last executing test programs: 15m2.273181725s ago: executing program 32 (id=1544): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r8 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) ptrace$ARCH_SHSTK_STATUS(0x1e, r8, 0x0, 0x5005) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r9, 0x289e0cb5, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}]}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0x1e000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000004c0)={0x42, 0x2, 0x2}, 0x10) 9m19.491333811s ago: executing program 2 (id=2660): r0 = syz_usb_connect$lan78xx(0x5, 0x10, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x5, 0x2, {0x2, 0x9}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}}, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x5a02b0124c6bb569, 0x12, 0x5b, "94f3a95a65e8a2d9149677ba83f5c33dd97dbd2ed98168b8991789d4eb0e6eaa8d2eb0aa1224fc739925581f09912c2a0dc4c98e6abbf1c5cd60a6269adf4e31622fd7ca258a79044773f43e43c6d5886dcc6233fc8d1fd0c8dc7a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xa6}, 0x0, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x8}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "362a426924afaf6ee6bc19bc3a510b22e2bbd37c555ef5a0a01d2b3568b43c2caea56f2c6ba62f7d5afe58b72fc143"}}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60) setpriority(0x2, 0x0, 0x8) setgroups(0x24, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)={0x34, r7, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) close_range(r8, r8, 0x0) 9m16.145808317s ago: executing program 2 (id=2667): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20004840) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x2000000) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a002, 0x0) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x3) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x2) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4109, 0x100d}, {0x0}], 0x2) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x1c) (async) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x1c) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94) mmap(&(0x7f0000cb0000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r4, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b5952abd7000000000000a00000057d130b4572066d9a6c3d2bfa6638849706a5ea9f87dc6a99561f33c1306f9abfa6161b6908453ff6e0b0b316bad5f2f012f46ce783b66d5bed0437dfe9568be17c1eb83e2508be58b172ea7f182a4e505bdf4bf772d51a657688aff0066f56295cfd1bd51", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x26f, @mcast1, 0x1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001740)="2392c53742d3abb476388817a8a35505e71128bce8830f5eaa14e614c192de2838ce37b6f9e0ad096f60ebfb6476d9fec6a0ef6819762fbbe1c42083e485de23114194cd76202f45846b8c3e20325b28ae7ce07995b760b45f2a0e148f28c57c5002848d78fd80786309debc8ea69411dea1223c82493f6d9449c83e1672b62f7d5ad999aacf7b5290cab23f40898e08ae684a5f13ad3d2aa018cb7924c2e9323ad2ec9c5d273eeabf203e756ada6b026ac788fff6900cc3601353602e74eb64dca6b4e0c01421dd53937e47234db85fcf90645fd45dfb7af534fc84f74ccda8f96989b0245452e3095f4f818f3e46bcad1e5c9c39eacd489f829b6afcf93c67ccddcd73be70af656cca5902d9e7c9c55769c4acb749cda8402b1076f1916a11aa0ad02905ce71b5be408f0805d8d43227e936bb0909349471a50b201a9861f7105d5045946fe7b52bedd97bce944287ab19ce74c93f875dfe428ed332fb396440ed1f27d329fb46183c0f5768026a892d7a1aaac932e18c889b4b36aae766885545781c1734fe05db8c139456e067a35ec056841f4f5f56ba962f0ca6a32a4896fd892f89bcafdc5db59d75f93c305f65b0937d71028c05175aace7123f874cc3c20498d61c048fe97fdab222689cc0c5c47435d7a0014e789b733b3788521e67b8fd583f7913359e7dbefb041dbd870aea325dcb746409b8316891316d0a24d6f893b95d49bbc7ff1b3581307b83744e34f64d8b8560c8812f957ea4a102021a0481dc08da18fcc803e085282a2fe0d9db7bf71c429dbe9d97a4eebbb0f5f5b4c34b4290b245929032e23f8b82d4727adac078f1f250b9254d9cc691c54b66197051114774f4fe96865936768701217669aa07abe388a65bfe51d0e9462aa3576430138b763b51ec7397b0ad84e62c2845ae919347f0e0cafb10f71a350478e5f38ecca54e94e3c147d4503e02ccd8c576761fe6e9700e066bca2c9ebeb88161e93e0b7af17bef0ff6163b8da75165ede5fe87e2168999d8b1bdf024d998191a9e5e1e0453f291192bdbb4c4c6910187b21811067ca4b44d69f7e2beee4ff75af68690850a5f2329f7a6d26c9c6f75ec5ef88a4a6a0c1cda537c64f51ce0601b0314b761ac63b35cff77b8cc5c00d1927f64563904550d31c587d7d2f6d32949628c9f4b6f26a71eec19342c026ca2131060842d5dfae4152b9dde38c8eaa050484e7ee9a158bd837e4f75ad5b8ba3cfdd1d085a151d3429a6fc4bc8e198ab2b4693afd51c9847e7ea0756a9be79528c8e20391cbf0badf6f894b2490e7bf68a798a42007afc1ccda377de8c5cbdaf91b467580c2dac9326501a074b78660dc6e49e4a49e230894b15c3322e0848e5fb7c93073d5c7d038b5b2cc022f42fa7ab660216bce11b6425eb4614d18c7df7da71227e6e63a9ad2848378157ee0e28fe10e1a1cdb5580169eadff01fef4db4a8ee74f8931110777dd5dfb912f3e83338f0f6cea64ff9f59bb4059ecd92dca5258f38ec5763fbdc4fcf3aaf411f7b688a90d8a3cf4c39f48aefc18cf58f7edd147bc05714b078dfd8877e4aa13727429ba7cabdcee924fa004aadcd5abc3c39d54696d904496ad9ed19fcf416b05da5a851b926e37211e638092c2576f8c17287a73eb0f273db35df8bd9c2069eb32d16d7d0b1eb62529be0d8371f341e81f6d14bf27c355133226a696908a4d7c3d620e3c5afcc002b42197f86918e4c9add7670ec492dd2888b879ce6ad7959aba04a2b8f1f7e79ad6a77230cda45092158ec59f8965eadc1e56036e36049d50462ea693dc8cc03476bf5fd99768423c7d49f7530c88b3ec45f6d34177daed770af9ee6f9eee90e011f6d93106d606358d6193778d8e42fe8d2a759a52a7765acf74483ae3d3f4af415072a83ff75d320021aa2a1de207300875d82d27f7a4587d9d39b0c466174d3a1d77f59eae611ad13a093311427db05ff4d7cafa2e93a1d573ceafdf78667fdc6d965d1c9511782f0250ca7f22a398042abbfe1ff1c49210bd513468a1f181afa22f8bf05c57241c63e765cfd0ee64767c77db770e71fbfd13f20cadb1e8d0eb7a0b9df17632f7b92b43deb1fc4ea3454e916cb4f7327f8c623091fc266c6196f768ff28f6bf2ab382e6b65acde8927a3620cd556e9c100abd2779cf8105ac98e89d7146fbd0684961652c14af579966dbb0f04e4eeea318db93dbf79aabbc70f7430664686f7bd6b2b32ed374b67128d7b9a543361900b043d1c4d35b900940ebeed6d76b6f45c876866021da0e9f81d5e3eacdbed84fb1f13fc446f9479756a723c72f16ec7fa2fc748939f5771eb5177b6396cddcf44e5039761d76321d1a0b4531b7c34c6e042e775d6555a81444d95141413e8cc7f0c80feb0773f642d0a326d4bd78f9b263586956b5b3a97f7f281a042603decb5dc6d08342ae733e047b2744b112d24589418d5f9ce258867fcd19daef5c7c0d523e46d63ce92d6d06d5e153c4147349a7f6d61ba113541fcf9fb4f52f92e1e1fc110fe1c510f3124087c9a2b0a746ab7d2f6c4f3d14a447d33f8f3e0b94780dda479dc018e4a20bbb0ec41a1933189c8a7fda587ed4c33474fab5adde09f32970897bb516bb1f8d18ab08874993d82e9f75d35b2abe27be5f444a24eb74bbb5747f0a62fcf20e854ed1bf7b430ffb4599a9444c5cfad59d8e29e89ba21c9de769816c1367cae599158e488239ad036a55e1c7c7046074cf478fa597e93e1e1bd24c696b316a04f964b7719138ae608cf9aaf22dcd0eb40eb8a8d05ecc61c1675fad093dccccf0e38ce72db8b2971eaff566f9f1d5c05ec332ec46116354c4a7c957e15cd7f36234e4061a367ff0d49b1fb308b608e0712197b2c3f14598a693f6f93b4ecd92a503c1ef1bb55176c6fe55d386cfc2b375699eb85330b132a333cf7f2c1a0115f58fc1eedd70a44e9c31391e264fbc6787f74a4c7b79114bb294febb11d67edb365a2bdde9eea49d24a6ac573fc6830f4d99c349686df5d5a3d2ebc6ef92dc306ac096fcc59120bbecf516e99b2f02448b7550ffd1fdba31b304112d854bd6f8b74694d1305cf4018864aa2ca03f982e4c0e60df239bc852bdb3ae27b6ab129469b5ab26667cf35883e68258bc8b354ff986df48a23f5010fe227e397f391714a60ab5ec7fff65b8d16463c426432333ebb5fb085ab4769f8b6d003edd176807dd78de781e0de4bfb2c8c630b556b28017a70e45576b64fcc8d5631f9e103a0f3341d4be97816a4f4b19fc605fe0f26712243bdbf341b9203214b53666c97e45e179e4b5fd145383782c854cceb8fc59ac655cdbb9bccd205bfe7f7ff46338d9c48ecd2ba03f9d84955a8bc4d6b2f9d2fb05f9d0d30971867f20c7ac48f4d776119e119cec19153c8120f258162cb780884e00162ac135a8b9b74cb4a9a403a44046742519eb30d2ce3d83fb760410aa2d2c414a7f0e66f72af8ee25d1b6faa7bb54a979667d3f90714d398172e1694a52c909f54b41f1bf0e08559ccba97d43c538688ec3f54f5b5687dbc275cc33fca22424ae88220bf3904ae5cfe79e1e18dd0144338a845189f9e15ec805d177dcd715087400073c02db95053fabe6c0b7898c6e8fe69009d589c270554d6b2eee1dfbfaa50d53f33ba69ab6f5ae1cbdf34a9f0b5994a5e8d7d0377bbf283c89dd0924563ad76069183b318476a9a6bc6e8e907b671229bda1cb6bb188260d43aa0b5c41912cf5c844189c53b70394559ed6bcf5158624704874d4f44e7c1ba85cdfa04674ddad4bc87050a01e621742ad005a2cdd86df0fc1d9e2d572f4660b9b9b9a92efae2b36f367ccf895c1f4df5704590a2b39239b8b9dd7502dec54b648317eae01e75c42e3635d1419245f11d40ae9c5cf967bfddea424e1e0bbcdee08b916383a8c8e36f25f77a5610e5cc4eb3336f554fb7c2394684a77960f7fbc5a173dd067df42d70f3da80915731875e192824b6ee1035fcfe95dfdc1bad126ba4e58d500cf46a0f808080bef9e547fc4e8c3d87a94730cd4901a6eed48c15099b935a7560e1b456444d06658c680446745d79c7438cc201be1017239cd6c26c4159cd5d2c2772676773e7b4f98501c76fbd01ad9229735135e050ca3a8060b67b31298f8674f54b25d3a0b6b17ea5199c6c46643892120c3e4f59d6ed76e70ef126d35d69a540f6bc05952c9d62d4fd02a68c6332f3bafdc5df381df58bbd7da6cfe39dd34baaa1aac65839912c3dad7d6531b9a2b0c88c40465b53a45dbdfaa120b0fe090cc14b795f0d99b94cf723e4f3d3b4225cd50f52fd3632b652f06e2077481746352735e9d5660594cfa1767bec0b736e50ee3585c67398bf6dc52c8ba9c7796b0e2b26dc84efab96b2824ebf2a6d798f60e92078fd3ca81bbc24121f91d62509ca066ad1f85ea567b56ea2d9afd7921ea6f953f45a3a86c2a4e6d1b7c4e4bac7b74cefbb0f6311e109e13a040741ccc62dc5ca038e783b8bab74e2a72f675283d15c2ebbe150aaac056094606ce7c3dae402734e9d8e9239791b75abe2cff4db3e2496c05696c470583cd0f7f9dc448004805cac771d188d729d74b3c6bf9e338e77fc878a1ba9563ae5abe975203b001b4f32effa0b3ffb4cb20ba882cd7e93776c50924b48417518878eff43ee896cfa09dfe9a6b63ddf1a06b1dd8d22ce96d6cb0b8c22879352034760b4b11afcaa80eee1135ed745cbe034258e65cc2ae8327e256b560805deb18a06db2706c0e02beb16682aa2fb6875920ddf22ad164172cf0e17f2534d8de70ad8458fe726ddcc044dee7971be9c627a0f16b7b654874c16ed2e75ec91b84a0300fadc7bd3cbfdb34a859aeb7ebff374852091574dc0303c454a834d7221d3a7c36fe4b61199b39ea52f62cf2537c10ffb28bae247a48e3b47c155031bfb3ebf8fd325a912809d40e2a6d779339b33c57d2ac556096bf26ce7cf942c169e8e3a0d31b47451c7a7e0adddd755552ab7f060dc1204a6b0f66675068fb0bcbda0664e77eee60511a583ab9feb2235b75c2779b4d2a0582fadf0c5e47fd354a0b317085769f154c151d391ebc53f7c1e0f81ed2f974fed47552299a76b986972088eb18bbf1e6fdab1bfbf6bc6aaac629cac2b278b2610cda276647676c35b485f997701b3d6d0721682220c4e250a9f7d552b508ea72e5c0402ed22557e058e3ed9f5fb222b24a575819bb4a10dabfe7e768eaac155e6e1f6238fcf74468231414134b08d0be7aea950b442872b682e46e5c6544509bfdca01e709d8e0736daa564e9aa004c00ee9ee12fa2fbdcc5bfe2107753b7df71c9cc8dfbf209e85b3c7d6dc9856b921d3630bd6f7548d0b7c11271e13c9906f72223d59b8e2e81025a8b4c50cdc3d6de8bb36ab5139522ea36d916113047e3c144353c430236b0938ef42d1f729116215caf0a9d3d019860c63e28cacf160824e3394e5a1c066e96b603ba6a6350d24f0897871193b3ab93b624133633583eb1e64701510ab4081fc5ea2aab6e1514930bd681600b2db3a3764e10760423826da63e220e4494e1780de6de0add6a8a51ae4be5154bfa9a49e6c264675ac84c1457239aecf2bca7ec5d898452b6b1823612cd0d8cb97170aef7c44f21565da44c597eb868a796d4b94f391f2b553c6ce78ce0ed0de90f4ca49954b57ba06055d44d048b10a58e8d9410c2e30a54cf8bab6f7d171296dd88a84eb1038d5bdcb9524e737607f3c3baf18b69d5e0c5f2ab9fabc1c905fe5e53b9c46986750aaf0b7a6cc6fa2b0b16b01e", 0x1000}], 0x1, &(0x7f0000000680)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002740)="7f4368cfcbc3e72c32725b994da764977d67f783466f0c8ea1446f69341c728b251a5e4f576af3a13d2ce9c07cec63df7e0f6e4340fc9c65e0df8154578d5767dff67744bf7acf0dd3831100878ed40da12c58d2a6d0e48d81e3", 0x5a}, {&(0x7f00000027c0)="7474ef27793727c516e305b39c69098809b4acddddc14fd8883283037dcdb80d903b50d52d2d1663dca0c5b7cda07437a5656fbafd6ac9eb8ecd0f626715dbe3734ab09dcb85fa49cea03fb2b3398c138751", 0x52}, {&(0x7f0000002840)="b56da2930ce687dc5fbaea8fe5b31b66c368fc9e28b98f1f2ce93870302a26cfb2873fca31679305952e5e2852317557b0f9184ef69c27e7dc6f01396ebca1174c2330ec810aec04d7a7c8341df7c377e6d1b3d0380c220121d94960e187f3853b8bf3a15f765bb474b62499f7315a53468236b0252023c42fa6424a2ea3d208dca28493aef5d8eebf78b4a90bd6719530cbf34a99d966783f47927f58267ee81a5b7e0ed4eb14421a", 0xa9}], 0x3, &(0x7f0000002900)=[@timestamping={{0x14, 0x1, 0x25, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0xeff4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x78730a77}}], 0xd8}}, {{&(0x7f0000002a00)=@in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x2da}, 0x80, &(0x7f0000000580)=[{&(0x7f0000002a80)="bb92fb599f971597d9073e4ee0c73baf1fc658f78a577e3ab13c10c0b31de6b407d04f64d87b23579c866692b63f672dd71b76e0aa2e8213a3f392ca2bfdfea45f9b2ab47cec32e444c28b2dc2bba148fe17e775ac2658cbc278d47dc9344429d82bcfddf3ac421f40a67a9e25e74cbda65dd4af6d381fab0e02e166ceb34830db3036d3e3599dab34657e2c6c3b289c76c972423a86cb2701f09f0c1743948924ca427eae2f47ddd9d869e6b7e61e653a075d6fdc676f69d9759f54f7c2d076bc83bcb096aa36a3f1d0c2a6b582886169a61aa47b381a579334313036b0c9c2bec91d", 0xe3}, {&(0x7f0000002b80)="d15d85e736ec9b5b4e2493be696a99cd3d2f23506e3217f4e9f85e26fc6e0903701237021eb110a5f201e96e2f656327a1ca43b6e4009eb8506d33234326af98e8ba8a866a3ed616f98779be9df0d8102188c65683d15ba2ce343d39838bbb8da1ccc440bf17c575cc9ee3124e64418f738372106c419b", 0x77}], 0x2}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9m15.061328357s ago: executing program 2 (id=2670): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x210, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@challenge={0x10, 0x1, 0xea}, @challenge={0x10, 0x1, 0x4c}]}, @NL80211_ATTR_IE={0x1d5, 0x2a, [@preq={0x82, 0x30, {{0x0, 0x1, 0x1}, 0x2, 0x5, 0x80000001, @device_b, 0x30, @void, 0x8, 0x800, 0x2, [{{0x1, 0x0, 0x1}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x3}]}}, @prep={0x83, 0x1f, {{}, 0xfb, 0x31, @device_b, 0x5, @void, 0x57f, 0x1, @device_b}}, @perr={0x84, 0x129, {0x7f, 0x13, [{{}, @device_a, 0x1, @void, 0x7}, {{0x0, 0x1}, @device_b, 0xd, @value=@broadcast, 0x17}, {{0x0, 0x1}, @device_a, 0x6, @value, 0xf}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x2d}, {{}, @device_b, 0x3, @void, 0x2e}, {{0x0, 0x1}, @device_a, 0x7ff, @value, 0x39}, {{}, @device_b, 0x7f, @void, 0x8}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x37}, {{}, @broadcast, 0x8001, @void, 0x15}, {{}, @broadcast, 0x6, @void, 0x28}, {{}, @device_b, 0x0, @void, 0x39}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x35}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0x3c}, {{}, @device_b, 0x5, @void, 0x36}, {{}, @device_a, 0x8ff, @void, 0x1d}, {{}, @device_b, 0x4b, @void, 0x27}, {{}, @broadcast, 0x1, @void, 0xb}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x3d}, {{}, @device_a, 0x1, @void, 0x7}]}}, @dsss={0x3, 0x1, 0x3}, @ibss={0x6, 0x2, 0x401}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x7, 0x0, {0x1, 0x9, 0x0, 0x39f, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x3b9d, 0x7}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x50}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xfe, 0xc4, @device_a, 0x9, @value=@device_b, 0x7, 0x9, @device_b, 0x800}}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x34, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xeebd171694a1125f, 0x3}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20001}, 0x41) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty=0xfdfdffff}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xe8, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0xa9}}, {{{0x9, 0x5, 0x81, 0x3, 0xa3898fd0f91618d5, 0x0, 0x96, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x0, 0x3, 0xff, 0x20, 0x1}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x446}}, {0x6e, &(0x7f0000000380)=@string={0x6e, 0x3, "4f31cd47c06b738ee31f2e8576c94f33a9c7d177268e340f7733796d028834aae9974d3031d3116950003707efe98db20944331d6a583b1021f039817cde49821964e4f53d626c31d3edd6babea0460aaab36ced4b7f5fcf95b59737296a9b00f758f5aaba47b9f186096ad9"}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000900)={0x24, &(0x7f0000000800)={0x0, 0x9, 0x68, {0x68, 0xd, "4283134f96732f173b14b7b07e2da213eb467f80ac791ad82bb491da4849245ba6081c6345f52e7109e4b8cce19d37596936b414487c7c40329798fa5bb63ae5dc33aed7f61e32ad37696ca7fef14a1cc25c79f6dbc374bc0d9a0415ee93a8f6adf479605b8e"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000880)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "0bbd6ada"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x369d, 0x17, 0x1, {0x22, 0xf4a}}}}, &(0x7f0000000a80)={0x2c, &(0x7f0000000940)={0x20, 0x7, 0xb, "3eb93a6dc7d1fb4cb679c5"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000a00)={0x20, 0x1, 0x2a, "77f03a7284bf402b668147b5c6f8b7b496a9a1af3e695048661be123332f86dee092457585966f29c6f2"}, &(0x7f0000000a40)={0x20, 0x3, 0x1, 0x9}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) open(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') llistxattr(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) 9m13.032468004s ago: executing program 2 (id=2678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) accept4(r3, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61128c00000000006113300000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf0537d2000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 9m5.529684453s ago: executing program 4 (id=2698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0x80000}, 0x100}) fsopen(&(0x7f00000000c0)='anon_inodefs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x800, 0x2, 0x0, 0x1}, 0x50) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) ioctl$SIOCRSACCEPT(r6, 0x89e3) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r7, &(0x7f00000003c0)}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010003b15ffffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000015001006774700004000280"], 0x30}}, 0x2400c080) 9m4.331324269s ago: executing program 4 (id=2701): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r0, &(0x7f0000001bc0), 0x0, 0x4001a021, &(0x7f0000001cc0)={0x77359400}) r1 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) socket$inet(0x2, 0xa, 0x4) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9m3.456824535s ago: executing program 5 (id=2705): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="e40000000a0a010100000000000000000100000108000f4000000006c000129d55bd84e8f7b54173e3b1a3985d6580100001800a0001007175657565000000340001800900010068617368000000002400028008000240000000080800054000000002080003400000008c0800024000000017440001800b00010074756e6e656c000034000280080002400000000a080001400000000108bd9de200034000000001080001400000000008000240000000100800034000000002100001800b000100746172676574000024000180090001006d6574610000000014000280080003400000"], 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x41) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000000000207d1e3831000000000001090224000100004000090400ff020300200009210000000122030009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000540)=@x25={0x9, @remote}, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/174}, {&(0x7f0000000680)=""/141}], 0x0, &(0x7f00000004c0)=""/63}, 0x7}], 0x2b, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYBLOB="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", @ANYRES8=r4, @ANYBLOB="fe80000000000000080000328b0aa5129d4ebc6f9c1c68d7141570a61ebe090e13a23c260100175ffff993e7f2a4d8e9692bcba6a0f91e209488dee3e1db63b859ea517bb24221000000000000000000"], 0xf8}}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r9 = syz_open_dev$rtc(&(0x7f0000000040), 0x5, 0x1) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000840)={0xc, 0x19, 0x17, 0x1a, 0x2, 0xfffc, 0x6, 0xdf, 0x1}) dup3(r8, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x64, 0x0, &(0x7f0000000780)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @register_looper, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r10, &(0x7f0000000300)='1\x00', 0x2) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r8, @ANYRESHEX=r0, @ANYBLOB="829c13bf90e08951e1290c100d92f1c0bb2f6d3a88f31ecc3c5882d7ce2d06efdd620df8226ab33ca9c1eba450789ec8395d227761f43d5c6b39904e3ccf11ae6308171bdc73570ad19f9e2e529e19f7859e3ea8afde97245751b3f19019d37e377c4cec6445afc366b4eae65df850b42e0062ea458cf018142e69183119bdebde3ed6b57909cc35975f18c271f438490c59296a69ebe2bbf6f1e761787d830b565753a9b29198a71951944a922463f32863660cf8aa897445483109152a4241b6edede912b7d6655832bec70d0cb4f8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9m2.507629427s ago: executing program 4 (id=2706): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000002c0)={0x0, 0xc4, 0x7f, 0x265, 0x300, [], [0x9, 0x0, 0x3, 0x4], [0xfbfffffc, 0x4, 0x0, 0x3], [0x5, 0x2, 0x3, 0x4]}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) read$FUSE(r3, &(0x7f0000004380)={0x2020}, 0x2020) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000540)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x433, 0x0, 0x84, 0x1, 0x0, 0x0, 0x10, 0x3}}, 0x50) r9 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x0) fchdir(r10) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000002500)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x9082500}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x170, 0x0, 0x1, 0x401, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0xf]}, @CTA_PROTOINFO={0x6c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x68, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xb}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xc}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xbe}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1ff}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x800000000000}]}}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xff}]}, @CTA_ID={0x8}, @CTA_LABELS_MASK={0x1c, 0x17, [0x1313, 0x6, 0x6, 0x6, 0x100, 0x7ff]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x14, 0x4, @private1}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x80000000}]}, 0x170}, 0x1, 0x0, 0x0, 0x804}, 0x4008080) r11 = syz_open_dev$vcsn(&(0x7f0000002000), 0x0, 0x501200) syz_fuse_handle_req(r5, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x19, 0xfffffffffffffff9, 0x400, 0xc, {0x3, 0x9, 0x3, 0x1, 0x1, 0x4, 0x8, 0x127, 0x7, 0xa000, 0x0, r7, r8, 0x6, 0x3b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat(0xffffffffffffff9c, 0x0, 0x40140, 0x1) sendto$inet6(r12, &(0x7f00000000c0)="9c267bcd76194c232c5b4a94f801a3bd0ccb1e2e590e8d1e979416c1d76d5d927884404e972e81c52b711d46c3027b61671f5add64", 0x35, 0x40080, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000002040)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r12, &(0x7f00000022c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000021c0)=[{0x37, 0x0, [0x3, 0x3, 0x1, 0x3, 0xfffffffb, 0x19b, 0x5, 0x8001, 0x0, 0x6, 0x9, 0x9, 0xfffffff8, 0x7, 0x401]}, {0x1, 0x0, [0x200, 0x5, 0xcf1, 0x7ff, 0x7, 0x0, 0xfffffff1, 0x3, 0x441f490d, 0x1, 0xffff, 0x8, 0x774, 0x5, 0x7, 0x3ff]}], r13, 0x1, 0x1, 0x90}}, 0x20) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x1}}, 0x18) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c::=\x00', 0x0) 9m2.044036392s ago: executing program 4 (id=2708): syncfs(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="010000000000004c600000000b0000000d000100f102dcf29effaefacc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r2, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x83) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) read$dsp(r4, &(0x7f00000001c0)=""/95, 0x5f) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x4) 9m1.615680854s ago: executing program 3 (id=2711): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80802, 0xb) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0xffffffff, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}}, 0x2400c080) 9m0.066246707s ago: executing program 5 (id=2714): fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) (async) r0 = socket(0x28, 0x801, 0x0) shutdown(r0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYRES32=r0], 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0x0, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x6, 0x4) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) (async) madvise(&(0x7f00008cb000/0x3000)=nil, 0x3000, 0x15) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000a00)=""/200, 0xc8, 0x10160, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0xf, 0x0, 0x5d, 0x0, 0x0, 0x9, 0x0, 0x93}, 0xe) (async) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r4, 