ T913] usb 6-1: SerialNumber: syz [ 2007.998679][ T913] usb 6-1: config 0 descriptor?? [ 2008.005947][ T913] cdc_phonet 6-1:0.0: skipping garbage [ 2008.011416][ T913] cdc_phonet 6-1:0.0: invalid descriptor buffer length [ 2008.018719][ T913] cdc_phonet 6-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2008.196103][T27642] usb 7-1: USB disconnect, device number 82 [ 2008.206036][ T8516] usb 6-1: USB disconnect, device number 18 [ 2008.271021][ T2607] netlink: 11 bytes leftover after parsing attributes in process `syz.2.7357'. [ 2008.367546][ T2611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.391839][ T2611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.513701][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2008.775048][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2008.805223][ T25] blk_print_req_error: 10 callbacks suppressed [ 2008.805235][ T25] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 2008.895389][ T2624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.939437][ T2624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.956613][ T2618] input: syz1 as /devices/virtual/input/input117 [ 2009.426359][ T2640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2009.457260][ T2640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2009.557938][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.680597][ T2647] netlink: 'syz.5.7365': attribute type 12 has an invalid length. [ 2009.690731][ T2648] tipc: Enabled bearer , priority 0 [ 2009.707332][ T2644] syzkaller0: entered promiscuous mode [ 2009.726039][ T2644] syzkaller0: entered allmulticast mode [ 2009.749530][ T2644] tipc: Resetting bearer [ 2009.845641][ T2643] tipc: Resetting bearer [ 2009.901563][ T2643] tipc: Disabling bearer [ 2009.921525][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2010.194104][T27642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2010.279966][ T2654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2010.294644][ T2654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2010.599468][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2010.633336][ T8516] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2010.793306][ T8516] usb 6-1: Using ep0 maxpacket: 8 [ 2010.815599][ T8516] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2010.837956][ T8516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.859362][ T8516] usb 6-1: Product: syz [ 2010.869145][ T8516] usb 6-1: Manufacturer: syz [ 2010.881856][ T8516] usb 6-1: SerialNumber: syz [ 2010.903352][ T8516] usb 6-1: config 0 descriptor?? [ 2011.033452][ T3664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.154834][ T8516] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2011.357033][ T8516] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2011.439722][T18916] usb 6-1: USB disconnect, device number 19 [ 2011.633491][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.711413][ T2682] vivid-007: ================= START STATUS ================= [ 2011.720996][ T2682] vivid-007: Enable Output Cropping: true [ 2011.728782][ T2682] vivid-007: Enable Output Composing: true [ 2011.734756][ T2682] vivid-007: Enable Output Scaler: true [ 2011.740346][ T2682] vivid-007: Tx RGB Quantization Range: Automatic [ 2011.746933][ T2682] vivid-007: Transmit Mode: HDMI [ 2011.751942][ T2682] vivid-007: Hotplug Present: 0x00000000 [ 2011.757825][ T2682] vivid-007: RxSense Present: 0x00000000 [ 2011.763757][ T2682] vivid-007: EDID Present: 0x00000000 [ 2011.769178][ T2682] vivid-007: ================== END STATUS ================== [ 2011.873872][T18916] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2012.033663][T18916] usb 6-1: Using ep0 maxpacket: 16 [ 2012.039699][T18916] usb 6-1: no configurations [ 2012.050389][T18916] usb 6-1: can't read configurations, error -22 [ 2012.194079][T18916] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2012.427932][T18916] usb 6-1: Using ep0 maxpacket: 16 [ 2012.437529][T18916] usb 6-1: no configurations [ 2012.447822][T18916] usb 6-1: can't read configurations, error -22 [ 2012.466971][T18916] usb usb6-port1: attempt power cycle [ 2012.675168][ T8516] net_ratelimit: 1 callbacks suppressed [ 2012.675187][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2012.843736][T18916] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2012.904885][T18916] usb 6-1: Using ep0 maxpacket: 16 [ 2012.924390][T18916] usb 6-1: no configurations [ 2012.938832][ T2705] could not allocate digest TFM handle ghash-ce [ 2012.941198][T18916] usb 6-1: can't read configurations, error -22 [ 2013.032070][ T2722] loop6: detected capacity change from 0 to 4095 [ 2013.119942][ T2723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7379'. [ 2013.120408][T18916] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2013.164780][ T2723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7379'. [ 2013.214244][T18916] usb 6-1: Using ep0 maxpacket: 16 [ 2013.225630][ T2722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7379'. [ 2013.243605][T27642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.284045][T18916] usb 6-1: no configurations [ 2013.293609][T14286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.302547][T18916] usb 6-1: can't read configurations, error -22 [ 2013.326757][T18916] usb usb6-port1: unable to enumerate USB device [ 2013.715647][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.096438][ T2745] ip6gre1: entered allmulticast mode [ 2014.281515][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.298677][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.307200][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.316439][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.395115][ T1368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.761416][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2015.953459][T18916] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2016.139277][T18916] usb 6-1: Using ep0 maxpacket: 8 [ 2016.167374][T18916] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2016.201937][T18916] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2016.248972][T18916] usb 6-1: string descriptor 0 read error: -22 [ 2016.257462][T18916] usb 6-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.40 [ 2016.301271][T18916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.535411][T18916] usbhid 6-1:1.0: can't add hid device: -71 [ 2016.545124][T18916] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 2016.573206][T18916] usb 6-1: USB disconnect, device number 24 [ 2016.627225][ T2802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7399'. [ 2016.719618][ T2798] wg2: entered promiscuous mode [ 2016.724790][ T2798] wg2: entered allmulticast mode [ 2017.480672][ T2854] vlan3: entered promiscuous mode [ 2017.501677][ T2854] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 2017.527903][ T2854] vlan3: entered allmulticast mode [ 2017.543065][ T2854] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 2017.617866][ T2860] veth1_to_bond: entered allmulticast mode [ 2017.774113][ T760] net_ratelimit: 6 callbacks suppressed [ 2017.774126][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2017.889235][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2017.936952][ T2867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2017.958243][ T2867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.441410][ T2860] veth1_to_bond: left allmulticast mode [ 2018.903536][T14286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2018.913561][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 2018.923795][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2019.313575][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2019.398771][T14286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2019.408102][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2019.420899][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2019.522593][ T2909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2019.545376][ T2909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2019.600354][ T2915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7421'. [ 2019.617156][ T5910] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0 [ 2019.626506][ T2915] syzkaller0: entered promiscuous mode [ 2019.637405][ T5910] hid-generic 0000:0000:0000.005B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2019.941534][ T2920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2019.956598][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2019.976786][ T2920] netlink: 'syz.5.7423': attribute type 41 has an invalid length. [ 2020.056739][ T2920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7423'. [ 2023.073926][ T5910] net_ratelimit: 6 callbacks suppressed [ 2023.073940][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.443597][ T1360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.784045][ T2973] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2023.835324][ T2975] tipc: Resetting bearer [ 2024.113853][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.515165][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.524132][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.535962][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.615357][ T1360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.736292][ T5910] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 2024.852540][ T2995] input: syz1 as /devices/virtual/input/input118 [ 2024.877157][ T3000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.893209][ T3000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.921439][ T3000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.954974][ T3000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.964985][ T5910] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2024.993830][ T5910] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2025.017191][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2025.037460][ T5910] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 2025.058278][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.079330][ T5910] usb 6-1: config 0 descriptor?? [ 2025.164276][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2025.319802][ T2989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.338177][ T2989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2025.378511][ T2989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.393657][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2025.408607][ T2989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2025.753601][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2026.110516][ T5910] usbhid 6-1:0.0: can't add hid device: -71 [ 2026.147454][ T5910] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2026.177975][ T5910] usb 6-1: USB disconnect, device number 25 [ 2026.825267][ T3050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7454'. [ 2026.933077][ T3055] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7454'. [ 2027.823386][ T5910] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2027.898629][ T3065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2027.912752][ T3065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2027.956514][ T3060] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2027.991607][ T5910] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2028.011269][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.022273][ T5910] usb 6-1: config 0 descriptor?? [ 2028.275675][ T5881] net_ratelimit: 4 callbacks suppressed [ 2028.275691][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.434613][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.455052][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.474058][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.482608][ T2159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.507789][ T3078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2028.514724][T18916] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 2028.517058][ T3078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2028.675887][T18916] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2028.685131][T18916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.698645][T18916] usb 7-1: config 0 descriptor?? [ 2028.843167][ T30] audit: type=1326 audit(1766764870.917:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3047 comm="syz.5.7453" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x0 [ 2028.951385][ T5910] usb 6-1: Cannot set autoneg [ 2028.957770][ T5910] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2028.982393][ T5910] usb 6-1: USB disconnect, device