last executing test programs: 29m20.84748487s ago: executing program 32 (id=1346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000019500000300012800c0001006d6163766c616e002000028008000300030000000b000100100000000a000400aaaaaaa2aabb0000140035006d6163766c616e30"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) 17m1.737618377s ago: executing program 2 (id=4808): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/13], 0x0}, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "c04e5508a95b0aeb"}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x10000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e03}, 0x6e) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xff, 'xfrm0\x00', 'tunl0\x00', {}, {}, 0x2e, 0x0, 0x20}, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc7, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x18c40, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000640)={0x0}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xe4010000, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) 16m58.539875635s ago: executing program 2 (id=4818): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = syz_usb_connect$uac1(0x2, 0x10d, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000400003018490030904000000010100000a24010000080201020724050306f6df0b24070202007a15bfe6d50904010000010200000904010101010200000a2402010201000053790d240202f7ff060004eed1c70d0f240202f7fffcff0153ca696ba6d71124020114010905c127ae477616ce3d0a0c24020283d9040000ab72140e240201e8010706de147ed5e55f09050109ff0387f508072501830304000904020000010200000904020101010200001124020102010604293cbed080f752472d072401040901101c240201030104800924020105020c0b7d072401070503000924020102040204c009058209556006000e0725010300"/269], &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x4, 0x3, 0xff, 0x7}, 0x20, &(0x7f0000000300)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x5, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0xaf, 0x2, 0x1, 0xf0f, 0xf11, [0xf, 0x3f00]}]}, 0x2, [{0x9b, &(0x7f00000003c0)=@string={0x9b, 0x3, "bb3461411f543bfb70be7f3750a19934528ac4abdbc4c80a7339f471fff1f7d5586bdab5006d66ba1ceba10c224fd425b0d64b7a3f6b98d027b4725c352e5dcd19f999936db1cf22577f1e13c36897e4647c5a1b9a3fd41d27710cb1291b6848f23170d84c241ecc8d60d5275775d2f812177d103b808f9e9d479c05b035d064a833725ae9db30239c4fd7d67c2a4681c1c4b96d7dcf940e36"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x449}}]}) syz_usb_disconnect(r2) (async) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x11) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10") (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10") syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) eventfd2(0xb, 0x80801) add_key$keyring(&(0x7f0000000080), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x39) 16m57.128242218s ago: executing program 2 (id=4824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1df28e8328352a28) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000280), 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)={r3, 0x2b, "2cb5a48a8680e05b2f1d7edddd4abcf90fd4ae516057ad359b333856893166a4cb01a0d4f94bc962293d15"}, &(0x7f00000001c0)=0x33) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/174, 0xae}, 0x2}], 0x1, 0x2, 0x0) (async) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES8=r6, @ANYRESDEC=r5], 0xdc}}, 0x0) 16m57.072730445s ago: executing program 2 (id=4825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) 16m56.998862477s ago: executing program 2 (id=4827): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 16m56.451312404s ago: executing program 2 (id=4829): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x12}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'bridge0\x00', {0x8}, 0x1}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x800007, 0x6362, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffe6, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x7f) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) r8 = socket$unix(0x1, 0x0, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x1}, 0x6e) sendto$unix(r8, &(0x7f00000000c0), 0x0, 0x8080, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1}, 0x6e) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r10, &(0x7f0000000080), 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'wlan1\x00', @broadcast}) 16m56.098087198s ago: executing program 33 (id=4829): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x12}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'bridge0\x00', {0x8}, 0x1}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x800007, 0x6362, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffe6, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x7f) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) r8 = socket$unix(0x1, 0x0, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x1}, 0x6e) sendto$unix(r8, &(0x7f00000000c0), 0x0, 0x8080, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1}, 0x6e) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r10, &(0x7f0000000080), 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'wlan1\x00', @broadcast}) 14m35.896538382s ago: executing program 0 (id=5430): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x7, 0x9}}) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x20001, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x7ccd, 0x8, 0x5, 0x40000333}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000180), 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_complete(r4) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc401"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000340)={0x0, 0x27, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[], 0x1c}], 0x1, 0x0, 0x40, 0x44005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$r', 0x2}], 0xfe, &(0x7f0000001a80)=ANY=[@ANYBLOB="0c000000000000000100000000ee0000"], 0xc}}], 0x1, 0x4004804) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x10001, "029c6e5c846eccb800d2ae30e3f5c320998750190300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000000)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8, 0xffffffffffffffff}) poll(&(0x7f00000001c0)=[{r9, 0x2210}, {r9, 0x201}, {r8, 0x7988}], 0x3, 0xffffffaf) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0)) 14m32.340962932s ago: executing program 0 (id=5442): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r3}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0x6}, @enum={0x2, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x5b9}, {0x10, 0x6}, {0xf, 0x3}, {0xa, 0x71}, {0xb, 0x7}]}]}, {0x0, [0x2e, 0x61, 0x6f]}}, &(0x7f00000003c0)=""/233, 0x61, 0xe9, 0x1, 0xfffffff7, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000006fffffff0000000020000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0800000085000000db9b9c26fe00000000000000000000000000000000986aa3"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x2c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffe6a, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4084) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7fffffff, 0x59}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0dac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) getsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f0000000040)={@private, @loopback, @dev}, &(0x7f00000000c0)=0xc) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 14m31.400465561s ago: executing program 0 (id=5446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000280)=""/211, 0xd3, 0xea6) syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x100000000000031d}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x5, 0x0, 0x4, 0xffff}) 14m30.190984017s ago: executing program 0 (id=5451): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000096b000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)=0xa) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000080)=0x7) socket(0x40000000015, 0x5, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001000)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r5, 0x0, r4, 0x0, 0x46) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 14m28.604971046s ago: executing program 0 (id=5458): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="00003393ade938a1f4e4fb79a41770edc1dbca7ec76f4f230634", 0x1a}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r2) 14m28.528705915s ago: executing program 0 (id=5459): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) (async) r1 = socket$inet6(0xa, 0x1, 0x0) (async) unshare(0x22020600) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27, 0x0, 0x81ff}, &(0x7f0000000800)=0x40) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800"/36, 0x24) 14m28.274995383s ago: executing program 34 (id=5459): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) (async) r1 = socket$inet6(0xa, 0x1, 0x0) (async) unshare(0x22020600) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27, 0x0, 0x81ff}, &(0x7f0000000800)=0x40) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800"/36, 0x24) 6m28.440959856s ago: executing program 6 (id=7509): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020596c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 32) r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f0000000240), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00C\x00'], 0x24}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="14589573cb0b22875b0000000000000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b00000000000300000005000000180001801400020073797a5f74756e00000080000000000008000500ff0300000c0003800400010004000380"], 0x40}}, 0x0) (async) getdents(0xffffffffffffffff, &(0x7f0000000fc0)=""/4096, 0x1000) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 6m28.300442254s ago: executing program 6 (id=7510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000002000010000000000000000000200000000000000000000000c00144000000000000012"], 0x28}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)='v', 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001740)=""/4087, 0xff7}, {&(0x7f00000047c0)=""/4054, 0xfd6}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000380)=""/175, 0xaf}], 0x5}, 0x40000000) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000016c0)="4c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3658f60a84c9f4d4938037e70e4509c5bb", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYRESDEC=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200001000000000fcffffff18150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x7fffffff}, {0x8, 0x16, 0x0, 0x0, 0x56}, {0x8, 0x0, 0x0, 0x0, 0x5}]}}]}]}, 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000002000010000000000000000000200000000000000000000000c00144000000000000012"], 0x28}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)='v', 0x1) (async) socket$kcm(0x10, 0x2, 0x0) (async) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001740)=""/4087, 0xff7}, {&(0x7f00000047c0)=""/4054, 0xfd6}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000380)=""/175, 0xaf}], 0x5}, 0x40000000) (async) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000016c0)="4c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3658f60a84c9f4d4938037e70e4509c5bb", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYRESDEC=r2], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200001000000000fcffffff18150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x7fffffff}, {0x8, 0x16, 0x0, 0x0, 0x56}, {0x8, 0x0, 0x0, 0x0, 0x5}]}}]}]}, 0x58}}, 0x0) (async) 6m28.211007598s ago: executing program 7 (id=7511): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000190001090000b1cbb2132a681236000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008000300e00000020600150006000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6m28.119695863s ago: executing program 6 (id=7512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000f3ffffff07040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800eaff840000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2}, 0x94) 6m27.988228913s ago: executing program 6 (id=7513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000410d000180169fc4f5f2e0e303ef00"/37], 0x28}}, 0x4010) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x2000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x134, 0x24, 0x300, 0x8000000, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff7}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x1000040, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0xffff, 0x0, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x9, 0x1, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0x2, 0x10001, 0x8, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x7fffffff, 0x98000000, 0x80000000, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x8, 0x3, 0x5}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff5}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}}, 0x0) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x8, 0xb68, 0x96e9, 0xec}}, &(0x7f0000000440), 0x200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000080)}, 0x10) r9 = socket(0xa, 0x3, 0x7) sendmmsg(r9, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x80, 0x0}}], 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r9, 0x541b, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getpid() timer_create(0x5, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f00000002c0)="0122475cf6186573e64713eeee582782f047fe6477c5f0177937a33a9e3a5150a6bcb3bdd4c2d1ccdb8ae51b74e57d635260381fcd40b2558245d8ceb9be4bb638818fdfa4afa11c249effef6ff45c667408ea665304ce400309c91ec4a15144edcf7fbfe85263013de1e0986f1edc1f5e3642ee9f8a6765191f331eee0700c5e0589dca8d022d92b6d609fc3700b6e68ae0913a91b1d964a2be84aaa60092248da65fb4afb6e09ec5db38adfc1f30b7d2dcfb1e6cf8c647f1", &(0x7f0000000380)="ac4a45919caddda5164a31ac0c34b4ef735226e8d2dfa00e77240783ef25105e09ba5e0b6cd628e84a157a76e3f5140f067ccb2759c3b05cc719f25f8a9580d9e46ea807a329df7d7bf5d633134fafa378c1b018ec1b5d07b558ae7a75bd36623c37ed1b17f5265fbe3c29dc714596acab72992003fde605f7f328e9c3bf370978f7e2f99b3de187e7578fc04b98f68322e3e2f7df"}}, &(0x7f0000000100)) 6m27.147588473s ago: executing program 7 (id=7515): syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c2, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140e10000020800024000000016080004400000000c0900010073797a3000000000140000001100010000000000000000000000000a83dfdd419ab40feaae0d3de478"], 0x74}}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x60012140, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) 6m26.996486071s ago: executing program 6 (id=7516): r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/softnet_stat\x00') ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000300), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0xfffffffffffffdaf) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000000000000", @ANYRES32, @ANYBLOB="1e00"/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="9cd30e29d6dbddfe330000000000010008000003ff00"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000020000000000000000", @ANYRES32=0x0, @ANYRESOCT=r3], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@local}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="016f0800010000000000140000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfd6c) 6m26.870149218s ago: executing program 6 (id=7519): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0x9}, {0x2, 0xf}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000006c0000012abd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="00000000e862bdf564fc91d8e828b7d7a4a30734f74ca40d3ee642f77f87175765682ac66c097daeaaadb53bb1c6df33360aa534cc27957254073da40c8099955c5a4cc8e461245cea9724faa43ce3fa49c8e93dd3e6587a92039a7c620750b34127e505f4cc9db8d4f6cabedd399f16f518037f74cd21f0d23c54f009845c505f2f87b53c102665c74167cf866e5918c781f2db0e8aae4fca5ab2ee4aa659327de1b21238b04edff55d26ac598858e03f14ca5aeaf8776e458f4b5751978290e1a8fc"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x40) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r4, 0xb59db000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080), 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r7 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x4, 0x0, 0x89}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) io_uring_enter(r7, 0x207a98, 0x363, 0xc, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet(r5, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 6m26.708412401s ago: executing program 35 (id=7519): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0x9}, {0x2, 0xf}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000006c0000012abd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="00000000e862bdf564fc91d8e828b7d7a4a30734f74ca40d3ee642f77f87175765682ac66c097daeaaadb53bb1c6df33360aa534cc27957254073da40c8099955c5a4cc8e461245cea9724faa43ce3fa49c8e93dd3e6587a92039a7c620750b34127e505f4cc9db8d4f6cabedd399f16f518037f74cd21f0d23c54f009845c505f2f87b53c102665c74167cf866e5918c781f2db0e8aae4fca5ab2ee4aa659327de1b21238b04edff55d26ac598858e03f14ca5aeaf8776e458f4b5751978290e1a8fc"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x40) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r4, 0xb59db000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080), 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r7 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x4, 0x0, 0x89}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) io_uring_enter(r7, 0x207a98, 0x363, 0xc, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet(r5, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 6m24.004613886s ago: executing program 7 (id=7532): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x202, 0x400) fanotify_mark(r3, 0x21, 0x2, r2, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x0, 0x20, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x301080, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000000c0)={0x18, r5}) r7 = syz_io_uring_setup(0x348a, &(0x7f0000005b80)={0x0, 0x6874, 0x800, 0x2000000, 0x402d4}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x22, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6m20.792398435s ago: executing program 7 (id=7546): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x9, 0xd, 0x4, 0x8cc5, 0x8}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r5, r5, 0x0, 0xfffe80) r6 = syz_open_dev$sg(0x0, 0x0, 0x48802) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec28, 0x400, 0x1, 0x4000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000280)={0x5, 0x4, 0x6}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f00000000c0)=0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) landlock_create_ruleset(0x0, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) 6m20.671906909s ago: executing program 7 (id=7548): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x9e0000, 0x5, 0x9, r1, 0x0, &(0x7f00000000c0)={0x9b0962, 0xd, '\x00', @p_u8=&(0x7f0000000080)=0x1}}) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) (async, rerun: 64) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xb, 0x4, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x2, 0x8, 0x4, 0x20, 0x7}, 0x208, &(0x7f0000000200)={0x5, 0xf, 0x208, 0x3, [@generic={0xfa, 0x10, 0x3, "d2ec7cafe93bd2b8296d3cd5005663aef14a2ed135afbc64e989abc2abee835449a34dd787ffb76f6bcd43354384631b1467d9550240260a0f4e316792c92a1bc5d1dcca30a106dc10a242d7be96ea2fe0ddf1d79d08406ff79c322a352b28a141c7aa90f293022fd83c3f13901708108b3b146f12fdcc7e8250254190088f8ec3d0a88eaf1d1c0c55b9fc6fb17f1de60cb4fd131fb7974a5411b0ff622d622d72212fd9f95fe0728ea93db089e7b0f298bddcd9592472fb4c54c6c6b71867b5f31c059e5a195af712a0615c252afa0b9ab5ed3d3c8140bc6481b41d46b1c5e81421d7e6740451384cf5bd79625c80a915458cb3bd30a4"}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "61803778526e5d1babc574f9fd5473d0"}, @generic={0xf5, 0x10, 0x4, "a5b8baca4aa2410b34a246a488b8dfcf02435e7caddeb775d6ce0ff38ef430a000baf8901bd07a12a0e166e7ad5b087761b685fc7946a412c5e4751c6676210f033efcaa8eaad19c3a085989aa4b6e7e0a035323e597a418f1657ddd86764d94b2f15bdd55c18e81b2c73625ee0ae44265bbfc3e780ac6e27772bb3d2bee3af826c9fc11dea9cf06827618b444494ca0bc5b57171e0ca21dadfd1253f6514723ae09e463af42169f721341e5b397b0f6c8d8cc8e41b9ea71d272f90aecacc84d2d374797a173c27a20ea921ff76d43880eeb5dd54b7d0f6496fdadf9d0240548d8bd1448beb7a33447d1c04620d073c107fa"}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc07}}, {0xb2, &(0x7f0000000500)=@string={0xb2, 0x3, "2963a913d202a18360b4484d4763593942a54732ed0275219cb4ef3e648aa6e21b05a507b09fb7351a2e87bb7cc386e45716c086d9f65b2cb2577c8af8851f226276fe41935f57382e4b7c3f13fc00f158c2e769da8f3966af5708b6c6ff1268eceebc3f3d04dc3de5b861f6279f61b8dca2e98b1c38661515f49197228f07a3258bb3543debdf32ca4b9b68a0baa7c8d9b0e4744db5bc85b9433dee858d4347ade4e4578d05e6f9811f5fed1d757bb8"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x437}}]}) (rerun: 64) syz_usb_control_io$printer(r2, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x20, 0x23, 0xab, {0xab, 0x30, "be5acf2f1dfdb1d78eb79799beebbf02adaa8286c6d7a658b09694f1166d9d306fa93cf124aa1a6b92cbbf16cdc044ab6946ffb2aee3282122d5cde3ef40c0ebf937c41996510e83e13fc436fc6a8d141f2157c71e186107c759e8a9acb7c7e7278b314a32ba6ecf5bcdd1398bf848979b25b997f7ff2b65b8485d1cf083f5d992f2e1d5cf5976817f78d40437095e9f42fd8d652d0d63471836b19a663273ddc9dec2bccb33cbf90d"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000800)={0x40, 0x5, 0x35, "16939cd6acb5eb6f2970a3620141ce8a97132f65796514b83dfdf8012b03c44791126b24e7609f4a6134147b338d3411bbca723609"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000008c0)={0x20, 0x0, 0xb1, {0xaf, "675db3bf20fdb82c976201dee7033b85a2e6c5dc4548d142fb232f73f3f1d509cba5ca587f9819cdf7a0d4459ed6791de0470f1c4f33095eb11b899497e35c02fe95db1872abb8cfd4ea7003052a86e133ad7458aeabb6487bc6694db093d2b50a2483b8547418e8860c0f31a6bef5767e8a5bd3030b78db3e421cd4cbc61dfad9a331cdfe6400c70a20fbd542b7b1822103f69cf5a7d1fafae233c1214b9a6397e2e845bf532f8284e3cd25f0fff1"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0xfb}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x5}}) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000a40)={0x10003, 0x2, 0x5000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r3 = syz_open_dev$dri(&(0x7f0000000a80), 0x7fffffff, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000ac0)={0x8, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000b00)={0x3, r4}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, r5, 0x0) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_PCM_IOCTL_STATUS32(r7, 0x806c4120, &(0x7f0000000bc0)) (async) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000c40)={{0x88, @remote, 0x4e22, 0x1, 'wrr\x00', 0x0, 0x8001, 0x76}, {@private=0xa010101, 0x4e23, 0x0, 0x5, 0xfffffffb, 0x7ff}}, 0x44) r8 = add_key$keyring(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000d40)='blacklist\x00', &(0x7f0000000d80)='\x00') (async, rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000dc0)={0x9}) (async, rerun: 64) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x3, &(0x7f0000000e00)=0x6, 0x4) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000f40)={&(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0], 0x5, 0x7, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000fc0)={r10, 0x1, 0x9, 0x3, &(0x7f0000000f80)=[{0x52, 0xb5, 0x7, 0x5}, {0x1005, 0xfffb, 0x7ff, 0x7}, {0x7fff, 0xeb9, 0x8, 0x8000}]}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001000)={0x1, 0x0, 0x33, 0x2, 0x8}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001040)='./binderfs2/binder-control\x00', 0x802, 0x0) (async, rerun: 32) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000001080)) (rerun: 32) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f00000010c0)=0x158) (async, rerun: 32) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000001100)={@loopback}, &(0x7f0000001140)=0x14) (rerun: 32) 6m20.447533646s ago: executing program 7 (id=7551): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x5, 0x590f, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) 6m20.302539043s ago: executing program 36 (id=7551): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x5, 0x590f, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) 4m56.396546212s ago: executing program 4 (id=7923): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) getdents64(r1, &(0x7f0000000600)=""/60, 0x48) getdents64(r1, 0xfffffffffffffffe, 0x41) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1000, '\x00', 0x0, r1, 0x4, 0x4}, 0x50) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) fstat(r2, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setrlimit(0x9, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {0x20}, {0x6, 0xfd, 0x0, 0x1ff}]}) io_setup(0x81, &(0x7f0000000200)) 4m56.284152206s ago: executing program 4 (id=7924): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x4, {0x7, './file0'}}, 0x10) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000540)}, {&(0x7f0000000580)="e7ab8c7376f1194fe1db13c54e928523968d5a3d1078fa91c7b641ae69722fa2359cb705bf2f25d29f911db7cfc5861fa7d137484e054b9a", 0x38}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="3e18565c850c31730e481dc945223a30acb4bcd66fb4385b38f52540bc770844e2b877f6079e2cb42ea62157b485fb6ab0da7e656c3e32324ef2159230d0b61f705a30dc56cec4c478d25cc7fffd34d2b1c9412e87ef12d08bc5677a64591ca83e531e05bd5ff15ff953a246f01622cbb882d11880050d5620768eb4796be398", 0x80}, {&(0x7f0000001640)="1af623578a7f27f32f181e8a497e240584febb7717", 0x15}], 0x5, 0x0, 0x0, 0x8001}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001700)="d32d4843f1f83f6b204b", 0xa}], 0x1, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r1, r2]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000001e80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001f00)="d7308ca6f69eae21251179b3c3f01effcadaea25c8ca8f6ebcad1522a42714918018e5207d644d96238e8577463962520cd10a44354116c77026c32056dfe9df285d86c5ce0f07c3945f44bc30d3b466e9854aa16f632be0fee0439ae105f078ad6d2a83cb06a1c1032a949f60cc54aedbe71e7f7a84728461f8e15513c26ac5170f27d54478a13217be2689454f36e537f8c6c933b13548e4a97efd6f9b3f463e0577f97cf52f040228a64fa934e5a80c0df3a6dd7e182323b145556274cb50680e1d", 0xc3}, {&(0x7f0000002000)="7925e1fe564bcad3500603c9ef190288c424d335b6b77c62e49cd133c7a99bab019780d4c07cdd12e5540b04609a4fb7f5a3780c32186dbe1e6862e6c6fc1bd8ee07c71626a7402a8ca6c36d5d4dc3e95e30", 0x52}, {&(0x7f0000002080)="edb1d71652de38f7f2ebf752178d1c138c5cbafc615bd6afa475d2b78e4650ee2f494b55f7cc2c27cef3ea7137376a7ca8bfa4b733f845a82ab5eb195975764fba6db5651ae3d2ed0f5c202f85f78dc4c9f432d9732ef8994545345724f2e37cde836df7f539d1d7f474a2475b3cf60d77b53c9d36e537aeb1f9798e9b07219a82b525e85aa81686e2dd0ee74f1792ef86a2a6ed2a3b4266d9f1a7bc351678f31c0cd463e58c0490faa589a768ee68ea99c2147070810f4afb03da7fd07d4d84e989632d352dc13cc5937a1c69f95efd09fb06bc696474", 0xd7}, {&(0x7f0000002180)="c57dad7bb99fe323e7ae8c03fbd660e03b1d3cd38b449705c29419cba4856bb84e63b9e77d24bb0059b0ddd11b9b3326a8823af6626507fb38152e19d3b33dc7422e7a74792f40c01ef93baa91d0f043e9df835c6810c564391bf27b283dff7e884665e28ccc334cfb688f6384eb9fc8640d3e6bee2912aa8bb52ff4cef8b6daec8eeb330cb068f108c4598b141817a992cb", 0x92}, {&(0x7f0000002240)="5bc218e6c004c744160c368b69b882001664569f1bc5946bfc7dc1003c22fa4bdeca56698cd1e0f2b7f64609eee6305b2dd18b921e9a9765c532df9269bf5faa1753e960833ecdab830b7f180e0960d0bdfd5b2cda8780a8e48e73a40c978ea3d7c938bf49642ef48b6f77c9c30012785c6da43b4cfb6edc", 