0x0, &(0x7f0000000400)) (async) socket$kcm(0x10, 0x2, 0x0) 8m59.375452036s ago: executing program 3 (id=2715): keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8811) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) gettid() setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x67f, 0x64, 0x0, 0x0) 8m58.586073426s ago: executing program 4 (id=2716): r0 = syz_usb_connect$lan78xx(0x5, 0x10, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x5, 0x2, {0x2, 0x9}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}}, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x5a02b0124c6bb569, 0x12, 0x5b, "94f3a95a65e8a2d9149677ba83f5c33dd97dbd2ed98168b8991789d4eb0e6eaa8d2eb0aa1224fc739925581f09912c2a0dc4c98e6abbf1c5cd60a6269adf4e31622fd7ca258a79044773f43e43c6d5886dcc6233fc8d1fd0c8dc7a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xa6}, 0x0, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x8}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "362a426924afaf6ee6bc19bc3a510b22e2bbd37c555ef5a0a01d2b3568b43c2caea56f2c6ba62f7d5afe58b72fc143"}}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60) setpriority(0x2, 0x0, 0x8) setgroups(0x24, 0xffffffffffffffff) close(0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)={0x34, 0x0, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x9, 0x0, 'queue1\x00', 0x200000}) close_range(r8, r8, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x7f, 0x40) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800100008000000000000000000000087001000000000009500004d00000000"], &(0x7f0000000540)='GPL\x00', 0x7}, 0x94) 8m58.306048567s ago: executing program 3 (id=2717): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xb) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000003c0), 0x68b, 0x4040810) recvmmsg(r1, &(0x7f0000001080)=[{{&(0x7f00000003c0)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/205, 0xcd}, {&(0x7f0000000800)}], 0x7, &(0x7f0000002480)=""/4096, 0x1000}, 0xffff}, {{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/145, 0x91}, {&(0x7f0000000a00)=""/129, 0x81}, {&(0x7f0000000ac0)=""/21, 0x15}, {&(0x7f0000000b00)=""/72, 0x48}, {&(0x7f0000000b80)=""/253, 0xfd}, {&(0x7f0000000c80)=""/157, 0x9d}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/56, 0x38}, {&(0x7f0000000e80)=""/54, 0x36}], 0x9, &(0x7f0000000f80)=""/236, 0xec}, 0x7f}], 0x2, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00'], 0x5}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x204}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x81) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) 8m57.845974513s ago: executing program 5 (id=2718): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r3, 0x4bfa, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_SETVESABLANK(r3, 0x4bfa, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) 8m56.829671178s ago: executing program 3 (id=2720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000070200000000009500"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r3 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x5e, &(0x7f00000000c0)={0x0, 0xfde1}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000b) tgkill(r3, r2, 0xf) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f0000000140)={0x100000000000002c}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16=r5], 0x7) 8m56.605896339s ago: executing program 5 (id=2721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff5c, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000180000003c797930cb891800000002400000000000000000000d020000000000000000000005ff07000000005730d6d063ed94baa0d1d17638f49b227005043a302f371468cd5bcd580a228ae97f438aa5293da17e81350956da834f224412fcf6f19cf4132729ceca05868d35a047f2634d20057aba3b917b38186a020000003a6b190d358c13e40cc3b3f2389767298529f98a68be220d02776f4c36ad1bafdfc5692918b024d74ea936e47457"], 0x0, 0x32, 0x0, 0x1, 0x7ff}, 0x28) recvmmsg(r5, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x100, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24040000) 8m55.078307872s ago: executing program 5 (id=2723): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000000000207d1e3831000000000001090224000100004000090400ff020300200009210000000122030009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 8m55.072693556s ago: executing program 4 (id=2724): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="06010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x20, 0x1, 0x3, "745202"}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400b80, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x13) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x13) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) (async) sendmsg$nl_generic(r5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x9b9, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x9b9, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8m54.789902321s ago: executing program 2 (id=2682): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={'lo\x00', 0xfffffffffffffffa, 0x80000000}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f0000001400)="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", 0x13e}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="320e7bb18dff29d51137271b2c8231e9e40d2e7bb56322b03390fac78c2b1a354f35bc1328225e0a1ed6e3f411a48a53e9d34ceb7781a6fc9a2c31baefcb571a4434b48e4cfaaf1ebd3053828a0986777ca6c26a0336ffc41933594b775525df48ce100e67478ebcb59b3eeb15f372cd44a4739c1583c56907479f4ccabdb875b20303493f914b15ed3d7b209680a175576e0e2b3aac968188bd2e43384abcaff7f14d4c93", 0xa5}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036b252c56290a4eb70a44487c19c117db925981fc925b7c45967cdf3", 0xdd}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d1f36371d565f1a439e", 0x93}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="889b2b663bc52b998e5164ef592dd016e1a57453dcf4c7ad0ee309b7f112c5f4931298006989fa7e5be6bf9e896bd9c52dd43dca2d3958c359583f523996ecbf226f8178281c96c49f97d0c04dd75e3fb23a982399273b6ba5cae6abb65eef0747e5e47c3338cd58b073fc86bd355fafb3d0fe1dcbc744e366516154e083505f2ddd013015f5da1f357ad404550837d418b63c7c6bf810b844d564dda44776f4bc92dbf5ca734271891781a39acf0c10870355e79f7192f7a1c6486b778eacec8660cc5ce5747f42a97458e21e11ee5e564fa74dc7c67ba4737600b1099c34cd", 0xe0}, {&(0x7f0000000d40)="6af118351b2776a2d3525c5f4d7d1103d5d9ab595e516eea9d608d34b09b177f7054e74349a3d6157be1b300dc6c58ab781ab4accbe2aa3169693042c761ea0c193666e4373d7b8ec4f2e36176da156c728696ccdb3dede7b6915fe44e21f74dbebc602610838e539c6a3a7c8cefe2f69cce79f76376f57de01c5517a88714ac6cf0553153ff63c8a093cf64882a457a13f814", 0x93}, {&(0x7f0000000e00)}, {&(0x7f0000001600)="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", 0x126}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)="09a2e1ee027661083e999e9ca6d50149a8f570299ce7e69670ddc2b032f442d775eae50f685af3e5b2c2e68757fed20964aeca6102540c836b277bc6b631bda10aaa806a296c6a5077", 0x49}], 0x6, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}}, {{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xd1, @empty, 0x6}}, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)="87de7f61eb6f3b1c95fe3ba09739170d4d8908f0e70f2fdf4e8c2494af4d4e35e7952933072aee57fab90cb3652bf7841850a0e98be6ee72236a073f3196a71ade31ffd3e06b81efbba69d4d7db92ad470cdbf96c9fd613ab1d505a04156ef79dbc6e0ca5a", 0x65}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e692107357b9daf238d7e0a4774053e302b14068fd9e324f7b7c228df3cb92ea034693b968820a7b5b7fa5e05f0f2c62ddc49c67c2acb2ce8544611c3ccea83ced512ac810cca79c6", 0x91}], 0x2, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x401}}], 0x18}}, {{&(0x7f0000001380)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x6, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(r1, 0x0, 0x800) (async) sendmsg$sock(r1, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) 8m54.286811942s ago: executing program 3 (id=2727): keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8811) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) gettid() setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x67f, 0x64, 0x0, 0x0) 8m53.313902984s ago: executing program 2 (id=2729): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x85}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040), 0x4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x3, 0x1, 0x5, 0x400000000006, 0x8600, 0x1, {0x1, 0x400, 0x5, 0x2, 0x100, 0x7cf4, 0x8, 0x7ffffffd, 0xfffffffe, 0x2000, 0x1, 0xee00, r9, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x4d9b6eaf) 8m52.792380459s ago: executing program 3 (id=2730): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x12, 0xffffffffffffffff, 0x100000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff000004000000000800040001000000", 0x24) 8m51.538698983s ago: executing program 5 (id=2731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f0000001280)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000007090000080080ffbf91000000000000b7020000000000008500000085000000b70600000000000095"], &(0x7f0000001340)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r1], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x9) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000700)=""/4096, 0x1000}, 0x1}], 0x1, 0x10043, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000060000000000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 8m36.102122745s ago: executing program 33 (id=2728): r0 = syz_usb_connect$lan78xx(0x5, 0x10, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x5, 0x2, {0x2, 0x9}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}}, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x5a02b0124c6bb569, 0x12, 0x5b, "94f3a95a65e8a2d9149677ba83f5c33dd97dbd2ed98168b8991789d4eb0e6eaa8d2eb0aa1224fc739925581f09912c2a0dc4c98e6abbf1c5cd60a6269adf4e31622fd7ca258a79044773f43e43c6d5886dcc6233fc8d1fd0c8dc7a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xa6}, 0x0, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x8}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "362a426924afaf6ee6bc19bc3a510b22e2bbd37c555ef5a0a01d2b3568b43c2caea56f2c6ba62f7d5afe58b72fc143"}}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60) setpriority(0x2, 0x0, 0x8) setgroups(0x24, 0xffffffffffffffff) close(0x3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)={0x34, r6, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x9, 0x0, 'queue1\x00', 0x200000}) close_range(r8, r8, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x7f, 0x40) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800100008000000000000000000000087001000000000009500004d00000000"], &(0x7f0000000540)='GPL\x00', 0x7}, 0x94) 8m36.059669591s ago: executing program 34 (id=2729): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x85}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040), 0x4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x3, 0x1, 0x5, 0x400000000006, 0x8600, 0x1, {0x1, 0x400, 0x5, 0x2, 0x100, 0x7cf4, 0x8, 0x7ffffffd, 0xfffffffe, 0x2000, 0x1, 0xee00, r9, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x4d9b6eaf) 8m35.720092392s ago: executing program 35 (id=2730): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x12, 0xffffffffffffffff, 0x100000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff000004000000000800040001000000", 0x24) 8m35.606392083s ago: executing program 36 (id=2724): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="06010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x20, 0x1, 0x3, "745202"}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400b80, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x13) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x13) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) (async) sendmsg$nl_generic(r5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x9b9, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x9b9, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8m35.374386714s ago: executing program 37 (id=2731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f0000001280)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000007090000080080ffbf91000000000000b7020000000000008500000085000000b70600000000000095"], &(0x7f0000001340)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r1], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x9) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000700)=""/4096, 0x1000}, 0x1}], 0x1, 0x10043, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000060000000000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 8m21.222464461s ago: executing program 9 (id=2735): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xece7bf3c9b91bb35, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2100) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000080)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x9f563000) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r3, 0x4, &(0x7f0000002140)=0x6) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002180), 0x80200, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000021c0)=0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000002200)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000002240)=""/47) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000022c0), r1) sendmsg$FOU_CMD_GET(r4, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x24, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) write(r0, &(0x7f00000023c0)="21a006ceadc47319bb4e2c1ebe489ba2ff816ff1c9cc44016ed901280fc480637e11048d9af0f77593509894d53b92652e731eac4994b03b024085e7c41bfa4a9403128397f28323bb85bd381d9f2d00adc750300f02f32cb18eeaa99b52f2cb81b756376739101d960444f9d84ca5e04d760a6543ea2f0568ad43511012da4dd659f0863009425a4a5514", 0x8b) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000002480)={0x0, @aes256, 0x0, @desc4}) r8 = syz_open_dev$sg(&(0x7f00000024c0), 0x7, 0x400) ioctl$SG_SET_FORCE_PACK_ID(r8, 0x227b, &(0x7f0000002500)=0x1) rt_tgsigqueueinfo(r3, r3, 0x12, &(0x7f0000002540)={0xa, 0x5, 0x1ff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r5) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x20, r9, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x64008) tee(r8, r4, 0x1, 0x0) getsockopt$packet_buf(r4, 0x107, 0x1b, &(0x7f0000002700)=""/39, &(0x7f0000002740)=0x27) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000002780)={0x0, @bt={0x81, 0x1, 0x0, 0x3, 0xfffffffffffff800, 0x7, 0x64, 0x101, 0x2, 0x3, 0x3, 0x8, 0x0, 0x8f3, 0x1, 0x10, {0x7, 0x101}, 0xc, 0x5b}}) sendmmsg(r7, &(0x7f0000005300)=[{{&(0x7f0000002840)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f00000030c0)=[{&(0x7f00000028c0)="dca3f3764d0e2aec0ba1e288160a116214fff39fc4ca54447c7503417f979fa478927b82ded0ae1dc3b4f9c84d34646560dd449d98507c259bc8875405afd0c8af902f607a685d19225b77b338abf4c074772b06708cc590a01eacf2dabb0ad863fdffa0c2893c289f6032388f1f7ce2d296b7d6a68a000ba43dd1929a726f9723c6fbc94593ec51de9e0c56f0e7d5508c0e3a755d69cae288eccc714e40e40b45d6df0215a9805f9f2fd8231a00623cefe864637b24ab82871b040fe1a7392c0dcde67a4c637960c46ab470efee01b616fc8d8a6b99f77c64f3eee941f9b13de558b9c5906100d933", 0xe9}, {&(0x7f00000029c0)="b9f0e25bde4948157fb86df92fc0f65716fa33f3cb490c9124e52c08cd2e3bdf476306ca9d247e295a5f30d8293b0b742a8ad647296d0f68eed004a7a075ecb3979cf782", 0x44}, {&(0x7f0000002a40)="812bc3ff8112ddbc65acb85eeba72cc8a0e79c8bbca96c5f36f8be573ca8586163d3e9506a0604f0ca2f7134d2140d6d489741ef7f45b5808548e3919dd276eb06839b4b8247678557d7741cdb156ba16c63d4b0354260adaa27d0bdd15364941a91af7a44880beff22fb710b87881fa304869e62e09bd8f6adcf9a235439668583d4a1c2f03ed165c4d0a07783c7057872a76ab514fd5bc9e32d2e9b2b2ccad377c6e3bafbfd70a8b33662e39979ad2c64b0ac799f4c202b859df7f0789fba4a902e718b259b9", 0xc7}, {&(0x7f0000002b40)="868489854306e893223393e7d4f6ed48973d5155dd66572d6c00846aa82df2282a997f8f0ca04ec68346a2e993cb064c95175551e0cac6dd0b7066c41c7156f0941e883956af5f4d38c62d5a35ace61df9f56d3f73017c8157306c46ead3dfa46ea734e09bcfaf72fdd65b0be98c06d540d348d207ac3113eb866bf548f6001ce887092f4df8cad731b80f374130d28c3cd97db85a083abddff94bfdc9b5b25a", 0xa0}, {&(0x7f0000002c00)="6183c50f83eec99d9f00bf289e23788430a3876abd0dfa864db6af6926e6d2063343372be27972bc8f3625a57bc9edd90ff347fd112a82508e20675710a2690c79ad95f3ca69c01a4ecb2efb7208b7ba48d20f302f16ed4f85c03350f93deac4de69fdb9538347b8e132dd85", 0x6c}, {&(0x7f0000002c80)="7471eaa6820c3ea5baafebe4d79482c34a1e3b58b3baa7cdc5ee1e181ce029e1af7b1d960be8bd00ab96d87d0cfffed3fdad0aa55b28dde4a4f73d602a47d3effcd1826c2f18ba31f5ed518dc3e051ecc0b64b042561ae60fd9b82ca1a43aa3844585fc4290ea2d6ff97165db791ab88fcb6e2709b02179326e1e1fc8d9c136a5a42f6ce248dd6b3caecf3a6dd8aeb2781a980faf0d6499ba2b85dffad70b23542c5c3e698f8d458cfa18fcbee99d2f68c929dec1eabac8d3f3bcd3bf74db783a47c1e", 0xc3}, {&(0x7f0000002d80)="2efcba24148efd1a98a40344b160aad1c260c5b13ccb8f28cd74bc710ec826a245ad49253dbe5eb282c12f3b4202589a1545f60c142b0f4a9c722e5b46c13a0470b34ba5f88e2a900b7bffe5c972d0f9b890f58f6b8916a97e347617cc72d421f6578c9df8a94c830e63784a4ee3e215af57f46d9891d6eb7e055df852b4a842408f3e5e624101b0cb5c753fd86aff524b4e18cae43ed65a1ea2419e1da231926232caa6c874f245dc2ac851f8ae8aad5444bf93621caa4ca801d9dc81a84ea6727e57425238", 0xc6}, {&(0x7f0000002e80)="9ca4b1f1561b5c54030e0099d9c4d6805866f4aafd7c4706b5e28d8b3da41b18e616dd94725896ce3063b92e96a02e6c1ac8943fcfff0a3217828732cd58dfd5c0b3f175e821eb7e3d34fb54e71b39f4165c5d4deb1d8acb0d5e8f66ef2587c13ad53f361d4b156be24d49e5665c812a07f1d3c3acc066949c92acbc7e51f61ca2a5729271a4b4772c4282cb9d0af37de48af32cc684fb7c081f15f6c29ab9138bae23acbf3d3de210a558cbf41c543ac9ab4b5a7e13f902ffdc", 0xba}, {&(0x7f0000002f40)="8a13d643e3c6f60b072c8af871703be74504743fce5fe65a773ef705fd03afbbd3581e69c17df6d05cd95f2721e9bfe5541c268ca5e5e8049648aeffdb98106e1ba820a6afe482dcd12b8b167595a37c7fbf11b76d261d216ed68e4af15f8e5cba16c2410fb1f9d05f2aa804516457a6804e545d3e75a2be80fa6ccec77a17e6274bb669d1aa04dad1179d58f96483c06a6c4a3002aabf9976f89f492a27a23172066076bfdd583dc166256ec5bb8f1460d7bd03ff9926cf151f6d3b84dd14d3ff2f77b6998fbfe2586cf3d3d860e8b3cc0879c01ec4bc4c38d2b131515710c9b8a39781293b53d798", 0xe9}, {&(0x7f0000003040)="b95be186eb672dd0fdbcecd36282eb2b36e3162aa69e166905ee4eb219283ef90cf1e0b0332786049e2a88311077dfd59e69ff6577507f742497d2b75430cfec94", 0x41}], 0xa}}, {{&(0x7f0000003180)=@caif=@rfm={0x25, 0xd3, "c41a920b6863809fd6f4c9ca1946a0a3"}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003200)="9aad7d9e01982b1f11bbc974d7d7a42d4a1c86f746911d73ba25a614d59e64b6d8b904e02c542a62c15d72ab19d84aeb5d781cae37242d6cd53f2b612996c132d04d8f46525353814495f59b4b9c70e22508eee1f400dbf6cafc", 0x5a}, {&(0x7f0000003280)="016607f35fc76a6adbd485c81c08fc51f8333078bdd3e1940c7f65e450d1f5b373b5016b493f4ad85fbeec8b84765b0a2d4093a1c82db194acde38b60fe52da53f2b02acb9f4df762771616454bad0204b060eaca2031033d937e8ce6538751b4973abd1a6083cc99b0e18adc5d1a6c87031a64fc92c77319c2ce587a4225769070958f5340a67515e56b3d039ee028b2c277f79dd3ab82d4d2e08d563d544900eae60a22c2ceb3073dcc31c467d580d5db3fa30dd9144950da058a9092d3aafbf1ca9", 0xc3}, {&(0x7f0000003380)="e6dda1095c6bbf22aac49171bcd4417a82d7fdb103c1e87f5b6afe2c6612e91e02963bbb751ad41bc37298b2695376fc73c92e247f0c5a0b8b3fc81b2ff4dc7615ff156fb18414ed0cd81fbb7dca356e79633a3aff2dcd6d6c54f7798184d5fc4883528c7ad1b3174b0c999b01b8d51bea4fb330d68ae37ddbdecb98acded1cbd7702e22d6d7ff3a0ccfd7b132632279d137b3e8d787d21a756035abdecbb0a29c3603ef57560ae91589ee48a223884097fcabf37b0c819d318e7c3c3a200fe8f0347dd4fe97b9f57a6832bfadf0775e46bb28f69c0f12f34ae312178fac49daf7a400b0b1f30099b95b", 0xea}, {&(0x7f0000003480)="760c321a39e38c050216536e39be90da81357cbbccc61d18387ea8963914376d2816ae81b895f5392b58548c378af7c44969c20872a2f00433adad9aee766790e6b2bf12cc61550116bd418eed", 0x4d}], 0x4, &(0x7f0000003540)=[{0xf8, 0x10d, 0xf, "62e4f5664b7ad3bca61d8829d72b29c3aa3cd69336cf159acd8e9dfc5d9f7987449ee3d6faa183346db0be62bafd1441e2cdcc6c4e481b6d3da334746c7f7fc9774eadbdb5ccb3bfd84c24ecd28549fd0e36dea5912a8de3ad0b38b1f48fcf6b6e9365239c9e9236a9b668d4a728ff9d893ff0b4ec63d318f6ba987fff83dca85fcf10de024ec07c9d12b68a0e7ce69bb994356c66e556d46d2c8a5bf1c9e31395ea20c431b0590ed0dbe97f162c75b402ce6687f47e48fbb547fc39cad4bd1cdf6b65dfa4aeacad57f8aca5bc5ad6129e436d2ca2337effe00f48c6721a5ae0b85e09"}, {0x78, 0x101, 0x5, "09f23da99dd609bd129df086a824724893164feba153222aa815ab0bac4df63f67117fa27f8d97ef3661b15daf79f3e9f9d5ed551cf9abd5b151ed987f925fe5ddfbe3867105f5bf19a41a702826d836d5c187d995371fe24bbce49b612241cf770abe91937ea19a"}, {0xa8, 0x104, 0x7, "211dc9b4a9da00a4f11ee70b667f62fb2363e715eaf898e7168835303a87bf730c362540a889074d23cc279122627d5ebb73f77beeb0cd2531aabfe98e8a4889b6726bc6988edfb68d885604122d0b3f434940c8ec75d34d9012bf333f890041ffa34b71890f341645a7a9c208bb67054b981ba586ee8c9ee02b2bf7435eb2d53e445ef05ea300793928d6ab57d865653e"}], 0x218}}, {{&(0x7f0000003780)=@ieee802154={0x24, @short={0x2, 0x2}}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003800)}, {&(0x7f0000003840)="15ef2dd6d412ae27899b024f0e7c7bd557a763e17129c48575e7fe4b94d9ecb6ae9db8194652e8a54b3e860c774ce0421497bac38f8883c60d9277e959ed01eba87f2c717bc52a3c967864ae", 0x4c}, {&(0x7f00000038c0)="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", 0x1000}, {&(0x7f00000048c0)="a65abee8efab668a1defa52e1c13afe378e1e4e106d3f0f6f1ed5d5c4f8ec7aabd7b0487fe96d1ae22a2204ff68bdb664a45e42ad885164ec5ef4f4b7dcb7a24de45a05c8cac64b30404039c81f7ae408f512dfd6251b4098f3af8bcbdd3c6e92000ebce31fa0ef2b93c70eccdf57c7319d1aec2a701023639fbfb7a51172586c274a6f5484e4053b269507be0a8fe223cbaf2ebb0f5ca67880684febe9730d28fe2a69ee51c43f26e5ed4b6b6b07b2dd1de79a15029a3cae4ad1dbf1c489b8ba8a66497503a651a9bafc070c6aa12cacffabd2d9847488b138e8f54b37c180ccd5ec9b871eb221b5deef37d41738f6696eadbcb71d08500ea", 0xf9}], 0x4, &(0x7f0000004a00)=[{0xe0, 0x114, 0x715ba0b1, "ac83c82e26572e8a91c4a4f9246fc022a4a5ba0fce57c2058ff0c44c8973f68414e7f133d04d828f5b4e5436befe5e866c6881ce50ab337bb4cb315a9ec239c7b23a4e7f3ca86a3419e2b00ff7da7d6dee6ee9f82ca7ce2fcb4f9e6bc4eb9c46cd5010ef94ea284de0e4eb6fe380b7124a2e0b5c114162873b732f8f4bba5930973a8183be2b2a96d744eff54efcab8b49f47cfb6f01f2af7814d192afe129dad0169dee339d6a5d169764ca00e7706a9ca26b7028b4c080b0444dcb6d4b0248254425a590fdb7142134f254c227"}, {0x100, 0x0, 0x7, "e5986b2ba5f9aa52cfd39de337df1614df42eb6f275179d44eb4a564a59dbc1bdb8765b33896ff0e2c1b98d83af7a9bd24e6ee39784fa99dc5eaf38fab373192c311ba3bde8a0f05a10d558856c2594a4146e931ca4d851e59b4a477f26c39e38645634fc44a37ea933f159fee7a59da966b54105ced0f0f1703cbbb78e302281c088e169a15ca229c0b8298dca489b311d2228e62b5d9faa31cded89a52662cd5df7bbd1e0623d86141bae7c35c8646b213f845de10a9a97c1506fba79c71caf264f053a85300ae28cbec2b3cfe531facdb65859c3e1c21978dea63d7539e562c489273bcb923e0566998e8e44285"}, {0xd8, 0x107, 0x0, "775c4a2b52725e09698332a87591029d158374ffe9526ddb958e35922d002e508d6aceb5c7c2bcb2c55f2f6196b04d8a04652192777c35bd2bb1097d1c431dce48633363e29d0d557421535313ff6a0d8b95055a7a32efc05b5802c7f2199e5a54896e9423212302b2320b4d273c789c9a2733de895714aef816e94faed115218136d084494bbe8590f93f56f6bbbb93df31f113a66e93edc101b2865a376ec7571a50f09eaa18a4d51eac015839eee19550ae251ce2c17b291639bb7c8c8f40e20f"}], 0x2b8}}, {{&(0x7f0000004cc0)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x4}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004d40)="c1ef1d11c318d30b2e1f6e4a462a713885e972a77c7f4dffa17f3a18b775f373cb6e0f62c6", 0x25}, {&(0x7f0000004d80)="cac1e271e7910a5bd7de3843fb1a7656e84aa3f85fd22f5301daf61a11f276f198ca82ac273e17bc08d045ed7b9d6c2025d853178f5f16d1004cf0f6758dd553f72d7a0af71e", 0x46}, {&(0x7f0000004e00)="6961f3edf3311bf6bf4247c9e47b053534448368419dd66a17882c87fdfc7144e871f837c14eaa380065ee215a5dc7fc8b2c41ffcdd19aa4329c14ac4e7f4ebdfe30ba5970c72d0770a574c9728fff9380a5866fdc29453931a4a7fce03c955fd97b1cdf", 0x64}], 0x3, &(0x7f0000004ec0)=[{0xa8, 0x10e, 0x6, "a3850c421b5eff6907de79da84f26720cf5582fe85ecd26ea667f4ca831727ef5fae860d26a63bed933bb90dfdf7475efba0a99fbd5cbe3ff291d9a9df4b322906508017d2b32c765fb5d5d67b164b2cafca498905af8d7cd4dab7c5a2b40453f43e3fa2b6e721dbae944b0726300229a6e2454df1ca1144a5e832c47c33dd9f5e2f5052f10b765220e58a4b1839b257b588df"}, {0xd8, 