number 26 [ 2029.143902][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2029.312268][ T3093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2029.322229][ T3093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2029.323725][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2029.730264][ T3109] input: syz0 as /devices/virtual/input/input119 [ 2029.743526][ T3075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2029.827111][ T3112] syzkaller1: entered promiscuous mode [ 2029.833135][ T3112] syzkaller1: entered allmulticast mode [ 2029.836520][ T3075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.264407][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2030.278898][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2030.287905][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2030.423940][ T3115] veth1_macvtap: left promiscuous mode [ 2030.430550][ T3115] macsec0: entered allmulticast mode [ 2030.479289][ T3115] veth1_macvtap: entered promiscuous mode [ 2030.479351][ T3115] veth1_macvtap: entered allmulticast mode [ 2030.479366][ T3115] macsec0: left allmulticast mode [ 2030.479373][ T3115] veth1_macvtap: left allmulticast mode [ 2032.255909][ T3131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2032.262026][ T3131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2032.269611][ T3131] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2032.284216][ T3131] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2032.302825][ T3141] fuse: Bad value for 'fd' [ 2032.316430][ T3143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7475'. [ 2032.337479][ T3131] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2032.354963][ T3131] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2032.391844][ T3131] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2032.421276][ T3146] fuse: Unknown parameter 'Xr i\\*{Xu[fU:5r {]Cn_e(Ho-\@A`K; p{Mc3s0x0000000000000005' [ 2032.444611][T18916] usb 7-1: Cannot set autoneg [ 2032.475887][T18916] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2032.485248][ T3148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7477'. [ 2032.561429][T18916] usb 7-1: USB disconnect, device number 83 [ 2032.600710][ T3146] fuse: Bad value for 'fd' [ 2032.738521][ T3159] binder: 3151:3159 ioctl c018620c 800002c0 returned -1 [ 2033.553472][ T5881] net_ratelimit: 9 callbacks suppressed [ 2033.553485][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.663363][ T360] usb 7-1: new low-speed USB device number 84 using dummy_hcd [ 2033.694608][ T1368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.751791][ T3171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.790252][ T3173] tun1: tun_chr_ioctl cmd 1074812117 [ 2033.840902][ T3171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.925839][ T360] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2033.950464][ T360] usb 7-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2033.981258][ T360] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2033.999297][ T360] usb 7-1: string descriptor 0 read error: -22 [ 2034.006802][ T360] usb 7-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 2034.027026][ T360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.137590][ T3178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2034.148526][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.157810][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.170594][ T3178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.180943][ T2159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.205031][ T3174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2034.234449][ T3178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2034.277164][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 2034.283370][T32748] Bluetooth: hci1: command 0x0c1a tx timeout [ 2034.354620][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 2034.360851][T32748] Bluetooth: hci5: command 0x0c1a tx timeout [ 2034.605209][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.795721][ T3174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.825969][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2035.047109][ T3170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.062508][ T3170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.635711][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2035.996840][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2036.215849][ T360] usbhid 7-1:1.0: can't add hid device: -71 [ 2036.233368][ T360] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 2036.269455][ T360] usb 7-1: USB disconnect, device number 84 [ 2036.438277][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 2036.444334][T32748] Bluetooth: hci5: command 0x0c1a tx timeout [ 2036.858224][ T2159] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 2037.023720][ T2159] usb 6-1: device descriptor read/64, error -71 [ 2037.293561][ T2159] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2037.317782][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.330083][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.463360][ T2159] usb 6-1: device descriptor read/64, error -71 [ 2037.523339][T18916] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 2037.560376][ T3224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.573951][ T2159] usb usb6-port1: attempt power cycle [ 2037.581306][ T3224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.608024][ T3226] syzkaller0: entered promiscuous mode [ 2037.613633][ T3226] syzkaller0: entered allmulticast mode [ 2037.703362][T18916] usb 7-1: Using ep0 maxpacket: 16 [ 2037.742494][T18916] usb 7-1: config 81 has an invalid interface number: 255 but max is 0 [ 2037.752006][T18916] usb 7-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.765040][T18916] usb 7-1: config 81 has no interface number 0 [ 2037.771230][T18916] usb 7-1: too many endpoints for config 81 interface 255 altsetting 49: 56, using maximum allowed: 30 [ 2037.784137][T18916] usb 7-1: config 81 interface 255 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 2037.799690][T18916] usb 7-1: config 81 interface 255 has no altsetting 0 [ 2037.809114][T18916] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=68.0d [ 2037.822121][T18916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.830515][T18916] usb 7-1: Product: syz [ 2037.835148][T18916] usb 7-1: Manufacturer: syz [ 2037.839756][T18916] usb 7-1: SerialNumber: syz [ 2037.933711][ T2159] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2037.964356][ T2159] usb 6-1: device descriptor read/8, error -71 [ 2038.067885][T18916] usb 7-1: unknown interface protocol 0x36, assuming v1 [ 2038.075442][T18916] usb 7-1: cannot find UAC_HEADER [ 2038.102860][T18916] snd-usb-audio 7-1:81.255: probe with driver snd-usb-audio failed with error -22 [ 2038.120633][T18916] usb 7-1: USB disconnect, device number 85 [ 2038.197015][ T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:81.255/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2038.223868][ T2159] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2038.232353][ T3237] binder: 3236:3237 ioctl c0306201 800002c0 returned -14 [ 2038.247579][ T3239] syz_tun: entered allmulticast mode [ 2038.268801][ T2159] usb 6-1: device descriptor read/8, error -71 [ 2038.282850][ T3236] syz_tun: left allmulticast mode [ 2038.334052][ T3240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7497'. [ 2038.393582][ T2159] usb usb6-port1: unable to enumerate USB device [ 2038.441761][ T3243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.462292][ T3243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.485467][ T3243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.504309][ T3243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.513445][T32748] Bluetooth: hci5: command 0x0c1a tx timeout [ 2038.728154][ T3243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.747717][ T3243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.770667][ T3243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.790986][ T3243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2039.006736][ T8516] net_ratelimit: 11 callbacks suppressed [ 2039.006753][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.273804][ T3252] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7501'. [ 2039.332025][ T3255] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7503'. [ 2039.383825][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.629210][ T3258] autofs4:pid:3258:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.31), cmd(0xc018937e) [ 2039.642438][ T3258] autofs4:pid:3258:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 2039.876105][ T1360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.885755][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.894529][ T2159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.034137][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.258874][ T3278] netlink: 'syz.5.7510': attribute type 16 has an invalid length. [ 2040.269052][ T3278] netlink: 'syz.5.7510': attribute type 17 has an invalid length. [ 2040.278240][ T3278] lo: entered promiscuous mode [ 2040.288063][ T3278] lo: entered allmulticast mode [ 2040.297461][ T3278] tunl0: entered promiscuous mode [ 2040.304205][ T3278] tunl0: entered allmulticast mode [ 2040.314000][ T3278] gre0: entered promiscuous mode [ 2040.320333][ T3278] gre0: entered allmulticast mode [ 2040.329648][ T3278] gretap0: entered promiscuous mode [ 2040.339069][ T3278] gretap0: entered allmulticast mode [ 2040.349033][ T3278] erspan0: entered promiscuous mode [ 2040.359253][ T3278] erspan0: entered allmulticast mode [ 2040.371077][ T3278] ip_vti0: entered promiscuous mode [ 2040.380599][ T3278] ip_vti0: entered allmulticast mode [ 2040.389016][ T3278] ip6_vti0: entered promiscuous mode [ 2040.395579][ T3278] ip6_vti0: entered allmulticast mode [ 2040.402380][ T3278] sit0: entered promiscuous mode [ 2040.408551][ T3278] sit0: entered allmulticast mode [ 2040.415454][ T3278] ip6tnl0: entered promiscuous mode [ 2040.420852][ T3278] ip6tnl0: entered allmulticast mode [ 2040.431225][ T3278] ip6gre0: entered promiscuous mode [ 2040.436848][ T3278] ip6gre0: entered allmulticast mode [ 2040.444946][ T3278] syz_tun: entered promiscuous mode [ 2040.450625][ T3278] syz_tun: entered allmulticast mode [ 2040.458285][ T3278] ip6gretap0: entered promiscuous mode [ 2040.463893][ T3278] ip6gretap0: entered allmulticast mode [ 2040.469804][ T3276] binder: 3275:3276 ioctl c0306201 800002c0 returned -14 [ 2040.480196][ T3278] bridge0: entered promiscuous mode [ 2040.487021][ T3278] bridge0: entered allmulticast mode [ 2040.496186][ T3278] vcan0: entered promiscuous mode [ 2040.501514][ T3278] vcan0: entered allmulticast mode [ 2040.510413][ T3278] bond0: entered promiscuous mode [ 2040.520476][ T3278] bond_slave_0: entered promiscuous mode [ 2040.527734][ T3278] bond_slave_1: entered promiscuous mode [ 2040.535170][ T3278] bond0: entered allmulticast mode [ 2040.540402][ T3278] bond_slave_0: entered allmulticast mode [ 2040.547386][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.555701][ T3278] bond_slave_1: entered allmulticast mode [ 2040.567055][ T3278] team0: entered promiscuous mode [ 2040.572546][ T3278] team_slave_0: entered promiscuous mode [ 2040.578721][ T3278] team_slave_1: entered promiscuous mode [ 2040.585219][ T3278] team0: entered allmulticast mode [ 2040.590486][ T3278] team_slave_0: entered allmulticast mode [ 2040.598717][ T3278] team_slave_1: entered allmulticast mode [ 2040.609358][ T3278] dummy0: entered promiscuous mode [ 2040.614955][ T3278] dummy0: entered allmulticast mode [ 2040.621603][ T3278] nlmon0: entered promiscuous mode [ 2040.627914][ T3278] nlmon0: entered allmulticast mode [ 2040.637161][ T3278] caif0: entered promiscuous mode [ 2040.642979][ T3278] caif0: entered allmulticast mode [ 2040.650437][ T3278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2040.680540][ T3280] syz_tun: entered allmulticast mode [ 2040.752671][ T3275] syz_tun: left allmulticast mode [ 2041.073874][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2041.573000][ T3295] : left allmulticast mode [ 2041.582307][ T3295] : left promiscuous mode [ 2041.589832][ T3295] bridge0: port 1() entered disabled state [ 2041.617367][ T3296] netlink: 'syz.2.7515': attribute type 10 has an invalid length. [ 2041.714097][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2041.720950][ T3295] bridge_slave_1: left allmulticast mode [ 2041.728394][ T3298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7515'. [ 