0x78}, {&(0x7f00000022c0)="c2c980d621094817098fbb9af6a1b3dff95e41ed18e1a60bd113fd27e95b2abd317445b83dc9ef8e5060b3a6c1349ebbeacc566fad1ae26ae0d4e662e17d4fe9c8daaf4e34f60c52a67204400a2c20a7388c57908f807e8483a27dd8422558d76c8f0e7b08330d5ed9a12bfdc1d2ae892794a43542dbdae9c0dd9367ecc1e3ae2c031b0847980c23ee6a202f3bb98de9612012cba1a8a40e6ddd8d31ee120af7a7c2a022ffa8d6090ed2140a3d95b268", 0xb0}], 0x6, 0x0, 0x0, 0x1}}, {{&(0x7f0000002400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002480)="9231ab0b6636b75ba3db899ac1e156bc10a4a0f8adc7744aff6e47733af963bfbe2f5ade07014013b928258cef2119f17bb4d7697d5e19db9302fefe139165883ed5b55fe96cf7dff8ca3e151c", 0x4d}, {&(0x7f0000002500)="bf2af1473d86614da9d8b2a4bb7c41940d71e45f053d01f1933c2652", 0x1c}, {&(0x7f0000002540)="8d75e286c818d853c6b46cb615e82649395a279c0f1466765569ee1719f401327500166b0c5bc57460e3d5268640199c6d225daedea63b26768b9fc434660eb6734798f4f8570c618b079a4ad612ffeff7661a2a8826dca777953787592a1d2914b1002bfc76c9e57d7adc670cde2a6059b56eed91923e0ca52dee32f5d1719e3698f5dd5e16", 0x86}, {&(0x7f0000002600)="a0c15db0d634ea783e9d85dc00a561c2f2255d162ac9be9161aa48549d31b16ad4ff9ea18182e51d0127b1d683167ff64a16d39e1256bef82abbac1bdf44233a5f97f37cf67bf3f9e433aa1d726c454936c0d38a91322bfdee040795f2522c578a0f1d27769fb9bbc7433670604b90c21d66d50ed19503c23df200580411d490946a065f119d20b4820052fd92dcd8663e10da5b503522b815c8684cd2dde64d7773362f2284bdcc6ca2ca4a05b9066178c57b31585416c3567e886c0f1a81deb4558f5384", 0xc5}, {&(0x7f0000002700)="357c36b0e32462d139217db4b6e7e551d9e46a1351008bf6ac8b43daff9d216a1fde20d3340321750cfb5aeb9080a8389cdbc6c5fd214c88ae61fc90ce739c9bf76aa46685aa1b4f087b9c4771b4c75265ff81330904c069098b328104", 0x5d}], 0x5, &(0x7f0000002800), 0x0, 0x20000844}}], 0x4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x197302, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0x80000800000b49, 0x8, 0x1000000000008, 0x2000, 0x80000003}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r4 = fcntl$getown(r3, 0x9) sched_getattr(r4, &(0x7f00000000c0)={0x38}, 0x38, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES8, @ANYRESOCT=0x0], 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x1880) (async) close(r5) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x201cb605ce81a557}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x402100, 0x3a) (async) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000180)="fc", 0x1}], 0x2) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400) 4m56.170420332s ago: executing program 4 (id=7925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x65c, 0x80000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x1}) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x17) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, 0x0) 4m55.881556596s ago: executing program 4 (id=7928): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000700b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xca5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4800) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 4m54.976480308s ago: executing program 4 (id=7932): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r4}]}, 0x30}}, 0x0) (async) capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x0, 0x80, 0xc11}) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000001c0)=0x200, 0x4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x48, 0xcb, r5}, [@IFA_BROADCAST={0x0, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0xe, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) (async) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="530000002412ffa0273b780984d21194945e44670c8e530000ffff800000000000000000a55991b8f7d9ea5761cfc05bdc12c22913a248d9fc8fae5638e158ccb3db91fa10748c1427761af70d62f728303bcba7113b5c0d", 0x58}], 0x1) 4m54.840630977s ago: executing program 4 (id=7933): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e1f, 0x9, @dev={0xfe, 0x80, '\x00', 0x11}, 0x10}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a0004002800c932cd3ee86ded"], 0x20, 0x2404e044}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aabe071083044637869401020301090224050000fc000009049d000278be8bc309058402100000fa0009058202"], 0x0) 4m54.271783211s ago: executing program 37 (id=7933): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e1f, 0x9, @dev={0xfe, 0x80, '\x00', 0x11}, 0x10}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a0004002800c932cd3ee86ded"], 0x20, 0x2404e044}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aabe071083044637869401020301090224050000fc000009049d000278be8bc309058402100000fa0009058202"], 0x0) 29.111885545s ago: executing program 8 (id=9132): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') setns(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x20, 0x6, 0x75, {0x75, 0x8, "82e027e4d03c4fb64eecbaf582d72465e49843f3f9b15bd0ffb1114eb629d1949000c7dd47f2140e73c42e4b271fff0281615f197f809a72d32d4010f2ec2941c0dfcb3ff2e53f59b66ce3a01f4577f1cdcd50b353638fe6ce7b6135d1e4cb6a5c05841e367a48aba6d06865f55ce7917120b2"}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="0003d4000000d403786c44e4e02b656819ba4a8e4b9d1a2c3f9c153a2f741fa0d4e88cc8463e10810c2cb6c2aedaabc3aadeac287d5f950b1fd5040c0beb18fbd1aae3dbfd3f4caea45eba3d492c7482c8899b449d4ac7dfc868d670bded2f9adef1ffc8719aff05f1b89ef7918b0382c48d8057ac47ce8caefb5f77210747964bb91dcc387020f726d4328850ba685de9dd2c9537ffe6f4858db5779f56b34a0805d772aa66ff06466519970784e9e3285c19beaf1bc11b52e276f5f9b98e672940485b20c5d1db27b74fe6fba3d00a319a74d7b2396e0f0129a7c43433918cfc7ebb733e4899024acd496a1c2da14e83093d"], &(0x7f0000001840)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x40, 0x1, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x4, 0x95}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x2, 0x1, "7c4aefc2", "90f50fcc"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x7, 0xd6, 0xd, 0x2, 0x3}}}, &(0x7f0000000980)={0x84, &(0x7f00000003c0)={0x40, 0x10, 0xe3, "84acd3884bb5d1134e3da7e34e340c6ffa2dd04579250cc8474af237ce1f3779effc0bdab44d348e2dd95750f04d601d7992f00a88a3883bed7e375fd840db1e6433ebd9d63d1aea0c6a47ebc5fd7b74c776762a7ea34170a611355037ede7904d398b28c502d3d07384824a981c108f626a38e61b3d38ec4ee68c648b69d2dc6023a6c0a6f65b4aaafa806cc6fa030057d5ab80ebda07ae66bb1976822d4dba46bb5fb4a602ec4338a7154828fb67346bfad30bafaee931175b4e89bbc4bc4a399e2e938622753e30d78b1cc77c80170ae92d90e2ea34c75dc260804535ab2090e0b1"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2b}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x0, 0xa}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0xb, 0x2, 'o*'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, &(0x7f0000000840)={0x40, 0x19, 0x2, '/_'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x914b}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000280)={0x20, 0x5, 0xb6, {0xb6, 0xa, "aff6b348be33449fc276fd18b391277c467c59e0db9f7def5d052dfdd92e737d2368afd384cb270ea5b36a80daa586c05ae368c98e4fca81b4299b8c644eaade69ae2c56267f8c1134b9ca1fb2c432e78993abd39075621246ebca0f8bdd0143637f7cf639633c94b546cf69444d8b68ba55541168d7bbf171e2b84469cff7ae36c58f93c9d2ee0e276b60ac34f8ab704a234e4f7e5b7744737d929ce326b69aa6412564be1193150d8aeb6277a9b3f94ec7ae5a"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "9c98f092a1c180bee76de6c9e06bfb0c130cc40c2e3ba297513d9fbc4004d8efc3898d797d2fae950965f74040cddaef175a8e0ed193eef222693b2336a72eef52179468d2a8544aa6dd4a5a"}}, &(0x7f0000000c40)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x3, [@generic={0x2c, 0x10, 0xa, "f80e649db534026cecb40a9ff880e8fc2250522c07c90cb6d93ee6c0f2b9236811acb7eed249c2fcff"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x3e, 0x40, 0x0, 0x22}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xde, 0x8, 0xff, 0x10, "14e6dabe", "0c4589f7"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x86, 0x10, 0x7, 0x6, 0x1, 0x1, 0xd95}}}, &(0x7f00000011c0)={0x84, &(0x7f0000001280)=ANY=[@ANYBLOB="0006ce00000032918003a95d72c72eb1b67ba9f9f7ed130741952ba4778e8e159e8d99108b80806d843c999b0ae9265c317a3e4693ca8134664c563f3a9ed615f9ee11b3e5ded43481c60f8266e6c9895700e268448e721965438d2e4d0f452381cf769d66f97377346fab4c0d46896fe4dc25738dc6c4441f6c0a5a7f86bd6e69a96422b4258570cad4f17fdacf7c31e24f32284d377f90d5615d3e63aa3cdcafd2bef2209675328e8142d4c48c2b63c9c5d42c37a894d747fd4dbf3251f4bc1984d6c5632c14cc273f6cbd8ba24c96d1cfd2762b8f91ce82487569fc4e9dda23f398d2fbe550f2d7"], &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x1204, 0x10}}, &(0x7f0000000f00)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000f40)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000000f80)={0x40, 0xb, 0x2, "34ed"}, &(0x7f0000000fc0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001000)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001040)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001080)={0x40, 0x19, 0x2, 'ED'}, &(0x7f00000010c0)={0x40, 0x1a, 0x2, 0x6d4}, &(0x7f0000001100)={0x40, 0x1c, 0x1}, &(0x7f0000001140)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001180)={0x40, 0x21, 0x1, 0xc}}) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@private2, @in6=@local, 0x0, 0x58a9, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x3, 0x0, 0xff, 0x0, 0x4, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x10000000, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0xb37}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in6=@local, 0xffffffff, 0x0, 0x0, 0x0, 0x80000001}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x5, 0x2}]}]}, 0x1fc}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000001380)='fd/4\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0}, &(0x7f0000000d40)=0xc) r7 = getgid() lstat(&(0x7f0000000d80)='./file1\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r9, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f00000004c0)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="e80000000000000000000080000000000300000000000000feffffffffffffffffffffffffffffff070000000000000002000000d773010000000000000000000080000000000000f8030000000000000000000000000800fffffffffffffffffcffffffffffffff000400000000000000800000000000ff02000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="02000000fdffffdf00000000040000000000000000000000000000003e000000fcffffff2e265e279b8ef18abbbedd6e3d409b45e463fdccbaed0fd1b57d762dcc7191e6bd77350615d5f8ec227c0000007fdfdfac267b64297694d442fd27bc40950000"], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f00000016c0)={0xa0800, &(0x7f0000000dc0), &(0x7f0000001440), &(0x7f0000001480)=0x0, {0x21}, &(0x7f00000014c0)=""/142, 0x8e, &(0x7f0000001580)=""/246, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001740)={'\x00', 0x7ff, 0x6, 0xfffff801, 0x9, 0x4, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000017c0)={{0x1, r6, r7, r8, r11, 0xe1, 0x3}, 0x0, 0x0, 0x100000001, 0x8, 0x0, 0x2, 0x0, 0xd0, 0x2, 0x80, r12, r13}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001006374000006000294080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) poll(&(0x7f0000000240)=[{r1, 0x1080}], 0x0, 0x1) 28.128481116s ago: executing program 9 (id=9141): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/79, 0x4f, 0xc4) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r2, 0xb7c35000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) sendfile(r0, r0, 0x0, 0x40008) 27.432993532s ago: executing program 3 (id=9142): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x2) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (rerun: 64) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) r6 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'veth0_to_hsr\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="38030000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="0400028808800100", @ANYRES32=r10, @ANYBLOB="0c01028008000100", @ANYRES32=r3, @ANYBLOB="7801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ffffffff08000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000b00000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000060004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000b00000008000600", @ANYRES32=r3, @ANYBLOB], 0x338}, 0x1, 0x0, 0x0, 0x1}, 0x2000c8d4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) (async, rerun: 64) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async, rerun: 64) io_uring_enter(r6, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r13, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r14 = socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv(0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1, &(0x7f0000000880)=[{&(0x7f0000000440)=""/71, 0x47}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) (async, rerun: 32) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000003c0007012abd700000000000207c00000400f4800c000180060006c8000a00000a0077028097f0972655b2000023d8fd78bed8d438c1215aa05dc8d498a3990cd03084075cdef9750e3874937d6b2e94599232bccd387bb3"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (rerun: 32) 27.361659761s ago: executing program 1 (id=9143): r0 = syz_open_dev$vim2m(&(0x7f0000001140), 0x59b2aa85, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001180)={0x8001, 0xd55}) (async) socket(0x2, 0x80805, 0x0) (async) syz_usb_connect(0x6, 0x48, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001872888101320480260620102030109023600019500700609046605004c9f89040924060000eccee1fc05240001000d240f010000000001000900100a2401f8ff8e0201021d03fa8524a5f96912baf912cd1828b9ddf761aef5c595804457641f8be95a0a7705fad59ed4db09ed3a6de49c84963ed0506d6bb0787d3e378dcae31cbcafde98cc2e37e715aaa1b05d186f3e56fc03be05c8eb628e959382266a"], 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001100)={0x0, 0x9}, &(0x7f00000011c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001080)={r1, 0x400005}, &(0x7f0000001200)=0x8) (async) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000001040)=0x3, 0x4) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffff7fff, 0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000540)=@fd={0xca2, 0x3, 0x4, 0x0, 0xccec, {0x77359400}, {0x5, 0x0, 0xd1, 0xf, 0x61, 0x2, "f43d974a"}, 0x7ff, 0x4, {}, 0xb02d}) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c1db18c794419128fd9e3841d9e89726f6f746d6f64653d3030303030303030303030303030303030ec2a2ca4d60c3130303030302c7573", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x2, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x207) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x1f58, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1f28, 0x2, [@TCA_FLOW_ACT={0x1f24, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x1ed0, 0xe, 0x0, 0x0, {{0xb}, {0x1dbc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa9}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x60, 0x400, 0x3ff, 0x8, 0x8, 0x3, 0x668b, 0x310, 0x6, 0xe9d, 0xa, 0x0, 0xfff, 0x792, 0x7, 0x9, 0x1, 0xfffffe01, 0x6, 0x8, 0x1000, 0x8001, 0x7f, 0x8, 0x5, 0x6, 0x0, 0xffffff3c, 0x3, 0x6f62d902, 0x40a, 0x10, 0x700000, 0x1, 0x2, 0x40, 0x1, 0x1ff, 0x5, 0x8, 0xb9, 0x1, 0x10, 0x4ac3, 0x4, 0x5, 0x2, 0x8e37, 0x0, 0x0, 0x7, 0x3, 0x2a, 0x10000, 0x1ff, 0x0, 0x80, 0x4, 0xaf, 0x4, 0x1, 0x6, 0x8, 0x10004, 0x30000000, 0x7, 0xf, 0x7, 0x8, 0x0, 0x9, 0x3ff0113b, 0xd3, 0x5, 0x496, 0x3, 0x0, 0x8, 0x4, 0x3, 0x8, 0x4, 0x531, 0x9, 0x0, 0x2, 0x0, 0x3, 0x6, 0x10, 0x8, 0x7, 0x10d, 0xe, 0x5, 0x1ff, 0x4, 0x1, 0xff, 0x1, 0xbdc, 0x4, 0xc, 0x6, 0xeba, 0x0, 0x3, 0x8, 0x1, 0x3, 0xbb4, 0x7, 0x9, 0x2, 0x0, 0x186f942b, 0x3, 0x4, 0x1000, 0x3, 0x9, 0x8, 0xfffffffc, 0x73, 0x8, 0x10, 0x0, 0xf206, 0x80, 0x40350d20, 0x6, 0x8001, 0x8, 0xdf46a6a, 0x6, 0x9, 0x8, 0x0, 0x1, 0x9, 0x80000001, 0xcb3, 0x2, 0x0, 0x8, 0x7, 0x6, 0xe, 0x9, 0x0, 0x7, 0x6, 0x5a1, 0x6, 0x8, 0x70, 0x2, 0x9, 0x4, 0x0, 0x6, 0x9, 0x1, 0x8, 0x8, 0x9c2f, 0x3, 0x81, 0x2, 0x2, 0x605148cb, 0x0, 0x0, 0x7, 0xc00, 0x401, 0x5, 0x5, 0x1, 0x3, 0x7fff, 0x0, 0x5, 0x10000d23, 0x80, 0xd1, 0xe1a6, 0x9a1, 0xa22, 0x10000, 0x4, 0x101, 0x7fffffff, 0x5, 0xa9, 0x800, 0x552a, 0x6, 0xfa1, 0x0, 0xddc, 0x40, 0x8, 0xf37, 0x4, 0xaf90, 0x1, 0x81, 0xfffffffd, 0x80000001, 0x9, 0x8000, 0xff, 0x7ff, 0x5, 0x7a2, 0x1, 0x10000, 0x3, 0x2cf8f57b, 0x40, 0x0, 0x7, 0x2, 0x4, 0x7, 0x8, 0x8, 0x400, 0x3, 0x9f, 0x7, 0x3, 0x10001, 0x9, 0x5, 0xc, 0x6, 0x2, 0x8001, 0xfffffe01, 0x5, 0xfffffff0, 0x641, 0x94b, 0x400, 0x0, 0xffff, 0x81, 0x5, 0x2, 0xaa3e, 0x1af0, 0xfffffffb, 0x48]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x35c0, 0x3, 0xb, 0x1, 0x35, 0x9, 0x2, 0x8, 0x56, 0x7, 0xb26, 0x7, 0x3c5, 0xfd9, 0x1, 0x7f, 0x5, 0xffffffff, 0xfffffff7, 0x3, 0x3, 0x2a, 0x200, 0x6, 0xb9c, 0x76, 0x7, 0x7, 0xffffffff, 0xffff, 0x9, 0x8, 0x8, 0x1ff, 0x8, 0x8, 0x3, 0x1, 0x81, 0x7, 0x1, 0xa000, 0xe, 0x8, 0x9, 0x3, 0x8001, 0xa8, 0x9, 0x2, 0x7f, 0x6, 0x4, 0x0, 0x44, 0x7f, 0x0, 0x8, 0x7, 0x1, 0x7ff, 0x26fb, 0x9, 0x5, 0x0, 0x0, 0x0, 0xf8000000, 0x7, 0x5, 0x80000000, 0x10001, 0x5, 0x1, 0x1, 0x4, 0xfffffffe, 0x800, 0x3, 0x4, 0x8, 0x7, 0x5, 0x7fff, 0x4, 0x0, 0xfffffffb, 0x119338c1, 0xc8, 0x81, 0x64d1, 0x3, 0x7fff, 0xd, 0x4, 0x80, 0x4, 0x0, 0xfff, 0xe8, 0x2, 0x3, 0x0, 0xa, 0x0, 0x5, 0x80000001, 0xfffffffa, 0x8, 0x7, 0x0, 0x8, 0x6, 0x5cc, 0x8, 0x8, 0x400, 0x4, 0x1000, 0x5a3, 0x5, 0x2, 0x0, 0x4, 0x0, 0x81, 0x2, 0xffff0783, 0x4, 0x5, 0x7f, 0xffffffff, 0x0, 0x0, 0xc, 0x3, 0x81, 0x2c0b852e, 0xffffffff, 0x5, 0x9, 0x700000, 0x6, 0xf, 0x3, 0x0, 0xd, 0xc7, 0x1, 0x7, 0x6, 0x0, 0x3, 0x4, 0x1, 0xf0f, 0x570, 0xd641, 0x0, 0x40, 0x101, 0x4, 0x4, 0x8, 0x1, 0xffff, 0x3, 0x4, 0x600000, 0xffff, 0x2d, 0x93b, 0x80, 0x0, 0x4b2, 0x3, 0xd0, 0xb2b, 0x3, 0x1, 0x9, 0x3, 0x0, 0x4, 0xff, 0x7fff, 0x2, 0x6, 0x3, 0x8, 0x8, 0x4, 0x4, 0xe, 0x1, 0x100, 0xfffffff9, 0x8000000, 0x1, 0x3, 0x7, 0x0, 0x8005, 0x401, 0xb70, 0x80a, 0x1, 0xf, 0x47f7a897, 0x5, 0x401, 0x2, 0x1, 0x41, 0x5, 0x5, 0x3ff, 0x4, 0xfffffe1d, 0x7a1, 0x694, 0x7, 0x81, 0x5, 0x1, 0xab, 0x3, 0x4, 0xea9, 0x8, 0x1, 0x1, 0x2, 0x7, 0x8, 0x0, 0x7, 0x2, 0x7, 0x6, 0x6f9, 0x0, 0x0, 0xfffffffb, 0x1, 0x5, 0x1, 0xfffffff8, 0x6, 0x25, 0x8, 0x7da, 0x7f, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x20000000, 0x8, 0xe3, 0x5, {0x1, 0x2, 0x7, 0x35, 0x0, 0xb000000}, {0x80, 0x0, 0x40, 0x8000, 0x2, 0x3}, 0x2, 0x101, 0x63}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf76e, 0x2, 0x6, 0xe651, 0x5, 0xa, 0x2, 0xfffeffff, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10, 0x1000, 0xfffffffd, 0x796, 0xa4, 0xffffffff, 0x3877, 0xffffff80, 0x4, 0x1000, 0x84b, 0x800, 0x401, 0xa, 0x9, 0xffffff81, 0x7fffffff, 0x0, 0x8, 0xa6c6, 0xeb, 0x8, 0x7f, 0xeb, 0x20, 0xa55d, 0x7261, 0x937a, 0x400, 0x1ff, 0x4, 0x2, 0xb, 0x7ff, 0x3cc6, 0x7, 0x0, 0x8001, 0x1, 0x6, 0x2, 0xfffffff3, 0x7, 0x7f, 0x7, 0x8, 0x10000, 0x4, 0x3, 0xffff, 0x3, 0x3, 0x2, 0x9, 0x6, 0x6, 0x8000, 0xa, 0x0, 0x7a, 0x2, 0xfffffff8, 0xf, 0xfffffffd, 0x2, 0xffffffff, 0xd7, 0x3, 0x4, 0x16, 0x3, 0x1, 0x7, 0x7fff, 0x4, 0x1, 0x5, 0x63e, 0x9d4b, 0xbd2, 0x4, 0x3, 0x100, 0x292, 0x101, 0x7, 0x3, 0xaae0, 0x5, 0x8, 0x3, 0x8, 0x7, 0x10e, 0x6, 0xff, 0x2, 0x6f9cde7c, 0x0, 0x9, 0x2, 0x800, 0x2a, 0xc, 0x8000, 0x4, 0x6, 0x3, 0x7, 0x9, 0xf10f, 0x8001, 0x4, 0x40, 0x831, 0x5, 0x9, 0x80, 0x7630, 0x137f, 0x9, 0x216e, 0x200, 0x3, 0x2, 0x7ff, 0xb, 0x4, 0xca, 0x0, 0x1, 0x8, 0x1, 0x0, 0x3, 0xa, 0x56, 0x3, 0x6dc, 0xfb, 0x0, 0x6, 0x2, 0x6, 0x3, 0x9040, 0x6, 0x3, 0x8000, 0x5, 0x5fb7, 0x24100000, 0x7, 0x4, 0x2, 0x9, 0x9, 0x40f, 0x4, 0xffff, 0x9, 0x2, 0x3ff0, 0x6fd, 0xa5, 0x7f, 0x9, 0x7ff, 0x6, 0x6e, 0x4, 0x3, 0x8, 0x3, 0xfffffe00, 0xfffffffa, 0x8001, 0xfffffff2, 0xb, 0x9, 0xff, 0x1, 0x7, 0x6, 0x8, 0x400, 0x1, 0xd7, 0x3, 0x4, 0x8, 0xf, 0x71e, 0x4, 0x0, 0x2, 0x81, 0x3, 0xa8, 0x35e2, 0xffffffff, 0x2, 0x3, 0x7fff, 0x0, 0x7, 0xb68, 0x9, 0x7, 0x5, 0x240, 0x4, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x5, 0x9, 0x6, 0x6, 0x6, 0x3, 0x7, 0x9, 0xe, 0x6, 0x2612559e, 0x20000000, 0xfff, 0x9, 0x7, 0x58a, 0x18df, 0x3, 0x2, 0xdc42, 0x38adef2a, 0x8, 0x8, 0x5d49, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x200, 0x4f, 0x6, {0xab, 0x2, 0x400, 0x3, 0x4, 0x7fff}, {0xe, 0x0, 0x7fff, 0x1, 0x800, 0x1}, 0xffffff31, 0xffff, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10000}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x9, 0x3, 0x10001, 0x6, 0x8000, 0x7, 0xa, 0x5, 0x4, 0x3, 0x0, 0x5, 0x6, 0x2299, 0x3ff, 0xe, 0x200, 0x100, 0x7fffffff, 0xf5, 0x3, 0x1, 0xffff, 0x6, 0xc3, 0x9, 0x7, 0x4, 0x3, 0xffffffff, 0x1ff, 0x3, 0x1, 0x0, 0xa, 0x7, 0x2, 0xd, 0x401, 0x3, 0x7fffffff, 0xffffffff, 0x3, 0x1, 0x7f, 0x8, 0x7, 0x682f, 0xc, 0x8, 0x101, 0x0, 0x0, 0x5, 0x2, 0x5, 0x1, 0xb691, 0x4, 0x80000000, 0x8001, 0x2, 0x0, 0xffff58ff, 0x8000, 0x8, 0x731e, 0x9, 0x5, 0x81, 0xfff, 0x587a, 0x59, 0xfffffffd, 0x0, 0x101, 0xb, 0x2, 0x3, 0xe, 0x1, 0x64f9, 0x4, 0x10000, 0x2af, 0x4, 0x1, 0x5, 0x1, 0x4, 0xe4, 0x1, 0x6, 0x0, 0x1, 0xcf, 0x80000001, 0x9, 0x0, 0xdafc, 0x5, 0xfffffff8, 0x0, 0xb, 0x3, 0x8, 0xf847, 0x0, 0x9, 0x7, 0x11a2, 0x6, 0x8, 0x2, 0x80000001, 0x3, 0x3, 0x7, 0x80000000, 0x9, 0xd, 0x5, 0x50e, 0x1, 0x9, 0x800000, 0x80000001, 0xed50, 0x8, 0x4, 0xffff5f65, 0x3, 0x9, 0xd, 0x0, 0x7, 0x4d1, 0x8, 0x5, 0xfffffffc, 0x9, 0x4e, 0x9, 0xfffffff1, 0xb3d6, 0xfee, 0xffff8001, 0xfe0000, 0x0, 0x80000000, 0x401, 0x400, 0x5, 0x9, 0x6, 0x7f, 0x4, 0xa35, 0x2, 0xb, 0x7fffffff, 0x0, 0x200, 0x80000001, 0x7, 0x10000, 0x1, 0x3, 0x8, 0x9, 0x3, 0x0, 0x7, 0xff, 0x4, 0x4, 0x3, 0x1, 0x200, 0x101, 0x5, 0x9, 0x7, 0xffffffff, 0x9, 0x7, 0x0, 0x3ff, 0x81, 0xe0, 0x3, 0x27f0, 0xb9, 0x9, 0xf25, 0x0, 0x6, 0x5, 0x100, 0x0, 0x4, 0xa0000000, 0x9, 0x9, 0x3, 0xfffffffa, 0x7fff, 0x80000001, 0x1, 0x8, 0x7, 0x1, 0xfa, 0x3ff, 0x7fff, 0x7, 0x7, 0x2, 0x1, 0x8, 0x3, 0x0, 0x3, 0x3, 0xff, 0x8000, 0x5, 0x3, 0x101, 0x7fffffff, 0x51a5, 0x7, 0x5, 0x19f, 0x90d, 0x200, 0xe73, 0xadf, 0x6325, 0x6, 0xaac, 0x10000, 0x7, 0x8, 0x81, 0x7fffffff, 0x3, 0x1000, 0x7fff, 0x5, 0x1, 0x5a, 0xfffffffa, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x3, 0x2, 0xfffffffc, {0x7, 0x1, 0x3, 0x9, 0x3, 0x1}, {0x4, 0x1, 0xc, 0x1, 0x2, 0x7}, 0x1, 0x8, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x80000001, 0x1a, 0x4, 0x2, 0x7ff, 0x6, 0xf0, 0x4, 0xffff, 0x2bacf41d, 0x3ff, 0xb, 0xc, 0x4, 0x2, 0xe2, 0x8, 0x7fffffff, 0x9, 0x4, 0x4, 0x7, 0xdc, 0x8, 0x3, 0x1, 0x0, 0x39, 0x2, 0x80000000, 0x2, 0x5, 0x3ff, 0x2, 0x1ff, 0xb5, 0x537, 0x8, 0xfe3, 0x5, 0x4, 0x7c3, 0xffff, 0x6, 0x3, 0xaa86, 0x7, 0x7f, 0x3, 0x9, 0xaf69, 0x4, 0x9, 0x4, 0xfffffffa, 0x1, 0x0, 0x4, 0x7f, 0xe96, 0x81, 0x1, 0x4, 0x0, 0x0, 0x8, 0x7, 0x1000, 0x6, 0x10, 0x6, 0xcc, 0x7fff, 0x100, 0xffffff6d, 0x6, 0xc46, 0x1, 0x9, 0x6, 0x40, 0xf, 0x4, 0x3, 0xcd, 0x1, 0x1, 0x743, 0x2, 0x4, 0x0, 0x200, 0x7, 0xe, 0x0, 0x5, 0x64fd127e, 0x7, 0x7, 0x80000001, 0x81, 0x7f, 0x6, 0x0, 0x8, 0x9, 0xffffffff, 0x5, 0xffffffff, 0x7, 0x0, 0xb, 0xe9, 0x8, 0x2, 0x5, 0x0, 0x5, 0xecf, 0x4, 0x6, 0x1, 0x3, 0x3, 0x8, 0x7, 0x1, 0xfffffffc, 0x1, 0x0, 0xfffffff8, 0x2, 0xfffffff7, 0x3, 0xfffffff9, 0x74, 0x10001, 0x1, 0x9, 0x3, 0x10000, 0x6, 0x6, 0x3ff, 0xe30, 0x8, 0xff, 0x1000, 0x0, 0x7, 0x0, 0x2, 0x9, 0x0, 0x80000001, 0x9, 0x4, 0x7, 0x5, 0x1, 0x0, 0xa712, 0x879, 0x1, 0x6c000000, 0x7, 0x3, 0x4, 0x3, 0x10000, 0x3, 0x4, 0x401, 0x40, 0xfff, 0x6, 0x8, 0xf, 0x9, 0x0, 0x1, 0x2, 0x800, 0x9, 0x3de8, 0x3, 0x4, 0x6, 0x1, 0x100, 0x4, 0x80000000, 0xfffffff8, 0xffff, 0x2, 0x8, 0x8001, 0xbe, 0x0, 0x7, 0x3, 0x0, 0x7, 0x7, 0x344, 0x0, 0x1, 0x3, 0x9843, 0x7, 0x8d7, 0x1, 0x100, 0x1, 0x0, 0x8001, 0x8, 0x7, 0xb7, 0x6, 0x3, 0x9, 0x5, 0xc, 0x5, 0xc4d, 0xe, 0x8, 0x6, 0x0, 0x10, 0x9, 0x5, 0x4, 0x9, 0x1, 0x3, 0x1, 0x4, 0x4, 0x1ff, 0x54728b4c, 0x5, 0x7ff, 0x6, 0x9, 0x3, 0x8, 0x1ff, 0x4368000, 0x1ff, 0x1, 0x5, 0x5]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xec93, 0x2, 0x8000, 0x0, 0x8, 0x4, 0x8, 0xfffffffa, 0x32c, 0xbc7, 0x8, 0x3, 0x7, 0xfff, 0x8, 0x9, 0x4, 0x7, 0xfcdf, 0x0, 0x80, 0x200, 0x7, 0x0, 0x1, 0x1000, 0xfff, 0x8, 0xa2, 0x4, 0xffffffff, 0x200, 0x4, 0x5, 0x1, 0x80, 0x8001, 0xff, 0x40000000, 0x6, 0x9, 0x9, 0x6f1e1a57, 0xce, 0x7, 0x3, 0x4, 0x7ff, 0x9, 0x9, 0x1, 0x1, 0x6, 0x4, 0x7f, 0x3, 0x80, 0x5, 0xe1d, 0x4, 0x0, 0x5, 0x7, 0xb, 0xfff, 0x0, 0xfffffffb, 0x2, 0x6, 0xffffffab, 0x3, 0x5, 0x8, 0x7ff, 0x7, 0x80, 0x7, 0x54e8d339, 0xc9b, 0x81, 0x1, 0xf95, 0x9, 0x4, 0x2, 0x2, 0x8, 0x1, 0x8, 0x4, 0x2, 0x9, 0xfff, 0x2, 0x4, 0xb93d, 0x80000000, 0x1000, 0x65a, 0x87, 0x884, 0x0, 0x6, 0x7ff, 0x5, 0x456, 0x9, 0x10000, 0x40, 0xe, 0xb, 0xe, 0x6, 0x1000, 0x4, 0xf54, 0x8000, 0x6, 0x9, 0xa, 0x93, 0x2, 0x3, 0xff, 0x8, 0x1a12, 0x8000, 0x1, 0x9, 0x6dce, 0xda, 0x2, 0x80000000, 0x3, 0xffffaecf, 0xffff, 0xc, 0x800, 0x85c, 0x8, 0x1, 0x5, 0x3ff, 0x4, 0x6, 0x70000000, 0x7, 0x1, 0x4, 0x5, 0xfffffffd, 0x0, 0x1f, 0x6, 0x1b1, 0x8, 0x7, 0x7fffffff, 0x401, 0x4, 0xff, 0x10, 0x6, 0x9, 0x0, 0x782a, 0x40, 0x400, 0xb, 0xecb, 0x2, 0x4, 0x1, 0x81, 0xfffffff3, 0x4, 0x634, 0x400, 0xffffffff, 0x401, 0x6, 0x6, 0x9, 0x5, 0x9, 0x5, 0x6, 0x9, 0xd2ee, 0x8, 0x1ff, 0x401, 0x10000, 0x1, 0x10, 0x7ff, 0xd, 0x9d9, 0x5, 0x0, 0x0, 0xc2, 0x4, 0x2bd7, 0x587f, 0xfffffffd, 0x3, 0xc, 0x40, 0xfffff34d, 0x2d331c46, 0xfffffffd, 0x4, 0x7, 0xa3, 0x2, 0x1, 0x8, 0x5, 0x868, 0xfff, 0xc, 0x5, 0x6, 0x7, 0x1, 0x5, 0x3, 0x6, 0x7, 0x80000000, 0x9, 0x5, 0x4, 0x6, 0xff, 0x80000000, 0x3, 0x9, 0xffff8001, 0x6, 0x18f, 0xfffffff8, 0x6, 0xca3, 0x5511, 0x9, 0x10001, 0x1000, 0xea5, 0x3ff, 0x400, 0xd8, 0x575a5d47]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x1, 0xfff, 0x3, {0xa4, 0x0, 0x4, 0x1, 0xe, 0x10000}, {0x2, 0x0, 0x6, 0x2, 0x9, 0x5}, 0x80, 0x5, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0x4, 0x4b, 0x5, 0x0, 0x7, 0x2, 0x8, 0xfff, 0xd, 0x1af6, 0x5, 0xffffffff, 0xc19, 0x5, 0x1, 0x2, 0x2, 0x3, 0xd38, 0x90c, 0x2, 0x9, 0x3, 0x6000, 0x2, 0x0, 0xa, 0x7, 0xffffffff, 0x963, 0xe, 0x6, 0x9, 0x0, 0xeda1, 0x9, 0x87b, 0x5, 0x7, 0x1, 0x800, 0x7, 0x1, 0xd28, 0x200, 0xa, 0x8, 0x5, 0x10bc, 0xf173, 0x40, 0x9, 0x1, 0x80000001, 0x8, 0x5, 0x9, 0x8, 0x5, 0x9, 0x0, 0x7, 0x5, 0x2fb7978c, 0xfff, 0x8, 0x4, 0x10000, 0x1, 0xfffffffc, 0xd, 0x2, 0x2, 0x1, 0x8, 0x80000000, 0x3, 0x3, 0x5, 0x3, 0xfffffff8, 0xfffffffd, 0x12ab163d, 0x315d, 0x2, 0x2, 0x4, 0x2, 0x0, 0xff1, 0x3ff, 0x8, 0x4, 0xfc, 0x6, 0x81, 0x3, 0x9, 0x3e960bf4, 0x80000000, 0x4, 0x6, 0x7, 0x7ff, 0x1, 0x5, 0x5906b83d, 0x8, 0x9, 0x4, 0x7ef5, 0x4, 0x3, 0xb0c, 0xfffffff7, 0x6b, 0x6, 0xb, 0x7, 0x6, 0x1, 0x6, 0x6, 0x3, 0x3000, 0x1, 0x5, 0x100, 0x0, 0x6, 0x3, 0x7f, 0x2, 0xd, 0x2, 0xf40, 0xe4a00000, 0xac, 0x1, 0x7, 0x3, 0xb, 0x81, 0x3d957299, 0x4, 0x40, 0x7bbd, 0x5, 0x7, 0x4, 0x9, 0xfa, 0x10000, 0x6, 0x7ff, 0x2d, 0x4, 0x6c55, 0x7, 0xc, 0xe0000000, 0x1, 0x9, 0x5, 0x9, 0x5, 0xd, 0x8, 0xf7, 0x958d, 0x8, 0x1, 0x7fff, 0x9, 0x6, 0x9, 0x6, 0x1, 0x6, 0x5c17, 0x2, 0xfffffff6, 0xfffffffe, 0x8, 0x0, 0x7, 0x8, 0xadc, 0x10000, 0x5, 0x5, 0x48, 0x3a, 0x0, 0x4, 0x5, 0x0, 0x6, 0x54, 0x6, 0x200, 0xffff8001, 0x0, 0x2, 0xaf, 0xab3, 0x8, 0x1, 0x80, 0x7, 0x2, 0xcd2d, 0x526f, 0x1ff, 0x2, 0x3, 0x88f, 0x4, 0x3, 0x2dfd2c71, 0x1, 0x9, 0x3, 0x5, 0x2, 0x6, 0x0, 0x8, 0xff, 0x40, 0xffffff80, 0x9, 0xa3ee, 0x34e7, 0x3, 0x1ff, 0x4, 0x3, 0x8, 0xea0, 0x5, 0x8, 0x5, 0xc3, 0x3e46, 0xffffffff, 0x0, 0x7, 0x5, 0x7, 0x6, 0x5, 0x5, 0xb]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x0, 0x5, 0x2, {0x67, 0x0, 0x8, 0x80, 0x0, 0x7fffffff}, {0x0, 0x2, 0x0, 0x5, 0xa058, 0x4}, 0x2, 0xe, 0x5654}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x67}]]}, {0xea, 