0x6, 0x8, "9c7e27e1be3e1946a4790029c57a71590c08d349c7f8672bef4345ac16621a2bfca09575dcc6ed881067ebc5c41d83f10e15878f926292454dd0615e4d1e2a6bc36b8b4694eebd53653b5de5c6c71c868e69a10c3b8bc9575b34fa8dfdaac4d35533ba2e058b7494346dec9e9299551136ff132ecbb9ebcb7272ae621dc7c889560789a105250648d1ab58fea0a64ac13fd3bbce91a099b3943a28ae95ee3f6835660fb515f0993e67756215113edb02193913be56ffa533b475a7a075ef905207a68b0fbf"}, {0xd0, 0x29, 0x8, "dd7a10e81e8982e4b58771ce7d227c792de7201f3b69fb18581fe97f8fec12a3fc021d5047dbae9e52938ab16ad85b7ebfe4a7c2b97b3208a09a1ca5ac6c5265559c7bb66bdcd9b4702fef1df98898a9c45ae7ffed5bba6e59c3bac6f1d45479d633cde582f17a330daee9bb0255233355f15a057e041f38e53c7b4b6c556b73aad02ccd7f348720d84a247da4aeaa4222bbc2ae25747d289fc172bc2614faa635183ea5b266c7d91ecd35d2dac0ecf71c0ec12c552d988a8570a50ec20e6c47"}, {0x60, 0x119, 0x1, "4250ccc712354a55c079413d6ec9dfedc5dfd0ab752bd4c80fe12c958604e32853d4f01cfa386279acdc99cb991a04331e7d86194f7483b92875e191bd5ac8534b9107540df4d705697097a596a88bf0"}, {0xf8, 0x0, 0x7, "09b875175edc116895f2ef2f2b23a0c7f280527e0aea6640aed7940b11578c030538b82d17f1806432f41959f06ff5ab7f909b910a9db14590bedac6848de133a9ac386a085fae2498d1acb4d32b15d3436c3e84000aa18ca03c6d0749108e5d5eef93a877000cc74e310f28f70e8cbd4dcec5524a4d431e1f034f2a8f0c761ddca818e3071fd3882e26a3d5adb482795350ea86b8fa97f743dd05319551beb7bfded856d2045ce138d70a82d29acc32b8c95270ad271693e498c3b4f7ccb4cd06c52513e753dc7a6f498008823de7b7091b385014f1668a710c6f618ddaa752b6658c76e1"}, {0x90, 0x0, 0x9, "0798062c74ab4a31ad9fcf33abc03701383f493cc5182399f87598b0d784fc31b07f481fea7a73ed4f43970c2943e97aa06c2535c826ab5f56d101df3b97201661df8616a3ce7733f124106f2a420ff8779034180d6087bf2dbebda6fae6bff7dd4c01cb22ea974cc1c795d4c9041a06c47296ffc9356ae3fc0a60"}], 0x438}}], 0x4, 0x20004010) poll(&(0x7f0000005400)=[{r5, 0x8000}], 0x1, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000005540)={&(0x7f0000005440)=[0x0, 0x0, 0x0], &(0x7f0000005480)=[0x0, 0x0], &(0x7f00000054c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005500)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x9, 0x4}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000005900)={&(0x7f00000056c0)=[0x0, r10, 0x0, 0x0], 0x4, 0x0, 0x0, 0xc, 0x4921, 0x401, 0x9, {0x7, 0xb92, 0xe19, 0x3, 0xb, 0x1, 0x8, 0x6, 0x6ee, 0x2, 0xe74, 0x7, 0x5, 0x2, "e247f1f798a0186fc671b4ce844d9253ae06a8f9640c9f45dc0e1c2318e35fc4"}}) 8m20.139411123s ago: executing program 9 (id=2740): syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x2, 0x1, 0x34, 0x69, 0x0, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp={0x44, 0x4, 0xcf, 0x0, 0xf}]}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xaf, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x16, 0x6b, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="180200000ec500000000000000000000711008000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f00000001c0)='\xc5-]{$-\x00', 0x6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) unshare(0x22020600) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000003b00000326bd7000fcdbdf25040000000c00c28004000680040005803f01a9715f6698f8c1ec1f6a8c34b05fd69b422b5862282075ba683d992baf446193903652d893711e17d15cb0b6e53d05dad5222ca1e96bb83c726457cbe1d33e975d6b0e08f9e1f6cbf735707b6589e3a2502c5138a78a70ba214a1afce1ef8da1377b4f49f692eac282540839cfe72da36f0feb25a248cb54527fdcd48ea526ad01f693e9070b63abb1caddde1a7d45cb22a095665d5ede88d7ee1a276c18777883e0"], 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000804) 8m18.604694665s ago: executing program 9 (id=2746): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0xa90}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f00000006c0)=ANY=[], 0x174}, {&(0x7f0000019140)=ANY=[@ANYBLOB="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"], 0x12c0}, {&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0xec4}], 0x4, 0x0, 0x0, 0x40101}, 0x40004) r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000100)={0x24013f7a, 0x200, 0x2, 0x7}) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000019080)={@ipv4={'\x00', '\xff\xff', @remote}, r3}, 0x14) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200, 0x0) chmod(&(0x7f0000000300)='./file0\x00', 0x2d9) 8m17.687882421s ago: executing program 9 (id=2749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x2c, r2, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x18, &(0x7f00000000c0)={0x20, 0x4, 0x5, {0x5, 0xf, "18f564"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x6, 0xc4, {0xc4, 0x30, "50c34499fd57a7f10eae9498ebc96ada82d9f7050e7c7cf422e080884f5abaed057c47971089a57e7a4a4f0c0d27ddf54fe1d7c378c3a7bd9d4576185af744014d3ba6514a2959761f5a68ac21fc4a1ea8f6118635c293d93e626efea4dbc2d9166ed5682a417b0c3a583cd1efbd302f717bb47cae87c0c5872c16dbe828e4d69d2552139a60d7beb5ff40fafe4f6a78cf908e09ca31c4651961e066bf5fefe0cf2ae67a4fe1eaa76ada64aa24c637e4a6f54c0cd1cc0dab6faa4b11a91007d1c31a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x40, 0x18, 0xcc, "dc27e5b047f2489b8668003586f9491f643b02730843777caaaedaab55de374dfe48c12127e87fff88cd467f4d2817dbb2c6808c80f2e7d7607a2a708d8b7bf62c654b97c444c79f356f1ecc42cc8b3aade32dac8cb2e850dfbfc6f8776936bf1c8df3e8b18fbbb689dc31e39020edfd4d29aa610d0eba9ca4558a89e9de77acbeaba96e5fa564d564591f655e8dc920c29154b2d697054ab156fe1bc43537ed78994144259e33d187062aab88d40036f03f57728162c271abf6d6864aab266276df1c27de5d173f44429e41"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000440)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "e29baacb659dec270c3d90f47f24f870cd08652e2fc10ba31c52255027baf42f3216c759f6886f912d66c11aa1ce9b"}}) 8m1.556293483s ago: executing program 38 (id=2749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x2c, r2, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x18, &(0x7f00000000c0)={0x20, 0x4, 0x5, {0x5, 0xf, "18f564"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x6, 0xc4, {0xc4, 0x30, "50c34499fd57a7f10eae9498ebc96ada82d9f7050e7c7cf422e080884f5abaed057c47971089a57e7a4a4f0c0d27ddf54fe1d7c378c3a7bd9d4576185af744014d3ba6514a2959761f5a68ac21fc4a1ea8f6118635c293d93e626efea4dbc2d9166ed5682a417b0c3a583cd1efbd302f717bb47cae87c0c5872c16dbe828e4d69d2552139a60d7beb5ff40fafe4f6a78cf908e09ca31c4651961e066bf5fefe0cf2ae67a4fe1eaa76ada64aa24c637e4a6f54c0cd1cc0dab6faa4b11a91007d1c31a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x40, 0x18, 0xcc, "dc27e5b047f2489b8668003586f9491f643b02730843777caaaedaab55de374dfe48c12127e87fff88cd467f4d2817dbb2c6808c80f2e7d7607a2a708d8b7bf62c654b97c444c79f356f1ecc42cc8b3aade32dac8cb2e850dfbfc6f8776936bf1c8df3e8b18fbbb689dc31e39020edfd4d29aa610d0eba9ca4558a89e9de77acbeaba96e5fa564d564591f655e8dc920c29154b2d697054ab156fe1bc43537ed78994144259e33d187062aab88d40036f03f57728162c271abf6d6864aab266276df1c27de5d173f44429e41"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000440)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "e29baacb659dec270c3d90f47f24f870cd08652e2fc10ba31c52255027baf42f3216c759f6886f912d66c11aa1ce9b"}}) 21.482333262s ago: executing program 1 (id=4407): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x210, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@challenge={0x10, 0x1, 0xea}, @challenge={0x10, 0x1, 0x4c}]}, @NL80211_ATTR_IE={0x1d5, 0x2a, [@preq={0x82, 0x30, {{0x0, 0x1, 0x1}, 0x2, 0x5, 0x80000001, @device_b, 0x30, @void, 0x8, 0x800, 0x2, [{{0x1, 0x0, 0x1}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x3}]}}, @prep={0x83, 0x1f, {{}, 0xfb, 0x31, @device_b, 0x5, @void, 0x57f, 0x1, @device_b}}, @perr={0x84, 0x129, {0x7f, 0x13, [{{}, @device_a, 0x1, @void, 0x7}, {{0x0, 0x1}, @device_b, 0xd, @value=@broadcast, 0x17}, {{0x0, 0x1}, @device_a, 0x6, @value, 0xf}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x2d}, {{}, @device_b, 0x3, @void, 0x2e}, {{0x0, 0x1}, @device_a, 0x7ff, @value, 0x39}, {{}, @device_b, 0x7f, @void, 0x8}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x37}, {{}, @broadcast, 0x8001, @void, 0x15}, {{}, @broadcast, 0x6, @void, 0x28}, {{}, @device_b, 0x0, @void, 0x39}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x35}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0x3c}, {{}, @device_b, 0x5, @void, 0x36}, {{}, @device_a, 0x8ff, @void, 0x1d}, {{}, @device_b, 0x4b, @void, 0x27}, {{}, @broadcast, 0x1, @void, 0xb}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x3d}, {{}, @device_a, 0x1, @void, 0x7}]}}, @dsss={0x3, 0x1, 0x3}, @ibss={0x6, 0x2, 0x401}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x7, 0x0, {0x1, 0x9, 0x0, 0x39f, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x3b9d, 0x7}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x50}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xfe, 0xc4, @device_a, 0x9, @value=@device_b, 0x7, 0x9, @device_b, 0x800}}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x34, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xeebd171694a1125f, 0x3}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20001}, 0x41) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty=0xfdfdffff}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xe8, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0xa9}}, {{{0x9, 0x5, 0x81, 0x3, 0xa3898fd0f91618d5, 0x0, 0x96, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x0, 0x3, 0xff, 0x20, 0x1}, 0x15, &(0x7f00000002c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0xf6a, 0x0, 0x1, [0xf]}]}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x446}}, {0x6e, &(0x7f0000000380)=@string={0x6e, 0x3, "4f31cd47c06b738ee31f2e8576c94f33a9c7d177268e340f7733796d028834aae9974d3031d3116950003707efe98db20944331d6a583b1021f039817cde49821964e4f53d626c31d3edd6babea0460aaab36ced4b7f5fcf95b59737296a9b00f758f5aaba47b9f186096ad9"}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000900)={0x24, &(0x7f0000000800)={0x0, 0x9, 0x68, {0x68, 0xd, "4283134f96732f173b14b7b07e2da213eb467f80ac791ad82bb491da4849245ba6081c6345f52e7109e4b8cce19d37596936b414487c7c40329798fa5bb63ae5dc33aed7f61e32ad37696ca7fef14a1cc25c79f6dbc374bc0d9a0415ee93a8f6adf479605b8e"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000880)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "0bbd6ada"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x369d, 0x17, 0x1, {0x22, 0xf4a}}}}, &(0x7f0000000a80)={0x2c, &(0x7f0000000940)={0x20, 0x7, 0xa, "3eb93a6dc7d1fb4cb679"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000a00)={0x20, 0x1, 0x2a, "77f03a7284bf402b668147b5c6f8b7b496a9a1af3e695048661be123332f86dee092457585966f29c6f2"}, &(0x7f0000000a40)={0x20, 0x3, 0x1, 0x9}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) open(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') llistxattr(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) 19.31898566s ago: executing program 1 (id=4418): unshare(0x6e040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000004780), 0x1, 0x0) poll(&(0x7f00000047c0)=[{r2}], 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000002c0)={r5, r6/1000+10000}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0xce) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) unshare(0x22000200) socket$inet6(0xa, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, 0x0, 0x48) 16.739938058s ago: executing program 1 (id=4432): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x8000000000001c8, 0x4000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x20, 0x10, 0x4, "7c103142"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000080)={0x40, 0x17, 0x4, "05d89170"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xe43}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 13.74832045s ago: executing program 7 (id=4439): r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='mountinfo\x00') r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000240)=@pppoe, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)=""/237, 0xed}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f0000000000)=""/28, 0x1c}], 0x5, &(0x7f00000007c0)=""/221, 0xdd}, 0x3ff}], 0x1, 0x10060, 0x0) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0xffffffffffffffff}, 0x5c) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x0, 0x0, "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000009c0), 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000b80)={0xc, 0x8, 0xfa00, {&(0x7f0000000a00)}}, 0x10) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) dup(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 13.551391933s ago: executing program 7 (id=4441): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x8000, 0x8001, 0x1db4f085, 0x9, 0x40}, &(0x7f0000000080)=0x14) socket$qrtr(0x2a, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1803081e29126ae010541105a5ffff00000000ffffffcfe1712cb7a97a4e000000003f1fff2e14a81483fa9cf3ed56bd4829da0167a54d75a3ab86c63a783e9ac7bfe29c80814569b324639ba392027d00"/91], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_collapse_huge_page_isolate\x00', r3}, 0x18) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019300)=""/102400, 0x19000) open_tree(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r8, 0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.069895269s ago: executing program 7 (id=4442): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_io_uring_setup(0x3826, &(0x7f0000000180)={0x0, 0xefd7, 0x200, 0x1, 0x42}, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x100, 0x8, 0x31435750, 0xf, 0xa, [{0x6, 0xd}, {0x0, 0x2}, {0x9, 0x400}, {0x2, 0x3}, {0x2c0e4b5e, 0x10000}, {0x4, 0xa0c}, {0x23, 0x1}, {0x2, 0xfffffff0}], 0x6, 0x8, 0x7, 0x2, 0x2}}) io_uring_enter(r1, 0x7a77, 0x9bc2, 0x0, &(0x7f0000000280)={[0xfffffffffffffff7]}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x3d) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x47806dedfea4b82e) r6 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000022c0)="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", 0x202}], 0x1, 0x0, 0x0, 0x20000400}], 0x1, 0x60048804) recvmmsg(r3, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x140, 0x0) 13.058765749s ago: executing program 1 (id=4443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000e64e9da5000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x200400c4) 12.886264435s ago: executing program 1 (id=4445): syz_init_net_socket$ax25(0x3, 0x3, 0xcf) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[]) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="55bd6f3e02000000", 0x8) r3 = socket$inet_sctp(0x2, 0x4296f684bf61a77, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x10001, 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) 12.562541182s ago: executing program 7 (id=4447): r0 = socket$unix(0x1, 0x5, 0x0) getsockname$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e) r1 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x10, &(0x7f0000000240)={0x0, 0xe, 0x1, "c5"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="40120f0000001174"], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="201430"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.175307769s ago: executing program 1 (id=4450): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x8000, 0x8001, 0x1db4f085, 0x9, 0x40}, &(0x7f0000000080)=0x14) socket$qrtr(0x2a, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_collapse_huge_page_isolate\x00', r3}, 0x18) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019300)=""/102400, 0x19000) open_tree(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) close_range(r6, r7, 0x0) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.738531872s ago: executing program 7 (id=4455): memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}]}, 0x38}}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f00000017c0)=[{0x6, 0xff, 0x0, 0x7ffffffc}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000408010200000000000000000600024000180000050003003a000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000810004000000000095007400"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 6.846264578s ago: executing program 0 (id=4460): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x746926be091e178c}}}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xe14fe1afe8ab4915, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.341848635s ago: executing program 6 (id=4464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x13) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x103042, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x25, @local, 0x9}, 0x1c) syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) timer_create(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x70}}, 0x0) 5.284451441s ago: executing program 6 (id=4465): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x8000, 0x8001, 0x1db4f085, 0x9, 0x40}, &(0x7f0000000080)=0x14) socket$qrtr(0x2a, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_collapse_huge_page_isolate\x00', r3}, 0x18) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019300)=""/102400, 0x19000) open_tree(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) close_range(r6, r7, 0x0) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.174389556s ago: executing program 7 (id=4467): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) r2 = userfaultfd(0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000040)={0x6, 0x1bc0000, 0x10000, 0x3, 0xa, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x7, 0x4, 0x1, 0x8, 0x9, 0x1}) 4.759052259s ago: executing program 0 (id=4468): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0), 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1803081e29126ae010541105a5ffff00000000ffffffcfe1712cb7a97a4e000000003f1fff2e14a81483fa9cf3ed56bd4829da0167a54d75a3ab86c63a783e9ac7bfe29c80814569b324639ba392027d00"/91], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_collapse_huge_page_isolate\x00', r2}, 0x18) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102400, 0x19000) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, r5, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.484242747s ago: executing program 6 (id=4470): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2b, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) creat(&(0x7f0000000540)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0xffffffff, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) dup3(r4, r2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3.722075566s ago: executing program 0 (id=4471): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1d, 0x6, 0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) setuid(r2) setpriority(0x2, 0xff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3.503875316s ago: executing program 8 (id=4472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) r2 = getpgid(0xffffffffffffffff) prlimit64(r2, 0xb, 0x0, &(0x7f0000000000)) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x19d2b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (rerun: 32) 3.403801493s ago: executing program 6 (id=4473): socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000040)) 3.310482141s ago: executing program 0 (id=4474): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0xbec0, 0x4) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 3.192438918s ago: executing program 8 (id=4475): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xc, &(0x7f0000000600)={0x3, 0x2087}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2400}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = epoll_create1(0x80000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r8, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0xffe0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008420000002000000040041000000000000000000", @ANYRES32=0x0], 0x20, 0x4048800}, 0x10) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x200, &(0x7f0000000740)={0x0}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) recvmmsg(r3, &(0x7f0000000880)=[{{&(0x7f0000000400)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f0000000480)=""/175, 0xaf}], 0x2, &(0x7f0000000540)=""/99, 0x63}, 0x412cffb2}, {{&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/43, 0x2b}, {&(0x7f00000006c0)=""/114, 0x72}, {&(0x7f0000000780)=""/103, 0x67}], 0x3, &(0x7f0000000840)=""/56, 0x38}, 0x8}], 0x2, 0x12000, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xe6, 0x3}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000070500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r9], 0x4c}}, 0x40000) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 3.073433408s ago: executing program 6 (id=4476): rename(&(0x7f0000000080)='./file0\x00', 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40061c"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x2, 0x5004) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async, rerun: 32) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) (rerun: 32) 2.657895966s ago: executing program 0 (id=4477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x200, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c00), r4) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.962043303s ago: executing program 8 (id=4478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) accept4(r3, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 1.281011018s ago: executing program 0 (id=4479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r1}, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f0000000040)={0x6, 0x0, [{0x991, 0x0, 0x4}, {0xaa8, 0x0, 0xa}, {0x969, 0x0, 0x400}, {0xa1d, 0x0, 0x40}, {0x276}, {0x2b6, 0x1000000, 0x4}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r7}, 0x10) renameat2(0xffffffffffffffff, 0x0, r4, &(0x7f0000000280)='./file0\x00', 0x3) munlockall() r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r8, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) socket$l2tp6(0xa, 0x2, 0x73) 834.100937ms ago: executing program 8 (id=4480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000300000000e64e9da5000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x200400c4) 820.422895ms ago: executing program 6 (id=4481): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r3, @ANYBLOB='h\x00\x00', @ANYBLOB, @ANYRES64=r3], 0x6c}, 0x1, 0x0, 0x0, 0x40440d4}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x9, @local, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x1a36}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800500030017d400000c0001800800014000000000080006400000000405000500020000000500010006"], 0x6c}}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x8c}}, 0x4004084) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='minix\x00', 0x23d476, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108004500001e006500000f06907864010101ac1414aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000cd82df76b7e4d15704f682c6d96a000d021ce4a40b433f20cd8f6ecb0b28b8391858c304c82b553e2a0baef148d34ae1613873b6248f0bcaf564737bf3e83b3496d1cc9ec9b68be49559df69fce7c3762d96cbe98d8cac71aaebd46f3bf92bca8dea118e7f2926b7bc4208912a3f1cfa41e62cd50e44bf6a49f3c6cd2d201b946badfb6ec8934d9c27ec59136bb219cf071ab6efd04585b7cede"], 0x0) 741.845852ms ago: executing program 8 (id=4482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 0s ago: executing program 8 (id=4483): prctl$PR_SVE_SET_VL(0x32, 0x30a06) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x0, 0x4c7, 0xfffffffffffffff8}}, 0x28) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r4 = socket(0x10, 0x3, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000380)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24008000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) madvise(&(0x7f0000608000/0x1000)=nil, 0x1000, 0x8) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="402601008cc241af3110a10000d8"], 0x0, 0x0}) connect$unix(r4, &(0x7f0000000200)=@abs={0x0, 0x0, 0xffb}, 0x6e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r6}, 