2041.738062][ T3295] bridge_slave_1: left promiscuous mode [ 2041.748816][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.837045][ T3300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2041.882329][ T3300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2041.912018][ T3302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7517'. [ 2042.464002][ T3295] bond0: (slave c1): Releasing backup interface [ 2042.481612][ T3295] : left promiscuous mode [ 2042.487068][ T3295] : left allmulticast mode [ 2042.497096][ T3295] bond0: (slave bond_slave_1): Releasing backup interface [ 2042.506341][ T3295] bond_slave_1: left promiscuous mode [ 2042.511820][ T3295] bond_slave_1: left allmulticast mode [ 2042.522842][ T3295] team0: Port device team_slave_0 removed [ 2042.535328][ T3295] team0: Port device team_slave_1 removed [ 2042.549005][ T3295] bond3: (slave bridge3): Releasing backup interface [ 2042.560733][ T3295] bridge3: left promiscuous mode [ 2042.580779][ T3295] bond5: left promiscuous mode [ 2042.587237][ T3295] ip6gretap1: left promiscuous mode [ 2042.601019][ T3295] team0: Port device macvlan6 removed [ 2042.610830][ T3295] bond5: (slave ip6gretap1): Releasing backup interface [ 2042.618088][ T5896] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2042.638708][ T3296] bond0: left promiscuous mode [ 2042.647405][ T3296] bond0: left allmulticast mode [ 2042.658301][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2042.669576][ T3296] team0: Device bond0 failed to register rx_handler [ 2042.773420][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 2042.783665][ T5896] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 2042.793047][ T5896] usb 6-1: config 0 has no interface number 0 [ 2042.822180][ T5896] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 2042.833133][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.841687][ T5896] usb 6-1: Product: syz [ 2042.846647][ T5896] usb 6-1: Manufacturer: syz [ 2042.851331][ T5896] usb 6-1: SerialNumber: syz [ 2042.858289][ T5896] usb 6-1: config 0 descriptor?? [ 2043.114050][ T5896] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2043.181583][ T5896] usb 6-1: USB disconnect, device number 31 [ 2043.821270][ T3330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.838391][ T3330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.014364][ T1361] net_ratelimit: 4 callbacks suppressed [ 2044.014381][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.128448][ T3340] batman_adv: batadv0: Interface deactivated: macsec0 [ 2044.139044][ T3340] batadv_slave_0: left promiscuous mode [ 2044.158071][ T3340] macsec0: entered allmulticast mode [ 2044.176110][ T3340] batadv_slave_0: entered promiscuous mode [ 2044.182007][ T3340] batadv_slave_0: entered allmulticast mode [ 2044.189736][ T3340] macsec0: left allmulticast mode [ 2044.196184][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.205017][ T3340] batadv_slave_0: left allmulticast mode [ 2044.212606][ T3340] batman_adv: batadv0: Interface activated: macsec0 [ 2044.365358][ T3345] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7527'. [ 2044.455885][ T3342] netlink: 'syz.5.7526': attribute type 10 has an invalid length. [ 2044.464247][ T3342] dummy0: left promiscuous mode [ 2044.469092][ T3342] dummy0: left allmulticast mode [ 2044.491070][ T3342] dummy0: entered promiscuous mode [ 2044.502269][ T3342] dummy0: entered allmulticast mode [ 2044.508850][ T3346] netlink: 'syz.5.7526': attribute type 10 has an invalid length. [ 2044.525246][ T3342] team0: Failed to send options change via netlink (err -105) [ 2044.534263][ T3342] team0: Port device dummy0 added [ 2044.540974][ T3346] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2044.568115][ T3346] dummy0: left promiscuous mode [ 2044.575387][ T3346] dummy0: left allmulticast mode [ 2044.593826][ T3346] team0: Failed to send options change via netlink (err -105) [ 2044.601436][ T3346] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2044.629372][ T3348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7528'. [ 2044.629397][ T3346] team0: Port device dummy0 removed [ 2044.646212][ T3346] dummy0: entered promiscuous mode [ 2044.651425][ T3346] dummy0: entered allmulticast mode [ 2044.657305][ T3346] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2044.865472][ T3356] veth1_to_team: entered promiscuous mode [ 2044.884259][ T3356] macvlan1: entered promiscuous mode [ 2044.910515][ T3356] debugfs: 'hsr1' already exists in 'hsr' [ 2044.926179][ T3356] Cannot create hsr debugfs directory [ 2044.942788][ T3356] hsr1: entered allmulticast mode [ 2044.958003][ T3356] veth1_to_team: entered allmulticast mode [ 2044.969659][ T3356] macvlan1: entered allmulticast mode [ 2044.985038][ T3356] veth1_vlan: entered allmulticast mode [ 2045.066500][ T5881] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 2045.163795][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2045.233766][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2045.296494][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 2045.385496][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2045.416768][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2045.447221][ T5881] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2045.479779][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.520374][ T5881] usb 7-1: config 0 descriptor?? [ 2045.643793][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2045.654390][T15543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2045.664694][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2045.709172][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2045.751919][ T3365] FAULT_INJECTION: forcing a failure. [ 2045.751919][ T3365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2045.810995][ T3365] CPU: 1 UID: 0 PID: 3365 Comm: syz.0.7532 Tainted: G L syzkaller #0 PREEMPT(full) [ 2045.811026][ T3365] Tainted: [L]=SOFTLOCKUP [ 2045.811034][ T3365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2045.811046][ T3365] Call Trace: [ 2045.811055][ T3365] [ 2045.811064][ T3365] dump_stack_lvl+0xe8/0x150 [ 2045.811095][ T3365] should_fail_ex+0x414/0x560 [ 2045.811128][ T3365] _copy_from_user+0x2d/0xb0 [ 2045.811152][ T3365] get_compat_msghdr+0xad/0x4a0 [ 2045.811183][ T3365] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2045.811220][ T3365] ___sys_sendmsg+0x193/0x2a0 [ 2045.811247][ T3365] ? __pfx____sys_sendmsg+0x10/0x10 [ 2045.811268][ T3365] ? kstrtoull+0x12f/0x1d0 [ 2045.811299][ T3365] ? kstrtouint+0x6e/0xe0 [ 2045.811358][ T3365] ? __fget_files+0x2a/0x420 [ 2045.811382][ T3365] ? __fget_files+0x3a0/0x420 [ 2045.811416][ T3365] __sys_sendmmsg+0x28e/0x430 [ 2045.811445][ T3365] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2045.811467][ T3365] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2045.811512][ T3365] ? ksys_write+0x22a/0x250 [ 2045.811533][ T3365] ? __pfx_ksys_write+0x10/0x10 [ 2045.811558][ T3365] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2045.811590][ T3365] __do_fast_syscall_32+0x1dc/0x560 [ 2045.811612][ T3365] ? lockdep_hardirqs_on+0x7b/0x110 [ 2045.811629][ T3365] ? do_fast_syscall_32+0x34/0x80 [ 2045.811650][ T3365] ? irqentry_exit+0x10f/0x660 [ 2045.811672][ T3365] do_fast_syscall_32+0x34/0x80 [ 2045.811693][ T3365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2045.811715][ T3365] RIP: 0023:0xf704d539 [ 2045.811732][ T3365] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2045.811750][ T3365] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2045.811771][ T3365] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2045.811785][ T3365] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 2045.811796][ T3365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2045.811808][ T3365] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2045.811820][ T3365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2045.811848][ T3365] [ 2046.273863][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2046.597072][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7535'. [ 2046.673784][ T3375] netlink: 'syz.5.7537': attribute type 3 has an invalid length. [ 2046.726490][ T1368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2046.797026][ T3378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2046.807264][ T3378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2046.864368][ T30] audit: type=1326 audit(1766764888.937:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3372 comm="syz.0.7536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2046.900063][ T30] audit: type=1326 audit(1766764888.937:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3372 comm="syz.0.7536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2046.931410][ T360] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2046.962845][ T2963] tipc: Subscription rejected, illegal request [ 2047.016484][ T3384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.029560][ T3384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.055002][ T3384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.063373][ T360] usb 6-1: device descriptor read/64, error -71 [ 2047.072610][ T3384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.303508][ T360] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2047.433344][ T360] usb 6-1: device descriptor read/64, error -71 [ 2047.543586][ T360] usb usb6-port1: attempt power cycle [ 2047.883361][ T360] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2047.924294][ T360] usb 6-1: device descriptor read/8, error -71 [ 2048.089876][ T3403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.099300][ T3403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.110418][ T3403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.120676][ T3403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.173447][ T360] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2048.195299][ T360] usb 6-1: device descriptor read/8, error -71 [ 2048.256735][ T5881] usb 7-1: string descriptor 0 read error: -71 [ 2048.267964][ T5881] usbhid 7-1:0.0: can't add hid device: -71 [ 2048.274373][ T5881] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2048.285404][ T5881] usb 7-1: USB disconnect, device number 86 [ 2048.313660][ T360] usb usb6-port1: unable to enumerate USB device [ 2049.395198][ T5881] net_ratelimit: 5 callbacks suppressed [ 2049.395212][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2049.786647][ T3420] syzkaller0: entered promiscuous mode [ 2049.792157][ T3420] syzkaller0: entered allmulticast mode [ 2050.063555][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2050.213390][ T913] usb 7-1: new low-speed USB device number 87 using dummy_hcd [ 2050.404974][ T913] usb 7-1: device descriptor read/64, error -71 [ 2050.434052][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2050.654089][ T913] usb 7-1: new low-speed USB device number 88 using dummy_hcd [ 2050.813317][ T913] usb 7-1: device descriptor read/64, error -71 [ 2050.938674][ T913] usb usb7-port1: attempt power cycle [ 2051.193612][ T2963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2051.304172][ T913] usb 7-1: new low-speed USB device number 89 using dummy_hcd [ 2051.358295][ T913] usb 7-1: device descriptor read/8, error -71 [ 2051.394513][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2051.403781][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2051.412277][ T2159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2051.474137][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2051.623412][ T913] usb 7-1: new low-speed USB device number 90 using dummy_hcd [ 2051.655716][ T913] usb 7-1: device descriptor read/8, error -71 [ 2051.733003][ T3449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7555'. [ 2051.757190][ T3449] netlink: 'syz.0.7555': attribute type 13 has an invalid length. [ 2051.785676][ T913] usb usb7-port1: unable to enumerate USB device [ 2051.927842][ T3449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2052.333646][ T2963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2053.579623][ T913] IPVS: starting estimator thread 0... [ 2053.703400][ T3493] IPVS: using max 27 ests per chain, 64800 per kthread [ 2054.434628][ T5896] net_ratelimit: 3 callbacks suppressed [ 2054.434641][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2054.573509][ T1361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2054.598925][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2055.236937][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2055.434092][ T3527] fuse: Bad value for 'fd' [ 