0x6, "5fda78fabf451e6a8a874c0c68426fcfe777a3b4f4db9e3d8331bb2d49642b99b5e425d537c508afd28dc3e6f17dea48f8d3cd4cc0e0b30138d6f5789c98742fe5c42606027ea9b16f0ab26f22ccb26176361b354546320bb9a79e3332939cc9590b157faff6b710737b730f620f9b7c45f2058c46c01545577677b086723634f5e48d7bd1094778fe6cebe8e6d23591e3aa1c378afd73fa97440d0dfffe27316891684a0dbb8ca19ebb84842ee5f699eba9ec912e216eeab3fb8807db120dc05833781a725247c487fb23374f80ae25f05a4d5246408dac5dc0552a53fbf2e92db4dfd62fa6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1f58}}, 0x0) (async) read$FUSE(r2, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000007100)={0x78, 0x0, r10, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78) (async) r11 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x83}, &(0x7f0000000340), 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b7080000000000004301090292", @ANYRES32], 0x0) syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x2, 0x1, 0x15b, 0x0, r11}, &(0x7f0000000140), &(0x7f0000000280)) 27.218810144s ago: executing program 1 (id=9145): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2000, 0x0, 0x13c}, &(0x7f0000ffe000), &(0x7f0000ffe000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) socket(0x840000000002, 0x3, 0xfa) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x3, 0x0, 0xb4c, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r3, 0x0, 0xffffffffffffff84) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000000000000000089de8417e0000"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgid(0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x207f) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x84}}], 0x1, 0x0) unshare(0x62040200) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000400)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="4003020000000200273ea57259293c6ca74497ecca4eb2e5c0c782dbd2a285fc2f8c44986eef11"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x83, 0x2, 0x1ff, 0x6, 0x0, 0x7, 0x4c, 0x8, 0xffffffffffffffff, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x10000, 0x4, 0xffffffffffffffff, 0x1, 0x7], 0x10000, 0x7d88933457867fb7}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in=@private=0xa010102, 0x1fe, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20044880}, 0x4004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 27.137245353s ago: executing program 3 (id=9146): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x4804, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYRES16=r1, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047452, &(0x7f0000001200)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r1, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}}) 26.628565893s ago: executing program 9 (id=9147): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000240)=""/67, 0xc8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{}, 0x0, &(0x7f0000000180)}, 0x7f) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xa5e4, @mcast2, 0x8}, 0x1c) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x8, 0x0, [{0x10000, 0x1, 0x0, 0x0, @msi={0x1, 0x8, 0xaa, 0x5d85828b}}, {0x2, 0x4, 0x1, 0x0, @adapter={0xfffffffffffffffb, 0x3, 0x7be, 0xb900000, 0x1}}, {0x7fff, 0x3, 0x1, 0x0, @irqchip={0x4, 0xfffffffd}}, {0x1, 0x1, 0x1, 0x0, @irqchip={0xfffffffe, 0x80000000}}, {0x6, 0x4, 0x1, 0x0, @adapter={0x1ff, 0x2, 0x100, 0xeb4}}, {0x8, 0x5, 0x0, 0x0, @adapter={0x100000001, 0x3, 0x51b6, 0x2, 0x912}}, {0x4, 0x3, 0x1, 0x0, @msi={0x340, 0xe, 0x7, 0x9}}, {0x3, 0x3, 0x1, 0x0, @adapter={0xffffffffffff7fff, 0x0, 0xce7, 0x9, 0x7}}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/204, 0xcc}], 0x1, 0x6, 0x3) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = syz_io_uring_setup(0x495a, &(0x7f0000000140)={0x0, 0x6b12, 0x8, 0x80001, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) io_uring_enter(r5, 0x53f9, 0xc1f0, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000180)={0x5000, 0x6000, 0x2, 0x1, 0x75}) 26.517285604s ago: executing program 3 (id=9148): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x48901, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xfffc, 0x0, 0xae8, 0x4a}, &(0x7f0000000080)=0x18) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 26.050848699s ago: executing program 8 (id=9152): syz_open_pts(0xffffffffffffffff, 0xe02) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7ff, 0x80d80) read$usbmon(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r6) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x200000000000000}, 0x0) 25.908618659s ago: executing program 3 (id=9153): r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x80060, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000540)={0x2, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x4, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}, {{0x2, 0x4e22, @empty}}]}, 0x290) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fdf8bc95b0000b9a2030000b800000000ba000000800f3066b81f008ee066ba430066ed66b8e4000f00d0b8010000000f01c12e260f01b50a000000c4e27d785670360f011866baf80cb8d6603f8eef66bafc0c66ed", 0x56}], 0x1, 0x4b, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="08001f0005000000050011000100000008001f0008000000080023"], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@getchain={0x64, 0x11, 0x6b88ac928f7a479d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x6}, {0x7}, {0xf}}, [{0x8}, {0x8}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x104}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}]}, 0x64}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000200)=@arm64) 25.867785532s ago: executing program 9 (id=9154): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000140)={0x8, 0x9}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c72cebfb6b7a5020000000100000000000000303030305f697c3d090000003c971eec00000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000180)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0xf, 0xfffffffc, 0x4, {0x2, @pix_mp={0x3, 0x2, 0x4c47504a, 0x3, 0xc, [{0x3ff, 0x3}, {0x1, 0xfffffc01}, {0xc, 0x4}, {0xfff, 0x9}, {0x101, 0x80000001}, {0xd71e, 0x3}, {0x7fff, 0xfffffffa}, {0x7f, 0x400}], 0xff, 0x5, 0x6, 0x2, 0x1}}, 0x4}) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x8, 0x2000800, 0x238d117e660c6b5b, 0x401, 0x6, 0x5, 0x2bf, 0x0, 0x0, 0x1, 0x27}}, 0x50) 25.28956263s ago: executing program 9 (id=9155): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x1032, &(0x7f0000000200)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x1024, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @empty, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x100c, 0x0, @gue={{0x1, 0x1, 0x3, 0x8, 0x100, @void}, "f0fb566a6c42e48a5b4ecf89c19c0042d9624bf16cd0683b726e23cf41015ffdb471dff2044567f7c52207b17af634d18ff1a6e54131cf675b3b59ca3290e8de8b3ce31e1198c16c8e269bb2dddf96bb9a8b8f99a24dd9c0935d7c73760549a8c2d9c2de348fe81e8ea857069f8f700daea42e7db8538ccc5900299b8ac7d47d04af103fca0ab6ccb23d06e5d3bec88173dccce33c98e3a27f534abb84f771be44c6bb3a69adad897b95be489f38035184a66dc45bc6652289fbc4ac7f2bf5c1ad1bd3983301ee622ad587a79865e758e2c0b5e2be675d1fefc9323dda85e76acb43ad48130e208ff4c42564d86d816eaf1af108ceb177af9d83c155c00e4a49e6079f0902305a8ce109cad8928a8366c74f7d3738ff43b44b86300594a3eb23bc8f8fa152ef4e08e08fd0fc3874a9ca7b9f99a5de0de3147ac75a32d811b5d2930377ba8dc23a57f7ad0fe4de0e889a340055aa72034e2993f4e8b1bc5509c2dc13baaf05186891c710bf610bf9b57635b5bdf7441185b1f437a96af0558d258aa68764ecf15b52d50c970fd1b7504a6906a480c6cab15a8e29310acc533ecc877c808a79fe27594a14f5030591947cebd06b4657ca48b94e6705d9ef5aeca83d387c5f1a7d3db088aec3b7da9ca01bdcacc8053a8080537c62f71aa444f593f9af2384491051747447d83b95fe8e4bb5ce31a123ee4ed2306af21c72b63e19fa2cfc00f7ee2f1bc04ceaa92e9c8b4fa188dd737e51fceeaea375eca39a629c19f71f686a5336e1cd7ac302ec8e7518aa7274555eb26604fb31de4b587c79bd8a503d8416e0dc8d972bc0b5f6ffe2f539433e60a16a6d21c95a44748eb92279968a6bc1ed578daa77637ea94dbc98e2242805277f6e53db00ebdf00636af66ae714a8c23cab084ad3fbe9236124271c16318bc995bb59b68e2ed7caa0ba95dc874c24b519873740802adc0ee9620fd858161622d853bebab6c6876c094f395756aeae9fd540e9d662a56ea46860689a4d6cb535b2a74996b0b1494d7eaf19a4caecec920ff04d33908347cad86cc56970c5935f1c2db3d0c8bf035c3207bdd21270089b4fd077c968eeb292547507c3bf68f058c65d10b81685f869d5235d396a752111756db326c4364b0d518af3455dcfd9decfc87226ab00b79e87d4f9415b57bb87637e415ac82095b6b8daeb28d77b590b368d8f7a11588081c34148c8fdd84c4190fbf74e2b9433d6ff111fe9c814c2a3c1310cd930a768124d39e05471b4ca5717ce76336bd0e718750c35720980ba87d01fc082122e2ec23516f7bb208eeb198bcf1351649e13b6d92954c9dddcf797b968b1ca3468db9964f324ebec13c61c3b41e486cb76279266bfc56f0d14a5f2b15af1de0e0b105ffaf685f341d4d0a1270ef91fa348c11a04cffa82aa6e6db25cc14adc5dc28d131d17394ce6f0500c5d4386fde5bdc208eec784a8a27db75f65978ac6316dc7a2ed401e44fb3cc80bd6030d9867d93cd306763f39e5327b5b91f6c03088bb51ef52471eecf4805322ee203ce76d833c4d9d161fae0f8cf9de75b25072c5bb3d086df7f3e654d47b51fa65a850c6fb02af1d4f90ea51db4ccb928deaa6f1a180d67161ad39e0e87c2cf7f712da53f4a955a1c2518ac6e60a28097dd27264491b4094efc9bfc34705d068acad57aed3e324c1180c30fe5fef8c84f9f1dcaca913a16ffba2ea54489ee5ee4712282db2122955fcd64914f13a458a8e1ce572aa778afd5c29ac83b5d6e19ebaa5c5daf82f718322129c24cc9e655d81c5884e7a1261d49aab82cfcf24873a9301cb063ad077762cf09263fc13285f1cfe3dc46c29cc57271eda56501d8da04f6eec6b9f12300255db6bb1b1727ab2209abe4ab026bb831f1b0a26d1c58b4cdf2951b3d0862a5c17b08fb287e07050a2f105a671e06f555ae8321f172748afed7bb960774e917d74bab34e452d42ae0a1ebfd5bf65d8d37a88fb5f73edc13946b4aedc3caed26164a60b09bac64bf5691ebeda0b9331299a03ace2826d6da64bd89b93fa00d41a7f17a13b1c533c5df827beaf2f54a7650ae109094ba07f887b481d71df7f12b28fe56bfe16ec5f16fb2043d096c55f62365048fede48521301c287b659c3ec9732cf332d3d3ca7015e3db8f408ba64877bdd332b0fe62a3570d22a276130ec8a2964885ec766ddefeb5e3634e2d3356a9a18dca629194e6a44a3c9b3ecff8f8c1c972beefb43cee7912e7df77cfe0d2688481c4081529989ac3f3d070bcb2b8b7da2c5789384214c97bb871341e4a4419664967f02943eb4d7a0d6c36979ce36d9038bb0d6778de039b4ac27281a3bd29cb8b6f017510345bca3859812936b4e12b36d2ddace7fb7fa763d6a2e2c011980519b8b5cddb56b31518b411659314749491239db61e31ff7bd9d57d0026dcb0e656c76b76d4da20648edbab2df71f6f6f433e55517320d72213abef1b5f07360c9c6547b43e35729d574387aeb6622b3c1172e080652cfe67326d0d29957db61f2937a330da553afb5eb8bd82d7c7d93abdc921a9c6b23274d7ed33a02a0e72d14b8d1fdad552402148be8470b293140e42dcde16fa3dc862a15742b77fcecb5c91ae1c5dde1888d57087527ed823039256de9dee7b01a4e358db81a6da0c537ff71959c1bbfb54e62c2c1e4b85ad13128c793932af45bb2146443ed35d1f655b459dccd6317dd4e261f4c39591c91ad08696762910323df7bed36bfce168b691cd93ff2651a5ee14b2a0df0588918ca0f03226ccc2d585c37f7fd2185af8c307c6929612410d19bb01e15a56180e186c2b4b2a4f91c58c0c61ead1f8bb2eb7ff153a6d2175079c120fe776dc41755196bd2801ac6384c75e7af80cbab15012560a39a9b76ad9da7820721d1a6b3d7f3022dafcd6f6b9d7b6d651be07f92865e9db528329a24e66b44be5d524cb52fcd9913cfbd5cc3514546e422aea66e5f8189e20b163383a49e0ee06f37170e2fbce8f7581e6cdf3fc5464b10308b75fd0d6d507cd0081d21ed785ceee806f7ca2abf5e39fc7a0bab138497a4941923f5ea0dcef1ace19538ff7cc850427dc1ee8d81a2541f9b4ba80bcc1d9c4b4780a5daca48ebbafc1ab0631d82f902eb59942d2f956dc314b2b21a695f6bf295991f7c618f06b7aa8004f833fa6077f0bc898fbb2c40a1ef044a8548d84730e1341d9a3cb2cb04a73ed8fb465f30408bd9c59fed1e2e7451cf4af0fe8b2ca36ede97a7b5f72e5dd0326a9e0129c6d9fdf35f4b389a7ffb7f96a45b45d9d7243e72c23d6079e41d1a1172e6692717fa5176887b91830b4065a79608a503b01343bf15f893ed8e12a0b4ed26b97e5f0e15c9222199b7eb1268026918c5dfb2088ff36f214f632a66c3c08ef4b1d2233dad0809a9eaff6a183b2c446e6b4b96f188ed25dee3915be6519f0dbf9f6ddeb0bd4b63d917daaf6050be1b6214f0f3c73f6a77b8a76268320023d90013424589ce77b9ca47b327d26a1769e5f0d59c66a3b190939fc4328883c90115dc2a44244c66cb4844f52231ab0533195d76e79648e6113de897f9a3b8cc5370a59511a04c72e12504a3155d07cb1e53e97d1efe561643e2792c11948fb0b0961a0c7b842c87a8a7abd763fb8a288ea195fe4b4b898924dbb462fba30b503155795b7e39a520f884f2131ddd3972d238041647a2ad3df579ce37562291df68b7061c70752a99d981ca1307554bed29d5d6394a0b2316ee83c5335361c006aaec20e7b059bc67e7724eff309ad1613bfc5accb2a3d03467a75f1332043d2297892dc89ee3a6b8babef2b24eb8aaa3e454a4c11c851e1dcdedbc23f1e3e4f55d294384280bd66e2660af0081d41240e91f4b2472d0fecb85261ac48430ef8b04e142debea25e6ddb50f2d8c1ad942edc86ac81bf5e474250d81736a104c6e305afe1aeb96558377393e03db794ef61d81f8e41e05820f14dab6eef5d1178b82e3cd6e2800958ea447378e7f0264741ca19f686fe101e4c030a37b18f0e7c8f21c19cf6753b071218e007f403eaa855d57a2dc08b5f6dc2ba3436be17c51c116e19973557d37c72dde398fdaca8f1dccf674233c0df53c2408e79f971d887b58b2bfe9c1347fe8362271d442ed2f76561f0c5f70cefcb7ea548ec321c4aac4447a42471c6041959aff82a6a5398acd32a3d8ddedbe2a3bcb04eab80c5ef6c97c99ed203cf314e413f66a4a73659e64e0d2308f68cb8ff468f76c3da664595a0359af26f6220d907756f2685ddbf5c34fa6f2dd9cf4690834cbee14dbf134ca1ed7cf48a317da9ab1b68b3c797f1c3e1461aa0d576f8cfd0f01bf54870b8b8c961ec61d3caaed0dabc945f95c2c828e19e1f11724823bbe87ee338aa6f73ef4956a7443aaa4b77e99448ff59e23a14afa87f38848cbe21194f00780098bbb7fbc67a0f3f61d8d24fe8bfd84c1c1f913b655796b633aee9c055560faa923b58a272e973beb8ed66fc6aeb66ddf5fb011557212949e89cd0235e168918e83a2329badb4b4331b10fc302975b0a1055bd7e7c4bbb6b1473420fd37e30808de477158a3159fd53067c7c3e7b62b3d611dc966ca0d71d0ef3473dc4049af809f65f903a2e0bb94f481fe6b9de75f37538a6d19d8f67a412335441aed483598a1ae1f4be2838ccbc76ff4b423e71300569b631f5923d1010509b7698d88ba4aa7be6210b8a9ec9e04c67f6309f1b771d82f8a2e8ad11d4a4c97a5501d659e3c5b2542cc3e0fdd015a691963970bcf95804a1cccf03280398f18dc7c2ac7ea15ea81e195f892df1e9e4f594ac2f3e2f95881c901a54bcf09881ca1ffb56af365d94d7c0773b3a17c08c982e33cd3d00d0da7d23bc686f72ced6396a06a19df5eb718a22d7f4179f85f0aee903650b8c039090f8a3e89bd7a39f74caf8395672cf2c672b981480123f91e61ff26c7bdc297fc0477ccd6419dda6c8bd0bb775d38b5dc768c16b3ceb640d76a964e249c9ca015bc081ff2517a81bc7c42ea610923e217ced75c1012ea92c8c0439d93fd6f236ee0c314b0614af5f32af99edbf361f72017fcfc8960d415e92dadd3c80c1fe90c9f44414802a81e093f76cf47a82bcb2232e3cda1d73f47ed1f0c4275b36a321e74f9cf0b9cd17a52ade541bbe7c0ca4a58f48c38d5a81419ca93076731592228a6433005fa3eab9b4e6b0a278aee74e517e7c7b27879f685b86b45beb71fe867576df89ae833b7b7517116b78ad74c023d4ca01a319bd46c0ceb206fb7f2f002132a11079a35da609fdea7b66a447bb8b5673b228fcaf75ef5d89d08572926068cd832fcab4c028523b7502160e1881223330f08b1d0643a232a972946acf8c731e89ebb525873530d5c0edfa3204ed2a169bcd4357c9b7dec95c8ab021e7fca0f939312d16a2eb3b6082695accbb6a4c793d8a495a1a2bdc702bfba19547fc086e1fa7e5a400899b56de77348ab85d2103224fcdd073a1c64cd5e2e8f0bb6283c0bda47f2fa749bf80c44781e5518415a577d4bc754316f06c1dc54bc3e5c2d69b2186d49daa1cb83481bb1b1d90794395efd1ca40f051afe585cc199530e0f03a2b8d4fcb5019bd5c5c0d3fb12453b33856dc59c32acc11ae88ce64d0b1168df2d7f3043b0a4a0e837a31a759274e1981bccf016388533bb62d28abfb2c644ba6ab30a3c07e7995eab33906e3066a20e008be468a4159578508b203e7e895a5de9ca0625af440ada9d346687fdc59af4b13a08b3a15351f333acb7afec295e6cdff37a4e7f63e82d703b2fd7f"}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 25.104473053s ago: executing program 5 (id=9156): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x100, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xd0, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0xa4, 0x9, 0x0, 0x1, [@m_ct={0xa0, 0xd, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "47c067ed09487b4c7b8fa31ee513842b"}]}, {0x61, 0x6, "b970c3a1acc9915c80c9bd9759a8172fb79bdb78ad5ce83bb6879073b048c4ed45bb06948e09a9201604245f087be96df05b6b8b48a02bc02d364d9e891f48a763d8159ef82e2c58cf99bad4502fd326289f7aab7c4d5c9bda1bace1f0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x20, 0x2a, "7669b23960892004b1c650c02d82cb15d03ce9bbb86251470fbc4f558a60590e48fffd4ffb5eebedd0da"}}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 24.935273444s ago: executing program 8 (id=9157): r0 = fanotify_init(0x200, 0x40000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x4132, 0xffffffffffffffff, 0x4000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000000180"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() syz_usb_connect(0x1d00, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000e65d00000000000000000000000a20000000000a03000000ffffffeb0000070000040900010073797a30000000008c000000090a010400000000000000000700000408000a40020000000900020073797a30000000000900010073797a3000000000080005400000000e48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000004100001800b00010064796e7365740000080003400000012014000000"], 0xd4}}, 0x20050800) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) fanotify_mark(r0, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) 24.921019761s ago: executing program 5 (id=9158): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x40000) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x3, 0x7) listen(r2, 0xfffffffd) (async) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) syz_usb_connect(0x0, 0x2ec, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xdc, 0x47, 0xa3, 0x10, 0x1f38, 0x1, 0x29ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2da, 0x2, 0x1, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x1a, 0xd5, 0x6, 0x75, 0x90, 0x7d, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xe, 0x6}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x2, 0x4}]}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x7f, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x4, 0x1, 0x8, [@generic={0x9c, 0x6, "908fc75fdae81f85dfd3f6a9231db34ddfadf5e32bdf8e452647187afec36d35e1088fe9384845cb61b6502205ccec0e10f7a3e2a8005a99a74208f052a9dcd832e4df827353916e71fab21f017e9aa51370501ae59db6686d1418eceabb8c72a745483c90f46e494de2392fa04dd59522112ca8a38e41870053ef09fb859ab48e042ddc6d393d3dd2b92171131fd28cc657f2cab9bb54666751"}, @generic={0x10, 0x21, "8fdb437917743e50353c8130e0a9"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0xe1, 0x7, 0xf, [@generic={0xdf, 0x22, "8240baa88005f0dc574dd9037677f30cca12524c5ba6e99982a9a084aefff24a49abe17176eca7630e012341b2b6e74b7651af4b73c1a48d3a0d15594c438445162951bec0cd847bc70357c725b85390c57b8b17d133085b470ab0e95097af5f3c542f720acfaf3cf6bfd383d6c4664c9b29dcf921429a37f8f297e34865f8a1402a40127d530df459e35b6fd6c7d53d29670509aeeb1e980cfe058df3229cd341480beaf1220cf2737a7e6dc28409ec18cdda7f5d4a1c5dc96a573b2a53cc7b7a4d3ad8dac4b7fa9093199a9c6bd4fd8e0e77fa7fdd1215db1c612ee2"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x6, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6d, 0x74a6}, @generic={0xc0, 0x11, "4cce9ae331eed7ad83db92115f1a7b445b88453117c87e82824181326d25788b45f2baa01b73030a5a49adb5802772929cefdba2e1ee5c39124b8c72829ee15eb651131a64c6aa0b4032304d7b21b50ec63fef04b3095b2a558e0fec68f6a08a1145f9900d08d9af87c17e116d95a6b69ad9aacf14785ac21e6eaaaa05603cc2d6e634cc4aae090984c5db15ee5836cffbcfb721ca7f3e82917eed26997feb5c2a1c5d69e7bf1d13b38972e25642f7b6c674c0c38acacc480e05ddc9c3ba"}]}}, {{0x9, 0x5, 0xd, 0x2a, 0x8, 0x6, 0x7f, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9a, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0xf8, 0x1f}}]}}, {{0x9, 0x4, 0x59, 0x2, 0x1, 0x96, 0x2d, 0x13, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x5}}], [{{0x9, 0x5, 0x80, 0x4, 0x40, 0xb, 0x9, 0x9}}]}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x2ec, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xdc, 0x47, 0xa3, 0x10, 0x1f38, 0x1, 0x29ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2da, 0x2, 0x1, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x1a, 0xd5, 0x6, 0x75, 0x90, 0x7d, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xe, 0x6}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x2, 0x4}]}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x7f, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x4, 0x1, 0x8, [@generic={0x9c, 0x6, "908fc75fdae81f85dfd3f6a9231db34ddfadf5e32bdf8e452647187afec36d35e1088fe9384845cb61b6502205ccec0e10f7a3e2a8005a99a74208f052a9dcd832e4df827353916e71fab21f017e9aa51370501ae59db6686d1418eceabb8c72a745483c90f46e494de2392fa04dd59522112ca8a38e41870053ef09fb859ab48e042ddc6d393d3dd2b92171131fd28cc657f2cab9bb54666751"}, @generic={0x10, 0x21, "8fdb437917743e50353c8130e0a9"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0xe1, 0x7, 0xf, [@generic={0xdf, 0x22, "8240baa88005f0dc574dd9037677f30cca12524c5ba6e99982a9a084aefff24a49abe17176eca7630e012341b2b6e74b7651af4b73c1a48d3a0d15594c438445162951bec0cd847bc70357c725b85390c57b8b17d133085b470ab0e95097af5f3c542f720acfaf3cf6bfd383d6c4664c9b29dcf921429a37f8f297e34865f8a1402a40127d530df459e35b6fd6c7d53d29670509aeeb1e980cfe058df3229cd341480beaf1220cf2737a7e6dc28409ec18cdda7f5d4a1c5dc96a573b2a53cc7b7a4d3ad8dac4b7fa9093199a9c6bd4fd8e0e77fa7fdd1215db1c612ee2"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x6, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6d, 0x74a6}, @generic={0xc0, 0x11, "4cce9ae331eed7ad83db92115f1a7b445b88453117c87e82824181326d25788b45f2baa01b73030a5a49adb5802772929cefdba2e1ee5c39124b8c72829ee15eb651131a64c6aa0b4032304d7b21b50ec63fef04b3095b2a558e0fec68f6a08a1145f9900d08d9af87c17e116d95a6b69ad9aacf14785ac21e6eaaaa05603cc2d6e634cc4aae090984c5db15ee5836cffbcfb721ca7f3e82917eed26997feb5c2a1c5d69e7bf1d13b38972e25642f7b6c674c0c38acacc480e05ddc9c3ba"}]}}, {{0x9, 0x5, 0xd, 0x2a, 0x8, 0x6, 0x7f, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9a, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0xf8, 0x1f}}]}}, {{0x9, 0x4, 0x59, 0x2, 0x1, 0x96, 0x2d, 0x13, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x5}}], [{{0x9, 0x5, 0x80, 0x4, 0x40, 0xb, 0x9, 0x9}}]}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) listen(r4, 0x8) (async) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) socket$inet(0xa, 0x801, 0x84) (async) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 24.448791628s ago: executing program 5 (id=9159): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16], 0x0) 24.318164402s ago: executing program 3 (id=9160): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x81, [0x8ff, 0x7c, 0x4], [{0x1, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x8d, 0x1, 0x0, 0x1}, {0x3, 0x8}, {0x10001, 0x5278, 0x0, 0x0, 0x0, 0x1}, {0x14b2f124, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x10, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x3, 0x0, 0x0, 0x1}, {0x7, 0x0, 0x1, 0x1}, {0x4, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x2, 0xa3, 0x0, 0x1, 0x0, 0x1}], 0x7}) (async, rerun: 32) socket(0xa, 0x1, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000209}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async, rerun: 64) r3 = syz_io_uring_setup(0x6367, &(0x7f0000000480)={0x0, 0x8ce6, 0x100, 0x10, 0x8e}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r7 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r8 = dup(r7) (async) r9 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r12 = socket(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r12, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r12, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) (async) write(r12, &(0x7f0000000980)="a9", 0x1) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 24.31477661s ago: executing program 9 (id=9161): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x12) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) eventfd2(0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 23.85653649s ago: executing program 3 (id=9162): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x48, [@private]}, @timestamp={0x44, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) fsopen(&(0x7f0000000000)='devpts\x00', 0x1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$setstatus(r3, 0x4, 0x800) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x7, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0xb, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 23.784585025s ago: executing program 5 (id=9163): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x80060) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000200)=""/147) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/17, @ANYRES32], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0182101, &(0x7f00000004c0)) io_setup(0xffffff3b, &(0x7f0000000080)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x1, 0xb, 0x6bb, 0xffff}, 'syz1\x00', 0x25}) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x64}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_j1939(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/40, 0x28}], 0x1}, 0x2140) syz_emit_ethernet(0x6e, &(0x7f0000002b40)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "5ea714", 0x0, 0x32, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @remote}, [@dstopts={0x2b}]}}}}}}}, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x1) syz_open_dev$evdev(&(0x7f0000000380), 0x5, 0x200) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000340)=0xe8, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) 23.458177586s ago: executing program 1 (id=9164): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000001e1101, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0x4148, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) 23.396786359s ago: executing program 9 (id=9165): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa001, 0x880b, 0x8}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 22.88248083s ago: executing program 5 (id=9166): getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r0, 0x4, 0x3, 0x2, 0xaa31, 0x4b, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x8}}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000001280)={0x9, @output={0x0, 0x1, {0x9, 0xffffffff}, 0x200, 0x7}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000080)=0x1000, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0) 22.592840836s ago: executing program 1 (id=9167): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000180007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800eaff840000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2}, 0x94) 22.524647671s ago: executing program 1 (id=9168): syz_open_pts(0xffffffffffffffff, 0xe02) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7ff, 0x80d80) read$usbmon(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r6) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x1000000}, 0x0) 22.333468722s ago: executing program 5 (id=9169): bind$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000480)={0x68000005, 0x10000000000000}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) (async) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 21.830154118s ago: executing program 1 (id=9170): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) syz_usb_connect$uac1(0x0, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e6010000010200000904020101010200000b2402011e0300019f8eca072401000000000905010910"], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000240)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x44, &(0x7f0000000580)={0x20, 0x9, 0x4, "03fd64f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x84, 0x3, "28ca34"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "72cb3c"}}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, r3, 0x5, 0x70b525, 0x8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x7], 0x8000000, 0x8340}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c) 21.794740262s ago: executing program 8 (id=9171): syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050a"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x40, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "9c"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xfffd, 0x4, 0xf2}, {0x6, 0x24, 0x1a, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xa, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x8e, 