0x10) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040), 0x10) listen(r8, 0xc) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000001a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x3, 0x6, 0x5}}}}}]}}]}}, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) listen(r1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): up backlog [ 1324.031689][T22007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1325.094744][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.394695][T15218] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1325.543529][ T1172] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1325.586264][T15218] usb 1-1: Using ep0 maxpacket: 16 [ 1325.595586][T15218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1325.613654][T15218] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1325.623475][T15218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.633360][T15218] usb 1-1: Product: syz [ 1325.637697][T15218] usb 1-1: Manufacturer: syz [ 1325.642431][T15218] usb 1-1: SerialNumber: syz [ 1325.661438][T15218] usb 1-1: config 0 descriptor?? [ 1325.670974][T15218] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1325.690991][T15218] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1325.703691][T17649] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1325.725106][ T1172] usb 2-1: Using ep0 maxpacket: 32 [ 1325.731800][ T1172] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1325.741036][ T1172] usb 2-1: config 0 has no interface number 0 [ 1325.751763][ T1172] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1325.774680][ T1172] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1325.789180][ T1172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.808038][ T1172] usb 2-1: Product: syz [ 1325.818812][ T1172] usb 2-1: Manufacturer: syz [ 1325.823501][ T1172] usb 2-1: SerialNumber: syz [ 1325.833285][ T1172] usb 2-1: config 0 descriptor?? [ 1325.839400][T22020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1325.864223][T17649] usb 8-1: Using ep0 maxpacket: 16 [ 1325.875060][T17649] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.887074][T17649] usb 8-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1325.896192][T17649] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.920263][T17649] usb 8-1: config 0 descriptor?? [ 1326.105957][T22020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1326.212028][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.220164][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.400462][T15218] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1326.407294][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.416271][ T1172] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1326.435605][ T4657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.444419][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.453506][ T1172] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1326.938334][T15218] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1326.954554][T17649] usbhid 8-1:0.0: can't add hid device: -71 [ 1326.960660][T17649] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1326.966485][T15218] em28xx 1-1:0.0: board has no eeprom [ 1326.970431][T17649] usb 8-1: USB disconnect, device number 52 [ 1327.322289][T17649] net_ratelimit: 1 callbacks suppressed [ 1327.322308][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.330161][T15218] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1327.344483][T15218] em28xx 1-1:0.0: dvb set to bulk mode. [ 1327.360716][ T5877] em28xx 1-1:0.0: Binding DVB extension [ 1327.539756][T17649] usb 1-1: USB disconnect, device number 84 [ 1327.598860][T17649] em28xx 1-1:0.0: Disconnecting em28xx [ 1327.685125][ T5877] em28xx 1-1:0.0: Registering input extension [ 1327.691368][T17649] em28xx 1-1:0.0: Closing input extension [ 1327.722228][T17649] em28xx 1-1:0.0: Freeing device [ 1327.838120][ T30] audit: type=1400 audit(1768782516.627:2125): avc: denied { setopt } for pid=22054 comm="syz.8.3943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1327.869084][T22055] netlink: 'syz.8.3943': attribute type 10 has an invalid length. [ 1327.902605][T22055] team0: Port device netdevsim0 added [ 1328.463589][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.749252][T17649] usb 2-1: USB disconnect, device number 119 [ 1329.768815][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.357905][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.373737][T22097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1330.377305][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.391996][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.400694][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.482493][ T5877] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1330.924665][ T5877] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1330.935398][ T5877] usb 2-1: config 1 has no interface number 0 [ 1330.959159][ T5877] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1331.006304][ T5877] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1331.024710][ T5877] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.050359][ T5877] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1331.069073][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.090651][ T5877] usb 2-1: Product: syz [ 1331.099120][ T5877] usb 2-1: Manufacturer: syz [ 1331.112859][ T5877] usb 2-1: SerialNumber: syz [ 1331.133606][T22092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1331.481924][T22092] random: crng reseeded on system resumption [ 1331.501542][ T30] audit: type=1400 audit(1768782520.032:2126): avc: denied { write } for pid=22091 comm="syz.1.3954" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1331.530425][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.032837][ T5924] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1332.182278][ T5924] usb 1-1: device descriptor read/64, error -71 [ 1332.433773][T14359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.451132][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.568238][ T5924] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1332.623694][ T5877] usb 2-1: Error in usbnet_get_endpoints (-71) [ 1332.647666][ T5877] usb 2-1: USB disconnect, device number 120 [ 1332.716999][ T5924] usb 1-1: device descriptor read/64, error -71 [ 1332.834696][ T5924] usb usb1-port1: attempt power cycle [ 1333.213484][T17649] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1333.433198][T17649] usb 7-1: Using ep0 maxpacket: 8 [ 1333.490714][T17649] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.589050][T17649] usb 7-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1333.672425][T17649] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1333.705608][T22146] macvlan1: entered allmulticast mode [ 1333.711805][T22146] veth1_vlan: entered allmulticast mode [ 1333.719219][T17649] usb 7-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 1333.878384][T17649] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.950429][T17639] net_ratelimit: 2 callbacks suppressed [ 1333.950446][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.024506][T17649] usb 7-1: Product: syz [ 1334.025376][ T5924] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1334.029549][T17649] usb 7-1: Manufacturer: ㅏ䟍毀蹳ΰ蔮쥶㍏잩矑踦༴㍷浹蠂ꨴ韩き팱椑Pܷ늍䐉ᴳ塪ျ脹艉搙戽ㅬ뫖ꂾ੆뎪罋콟떕㞗権›壷ꫵ䞺আ [ 1334.116972][T22145] macvlan1: left allmulticast mode [ 1334.126526][T17649] usb 7-1: SerialNumber: syz [ 1334.132433][T22145] veth1_vlan: left allmulticast mode [ 1334.139936][ T5924] usb 1-1: device descriptor read/8, error -71 [ 1334.405975][ T5924] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1334.439807][ T5924] usb 1-1: device descriptor read/8, error -71 [ 1334.524018][T22158] binder: BINDER_SET_CONTEXT_MGR already set [ 1334.530018][T22158] binder: 22157:22158 ioctl 4018620d 2000000002c0 returned -16 [ 1334.605822][T17649] usbhid 7-1:1.0: can't add hid device: -71 [ 1334.633570][T17649] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1334.663194][T17649] usb 7-1: USB disconnect, device number 41 [ 1334.692589][ T5924] usb usb1-port1: unable to enumerate USB device [ 1335.158964][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.315890][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.480371][ T6154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.489744][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.530284][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.540900][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.558923][ T6154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.568409][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.576497][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.715296][T17639] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1336.918443][T17639] usb 9-1: Using ep0 maxpacket: 16 [ 1336.942636][T17639] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1336.960771][T17639] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1336.971141][T17639] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1336.995218][T17639] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1337.004477][T17639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.025152][T17639] usb 9-1: Product: syz [ 1337.029451][T17639] usb 9-1: Manufacturer: syz [ 1337.034038][T17639] usb 9-1: SerialNumber: syz [ 1337.603043][T17639] usb 9-1: 0:2 : does not exist [ 1337.618366][ T30] audit: type=1400 audit(1768782525.775:2127): avc: denied { map } for pid=22211 comm="syz.6.3986" path="/proc/934/mounts" dev="proc" ino=91688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1337.885914][T22215] ceph: No mds server is up or the cluster is laggy [ 1337.895426][T17652] libceph: connect (1)[c::]:6789 error -101 [ 1337.953296][T17652] libceph: mon0 (1)[c::]:6789 connect error [ 1338.120155][T22181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.169500][T22181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.201716][T22181] : renamed from vlan0 (while UP) [ 1338.223272][T17652] usb 9-1: USB disconnect, device number 38 [ 1338.230498][ T30] audit: type=1400 audit(1768782526.336:2128): avc: denied { execute } for pid=22180 comm="syz.8.3976" path="/proc/991/task/992/net/vlan/vlan0" dev="proc" ino=4026533226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 1340.122913][T17649] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1340.202809][ T5924] net_ratelimit: 4 callbacks suppressed [ 1340.202826][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.404090][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.413958][T17649] usb 9-1: Using ep0 maxpacket: 16 [ 1340.420459][T17649] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1340.434496][T17649] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1340.444213][T17649] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.444522][T22272] fuse: Unknown parameter '' [ 1340.452573][T17649] usb 9-1: Product: syz [ 1340.465455][T17649] usb 9-1: Manufacturer: syz [ 1340.470443][T17649] usb 9-1: SerialNumber: syz [ 1340.477236][T17649] usb 9-1: config 0 descriptor?? [ 1340.485232][T17649] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1340.494791][T17649] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1340.617197][T15217] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1340.706888][T22254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1340.727927][T22276] netlink: 'syz.0.4005': attribute type 10 has an invalid length. [ 1340.737312][T22276] veth1_macvtap: left promiscuous mode [ 1340.766976][T15217] usb 2-1: device descriptor read/64, error -71 [ 1341.066276][T15217] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1341.187691][T17649] em28xx 9-1:0.0: chip ID is em2870 [ 1341.322697][T15217] usb 2-1: device descriptor read/64, error -71 [ 1341.474903][T15217] usb usb2-port1: attempt power cycle [ 1341.513277][T17649] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1341.562791][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.608019][T17649] em28xx 9-1:0.0: board has no eeprom [ 1341.797350][T17649] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1341.877497][T17649] em28xx 9-1:0.0: dvb set to bulk mode. [ 1341.940111][T17639] em28xx 9-1:0.0: Binding DVB extension [ 1341.946000][T17459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.957052][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.965665][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.983862][T17649] usb 9-1: USB disconnect, device number 39 [ 1341.997410][T17649] em28xx 9-1:0.0: Disconnecting em28xx [ 1342.080042][T17639] em28xx 9-1:0.0: Registering input extension [ 1342.106061][T17649] em28xx 9-1:0.0: Closing input extension [ 1342.156999][T17649] em28xx 9-1:0.0: Freeing device [ 1342.223041][T15217] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1342.599005][T15217] usb 2-1: device descriptor read/8, error -71 [ 1342.628404][ T3929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.639256][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1342.698250][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.706822][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.481441][ T30] audit: type=1400 audit(1768782531.256:2129): avc: denied { setopt } for pid=22303 comm="syz.1.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1343.771363][T15218] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1343.996203][T15218] usb 7-1: Using ep0 maxpacket: 32 [ 1344.011438][T15218] usb 7-1: config 0 has an invalid interface number: 74 but max is 1 [ 1344.020346][T15218] usb 7-1: config 0 has no interface number 1 [ 1344.028926][T15218] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1344.038067][T15218] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.046045][T15218] usb 7-1: Product: syz [ 1344.050290][T15218] usb 7-1: Manufacturer: syz [ 1344.054875][T15218] usb 7-1: SerialNumber: syz [ 1344.061604][T15218] usb 7-1: config 0 descriptor?? [ 1344.157077][T15218] snd-usb-audio 7-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 1345.768126][T17639] usb 7-1: USB disconnect, device number 42 [ 1345.980599][T17649] net_ratelimit: 3 callbacks suppressed [ 1345.980614][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.638135][T22342] FAULT_INJECTION: forcing a failure. [ 1346.638135][T22342] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.652510][T22342] CPU: 1 UID: 0 PID: 22342 Comm: syz.0.4025 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.652537][T22342] Tainted: [L]=SOFTLOCKUP [ 1346.652544][T22342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1346.652554][T22342] Call Trace: [ 1346.652561][T22342] [ 1346.652568][T22342] dump_stack_lvl+0x16c/0x1f0 [ 1346.652597][T22342] should_fail_ex+0x512/0x640 [ 1346.652622][T22342] ? fs_reclaim_acquire+0xae/0x150 [ 1346.652648][T22342] should_failslab+0xc2/0x120 [ 1346.652672][T22342] __kmalloc_noprof+0xeb/0x910 [ 1346.652698][T22342] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1346.652727][T22342] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1346.652749][T22342] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1346.652773][T22342] ? tomoyo_profile+0x47/0x60 [ 1346.652790][T22342] tomoyo_path_number_perm+0x245/0x580 [ 1346.652808][T22342] ? tomoyo_path_number_perm+0x237/0x580 [ 1346.652828][T22342] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1346.652848][T22342] ? find_held_lock+0x2b/0x80 [ 1346.652892][T22342] ? find_held_lock+0x2b/0x80 [ 1346.652914][T22342] ? hook_file_ioctl_common+0x144/0x410 [ 1346.652934][T22342] ? __fget_files+0x20e/0x3c0 [ 1346.652960][T22342] security_file_ioctl+0x9b/0x240 [ 1346.652983][T22342] __x64_sys_ioctl+0xb7/0x210 [ 1346.653003][T22342] do_syscall_64+0xcd/0xf80 [ 1346.653026][T22342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.653042][T22342] RIP: 0033:0x7f9ecc38f749 [ 1346.653054][T22342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.653069][T22342] RSP: 002b:00007f9ecd1f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.653084][T22342] RAX: ffffffffffffffda RBX: 00007f9ecc5e5fa0 RCX: 00007f9ecc38f749 [ 1346.653095][T22342] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1346.653104][T22342] RBP: 00007f9ecd1f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.653114][T22342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.653122][T22342] R13: 00007f9ecc5e6038 R14: 00007f9ecc5e5fa0 R15: 00007fff643e73a8 [ 1346.653145][T22342] [ 1346.653152][T22342] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1346.743525][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.049429][T22357] tipc: Started in network mode [ 1347.049454][T22357] tipc: Node identity d671f9f45e1f, cluster identity 4711 [ 1347.049576][T22357] tipc: Enabled bearer , priority 0 [ 1347.050425][T22357] syzkaller0: entered promiscuous mode [ 1347.050442][T22357] syzkaller0: entered allmulticast mode [ 1347.080998][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.546029][T22356] tipc: Resetting bearer [ 1347.674162][T22356] tipc: Disabling bearer [ 1347.945886][T22370] No control pipe specified [ 1348.999315][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.004970][ T4008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.027366][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.039550][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.113136][ T30] audit: type=1400 audit(1768782536.523:2130): avc: denied { connect } for pid=22375 comm="syz.8.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1349.705907][T22381] netlink: 'syz.1.4034': attribute type 39 has an invalid length. [ 1349.874419][T22384] fuse: Bad value for 'fd' [ 1350.025219][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.153758][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.240811][T17652] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1350.866595][T22395] netlink: 'syz.1.4035': attribute type 12 has an invalid length. [ 1351.276303][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.286000][T17652] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1351.303224][T17652] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.330771][ T30] audit: type=1400 audit(1768782538.609:2131): avc: denied { read } for pid=22399 comm="syz.8.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1351.357658][T17652] usb 7-1: config 0 descriptor?? [ 1351.365419][T17652] cp210x 7-1:0.0: cp210x converter detected [ 1351.907933][T17652] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1351.918538][T17652] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1351.927626][T17652] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1351.936002][T17652] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1351.944308][T17652] usb 7-1: USB disconnect, device number 43 [ 1352.121380][T17652] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1352.129603][T17652] cp210x 7-1:0.0: device disconnected [ 1352.678124][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.362061][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.840068][T22437] netlink: 'syz.1.4047': attribute type 21 has an invalid length. [ 1353.848020][T22437] IPv6: NLM_F_CREATE should be specified when creating new route [ 1354.185104][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.406241][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.506873][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.685637][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.101360][T22479] netlink: 'syz.6.4053': attribute type 72 has an invalid length. [ 1357.187532][T17620] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1357.465197][T22488] sd 0:0:1:0: device reset [ 1357.485579][ T30] audit: type=1400 audit(1768782544.352:2132): avc: denied { read write } for pid=22483 comm="syz.6.4064" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1357.516489][ T30] audit: type=1400 audit(1768782544.352:2133): avc: denied { open } for pid=22483 comm="syz.6.4064" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1357.541634][T15217] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1357.742720][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.751005][T17620] usb 2-1: Using ep0 maxpacket: 32 [ 1357.757927][T17620] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1357.766146][T17620] usb 2-1: config 0 has no interface number 0 [ 1357.774295][T17620] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1357.783421][T17620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.786227][T15217] usb 1-1: Using ep0 maxpacket: 16 [ 1357.791498][T17620] usb 2-1: Product: syz [ 1357.800725][T17620] usb 2-1: Manufacturer: syz [ 1357.803452][T15217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1357.805357][T17620] usb 2-1: SerialNumber: syz [ 1357.817193][T15217] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1357.830647][T15217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.838704][T15217] usb 1-1: Product: syz [ 1357.841344][T17620] usb 2-1: config 0 descriptor?? [ 1357.844516][T15217] usb 1-1: Manufacturer: syz [ 1357.849633][T17620] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1357.852545][T15217] usb 1-1: SerialNumber: syz [ 1357.869098][T15217] usb 1-1: config 0 descriptor?? [ 1357.886476][T15217] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1357.899692][T15217] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1358.066610][T17620] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1358.077869][T17620] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1358.470471][T17620] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1358.531848][T15217] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1358.705685][T17620] usb 7-1: device descriptor read/64, error -71 [ 1358.712633][T22494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4060'. [ 1358.881704][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.962269][T17620] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 1358.976547][T15217] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1358.992319][T15217] em28xx 1-1:0.0: board has no eeprom [ 1359.048046][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.122632][T17620] usb 7-1: device descriptor read/64, error -71 [ 1359.240533][T17620] usb usb7-port1: attempt power cycle [ 1359.306093][T15217] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1359.314336][T15217] em28xx 1-1:0.0: dvb set to bulk mode. [ 1359.320188][T15218] em28xx 1-1:0.0: Binding DVB extension [ 1359.449568][T15217] usb 1-1: USB disconnect, device number 89 [ 1359.457283][T15217] em28xx 1-1:0.0: Disconnecting em28xx [ 1359.477825][T15218] em28xx 1-1:0.0: Registering input extension [ 1359.484118][T15217] em28xx 1-1:0.0: Closing input extension [ 1359.493924][T15217] em28xx 1-1:0.0: Freeing device [ 1359.625066][T17620] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1359.648279][T17620] usb 7-1: device descriptor read/8, error -71 [ 1359.903550][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.913772][T17620] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1359.935579][T17620] usb 7-1: device descriptor read/8, error -71 [ 1360.000723][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.069742][T17620] usb usb7-port1: unable to enumerate USB device [ 1360.135182][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1360.196945][T15218] usb 2-1: USB disconnect, device number 125 [ 1360.237368][T15218] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1360.289841][T15218] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1360.305221][ T30] audit: type=1400 audit(1768782546.999:2134): avc: denied { bind } for pid=22507 comm="syz.0.