2055.635281][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2055.746008][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2055.882646][ T3553] gretap1: entered promiscuous mode [ 2056.514084][T15543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2056.523204][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2056.537290][ T913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2056.674270][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2057.859956][ T3580] FAULT_INJECTION: forcing a failure. [ 2057.859956][ T3580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2057.877960][ T3580] CPU: 0 UID: 0 PID: 3580 Comm: syz.0.7589 Tainted: G L syzkaller #0 PREEMPT(full) [ 2057.877991][ T3580] Tainted: [L]=SOFTLOCKUP [ 2057.878000][ T3580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2057.878012][ T3580] Call Trace: [ 2057.878021][ T3580] [ 2057.878030][ T3580] dump_stack_lvl+0xe8/0x150 [ 2057.878061][ T3580] should_fail_ex+0x414/0x560 [ 2057.878096][ T3580] prepare_alloc_pages+0x22b/0x650 [ 2057.878128][ T3580] __alloc_frozen_pages_noprof+0x123/0x370 [ 2057.878154][ T3580] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2057.878180][ T3580] ? do_raw_spin_lock+0x121/0x290 [ 2057.878210][ T3580] ? policy_nodemask+0x27c/0x720 [ 2057.878239][ T3580] alloc_pages_mpol+0x232/0x4a0 [ 2057.878268][ T3580] folio_alloc_mpol_noprof+0x39/0x70 [ 2057.878294][ T3580] __read_swap_cache_async+0x101/0x480 [ 2057.878329][ T3580] swap_cluster_readahead+0x500/0x630 [ 2057.878368][ T3580] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2057.878412][ T3580] ? get_vma_policy+0x27c/0x3c0 [ 2057.878436][ T3580] swapin_readahead+0x189/0xc60 [ 2057.878465][ T3580] ? swap_table_get+0x1e/0x260 [ 2057.878495][ T3580] ? __pfx_swapin_readahead+0x10/0x10 [ 2057.878523][ T3580] ? swap_table_get+0x1e/0x260 [ 2057.878547][ T3580] ? swap_table_get+0x1e/0x260 [ 2057.878568][ T3580] ? swap_table_get+0x1e/0x260 [ 2057.878594][ T3580] ? swap_table_get+0x216/0x260 [ 2057.878620][ T3580] ? swap_cache_get_folio+0x51c/0x530 [ 2057.878652][ T3580] do_swap_page+0x837/0x5c70 [ 2057.878686][ T3580] ? __lock_acquire+0x6b6/0x2cf0 [ 2057.878708][ T3580] ? ___pte_offset_map+0x29/0x240 [ 2057.878738][ T3580] ? do_swap_page+0x17d/0x5c70 [ 2057.878761][ T3580] ? __pfx_do_swap_page+0x10/0x10 [ 2057.878789][ T3580] ? __pfx_default_wake_function+0x10/0x10 [ 2057.878823][ T3580] ? ___pte_offset_map+0x1ae/0x240 [ 2057.878861][ T3580] ? pte_offset_map_rw_nolock+0xea/0x160 [ 2057.878894][ T3580] handle_mm_fault+0x1277/0x32b0 [ 2057.878935][ T3580] ? handle_mm_fault+0xdb/0x32b0 [ 2057.878970][ T3580] ? __pfx_handle_mm_fault+0x10/0x10 [ 2057.879015][ T3580] ? lock_mm_and_find_vma+0x9c/0x300 [ 2057.879036][ T3580] do_user_addr_fault+0x764/0x1380 [ 2057.879073][ T3580] exc_page_fault+0x71/0xd0 [ 2057.879095][ T3580] asm_exc_page_fault+0x26/0x30 [ 2057.879114][ T3580] RIP: 0010:__get_user_4+0x14/0x20 [ 2057.879141][ T3580] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 2057.879159][ T3580] RSP: 0018:ffffc90003e9fd48 EFLAGS: 00050287 [ 2057.879177][ T3580] RAX: 0000000080a31000 RBX: ffffc90003e9fd9c RCX: 0000000000000046 [ 2057.879195][ T3580] RDX: 00007ffffffff000 RSI: ffffffff8d975e98 RDI: ffffffff8bc083e0 [ 2057.879210][ T3580] RBP: ffffc90003e9fec0 R08: ffffffff820e7fb0 R09: ffff88802444e540 [ 2057.879226][ T3580] R10: ffffc90003e9fdc0 R11: fffff520007d3fbb R12: ffffc90003e9ff48 [ 2057.879240][ T3580] R13: ffffc90003e9fdc0 R14: 0000000080a31000 R15: 0000000080a31000 [ 2057.879261][ T3580] ? __might_fault+0xb0/0x130 [ 2057.879298][ T3580] cap_validate_magic+0x2c/0x1a0 [ 2057.879322][ T3580] __se_sys_capset+0xbf/0x440 [ 2057.879345][ T3580] ? __pfx___se_sys_capset+0x10/0x10 [ 2057.879370][ T3580] ? ksys_write+0x22a/0x250 [ 2057.879392][ T3580] ? __pfx_ksys_write+0x10/0x10 [ 2057.879422][ T3580] __do_fast_syscall_32+0x1dc/0x560 [ 2057.879444][ T3580] ? lockdep_hardirqs_on+0x7b/0x110 [ 2057.879462][ T3580] ? do_fast_syscall_32+0x34/0x80 [ 2057.879482][ T3580] ? irqentry_exit+0x10f/0x660 [ 2057.879506][ T3580] do_fast_syscall_32+0x34/0x80 [ 2057.879528][ T3580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2057.879550][ T3580] RIP: 0023:0xf704d539 [ 2057.879565][ T3580] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2057.879582][ T3580] RSP: 002b:00000000f53fb55c EFLAGS: 00000206 ORIG_RAX: 00000000000000b9 [ 2057.879601][ T3580] RAX: ffffffffffffffda RBX: 0000000080a31000 RCX: 0000000000000000 [ 2057.879615][ T3580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2057.879627][ T3580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2057.879639][ T3580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2057.879651][ T3580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2057.879681][ T3580] [ 2059.130058][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7600'. [ 2059.154424][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7600'. [ 2059.557609][ T2159] net_ratelimit: 5 callbacks suppressed [ 2059.557630][ T2159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.805906][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.831119][ T3621] FAULT_INJECTION: forcing a failure. [ 2059.831119][ T3621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2059.863442][ T3621] CPU: 1 UID: 0 PID: 3621 Comm: syz.2.7601 Tainted: G L syzkaller #0 PREEMPT(full) [ 2059.863477][ T3621] Tainted: [L]=SOFTLOCKUP [ 2059.863484][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2059.863495][ T3621] Call Trace: [ 2059.863502][ T3621] [ 2059.863511][ T3621] dump_stack_lvl+0xe8/0x150 [ 2059.863540][ T3621] should_fail_ex+0x414/0x560 [ 2059.863573][ T3621] _copy_from_user+0x2d/0xb0 [ 2059.863595][ T3621] __se_sys_capset+0x228/0x440 [ 2059.863617][ T3621] ? __pfx___se_sys_capset+0x10/0x10 [ 2059.863640][ T3621] ? ksys_write+0x22a/0x250 [ 2059.863661][ T3621] ? __pfx_ksys_write+0x10/0x10 [ 2059.863688][ T3621] __do_fast_syscall_32+0x1dc/0x560 [ 2059.863707][ T3621] ? lockdep_hardirqs_on+0x7b/0x110 [ 2059.863736][ T3621] ? do_fast_syscall_32+0x34/0x80 [ 2059.863756][ T3621] ? irqentry_exit+0x10f/0x660 [ 2059.863779][ T3621] do_fast_syscall_32+0x34/0x80 [ 2059.863800][ T3621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2059.863822][ T3621] RIP: 0023:0xf70cd539 [ 2059.863838][ T3621] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2059.863856][ T3621] RSP: 002b:00000000f547b55c EFLAGS: 00000206 ORIG_RAX: 00000000000000b9 [ 2059.863877][ T3621] RAX: ffffffffffffffda RBX: 0000000080a31000 RCX: 0000000000000000 [ 2059.863892][ T3621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2059.863903][ T3621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2059.863914][ T3621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2059.863927][ T3621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2059.863955][ T3621] [ 2060.278626][ T3629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.297810][ T3629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.494835][ T2937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.570725][ T3649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7611'. [ 2060.633349][ T2159] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 2060.783398][ T2159] usb 7-1: Using ep0 maxpacket: 8 [ 2060.789842][ T2159] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2060.802570][ T2159] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2060.816291][ T2159] usb 7-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 2060.828169][ T2159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.844050][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.844591][ T2159] usb 7-1: config 0 descriptor?? [ 2060.945833][ T3660] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7614'. [ 2061.414164][ T3671] FAULT_INJECTION: forcing a failure. [ 2061.414164][ T3671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2061.428307][ T3671] CPU: 0 UID: 0 PID: 3671 Comm: syz.5.7616 Tainted: G L syzkaller #0 PREEMPT(full) [ 2061.428337][ T3671] Tainted: [L]=SOFTLOCKUP [ 2061.428346][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2061.428357][ T3671] Call Trace: [ 2061.428373][ T3671] [ 2061.428382][ T3671] dump_stack_lvl+0xe8/0x150 [ 2061.428412][ T3671] should_fail_ex+0x414/0x560 [ 2061.428447][ T3671] _copy_to_user+0x31/0xb0 [ 2061.428473][ T3671] simple_read_from_buffer+0xe1/0x170 [ 2061.428502][ T3671] proc_fail_nth_read+0x1b3/0x220 [ 2061.428527][ T3671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2061.428551][ T3671] ? rw_verify_area+0x2a6/0x4d0 [ 2061.428581][ T3671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2061.428607][ T3671] vfs_read+0x200/0xa30 [ 2061.428624][ T3671] ? fdget_pos+0x247/0x320 [ 2061.428653][ T3671] ? __pfx___mutex_lock+0x10/0x10 [ 2061.428675][ T3671] ? __pfx_vfs_read+0x10/0x10 [ 2061.428695][ T3671] ? __fget_files+0x2a/0x420 [ 2061.428723][ T3671] ? __fget_files+0x3a0/0x420 [ 2061.428745][ T3671] ? __fget_files+0x2a/0x420 [ 2061.428777][ T3671] ksys_read+0x145/0x250 [ 2061.428799][ T3671] ? __pfx_ksys_read+0x10/0x10 [ 2061.428828][ T3671] __do_fast_syscall_32+0x1dc/0x560 [ 2061.428850][ T3671] ? lockdep_hardirqs_on+0x7b/0x110 [ 2061.428869][ T3671] ? do_fast_syscall_32+0x34/0x80 [ 2061.428890][ T3671] ? irqentry_exit+0x10f/0x660 [ 2061.428914][ T3671] do_fast_syscall_32+0x34/0x80 [ 2061.428942][ T3671] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2061.428966][ T3671] RIP: 0023:0xf70ed539 [ 2061.428982][ T3671] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2061.429000][ T3671] RSP: 002b:00000000f549b590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2061.429020][ T3671] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f549b620 [ 2061.429034][ T3671] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 2061.429047][ T3671] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2061.429058][ T3671] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2061.429071][ T3671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2061.429099][ T3671] [ 2061.683108][T15543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2061.883433][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2062.073368][ T3679] syzkaller0: entered promiscuous mode [ 2062.096988][ T3679] syzkaller0: entered allmulticast mode [ 2062.268711][ T2159] usbhid 7-1:0.0: can't add hid device: -71 [ 2062.276796][T15543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2062.285650][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2062.303769][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2062.334562][ T2159] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2062.383927][ T2159] usb 7-1: USB disconnect, device number 91 [ 2062.703573][ T5881] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2062.823971][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2062.865458][ T5881] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2062.875990][ T5881] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2062.881495][ T3695] FAULT_INJECTION: forcing a failure. [ 2062.881495][ T3695] name failslab, interval 1, probability 0, space 0, times 0 [ 2062.885420][ T5881] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2062.896662][ T3695] CPU: 1 UID: 0 PID: 3695 Comm: syz.2.7623 Tainted: G L syzkaller #0 PREEMPT(full) [ 2062.896690][ T3695] Tainted: [L]=SOFTLOCKUP [ 2062.896698][ T3695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2062.896710][ T3695] Call Trace: [ 2062.896719][ T3695] [ 2062.896728][ T3695] dump_stack_lvl+0xe8/0x150 [ 2062.896757][ T3695] should_fail_ex+0x414/0x560 [ 2062.896792][ T3695] should_failslab+0xa8/0x100 [ 2062.896818][ T3695] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 2062.896848][ T3695] ? __d_alloc+0x37/0x6f0 [ 2062.896879][ T3695] __d_alloc+0x37/0x6f0 [ 2062.896912][ T3695] d_alloc+0x4b/0x190 [ 2062.896935][ T3695] ? lookup_one_qstr_excl+0xc8/0x360 [ 2062.896963][ T3695] lookup_one_qstr_excl+0xdc/0x360 [ 2062.896988][ T3695] ? lookup_noperm_common+0x245/0x430 [ 2062.897017][ T3695] start_dirop+0x5c/0x90 [ 2062.897041][ T3695] simple_start_creating+0xc4/0x100 [ 2062.897069][ T3695] ? __pfx_simple_start_creating+0x10/0x10 [ 2062.897095][ T3695] ? do_raw_spin_unlock+0x122/0x240 [ 2062.897122][ T3695] ? mntput+0x65/0xc0 [ 2062.897146][ T3695] debugfs_start_creating+0xdb/0x1a0 [ 2062.897169][ T3695] __debugfs_create_file+0x6f/0x400 [ 2062.897194][ T3695] debugfs_create_file_full+0x3f/0x60 [ 2062.897217][ T3695] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 2062.897237][ T3695] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2062.897284][ T3695] ? trace_kmalloc+0x1f/0xb0 [ 2062.897300][ T3695] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 