0x7, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0x0, 0xc, 0x7}, @dmm={0x7, 0x24, 0x14, 0x7, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x3, 0x69}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2, 0x32}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0xed, 0x4}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x7, 0x3, 0xf, 0x10, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x3, [{0xfb, &(0x7f0000000140)=@string={0xfb, 0x3, "bdf2061db392232ae6492bc191e9f87a6944bb7e16515d535eea0de8aca058bd48bd0d09038d2b6dd9f54b02468fe3657be8796238552e3a5c1311b35d7df8c929ccc3f9fd97fe08fce98dac53247ef55ff1607527564f20dad390f5ef07e008c4394fb7a70c0a06dd1ad990e8b5f7c4cb76375c860feb6a909515cf1aba4385d0e5024f2a236d382878f0778b5b8b24f186332ac117aa18b87a04249e884a3c81a0b1569eca757db4dc70cf966e962d11069667527ac8adb1fd58d84fe3194143c4fa6b4ce6526ca450321e38147caf606f0d8168361e78bfb3fe155bf4d3725b2338331e349ee8c8a36cf66e19ccb879d3639418b73080e4"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x425}}]}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x7, 0x7fffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400c5}, 0x80) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 18.7126077s ago: executing program 8 (id=9172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x42a, 0x4}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x9a}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 15.717847758s ago: executing program 8 (id=9173): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) fsopen(&(0x7f0000000000)='devpts\x00', 0x1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$setstatus(r3, 0x4, 0x800) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x7, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0xb, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 7.420825525s ago: executing program 39 (id=9165): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa001, 0x880b, 0x8}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 7.011310484s ago: executing program 40 (id=9169): bind$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000480)={0x68000005, 0x10000000000000}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) (async) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.991511915s ago: executing program 41 (id=9170): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) syz_usb_connect$uac1(0x0, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e6010000010200000904020101010200000b2402011e0300019f8eca072401000000000905010910"], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000240)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x44, &(0x7f0000000580)={0x20, 0x9, 0x4, "03fd64f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x84, 0x3, "28ca34"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "72cb3c"}}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, r3, 0x5, 0x70b525, 0x8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x7], 0x8000000, 0x8340}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c) 0s ago: executing program 42 (id=9173): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 [ 1985.021182][ T7556] dump_stack_lvl+0x189/0x250 [ 1985.021212][ T7556] ? __pfx____ratelimit+0x10/0x10 [ 1985.021240][ T7556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1985.021261][ T7556] ? __pfx__printk+0x10/0x10 [ 1985.021287][ T7556] ? lock_acquire+0x5f/0x360 [ 1985.021316][ T7556] should_fail_ex+0x414/0x560 [ 1985.021343][ T7556] prepare_alloc_pages+0x213/0x610 [ 1985.021365][ T7556] __alloc_frozen_pages_noprof+0x123/0x370 [ 1985.021393][ T7556] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1985.021415][ T7556] ? policy_nodemask+0x27c/0x720 [ 1985.021439][ T7556] ? pfn_valid+0xba/0x490 [ 1985.021462][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1985.021481][ T7556] alloc_pages_mpol+0x232/0x4a0 [ 1985.021508][ T7556] vma_alloc_folio_noprof+0xe4/0x200 [ 1985.021533][ T7556] ? rcu_read_lock_held+0xa/0x50 [ 1985.021553][ T7556] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1985.021579][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1985.021598][ T7556] ? lock_release+0x4b/0x3e0 [ 1985.021626][ T7556] folio_prealloc+0x30/0x180 [ 1985.021653][ T7556] __handle_mm_fault+0x2ab9/0x5440 [ 1985.021685][ T7556] ? __pfx___handle_mm_fault+0x10/0x10 [ 1985.021711][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1985.021733][ T7556] ? follow_page_pte+0x7ef/0x13e0 [ 1985.021763][ T7556] handle_mm_fault+0x40a/0x8e0 [ 1985.021804][ T7556] __get_user_pages+0x1699/0x2ce0 [ 1985.021841][ T7556] __gup_longterm_locked+0x3dc/0x1660 [ 1985.021869][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1985.021892][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1985.021912][ T7556] gup_fast_fallback+0x1e6a/0x2010 [ 1985.021949][ T7556] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1985.021976][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1985.021994][ T7556] ? io_pin_pages+0x9a/0x1a0 [ 1985.022011][ T7556] ? is_valid_gup_args+0x11f/0x200 [ 1985.022034][ T7556] ? pin_user_pages_fast+0x4d/0xb0 [ 1985.022058][ T7556] io_pin_pages+0xb5/0x1a0 [ 1985.022078][ T7556] io_sqe_buffer_register+0x16f/0x20a0 [ 1985.022109][ T7556] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1985.022131][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1985.022150][ T7556] ? io_sqe_buffers_register+0x133/0x8d0 [ 1985.022170][ T7556] ? trace_kmalloc+0x1f/0xd0 [ 1985.022193][ T7556] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 1985.022220][ T7556] ? iovec_from_user+0x1ba/0x250 [ 1985.022243][ T7556] io_sqe_buffers_register+0x3b4/0x8d0 [ 1985.022269][ T7556] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1985.022291][ T7556] ? __fget_files+0x3a0/0x420 [ 1985.022308][ T7556] ? __fget_files+0x2a/0x420 [ 1985.022326][ T7556] ? io_is_uring_fops+0xd/0x50 [ 1985.022350][ T7556] __se_sys_io_uring_register+0xb85/0x11b0 [ 1985.022372][ T7556] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1985.022390][ T7556] ? ksys_write+0x22a/0x250 [ 1985.022417][ T7556] ? __pfx_ksys_write+0x10/0x10 [ 1985.022439][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1985.022459][ T7556] ? rcu_is_watching+0x15/0xb0 [ 1985.022479][ T7556] do_syscall_64+0xfa/0x3b0 [ 1985.022507][ T7556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.022526][ T7556] ? clear_bhb_loop+0x60/0xb0 [ 1985.022547][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.022567][ T7556] RIP: 0033:0x7fdbf618ebe9 [ 1985.022585][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1985.022603][ T7556] RSP: 002b:00007fdbf6f64038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1985.022625][ T7556] RAX: ffffffffffffffda RBX: 00007fdbf63b5fa0 RCX: 00007fdbf618ebe9 [ 1985.022641][ T7556] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1985.022653][ T7556] RBP: 00007fdbf6f64090 R08: 0000000000000000 R09: 0000000000000000 [ 1985.022666][ T7556] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 1985.022680][ T7556] R13: 00007fdbf63b6038 R14: 00007fdbf63b5fa0 R15: 00007fdbf64dfa28 [ 1985.022700][ T7556] [ 1985.514308][ T7569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1985.573937][ T7569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.754257][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8734'. [ 1985.763686][ T7579] netlink: 'syz.3.8734': attribute type 19 has an invalid length. [ 1985.776498][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8734'. [ 1985.787833][ T5627] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1985.790941][ T7579] netlink: 'syz.3.8734': attribute type 19 has an invalid length. [ 1985.797313][ T5627] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1985.814666][ T5627] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1985.824612][ T5627] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1985.911168][T16623] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1986.070956][ T5458] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1986.092858][T16623] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1986.104897][T16623] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1986.119965][T16623] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1986.129462][T16623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.140620][ T7575] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1986.156144][T16623] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1986.220979][ T5458] usb 4-1: Using ep0 maxpacket: 16 [ 1986.227755][ T5458] usb 4-1: config 0 has no interfaces? [ 1986.234674][ T5458] usb 4-1: New USB device found, idVendor=1a8d, idProduct=100e, bcdDevice=5f.28 [ 1986.244695][ T5458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.256178][ T5458] usb 4-1: config 0 descriptor?? [ 1986.465720][ T5458] usb 2-1: USB disconnect, device number 85 [ 1986.476370][T22311] usb 4-1: USB disconnect, device number 5 [ 1986.759948][ T7590] FAULT_INJECTION: forcing a failure. [ 1986.759948][ T7590] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1986.774384][ T7590] CPU: 1 UID: 0 PID: 7590 Comm: syz.9.8738 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 1986.774413][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1986.774425][ T7590] Call Trace: [ 1986.774433][ T7590] [ 1986.774442][ T7590] dump_stack_lvl+0x189/0x250 [ 1986.774472][ T7590] ? __pfx____ratelimit+0x10/0x10 [ 1986.774499][ T7590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1986.774521][ T7590] ? __pfx__printk+0x10/0x10 [ 1986.774556][ T7590] ? lock_acquire+0x5f/0x360 [ 1986.774586][ T7590] should_fail_ex+0x414/0x560 [ 1986.774614][ T7590] prepare_alloc_pages+0x213/0x610 [ 1986.774636][ T7590] __alloc_frozen_pages_noprof+0x123/0x370 [ 1986.774665][ T7590] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1986.774688][ T7590] ? policy_nodemask+0x27c/0x720 [ 1986.774721][ T7590] ? pfn_valid+0xba/0x490 [ 1986.774745][ T7590] ? rcu_is_watching+0x15/0xb0 [ 1986.774765][ T7590] alloc_pages_mpol+0x232/0x4a0 [ 1986.774793][ T7590] vma_alloc_folio_noprof+0xe4/0x200 [ 1986.774821][ T7590] ? rcu_read_lock_held+0xa/0x50 [ 1986.774840][ T7590] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1986.774869][ T7590] ? rcu_is_watching+0x15/0xb0 [ 1986.774888][ T7590] ? lock_release+0x4b/0x3e0 [ 1986.774916][ T7590] folio_prealloc+0x30/0x180 [ 1986.774944][ T7590] __handle_mm_fault+0x2ab9/0x5440 [ 1986.774974][ T7590] ? __pfx___handle_mm_fault+0x10/0x10 [ 1986.775011][ T7590] ? rcu_is_watching+0x15/0xb0 [ 1986.775034][ T7590] ? follow_page_pte+0x7ef/0x13e0 [ 1986.775063][ T7590] handle_mm_fault+0x40a/0x8e0 [ 1986.775093][ T7590] __get_user_pages+0x1699/0x2ce0 [ 1986.775128][ T7590] __gup_longterm_locked+0x3dc/0x1660 [ 1986.775155][ T7590] ? rcu_is_watching+0x15/0xb0 [ 1986.775177][ T7590] ? rcu_is_watching+0x15/0xb0 [ 1986.775198][ T7590] gup_fast_fallback+0x1e6a/0x2010 [ 1986.775235][ T7590] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1986.775261][ T7590] ? rcu_is_watching+0x15/0xb0 [ 1986.775279][ T7590] ? io_pin_pages+0x9a/0x1a0 [ 1986.775296][ T7590] ? is_valid_gup_args+0x11f/0x200 [ 1986.775318][ T7590] ? pin_user_pages_fast+0x4d/0xb0 [ 1986.775342][ T7590] io_pin_pages+0xb5/0x1a0 [ 1986.775360][ T7590] io_sqe_buffer_register+0x16f/0x20a0 [ 1986.775392][ T7590] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1986.775415][ T7590] ? rcu_is_watching+0x15/0xb0 [ 1986.775433][ T7590] ? io_sqe_buffers_register+0x133/0x8d0 [ 1986.775453][ T7590] ? trace_kmalloc+0x1f/0xd0 [ 1986.775477][ T7590] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 1986.775504][ T7590] ? iovec_from_user+0x1ba/0x250 [ 1986.775527][ T7590] io_sqe_buffers_register+0x3b4/0x8d0 [ 1986.775552][ T7590] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1986.775574][ T7590] ? __fget_files+0x3a0/0x420 [ 1986.775591][ T7590] ? __fget_files+0x2a/0x420 [ 1986.775608][ T7590] ? io_is_uring_fops+0xd/0x50 [ 1986.775630][ T7590] __se_sys_io_uring_register+0xb85/0x11b0 [ 1986.775650][ T7590] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1986.775664][ T7590] ? ksys_write+0x22a/0x250 [ 1986.775679][ T7590] ? __pfx_ksys_write+0x10/0x10 [ 1986.775695][ T7590] ? rcu_is_watching+0x15/0xb0 [ 1986.775706][ T7590] do_syscall_64+0xfa/0x3b0 [ 1986.775724][ T7590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.775735][ T7590] ? clear_bhb_loop+0x60/0xb0 [ 1986.775748][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.775762][ T7590] RIP: 0033:0x7fcdfff8ebe9 [ 1986.775774][ T7590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1986.775785][ T7590] RSP: 002b:00007fce00e76038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1986.775799][ T7590] RAX: ffffffffffffffda RBX: 00007fce001b5fa0 RCX: 00007fcdfff8ebe9 [ 1986.775809][ T7590] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1986.775816][ T7590] RBP: 00007fce00e76090 R08: 0000000000000000 R09: 0000000000000000 [ 1986.775824][ T7590] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 1986.775832][ T7590] R13: 00007fce001b6038 R14: 00007fce001b5fa0 R15: 00007fce002dfa28 [ 1986.775844][ T7590] [ 1987.357420][ T7598] netlink: 380 bytes leftover after parsing attributes in process `syz.1.8742'. [ 1987.378296][ T7598] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1987.461187][T24045] usb 10-1: new full-speed USB device number 98 using dummy_hcd [ 1987.489617][ T7607] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8740'. [ 1987.646117][T24045] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1987.715782][T24045] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 1987.728015][T17360] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1987.738648][T24045] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1987.756388][T24045] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1987.831504][T24045] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1987.846460][T24045] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.866311][T24045] usb 10-1: Product: syz [ 1987.870759][T24045] usb 10-1: Manufacturer: syz [ 1987.886667][T24045] usb 10-1: SerialNumber: syz [ 1987.903592][T17360] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1987.931225][T17360] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1987.959194][T17360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1987.974286][T17360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1987.986276][T17360] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1988.004628][T17360] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1988.014887][T17360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.033704][T17360] usb 2-1: Product: syz [ 1988.037999][T17360] usb 2-1: Manufacturer: syz [ 1988.043639][T17360] usb 2-1: SerialNumber: syz [ 1988.052247][T17360] usb 2-1: config 0 descriptor?? [ 1988.104676][T17360] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input210 [ 1988.124684][T24045] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1988.133114][T24045] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1988.142291][T24045] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 1988.189684][ T2966] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1988.208573][T24045] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1988.225185][T24045] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1988.248198][T24045] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 1988.318274][T24045] usb 10-1: USB disconnect, device number 98 [ 1988.354711][ T2103] udevd[2103]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1988.381375][ T2966] usb 4-1: Using ep0 maxpacket: 32 [ 1988.428639][ T2966] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1988.443556][ T2966] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1988.461090][ T2966] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1988.469835][ T2966] usb 4-1: Product: syz [ 1988.571029][ T2966] usb 4-1: Manufacturer: syz [ 1988.588324][ T2966] usb 4-1: SerialNumber: syz [ 1988.619256][ T2966] usb 4-1: config 0 descriptor?? [ 1988.639478][ T7613] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1988.663433][ T2966] hub 4-1:0.0: bad descriptor, ignoring hub [ 1988.707688][ T2966] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1989.201335][ T2966] usb 4-1: USB disconnect, device number 6 [ 1989.269071][ T2966] usb 2-1: USB disconnect, device number 86 [ 1989.335971][ T7637] FAULT_INJECTION: forcing a failure. [ 1989.335971][ T7637] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1989.395219][ T7637] CPU: 1 UID: 0 PID: 7637 Comm: syz.3.8749 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 1989.395251][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1989.395264][ T7637] Call Trace: [ 1989.395272][ T7637] [ 1989.395280][ T7637] dump_stack_lvl+0x189/0x250 [ 1989.395308][ T7637] ? __pfx____ratelimit+0x10/0x10 [ 1989.395334][ T7637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1989.395356][ T7637] ? __pfx__printk+0x10/0x10 [ 1989.395382][ T7637] ? lock_acquire+0x5f/0x360 [ 1989.395411][ T7637] should_fail_ex+0x414/0x560 [ 1989.395437][ T7637] prepare_alloc_pages+0x213/0x610 [ 1989.395458][ T7637] __alloc_frozen_pages_noprof+0x123/0x370 [ 1989.395480][ T7637] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1989.395504][ T7637] ? policy_nodemask+0x27c/0x720 [ 1989.395528][ T7637] ? pfn_valid+0xba/0x490 [ 1989.395551][ T7637] ? rcu_is_watching+0x15/0xb0 [ 1989.395571][ T7637] alloc_pages_mpol+0x232/0x4a0 [ 1989.395598][ T7637] vma_alloc_folio_noprof+0xe4/0x200 [ 1989.395623][ T7637] ? rcu_read_lock_held+0xa/0x50 [ 1989.395644][ T7637] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1989.395679][ T7637] ? rcu_is_watching+0x15/0xb0 [ 1989.395697][ T7637] ? lock_release+0x4b/0x3e0 [ 1989.395723][ T7637] folio_prealloc+0x30/0x180 [ 1989.395750][ T7637] __handle_mm_fault+0x2ab9/0x5440 [ 1989.395780][ T7637] ? __pfx___handle_mm_fault+0x10/0x10 [ 1989.395803][ T7637] ? rcu_is_watching+0x15/0xb0 [ 1989.395825][ T7637] ? follow_page_pte+0x7ef/0x13e0 [ 1989.395854][ T7637] handle_mm_fault+0x40a/0x8e0 [ 1989.395882][ T7637] __get_user_pages+0x1699/0x2ce0 [ 1989.395917][ T7637] __gup_longterm_locked+0x3dc/0x1660 [ 1989.395942][ T7637] ? rcu_is_watching+0x15/0xb0 [ 1989.395963][ T7637] ? rcu_is_watching+0x15/0xb0 [ 1989.395982][ T7637] gup_fast_fallback+0x1e6a/0x2010 [ 1989.396017][ T7637] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1989.396043][ T7637] ? rcu_is_watching+0x15/0xb0 [ 1989.396060][ T7637] ? io_pin_pages+0x9a/0x1a0 [ 1989.396077][ T7637] ? is_valid_gup_args+0x11f/0x200 [ 1989.396099][ T7637] ? pin_user_pages_fast+0x4d/0xb0 [ 1989.396123][ T7637] io_pin_pages+0xb5/0x1a0 [ 1989.396141][ T7637] io_sqe_buffer_register+0x16f/0x20a0 [ 1989.396176][ T7637] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1989.396197][ T7637] ? rcu_is_watching+0x15/0xb0 [ 1989.396215][ T7637] ? io_sqe_buffers_register+0x133/0x8d0 [ 1989.396234][ T7637] ? trace_kmalloc+0x1f/0xd0 [ 1989.396255][ T7637] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 1989.396280][ T7637] ? iovec_from_user+0x1ba/0x250 [ 1989.396302][ T7637] io_sqe_buffers_register+0x3b4/0x8d0 [ 1989.396327][ T7637] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1989.396349][ T7637] ? __fget_files+0x3a0/0x420 [ 1989.396365][ T7637] ? __fget_files+0x2a/0x420 [ 1989.396381][ T7637] ? io_is_uring_fops+0xd/0x50 [ 1989.396405][ T7637] __se_sys_io_uring_register+0xb85/0x11b0 [ 1989.396425][ T7637] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1989.396443][ T7637] ? ksys_write+0x22a/0x250 [ 1989.396469][ T7637] ? __pfx_ksys_write+0x10/0x10 [ 1989.396491][ T7637] ? rcu_is_watching+0x15/0xb0 [ 1989.396510][ T7637] ? rcu_is_watching+0x15/0xb0 [ 1989.396530][ T7637] do_syscall_64+0xfa/0x3b0 [ 1989.396556][ T7637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.396575][ T7637] ? clear_bhb_loop+0x60/0xb0 [ 1989.396596][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.396615][ T7637] RIP: 0033:0x7f6f1dd8ebe9 [ 1989.396633][ T7637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1989.396650][ T7637] RSP: 002b:00007f6f1bff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1989.396682][ T7637] RAX: ffffffffffffffda RBX: 00007f6f1dfb5fa0 RCX: 00007f6f1dd8ebe9 [ 1989.396697][ T7637] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1989.396709][ T7637] RBP: 00007f6f1bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1989.396722][ T7637] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 1989.396734][ T7637] R13: 00007f6f1dfb6038 R14: 00007f6f1dfb5fa0 R15: 00007f6f1e0dfa28 [ 1989.396755][ T7637] [ 1990.881032][T16623] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1991.101171][T16623] usb 2-1: Using ep0 maxpacket: 16 [ 1991.127841][T16623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.141023][T16623] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1991.227040][T16623] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1991.242610][T16623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.259856][T16623] usb 2-1: Product: syz [ 1991.270243][T16623] usb 2-1: Manufacturer: syz [ 1991.285824][T16623] usb 2-1: SerialNumber: syz [ 1991.828132][ T7652] tipc: Enabling of bearer rejected, already enabled [ 1991.987635][ T7654] tipc: Resetting bearer [ 1992.079486][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8750'. [ 1992.770571][ T7668] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8756'. [ 1993.111061][ T2966] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1993.184825][ T7686] fuse: Unknown parameter 'rootmod' [ 1993.264029][ T2966] usb 10-1: Using ep0 maxpacket: 32 [ 1993.285347][ T2966] usb 10-1: config index 0 descriptor too short (expected 49444, got 36) [ 1993.294846][ T2966] usb 10-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 1993.307497][ T2966] usb 10-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 1993.318621][ T2966] usb 10-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.338878][ T2966] usb 10-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 1993.351233][ T2966] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1993.378903][ T2966] usb 10-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 1993.387956][ T2966] usb 10-1: Product: syz [ 1993.394684][ T2966] usb 10-1: Manufacturer: syz [ 1993.399663][ T2966] usb 10-1: SerialNumber: syz [ 1993.626733][ T2966] usb 10-1: USB disconnect, device number 99 [ 1993.776685][ T7694] sctp: [Deprecated]: syz.3.8764 (pid 7694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1993.776685][ T7694] Use struct sctp_sack_info instead [ 1994.103261][T16623] usb 2-1: skipping empty audio interface (v1) [ 1994.154342][T16623] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1994.197377][T16623] usb 2-1: USB disconnect, device number 87 [ 1994.249627][ T2099] udevd[2099]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1995.280123][ T7719] FAULT_INJECTION: forcing a failure. [ 1995.280123][ T7719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1995.299554][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz.9.8769 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 1995.299598][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1995.299612][ T7719] Call Trace: [ 1995.299621][ T7719] [ 1995.299630][ T7719] dump_stack_lvl+0x189/0x250 [ 1995.299661][ T7719] ? __pfx____ratelimit+0x10/0x10 [ 1995.299689][ T7719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1995.299711][ T7719] ? __pfx__printk+0x10/0x10 [ 1995.299739][ T7719] ? lock_acquire+0x5f/0x360 [ 1995.299770][ T7719] should_fail_ex+0x414/0x560 [ 1995.299798][ T7719] prepare_alloc_pages+0x213/0x610 [ 1995.299821][ T7719] __alloc_frozen_pages_noprof+0x123/0x370 [ 1995.299843][ T7719] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1995.299868][ T7719] ? policy_nodemask+0x27c/0x720 [ 1995.299895][ T7719] ? pfn_valid+0xba/0x490 [ 1995.299919][ T7719] ? rcu_is_watching+0x15/0xb0 [ 1995.299941][ T7719] alloc_pages_mpol+0x232/0x4a0 [ 1995.299970][ T7719] vma_alloc_folio_noprof+0xe4/0x200 [ 1995.300004][ T7719] ? rcu_read_lock_held+0xa/0x50 [ 1995.300024][ T7719] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1995.300054][ T7719] ? rcu_is_watching+0x15/0xb0 [ 1995.300073][ T7719] ? lock_release+0x4b/0x3e0 [ 1995.300101][ T7719] folio_prealloc+0x30/0x180 [ 1995.300129][ T7719] __handle_mm_fault+0x2ab9/0x5440 [ 1995.300161][ T7719] ? __pfx___handle_mm_fault+0x10/0x10 [ 1995.300187][ T7719] ? rcu_is_watching+0x15/0xb0 [ 1995.300210][ T7719] ? follow_page_pte+0x7ef/0x13e0 [ 1995.300239][ T7719] handle_mm_fault+0x40a/0x8e0 [ 1995.300269][ T7719] __get_user_pages+0x1699/0x2ce0 [ 1995.300305][ T7719] __gup_longterm_locked+0x3dc/0x1660 [ 1995.300334][ T7719] ? rcu_is_watching+0x15/0xb0 [ 1995.300379][ T7719] ? rcu_is_watching+0x15/0xb0 [ 1995.300400][ T7719] gup_fast_fallback+0x1e6a/0x2010 [ 1995.300437][ T7719] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1995.300464][ T7719] ? rcu_is_watching+0x15/0xb0 [ 1995.300483][ T7719] ? io_pin_pages+0x9a/0x1a0 [ 1995.300501][ T7719] ? is_valid_gup_args+0x11f/0x200 [ 1995.300527][ T7719] ? pin_user_pages_fast+0x4d/0xb0 [ 1995.300552][ T7719] io_pin_pages+0xb5/0x1a0 [ 1995.300579][ T7719] io_sqe_buffer_register+0x16f/0x20a0 [ 1995.300612][ T7719] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1995.300635][ T7719] ? rcu_is_watching+0x15/0xb0 [ 1995.300653][ T7719] ? io_sqe_buffers_register+0x133/0x8d0 [ 1995.300674][ T7719] ? trace_kmalloc+0x1f/0xd0 [ 1995.300697][ T7719] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 1995.300725][ T7719] ? iovec_from_user+0x1ba/0x250 [ 1995.300748][ T7719] io_sqe_buffers_register+0x3b4/0x8d0 [ 1995.300775][ T7719] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1995.300798][ T7719] ? __fget_files+0x3a0/0x420 [ 1995.300813][ T7719] ? __fget_files+0x2a/0x420 [ 1995.300830][ T7719] ? io_is_uring_fops+0xd/0x50 [ 1995.300852][ T7719] __se_sys_io_uring_register+0xb85/0x11b0 [ 1995.300873][ T7719] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1995.300890][ T7719] ? ksys_write+0x22a/0x250 [ 1995.300914][ T7719] ? __pfx_ksys_write+0x10/0x10 [ 1995.300938][ T7719] ? rcu_is_watching+0x15/0xb0 [ 1995.300959][ T7719] ? rcu_is_watching+0x15/0xb0 [ 1995.300979][ T7719] do_syscall_64+0xfa/0x3b0 [ 1995.301007][ T7719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.301027][ T7719] ? clear_bhb_loop+0x60/0xb0 [ 1995.301048][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.301068][ T7719] RIP: 0033:0x7fcdfff8ebe9 [ 1995.301087][ T7719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1995.301105][ T7719] RSP: 002b:00007fce00e76038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1995.301129][ T7719] RAX: ffffffffffffffda RBX: 00007fce001b5fa0 RCX: 00007fcdfff8ebe9 [ 1995.301144][ T7719] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1995.301158][ T7719] RBP: 00007fce00e76090 R08: 0000000000000000 R09: 0000000000000000 [ 1995.301171][ T7719] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 1995.301186][ T7719] R13: 00007fce001b6038 R14: 00007fce001b5fa0 R15: 00007fce002dfa28 [ 1995.301207][ T7719] [ 1995.789237][ T7727] dlm: non-version read from control device 8 [ 1996.167319][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1996.217595][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1996.340244][ T7754] wireguard0: entered promiscuous mode [ 1996.390483][ T7754] bridge0: port 3(macsec0) entered blocking state [ 1996.397327][ T7754] bridge0: port 3(macsec0) entered disabled state [ 1996.404662][ T7754] macsec0: entered allmulticast mode [ 1996.424159][ T7760] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1996.448108][ T7757] binder: 7736:7757 ioctl c018620c 200000000000 returned -22 [ 1996.529716][ T7754] macsec0: entered promiscuous mode [ 1996.564905][ T7754] bridge0: mtu less than device minimum [ 1996.791596][T16623] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1996.856900][ T7763] FAULT_INJECTION: forcing a failure. [ 1996.856900][ T7763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1996.881428][ T7763] CPU: 1 UID: 0 PID: 7763 Comm: syz.8.8781 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 1996.881460][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1996.881472][ T7763] Call Trace: [ 1996.881477][ T7763] [ 1996.881482][ T7763] dump_stack_lvl+0x189/0x250 [ 1996.881503][ T7763] ? __pfx____ratelimit+0x10/0x10 [ 1996.881527][ T7763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1996.881555][ T7763] ? __pfx__printk+0x10/0x10 [ 1996.881592][ T7763] ? lock_acquire+0x5f/0x360 [ 1996.881618][ T7763] should_fail_ex+0x414/0x560 [ 1996.881635][ T7763] prepare_alloc_pages+0x213/0x610 [ 1996.881649][ T7763] __alloc_frozen_pages_noprof+0x123/0x370 [ 1996.881662][ T7763] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1996.881676][ T7763] ? policy_nodemask+0x27c/0x720 [ 1996.881691][ T7763] ? pfn_valid+0xba/0x490 [ 1996.881706][ T7763] ? rcu_is_watching+0x15/0xb0 [ 1996.881719][ T7763] alloc_pages_mpol+0x232/0x4a0 [ 1996.881736][ T7763] vma_alloc_folio_noprof+0xe4/0x200 [ 1996.881752][ T7763] ? rcu_read_lock_held+0xa/0x50 [ 1996.881765][ T7763] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1996.881781][ T7763] ? rcu_is_watching+0x15/0xb0 [ 1996.881792][ T7763] ? lock_release+0x4b/0x3e0 [ 1996.881809][ T7763] folio_prealloc+0x30/0x180 [ 1996.881828][ T7763] __handle_mm_fault+0x2ab9/0x5440 [ 1996.881851][ T7763] ? __pfx___handle_mm_fault+0x10/0x10 [ 1996.881866][ T7763] ? rcu_is_watching+0x15/0xb0 [ 1996.881879][ T7763] ? follow_page_pte+0x7ef/0x13e0 [ 1996.881896][ T7763] handle_mm_fault+0x40a/0x8e0 [ 1996.881913][ T7763] __get_user_pages+0x1699/0x2ce0 [ 1996.881935][ T7763] __gup_longterm_locked+0x3dc/0x1660 [ 1996.881951][ T7763] ? rcu_is_watching+0x15/0xb0 [ 1996.881964][ T7763] ? rcu_is_watching+0x15/0xb0 [ 1996.881975][ T7763] gup_fast_fallback+0x1e6a/0x2010 [ 1996.881996][ T7763] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1996.882012][ T7763] ? rcu_is_watching+0x15/0xb0 [ 1996.882022][ T7763] ? io_pin_pages+0x9a/0x1a0 [ 1996.882034][ T7763] ? is_valid_gup_args+0x11f/0x200 [ 1996.882048][ T7763] ? pin_user_pages_fast+0x4d/0xb0 [ 1996.882063][ T7763] io_pin_pages+0xb5/0x1a0 [ 1996.882074][ T7763] io_sqe_buffer_register+0x16f/0x20a0 [ 1996.882092][ T7763] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1996.882106][ T7763] ? rcu_is_watching+0x15/0xb0 [ 1996.882116][ T7763] ? io_sqe_buffers_register+0x133/0x8d0 [ 1996.882129][ T7763] ? trace_kmalloc+0x1f/0xd0 [ 1996.882143][ T7763] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 1996.882159][ T7763] ? iovec_from_user+0x1ba/0x250 [ 1996.882172][ T7763] io_sqe_buffers_register+0x3b4/0x8d0 [ 1996.882187][ T7763] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1996.882201][ T7763] ? __fget_files+0x3a0/0x420 [ 1996.882211][ T7763] ? __fget_files+0x2a/0x420 [ 1996.882221][ T7763] ? io_is_uring_fops+0xd/0x50 [ 1996.882236][ T7763] __se_sys_io_uring_register+0xb85/0x11b0 [ 1996.882249][ T7763] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1996.882260][ T7763] ? ksys_write+0x22a/0x250 [ 1996.882275][ T7763] ? __pfx_ksys_write+0x10/0x10 [ 1996.882289][ T7763] ? rcu_is_watching+0x15/0xb0 [ 1996.882301][ T7763] ? rcu_is_watching+0x15/0xb0 [ 1996.882318][ T7763] do_syscall_64+0xfa/0x3b0 [ 1996.882343][ T7763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1996.882361][ T7763] ? clear_bhb_loop+0x60/0xb0 [ 1996.882378][ T7763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1996.882390][ T7763] RIP: 0033:0x7f44c558ebe9 [ 1996.882402][ T7763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1996.882413][ T7763] RSP: 002b:00007f44c63ec038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1996.882429][ T7763] RAX: ffffffffffffffda RBX: 00007f44c57b5fa0 RCX: 00007f44c558ebe9 [ 1996.882438][ T7763] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1996.882446][ T7763] RBP: 00007f44c63ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1996.882455][ T7763] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 1996.882463][ T7763] R13: 00007f44c57b6038 R14: 00007f44c57b5fa0 R15: 00007f44c58dfa28 [ 1996.882475][ T7763] [ 1996.971027][T16623] usb 4-1: Using ep0 maxpacket: 8 [ 1997.495669][T16623] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1997.551609][ T30] audit: type=1326 audit(1755550247.699:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.1.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf618ebe9 code=0x7ffc0000 [ 1997.588235][T16623] usb 4-1: config 1 has no interface number 1 [ 1997.596290][T16623] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1997.630121][ T30] audit: type=1326 audit(1755550247.699:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.1.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf618ebe9 code=0x7ffc0000 [ 1997.671715][ T30] audit: type=1326 audit(1755550247.699:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.1.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fdbf618ebe9 code=0x7ffc0000 [ 1997.694166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1997.704513][T16623] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1997.714696][T16623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.729824][ T30] audit: type=1326 audit(1755550247.699:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.1.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf618ebe9 code=0x7ffc0000 [ 1997.731356][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.769775][T16623] usb 4-1: Product: syz [ 1997.781060][T16623] usb 4-1: Manufacturer: syz [ 1997.784294][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.796577][T16623] usb 4-1: SerialNumber: syz [ 1997.841277][ T30] audit: type=1326 audit(1755550247.699:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.1.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbf618ebe9 code=0x7ffc0000 [ 1997.864516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1997.909016][ T30] audit: type=1326 audit(1755550247.699:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.1.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf618ebe9 code=0x7ffc0000 [ 1997.931555][ C0] vkms_vblank_simulate: vblank timer overrun [ 1997.938032][ T30] audit: type=1326 audit(1755550247.699:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.1.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdbf618d69f code=0x7ffc0000 [ 1997.960852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1997.962477][T22311] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1997.971130][ T30] audit: type=1326 audit(1755550247.699:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.1.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf618ebe9 code=0x7ffc0000 [ 1997.998003][ C0] vkms_vblank_simulate: vblank timer overrun [ 1998.006771][ T30] audit: type=1326 audit(1755550247.709:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.1.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdbf618ebe9 code=0x7ffc0000 [ 1998.029151][ C0] vkms_vblank_simulate: vblank timer overrun [ 1998.041250][ T7760] netlink: 91 bytes leftover after parsing attributes in process `syz.3.8779'. [ 1998.053033][ T30] audit: type=1326 audit(1755550247.709:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.1.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf618ebe9 code=0x7ffc0000 [ 1998.084085][T16623] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1998.093898][T16623] usb 4-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 1998.101419][T16623] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1998.109647][T16623] usb 4-1: 2:1 : invalid channels 0 [ 1998.111046][ T5458] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1998.141211][T22311] usb 2-1: Using ep0 maxpacket: 32 [ 1998.146573][T16623] usb 4-1: USB disconnect, device number 7 [ 1998.164756][T22311] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1998.170398][ T2099] udevd[2099]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1998.203661][T22311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.213073][T22311] usb 2-1: Product: syz [ 1998.218910][T22311] usb 2-1: Manufacturer: syz [ 1998.244329][T22311] usb 2-1: SerialNumber: syz [ 1998.252051][T22311] usb 2-1: config 0 descriptor?? [ 1998.293628][ T5458] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1998.306243][ T5458] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1998.330360][ T5458] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1998.341762][ T5458] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1998.356201][ T5458] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1998.369646][ T5458] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.389179][ T5458] usb 10-1: config 0 descriptor?? [ 1998.470662][T22311] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1998.489275][T22311] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1998.532552][ T7779] openvswitch: netlink: Flow actions attr not present in new flow. [ 1998.552289][T22311] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 1998.565271][T22311] usb 2-1: USB disconnect, device number 88 [ 1998.684633][ T5458] usbhid 10-1:0.0: can't add hid device: -71 [ 1998.715674][ T5458] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1998.731534][ T5458] usb 10-1: USB disconnect, device number 100 [ 1998.935957][ T7794] could not allocate digest TFM handle poly1305-neon [ 1998.963202][ T7794] netlink: 'syz.3.8792': attribute type 10 has an invalid length. [ 1999.028195][ T7794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1999.061181][ T5458] usb 10-1: new full-speed USB device number 101 using dummy_hcd [ 1999.083606][ T7794] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1999.563983][ T5458] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1999.575628][ T5458] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1999.590750][ T5458] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1999.600578][ T5458] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.668542][ T5458] usb 10-1: config 0 descriptor?? [ 1999.737956][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8789'. [ 2001.004930][ T7809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2001.444339][ T5458] savu 0003:1E7D:2D5A.008C: global environment stack underflow [ 2001.511433][ T5458] savu 0003:1E7D:2D5A.008C: item 0 4 1 11 parsing failed [ 2001.549260][ T5458] savu 0003:1E7D:2D5A.008C: parse failed [ 2001.581111][ T5458] savu 0003:1E7D:2D5A.008C: probe with driver savu failed with error -22 [ 2002.487258][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8803'. [ 2002.671040][ T7852] vlan3: entered promiscuous mode [ 2002.681681][T22311] usb 10-1: USB disconnect, device number 101 [ 2002.689772][ T7852] batadv0: entered promiscuous mode [ 2003.030983][T22311] usb 10-1: new low-speed USB device number 102 using dummy_hcd [ 2003.112735][ T7860] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 2003.270695][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8806'. [ 2003.367573][T22311] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2003.377942][T22311] usb 10-1: config 0 has no interface number 0 [ 2003.384326][T22311] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2003.501765][T22311] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2003.886646][T22311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.972058][T22311] usb 10-1: config 0 descriptor?? [ 2003.979087][ T7856] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2004.004867][T22311] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2004.117815][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.131434][ T7874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8810'. [ 2004.136150][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.214811][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8805'. [ 2004.315131][ T5458] usb 10-1: USB disconnect, device number 102 [ 2004.500925][ T5863] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2004.650960][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 2004.657792][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2004.668272][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2004.694638][ T5863] usb 4-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 2004.704177][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.712994][ T5863] usb 4-1: Product: syz [ 2004.717866][ T5863] usb 4-1: Manufacturer: syz [ 2004.723264][ T5863] usb 4-1: SerialNumber: syz [ 2004.731819][ T5863] usb 4-1: config 0 descriptor?? [ 2004.774366][ T7887] n (unregistering): Released all slaves [ 2004.945100][ T5863] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 2004.967787][ T5863] peak_usb 4-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71) [ 2005.075135][ T5863] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 2005.089309][ T5863] usb 4-1: USB disconnect, device number 8 [ 2005.142944][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8816'. [ 2005.300951][T16623] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 2005.327654][ T7908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2005.338735][ T7908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2005.451054][T16623] usb 10-1: device descriptor read/64, error -71 [ 2005.521090][ T2966] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2005.540802][ T7910] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8819'. [ 2005.685703][ T2966] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2005.698537][ T2966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.700936][T16623] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 2005.725014][ T2966] usb 2-1: Product: syz [ 2005.733412][ T2966] usb 2-1: Manufacturer: syz [ 2005.740660][ T2966] usb 2-1: SerialNumber: syz [ 2005.752241][ T2966] usb 2-1: config 0 descriptor?? [ 2005.767722][ T2966] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2005.791152][ T5863] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2005.840954][T16623] usb 10-1: device descriptor read/64, error -71 [ 2005.944293][ T5863] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2005.955318][T16623] usb usb10-port1: attempt power cycle [ 2005.961454][ T5863] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2005.977981][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2005.985818][ T5863] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 2005.995695][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.009139][ T5863] usb 4-1: config 0 descriptor?? [ 2006.029249][ T5863] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input211 [ 2006.063604][ T2966] sonixb 2-1:0.0: Error reading register 00: -71 [ 2006.078859][ T2966] usb 2-1: USB disconnect, device number 89 [ 2006.222406][ T5218] bcm5974 4-1:0.0: could not read from device [ 2006.229545][ T5218] bcm5974 4-1:0.0: could not read from device [ 2006.239941][ T5218] bcm5974 4-1:0.0: could not read from device [ 2006.242676][ T5863] usb 4-1: USB disconnect, device number 9 [ 2006.256582][ T5218] bcm5974 4-1:0.0: could not read from device [ 2006.311798][T16623] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 2006.331574][T16623] usb 10-1: device descriptor read/8, error -71 [ 2006.571873][T16623] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 2006.601641][T16623] usb 10-1: device descriptor read/8, error -71 [ 2006.618180][ T7912] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2006.627743][ T7912] input: syz0 as /devices/virtual/input/input212 [ 2006.711503][T16623] usb usb10-port1: unable to enumerate USB device [ 2006.815973][ T7919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8822'. [ 2006.929623][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8821'. [ 2006.940271][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8821'. [ 2007.956482][ T7900] delete_channel: no stack [ 2007.977659][ T7947] netlink: 148 bytes leftover after parsing attributes in process `syz.9.8830'. [ 2008.270930][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.302213][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.375249][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.378094][ T7967] bridge2: entered promiscuous mode [ 2008.393464][ T7967] bridge2: entered allmulticast mode [ 2008.393795][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.541875][ T5458] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2008.558672][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8837'. [ 2008.574968][ T7973] vlan2: entered promiscuous mode [ 2008.580284][ T7973] batadv0: entered promiscuous mode [ 2008.691452][ T5458] usb 4-1: Using ep0 maxpacket: 16 [ 2008.698680][ T5458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2008.711668][ T5458] usb 4-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 2008.723824][ T5458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.735149][ T5458] usb 4-1: config 0 descriptor?? [ 2008.861218][ T2966] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2008.995371][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2009.004867][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2009.031367][ T2966] usb 2-1: Using ep0 maxpacket: 32 [ 2009.043623][ T2966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.056972][ T2966] usb 2-1: config 0 has no interfaces? [ 2009.062671][ T2966] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 2009.072251][ T2966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.082251][ T2966] usb 2-1: config 0 descriptor?? [ 2009.144569][ T7958] netlink: 'syz.3.8832': attribute type 7 has an invalid length. [ 2009.154254][ T7958] netlink: 'syz.3.8832': attribute type 8 has an invalid length. [ 2009.177738][ T5458] usbhid 4-1:0.0: can't add hid device: -71 [ 2009.189215][ T5458] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2009.198930][ T5458] usb 4-1: USB disconnect, device number 10 [ 2009.293938][ T2966] usb 2-1: USB disconnect, device number 90 [ 2010.151102][ T2966] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2010.193927][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8843'. [ 2010.304665][ T2966] usb 2-1: Using ep0 maxpacket: 16 [ 2010.312770][ T2966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.325943][ T2966] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2010.335423][ T2966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.343999][ T2966] usb 2-1: Product: syz [ 2010.348166][ T2966] usb 2-1: Manufacturer: syz [ 2010.353109][ T2966] usb 2-1: SerialNumber: syz [ 2010.359438][ T2966] usb 2-1: config 0 descriptor?? [ 2010.366594][ T2966] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 2010.375737][ T2966] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 2010.470979][T17360] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2010.627749][T17360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2010.677544][T17360] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 2010.680200][ T8006] ptrace attach of "./syz-executor exec"[7341] was attempted by "./syz-executor exec"[8006] [ 2010.703857][T17360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.731700][T17360] usb 4-1: config 0 descriptor?? [ 2011.057491][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8848'. [ 2011.458174][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.469759][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.483366][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.495296][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.292398][ T5863] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 2012.471220][ T5863] usb 10-1: device descriptor read/64, error -71 [ 2012.505469][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2012.545353][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.665984][T17360] usbhid 4-1:0.0: can't add hid device: -71 [ 2012.687530][T17360] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2012.723832][T17360] usb 4-1: USB disconnect, device number 11 [ 2012.760908][ T5863] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 2012.911071][ T5863] usb 10-1: device descriptor read/64, error -71 [ 2012.982467][T24045] usb 2-1: USB disconnect, device number 91 [ 2013.023709][ T5863] usb usb10-port1: attempt power cycle [ 2013.084451][T17360] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 2013.260461][T17360] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 2013.295926][T17360] usb 4-1: config 0 has no interface number 0 [ 2013.320997][T17360] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2013.352806][T17360] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 2013.378158][ T5863] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 2013.389562][T17360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.423364][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2013.432043][T17360] usb 4-1: Product: syz [ 2013.436328][T17360] usb 4-1: Manufacturer: syz [ 2013.462380][ T5863] usb 10-1: device descriptor read/8, error -71 [ 2013.480881][T17360] usb 4-1: SerialNumber: syz [ 2013.487862][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2013.637700][T17360] usb 4-1: config 0 descriptor?? [ 2013.656418][ T8048] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2013.694636][T17360] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 2013.760759][T17360] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 2013.770572][ T5863] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 2013.839200][ T5863] usb 10-1: device descriptor read/8, error -71 [ 2013.970244][T17360] usb 4-1: USB disconnect, device number 12 [ 2013.984180][ T5863] usb usb10-port1: unable to enumerate USB device [ 2014.154702][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2014.164162][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2014.568440][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8865'. [ 2014.593661][ T8072] team_slave_0: entered promiscuous mode [ 2014.599426][ T8072] team_slave_1: entered promiscuous mode [ 2014.605343][ T8072] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2014.615122][ T8072] macsec1: entered promiscuous mode [ 2014.620661][ T8072] team0: entered promiscuous mode [ 2014.639857][ T8072] macsec1: entered allmulticast mode [ 2014.647080][ T8072] team0: entered allmulticast mode [ 2014.654999][ T8072] team_slave_0: entered allmulticast mode [ 2014.665051][ T8072] team_slave_1: entered allmulticast mode [ 2014.694971][ T8072] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2014.881096][ T5863] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2015.021045][ T5863] usb 2-1: device descriptor read/64, error -71 [ 2015.140906][T17360] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2015.271078][ T5863] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2015.311162][T17360] usb 4-1: config 0 has no interfaces? [ 2015.334493][T17360] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2015.346593][T17360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.374777][T17360] usb 4-1: Product: syz [ 2015.393890][T17360] usb 4-1: Manufacturer: syz [ 2015.400954][ T5863] usb 2-1: device descriptor read/64, error -71 [ 2015.417323][T17360] usb 4-1: SerialNumber: syz [ 2015.442995][T17360] usb 4-1: config 0 descriptor?? [ 2015.511347][ T5863] usb usb2-port1: attempt power cycle [ 2016.100919][ T5863] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2016.147785][ T5863] usb 2-1: device descriptor read/8, error -71 [ 2016.390944][ T5863] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2016.424262][ T5863] usb 2-1: device descriptor read/8, error -71 [ 2016.541563][ T5863] usb usb2-port1: unable to enumerate USB device [ 2017.225968][ T8112] vivid-002: disconnect [ 2017.231334][ T8112] vivid-002: reconnect [ 2017.416821][ T8120] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8878'. [ 2017.426027][ T8120] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8878'. [ 2017.440213][ T8120] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8878'. [ 2017.461010][ T8120] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8878'. [ 2017.777691][ T5458] usb 4-1: USB disconnect, device number 13 [ 2018.100980][T17360] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2018.273067][T17360] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2018.284379][T17360] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2018.338627][T17360] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2018.390669][T17360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.961376][ T5458] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 2020.018994][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.029908][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.111022][ T5458] usb 4-1: device descriptor read/64, error -71 [ 2020.259775][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.268827][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.350952][ T5458] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 2020.481050][ T5458] usb 4-1: device descriptor read/64, error -71 [ 2020.591800][ T5458] usb usb4-port1: attempt power cycle [ 2020.692034][ T2966] usb 2-1: USB disconnect, device number 96 [ 2020.790054][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8895'. [ 2020.931422][ T5458] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 2020.974062][ T5458] usb 4-1: device descriptor read/8, error -71 [ 2021.249300][ T5458] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 2021.291694][ T5458] usb 4-1: device descriptor read/8, error -71 [ 2021.308774][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8900'. [ 2021.469563][ T5458] usb usb4-port1: unable to enumerate USB device [ 2022.333974][ T8203] netlink: 'syz.1.8904': attribute type 29 has an invalid length. [ 2022.396325][ T8204] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2022.531171][ T5863] usb 10-1: new full-speed USB device number 111 using dummy_hcd [ 2022.704723][ T5863] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2022.720883][ T5863] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2022.739075][ T5863] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2022.749330][ T5863] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2022.770178][ T5863] usb 10-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2022.782766][ T5863] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.794062][ T5863] usb 10-1: config 0 descriptor?? [ 2023.174529][ T8216] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8907'. [ 2023.272991][ T5863] asus 0003:0B05:1ABE.008D: hidraw0: USB HID v0.00 Device [HID 0b05:1abe] on usb-dummy_hcd.9-1/input0 [ 2023.323860][ T5863] asus 0003:0B05:1ABE.008D: Asus input not registered [ 2023.363199][ T5863] asus 0003:0B05:1ABE.008D: probe with driver asus failed with error -12 [ 2023.465079][ T8201] binder_alloc: 8200: pid 8200 spamming oneway? 