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1360.714154][T15218] quatech2 2-1:0.51: device disconnected [ 1361.074584][T22528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4074'. [ 1361.089852][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4074'. [ 1361.100781][T22528] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4074'. [ 1361.243160][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.474275][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.765261][T22540] bridge0: port 3(gretap0) entered blocking state [ 1362.784785][T22540] bridge0: port 3(gretap0) entered disabled state [ 1362.803512][T22540] gretap0: entered allmulticast mode [ 1362.826406][T22540] gretap0: entered promiscuous mode [ 1362.847393][T22540] bridge0: port 3(gretap0) entered blocking state [ 1362.853914][T22540] bridge0: port 3(gretap0) entered forwarding state [ 1363.153756][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.619010][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.753092][T17646] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1364.468651][T17646] usb 9-1: Using ep0 maxpacket: 16 [ 1364.491407][T17646] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1364.515466][T17646] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1364.533186][T17646] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.585396][T17646] usb 9-1: Product: syz [ 1364.599068][T17646] usb 9-1: Manufacturer: syz [ 1364.614493][T17646] usb 9-1: SerialNumber: syz [ 1364.674162][T17646] usb 9-1: config 0 descriptor?? [ 1364.700579][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.765644][T17646] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1365.194949][T17620] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1365.210655][T17646] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1365.378262][T17620] usb 7-1: config 0 has an invalid interface number: 156 but max is 0 [ 1365.390457][T17620] usb 7-1: config 0 has no interface number 0 [ 1365.411434][T17620] usb 7-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1365.432216][T17620] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.441119][T17620] usb 7-1: Product: syz [ 1365.445411][T17620] usb 7-1: Manufacturer: syz [ 1365.450860][T17620] usb 7-1: SerialNumber: syz [ 1365.459546][T17620] usb 7-1: config 0 descriptor?? [ 1365.473882][T22574] FAULT_INJECTION: forcing a failure. [ 1365.473882][T22574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1365.537744][T22574] CPU: 1 UID: 0 PID: 22574 Comm: syz.0.4089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.537775][T22574] Tainted: [L]=SOFTLOCKUP [ 1365.537782][T22574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1365.537791][T22574] Call Trace: [ 1365.537797][T22574] [ 1365.537804][T22574] dump_stack_lvl+0x16c/0x1f0 [ 1365.537833][T22574] should_fail_ex+0x512/0x640 [ 1365.537864][T22574] _copy_from_user+0x2e/0xd0 [ 1365.537890][T22574] copy_msghdr_from_user+0x98/0x160 [ 1365.537910][T22574] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1365.537941][T22574] ___sys_sendmsg+0xfe/0x1d0 [ 1365.537962][T22574] ? __pfx____sys_sendmsg+0x10/0x10 [ 1365.538022][T22574] __sys_sendmsg+0x16d/0x220 [ 1365.538041][T22574] ? __pfx___sys_sendmsg+0x10/0x10 [ 1365.538074][T22574] do_syscall_64+0xcd/0xf80 [ 1365.538098][T22574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.538115][T22574] RIP: 0033:0x7f9ecc38f749 [ 1365.538129][T22574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.538144][T22574] RSP: 002b:00007f9ecd1d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1365.538161][T22574] RAX: ffffffffffffffda RBX: 00007f9ecc5e6090 RCX: 00007f9ecc38f749 [ 1365.538173][T22574] RDX: 0000000002000094 RSI: 0000200000000100 RDI: 0000000000000008 [ 1365.538183][T22574] RBP: 00007f9ecd1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.538193][T22574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.538203][T22574] R13: 00007f9ecc5e6128 R14: 00007f9ecc5e6090 R15: 00007fff643e73a8 [ 1365.538227][T22574] [ 1365.701688][T17646] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1365.712442][T17620] go7007 7-1:0.156: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1365.836854][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.938306][T17649] usb 7-1: USB disconnect, device number 48 [ 1366.147084][T17646] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1366.160323][T17646] em28xx 9-1:0.0: board has no eeprom [ 1366.413686][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.488378][T17646] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1366.508598][T17646] em28xx 9-1:0.0: dvb set to bulk mode. [ 1366.515197][T17649] em28xx 9-1:0.0: Binding DVB extension [ 1366.627715][ T5877] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1366.652046][T15217] usb 9-1: USB disconnect, device number 40 [ 1366.659099][T15217] em28xx 9-1:0.0: Disconnecting em28xx [ 1366.736615][T17649] em28xx 9-1:0.0: Registering input extension [ 1366.742856][T15217] em28xx 9-1:0.0: Closing input extension [ 1366.799906][ T5877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 1024 [ 1366.902660][T15217] em28xx 9-1:0.0: Freeing device [ 1366.909096][ T5877] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1366.924170][ T5877] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1366.942087][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.947097][ T5877] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1366.959511][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1366.967597][ T5877] usb 1-1: Product: syz [ 1366.971930][ T5877] usb 1-1: Manufacturer: syz [ 1366.976525][ T5877] usb 1-1: SerialNumber: syz [ 1366.982927][T22591] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1367.207071][ T5877] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1367.507663][ T5877] usb 1-1: USB disconnect, device number 90 [ 1367.520945][ T5877] usblp0: removed [ 1367.634540][T22606] tmpfs: Unknown parameter ' [ 1368.250575][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.895843][T22602] NILFS (nullb0): couldn't find nilfs on the device [ 1369.652956][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.661049][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.685053][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.792865][T22632] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4103'. [ 1370.333591][T22646] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22646 comm=syz.0.4104 [ 1370.694744][T22654] netlink: 'syz.7.4108': attribute type 1 has an invalid length. [ 1370.779710][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.904213][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.913264][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.992493][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.243143][T22686] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4115'. [ 1373.373281][ T5877] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1374.104968][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.213315][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 1374.225534][T22693] fuse: Unknown parameter '0x0000000000000004' [ 1374.304182][ T5877] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1374.331009][ T5877] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1374.423253][ T5877] usb 1-1: Product: syz [ 1374.465984][ T5877] usb 1-1: Manufacturer: syz [ 1374.509606][ T5877] usb 1-1: SerialNumber: syz [ 1374.588932][ T5877] usb 1-1: config 0 descriptor?? [ 1374.636100][T22700] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 3, id = 0 [ 1374.703873][ T5877] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1375.367140][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.581254][ T5877] gspca_zc3xx: reg_w_i err -110 [ 1375.596170][ T5877] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1376.232181][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.497513][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.620711][T22723] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4123'. [ 1376.743921][T22729] sctp: [Deprecated]: syz.1.4125 (pid 22729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1376.743921][T22729] Use struct sctp_sack_info instead [ 1377.544437][T22729] syz.1.4125 (22729): drop_caches: 2 [ 1377.605684][T15217] usb 1-1: USB disconnect, device number 91 [ 1377.613014][ T30] audit: type=1400 audit(1768782563.182:2135): avc: denied { bind } for pid=22726 comm="syz.7.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1377.654130][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.730239][ T30] audit: type=1400 audit(1768782563.182:2136): avc: denied { name_bind } for pid=22726 comm="syz.7.4126" src=16386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1377.777706][ T30] audit: type=1400 audit(1768782563.182:2137): avc: denied { node_bind } for pid=22726 comm="syz.7.4126" src=16386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1377.896484][T22712] cgroup: release_agent respecified [ 1378.381147][T17620] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1378.868731][T17620] usb 1-1: Using ep0 maxpacket: 8 [ 1378.925166][T17620] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.944402][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.953309][T17620] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1378.962474][T17620] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.027750][T17620] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1379.074049][T17620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.228872][T17620] usb 1-1: Product: ࠖ [ 1379.233399][T17620] usb 1-1: Manufacturer: 秡祂च犜蕻᥾ꃾ਎뫅拳⠔䓣升鱈ﳶ⸨쟜᫆䕮㼰ӳ蝉緯⡻틍ᬝ꤆귉抓淚㥱ᖁ頹莻䫞䐝ᄡ蝫ᠺݶ剣呓沰ᚑ䥔❢塯庒ꑺᔧฑ툍䅼ᮟ鋍ꮈ맪鎢쁣菂繇夵淋먥樕嬍䌟鹆잃톨搔뙍葚䤊࿟㮦䪻Ծ [ 1379.493202][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.574668][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.740525][T17620] usb 1-1: SerialNumber: syz [ 1380.094595][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.158083][ T5877] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1380.194240][T22771] netlink: 'syz.6.4136': attribute type 10 has an invalid length. [ 1380.218621][T17620] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1380.225896][T17620] cdc_ncm 1-1:1.0: bind() failure [ 1380.245550][T17620] usb 1-1: USB disconnect, device number 92 [ 1380.343772][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 1380.355163][ T5877] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1380.370044][ T5877] usb 2-1: config 179 has no interface number 0 [ 1380.383300][ T5877] usb 2-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1380.407444][ T5877] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1380.429489][ T5877] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 1380.452724][ T5877] usb 2-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1380.474854][ T5877] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1380.516846][ T5877] usb 2-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 1380.536802][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.548080][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4138'. [ 1380.598816][T22761] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1380.877465][T22786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.886783][T22786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.903684][ T5877] usb 2-1: USB disconnect, device number 126 [ 1381.204675][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.294978][ T5877] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1381.476645][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 1381.486303][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1381.531393][ T5877] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1381.541303][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.594414][ T5877] usb 2-1: Product: syz [ 1381.598743][ T5877] usb 2-1: Manufacturer: syz [ 1381.603405][ T5877] usb 2-1: SerialNumber: syz [ 1381.610799][ T5877] usb 2-1: config 0 descriptor?? [ 1381.618705][ T5877] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1381.629209][ T5877] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1382.333752][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.955422][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.963750][ T5877] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1383.034357][T17620] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1383.383089][T17620] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1383.412114][T17620] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.473955][T17620] usb 7-1: Product: syz [ 1383.560853][T17620] usb 7-1: Manufacturer: syz [ 1383.568791][T17620] usb 7-1: SerialNumber: syz [ 1383.663328][ T5877] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1383.667281][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.693123][ T5877] em28xx 2-1:0.0: board has no eeprom [ 1384.075004][ T5877] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1384.088311][ T5877] em28xx 2-1:0.0: dvb set to bulk mode. [ 1384.200506][ T9] em28xx 2-1:0.0: Binding DVB extension [ 1384.221611][ T5877] usb 2-1: USB disconnect, device number 127 [ 1384.229270][T17620] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1384.229525][ T5877] em28xx 2-1:0.0: Disconnecting em28xx [ 1384.259028][T17620] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1384.334872][T22846] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1384.701706][ T9] em28xx 2-1:0.0: Registering input extension [ 1384.710162][ T5877] em28xx 2-1:0.0: Closing input extension [ 1384.725299][ T5877] em28xx 2-1:0.0: Freeing device [ 1384.726501][T17620] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1384.742469][T17620] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1384.758719][T17620] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1384.827262][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.837471][T17620] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1384.993043][T17620] usb 7-1: USB disconnect, device number 49 [ 1385.200874][T22852] syzkaller0: entered allmulticast mode [ 1385.217861][T22852] syzkaller0: entered promiscuous mode [ 1385.314294][T22855] syzkaller0 (unregistering): left promiscuous mode [ 1385.321107][T22855] syzkaller0 (unregistering): left allmulticast mode [ 1385.522301][T22862] binder: 22859:22862 ioctl c00c620f 200000000040 returned -22 [ 1385.906583][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.409783][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.456404][T22879] bridge0: entered allmulticast mode [ 1386.642564][ T30] audit: type=1400 audit(1768782571.638:2138): avc: denied { setopt } for pid=22886 comm="syz.0.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1386.663048][T22887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4170'. [ 1386.671887][T22887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4170'. [ 1386.702654][ T30] audit: type=1400 audit(1768782571.656:2139): avc: denied { connect } for pid=22886 comm="syz.0.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1386.768688][T17646] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1386.821943][ T5877] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1386.961188][T17620] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1386.970488][T17646] usb 2-1: Using ep0 maxpacket: 8 [ 1386.979056][T17646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1386.991733][T17646] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 1386.993033][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 1387.001195][T17646] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1387.034817][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.043043][T17646] usb 2-1: can't read configurations, error -61 [ 1387.069071][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1387.090843][ T5877] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1387.110561][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.118595][ T5877] usb 7-1: Product: syz [ 1387.137083][T17620] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1387.143296][ T5877] usb 7-1: Manufacturer: syz [ 1387.147463][T17620] usb 1-1: not running at top speed; connect to a high speed hub [ 1387.153330][ T5877] usb 7-1: SerialNumber: syz [ 1387.158411][T17620] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.172722][T17620] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1387.184730][T17620] usb 1-1: string descriptor 0 read error: -22 [ 1387.193512][T17620] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1387.196557][ T5877] usb 7-1: config 0 descriptor?? [ 1387.202718][T17620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.226681][T17646] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1387.258344][ T5877] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1387.261009][T17620] usb 1-1: 0:2 : does not exist [ 1387.272927][ T5877] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1387.388987][T17646] usb 2-1: Using ep0 maxpacket: 8 [ 1387.412005][T17646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1387.430621][T17646] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 1387.440042][T17646] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1387.448971][T17646] usb 2-1: can't read configurations, error -61 [ 1387.467781][T17646] usb usb2-port1: attempt power cycle [ 1387.477510][T22887] team0: No ports can be present during mode change [ 1387.792982][T22903] tipc: Enabling of bearer rejected, failed to enable media [ 1387.880937][T17646] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1387.903063][T17646] usb 2-1: Using ep0 maxpacket: 8 [ 1387.903164][ T5877] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1387.929151][T17620] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1387.939484][T17646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1387.949436][T17620] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1387.966212][T17646] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 1387.983965][T17620] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1387.991437][T17646] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1387.999515][T17646] usb 2-1: can't read configurations, error -61 [ 1388.056458][T17620] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1388.078423][T17620] usb 1-1: USB disconnect, device number 93 [ 1388.214577][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.265166][T17646] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1388.333721][T17646] usb 2-1: Using ep0 maxpacket: 8 [ 1388.344375][T17646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1388.352594][T17646] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 1388.363645][T17646] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1388.371208][T17646] usb 2-1: can't read configurations, error -61 [ 1388.380257][T17646] usb usb2-port1: unable to enumerate USB device [ 1388.609022][ T5877] em28xx 7-1:0.0: board has no eeprom [ 1388.909533][ T5877] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1388.920904][ T5877] em28xx 7-1:0.0: dvb set to bulk mode. [ 1388.952075][ T9] em28xx 7-1:0.0: Binding DVB extension [ 1389.307942][ T5877] usb 7-1: USB disconnect, device number 50 [ 1389.327465][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.328967][ T5877] em28xx 7-1:0.0: Disconnecting em28xx [ 1389.345516][ T9] em28xx 7-1:0.0: Registering input extension [ 1389.365930][ T5877] em28xx 7-1:0.0: Closing input extension [ 1389.401294][ T5877] em28xx 7-1:0.0: Freeing device [ 1389.693035][T22931] binder: 22918:22931 ioctl c00c620f 200000000040 returned -22 [ 1389.904954][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.031478][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.479712][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.124568][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.663799][T22969] tmpfs: Bad value for 'mpol' [ 1392.687149][T22969] futex_wake_op: syz.8.4192 tries to shift op by 144; fix this program [ 1392.732776][T22969] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1393.186154][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.262340][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.591398][T22984] sock: sock_set_timeout: `syz.8.4198' (pid 22984) tries to set negative timeout [ 1393.685363][T17639] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1393.868662][T17639] usb 7-1: config 0 has an invalid interface number: 28 but max is 0 [ 1393.879615][T17639] usb 7-1: config 0 has no interface number 0 [ 1393.910141][T17639] usb 7-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.921203][T17639] usb 7-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.070195][T17639] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1394.079283][T17639] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.092292][T17639] usb 7-1: config 0 descriptor?? [ 1395.261364][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.838443][T23003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.847931][T17639] usbhid 7-1:0.28: can't add hid device: -71 [ 1395.854769][T23003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.855561][T17639] usbhid 7-1:0.28: probe with driver usbhid failed with error -71 [ 1395.904771][T17639] usb 7-1: USB disconnect, device number 51 [ 1396.251223][ T5877] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1396.343945][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.415125][ T5877] usb 9-1: device descriptor read/64, error -71 [ 1396.432504][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.450969][ T30] audit: type=1400 audit(1768782580.804:2140): avc: denied { override_creds } for pid=23019 comm="syz.1.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1396.668480][ T5877] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1396.817757][ T5877] usb 9-1: device descriptor read/64, error -71 [ 1396.954507][ T5877] usb usb9-port1: attempt power cycle [ 1397.320097][ T5877] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1397.366643][ T5877] usb 9-1: device descriptor read/8, error -71 [ 1397.482531][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.584761][T23038] binder: 23035:23038 ioctl c00c620f 200000000040 returned -22 [ 1397.651594][ T5877] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1397.905788][T15217] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1397.951801][ T5877] usb 9-1: device descriptor read/8, error -71 [ 1398.070032][ T5877] usb usb9-port1: unable to enumerate USB device [ 1398.089900][T15217] usb 1-1: Using ep0 maxpacket: 16 [ 1398.096764][T15217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1398.108961][T15217] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1398.118280][T15217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.126463][T15217] usb 1-1: Product: syz [ 1398.130756][T15217] usb 1-1: Manufacturer: syz [ 1398.135456][T15217] usb 1-1: SerialNumber: syz [ 1398.142201][T15217] usb 1-1: config 0 descriptor?? [ 1398.163945][T15217] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1398.173903][T15217] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1399.174367][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.310274][ T30] audit: type=1400 audit(1768782583.489:2141): avc: denied { watch } for pid=23043 comm="syz.1.4214" path="/253/file0" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1399.440468][T15217] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1399.672367][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.100591][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.174555][ T9] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 1400.196422][T15217] em28xx 1-1:0.0: board has no eeprom [ 1400.277095][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.361673][T23058] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4217'. [ 1400.394811][ T9] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1400.416112][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.505910][T15217] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1400.521875][T15217] em28xx 1-1:0.0: dvb set to bulk mode. [ 1400.533455][ T5877] em28xx 1-1:0.0: Binding DVB extension [ 1400.543186][ T9] usb 9-1: config 0 descriptor?? [ 1400.559529][T15217] usb 1-1: USB disconnect, device number 94 [ 1400.568454][T15217] em28xx 1-1:0.0: Disconnecting em28xx [ 1400.593332][ T5877] em28xx 1-1:0.0: Registering input extension [ 1400.611975][T15217] em28xx 1-1:0.0: Closing input extension [ 1400.626999][T15217] em28xx 1-1:0.0: Freeing device [ 1400.772192][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1400.888557][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1400.977638][ T9] dib0700: firmware download failed at 7 with -22 [ 1401.151712][ T30] audit: type=1326 audit(1768782585.201:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23047 comm="syz.8.