2062.897325][ T3695] ? __raw_spin_lock_init+0x45/0x100 [ 2062.897353][ T3695] alloc_netdev_mqs+0x272/0x11b0 [ 2062.897387][ T3695] ? __pfx_macvlan_setup+0x10/0x10 [ 2062.897421][ T3695] rtnl_create_link+0x31f/0xcf0 [ 2062.897455][ T3695] rtnl_newlink_create+0x25c/0xb00 [ 2062.897492][ T3695] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2062.897520][ T3695] ? __pfx___mutex_lock+0x10/0x10 [ 2062.897551][ T3695] ? ns_capable+0x8a/0xf0 [ 2062.897574][ T3695] rtnl_newlink+0x16e7/0x1c90 [ 2062.897611][ T3695] ? __pfx_rtnl_newlink+0x10/0x10 [ 2062.897629][ T3695] ? __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2062.897653][ T3695] ? __do_fast_syscall_32+0x1dc/0x560 [ 2062.897674][ T3695] ? do_fast_syscall_32+0x34/0x80 [ 2062.897694][ T3695] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2062.897751][ T3695] ? kasan_quarantine_put+0xbb/0x1f0 [ 2062.897770][ T3695] ? lockdep_hardirqs_on+0x7b/0x110 [ 2062.897794][ T3695] ? kmem_cache_free+0x197/0x620 [ 2062.897813][ T3695] ? nlmon_xmit+0xb0/0x100 [ 2062.897846][ T3695] ? __lock_acquire+0x6b6/0x2cf0 [ 2062.897875][ T3695] ? __local_bh_enable_ip+0xd0/0x130 [ 2062.897895][ T3695] ? lockdep_hardirqs_on+0x7b/0x110 [ 2062.897913][ T3695] ? __dev_queue_xmit+0x289/0x3140 [ 2062.897937][ T3695] ? __local_bh_enable_ip+0xd0/0x130 [ 2062.897955][ T3695] ? __dev_queue_xmit+0x289/0x3140 [ 2062.897986][ T3695] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2062.898022][ T3695] ? __pfx_rtnl_newlink+0x10/0x10 [ 2062.898042][ T3695] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2062.898066][ T3695] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2062.898086][ T3695] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2062.898105][ T3695] ? ref_tracker_free+0x63a/0x7d0 [ 2062.898124][ T3695] ? __asan_memcpy+0x40/0x70 [ 2062.898141][ T3695] ? __pfx_ref_tracker_free+0x10/0x10 [ 2062.898171][ T3695] netlink_rcv_skb+0x208/0x470 [ 2062.898197][ T3695] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2062.898219][ T3695] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2062.898254][ T3695] ? netlink_deliver_tap+0x2e/0x1b0 [ 2062.898287][ T3695] netlink_unicast+0x82f/0x9e0 [ 2062.898317][ T3695] ? __pfx_netlink_unicast+0x10/0x10 [ 2062.898337][ T3695] ? __alloc_skb+0x198/0x3a0 [ 2062.898357][ T3695] ? netlink_sendmsg+0x642/0xb30 [ 2062.898385][ T3695] ? skb_put+0x11b/0x210 [ 2062.898409][ T3695] netlink_sendmsg+0x805/0xb30 [ 2062.898443][ T3695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2062.898471][ T3695] ? __import_iovec+0x5d4/0x7f0 [ 2062.898492][ T3695] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2062.898519][ T3695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2062.898537][ T3695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2062.898563][ T3695] __sock_sendmsg+0x21c/0x270 [ 2062.898595][ T3695] ____sys_sendmsg+0x52d/0x820 [ 2062.898623][ T3695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2062.898663][ T3695] ___sys_sendmsg+0x21f/0x2a0 [ 2062.898688][ T3695] ? __pfx____sys_sendmsg+0x10/0x10 [ 2062.898710][ T3695] ? kstrtoull+0x12f/0x1d0 [ 2062.898740][ T3695] ? kstrtouint+0x6e/0xe0 [ 2062.898796][ T3695] ? __fget_files+0x2a/0x420 [ 2062.898818][ T3695] ? __fget_files+0x3a0/0x420 [ 2062.898852][ T3695] __sys_sendmmsg+0x28e/0x430 [ 2062.898881][ T3695] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2062.898902][ T3695] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2062.898948][ T3695] ? ksys_write+0x22a/0x250 [ 2062.898969][ T3695] ? __pfx_ksys_write+0x10/0x10 [ 2062.898995][ T3695] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2062.899023][ T3695] __do_fast_syscall_32+0x1dc/0x560 [ 2062.899044][ T3695] ? lockdep_hardirqs_on+0x7b/0x110 [ 2062.899062][ T3695] ? do_fast_syscall_32+0x34/0x80 [ 2062.899083][ T3695] ? irqentry_exit+0x10f/0x660 [ 2062.899106][ T3695] do_fast_syscall_32+0x34/0x80 [ 2062.899128][ T3695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2062.899151][ T3695] RIP: 0023:0xf70cd539 [ 2062.899167][ T3695] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2062.899184][ T3695] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2062.899204][ T3695] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2062.899218][ T3695] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 2062.899230][ T3695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2062.899242][ T3695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2062.899253][ T3695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2062.899282][ T3695] [ 2063.478435][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2063.489256][ T5881] usb 6-1: Product: syz [ 2063.494133][ T5881] usb 6-1: Manufacturer: syz [ 2063.498837][ T5881] usb 6-1: SerialNumber: syz [ 2063.506037][ T5881] usb 6-1: config 0 descriptor?? [ 2063.516696][ T5881] usb 6-1: selecting invalid altsetting 0 [ 2063.712237][ T3709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.740360][ T3709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.757130][ T3706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.768777][ T3706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.064370][ T5881] usb 6-1: USB disconnect, device number 36 [ 2064.418927][ T3720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.442435][ T3720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.833880][ T2159] net_ratelimit: 3 callbacks suppressed [ 2064.833898][ T2159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2065.093682][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2065.155640][ T3730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7633'. [ 2065.186093][ T3730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7633'. [ 2065.313805][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2065.349846][ T3732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2065.358713][ T3732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2065.564232][ T2157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2065.994131][ T5881] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2066.154120][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 2066.169911][ T5881] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2066.178839][ T5881] usb 6-1: config 0 has no interface number 0 [ 2066.209907][ T5881] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2066.222652][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.232521][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2066.241253][ T5881] usb 6-1: Product: syz [ 2066.251348][ T5881] usb 6-1: Manufacturer: syz [ 2066.266114][ T5881] usb 6-1: SerialNumber: syz [ 2066.282036][ T5881] usb 6-1: config 0 descriptor?? [ 2066.294039][ T5881] smsc95xx v2.0.0 [ 2066.591710][ T3757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2066.600702][ T2157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2066.683658][ T5896] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 2066.694950][ T3757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2066.777750][ T5881] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2066.788563][ T5881] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2067.033072][ T5896] usb 7-1: config 247 has an invalid descriptor of length 70, skipping remainder of the config [ 2067.043911][ T5896] usb 7-1: config 247 has 0 interfaces, different from the descriptor's value: 27 [ 2067.056713][ T5896] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2067.066015][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.078437][ T5896] usb 7-1: Product: syz [ 2067.082635][ T5896] usb 7-1: Manufacturer: syz [ 2067.087964][ T5896] usb 7-1: SerialNumber: syz [ 2067.359417][ T3737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.370859][ T3737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2067.383978][ T2937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2067.474446][T14025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2067.490474][ T2159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2067.499449][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.450625][ T5881] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 2068.462191][ T5881] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 2068.479644][ T5881] usb 6-1: USB disconnect, device number 37 [ 2068.484733][ T5896] usb 7-1: USB disconnect, device number 92 [ 2068.586861][ T30] audit: type=1326 audit(1766764910.667:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3762 comm="syz.6.7642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2068.609094][ T30] audit: type=1326 audit(1766764910.667:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3762 comm="syz.6.7642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2068.632733][ T30] audit: type=1326 audit(1766764910.707:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3762 comm="syz.6.7642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2068.655214][ T30] audit: type=1326 audit(1766764910.707:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3762 comm="syz.6.7642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2068.679374][ T30] audit: type=1326 audit(1766764910.707:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3762 comm="syz.6.7642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2068.701577][ T30] audit: type=1326 audit(1766764910.707:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3762 comm="syz.6.7642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2068.725822][ T30] audit: type=1326 audit(1766764910.717:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3762 comm="syz.6.7642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2068.748259][ T30] audit: type=1326 audit(1766764910.717:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3762 comm="syz.6.7642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2068.771097][ T30] audit: type=1326 audit(1766764910.717:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3762 comm="syz.6.7642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2068.794236][ T30] audit: type=1326 audit(1766764910.717:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3762 comm="syz.6.7642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2069.121482][ T3771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7644'. [ 2069.852318][ T3807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2069.879545][ T3807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2070.453420][ T5881] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 2070.523613][T18916] net_ratelimit: 5 callbacks suppressed [ 2070.523626][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2070.584943][ T3830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7659'. [ 2070.715621][ T753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2070.744249][ T5881] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.756738][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2070.936808][ T5881] usb 7-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=5b.d8 [ 2070.977073][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.998328][ T5881] usb 7-1: Product: syz [ 2071.008066][ T5881] usb 7-1: Manufacturer: syz [ 2071.012688][ T5881] usb 7-1: SerialNumber: syz [ 2071.496040][ T3854] xt_bpf: check failed: parse error [ 2071.531274][ T3854] netlink: 88 bytes leftover after parsing attributes in process `syz.7.7666'. [ 2071.553750][T18916] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2071.719024][T18916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.739783][T18916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.762386][T18916] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2071.781672][T18916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.794752][ T2157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.812284][T18916] usb 6-1: config 0 descriptor?? [ 2071.869150][ T753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2072.268862][T18916] cm6533_jd 0003:0D8C:0022.005C: unknown main item tag 0x0 [ 2072.288034][T18916] cm6533_jd 0003:0D8C:0022.005C: unknown main item tag 0x0 [ 2072.307669][ T3867] usb usb8: usbfs: process 3867 (syz.7.7671) did not claim interface 0 before use [ 2072.312630][T18916] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.005C/input/input122 [ 2072.381917][T18916] cm6533_jd 0003:0D8C:0022.005C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 2072.496328][T18916] usb 6-1: USB disconnect, device number 38 [ 2072.542710][ T3868] fido_id[3868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 2072.844112][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2072.948277][ T3870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2072.957232][ T3870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2073.003868][T24233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2073.072242][ T3875] binder: 3874:3875 ioctl 40086602 80000080 returned -22 [ 2073.156400][ T3878] netlink: 'syz.5.7674': attribute type 1 has an invalid length. [ 2073.171116][ T3878] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2073.203756][ T5881] usb 7-1: Could not find all expected endpoints [ 2073.245366][ T5881] usb 7-1: USB disconnect, device number 93 [ 2073.556577][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2073.694237][ T3897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2073.707514][ T3897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2073.874569][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.133683][T15543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.583429][ T2159] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2074.753058][ T2159] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2074.763795][ T2159] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2074.776527][ T2159] usb 6-1: config 220 has no interface number 2 [ 2074.782798][ T2159] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2074.798532][ T2159] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2074.807759][ T2159] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2074.815869][ T2159] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2074.827007][ T2159] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2074.836665][ T2159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.844907][ T2159] usb 6-1: Product: syz [ 2074.850047][ T2159] usb 6-1: Manufacturer: syz [ 2074.857725][ T2159] usb 6-1: SerialNumber: syz [ 2075.173470][ T3909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7681'. [ 2075.534826][ T2159] usb 6-1: selecting invalid altsetting 0 [ 2075.556036][ T2159] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2075.564619][ T2159] uvcvideo 6-1:220.0: No valid video chain found. [ 2075.576613][ T2159] usb 6-1: selecting invalid altsetting 0 [ 2075.582405][ T2159] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2075.596017][ T2159] usb 6-1: USB disconnect, device number 39 [ 2075.627099][ T3933] syzkaller0: entered promiscuous mode [ 2075.658168][ T3933] syzkaller0: entered allmulticast mode [ 2075.859292][ T3941] loop6: detected capacity change from 0 to 7 [ 2075.885688][ T3941] Dev loop6: unable to read RDB block 7 [ 2075.891427][ T3941] loop6: unable to read partition table [ 2075.897583][ T3941] loop6: partition table beyond EOD, truncated [ 2075.910691][ T3941] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 2075.955114][ T2157] net_ratelimit: 3 callbacks suppressed [ 2075.955125][ T2157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2076.030227][ T3946] netlink: 'syz.0.7691': attribute type 6 has an invalid length. [ 2076.038180][ T3946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7691'. [ 2076.082732][ T3946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7691'. [ 2076.172920][ T3952] program syz.0.7692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2076.403522][ T3664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2076.599097][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2076.995345][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2077.557579][ T3840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2077.906897][ T3985] syz.7.7701: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2077.907120][ T3985] CPU: 0 UID: 0 PID: 3985 Comm: syz.7.7701 Tainted: G L syzkaller #0 PREEMPT(full) [ 2077.907136][ T3985] Tainted: [L]=SOFTLOCKUP [ 2077.907141][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2077.907148][ T3985] Call Trace: [ 2077.907153][ T3985] [ 2077.907159][ T3985] dump_stack_lvl+0xe8/0x150 [ 2077.907177][ T3985] warn_alloc+0x214/0x310 [ 2077.907190][ T3985] ? stack_trace_save+0x9c/0xe0 [ 2077.907209][ T3985] ? __pfx_warn_alloc+0x10/0x10 [ 2077.907224][ T3985] ? kasan_save_track+0x4f/0x80 [ 2077.907234][ T3985] ? kasan_save_track+0x3e/0x80 [ 2077.907243][ T3985] ? __kasan_kmalloc+0x93/0xb0 [ 2077.907254][ T3985] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 2077.907264][ T3985] ? xskq_create+0x56/0x170 [ 2077.907279][ T3985] ? xsk_setsockopt+0x4dc/0x8d0 [ 2077.907292][ T3985] ? do_sock_setsockopt+0x17c/0x1b0 [ 2077.907304][ T3985] ? __ia32_sys_setsockopt+0x13f/0x1b0 [ 2077.907315][ T3985] ? __do_fast_syscall_32+0x1dc/0x560 [ 2077.907328][ T3985] __vmalloc_node_range_noprof+0x134/0x16a0 [ 2077.907356][ T3985] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2077.907370][ T3985] ? __kasan_kmalloc+0x93/0xb0 [ 2077.907384][ T3985] vmalloc_user_noprof+0xad/0xf0 [ 2077.907394][ T3985] ? xskq_create+0xbf/0x170 [ 2077.907409][ T3985] xskq_create+0xbf/0x170 [ 2077.907426][ T3985] xsk_init_queue+0xb0/0x110 [ 2077.907444][ T3985] xsk_setsockopt+0x4dc/0x8d0 [ 2077.907459][ T3985] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2077.907473][ T3985] ? __pfx_aa_sk_perm+0x10/0x10 [ 2077.907487][ T3985] ? aa_sock_opt_perm+0xff/0x1a0 [ 2077.907502][ T3985] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2077.907513][ T3985] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2077.907527][ T3985] do_sock_setsockopt+0x17c/0x1b0 [ 2077.907541][ T3985] __ia32_sys_setsockopt+0x13f/0x1b0 [ 2077.907556][ T3985] __do_fast_syscall_32+0x1dc/0x560 [ 2077.907567][ T3985] ? lockdep_hardirqs_on+0x7b/0x110 [ 2077.907577][ T3985] ? do_fast_syscall_32+0x34/0x80 [ 2077.907589][ T3985] ? irqentry_exit+0x10f/0x660 [ 2077.907602][ T3985] do_fast_syscall_32+0x34/0x80 [ 2077.907614][ T3985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2077.907627][ T3985] RIP: 0023:0xf70ad539 [ 2077.907637][ T3985] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2077.907647][ T3985] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 2077.907660][ T3985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 2077.907680][ T3985] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 2077.907693][ T3985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2077.907705][ T3985] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2077.907717][ T3985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2077.907746][ T3985] [ 2077.907859][ T3985] Mem-Info: [ 2077.907873][ T3985] active_anon:24798 inactive_anon:0 isolated_anon:0 [ 2077.907873][ T3985] active_file:20439 inactive_file:40705 isolated_file:0 [ 2077.907873][ T3985] unevictable:768 dirty:583 writeback:0 [ 2077.907873][ T3985] slab_reclaimable:7815 slab_unreclaimable:141792 [ 2077.907873][ T3985] mapped:41775 shmem:18266 pagetables:1857 [ 2077.907873][ T3985] sec_pagetables:0 bounce:0 [ 2077.907873][ T3985] kernel_misc_reclaimable:0 [ 2077.907873][ T3985] free:1225578 free_pcp:15327 free_cma:0 [ 2077.907914][ T3985] Node 0 active_anon:99192kB inactive_anon:0kB active_file:81748kB inactive_file:162620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167092kB dirty:2332kB writeback:0kB shmem:71528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16064kB pagetables:7300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2077.907943][ T3985] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2077.907977][ T3985] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2077.908011][ T3985] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 2077.908036][ T3985] Node 0 DMA32 free:1001228kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:99192kB inactive_anon:0kB active_file:81748kB inactive_file:162620kB unevictable:1536kB writepending:2332kB zspages:0kB present:3129332kB managed:2559516kB mlocked:0kB bounce:0kB free_pcp:41100kB local_pcp:33052kB free_cma:0kB [ 2077.908070][ T3985] lowmem_reserve[]: 0 0 1 1 1 [ 2077.908092][ T3985] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2077.908123][ T3985] lowmem_reserve[]: 0 0 0 0 0 [ 2077.908145][ T3985] Node 1 Normal free:3885724kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20208kB local_pcp:19512kB free_cma:0kB [ 2077.908177][ T3985] lowmem_reserve[]: 0 0 0 0 0 [ 2077.908199][ T3985] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2077.908272][ T3985] Node 0 DMA32: 5567*4kB (UME) 7064*8kB (UME) 4384*16kB (UME) 808*32kB (UME) 409*64kB (UME) 257*128kB (UME) 189*256kB (UME) 232*512kB (UME) 172*1024kB (UME) 7*2048kB (UME) 100*4096kB (UM) = 1001084kB [ 2077.908369][ T3985] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2077.908428][ T3985] Node 1 Normal: 124*4kB (UME) 54*8kB (UE) 33*16kB (UME) 221*32kB (UME) 92*64kB (UME) 27*128kB (UME) 3*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 942*4096kB (UM) = 3885776kB [ 2077.908527][ T3985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2077.908537][ T3985] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2077.908546][ T3985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2077.908556][ T3985] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2077.908565][ T3985] 79406 total pagecache pages [ 2077.908572][ T3985] 0 pages in swap cache [ 2077.908577][ T3985] Free swap = 124996kB [ 2077.908582][ T3985] Total swap = 124996kB [ 2077.908587][ T3985] 2097051 pages RAM [ 2077.908592][ T3985] 0 pages HighMem/MovableOnly [ 2077.908597][ T3985] 425082 pages reserved [ 2077.908602][ T3985] 0 pages cma reserved [ 2078.002265][ T3987] syzkaller1: entered promiscuous mode [ 2078.002281][ T3987] syzkaller1: entered allmulticast mode [ 2078.035074][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2078.114606][ T3987] netlink: 'syz.7.7702': attribute type 1 has an invalid length. [ 2078.174623][ T3987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2078.199556][ T3988] bond1: (slave veth5): Enslaving as an active interface with a down link [ 2078.666408][ T1368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2078.786803][ T4003] tipc: Enabled bearer , priority 20 [ 2078.791952][ T4007] tipc: Enabled bearer , priority 0 [ 2078.861565][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2078.861583][ T30] audit: type=1326 audit(1766764920.937:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.6.7703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2078.881315][ T30] audit: type=1326 audit(1766764920.947:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.6.7703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2079.022486][ T30] audit: type=1326 audit(1766764921.097:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.6.7703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2079.023539][ T30] audit: type=1326 audit(1766764921.107:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.6.7703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2079.025111][ T30] audit: type=1326 audit(1766764921.107:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.6.7703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2079.075402][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2079.190064][ T30] audit: type=1326 audit(1766764921.257:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.6.7703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2079.190332][ T30] audit: type=1326 audit(1766764921.267:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.6.7703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2079.190565][ T30] audit: type=1326 audit(1766764921.267:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.6.7703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2079.208755][ T30] audit: type=1326 audit(1766764921.287:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.6.7703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2079.263440][ T5881] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 2079.304017][ T30] audit: type=1326 audit(1766764921.387:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.6.7703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 2079.476159][ T5881] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2079.476180][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2079.476194][ T5881] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2079.490874][ T5881] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2079.490892][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.490904][ T5881] usb 7-1: Product: syz [ 2079.490912][ T5881] usb 7-1: Manufacturer: syz [ 2079.490921][ T5881] usb 7-1: SerialNumber: syz [ 2079.492421][ T5881] usb 7-1: config 0 descriptor?? [ 2079.493427][ T4009] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2079.493670][ T4009] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2079.494646][ T5881] usb 7-1: ucan: probing device on interface #0 [ 2079.557529][ T4017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.557777][ T4017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2079.593079][ T4017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.602270][ T4017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2079.649015][ T2159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2079.745624][ T5881] usb 7-1: ucan: could not read protocol version, ret=0 [ 2079.745642][ T5881] usb 7-1: ucan: probe failed; try to update the device firmware [ 2079.783493][T14025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2079.811377][ T4022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7709'. [ 2080.825295][ T4041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.825671][ T4041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.898840][ T4048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.899207][ T4048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.900876][ T4048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.901353][ T4048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.971717][ T4051] trusted_key: encrypted_key: insufficient parameters specified [ 2081.172277][ T5881] net_ratelimit: 2 callbacks suppressed [ 2081.172290][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2081.576529][ T4056] netlink: 'syz.2.7717': attribute type 1 has an invalid length. [ 2081.591244][ T4056] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2081.613746][ T4057] bond6: (slave veth3): Enslaving as an active interface with a down link [ 2081.637491][ T4057] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2081.807088][ T4056] bond6 (unregistering): (slave veth3): Releasing active interface [ 2081.814046][ T4056] bond6 (unregistering): Released all slaves [ 2082.224199][ T753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2082.347176][ T2157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2082.349562][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7718'. [ 2082.546112][T18916] usb 7-1: USB disconnect, device number 94 [ 2082.677285][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2082.723456][ T2159] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2082.733298][ T4072] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7721'. [ 2082.873387][ T2159] usb 6-1: Using ep0 maxpacket: 32 [ 2082.879938][ T2159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2082.891199][ T2159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2082.902088][ T2159] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2082.912054][ T2159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.924229][ T2159] usb 6-1: config 0 descriptor?? [ 2082.932868][ T2159] hub 6-1:0.0: USB hub found [ 2083.109642][ T4077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2083.120444][ T4077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2083.341395][ T2159] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 2083.396351][ T2157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2083.484315][ T7152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2083.561971][ T4067] af_packet: tpacket_rcv: packet too big, clamped from 100 to 4294967272. macoff=96 [ 2083.595486][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7719'. [ 2083.611751][ T2159] usbhid 6-1:0.0: can't add hid device: -71 [ 2083.618540][ T2159] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2083.644450][ T2159] usb 6-1: USB disconnect, device number 40 [ 2083.692925][ T4081] netlink: 'syz.2.7725': attribute type 10 has an invalid length. [ 2083.705930][ T4081] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2083.717419][ T395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.727196][ T395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.736746][ T4081] syzkaller0: left promiscuous mode [ 2083.741952][ T4081] syzkaller0: left allmulticast mode [ 2083.794038][T18916] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 2083.956549][T18916] usb 7-1: Using ep0 maxpacket: 32 [ 2083.969548][T18916] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 2084.003527][T18916] usb 7-1: config 0 has no interface number 0 [ 2084.009656][T18916] usb 7-1: config 0 interface 184 has no altsetting 0 [ 2084.022597][ T4087] bond0: (slave wlan1): Releasing backup interface [ 2084.037921][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.054582][T18916] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2084.064116][T18916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.087047][T18916] usb 7-1: Product: syz [ 2084.091271][T18916] usb 7-1: Manufacturer: syz [ 2084.101225][T18916] usb 7-1: SerialNumber: syz [ 2084.107375][ T4090] netlink: 'syz.2.7726': attribute type 10 has an invalid length. [ 2084.128360][T18916] usb 7-1: config 0 descriptor?? [ 2084.171004][ T4087] netlink: 2248 bytes leftover after parsing attributes in process `syz.2.7726'. [ 2084.337604][T18916] smsc75xx v1.0.0 [ 2084.433793][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.493353][ T5896] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2084.599164][ T395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.644991][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2084.656080][ T5896] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2084.665418][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.677001][ T5896] usb 6-1: config 0 descriptor?? [ 2084.898086][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 2084.904876][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2084.916016][ T5896] usb 6-1: USB disconnect, device number 41 [ 2084.956704][T18916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2084.969755][T18916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2085.343408][ T8516] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2085.382875][ T30] kauditd_printk_skb: 150 callbacks suppressed [ 2085.382891][ T30] audit: type=1326 audit(1766764927.457:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4078 comm="syz.6.7724" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f96539 code=0x0 [ 2085.449990][T18916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 2085.464335][T18916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 2085.481647][T18916] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2085.492460][T18916] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 2085.492906][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2085.509486][T18916] usb 7-1: USB disconnect, device number 95 [ 2085.522285][ T8516] usb 6-1: Using ep0 maxpacket: 32 [ 2085.536895][ T8516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.550334][ T8516] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2085.560360][ T8516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.578216][ T8516] usb 6-1: config 0 descriptor?? [ 2085.585525][ T8516] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2085.598136][ T8516] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2085.684553][ T4099] syzkaller0: entered promiscuous mode [ 2085.690038][ T4099] syzkaller0: entered allmulticast mode [ 2085.748812][ T4099] tipc: Enabled bearer , priority 0 [ 2085.764372][ T4098] tipc: Resetting bearer [ 2085.787879][ T4098] tipc: Disabling bearer [ 2085.811767][ C1] ldusb 6-1:0.0: Ring buffer overflow, 2 bytes dropped [ 2086.141568][ C1] ldusb 6-1:0.0: Ring buffer overflow, 2 bytes dropped [ 2086.151223][ T4108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7729'. [ 2086.160549][ T4108] 8021q: VLANs not supported on caif0 [ 2086.183391][ T5896] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 2086.333372][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 2086.340147][ T5896] usb 7-1: config 0 has an invalid interface number: 78 but max is 0 [ 2086.348763][ T5896] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.359486][ T5896] usb 7-1: config 0 has no interface number 0 [ 2086.365717][ T5896] usb 7-1: config 0 interface 78 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2086.379051][ T5896] usb 7-1: config 0 interface 78 has no altsetting 0 [ 2086.387925][ T5896] usb 7-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=9b.26 [ 2086.397176][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.405529][ T5896] usb 7-1: Product: syz [ 2086.409787][ T5896] usb 7-1: Manufacturer: syz [ 2086.414460][ T5896] usb 7-1: SerialNumber: syz [ 2086.421808][ T5896] usb 7-1: config 0 descriptor?? [ 2086.431663][ T5896] (null): radio-mr800 - initialization failed [ 2086.438241][ T5896] radio-mr800 7-1:0.78: probe with driver radio-mr800 failed with error -22 [ 2086.447289][ T5896] usbhid 7-1:0.78: couldn't find an input interrupt endpoint [ 2086.514368][ T8516] net_ratelimit: 2 callbacks suppressed [ 2086.514381][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2086.634706][ T8516] usb 7-1: USB disconnect, device number 96 [ 2086.826746][ T4110] trusted_key: encrypted_key: keyword 'w' not recognized [ 2086.835289][ T4110] trusted_key: encrypted_key: insufficient parameters specified [ 2086.876573][T24233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2087.055514][ T4121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2087.064403][ T4121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2087.312812][ T5896] usb 6-1: USB disconnect, device number 42 [ 2087.339240][ T5896] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 2087.412264][ T4138] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7740'. [ 2087.457550][ T4141] syzkaller0: entered promiscuous mode [ 2087.463045][ T4141] syzkaller0: entered allmulticast mode [ 2087.563539][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2087.783656][ T5896] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2087.940575][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2087.958784][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2087.987905][ T5896] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 2088.003645][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2088.007436][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.050928][ T5896] usb 6-1: config 0 descriptor?? [ 2088.227198][ T4161] fuse: Bad value for 'fd' [ 2088.508009][ T5896] kovaplus 0003:1E7D:2D50.005D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 2088.603709][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2088.758669][ T2159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2089.155358][T24233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2089.337045][ T4177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2089.361993][ T4177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2089.468059][ T4178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2089.489868][ T5896] kovaplus 0003:1E7D:2D50.005D: couldn't init struct kovaplus_device [ 2089.500370][ T5896] kovaplus 0003:1E7D:2D50.005D: couldn't install mouse [ 2089.516961][ T4178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2089.542405][ T5896] kovaplus 0003:1E7D:2D50.005D: probe with driver kovaplus failed with error -71 [ 2089.575696][ T5896] usb 6-1: USB disconnect, device number 43 [ 2089.643636][ T8516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.293546][ T7152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.683644][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.275376][ T30] audit: type=1326 audit(1766764933.347:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4210 comm="syz.2.7760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2091.303648][ T360] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 2091.316665][ T30] audit: type=1326 audit(1766764933.347:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4210 comm="syz.2.7760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2091.339918][ T30] audit: type=1326 audit(1766764933.387:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4210 comm="syz.2.7760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2091.362610][ T30] audit: type=1326 audit(1766764933.387:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4210 comm="syz.2.7760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2091.391039][ T30] audit: type=1326 audit(1766764933.387:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4210 comm="syz.2.7760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2091.418744][ T30] audit: type=1326 audit(1766764933.387:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4210 comm="syz.2.7760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2091.441114][ T30] audit: type=1326 audit(1766764933.387:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4210 comm="syz.2.7760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2091.464539][ T30] audit: type=1326 audit(1766764933.387:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4210 comm="syz.2.7760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2091.486777][ T360] usb 6-1: device descriptor read/64, error -71 [ 2091.496593][ T30] audit: type=1326 audit(1766764933.387:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4210 comm="syz.2.7760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2091.521469][ T30] audit: type=1326 audit(1766764933.387:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4210 comm="syz.2.7760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2091.575175][ T4216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7760'. [ 2091.720451][ T31] INFO: task kworker/1:0:18707 blocked for more than 143 seconds. [ 2091.728422][ T360] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 2091.745965][ T31] Tainted: G L syzkaller #0 [ 2091.758564][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2091.768382][ T5881] net_ratelimit: 1 callbacks suppressed [ 2091.768396][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.795343][ T2159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.806135][ T31] task:kworker/1:0 state:D stack:20800 pid:18707 tgid:18707 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2091.831135][ T31] Workqueue: usb_hub_wq hub_event [ 2091.842389][ T31] Call Trace: [ 2091.849210][ T31] [ 2091.855968][ T31] __schedule+0x149b/0x4fd0 [ 2091.863384][ T360] usb 6-1: device descriptor read/64, error -71 [ 2091.877039][ T31] ? __pfx___schedule+0x10/0x10 [ 2091.885964][ T31] ? schedule+0x91/0x360 [ 2091.898224][ T31] schedule+0x165/0x360 [ 2091.908038][ T31] schedule_timeout+0x9a/0x270 [ 2091.919064][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2091.930506][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2091.941431][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2091.954890][ T31] ? wait_for_completion+0x267/0x5d0 [ 2091.960274][ T31] wait_for_completion+0x2bf/0x5d0 [ 2091.966333][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2091.972096][ T31] i2c_del_adapter+0x591/0x760 [ 2091.977710][ T360] usb usb6-port1: attempt power cycle [ 2091.993590][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 2092.008802][ T31] ? kfree+0x1c0/0x660 [ 2092.022773][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 2092.033895][ T31] ? dvb_usbv2_exit+0x949/0xb90 [ 2092.045601][ T31] dvb_usbv2_probe+0x497/0x3c20 [ 2092.056249][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 2092.068932][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2092.080774][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 2092.093375][ T31] usb_probe_interface+0x668/0xc90 [ 2092.102948][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 2092.115469][ T31] really_probe+0x26d/0xad0 [ 2092.130615][ T31] __driver_probe_device+0x18c/0x320 [ 2092.142128][ T31] driver_probe_device+0x4f/0x240 [ 2092.151955][ T31] __device_attach_driver+0x279/0x430 [ 2092.164866][ T31] bus_for_each_drv+0x251/0x2e0 [ 2092.174551][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 2092.188075][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2092.201078][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 2092.211184][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2092.226365][ T31] __device_attach+0x2b8/0x430 [ 2092.236594][ T31] ? __pfx___device_attach+0x10/0x10 [ 2092.243913][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2092.248851][ T31] device_initial_probe+0xa1/0xd0 [ 2092.254402][ T31] bus_probe_device+0x12a/0x220 [ 2092.259513][ T31] ? device_add+0x726/0xb80 [ 2092.265692][ T31] device_add+0x7b6/0xb80 [ 2092.270070][ T31] usb_set_configuration+0x1a87/0x2110 [ 2092.276941][ T31] usb_generic_driver_probe+0x8d/0x150 [ 2092.282495][ T31] usb_probe_device+0x1c4/0x3c0 [ 2092.287645][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 2092.293020][ T31] really_probe+0x26d/0xad0 [ 2092.298367][ T31] __driver_probe_device+0x18c/0x320 [ 2092.303846][ T31] driver_probe_device+0x4f/0x240 [ 2092.308959][ T31] __device_attach_driver+0x279/0x430 [ 2092.315740][ T31] bus_for_each_drv+0x251/0x2e0 [ 2092.320694][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 2092.327317][ T360] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 2092.337287][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2092.342826][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 2092.350552][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2092.356628][ T31] __device_attach+0x2b8/0x430 [ 2092.361864][ T360] usb 6-1: device descriptor read/8, error -71 [ 2092.368628][ T31] ? __pfx___device_attach+0x10/0x10 [ 2092.375762][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2092.380726][ T31] device_initial_probe+0xa1/0xd0 [ 2092.386039][ T31] bus_probe_device+0x12a/0x220 [ 2092.390957][ T31] ? device_add+0x726/0xb80 [ 2092.395637][ T31] device_add+0x7b6/0xb80 [ 2092.400110][ T31] usb_new_device+0xa39/0x1720 [ 2092.405992][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 2092.411351][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2092.416963][ T31] hub_event+0x29b1/0x4ef0 [ 2092.421468][ T31] ? __perf_event_task_sched_in+0xec/0x17e0 [ 2092.429218][ T31] ? __pfx_hub_event+0x10/0x10 [ 2092.435820][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2092.441616][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2092.449271][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2092.457359][ T31] process_scheduled_works+0xad1/0x1770 [ 2092.463438][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2092.469504][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2092.476470][ T31] worker_thread+0x8a0/0xda0 [ 2092.481181][ T31] ? __kthread_parkme+0x7b/0x200 [ 2092.487537][ T31] kthread+0x711/0x8a0 [ 2092.491684][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2092.497148][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.501806][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2092.507235][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.511825][ T31] ret_from_fork+0x510/0xa50 [ 2092.518578][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2092.523751][ T31] ? __switch_to+0xc9e/0x1480 [ 2092.528554][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.533995][ T31] ret_from_fork_asm+0x1a/0x30 [ 2092.538878][ T31] [ 2092.542122][ T31] [ 2092.542122][ T31] Showing all locks held in the system: [ 2092.551474][ T31] 1 lock held by khungtaskd/31: [ 2092.557787][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2092.568330][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2092.578080][ T31] 2 locks held by getty/5586: [ 2092.582853][ T31] #0: ffff888034c930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2092.595715][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2092.606350][ T360] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2092.617555][ T31] 1 lock held by syz-executor/5811: [ 2092.622757][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2092.636626][ T360] usb 6-1: device descriptor read/8, error -71 [ 2092.644397][ T31] 5 locks held by kworker/1:0/18707: [ 2092.649708][ T31] #0: ffff88801f2ded48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2092.661942][ T31] #1: ffffc9000c7f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2092.674503][ T31] #2: ffff88802847d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2092.683803][ T31] #3: ffff88807953d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 2092.706628][ T31] #4: ffff88807953f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 2092.716094][ T31] 4 locks held by udevd/32545: [ 2092.721020][ T31] #0: ffff88801eb8d418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 2092.731495][ T31] #1: ffff88807c047488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 2092.741199][ T31] #2: ffff8880602fa788 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 2092.751055][ T360] usb usb6-port1: unable to enumerate USB device [ 2092.758799][ T31] #3: ffff88807953d198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 2092.768488][ T31] 2 locks held by syz.2.7760/4214: [ 2092.773819][ T31] 1 lock held by syz.6.7761/4215: [ 2092.778947][ T31] 2 locks held by syz.6.7761/4217: [ 2092.784253][ T31] 2 locks held by dhcpcd/4220: [ 2092.789352][ T31] #0: ffff888048b9c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 2092.799294][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 2092.812601][ T31] [ 2092.815173][ T31] ============================================= [ 2092.815173][ T31] [ 2092.824086][ T31] NMI backtrace for cpu 0 [ 2092.824104][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2092.824131][ T31] Tainted: [L]=SOFTLOCKUP [ 2092.824139][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2092.824151][ T31] Call Trace: [ 2092.824159][ T31] [ 2092.824168][ T31] dump_stack_lvl+0xe8/0x150 [ 2092.824197][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2092.824224][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2092.824258][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2092.824288][ T31] sys_info+0x135/0x170 [ 2092.824309][ T31] watchdog+0xf95/0xfe0 [ 2092.824341][ T31] ? watchdog+0x20a/0xfe0 [ 2092.824374][ T31] kthread+0x711/0x8a0 [ 2092.824402][ T31] ? __pfx_watchdog+0x10/0x10 [ 2092.824427][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.824454][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2092.824483][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.824509][ T31] ret_from_fork+0x510/0xa50 [ 2092.824530][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2092.824548][ T31] ? __switch_to+0xc9e/0x1480 [ 2092.824578][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.824604][ T31] ret_from_fork_asm+0x1a/0x30 [ 2092.824646][ T31] [ 2092.824653][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2092.949739][ C1] NMI backtrace for cpu 1 [ 2092.949758][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2092.949783][ C1] Tainted: [L]=SOFTLOCKUP [ 2092.949790][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2092.949801][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2092.949825][ C1] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2092.949841][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 2092.949857][ C1] RAX: 0000000002a32667 RBX: ffffffff819713be RCX: 0000000080000001 [ 2092.949871][ C1] RDX: 0000000000000001 RSI: ffffffff8d792008 RDI: ffffffff8bc083e0 [ 2092.949884][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 2092.949898][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822170 [ 2092.949912][ C1] R13: 1ffff110038dbb70 R14: 0000000000000001 R15: 0000000000000001 [ 2092.949924][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 2092.949939][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2092.949951][ C1] CR2: 0000000080202018 CR3: 000000007654e000 CR4: 00000000003526f0 [ 2092.949967][ C1] Call Trace: [ 2092.949975][ C1] [ 2092.949982][ C1] default_idle+0x13/0x20 [ 2092.950003][ C1] default_idle_call+0x73/0xb0 [ 2092.950024][ C1] do_idle+0x1be/0x4d0 [ 2092.950042][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 2092.950062][ C1] ? __pfx_do_idle+0x10/0x10 [ 2092.950086][ C1] cpu_startup_entry+0x44/0x60 [ 2092.950105][ C1] start_secondary+0x101/0x110 [ 2092.950131][ C1] common_startup_64+0x13e/0x147 [ 2092.950161][ C1] [ 2093.130270][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2093.171988][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2093.178861][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2093.189541][ T31] Tainted: [L]=SOFTLOCKUP [ 2093.193856][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2093.203895][ T31] Call Trace: [ 2093.207180][ T31] [ 2093.210105][ T31] vpanic+0x1e0/0x670 [ 2093.214076][ T31] panic+0xb9/0xc0 [ 2093.217783][ T31] ? __pfx_panic+0x10/0x10 [ 2093.222181][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2093.227544][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2093.233689][ T31] watchdog+0xfdf/0xfe0 [ 2093.237850][ T31] ? watchdog+0x20a/0xfe0 [ 2093.242167][ T31] kthread+0x711/0x8a0 [ 2093.246219][ T31] ? __pfx_watchdog+0x10/0x10 [ 2093.250880][ T31] ? __pfx_kthread+0x10/0x10 [ 2093.255454][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2093.260635][ T31] ? __pfx_kthread+0x10/0x10 [ 2093.265217][ T31] ret_from_fork+0x510/0xa50 [ 2093.269814][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2093.274918][ T31] ? __switch_to+0xc9e/0x1480 [ 2093.279591][ T31] ? __pfx_kthread+0x10/0x10 [ 2093.284179][ T31] ret_from_fork_asm+0x1a/0x30 [ 2093.288952][ T31] [ 2093.292295][ T31] Kernel Offset: disabled [ 2093.296603][ T31] Rebooting in 86400 seconds..