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206678f749 code=0x7ffc0000 [ 1401.202370][ T9] usb 9-1: USB disconnect, device number 45 [ 1401.214037][ T30] audit: type=1326 audit(1768782585.229:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23047 comm="syz.8.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f206678f749 code=0x7ffc0000 [ 1401.415220][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.422900][ T30] audit: type=1326 audit(1768782585.229:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23047 comm="syz.8.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206678f749 code=0x7ffc0000 [ 1401.460051][ T30] audit: type=1326 audit(1768782585.229:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23047 comm="syz.8.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206678f749 code=0x7ffc0000 [ 1403.065113][T23092] binder: 23083:23092 ioctl c00c620f 200000000040 returned -22 [ 1403.074492][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.339913][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.474456][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.206652][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.312071][ T5877] kernel read not supported for file /cpu/0/msr (pid: 5877 comm: kworker/0:3) [ 1406.321910][ T30] audit: type=1400 audit(1768782590.028:2146): avc: denied { write } for pid=23108 comm="syz.1.4231" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1406.567634][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.019399][T17639] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1407.488008][T17639] usb 9-1: Using ep0 maxpacket: 16 [ 1407.799627][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.810350][T17639] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1407.843629][T17639] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1407.852873][T17639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.860853][T17639] usb 9-1: Product: syz [ 1407.892903][T17639] usb 9-1: Manufacturer: syz [ 1407.922018][T17639] usb 9-1: SerialNumber: syz [ 1407.945982][T17639] usb 9-1: config 0 descriptor?? [ 1408.081209][T17639] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1408.099433][T17639] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1408.312448][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1408.390130][T23141] binder: 23137:23141 ioctl c00c620f 200000000040 returned -22 [ 1408.912969][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.069793][T17639] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1409.085542][T23148] netlink: 'syz.6.4242': attribute type 20 has an invalid length. [ 1409.094406][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4242'. [ 1409.170534][T14357] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1409.170798][T23148] netlink: 'syz.6.4242': attribute type 20 has an invalid length. [ 1409.187992][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4242'. [ 1409.188618][T14357] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1409.207791][T14357] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1409.860284][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.869426][T17639] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1409.877661][T17639] em28xx 9-1:0.0: board has no eeprom [ 1410.021073][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.223649][T17639] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1410.231558][T17639] em28xx 9-1:0.0: dvb set to bulk mode. [ 1410.237541][T17652] em28xx 9-1:0.0: Binding DVB extension [ 1410.306963][T23160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4246'. [ 1410.377938][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.406556][T23164] xt_TCPMSS: Only works on TCP SYN packets [ 1410.459977][ T5877] usb 9-1: USB disconnect, device number 46 [ 1410.503098][ T5877] em28xx 9-1:0.0: Disconnecting em28xx [ 1410.675856][T17652] em28xx 9-1:0.0: Registering input extension [ 1410.682307][ T5877] em28xx 9-1:0.0: Closing input extension [ 1410.703464][ T5877] em28xx 9-1:0.0: Freeing device [ 1411.143329][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.657209][T23193] binder: 23189:23193 ioctl c00c620f 200000000040 returned -22 [ 1412.024455][T23195] vivid-000: ================= START STATUS ================= [ 1412.037404][T23195] vivid-000: RDS Tx I/O Mode: Controls [ 1412.047342][T23195] vivid-000: RDS Program ID: 32904 [ 1412.061704][T23195] vivid-000: RDS Program Type: 3 [ 1412.071396][T23195] vivid-000: RDS PS Name: VIVID-TX [ 1412.093413][T23195] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1412.111254][T23195] vivid-000: RDS Stereo: true [ 1412.219159][T23195] vivid-000: RDS Artificial Head: false [ 1412.244764][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.257371][T23195] vivid-000: RDS Compressed: false [ 1412.263219][ T30] audit: type=1400 audit(1768782595.593:2147): avc: denied { map } for pid=23197 comm="syz.8.4255" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1412.273780][T23195] vivid-000: RDS Dynamic PTY: false [ 1412.318752][T23195] vivid-000: RDS Traffic Announcement: false [ 1412.325090][T23195] vivid-000: RDS Traffic Program: true [ 1412.348867][T23195] vivid-000: RDS Music: [ 1412.351110][T17639] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1412.365609][T23195] true [ 1412.378342][T23195] vivid-000: ================== END STATUS ================== [ 1412.577198][T17639] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.594223][T17639] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1412.623924][T17639] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1412.636476][T17639] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.644553][T17639] usb 1-1: Product: syz [ 1412.654401][T17639] usb 1-1: Manufacturer: syz [ 1412.658993][T17639] usb 1-1: SerialNumber: syz [ 1412.661275][T15218] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1412.842887][ T9] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1412.853541][T15218] usb 9-1: Using ep0 maxpacket: 32 [ 1413.207051][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.222894][T15218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.233963][T15218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.244141][T15218] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1413.258011][T15218] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1413.267093][T15218] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.290634][T15218] usb 9-1: config 0 descriptor?? [ 1413.301626][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 1413.320269][ T9] usb 7-1: config 9 has an invalid interface number: 5 but max is 2 [ 1413.349420][ T9] usb 7-1: config 9 has an invalid interface number: 28 but max is 2 [ 1413.367283][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.385424][ T9] usb 7-1: config 9 has an invalid interface number: 242 but max is 2 [ 1413.386595][T17639] usb 1-1: USB disconnect, device number 95 [ 1413.407340][ T9] usb 7-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 1413.428275][ T9] usb 7-1: config 9 has no interface number 0 [ 1413.440363][ T9] usb 7-1: config 9 has no interface number 1 [ 1413.458068][ T9] usb 7-1: config 9 has no interface number 2 [ 1413.471452][ T9] usb 7-1: config 9 interface 5 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 1023 [ 1413.494496][ T9] usb 7-1: config 9 interface 5 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1413.520886][ T9] usb 7-1: too many endpoints for config 9 interface 28 altsetting 178: 145, using maximum allowed: 30 [ 1413.545048][ T9] usb 7-1: config 9 interface 28 altsetting 178 has 1 endpoint descriptor, different from the interface descriptor's value: 145 [ 1413.559338][ T9] usb 7-1: config 9 interface 242 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1413.578484][ T9] usb 7-1: config 9 interface 5 has no altsetting 0 [ 1413.722310][ T9] usb 7-1: config 9 interface 28 has no altsetting 0 [ 1413.741482][ T9] usb 7-1: config 9 interface 242 has no altsetting 0 [ 1413.810873][T23212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.820890][T23212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.209080][ T9] usb 7-1: New USB device found, idVendor=19d2, idProduct=1270, bcdDevice=78.b7 [ 1414.284070][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.479008][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.648340][ T9] usb 7-1: Product: Ⴌ紆獔ᣛ緮䵤綥큓븗ᨭ䇱ޒ룆ᣮ쟫ꊪ湆卖㤄ニ봿倾⡺ [ 1414.659381][ T9] usb 7-1: Manufacturer: 譋哨⌗탁獅웅Փ铺پ펟韷ึ㟰霷蹼聱똮豻Ꟃﰜ霏枵䥌뤂ᑻᮟ웶껽䚍Ӏ睎㕥招⺽쯝䊶쏪⻍鐷욫잇︉⤡쪸㮗瀋ꇲ粅ﴒ蟹揽㧁뙫䋗묭༦흪ᨙ葙穨徨⤧䘙淂퇼當⚎톩ᕉ㮸픏쀏钳ﲐ铆䑁枳훆鱠颪弫簣鳜疛뮪⹘赼器◽✲⯛ﳦ⑜曩蹑騞ꕳᡟ [ 1414.691309][ T9] usb 7-1: SerialNumber: 㴁ᤸ巙䯎뼼ᬍ頸摮ጪ▪燣怀迈복뷱皹샴쬴愬㑔횄鎎ꦎ㞥Ὶ憀゚텢蠖ꇌ鈟ኙ芈⯑₢괝﹎頺鐁敮蘎 [ 1415.196208][T23203] sctp: [Deprecated]: syz.6.4257 (pid 23203) Use of int in max_burst socket option. [ 1415.196208][T23203] Use struct sctp_assoc_value instead [ 1415.315988][T23203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.357816][T23203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.383192][ T9] usb 7-1: USB disconnect, device number 52 [ 1415.579999][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.615450][T15218] usbhid 9-1:0.0: can't add hid device: -71 [ 1415.621645][T15218] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1415.631914][T15218] usb 9-1: USB disconnect, device number 47 [ 1415.671376][T23234] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4265'. [ 1415.868364][T17652] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1416.097293][T17652] usb 2-1: Using ep0 maxpacket: 32 [ 1416.139408][T17652] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1416.212139][T17652] usb 2-1: config 0 has no interface number 0 [ 1416.295921][T17652] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1416.350065][T17652] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.358264][T17652] usb 2-1: Product: syz [ 1416.362643][T17652] usb 2-1: Manufacturer: syz [ 1416.367364][T17652] usb 2-1: SerialNumber: syz [ 1416.385309][T17652] usb 2-1: config 0 descriptor?? [ 1416.394067][T17652] smsc95xx v2.0.0 [ 1416.505393][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.517951][T23241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23241 comm=syz.6.4267 [ 1416.691967][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.291951][T23248] netlink: 'syz.8.4269': attribute type 1 has an invalid length. [ 1417.415322][T23248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1417.569548][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4269'. [ 1417.578467][T23248] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4269'. [ 1417.617650][T23248] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 1417.639641][T23248] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 1418.298162][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.946371][T17652] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1418.957280][T17652] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1418.967205][T17652] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1418.981110][T17652] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1418.992561][T17652] usb 2-1: USB disconnect, device number 6 [ 1419.093988][T23266] xt_TCPMSS: Only works on TCP SYN packets [ 1419.461641][T23272] ALSA: mixer_oss: invalid OSS volume '' [ 1419.663963][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.770587][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.781096][T17620] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1419.837122][T23283] FAULT_INJECTION: forcing a failure. [ 1419.837122][T23283] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.882576][T23283] CPU: 1 UID: 0 PID: 23283 Comm: syz.0.4278 Tainted: G L syzkaller #0 PREEMPT(full) [ 1419.882604][T23283] Tainted: [L]=SOFTLOCKUP [ 1419.882610][T23283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1419.882619][T23283] Call Trace: [ 1419.882625][T23283] [ 1419.882632][T23283] dump_stack_lvl+0x16c/0x1f0 [ 1419.882659][T23283] should_fail_ex+0x512/0x640 [ 1419.882684][T23283] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1419.882705][T23283] should_failslab+0xc2/0x120 [ 1419.882727][T23283] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1419.882745][T23283] ? __alloc_skb+0x156/0x410 [ 1419.882766][T23283] ? __alloc_skb+0x156/0x410 [ 1419.882781][T23283] __alloc_skb+0x156/0x410 [ 1419.882795][T23283] ? __alloc_skb+0x35d/0x410 [ 1419.882809][T23283] ? __pfx___alloc_skb+0x10/0x10 [ 1419.882825][T23283] ? netlink_autobind.isra.0+0x158/0x370 [ 1419.882854][T23283] netlink_alloc_large_skb+0x69/0x140 [ 1419.882878][T23283] netlink_sendmsg+0x698/0xdd0 [ 1419.882904][T23283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1419.882936][T23283] ____sys_sendmsg+0xa5d/0xc30 [ 1419.882960][T23283] ? copy_msghdr_from_user+0x10a/0x160 [ 1419.882978][T23283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1419.883012][T23283] ___sys_sendmsg+0x134/0x1d0 [ 1419.883033][T23283] ? __pfx____sys_sendmsg+0x10/0x10 [ 1419.883082][T23283] __sys_sendmsg+0x16d/0x220 [ 1419.883101][T23283] ? __pfx___sys_sendmsg+0x10/0x10 [ 1419.883135][T23283] do_syscall_64+0xcd/0xf80 [ 1419.883160][T23283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.883177][T23283] RIP: 0033:0x7f9ecc38f749 [ 1419.883191][T23283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1419.883207][T23283] RSP: 002b:00007f9ecd1f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1419.883222][T23283] RAX: ffffffffffffffda RBX: 00007f9ecc5e5fa0 RCX: 00007f9ecc38f749 [ 1419.883233][T23283] RDX: 00000000200400c4 RSI: 0000200000000340 RDI: 0000000000000003 [ 1419.883243][T23283] RBP: 00007f9ecd1f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.883253][T23283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.883263][T23283] R13: 00007f9ecc5e6038 R14: 00007f9ecc5e5fa0 R15: 00007fff643e73a8 [ 1419.883287][T23283] [ 1420.145026][ T30] audit: type=1400 audit(1768782602.973:2148): avc: denied { append } for pid=23284 comm="syz.6.4280" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1420.294296][T17620] usb 9-1: Using ep0 maxpacket: 8 [ 1420.308860][T17620] usb 9-1: config 2 has an invalid interface number: 31 but max is 0 [ 1420.317806][T17620] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.328249][T17620] usb 9-1: config 2 has no interface number 0 [ 1420.335001][T17620] usb 9-1: config 2 interface 31 has no altsetting 0 [ 1420.361362][T17620] usb 9-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1420.370754][T17620] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.370864][T23294] xt_TCPMSS: Only works on TCP SYN packets [ 1420.378774][T17620] usb 9-1: Product: syz [ 1420.389098][T17620] usb 9-1: Manufacturer: syz [ 1420.389812][T23295] netlink: 6 bytes leftover after parsing attributes in process `syz.7.4283'. [ 1420.394806][T17620] usb 9-1: SerialNumber: syz [ 1420.453912][T17620] ch9200 9-1:2.31: probe with driver ch9200 failed with error -22 [ 1420.456383][T23295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1420.588135][T23299] netlink: 'syz.1.4284': attribute type 1 has an invalid length. [ 1420.628103][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.730356][T17620] usb 9-1: USB disconnect, device number 48 [ 1420.893165][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.014285][T23302] 9p: Bad value for 'wfdno' [ 1421.029580][T23299] bond2: entered promiscuous mode [ 1421.040268][T23299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1421.234752][T23313] xt_TCPMSS: Only works on TCP SYN packets [ 1421.501944][T23317] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4288'. [ 1421.557653][T23322] netlink: 'syz.1.4288': attribute type 10 has an invalid length. [ 1421.696835][T23322] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4288'. [ 1422.042048][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.193342][T23323] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4287'. [ 1422.224768][T23317] geneve2: entered promiscuous mode [ 1422.241783][T23317] geneve2: entered allmulticast mode [ 1422.256944][T14358] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1422.266038][T14358] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1422.276263][T14358] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1422.571322][T17620] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1422.578893][T17652] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1422.794387][T17652] usb 7-1: Using ep0 maxpacket: 32 [ 1422.803796][T17620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1422.820544][T17652] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1422.839222][T17620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.849845][T17652] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1422.857403][T17652] usb 7-1: can't read configurations, error -71 [ 1422.864212][T17620] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1422.881367][T17620] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1422.892022][T17620] usb 2-1: Manufacturer: syz [ 1422.904597][T17620] usb 2-1: config 0 descriptor?? [ 1423.069630][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.306318][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.674958][T23363] netlink: 182 bytes leftover after parsing attributes in process `syz.6.4298'. [ 1424.414006][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.178912][T23379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.254226][T17620] usbhid 2-1:0.0: can't add hid device: -71 [ 1425.272858][T23379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.299700][T17620] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1425.343412][T23379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.374929][T17620] usb 2-1: USB disconnect, device number 7 [ 1425.391740][T17633] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1425.405303][T23379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.525322][T23387] FAULT_INJECTION: forcing a failure. [ 1425.525322][T23387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.561125][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.602173][T23387] CPU: 1 UID: 0 PID: 23387 Comm: syz.1.4304 Tainted: G L syzkaller #0 PREEMPT(full) [ 1425.602201][T23387] Tainted: [L]=SOFTLOCKUP [ 1425.602207][T23387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1425.602217][T23387] Call Trace: [ 1425.602223][T23387] [ 1425.602230][T23387] dump_stack_lvl+0x16c/0x1f0 [ 1425.602258][T23387] should_fail_ex+0x512/0x640 [ 1425.602297][T23387] _copy_from_iter+0x2a4/0x16c0 [ 1425.602327][T23387] ? __alloc_skb+0x220/0x410 [ 1425.602342][T23387] ? __alloc_skb+0x35d/0x410 [ 1425.602357][T23387] ? __pfx__copy_from_iter+0x10/0x10 [ 1425.602382][T23387] ? netlink_autobind.isra.0+0x158/0x370 [ 1425.602414][T23387] netlink_sendmsg+0x820/0xdd0 [ 1425.602441][T23387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1425.602473][T23387] ____sys_sendmsg+0xa5d/0xc30 [ 1425.602497][T23387] ? copy_msghdr_from_user+0x10a/0x160 [ 1425.602515][T23387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1425.602550][T23387] ___sys_sendmsg+0x134/0x1d0 [ 1425.602570][T23387] ? __pfx____sys_sendmsg+0x10/0x10 [ 1425.602619][T23387] __sys_sendmsg+0x16d/0x220 [ 1425.602639][T23387] ? __pfx___sys_sendmsg+0x10/0x10 [ 1425.602674][T23387] do_syscall_64+0xcd/0xf80 [ 1425.602699][T23387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.602716][T23387] RIP: 0033:0x7f00db58f749 [ 1425.602731][T23387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1425.602747][T23387] RSP: 002b:00007f00d97f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1425.602764][T23387] RAX: ffffffffffffffda RBX: 00007f00db7e5fa0 RCX: 00007f00db58f749 [ 1425.602775][T23387] RDX: 00000000200400c4 RSI: 0000200000000340 RDI: 0000000000000003 [ 1425.602786][T23387] RBP: 00007f00d97f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.602796][T23387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.602806][T23387] R13: 00007f00db7e6038 R14: 00007f00db7e5fa0 R15: 00007ffda0ec4e08 [ 1425.602830][T23387] [ 1425.944389][T23395] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4311'. [ 1425.959295][T23396] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4311'. [ 1426.426594][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.843652][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.097226][T23421] netlink: 'syz.0.4318': attribute type 33 has an invalid length. [ 1427.118746][T23421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4318'. [ 1427.332764][T23427] FAULT_INJECTION: forcing a failure. [ 1427.332764][T23427] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.381535][T23427] CPU: 1 UID: 0 PID: 23427 Comm: syz.6.4320 Tainted: G L syzkaller #0 PREEMPT(full) [ 1427.381566][T23427] Tainted: [L]=SOFTLOCKUP [ 1427.381572][T23427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1427.381581][T23427] Call Trace: [ 1427.381588][T23427] [ 1427.381595][T23427] dump_stack_lvl+0x16c/0x1f0 [ 1427.381623][T23427] should_fail_ex+0x512/0x640 [ 1427.381651][T23427] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1427.381671][T23427] should_failslab+0xc2/0x120 [ 1427.381695][T23427] kmem_cache_alloc_noprof+0x83/0x770 [ 1427.381713][T23427] ? skb_clone+0x190/0x3f0 [ 1427.381737][T23427] ? skb_clone+0x190/0x3f0 [ 1427.381753][T23427] skb_clone+0x190/0x3f0 [ 1427.381773][T23427] netlink_deliver_tap+0xabd/0xd30 [ 1427.381801][T23427] netlink_unicast+0x64c/0x870 [ 1427.381826][T23427] ? __pfx_netlink_unicast+0x10/0x10 [ 1427.381858][T23427] netlink_sendmsg+0x8c8/0xdd0 [ 1427.381884][T23427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1427.381916][T23427] ____sys_sendmsg+0xa5d/0xc30 [ 1427.381941][T23427] ? copy_msghdr_from_user+0x10a/0x160 [ 1427.381960][T23427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1427.381994][T23427] ___sys_sendmsg+0x134/0x1d0 [ 1427.382014][T23427] ? __pfx____sys_sendmsg+0x10/0x10 [ 1427.382064][T23427] __sys_sendmsg+0x16d/0x220 [ 1427.382082][T23427] ? __pfx___sys_sendmsg+0x10/0x10 [ 1427.382116][T23427] do_syscall_64+0xcd/0xf80 [ 1427.382140][T23427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.382156][T23427] RIP: 0033:0x7fb67b58f749 [ 1427.382169][T23427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.382184][T23427] RSP: 002b:00007fb67c460038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.382207][T23427] RAX: ffffffffffffffda RBX: 00007fb67b7e5fa0 RCX: 00007fb67b58f749 [ 1427.382219][T23427] RDX: 00000000200400c4 RSI: 0000200000000340 RDI: 0000000000000003 [ 1427.382229][T23427] RBP: 00007fb67c460090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.382239][T23427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.382249][T23427] R13: 00007fb67b7e6038 R14: 00007fb67b7e5fa0 R15: 00007fffadada8a8 [ 1427.382273][T23427] [ 1427.387870][T23429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4319'. [ 1427.970755][ T30] audit: type=1400 audit(1768782610.298:2149): avc: denied { map } for pid=23433 comm="syz.6.4322" path="socket:[96960]" dev="sockfs" ino=96960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1428.166118][T17633] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 1428.416497][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.667859][T17633] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1428.685643][T17633] usb 9-1: config 1 has no interface number 0 [ 1428.699837][T17633] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1428.776453][T17633] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1428.804402][T17633] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1428.814331][T17633] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1428.969870][T17633] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1428.998840][T17633] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1429.014866][T17633] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.046123][ T30] audit: type=1326 audit(1768782611.299:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23443 comm="syz.6.4325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb67b58f749 code=0x7ffe0000 [ 1429.070216][T17633] usb 9-1: Product: syz [ 1429.074711][T17633] usb 9-1: Manufacturer: syz [ 1429.080957][T17633] usb 9-1: SerialNumber: syz [ 1429.092155][T23431] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1429.319030][T23431] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1429.345588][T23432] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1429.531530][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.691482][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.304820][T17633] cdc_ncm 9-1:1.1: failed GET_NTB_PARAMETERS [ 1430.331557][T17633] cdc_ncm 9-1:1.1: bind() failure [ 1430.390998][T17633] usb 9-1: USB disconnect, device number 49 [ 1430.642998][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.889574][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.974220][T17620] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1431.188145][T17620] usb 9-1: Using ep0 maxpacket: 32 [ 1431.207613][T17620] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1431.244119][T17620] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.265300][T17620] usb 9-1: Product: syz [ 1431.269470][T17620] usb 9-1: Manufacturer: syz [ 1431.281941][T17620] usb 9-1: SerialNumber: syz [ 1431.315642][T17620] usb 9-1: config 0 descriptor?? [ 1431.403425][T17633] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1431.615643][T17633] usb 2-1: Using ep0 maxpacket: 16 [ 1431.634589][T17633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.646763][T17633] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1431.655926][T17633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.712709][T17633] usb 2-1: config 0 descriptor?? [ 1431.751266][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.777390][T17620] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1431.786677][T17620] peak_usb 9-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1431.796293][T23479] loop8: detected capacity change from 0 to 7 [ 1431.804901][ C1] blk_print_req_error: 5 callbacks suppressed [ 1431.804913][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1431.820532][ C1] buffer_io_error: 5 callbacks suppressed [ 1431.820545][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1431.834976][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1431.844519][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1431.854310][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1431.863850][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1431.871840][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1431.881376][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1431.889382][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1431.898911][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1431.906978][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1431.916524][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1431.925156][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1431.934749][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1431.947240][T23479] ldm_validate_partition_table(): Disk read failed. [ 1431.953941][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1431.963536][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1431.972135][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1431.981712][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1431.990203][T17620] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 1432.000308][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1432.009893][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1432.019831][T17620] usb 9-1: USB disconnect, device number 50 [ 1432.025794][T23479] Dev loop8: unable to read RDB block 0 [ 1432.036348][T23479] loop8: unable to read partition table [ 1432.042176][T23479] loop8: partition table beyond EOD, truncated [ 1432.049478][T23479] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X ) failed (rc=-5) [ 1432.128897][T15217] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1432.268718][T23485] fuse: Unknown parameter 'group_id00000000000000000000' [ 1432.297900][T17633] usbhid 2-1:0.0: can't add hid device: -71 [ 1432.304060][T17633] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1432.314888][T17633] usb 2-1: USB disconnect, device number 8 [ 1432.327572][T15217] usb 1-1: config 0 has no interfaces? [ 1432.339440][T15217] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1432.368748][T15217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1432.377167][T15217] usb 1-1: SerialNumber: syz [ 1432.385927][T15217] usb 1-1: config 0 descriptor?? [ 1433.172684][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.190808][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.220802][T23479] fuse: Bad value for 'group_id' [ 1433.225729][T23479] fuse: Bad value for 'group_id' [ 1433.747115][T15218] usb 1-1: USB disconnect, device number 97 [ 1434.395299][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.403958][T17652] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1434.566569][T17652] usb 9-1: Using ep0 maxpacket: 8 [ 1434.645979][T17652] usb 9-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.767118][T17652] usb 9-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1434.858354][T17652] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1434.873401][T17652] usb 9-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 1434.883598][T17652] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.894872][T17652] usb 9-1: Product: syz [ 1434.900232][T17652] usb 9-1: Manufacturer: ㅏ䟍毀蹳ΰ蔮쥶㍏잩矑踦༴㍷浹蠂ꨴ韩き팱椑Pܷ늍䐉ᴳ塪ျ脹艉搙戽ㅬ뫖ꂾ੆뎪罋콟떕㞗権›壷ꫵ䞺আ [ 1434.918958][T17652] usb 9-1: SerialNumber: syz [ 1435.449138][T17652] usbhid 9-1:1.0: can't add hid device: -71 [ 1435.479768][T17652] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1435.564231][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.587881][T17652] usb 9-1: USB disconnect, device number 51 [ 1436.382740][T23521] xt_TCPMSS: Only works on TCP SYN packets [ 1436.556617][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.708368][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.185395][ T9] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1437.368707][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1437.391460][ T9] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1437.418462][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.449688][ T9] usb 1-1: config 220 has no interface number 2 [ 1437.482328][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1437.522695][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1437.543424][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1437.564591][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1437.587941][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1437.603570][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.630473][ T9] usb 1-1: Product: syz [ 1437.642471][ T9] usb 1-1: Manufacturer: syz [ 1437.658442][ T9] usb 1-1: SerialNumber: syz [ 1437.719902][T15218] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1437.822264][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.890995][T15218] usb 2-1: Using ep0 maxpacket: 16 [ 1437.902958][T15218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1437.913113][ T9] usb 1-1: selecting invalid altsetting 0 [ 1437.937181][ T9] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1437.949047][ T9] uvcvideo 1-1:220.0: No valid video chain found. [ 1437.957138][T15218] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1437.968401][T15218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.976992][T15218] usb 2-1: Product: syz [ 1437.987651][T15218] usb 2-1: Manufacturer: syz [ 1437.992436][T15218] usb 2-1: SerialNumber: syz [ 1437.998262][ T9] usb 1-1: selecting invalid altsetting 0 [ 1438.004163][ T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1438.014983][T15218] usb 2-1: config 0 descriptor?? [ 1438.026761][T15218] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1438.038643][ T9] usb 1-1: USB disconnect, device number 98 [ 1438.047671][T15218] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1439.370470][T15218] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1439.389651][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.807617][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.967063][T23561] xt_TCPMSS: Only works on TCP SYN packets [ 1440.035948][T15218] em28xx 2-1:0.0: board has no eeprom [ 1440.149070][T23568] xt_TCPMSS: Only works on TCP SYN packets [ 1440.350113][T15218] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1440.357954][T15218] em28xx 2-1:0.0: dvb set to bulk mode. [ 1440.363732][T15217] em28xx 2-1:0.0: Binding DVB extension [ 1440.376877][T15218] usb 2-1: USB disconnect, device number 9 [ 1440.391669][T15218] em28xx 2-1:0.0: Disconnecting em28xx [ 1440.442750][T15217] em28xx 2-1:0.0: Registering input extension [ 1440.449166][T15218] em28xx 2-1:0.0: Closing input extension [ 1440.462633][T15218] em28xx 2-1:0.0: Freeing device [ 1440.474149][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.674763][ T30] audit: type=1400 audit(1768782622.168:2151): avc: denied { write } for pid=23573 comm="syz.8.4362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1440.874081][T15217] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1440.890063][T23580] kvm: pic: level sensitive irq not supported [ 1440.892115][T23580] picdev_read: 77 callbacks suppressed [ 1440.892125][T23580] kvm: pic: non byte read [ 1440.938166][T23580] kvm: pic: level sensitive irq not supported [ 1440.938225][T23580] kvm: pic: non byte read [ 1441.026767][ T30] audit: type=1400 audit(1768782622.505:2152): avc: denied { map } for pid=23587 comm="syz.1.4365" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1441.079476][T15217] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1441.142551][T15217] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1441.158778][T15218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.180347][T15217] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.203311][T15217] usb 7-1: Product: syz [ 1441.213269][T15217] usb 7-1: Manufacturer: syz [ 1441.222739][T15217] usb 7-1: SerialNumber: syz [ 1441.227708][ T30] audit: type=1400 audit(1768782622.505:2153): avc: denied { execute } for pid=23587 comm="syz.1.4365" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1441.276473][T15217] usb 7-1: config 0 descriptor?? [ 1441.300667][T23580] netlink: 'syz.0.4358': attribute type 12 has an invalid length. [ 1441.330371][T15217] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1441.611292][T23576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.621816][T23576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.662865][T15217] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1441.775169][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.932961][T15217] usb 2-1: Using ep0 maxpacket: 8 [ 1441.962027][T23603] xt_TCPMSS: Only works on TCP SYN packets [ 1442.057220][T15217] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.071005][T15217] usb 2-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1442.236508][ T30] audit: type=1400 audit(1768782623.543:2154): avc: denied { watch } for pid=23569 comm="syz.6.4361" path="/proc/1207" dev="proc" ino=97474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1442.263584][T15217] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1442.272765][T15217] usb 2-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 1442.291224][T15217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.397485][T15217] usb 2-1: Product: syz [ 1442.407884][T15217] usb 2-1: Manufacturer: ㅏ䟍毀蹳ΰ蔮쥶㍏잩矑踦༴㍷浹蠂ꨴ韩き팱椑Pܷ늍䐉ᴳ塪ျ脹艉搙戽ㅬ뫖ꂾ੆뎪罋콟떕㞗権›壷ꫵ䞺আ [ 1442.456315][T15217] usb 2-1: SerialNumber: syz [ 1442.503570][T23608] FAULT_INJECTION: forcing a failure. [ 1442.503570][T23608] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.562063][T23608] CPU: 0 UID: 0 PID: 23608 Comm: syz.8.4370 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.562093][T23608] Tainted: [L]=SOFTLOCKUP [ 1442.562099][T23608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1442.562109][T23608] Call Trace: [ 1442.562116][T23608] [ 1442.562124][T23608] dump_stack_lvl+0x16c/0x1f0 [ 1442.562152][T23608] should_fail_ex+0x512/0x640 [ 1442.562175][T23608] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1442.562193][T23608] should_failslab+0xc2/0x120 [ 1442.562215][T23608] kmem_cache_alloc_noprof+0x83/0x770 [ 1442.562233][T23608] ? skb_clone+0x190/0x3f0 [ 1442.562258][T23608] ? skb_clone+0x190/0x3f0 [ 1442.562274][T23608] skb_clone+0x190/0x3f0 [ 1442.562293][T23608] netlink_deliver_tap+0xabd/0xd30 [ 1442.562322][T23608] netlink_unicast+0x71f/0x870 [ 1442.562340][T23608] ? __pfx_netlink_unicast+0x10/0x10 [ 1442.562354][T23608] ? genl_rcv_msg+0x4bb/0x800 [ 1442.562372][T23608] netlink_ack+0x696/0xb80 [ 1442.562390][T23608] netlink_rcv_skb+0x332/0x420 [ 1442.562403][T23608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1442.562419][T23608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1442.562438][T23608] ? netlink_deliver_tap+0x1ae/0xd30 [ 1442.562453][T23608] genl_rcv+0x28/0x40 [ 1442.562466][T23608] netlink_unicast+0x5aa/0x870 [ 1442.562482][T23608] ? __pfx_netlink_unicast+0x10/0x10 [ 1442.562500][T23608] netlink_sendmsg+0x8c8/0xdd0 [ 1442.562516][T23608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1442.562535][T23608] ____sys_sendmsg+0xa5d/0xc30 [ 1442.562551][T23608] ? copy_msghdr_from_user+0x10a/0x160 [ 1442.562562][T23608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1442.562583][T23608] ___sys_sendmsg+0x134/0x1d0 [ 1442.562595][T23608] ? __pfx____sys_sendmsg+0x10/0x10 [ 1442.562624][T23608] __sys_sendmsg+0x16d/0x220 [ 1442.562638][T23608] ? __pfx___sys_sendmsg+0x10/0x10 [ 1442.562669][T23608] do_syscall_64+0xcd/0xf80 [ 1442.562694][T23608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.562711][T23608] RIP: 0033:0x7f206678f749 [ 1442.562722][T23608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1442.562732][T23608] RSP: 002b:00007f2067657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1442.562743][T23608] RAX: ffffffffffffffda RBX: 00007f20669e5fa0 RCX: 00007f206678f749 [ 1442.562750][T23608] RDX: 00000000200400c4 RSI: 0000200000000340 RDI: 0000000000000003 [ 1442.562756][T23608] RBP: 00007f2067657090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.562762][T23608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.562771][T23608] R13: 00007f20669e6038 R14: 00007f20669e5fa0 R15: 00007ffded594bb8 [ 1442.562795][T23608] [ 1442.862879][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.078143][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.089027][T15217] usbhid 2-1:1.0: can't add hid device: -71 [ 1443.094999][T15217] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1443.104942][T15217] usb 2-1: USB disconnect, device number 10 [ 1443.199989][T23614] netlink: 272 bytes leftover after parsing attributes in process `syz.8.4372'. [ 1443.977891][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.228617][ T9] usb 7-1: USB disconnect, device number 55 [ 1445.157026][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.233333][T17633] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 1446.287730][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.369258][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.483530][T17633] usb 2-1: config 0 interface 0 altsetting 186 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.495635][T17633] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1446.502511][T17633] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1446.516220][T17633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.529011][T15217] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1446.532037][T17633] usb 2-1: config 0 descriptor?? [ 1447.021050][T15217] usb 9-1: Using ep0 maxpacket: 16 [ 1447.028745][T15217] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.040018][T15217] usb 9-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1447.049194][T15217] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.067322][T15217] usb 9-1: config 0 descriptor?? [ 1447.248851][T17633] usbhid 2-1:0.0: can't add hid device: -71 [ 1447.255343][T17633] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1447.265366][T17633] usb 2-1: USB disconnect, device number 11 [ 1447.403708][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.491960][T23664] sctp: [Deprecated]: syz.0.4387 (pid 23664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1447.491960][T23664] Use struct sctp_sack_info instead [ 1447.655369][T23667] fuse: Bad value for 'user_id' [ 1447.662666][T23667] fuse: Bad value for 'user_id' [ 1447.932639][T15217] usbhid 9-1:0.0: can't add hid device: -71 [ 1447.938629][T15217] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1447.957400][T15217] usb 9-1: USB disconnect, device number 52 [ 1448.599965][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.040157][ T30] audit: type=1400 audit(1768782629.997:2155): avc: denied { bind } for pid=23677 comm="syz.8.4392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1449.061000][ T30] audit: type=1400 audit(1768782629.997:2156): avc: denied { connect } for pid=23677 comm="syz.8.4392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1449.655307][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.709540][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.747579][T23699] vivid-002: ================= START STATUS ================= [ 1449.757627][T23699] vivid-002: RDS Tx I/O Mode: Controls [ 1449.777512][T23699] vivid-002: RDS Program ID: 32904 [ 1449.785936][T23699] vivid-002: RDS Program Type: 3 [ 1449.796433][T23699] vivid-002: RDS PS Name: VIVID-TX [ 1449.803231][T23703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4400'. [ 1449.812698][T23703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23703 comm=syz.7.4400 [ 1449.821728][T23699] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1449.896784][T23699] vivid-002: RDS Stereo: true [ 1449.901733][T23699] vivid-002: RDS Artificial Head: false [ 1449.910859][T23699] vivid-002: RDS Compressed: false [ 1449.916242][T23699] vivid-002: RDS Dynamic PTY: false [ 1449.927581][T23699] vivid-002: RDS Traffic Announcement: false [ 1449.934571][T23699] vivid-002: RDS Traffic Program: true [ 1449.960764][T23699] vivid-002: RDS Music: true [ 1449.993302][T23699] vivid-002: ================== END STATUS ================== [ 1450.024990][T17633] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1450.056951][T17620] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1450.230288][T17633] usb 1-1: Using ep0 maxpacket: 16 [ 1450.291565][T17633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1450.308333][T17633] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1450.324133][T17633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.332210][T17633] usb 1-1: Product: syz [ 1450.336483][T17633] usb 1-1: Manufacturer: syz [ 1450.341069][T17633] usb 1-1: SerialNumber: syz [ 1450.360442][T17633] usb 1-1: config 0 descriptor?? [ 1450.368360][T17633] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1450.377673][T17633] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1450.485538][T17620] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.506720][T17620] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1450.954949][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.974335][T17620] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1450.983629][T17620] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.991670][T17620] usb 7-1: Product: syz [ 1450.996500][T17620] usb 7-1: Manufacturer: syz [ 1451.003378][T17620] usb 7-1: SerialNumber: syz [ 1451.286083][T17633] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1451.350021][T23723] 9p: Bad value for 'rfdno' [ 1451.718811][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.750757][T17633] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1451.764409][T17633] em28xx 1-1:0.0: board has no eeprom [ 1451.771190][T17620] usb 7-1: skipping empty audio interface (v1) [ 1451.787585][T17620] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1451.802990][T17620] usb 7-1: USB disconnect, device number 56 [ 1452.046126][T15217] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1452.108581][T17633] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1452.116541][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.125074][T17633] em28xx 1-1:0.0: dvb set to bulk mode. [ 1452.130851][T17620] em28xx 1-1:0.0: Binding DVB extension [ 1452.213193][ T9] usb 1-1: USB disconnect, device number 99 [ 1452.227904][T15217] usb 2-1: Using ep0 maxpacket: 8 [ 1452.234799][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 1452.250423][T15217] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.270295][T15217] usb 2-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1452.286386][T15217] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1452.290259][T17620] em28xx 1-1:0.0: Registering input extension [ 1452.295178][T15217] usb 2-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 1452.309137][ T9] em28xx 1-1:0.0: Closing input extension [ 1452.321309][ T9] em28xx 1-1:0.0: Freeing device [ 1452.326283][T15217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.336922][T15217] usb 2-1: Product: syz [ 1452.341130][T15217] usb 2-1: Manufacturer: ㅏ䟍毀蹳ΰ蔮쥶㍏잩矑踦༴㍷浹蠂ꨴ韩き팱椑Pܷ늍䐉ᴳ塪ျ脹艉搙戽ㅬ뫖ꂾ੆뎪罋콟떕㞗権›壷ꫵ䞺আ [ 1452.358938][T15217] usb 2-1: SerialNumber: syz [ 1452.832567][T15217] usbhid 2-1:1.0: can't add hid device: -71 [ 1452.838924][T15217] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1452.850822][T15217] usb 2-1: USB disconnect, device number 12 [ 1453.400950][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.409094][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.059143][T23765] xt_TCPMSS: Only works on TCP SYN packets [ 1454.507341][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.848640][T23781] FAULT_INJECTION: forcing a failure. [ 1454.848640][T23781] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.923569][T23781] CPU: 0 UID: 0 PID: 23781 Comm: syz.7.4421 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.923600][T23781] Tainted: [L]=SOFTLOCKUP [ 1454.923607][T23781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1454.923617][T23781] Call Trace: [ 1454.923624][T23781] [ 1454.923631][T23781] dump_stack_lvl+0x16c/0x1f0 [ 1454.923660][T23781] should_fail_ex+0x512/0x640 [ 1454.923685][T23781] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1454.923705][T23781] should_failslab+0xc2/0x120 [ 1454.923729][T23781] kmem_cache_alloc_noprof+0x83/0x770 [ 1454.923747][T23781] ? alloc_empty_file+0x55/0x1e0 [ 1454.923769][T23781] ? alloc_empty_file+0x55/0x1e0 [ 1454.923784][T23781] alloc_empty_file+0x55/0x1e0 [ 1454.923802][T23781] alloc_file_clone+0x5f/0x110 [ 1454.923821][T23781] do_shmat+0x733/0x1480 [ 1454.923853][T23781] ? __pfx_do_shmat+0x10/0x10 [ 1454.923885][T23781] __x64_sys_shmat+0xd7/0x170 [ 1454.923911][T23781] ? __pfx_ksys_write+0x10/0x10 [ 1454.923938][T23781] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1454.923966][T23781] ? rcu_is_watching+0x12/0xc0 [ 1454.923982][T23781] ? do_syscall_64+0x91/0xf80 [ 1454.924007][T23781] do_syscall_64+0xcd/0xf80 [ 1454.924032][T23781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.924050][T23781] RIP: 0033:0x7f8d1a58f749 [ 1454.924064][T23781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1454.924081][T23781] RSP: 002b:00007f8d1b423038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1454.924098][T23781] RAX: ffffffffffffffda RBX: 00007f8d1a7e5fa0 RCX: 00007f8d1a58f749 [ 1454.924109][T23781] RDX: 0000000000004000 RSI: 0000200000ffc000 RDI: 0000000000000000 [ 1454.924120][T23781] RBP: 00007f8d1b423090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.924130][T23781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.924140][T23781] R13: 00007f8d1a7e6038 R14: 00007f8d1a7e5fa0 R15: 00007ffdd6476218 [ 1454.924165][T23781] [ 1455.466422][T17620] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1455.478439][T23797] xt_TCPMSS: Only works on TCP SYN packets [ 1455.640256][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.107952][T17620] usb 9-1: Using ep0 maxpacket: 8 [ 1456.130029][T17620] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1456.495838][T17620] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1456.518227][T17620] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.526897][T17620] usb 9-1: Product: syz [ 1456.531264][T17620] usb 9-1: Manufacturer: syz [ 1456.536201][T17620] usb 9-1: SerialNumber: syz [ 1456.644499][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.793635][T17633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.826493][T17620] usb 9-1: config 0 descriptor?? [ 1457.035764][T17620] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1457.247008][T17620] usb 9-1: setting power ON [ 1457.277423][T17620] dvb-usb: bulk message failed: -22 (2/0) [ 1457.382437][T17633] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1457.391338][T17620] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1457.472407][T17620] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1457.503381][T17620] usb 9-1: media controller created [ 1457.539553][T17620] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1457.656056][T23828] netlink: 'syz.6.4435': attribute type 1 has an invalid length. [ 1457.669300][T17633] usb 2-1: Using ep0 maxpacket: 32 [ 1457.726143][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4435'. [ 1457.735153][T23835] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4435'. [ 1457.771104][T23828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1458.481227][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1458.652390][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1458.724104][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.735992][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.746863][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1458.756221][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.876084][ T9] usb 1-1: config 0 descriptor?? [ 1459.046716][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.173698][T23836] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 1459.208702][T17633] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1459.216807][T17633] usb 2-1: config 0 has no interface number 0 [ 1459.238016][T17620] usb 9-1: selecting invalid altsetting 6 [ 1459.253958][T17620] usb 9-1: digital interface selection failed (-22) [ 1459.270178][T17620] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1459.280196][T17620] usb 9-1: setting power OFF [ 1459.286321][T17633] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1459.298032][T17620] dvb-usb: bulk message failed: -22 (2/0) [ 1459.304777][T17633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.309705][T23836] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 1459.312799][T17620] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1459.443250][T17633] usb 2-1: Product: syz [ 1459.447464][T17633] usb 2-1: Manufacturer: syz [ 1459.470252][ T9] ft260 0003:0403:6030.002B: unknown main item tag 0x0 [ 1459.473841][T17633] usb 2-1: SerialNumber: syz [ 1459.484213][T17620] (NULL device *): no alternate interface [ 1459.621195][ T9] ft260 0003:0403:6030.002B: unknown main item tag 0x0 [ 1459.635136][T17633] usb 2-1: config 0 descriptor?? [ 1459.648129][T17633] smsc95xx v2.0.0 [ 1459.658713][T23847] xt_TCPMSS: Only works on TCP SYN packets [ 1459.680038][T17620] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1459.701543][T17620] usb 9-1: USB disconnect, device number 53 [ 1459.713310][ T9] ft260 0003:0403:6030.002B: chip code: 6424 8183 [ 1459.764655][T17646] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1459.892513][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.980710][T17646] usb 7-1: config 0 has an invalid interface number: 43 but max is 0 [ 1460.057863][ T9] ft260 0003:0403:6030.002B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1460.058183][T17646] usb 7-1: config 0 has no interface number 0 [ 1460.078243][T17646] usb 7-1: config 0 interface 43 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1460.090550][T17646] usb 7-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=ed.9e [ 1460.129845][T17646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.143687][T17649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.157376][T17633] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1460.172230][T17646] usb 7-1: config 0 descriptor?? [ 1460.177932][T17633] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1460.190670][T17633] usb 2-1: USB disconnect, device number 13 [ 1460.204669][T17646] HFC-S_USB 7-1:0.43: probe with driver HFC-S_USB failed with error -5 [ 1460.254619][ T9] ft260 0003:0403:6030.002B: failed to retrieve status: -32, no wakeup [ 1460.296606][ T30] audit: type=1400 audit(1768782640.530:2157): avc: denied { read } for pid=23851 comm="syz.7.4442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1460.592435][T23844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.608895][T23844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.616667][T23839] ft260 0003:0403:6030.002B: ft260_i2c_read: failed with -38 [ 1460.638213][T17633] usb 1-1: USB disconnect, device number 100 [ 1460.665862][ T30] audit: type=1400 audit(1768782640.867:2158): avc: denied { remount } for pid=23861 comm="syz.1.4445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1461.637351][T17646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.677749][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.920432][ T9] usb 7-1: USB disconnect, device number 57 [ 1461.985615][T23880] binder: 23873:23880 ioctl c00c620f 200000000040 returned -22 [ 1461.987642][T17646] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1462.169299][T17646] usb 9-1: Using ep0 maxpacket: 16 [ 1462.202626][T17646] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1462.224085][T17646] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1462.233453][T17646] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.241597][T17646] usb 9-1: Product: syz [ 1462.245886][T17646] usb 9-1: Manufacturer: syz [ 1462.250541][T17646] usb 9-1: SerialNumber: syz [ 1462.288848][T17646] usb 9-1: config 0 descriptor?? [ 1462.313994][T17646] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1462.324982][T17646] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1462.789888][T17620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.950922][T17646] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1463.064414][T23886] FAULT_INJECTION: forcing a failure. [ 1463.064414][T23886] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.132066][T23886] CPU: 1 UID: 0 PID: 23886 Comm: syz.0.4452 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.132099][T23886] Tainted: [L]=SOFTLOCKUP [ 1463.132105][T23886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1463.132116][T23886] Call Trace: [ 1463.132122][T23886] [ 1463.132129][T23886] dump_stack_lvl+0x16c/0x1f0 [ 1463.132156][T23886] should_fail_ex+0x512/0x640 [ 1463.132182][T23886] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1463.132202][T23886] should_failslab+0xc2/0x120 [ 1463.132226][T23886] kmem_cache_alloc_noprof+0x83/0x770 [ 1463.132244][T23886] ? skb_clone+0x190/0x3f0 [ 1463.132268][T23886] ? skb_clone+0x190/0x3f0 [ 1463.132285][T23886] skb_clone+0x190/0x3f0 [ 1463.132305][T23886] netlink_deliver_tap+0xabd/0xd30 [ 1463.132332][T23886] netlink_unicast+0x71f/0x870 [ 1463.132358][T23886] ? __pfx_netlink_unicast+0x10/0x10 [ 1463.132385][T23886] ? netlink_ack+0x968/0xb80 [ 1463.132409][T23886] netlink_ack+0x696/0xb80 [ 1463.132439][T23886] netlink_rcv_skb+0x332/0x420 [ 1463.132461][T23886] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1463.132482][T23886] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1463.132516][T23886] ? ns_capable+0xd7/0x110 [ 1463.132542][T23886] nfnetlink_rcv+0x1b3/0x430 [ 1463.132558][T23886] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1463.132583][T23886] netlink_unicast+0x5aa/0x870 [ 1463.132609][T23886] ? __pfx_netlink_unicast+0x10/0x10 [ 1463.132640][T23886] netlink_sendmsg+0x8c8/0xdd0 [ 1463.132666][T23886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.132698][T23886] ____sys_sendmsg+0xa5d/0xc30 [ 1463.132722][T23886] ? copy_msghdr_from_user+0x10a/0x160 [ 1463.132751][T23886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1463.132781][T23886] ? __lock_acquire+0x436/0x2890 [ 1463.132804][T23886] ___sys_sendmsg+0x134/0x1d0 [ 1463.132825][T23886] ? __pfx____sys_sendmsg+0x10/0x10 [ 1463.132844][T23886] ? lock_acquire+0x179/0x330 [ 1463.132897][T23886] __sys_sendmsg+0x16d/0x220 [ 1463.132917][T23886] ? __pfx___sys_sendmsg+0x10/0x10 [ 1463.132934][T23886] ? __pfx___schedule+0x10/0x10 [ 1463.132971][T23886] do_syscall_64+0xcd/0xf80 [ 1463.132996][T23886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.133013][T23886] RIP: 0033:0x7f9ecc38f749 [ 1463.133028][T23886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1463.133044][T23886] RSP: 002b:00007f9ecd1f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1463.133062][T23886] RAX: ffffffffffffffda RBX: 00007f9ecc5e5fa0 RCX: 00007f9ecc38f749 [ 1463.133074][T23886] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1463.133084][T23886] RBP: 00007f9ecd1f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.133093][T23886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.133103][T23886] R13: 00007f9ecc5e6038 R14: 00007f9ecc5e5fa0 R15: 00007fff643e73a8 [ 1463.133127][T23886] [ 1463.146852][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.405467][ T8326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.419930][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.433898][T17650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.441979][T17650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.673531][T17646] em28xx 9-1:0.0: board has no eeprom [ 1465.064303][T17646] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1465.086032][T17646] em28xx 9-1:0.0: dvb set to bulk mode. [ 1465.106461][T17650] em28xx 9-1:0.0: Binding DVB extension [ 1465.120197][T17646] usb 9-1: USB disconnect, device number 54 [ 1465.142037][T17646] em28xx 9-1:0.0: Disconnecting em28xx [ 1465.185730][T17650] em28xx 9-1:0.0: Registering input extension [ 1465.203549][T17646] em28xx 9-1:0.0: Closing input extension [ 1465.221148][T17646] em28xx 9-1:0.0: Freeing device [ 1465.531355][T17650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.642908][T17650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.749289][T23922] binder: 23920:23922 ioctl c00c620f 200000000040 returned -22 [ 1467.752405][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.765539][T17650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.876738][T17650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.808501][ T4368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.810274][T23957] can: request_module (can-proto-5) failed. [ 1469.823011][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.832479][T15217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.880087][T23960] macvlan1: entered promiscuous mode [ 1470.100750][T23963] binder: 23962:23963 ioctl c00c620f 200000000040 returned -22 [ 1470.228180][T23892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.251906][ T6154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.625603][T23892] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1471.453153][T17650] net_ratelimit: 2 callbacks suppressed [ 1471.453168][T17650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.473520][T23892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1471.480139][T23892] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1471.490451][T23892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.077768][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.113446][T23892] usb 7-1: config 0 descriptor?? [ 1473.128222][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.137498][T23892] usbhid 7-1:0.0: can't add hid device: -71 [ 1473.159754][T23892] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1473.178187][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.199892][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1475.290631][T17639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.543322][ T5877] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1539.678022][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1587.559420][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1587.566376][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23989/1:b..l [ 1587.575070][ C0] rcu: (detected by 0, t=10502 jiffies, g=120709, q=467 ncpus=2) [ 1587.582855][ C0] task:syz.0.4479 state:R running task stack:26456 pid:23989 tgid:23986 ppid:17035 task_flags:0x400040 flags:0x00080000 [ 1587.597347][ C0] Call Trace: [ 1587.600621][ C0] [ 1587.603542][ C0] ? __schedule+0x10b9/0x6150 [ 1587.608217][ C0] __schedule+0x1139/0x6150 [ 1587.612726][ C0] ? __pfx___schedule+0x10/0x10 [ 1587.617566][ C0] ? mark_held_locks+0x49/0x80 [ 1587.622319][ C0] preempt_schedule_irq+0x51/0x90 [ 1587.627333][ C0] irqentry_exit+0x1d8/0x8c0 [ 1587.631920][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1587.637885][ C0] RIP: 0010:unwind_next_frame+0xe56/0x20b0 [ 1587.643681][ C0] Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 34 0f 00 00 49 89 6d 40 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 19 0f 00 00 41 39 5d 00 0f 84 [ 1587.663271][ C0] RSP: 0018:ffffc9000c356cb8 EFLAGS: 00000a06 [ 1587.669323][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc9000c358000 [ 1587.677282][ C0] RDX: 1ffff9200186ada5 RSI: ffffc9000c3576b0 RDI: ffffc9000c356d68 [ 1587.685234][ C0] RBP: 1ffff9200186aee1 R08: 0000000000000001 R09: 000000002accd784 [ 1587.693187][ C0] R10: 0000000000000002 R11: 000000000001036b R12: ffffc9000c356d78 [ 1587.701139][ C0] R13: ffffc9000c356d28 R14: ffffc9000c3576e0 R15: ffffc9000c356d5c [ 1587.709103][ C0] ? unwind_next_frame+0x1519/0x20b0 [ 1587.714379][ C0] ? shmem_get_folio_gfp+0x67f/0x1610 [ 1587.719750][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1587.725890][ C0] arch_stack_walk+0x94/0x100 [ 1587.730559][ C0] ? shmem_fault+0x1fe/0xa00 [ 1587.735134][ C0] stack_trace_save+0x8e/0xc0 [ 1587.739800][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1587.745161][ C0] ? __lock_acquire+0x436/0x2890 [ 1587.750084][ C0] save_stack+0x160/0x1f0 [ 1587.754399][ C0] ? __pfx_save_stack+0x10/0x10 [ 1587.759237][ C0] ? post_alloc_hook+0x1af/0x220 [ 1587.764163][ C0] ? get_page_from_freelist+0xd0b/0x31a0 [ 1587.769774][ C0] ? __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1587.775822][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 1587.780831][ C0] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 1587.786362][ C0] ? shmem_alloc_folio+0x135/0x160 [ 1587.791465][ C0] ? shmem_alloc_and_add_folio+0x494/0xc20 [ 1587.797258][ C0] ? shmem_get_folio_gfp+0x67f/0x1610 [ 1587.802626][ C0] ? __lock_acquire+0x436/0x2890 [ 1587.807553][ C0] __set_page_owner+0x91/0x560 [ 1587.812309][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1587.817669][ C0] ? bad_range+0x261/0x4c0 [ 1587.822074][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1587.827267][ C0] post_alloc_hook+0x1af/0x220 [ 1587.832025][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 1587.837476][ C0] ? __pfx___might_resched+0x10/0x10 [ 1587.842748][ C0] ? should_fail_alloc_page+0xee/0x130 [ 1587.848201][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1587.854079][ C0] ? __lock_acquire+0x436/0x2890 [ 1587.859006][ C0] ? rcu_is_watching+0x12/0xc0 [ 1587.863749][ C0] ? mod_memcg_lruvec_state+0x381/0x5f0 [ 1587.869281][ C0] ? __mod_zone_page_state+0xcc/0x1a0 [ 1587.874644][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1587.880958][ C0] ? folios_put_refs+0x51d/0x750 [ 1587.885882][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1587.891151][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1587.897043][ C0] ? policy_nodemask+0xea/0x4e0 [ 1587.901881][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1587.906721][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1587.912087][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1587.917452][ C0] shmem_alloc_folio+0x135/0x160 [ 1587.922378][ C0] shmem_alloc_and_add_folio+0x494/0xc20 [ 1587.928008][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1587.934152][ C0] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1587.940041][ C0] shmem_get_folio_gfp+0x67f/0x1610 [ 1587.945239][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1587.950870][ C0] ? ktime_get_coarse_real_ts64_mg+0x22c/0x300 [ 1587.957014][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1587.962221][ C0] shmem_fault+0x1fe/0xa00 [ 1587.966620][ C0] ? __lock_acquire+0x436/0x2890 [ 1587.971542][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 1587.976470][ C0] ? __up_read+0x2d1/0x700 [ 1587.980887][ C0] __do_fault+0x10d/0x490 [ 1587.985202][ C0] do_fault+0x302/0x1ad0 [ 1587.989437][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1587.994884][ C0] __handle_mm_fault+0x1919/0x2bb0 [ 1587.999993][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1588.005444][ C0] ? __pte_offset_map_lock+0x174/0x310 [ 1588.010889][ C0] ? find_held_lock+0x2b/0x80 [ 1588.015565][ C0] ? follow_page_pte+0x5cf/0x1390 [ 1588.020581][ C0] handle_mm_fault+0x3fe/0xad0 [ 1588.025342][ C0] __get_user_pages+0x54e/0x3590 [ 1588.030272][ C0] ? down_read_killable+0x313/0x4c0 [ 1588.035455][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 1588.040815][ C0] ? rcu_is_watching+0x12/0xc0 [ 1588.045563][ C0] faultin_page_range+0x338/0x940 [ 1588.050580][ C0] madvise_do_behavior+0x34c/0x530 [ 1588.055685][ C0] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1588.061309][ C0] ? down_read+0x13d/0x460 [ 1588.065721][ C0] do_madvise+0x176/0x240 [ 1588.070038][ C0] ? __pfx_do_madvise+0x10/0x10 [ 1588.074878][ C0] ? do_futex+0x122/0x350 [ 1588.079201][ C0] ? find_held_lock+0x2b/0x80 [ 1588.083876][ C0] ? xfd_validate_state+0x61/0x180 [ 1588.088980][ C0] __x64_sys_madvise+0xa9/0x110 [ 1588.093819][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1588.099007][ C0] do_syscall_64+0xcd/0xf80 [ 1588.103501][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.109376][ C0] RIP: 0033:0x7f9ecc38f749 [ 1588.113776][ C0] RSP: 002b:00007f9ecd142038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1588.122177][ C0] RAX: ffffffffffffffda RBX: 00007f9ecc5e6090 RCX: 00007f9ecc38f749 [ 1588.130131][ C0] RDX: 0000000000000017 RSI: 0000000000c00304 RDI: 0000200000000000 [ 1588.138083][ C0] RBP: 00007f9ecc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1588.146042][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.153996][ C0] R13: 00007f9ecc5e6128 R14: 00007f9ecc5e6090 R15: 00007fff643e73a8 [ 1588.161961][ C0] [ 1588.164962][ C0] rcu: rcu_preempt kthread starved for 10184 jiffies! g120709 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1588.176223][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1588.186172][ C0] rcu: RCU grace-period kthread stack dump: [ 1588.192038][ C0] task:rcu_preempt state:R running task stack:28320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1588.205511][ C0] Call Trace: [ 1588.208773][ C0] [ 1588.211687][ C0] ? __schedule+0x10b9/0x6150 [ 1588.216350][ C0] __schedule+0x1139/0x6150 [ 1588.220852][ C0] ? __pfx___schedule+0x10/0x10 [ 1588.225686][ C0] ? find_held_lock+0x2b/0x80 [ 1588.230354][ C0] ? schedule+0x2d7/0x3a0 [ 1588.234673][ C0] schedule+0xe7/0x3a0 [ 1588.238730][ C0] schedule_timeout+0x123/0x290 [ 1588.243565][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1588.248925][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1588.254199][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1588.259990][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1588.265437][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1588.270191][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1588.275464][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1588.280649][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1588.285572][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1588.290424][ C0] rcu_gp_kthread+0x26d/0x380 [ 1588.295088][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1588.300270][ C0] ? rcu_is_watching+0x12/0xc0 [ 1588.305018][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1588.310207][ C0] ? __kthread_parkme+0x19e/0x250 [ 1588.315218][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1588.320402][ C0] kthread+0x3c5/0x780 [ 1588.324462][ C0] ? __pfx_kthread+0x10/0x10 [ 1588.329039][ C0] ? rcu_is_watching+0x12/0xc0 [ 1588.333783][ C0] ? __pfx_kthread+0x10/0x10 [ 1588.338358][ C0] ret_from_fork+0x983/0xb10 [ 1588.342935][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1588.348035][ C0] ? __switch_to+0x7af/0x10d0 [ 1588.352701][ C0] ? __pfx_kthread+0x10/0x10 [ 1588.357281][ C0] ret_from_fork_asm+0x1a/0x30 [ 1588.362053][ C0] [ 1588.365055][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1588.371360][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1588.381841][ C0] Tainted: [L]=SOFTLOCKUP [ 1588.386146][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1588.396180][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1588.401802][ C0] Code: 26 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 99 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1588.421390][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1588.427440][ C0] RAX: 0000000005955011 RBX: 0000000000000000 RCX: ffffffff8b78c6d9 [ 1588.435392][ C0] RDX: 0000000000000000 RSI: ffffffff8dacf2d0 RDI: ffffffff8bf2b280 [ 1588.443346][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1588.451300][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1588.459253][ C0] R13: ffffffff8e097b40 R14: ffffffff9088cad0 R15: 0000000000000000 [ 1588.467205][ C0] FS: 0000000000000000(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000 [ 1588.476122][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1588.482690][ C0] CR2: 00007f51858bc984 CR3: 00000000325ea000 CR4: 00000000003526f0 [ 1588.490645][ C0] Call Trace: [ 1588.493904][ C0] [ 1588.496816][ C0] default_idle+0x13/0x20 [ 1588.501127][ C0] default_idle_call+0x6c/0xb0 [ 1588.505871][ C0] do_idle+0x38d/0x510 [ 1588.509934][ C0] ? __pfx_do_idle+0x10/0x10 [ 1588.514521][ C0] cpu_startup_entry+0x4f/0x60 [ 1588.519276][ C0] rest_init+0x16b/0x2b0 [ 1588.523499][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1588.528770][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1588.534300][ C0] start_kernel+0x3ef/0x4d0 [ 1588.538787][ C0] x86_64_start_reservations+0x18/0x30 [ 1588.544232][ C0] x86_64_start_kernel+0x130/0x190 [ 1588.549330][ C0] common_startup_64+0x13e/0x148 [ 1588.554263][ C0]