1 buffers allocated for a total size of 4096 [ 2023.488226][ T8201] binder_alloc: 8200: pid 8200 spamming oneway? 2 buffers allocated for a total size of 5120 [ 2023.504607][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2023.515550][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.627841][T16623] usb 10-1: USB disconnect, device number 111 [ 2023.898196][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2023.913654][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.924111][ T5458] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2024.072960][ T8233] syz.3.8913: attempt to access beyond end of device [ 2024.072960][ T8233] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2024.280980][ T5458] usb 2-1: Using ep0 maxpacket: 16 [ 2024.311172][ T5458] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2024.333542][ T5458] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2024.405431][ T5458] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 2024.430912][ T5458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.451210][ T5458] usb 2-1: config 0 descriptor?? [ 2024.580022][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8914'. [ 2024.659220][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.668461][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.694015][ T5458] usb 2-1: string descriptor 0 read error: -71 [ 2024.730285][ T5458] usbhid 2-1:0.0: can't add hid device: -71 [ 2024.746812][ T5458] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2024.797867][ T5458] usb 2-1: USB disconnect, device number 97 [ 2026.123142][ T8265] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8921'. [ 2026.141561][ T8266] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8921'. [ 2026.360745][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.490461][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.541111][ T5863] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2026.728525][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 2026.746577][ T5863] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2026.750439][ T8274] syz.3.8924 (8274): drop_caches: 2 [ 2026.865834][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.875086][ T5863] usb 2-1: New USB device found, idVendor=16d0, idProduct=90b8, bcdDevice=de.8e [ 2026.899492][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.911009][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.933828][ T5863] usb 2-1: Product: syz [ 2026.979252][ T8278] netlink: 'syz.5.8925': attribute type 15 has an invalid length. [ 2026.995282][ T5863] usb 2-1: Manufacturer: syz [ 2027.004449][ T8274] syz.3.8924 (8274): drop_caches: 2 [ 2027.010302][ T5863] usb 2-1: SerialNumber: syz [ 2027.024573][ T5863] usb 2-1: config 0 descriptor?? [ 2027.597470][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2027.637273][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2028.225586][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8934'. [ 2028.365752][ T5863] usb 2-1: USB disconnect, device number 98 [ 2028.398803][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8936'. [ 2028.411200][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8936'. [ 2028.432533][ T3474] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2028.443002][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8936'. [ 2028.452909][ T3474] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2028.462462][ T3474] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2028.463628][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8936'. [ 2028.481790][ T3474] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2028.515416][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8935'. [ 2028.532651][ T8322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2029.279156][ T8335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8940'. [ 2029.334091][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2029.334110][ T30] audit: type=1326 audit(1755550279.489:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1dd8ebe9 code=0x7ffc0000 [ 2029.385592][ T30] audit: type=1326 audit(1755550279.489:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1dd8ebe9 code=0x7ffc0000 [ 2029.455239][ T8335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8940'. [ 2029.568727][ T30] audit: type=1326 audit(1755550279.489:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f1dd8d550 code=0x7ffc0000 [ 2029.571054][ T5458] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2029.596870][ T30] audit: type=1326 audit(1755550279.489:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1dd8e7eb code=0x7ffc0000 [ 2029.625559][ T30] audit: type=1326 audit(1755550279.489:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1dd8e7eb code=0x7ffc0000 [ 2029.648504][ C0] vkms_vblank_simulate: vblank timer overrun [ 2029.661829][ T30] audit: type=1326 audit(1755550279.519:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1dd8e7eb code=0x7ffc0000 [ 2029.684434][ C0] vkms_vblank_simulate: vblank timer overrun [ 2029.692285][ T30] audit: type=1326 audit(1755550279.519:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1dd8e7eb code=0x7ffc0000 [ 2029.715358][ C0] vkms_vblank_simulate: vblank timer overrun [ 2029.726288][ T30] audit: type=1326 audit(1755550279.599:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1dd8e7eb code=0x7ffc0000 [ 2029.750082][ C0] vkms_vblank_simulate: vblank timer overrun [ 2029.763850][ T30] audit: type=1326 audit(1755550279.679:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1dd8e7eb code=0x7ffc0000 [ 2029.786766][ C0] vkms_vblank_simulate: vblank timer overrun [ 2029.841021][ T5458] usb 4-1: Using ep0 maxpacket: 8 [ 2029.848541][ T5458] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2029.861878][ T5458] usb 4-1: config 0 has no interface number 0 [ 2029.880727][ T5458] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2029.895580][ T5458] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2029.909833][ T5458] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2029.924538][ T5458] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2029.938742][ T5458] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2029.949761][ T5458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.984737][ T5458] usb 4-1: config 0 descriptor?? [ 2029.998898][ T30] audit: type=1326 audit(1755550279.849:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1dd8e7eb code=0x7ffc0000 [ 2030.026128][ T5458] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2030.296334][ T5458] usb 4-1: USB disconnect, device number 18 [ 2030.296396][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 2030.397234][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.411931][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.426860][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.478950][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.495293][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.507824][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.520524][ T8340] netlink: 'syz.3.8940': attribute type 2 has an invalid length. [ 2030.535121][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.546313][ T5458] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2030.553845][ T8335] ldusb: No device or device unplugged -19 [ 2030.573374][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.586330][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.597046][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.608413][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.622018][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.742709][ T8376] FAULT_INJECTION: forcing a failure. [ 2030.742709][ T8376] name failslab, interval 1, probability 0, space 0, times 0 [ 2030.761702][ T8376] CPU: 1 UID: 0 PID: 8376 Comm: syz.9.8952 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 2030.761734][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2030.761747][ T8376] Call Trace: [ 2030.761755][ T8376] [ 2030.761764][ T8376] dump_stack_lvl+0x189/0x250 [ 2030.761793][ T8376] ? __pfx____ratelimit+0x10/0x10 [ 2030.761820][ T8376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2030.761842][ T8376] ? __pfx__printk+0x10/0x10 [ 2030.761868][ T8376] ? fs_reclaim_acquire+0x7d/0x100 [ 2030.761895][ T8376] ? rcu_is_watching+0x15/0xb0 [ 2030.761914][ T8376] ? __pfx___might_resched+0x10/0x10 [ 2030.761931][ T8376] ? lock_acquire+0x5f/0x360 [ 2030.761960][ T8376] should_fail_ex+0x414/0x560 [ 2030.761986][ T8376] should_failslab+0xa8/0x100 [ 2030.762014][ T8376] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2030.762039][ T8376] ? sk_prot_alloc+0x57/0x220 [ 2030.762059][ T8376] sk_prot_alloc+0x57/0x220 [ 2030.762076][ T8376] ? sk_alloc+0x24/0x370 [ 2030.762093][ T8376] sk_alloc+0x3a/0x370 [ 2030.762111][ T8376] inet_create+0x7a0/0x1000 [ 2030.762148][ T8376] ? inet_create+0x9c/0x1000 [ 2030.762175][ T8376] __sock_create+0x4b0/0x9f0 [ 2030.762205][ T8376] mptcp_pm_nl_add_addr_doit+0x4af/0x1460 [ 2030.762233][ T8376] ? __nla_validate_parse+0x2400/0x2d40 [ 2030.762264][ T8376] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 2030.762293][ T8376] ? __pfx___nla_validate_parse+0x10/0x10 [ 2030.762336][ T8376] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2030.762364][ T8376] genl_family_rcv_msg_doit+0x215/0x300 [ 2030.762388][ T8376] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2030.762416][ T8376] ? bpf_lsm_capable+0x9/0x20 [ 2030.762441][ T8376] ? security_capable+0x7e/0x2e0 [ 2030.762471][ T8376] genl_rcv_msg+0x60e/0x790 [ 2030.762492][ T8376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2030.762510][ T8376] ? __kasan_slab_alloc+0x6c/0x80 [ 2030.762535][ T8376] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 2030.762562][ T8376] ? __netlink_lookup+0xbd/0x810 [ 2030.762577][ T8376] ? rcu_is_watching+0x15/0xb0 [ 2030.762600][ T8376] netlink_rcv_skb+0x208/0x470 [ 2030.762627][ T8376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2030.762649][ T8376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2030.762680][ T8376] ? lock_release+0x4b/0x3e0 [ 2030.762707][ T8376] ? down_read+0x1ad/0x2e0 [ 2030.762725][ T8376] genl_rcv+0x28/0x40 [ 2030.762744][ T8376] netlink_unicast+0x82c/0x9e0 [ 2030.762772][ T8376] ? __pfx_netlink_unicast+0x10/0x10 [ 2030.762797][ T8376] ? netlink_sendmsg+0x642/0xb30 [ 2030.762823][ T8376] ? skb_put+0x11b/0x210 [ 2030.762841][ T8376] netlink_sendmsg+0x805/0xb30 [ 2030.762874][ T8376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2030.762901][ T8376] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2030.762920][ T8376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2030.762941][ T8376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2030.762965][ T8376] __sock_sendmsg+0x219/0x270 [ 2030.762988][ T8376] ____sys_sendmsg+0x505/0x830 [ 2030.763008][ T8376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2030.763028][ T8376] ? import_iovec+0x74/0xa0 [ 2030.763050][ T8376] ___sys_sendmsg+0x21f/0x2a0 [ 2030.763071][ T8376] ? __pfx____sys_sendmsg+0x10/0x10 [ 2030.763105][ T8376] ? __fget_files+0x2a/0x420 [ 2030.763122][ T8376] ? __fget_files+0x3a0/0x420 [ 2030.763153][ T8376] __x64_sys_sendmsg+0x19b/0x260 [ 2030.763174][ T8376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2030.763197][ T8376] ? __pfx_ksys_write+0x10/0x10 [ 2030.763220][ T8376] ? rcu_is_watching+0x15/0xb0 [ 2030.763240][ T8376] ? rcu_is_watching+0x15/0xb0 [ 2030.763260][ T8376] do_syscall_64+0xfa/0x3b0 [ 2030.763288][ T8376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.763307][ T8376] ? clear_bhb_loop+0x60/0xb0 [ 2030.763328][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.763348][ T8376] RIP: 0033:0x7fcdfff8ebe9 [ 2030.763366][ T8376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2030.763384][ T8376] RSP: 002b:00007fce00e55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2030.763407][ T8376] RAX: ffffffffffffffda RBX: 00007fce001b6090 RCX: 00007fcdfff8ebe9 [ 2030.763422][ T8376] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 2030.763435][ T8376] RBP: 00007fce00e55090 R08: 0000000000000000 R09: 0000000000000000 [ 2030.763448][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2030.763460][ T8376] R13: 00007fce001b6128 R14: 00007fce001b6090 R15: 00007fce002dfa28 [ 2030.763481][ T8376] [ 2032.339019][ T8397] __nla_validate_parse: 2 callbacks suppressed [ 2032.339035][ T8397] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8958'. [ 2032.711269][T24045] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2032.892355][T24045] usb 4-1: Using ep0 maxpacket: 8 [ 2032.900073][T24045] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2032.908907][T24045] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2032.920245][T24045] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2032.929514][T24045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.559964][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.573258][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.367583][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8966'. [ 2034.380156][ T8428] binder: 8427:8428 ioctl c0306201 0 returned -14 [ 2035.221021][ T5458] usb 10-1: new low-speed USB device number 112 using dummy_hcd [ 2035.383503][ T5458] usb 10-1: config 0 has no interfaces? [ 2035.389429][ T5458] usb 10-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2035.399521][ T5458] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.418117][ T5458] usb 10-1: config 0 descriptor?? [ 2035.463648][ T5458] usb 4-1: USB disconnect, device number 19 [ 2035.643104][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8968'. [ 2035.673100][T24045] usb 10-1: USB disconnect, device number 112 [ 2035.811044][ T5458] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2035.962589][ T5458] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2035.976830][ T5458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.010277][ T5458] usb 4-1: config 0 descriptor?? [ 2036.021887][ T5458] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2036.725048][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2036.725068][ T30] audit: type=1326 audit(1755550286.879:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c558ebe9 code=0x7ffc0000 [ 2036.725657][ T8463] IPVS: length: 4096 != 24 [ 2036.731438][ T30] audit: type=1326 audit(1755550286.879:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f44c558ebe9 code=0x7ffc0000 [ 2036.782247][ C0] vkms_vblank_simulate: vblank timer overrun [ 2036.899520][ T30] audit: type=1326 audit(1755550286.879:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c558ebe9 code=0x7ffc0000 [ 2036.925022][ T30] audit: type=1326 audit(1755550286.879:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f44c558ebe9 code=0x7ffc0000 [ 2036.988054][ T30] audit: type=1326 audit(1755550287.049:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c558ebe9 code=0x7ffc0000 [ 2037.010875][ C0] vkms_vblank_simulate: vblank timer overrun [ 2037.067373][ T30] audit: type=1326 audit(1755550287.049:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c558ebe9 code=0x7ffc0000 [ 2037.130931][T22311] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 2037.147945][ T30] audit: type=1326 audit(1755550287.049:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f44c558ebe9 code=0x7ffc0000 [ 2037.194997][ T8467] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8977'. [ 2037.209132][ T30] audit: type=1326 audit(1755550287.049:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c558ebe9 code=0x7ffc0000 [ 2037.233758][ T8466] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8977'. [ 2037.245331][ T30] audit: type=1326 audit(1755550287.049:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.8.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c558ebe9 code=0x7ffc0000 [ 2037.291022][T22311] usb 10-1: Using ep0 maxpacket: 16 [ 2037.304946][T22311] usb 10-1: config 0 has an invalid interface number: 107 but max is 0 [ 2037.325605][T22311] usb 10-1: config 0 has no interface number 0 [ 2037.334261][T22311] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2037.348684][T22311] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2037.384591][T22311] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 2037.397117][T22311] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2037.406198][T22311] usb 10-1: Product: syz [ 2037.414991][T22311] usb 10-1: Manufacturer: syz [ 2037.425576][T22311] usb 10-1: SerialNumber: syz [ 2037.440149][T22311] usb 10-1: config 0 descriptor?? [ 2037.455311][T22311] keyspan 10-1:0.107: Keyspan 4 port adapter converter detected [ 2037.465249][T22311] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 81 [ 2037.482400][T22311] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 1 [ 2037.527838][T22311] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2037.608380][T22311] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 2 [ 2037.668570][T22311] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2037.678430][T22311] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 4 [ 2037.790969][ T2966] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2037.965442][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8969'. [ 2037.986003][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.996039][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.030234][T22311] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2038.051450][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8969'. [ 2038.262481][T22311] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 6 [ 2038.341021][ T2966] usb 2-1: Using ep0 maxpacket: 8 [ 2038.444097][ T2966] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2038.464392][T22311] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2038.601459][ T2966] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2038.640634][ T2966] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2038.691696][ T2966] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2038.883510][ T2966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.951863][ T2966] usbtmc 2-1:16.0: bulk endpoints not found [ 2039.064178][ T30] audit: type=1326 audit(1755550289.209:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.8.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c558ebe9 code=0x7ffc0000 [ 2039.191391][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8982'. [ 2039.316424][ T8490] veth1: entered promiscuous mode [ 2039.370749][ T8490] veth1: left promiscuous mode [ 2039.788598][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8983'. [ 2039.829671][ T8493] tipc: Cannot configure node identity twice [ 2039.997603][ T5458] usb 4-1: USB disconnect, device number 20 [ 2040.056696][ T8501] vlan2: entered promiscuous mode [ 2040.062689][ T8501] vlan2: entered allmulticast mode [ 2040.069232][ T8501] hsr_slave_1: entered allmulticast mode [ 2040.190419][ T8509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8987'. [ 2040.449272][ T8511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8988'. [ 2040.459707][ T8511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8988'. [ 2040.526787][ T2966] usb 10-1: USB disconnect, device number 113 [ 2040.537878][ T2966] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2040.566394][ T2966] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2040.621724][ T2966] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2040.644730][ T8520] syz.5.8990 (8520): drop_caches: 2 [ 2040.654232][ T2966] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2040.654469][ T8520] veth1_to_bond: entered allmulticast mode [ 2040.678868][ T2966] keyspan 10-1:0.107: device disconnected [ 2040.784849][ T8519] veth1_to_bond: left allmulticast mode [ 2040.797084][ T8526] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:16x16 (0x38416761, 4, 0, 0, 0) [ 2041.194076][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8994'. [ 2041.205274][ T8536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8994'. [ 2041.219674][ T8536] netlink: 'syz.3.8994': attribute type 7 has an invalid length. [ 2041.253237][ T8536] netlink: 'syz.3.8994': attribute type 8 has an invalid length. [ 2041.261523][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8994'. [ 2041.316868][ T8536] erspan0: entered promiscuous mode [ 2041.324475][ T8536] batadv_slave_1: entered promiscuous mode [ 2041.333641][ T8536] erspan0: left promiscuous mode [ 2041.342136][ T8536] batadv_slave_1: left promiscuous mode [ 2041.466547][ T2966] usb 2-1: USB disconnect, device number 99 [ 2041.971280][ T2966] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2042.165923][ T2966] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 2042.208711][ T2966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2042.246007][ T2966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 2042.276065][ T2966] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2042.313749][ T2966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.346514][ T2966] usb 2-1: config 0 descriptor?? [ 2042.360084][ T8543] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2042.375603][ T2966] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2042.477470][ T8559] fuse: Bad value for 'fd' [ 2042.599371][ T2966] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 2042.621426][ T2966] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2042.639233][ T2966] usb 2-1: MIDIStreaming interface descriptor not found [ 2042.668104][ T8562] netlink: 'syz.5.9001': attribute type 1 has an invalid length. [ 2042.740665][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2042.761335][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2042.819588][ T2966] usb 2-1: USB disconnect, device number 100 [ 2043.851160][ T2966] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2044.011117][ T2966] usb 2-1: Using ep0 maxpacket: 8 [ 2044.018606][ T2966] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2044.027033][ T2966] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2044.049053][ T2966] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2044.066790][ T2966] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2044.079381][ T2966] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2044.091608][ T2966] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2044.111738][ T2966] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2044.134992][ T2966] usb 2-1: config 168 interface 0 has no altsetting 0 [ 2044.161965][ T2966] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2044.178717][ T2966] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2044.192790][ T2966] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2044.207657][ T2966] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2044.221261][ T2966] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2044.234005][ T2966] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2044.246934][ T2966] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2044.350624][ T2966] usb 2-1: config 168 interface 0 has no altsetting 0 [ 2044.429982][ T2966] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2044.440086][ T2966] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2044.494322][ T2966] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2044.532325][ T2966] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2044.551240][ T2966] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2044.596698][ T2966] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2044.616159][ T2966] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2044.632250][ T2966] usb 2-1: config 168 interface 0 has no altsetting 0 [ 2044.748675][ T2966] usb 2-1: string descriptor 0 read error: -22 [ 2044.756045][ T2966] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2044.769276][ T2966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.798714][ T2966] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2045.020325][ T5462] usb 2-1: USB disconnect, device number 101 [ 2045.426817][ T8600] dvmrp0: entered allmulticast mode [ 2045.435176][ T8600] dvmrp0: left allmulticast mode [ 2045.629348][ T8600] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2045.951842][T24045] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2046.124185][T24045] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2046.136650][T24045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2046.141924][ T2966] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2046.218973][T24045] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2046.242983][T24045] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2046.280991][T24045] usb 4-1: Manufacturer: syz [ 2046.291149][T24045] usb 4-1: config 0 descriptor?? [ 2046.325175][ T2966] usb 2-1: config 0 has no interfaces? [ 2046.409251][ T2966] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2046.448656][ T2966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.467653][T24045] rc_core: IR keymap rc-hauppauge not found [ 2046.480373][T24045] Registered IR keymap rc-empty [ 2046.489469][ T2966] usb 2-1: Product: syz [ 2046.496855][ T2966] usb 2-1: Manufacturer: syz [ 2046.511423][T24045] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2046.527444][ T2966] usb 2-1: SerialNumber: syz [ 2046.534989][ T2966] usb 2-1: config 0 descriptor?? [ 2046.547978][ T8627] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2046.582809][T24045] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input215 [ 2046.626128][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 2046.642955][ T2966] usb 4-1: USB disconnect, device number 21 [ 2047.211010][T24045] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 2047.372455][T24045] usb 10-1: Using ep0 maxpacket: 16 [ 2047.385571][T24045] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.416666][T24045] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2047.426791][T24045] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.435732][T24045] usb 10-1: Product: syz [ 2047.441209][T24045] usb 10-1: Manufacturer: syz [ 2047.446161][T24045] usb 10-1: SerialNumber: syz [ 2047.457001][T24045] usb 10-1: config 0 descriptor?? [ 2047.465675][T24045] dm9601 10-1:0.0: probe with driver dm9601 failed with error -22 [ 2047.475365][T24045] sr9700 10-1:0.0: probe with driver sr9700 failed with error -22 [ 2047.716400][ T8651] binder: 8648:8651 ioctl c0306201 200000000100 returned -11 [ 2047.725227][ T8651] fuse: Bad value for 'fd' [ 2047.794722][ T8656] ptrace attach of "./syz-executor exec"[2613] was attempted by "./syz-executor exec"[8656] [ 2047.810940][ T8656] FAULT_INJECTION: forcing a failure. [ 2047.810940][ T8656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2047.825022][ T8656] CPU: 1 UID: 0 PID: 8656 Comm: syz.9.9021 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 2047.825053][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2047.825066][ T8656] Call Trace: [ 2047.825074][ T8656] [ 2047.825083][ T8656] dump_stack_lvl+0x189/0x250 [ 2047.825113][ T8656] ? __pfx____ratelimit+0x10/0x10 [ 2047.825140][ T8656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2047.825163][ T8656] ? __pfx__printk+0x10/0x10 [ 2047.825187][ T8656] ? __might_fault+0xb0/0x130 [ 2047.825217][ T8656] ? rcu_is_watching+0x15/0xb0 [ 2047.825237][ T8656] should_fail_ex+0x414/0x560 [ 2047.825271][ T8656] _copy_from_user+0x2d/0xb0 [ 2047.825291][ T8656] ___sys_sendmsg+0x158/0x2a0 [ 2047.825310][ T8656] ? __pfx____sys_sendmsg+0x10/0x10 [ 2047.825336][ T8656] ? __fget_files+0x2a/0x420 [ 2047.825349][ T8656] ? __fget_files+0x3a0/0x420 [ 2047.825365][ T8656] __x64_sys_sendmsg+0x19b/0x260 [ 2047.825380][ T8656] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2047.825398][ T8656] ? __pfx_ksys_write+0x10/0x10 [ 2047.825417][ T8656] ? rcu_is_watching+0x15/0xb0 [ 2047.825433][ T8656] ? rcu_is_watching+0x15/0xb0 [ 2047.825456][ T8656] do_syscall_64+0xfa/0x3b0 [ 2047.825478][ T8656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2047.825493][ T8656] ? clear_bhb_loop+0x60/0xb0 [ 2047.825510][ T8656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2047.825526][ T8656] RIP: 0033:0x7fcdfff8ebe9 [ 2047.825540][ T8656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2047.825554][ T8656] RSP: 002b:00007fce00e34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2047.825573][ T8656] RAX: ffffffffffffffda RBX: 00007fce001b6180 RCX: 00007fcdfff8ebe9 [ 2047.825585][ T8656] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2047.825596][ T8656] RBP: 00007fce00e34090 R08: 0000000000000000 R09: 0000000000000000 [ 2047.825606][ T8656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2047.825615][ T8656] R13: 00007fce001b6218 R14: 00007fce001b6180 R15: 00007fce002dfa28 [ 2047.825631][ T8656] [ 2048.822692][ T8665] __nla_validate_parse: 1 callbacks suppressed [ 2048.822709][ T8665] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9027'. [ 2048.844403][ T2966] usb 2-1: USB disconnect, device number 102 [ 2048.983237][ T8671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.993427][ T8671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.190978][ T2966] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2049.340914][ T2966] usb 2-1: Using ep0 maxpacket: 8 [ 2049.347491][ T2966] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2049.355822][ T2966] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.366273][ T2966] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2049.379584][ T2966] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2049.388936][ T2966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.404606][ T2966] usbtmc 2-1:16.0: bulk endpoints not found [ 2049.922756][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.932034][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.970276][ T2966] usb 10-1: USB disconnect, device number 114 [ 2050.031705][ T8684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2050.111182][T16623] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2050.274996][T16623] usb 4-1: Using ep0 maxpacket: 8 [ 2050.283635][T16623] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2050.293077][T16623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.301341][T16623] usb 4-1: Product: syz [ 2050.305629][T16623] usb 4-1: Manufacturer: syz [ 2050.312240][T16623] usb 4-1: SerialNumber: syz [ 2050.318671][T16623] usb 4-1: config 0 descriptor?? [ 2050.497301][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.506291][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2051.217848][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2051.259985][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2052.305123][ T2966] usb 2-1: USB disconnect, device number 103 [ 2052.678713][T16623] usb read operation failed. (-71) [ 2052.700229][T16623] usb write operation failed. (-71) [ 2052.716878][T16623] usb write operation failed. (-71) [ 2052.832836][T16623] usb write operation failed. (-71) [ 2052.850167][T16623] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 2052.852433][T16623] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 2052.852461][T16623] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 2053.106070][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.127587][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.192084][ T8728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2054.302056][T24045] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2054.461162][T24045] usb 2-1: Using ep0 maxpacket: 16 [ 2054.471485][T24045] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2054.483596][T24045] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2054.493789][T24045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.560907][T24045] usb 2-1: Product: syz [ 2054.575961][T24045] usb 2-1: Manufacturer: syz [ 2054.581612][T24045] usb 2-1: SerialNumber: syz [ 2054.601984][T24045] usb 2-1: config 0 descriptor?? [ 2054.654298][T24045] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2054.678522][ T8746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9050'. [ 2054.738663][T24045] usb 2-1: Detected FT232R [ 2054.887878][T24045] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2054.896050][T24045] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2054.903643][T24045] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 2054.912280][T24045] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2055.169572][T24045] usb 2-1: USB disconnect, device number 104 [ 2055.221710][T24045] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2055.256173][T24045] ftdi_sio 2-1:0.0: device disconnected [ 2055.487735][ T8762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9055'. [ 2055.871592][ T8774] netlink: 'syz.1.9056': attribute type 10 has an invalid length. [ 2055.906531][ T8774] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2055.939207][ T8772] wg1: entered promiscuous mode [ 2055.951091][ T8772] wg1: entered allmulticast mode [ 2056.220942][ T5863] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 2056.260893][ T5462] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2056.381064][ T5863] usb 10-1: Using ep0 maxpacket: 16 [ 2056.734600][ T5462] usb 2-1: Using ep0 maxpacket: 32 [ 2056.741944][ T5863] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2056.752024][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.761198][ T5863] usb 10-1: Product: syz [ 2056.765748][ T5863] usb 10-1: Manufacturer: syz [ 2056.771165][ T5863] usb 10-1: SerialNumber: syz [ 2056.797627][ T5462] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 2056.850307][ T5462] usb 2-1: config 0 has no interface number 0 [ 2056.871348][ T5462] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2056.921175][ T5462] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2056.939635][ T5462] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2056.953573][ T5462] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2056.979926][ T5462] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2056.989386][ T8776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2057.007407][ T8776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2057.018249][ T5462] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2057.028772][ T8776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2057.039852][ T8776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2057.068692][ T5462] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2057.079247][ T5462] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 2057.091222][ T5462] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 26232, setting to 1024 [ 2057.107915][ T5462] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2057.166033][ T5462] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2057.175830][ T5462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.196008][ T5462] usb 2-1: Product: syz [ 2057.232947][ T5462] usb 2-1: Manufacturer: syz [ 2057.247381][ T5462] usb 2-1: SerialNumber: syz [ 2057.285500][ T5462] usb 2-1: config 0 descriptor?? [ 2057.301875][ T8772] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 2057.310749][ T5462] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 2057.321519][ T5462] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 2057.548276][ T5863] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2057.587097][ T5863] snd-usb-audio 10-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 2057.617410][ T5863] usb 10-1: USB disconnect, device number 115 [ 2057.649856][ T2101] udevd[2101]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2058.145947][ T8799] vlan3: entered promiscuous mode [ 2058.151812][ T8799] bridge0: entered promiscuous mode [ 2058.157277][ T8799] vlan3: entered allmulticast mode [ 2058.166048][ T8799] bridge0: entered allmulticast mode [ 2058.185002][ T8801] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 2058.192533][ T8801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2058.215405][ T8798] bond0: (slave team0): Releasing backup interface [ 2058.224752][ T8798] bridge_slave_0: left allmulticast mode [ 2058.233041][ T8798] bridge_slave_0: left promiscuous mode [ 2058.239059][ T8801] vhci_hcd vhci_hcd.0: Device attached [ 2058.247897][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.260362][ T8798] bridge0: mtu less than device minimum [ 2058.266850][ T8798] bridge_slave_1: left allmulticast mode [ 2058.275971][ T8798] bridge_slave_1: left promiscuous mode [ 2058.283601][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.296230][ T8798] bridge0: mtu less than device minimum [ 2058.305896][ T8798] bond0: (slave bond_slave_0): Releasing backup interface [ 2058.326892][ T8798] bond0: (slave bond_slave_1): Releasing backup interface [ 2058.340074][ T8798] team0: Port device team_slave_0 removed [ 2058.351978][ T8798] team0: Port device team_slave_1 removed [ 2058.369588][ T8798] macsec0: left allmulticast mode [ 2058.388207][ T8798] macsec0: left promiscuous mode [ 2058.406047][ T8798] bridge0: port 3(macsec0) entered disabled state [ 2058.460932][ T5462] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 2058.746216][ T2625] usb 2-1: USB disconnect, device number 105 [ 2059.020545][ T8802] vhci_hcd: connection reset by peer [ 2059.046123][ T5627] vhci_hcd: stop threads [ 2059.056792][ T5627] vhci_hcd: release socket [ 2059.064702][ T5627] vhci_hcd: disconnect device [ 2059.248696][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2059.284456][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2059.507245][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9070'. [ 2059.550630][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9071'. [ 2059.676501][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9071'. [ 2059.690982][ T8830] bridge_slave_1: left allmulticast mode [ 2059.729627][ T8830] bridge_slave_1: left promiscuous mode [ 2059.764805][ T8830] bridge0: port 2(bridge_slave_1) entered disabled state [ 2059.781668][ T8830] bridge_slave_0: left allmulticast mode [ 2059.787808][ T8830] bridge_slave_0: left promiscuous mode [ 2059.795724][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.963157][ T8837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2059.973140][ T8837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.230919][T22311] usb 10-1: new full-speed USB device number 116 using dummy_hcd [ 2060.238953][ T5458] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 2060.368592][ T8846] B: renamed from veth0 (while UP) [ 2060.394507][ T5458] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2060.408255][ T5458] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2060.421851][T22311] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2060.438547][ T5458] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2060.448171][T22311] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2060.461675][ T5458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.471140][T22311] usb 10-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2060.534924][T22311] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2060.545743][T22311] usb 10-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 2060.557252][T22311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.573313][T22311] usb 10-1: config 0 descriptor?? [ 2060.718639][ T5458] usb 2-1: usb_control_msg returned -71 [ 2060.724641][ T5458] usbtmc 2-1:16.0: can't read capabilities [ 2060.736944][ T5458] usb 2-1: USB disconnect, device number 106 [ 2061.001236][T22311] hid-rmi 0003:06CB:81A7.008E: ignoring exceeding usage max [ 2061.015208][T22311] hid-rmi 0003:06CB:81A7.008E: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.9-1/input0 [ 2061.180202][ T8851] input: syz1 as /devices/virtual/input/input217 [ 2061.213728][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2061.234304][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2061.285498][T17360] usb 10-1: USB disconnect, device number 116 [ 2061.642954][ T2625] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2061.803885][ T2625] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2061.831355][ T2625] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2061.866892][ T2625] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2061.889721][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9082'. [ 2061.899959][ T2625] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2061.917977][ T2625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.932517][ T8858] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2062.186752][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9083'. [ 2062.197224][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9083'. [ 2062.981704][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9079'. [ 2063.011158][ T8882] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9079'. [ 2063.289231][ T8885] tipc: Enabled bearer , priority 0 [ 2063.299579][ T8885] syzkaller0: entered promiscuous mode [ 2063.305651][ T8885] syzkaller0: entered allmulticast mode [ 2063.561106][ T5462] vhci_hcd: vhci_device speed not set [ 2064.042558][ T8883] tipc: Resetting bearer [ 2064.059968][ T8883] tipc: Disabling bearer [ 2064.482423][ T2625] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 2064.494474][ T2625] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input218 [ 2064.524237][ T2625] usb 2-1: USB disconnect, device number 107 [ 2064.530554][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2064.669507][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9091'. [ 2066.000888][ T5462] usb 10-1: new low-speed USB device number 117 using dummy_hcd [ 2066.167019][ T8926] netlink: 240 bytes leftover after parsing attributes in process `syz.8.9097'. [ 2066.186104][ T5462] usb 10-1: string descriptor 0 read error: -22 [ 2066.194559][ T5462] usb 10-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 2066.237706][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9098'. [ 2066.261829][ T5462] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.377099][ T5462] usb 10-1: config 0 descriptor?? [ 2066.712239][ T5462] usbtest 10-1:0.0: FX2 device [ 2066.717082][ T5462] usbtest 10-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 2066.803777][ T8935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2066.920622][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2066.929421][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2066.940692][ T8944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2066.964769][ T8944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2067.027771][T17360] usb 10-1: USB disconnect, device number 117 [ 2067.151135][ T2640] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2067.311140][ T2640] usb 2-1: Using ep0 maxpacket: 32 [ 2067.319052][ T2640] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2067.328586][ T2640] usb 2-1: config 4 has an invalid interface number: 10 but max is 0 [ 2067.343952][ T2640] usb 2-1: config 4 has no interface number 0 [ 2067.361222][ T2640] usb 2-1: config 4 interface 10 has no altsetting 0 [ 2067.396793][ T2640] usb 2-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 2067.406221][ T2640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.440899][ T2640] usb 2-1: Product: syz [ 2067.525098][ T2640] usb 2-1: Manufacturer: syz [ 2067.529765][ T2640] usb 2-1: SerialNumber: syz [ 2067.798237][ T2640] radio-si470x 2-1:4.10: could not find interrupt in endpoint [ 2067.810126][ T2640] radio-si470x 2-1:4.10: probe with driver radio-si470x failed with error -5 [ 2067.860657][ T2640] usbhid 2-1:4.10: couldn't find an input interrupt endpoint [ 2067.890186][ T2640] usb 2-1: USB disconnect, device number 108 [ 2068.150938][ T5462] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 2068.238489][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.248221][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.262660][ T2640] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2068.291037][ T5462] usb 10-1: device descriptor read/64, error -71 [ 2068.420958][ T2640] usb 2-1: Using ep0 maxpacket: 8 [ 2068.428181][ T2640] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 2068.436845][ T2640] usb 2-1: config 0 has no interface number 1 [ 2068.443207][ T2640] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 2068.452793][ T2640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.464245][ T2640] usb 2-1: config 0 descriptor?? [ 2068.531103][ T5462] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 2068.661144][ T5462] usb 10-1: device descriptor read/64, error -71 [ 2068.674796][ T2640] qcserial 2-1:0.2: Qualcomm USB modem converter detected [ 2068.784171][ T5462] usb usb10-port1: attempt power cycle [ 2068.863380][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.873029][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.900492][T17360] usb 2-1: USB disconnect, device number 109 [ 2068.920682][T17360] qcserial 2-1:0.2: device disconnected [ 2069.130960][ T5462] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 2069.151711][ T5462] usb 10-1: device descriptor read/8, error -71 [ 2069.393434][ T5462] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 2069.421469][ T5462] usb 10-1: device descriptor read/8, error -71 [ 2069.531181][ T5462] usb usb10-port1: unable to enumerate USB device [ 2071.129350][ T9027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9125'. [ 2071.239110][ T9029] netlink: 'syz.5.9122': attribute type 13 has an invalid length. [ 2072.052772][ T9029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2072.123882][ T9029] 8021q: adding VLAN 0 to HW filter on device team0 [ 2072.189043][ T9029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2072.785298][ T9066] netlink: 'syz.3.9136': attribute type 10 has an invalid length. [ 2072.971032][ T9073] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2073.084552][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9137'. [ 2073.200028][ T9077] input: syz0 as /devices/virtual/input/input219 [ 2073.970003][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9142'. [ 2074.035575][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9142'. [ 2074.501010][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 2074.501035][ T30] audit: type=1326 audit(1755550324.599:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.5.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094438ebe9 code=0x7ffc0000 [ 2074.531670][ T9110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9146'. [ 2074.740899][ T5462] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2074.758821][ T30] audit: type=1326 audit(1755550324.599:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.5.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094438ebe9 code=0x7ffc0000 [ 2074.916442][ T5462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2074.928751][ T5462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2074.952286][ T5462] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 2074.983708][ T5462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.007023][ T5462] usb 2-1: config 0 descriptor?? [ 2075.365509][ T9107] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9145'. [ 2075.622588][ T9134] fuse: Unknown parameter 'rο' [ 2075.941094][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9153'. [ 2076.644825][ T9148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.662806][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.685668][ T9148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.701285][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.870531][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.897257][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2077.277984][ T9160] cgroup: fork rejected by pids controller in /syz9 [ 2077.831558][ T30] audit: type=1326 audit(1755550327.979:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.5.9163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f094438ebe9 code=0x0 [ 2077.881966][ T9250] input: syz1 as /devices/virtual/input/input220 [ 2077.939372][ T5462] usbhid 2-1:0.0: can't add hid device: -71 [ 2077.996387][ T5462] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2078.021002][ T5462] usb 2-1: USB disconnect, device number 110 [ 2078.489073][ T9278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2078.498592][ T9278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2079.035502][ T9284] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9169'. [ 2079.547183][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.559765][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2079.771310][ T2640] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2084.981124][ T2640] usb 2-1: device descriptor read/64, error -110 [ 2085.221096][ T2640] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2085.351001][ T2640] usb 2-1: device descriptor read/64, error -32 [ 2085.471814][ T2640] usb usb2-port1: attempt power cycle [ 2085.706754][ T9298] kAFS: unable to lookup cell '' [ 2085.713081][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9173'. [ 2085.812383][ T2640] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2085.842395][ T2640] usb 2-1: device descriptor read/8, error -32 [ 2085.951466][ T2640] raw-gadget.1 gadget.1: failed to queue suspend event [ 2085.960505][ T2640] raw-gadget.1 gadget.1: failed to queue reset event [ 2086.031705][ T2640] raw-gadget.1 gadget.1: failed to queue resume event [ 2086.091007][ T2640] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2086.111239][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 2086.118969][ T2640] usb 2-1: device descriptor read/8, error -32 [ 2086.231301][ T2640] raw-gadget.1 gadget.1: failed to queue suspend event [ 2086.238584][ T2640] usb usb2-port1: unable to enumerate USB device [ 2092.961109][T24472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2092.968636][T24472] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2092.976635][T24472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2092.985698][T24472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2092.994043][T24472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2094.044485][T24472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2094.052299][T24472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2094.060091][T24472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2094.068754][T24472] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2094.076640][T24472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2094.388466][ T2640] usb 6-1: USB disconnect, device number 71 [ 2094.505028][ T3738] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2094.512715][ T3738] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2094.520206][ T3738] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2094.528200][ T3738] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2094.535861][ T3738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2095.091131][ T3738] Bluetooth: hci3: command tx timeout [ 2095.520968][ T5773] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2095.528373][ T5773] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2095.536228][ T5773] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2095.544312][ T5773] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2095.554187][ T5773] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2096.131108][ T5773] Bluetooth: hci2: command tx timeout [ 2096.371167][ T5773] Bluetooth: hci4: command 0x0406 tx timeout [ 2096.611023][T24472] Bluetooth: hci6: command tx timeout [ 2097.171100][T24472] Bluetooth: hci3: command tx timeout [ 2097.571408][T24472] Bluetooth: hci7: command tx timeout [ 2098.211122][T24472] Bluetooth: hci2: command tx timeout [ 2098.691104][T24472] Bluetooth: hci6: command tx timeout [ 2099.251083][T24472] Bluetooth: hci3: command tx timeout [ 2099.413802][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.420241][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.651091][T24472] Bluetooth: hci7: command tx timeout [ 2100.291244][T24472] Bluetooth: hci2: command tx timeout [ 2100.771044][T24472] Bluetooth: hci6: command tx timeout [ 2101.341266][T24472] Bluetooth: hci3: command tx timeout [ 2101.487702][ T5773] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2101.495075][ T5773] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2101.503106][ T5773] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2101.511918][ T5773] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2101.519637][ T5773] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2101.730989][ T5773] Bluetooth: hci7: command tx timeout [ 2102.371266][ T5773] Bluetooth: hci2: command tx timeout [ 2102.860998][ T5773] Bluetooth: hci6: command tx timeout [ 2103.571338][ T5773] Bluetooth: hci8: command tx timeout [ 2103.811441][ T5773] Bluetooth: hci7: command tx timeout [ 2105.651220][ T5773] Bluetooth: hci8: command tx timeout [ 2107.731087][ T5773] Bluetooth: hci8: command tx timeout [ 2109.811255][ T5773] Bluetooth: hci8: command tx timeout [ 2110.545472][ T5233] udevd[5233]: worker [2099] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 2114.773150][T16623] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2114.793642][T16623] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 2114.804804][T16623] usb 4-1: USB disconnect, device number 22 [ 2153.099201][T24472] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2153.108755][T24472] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2153.116353][T24472] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2153.125008][T24472] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2153.134168][T24472] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2154.690364][T24472] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2154.699547][T24472] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2154.707246][T24472] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2154.714865][T24472] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2154.722722][T31315] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2154.723421][T24472] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2154.731246][T31315] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2154.742159][T24472] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2154.757045][T24472] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2154.765499][T24472] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2155.171267][T24472] Bluetooth: hci9: command tx timeout [ 2155.582651][ T3738] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2155.590559][ T3738] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2155.598599][ T3738] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2155.606726][ T3738] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2155.616454][ T3738] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2156.771022][ T3738] Bluetooth: hci10: command tx timeout [ 2156.850951][ T3738] Bluetooth: hci11: command tx timeout [ 2157.251161][ T3738] Bluetooth: hci9: command tx timeout [ 2157.650967][ T3738] Bluetooth: hci12: command tx timeout [ 2158.851114][ T3738] Bluetooth: hci10: command tx timeout [ 2158.931069][ T3738] Bluetooth: hci11: command tx timeout [ 2159.341039][ T3738] Bluetooth: hci9: command tx timeout [ 2159.741077][ T3738] Bluetooth: hci12: command tx timeout [ 2160.853926][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.860274][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.941090][ T3738] Bluetooth: hci10: command tx timeout [ 2161.011069][ T3738] Bluetooth: hci11: command tx timeout [ 2161.411201][ T3738] Bluetooth: hci9: command tx timeout [ 2161.811136][ T3738] Bluetooth: hci12: command tx timeout [ 2162.088702][T24472] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2162.096204][T24472] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2162.105081][T24472] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2162.113663][T24472] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2162.122456][T24472] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2163.011107][T24472] Bluetooth: hci10: command tx timeout [ 2163.090936][T24472] Bluetooth: hci11: command tx timeout [ 2163.892084][T24472] Bluetooth: hci12: command tx timeout [ 2164.220971][T24472] Bluetooth: hci13: command tx timeout [ 2166.301018][T24472] Bluetooth: hci13: command tx timeout [ 2168.371035][T24472] Bluetooth: hci13: command tx timeout [ 2170.451008][T24472] Bluetooth: hci13: command tx timeout [ 2213.138843][ T3738] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2213.146477][ T3738] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2213.154235][ T3738] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2213.162861][ T3738] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2213.170681][ T3738] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2215.261894][T24472] Bluetooth: hci14: command tx timeout [ 2215.271296][ T3738] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2215.279124][ T3738] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2215.284285][ T5773] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 2215.287041][ T3738] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 2215.298753][ T5773] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 2215.301931][ T3738] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 2215.309370][ T5773] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 2215.316406][ T3738] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 2215.327016][ T5773] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 2215.353567][ T5773] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 2216.163418][ T5773] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 2216.172306][ T5773] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 2216.179950][ T5773] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 2216.188545][ T5773] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 2216.196845][ T5773] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 2217.331077][ T9357] Bluetooth: hci14: command tx timeout [ 2217.411127][ T9357] Bluetooth: hci16: command tx timeout [ 2217.411706][ T9328] Bluetooth: hci15: command tx timeout [ 2218.211215][ T9328] Bluetooth: hci17: command tx timeout [ 2219.251166][ T9328] Bluetooth: hci3: command 0x0406 tx timeout [ 2219.251207][ T9358] Bluetooth: hci7: command 0x0406 tx timeout [ 2219.257412][ T9328] Bluetooth: hci2: command 0x0406 tx timeout [ 2219.268735][ T9358] Bluetooth: hci6: command 0x0406 tx timeout [ 2219.411000][ T3738] Bluetooth: hci14: command tx timeout [ 2219.490927][ T3738] Bluetooth: hci16: command tx timeout [ 2219.500950][ T3738] Bluetooth: hci15: command tx timeout [ 2220.290971][ T3738] Bluetooth: hci17: command tx timeout [ 2221.490880][ T3738] Bluetooth: hci14: command tx timeout [ 2221.571092][ T3738] Bluetooth: hci15: command tx timeout [ 2221.576839][ T3738] Bluetooth: hci16: command tx timeout [ 2221.651533][ T31] INFO: task syz.9.7707:3464 blocked for more than 143 seconds. [ 2221.659489][ T31] Not tainted 6.17.0-rc2-syzkaller #0 [ 2221.665801][ T31] Blocked by coredump. [ 2221.670406][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2221.679343][ T31] task:syz.9.7707 state:D stack:26832 pid:3464 tgid:3464 ppid:2613 task_flags:0x40044c flags:0x00004006 [ 2221.692093][ T31] Call Trace: [ 2221.695406][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2221.698460][ T31] __schedule+0x1798/0x4cc0 [ 2221.703572][ T31] ? stack_trace_save+0x9c/0xe0 [ 2221.708555][ T31] ? stack_depot_save_flags+0x40/0x860 [ 2221.714758][ T31] ? __pfx___schedule+0x10/0x10 [ 2221.719676][ T31] ? schedule+0x91/0x360 [ 2221.728904][ T31] ? rcu_is_watching+0x15/0xb0 [ 2221.737168][ T31] ? lock_release+0x4b/0x3e0 [ 2221.770900][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2221.788393][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2221.795260][ T31] schedule+0x165/0x360 [ 2221.799481][ T31] schedule_preempt_disabled+0x13/0x30 [ 2221.805726][ T31] __mutex_lock+0x7e6/0x1350 [ 2221.810477][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2221.815617][ T31] ? tun_chr_close+0x3e/0x1c0 [ 2221.820342][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2221.825579][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 2221.831312][ T31] tun_chr_close+0x3e/0x1c0 [ 2221.836059][ T31] __fput+0x44c/0xa70 [ 2221.840239][ T31] task_work_run+0x1d4/0x260 [ 2221.845257][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2221.850607][ T31] ? kmem_cache_free+0x18f/0x400 [ 2221.856579][ T31] do_exit+0x6b5/0x2300 [ 2221.860872][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2221.866828][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2221.871971][ T31] ? __pfx_do_exit+0x10/0x10 [ 2221.876693][ T31] ? rcu_is_watching+0x15/0xb0 [ 2221.881830][ T31] do_group_exit+0x21c/0x2d0 [ 2221.886937][ T31] get_signal+0x1286/0x1340 [ 2221.891824][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 2221.897433][ T31] ? __pfx_get_timespec64+0x10/0x10 [ 2221.903423][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2221.909641][ T31] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 2221.915997][ T31] ? rcu_is_watching+0x15/0xb0 [ 2221.920984][ T31] exit_to_user_mode_loop+0x75/0x110 [ 2221.926439][ T31] do_syscall_64+0x2bd/0x3b0 [ 2221.931219][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2221.937511][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2221.942571][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2221.948688][ T31] RIP: 00fb:0x294e66b3c7c44cb4 [ 2221.953677][ T31] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 2221.962562][ T31] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 2221.970972][ T31] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 2221.979003][ T31] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 2221.987637][ T31] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 2221.995774][ T31] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018 [ 2222.003946][ T31] [ 2222.007074][ T31] INFO: task kworker/u8:13:5628 blocked for more than 143 seconds. [ 2222.015147][ T31] Not tainted 6.17.0-rc2-syzkaller #0 [ 2222.021358][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2222.030358][ T31] task:kworker/u8:13 state:D stack:22472 pid:5628 tgid:5628 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2222.043345][ T31] Workqueue: netns cleanup_net [ 2222.048179][ T31] Call Trace: [ 2222.051602][ T31] [ 2222.054565][ T31] __schedule+0x1798/0x4cc0 [ 2222.059262][ T31] ? __pfx___schedule+0x10/0x10 [ 2222.064303][ T31] ? schedule+0x91/0x360 [ 2222.068565][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.073500][ T31] ? lock_release+0x4b/0x3e0 [ 2222.078207][ T31] ? wq_worker_sleeping+0x63/0x250 [ 2222.083688][ T31] schedule+0x165/0x360 [ 2222.087893][ T31] schedule_preempt_disabled+0x13/0x30 [ 2222.093426][ T31] __mutex_lock+0x7e6/0x1350 [ 2222.098058][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2222.102982][ T31] ? cfg80211_pernet_exit+0x19/0x140 [ 2222.108880][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2222.114502][ T31] ? __pfx___might_resched+0x10/0x10 [ 2222.120157][ T31] ? lock_release+0x4b/0x3e0 [ 2222.125083][ T31] ? net_generic+0x1e/0x240 [ 2222.129707][ T31] ? idr_destroy+0x218/0x290 [ 2222.135017][ T31] cfg80211_pernet_exit+0x19/0x140 [ 2222.140381][ T31] ops_undo_list+0x49a/0x990 [ 2222.145408][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 2222.150668][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2222.156165][ T31] cleanup_net+0x4c5/0x800 [ 2222.160788][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 2222.166130][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.171270][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2222.177030][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2222.183182][ T31] process_scheduled_works+0xade/0x17b0 [ 2222.188870][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2222.195476][ T31] worker_thread+0x8a0/0xda0 [ 2222.200205][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2222.206664][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2222.212875][ T31] ? __kthread_parkme+0x7b/0x200 [ 2222.217863][ T31] kthread+0x70e/0x8a0 [ 2222.222075][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2222.227205][ T31] ? __pfx_kthread+0x10/0x10 [ 2222.232055][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.237422][ T31] ? __pfx_kthread+0x10/0x10 [ 2222.242169][ T31] ret_from_fork+0x3f9/0x770 [ 2222.246866][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2222.252400][ T31] ? __switch_to_asm+0x39/0x70 [ 2222.257209][ T31] ? __switch_to_asm+0x33/0x70 [ 2222.262205][ T31] ? __pfx_kthread+0x10/0x10 [ 2222.266849][ T31] ret_from_fork_asm+0x1a/0x30 [ 2222.271909][ T31] [ 2222.275226][ T31] INFO: task kworker/u8:15:7535 blocked for more than 143 seconds. [ 2222.286696][ T31] Not tainted 6.17.0-rc2-syzkaller #0 [ 2222.295408][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.295461][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.309990][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2222.318799][ T31] task:kworker/u8:15 state:D stack:26024 pid:7535 tgid:7535 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2222.331379][ T31] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 2222.338736][ T31] Call Trace: [ 2222.342768][ T31] [ 2222.345825][ T31] __schedule+0x1798/0x4cc0 [ 2222.350337][ T31] ? __pfx___schedule+0x10/0x10 [ 2222.355350][ T31] ? schedule+0x91/0x360 [ 2222.359786][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.364690][ T31] ? lock_release+0x4b/0x3e0 [ 2222.369930][ T31] ? wq_worker_sleeping+0x63/0x250 [ 2222.371302][T24472] Bluetooth: hci17: command tx timeout [ 2222.375652][ T31] schedule+0x165/0x360 [ 2222.384994][ T31] schedule_preempt_disabled+0x13/0x30 [ 2222.390521][ T31] __mutex_lock+0x7e6/0x1350 [ 2222.395315][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2222.400292][ T31] ? udp_tunnel_nic_device_sync_work+0x29/0xa50 [ 2222.406782][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2222.412025][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.416891][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.421858][ T31] udp_tunnel_nic_device_sync_work+0x29/0xa50 [ 2222.427988][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.433530][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2222.439294][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2222.445644][ T31] process_scheduled_works+0xade/0x17b0 [ 2222.451912][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2222.457947][ T31] worker_thread+0x8a0/0xda0 [ 2222.462749][ T31] kthread+0x70e/0x8a0 [ 2222.466953][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2222.472338][ T31] ? __pfx_kthread+0x10/0x10 [ 2222.476972][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.481914][ T31] ? __pfx_kthread+0x10/0x10 [ 2222.486702][ T31] ret_from_fork+0x3f9/0x770 [ 2222.492280][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2222.497532][ T31] ? __switch_to_asm+0x39/0x70 [ 2222.502430][ T31] ? __switch_to_asm+0x33/0x70 [ 2222.507314][ T31] ? __pfx_kthread+0x10/0x10 [ 2222.512292][ T31] ret_from_fork_asm+0x1a/0x30 [ 2222.517213][ T31] [ 2222.520291][ T31] INFO: task syz.3.9162:9211 blocked for more than 144 seconds. [ 2222.528605][ T31] Not tainted 6.17.0-rc2-syzkaller #0 [ 2222.534646][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2222.543550][ T31] task:syz.3.9162 state:D stack:27016 pid:9211 tgid:9210 ppid:4328 task_flags:0x400140 flags:0x00004004 [ 2222.556429][ T31] Call Trace: [ 2222.560046][ T31] [ 2222.563292][ T31] __schedule+0x1798/0x4cc0 [ 2222.568018][ T31] ? __pfx___schedule+0x10/0x10 [ 2222.573213][ T31] ? schedule+0x91/0x360 [ 2222.577774][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.582747][ T31] ? lock_release+0x4b/0x3e0 [ 2222.587473][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2222.594116][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2222.601050][ T31] schedule+0x165/0x360 [ 2222.605488][ T31] schedule_preempt_disabled+0x13/0x30 [ 2222.611531][ T31] __mutex_lock+0x7e6/0x1350 [ 2222.616250][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2222.621568][ T31] ? __netdev_update_features+0xcb1/0x1be0 [ 2222.627617][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2222.632900][ T31] ? team_fix_features+0x225/0x250 [ 2222.638156][ T31] ? team_fix_features+0x34/0x250 [ 2222.643775][ T31] __netdev_update_features+0xcb1/0x1be0 [ 2222.649727][ T31] ? kasan_save_track+0x4f/0x80 [ 2222.655186][ T31] ? kasan_save_track+0x3e/0x80 [ 2222.660352][ T31] ? __pfx___netdev_update_features+0x10/0x10 [ 2222.666716][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2222.672055][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.677503][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.682868][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2222.689048][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2222.696062][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.701610][ T31] __netdev_update_features+0xd02/0x1be0 [ 2222.707474][ T31] ? __pfx___netdev_update_features+0x10/0x10 [ 2222.714408][ T31] ? cfg80211_netdev_notifier_call+0x1ee/0x1450 [ 2222.720969][ T31] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 2222.727707][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2222.733147][ T31] netdev_update_features+0x6d/0xe0 [ 2222.738543][ T31] ? __pfx_netdev_update_features+0x10/0x10 [ 2222.745728][ T31] ? bond_netdev_event+0xd9/0xe80 [ 2222.751627][ T31] ? netdevice_event+0x2dc/0x8a0 [ 2222.757077][ T31] macsec_notify+0x2f5/0x660 [ 2222.762448][ T31] ? __pfx_macsec_notify+0x10/0x10 [ 2222.768013][ T31] notifier_call_chain+0x1b6/0x3e0 [ 2222.774870][ T31] netdev_change_features+0x8d/0xd0 [ 2222.780446][ T31] ? __pfx_netdev_change_features+0x10/0x10 [ 2222.786931][ T31] ? __team_compute_features+0x456/0x4c0 [ 2222.793289][ T31] ? __team_compute_features+0x23/0x4c0 [ 2222.799196][ T31] team_device_event+0x400/0x600 [ 2222.805157][ T31] notifier_call_chain+0x1b6/0x3e0 [ 2222.810520][ T31] netdev_features_change+0x85/0xc0 [ 2222.816118][ T31] ? __pfx_netdev_features_change+0x10/0x10 [ 2222.822316][ T31] ? security_capable+0x7e/0x2e0 [ 2222.827594][ T31] dev_ethtool+0x1536/0x19b0 [ 2222.832962][ T31] ? __pfx_dev_ethtool+0x10/0x10 [ 2222.838276][ T31] ? dev_load+0x21/0x1f0 [ 2222.843856][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.849371][ T31] ? rcu_is_watching+0x15/0xb0 [ 2222.855180][ T31] ? lock_release+0x4b/0x3e0 [ 2222.859943][ T31] ? dev_load+0x21/0x1f0 [ 2222.864389][ T31] dev_ioctl+0x392/0x1150 [ 2222.869820][ T31] sock_do_ioctl+0x22c/0x300 [ 2222.875524][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2222.881030][ T31] ? do_futex+0x333/0x420 [ 2222.886114][ T31] sock_ioctl+0x576/0x790 [ 2222.890991][ T31] ? lock_release+0x4b/0x3e0 [ 2222.895726][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 2222.901005][ T31] ? __fget_files+0x2a/0x420 [ 2222.905981][ T31] ? __fget_files+0x3a0/0x420 [ 2222.911112][ T31] ? __fget_files+0x2a/0x420 [ 2222.916290][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2222.921746][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 2222.926731][ T31] __se_sys_ioctl+0xf9/0x170 [ 2222.934268][ T31] do_syscall_64+0xfa/0x3b0 [ 2222.939103][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.945625][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2222.950481][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.956854][ T31] RIP: 0033:0x7f6f1dd8ebe9 [ 2222.961511][ T31] RSP: 002b:00007f6f1bff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2222.970179][ T31] RAX: ffffffffffffffda RBX: 00007f6f1dfb5fa0 RCX: 00007f6f1dd8ebe9 [ 2222.978815][ T31] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2222.987292][ T31] RBP: 00007f6f1de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2222.995622][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2223.004043][ T31] R13: 00007f6f1dfb6038 R14: 00007f6f1dfb5fa0 R15: 00007f6f1e0dfa28 [ 2223.012777][ T31] [ 2223.015919][ T31] INFO: task syz.3.9162:9220 blocked for more than 144 seconds. [ 2223.024008][ T31] Not tainted 6.17.0-rc2-syzkaller #0 [ 2223.030071][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2223.040047][ T31] task:syz.3.9162 state:D stack:27592 pid:9220 tgid:9210 ppid:4328 task_flags:0x400140 flags:0x00004004 [ 2223.052238][ T31] Call Trace: [ 2223.055551][ T31] [ 2223.059002][ T31] __schedule+0x1798/0x4cc0 [ 2223.063670][ T31] ? __pfx___schedule+0x10/0x10 [ 2223.068816][ T31] ? schedule+0x91/0x360 [ 2223.073477][ T31] ? rcu_is_watching+0x15/0xb0 [ 2223.078282][ T31] ? lock_release+0x4b/0x3e0 [ 2223.083045][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2223.089248][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2223.095989][ T31] schedule+0x165/0x360 [ 2223.100290][ T31] schedule_preempt_disabled+0x13/0x30 [ 2223.106282][ T31] __mutex_lock+0x7e6/0x1350 [ 2223.111588][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2223.116672][ T31] ? __tun_chr_ioctl+0x37a/0x1df0 [ 2223.122151][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2223.127227][ T31] ? lock_release+0x4b/0x3e0 [ 2223.131969][ T31] ? __might_fault+0xb0/0x130 [ 2223.136689][ T31] ? __might_fault+0xcc/0x130 [ 2223.141600][ T31] __tun_chr_ioctl+0x37a/0x1df0 [ 2223.146495][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2223.151976][ T31] ? __fget_files+0x2a/0x420 [ 2223.156609][ T31] ? __fget_files+0x3a0/0x420 [ 2223.162649][ T31] ? __fget_files+0x2a/0x420 [ 2223.167284][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2223.172426][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2223.177989][ T31] __se_sys_ioctl+0xf9/0x170 [ 2223.183700][ T31] do_syscall_64+0xfa/0x3b0 [ 2223.188282][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2223.194711][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2223.199700][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2223.205885][ T31] RIP: 0033:0x7f6f1dd8ebe9 [ 2223.210318][ T31] RSP: 002b:00007f6f1bfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2223.219069][ T31] RAX: ffffffffffffffda RBX: 00007f6f1dfb6090 RCX: 00007f6f1dd8ebe9 [ 2223.227268][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000006 [ 2223.235357][ T31] RBP: 00007f6f1de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2223.243599][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2223.251734][ T31] R13: 00007f6f1dfb6128 R14: 00007f6f1dfb6090 R15: 00007f6f1e0dfa28 [ 2223.259733][ T31] [ 2223.263305][ T31] INFO: task syz.3.9162:9232 blocked for more than 144 seconds. [ 2223.271023][ T31] Not tainted 6.17.0-rc2-syzkaller #0 [ 2223.276927][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2223.286028][ T31] task:syz.3.9162 state:D stack:27816 pid:9232 tgid:9210 ppid:4328 task_flags:0x400140 flags:0x00004004 [ 2223.298375][ T31] Call Trace: [ 2223.301762][ T31] [ 2223.304714][ T31] __schedule+0x1798/0x4cc0 [ 2223.309308][ T31] ? __pfx___schedule+0x10/0x10 [ 2223.314428][ T31] ? schedule+0x91/0x360 [ 2223.318924][ T31] ? rcu_is_watching+0x15/0xb0 [ 2223.323789][ T31] ? lock_release+0x4b/0x3e0 [ 2223.328420][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2223.334547][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2223.340963][ T31] schedule+0x165/0x360 [ 2223.345240][ T31] schedule_preempt_disabled+0x13/0x30 [ 2223.350861][ T31] __mutex_lock+0x7e6/0x1350 [ 2223.355654][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 2223.360895][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2223.366475][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 2223.372144][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2223.377642][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2223.383232][ T31] ? lock_release+0x4b/0x3e0 [ 2223.387873][ T31] ? bpf_lsm_capable+0x9/0x20 [ 2223.392739][ T31] ? security_capable+0x7e/0x2e0 [ 2223.397991][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 2223.403084][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2223.408334][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2223.414103][ T31] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 2223.422072][ T31] netlink_rcv_skb+0x208/0x470 [ 2223.426961][ T31] ? rcu_is_watching+0x15/0xb0 [ 2223.431816][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2223.437474][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2223.442865][ T31] netlink_unicast+0x82c/0x9e0 [ 2223.448001][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2223.453623][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2223.458624][ T31] ? skb_put+0x11b/0x210 [ 2223.463028][ T31] netlink_sendmsg+0x805/0xb30 [ 2223.468192][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2223.473650][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2223.478613][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2223.484118][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2223.489622][ T31] __sock_sendmsg+0x219/0x270 [ 2223.494561][ T31] ____sys_sendmsg+0x505/0x830 [ 2223.499385][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2223.504796][ T31] ? import_iovec+0x74/0xa0 [ 2223.509438][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 2223.514205][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 2223.519524][ T31] ? futex_wake+0x4b2/0x560 [ 2223.524168][ T31] ? __fget_files+0x2a/0x420 [ 2223.528785][ T31] ? __fget_files+0x3a0/0x420 [ 2223.533975][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 2223.539130][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2223.544904][ T31] ? rcu_is_watching+0x15/0xb0 [ 2223.549721][ T31] ? rcu_is_watching+0x15/0xb0 [ 2223.555157][ T31] do_syscall_64+0xfa/0x3b0 [ 2223.559713][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2223.565981][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2223.570675][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2223.576782][ T31] RIP: 0033:0x7f6f1dd8ebe9 [ 2223.581485][ T31] RSP: 002b:00007f6f1bfb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2223.590004][ T31] RAX: ffffffffffffffda RBX: 00007f6f1dfb6180 RCX: 00007f6f1dd8ebe9 [ 2223.598278][ T31] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 2223.606631][ T31] RBP: 00007f6f1de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2223.614865][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2223.623388][ T31] R13: 00007f6f1dfb6218 R14: 00007f6f1dfb6180 R15: 00007f6f1e0dfa28 [ 2223.631835][ T31] [ 2223.634952][ T31] INFO: lockdep is turned off. [ 2223.639735][ T31] NMI backtrace for cpu 1 [ 2223.639752][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 2223.639767][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2223.639774][ T31] Call Trace: [ 2223.639782][ T31] [ 2223.639788][ T31] dump_stack_lvl+0x189/0x250 [ 2223.639809][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2223.639823][ T31] ? __pfx__printk+0x10/0x10 [ 2223.639841][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2223.639856][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2223.639870][ T31] ? __pfx__printk+0x10/0x10 [ 2223.639886][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2223.639905][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2223.639922][ T31] watchdog+0xf93/0xfe0 [ 2223.639939][ T31] ? watchdog+0x1de/0xfe0 [ 2223.639955][ T31] kthread+0x70e/0x8a0 [ 2223.639970][ T31] ? __pfx_watchdog+0x10/0x10 [ 2223.639985][ T31] ? __pfx_kthread+0x10/0x10 [ 2223.639999][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2223.640013][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2223.640028][ T31] ? __pfx_kthread+0x10/0x10 [ 2223.640042][ T31] ret_from_fork+0x3f9/0x770 [ 2223.640055][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2223.640068][ T31] ? __switch_to_asm+0x39/0x70 [ 2223.640088][ T31] ? __switch_to_asm+0x33/0x70 [ 2223.640102][ T31] ? __pfx_kthread+0x10/0x10 [ 2223.640116][ T31] ret_from_fork_asm+0x1a/0x30 [ 2223.640135][ T31] [ 2223.640139][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2223.662910][T31315] Bluetooth: hci15: command tx timeout [ 2223.665726][ C0] NMI backtrace for cpu 0 [ 2223.665743][ C0] CPU: 0 UID: 0 PID: 31315 Comm: kworker/u9:3 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 2223.665769][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2223.665780][ C0] Workqueue: hci15 hci_cmd_timeout [ 2223.665812][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 2223.665832][ C0] Code: 9c 70 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 dc 05 d4 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 17 3d 2d 06 cc 44 89 f9 80 e1 07 38 c1 [ 2223.665846][ C0] RSP: 0018:ffffc9000b55f310 EFLAGS: 00000002 [ 2223.665860][ C0] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000 [ 2223.665872][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 2223.665883][ C0] RBP: 00000000000003f8 R08: ffff8880248b8237 R09: 1ffff11004917046 [ 2223.665895][ C0] R10: dffffc0000000000 R11: ffffffff854f0d80 R12: dffffc0000000000 [ 2223.665907][ C0] R13: ffffffff99afa8c2 R14: ffffffff99def3e0 R15: 0000000000000000 [ 2223.665918][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 2223.665932][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2223.665944][ C0] CR2: 0000556edd8aa4b0 CR3: 00000000308d0000 CR4: 00000000003526f0 [ 2223.665960][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2223.665970][ C0] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2223.665981][ C0] Call Trace: [ 2223.665988][ C0] [ 2223.665996][ C0] serial8250_console_write+0x1410/0x1ba0 [ 2223.666016][ C0] ? format_decode+0x5ee/0xe30 [ 2223.666034][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 2223.666051][ C0] ? console_flush_all+0x13a/0xc40 [ 2223.666069][ C0] ? rcu_is_watching+0x15/0xb0 [ 2223.666085][ C0] ? lock_acquire+0x5f/0x360 [ 2223.666108][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 2223.666126][ C0] ? console_flush_all+0x13a/0xc40 [ 2223.666143][ C0] ? console_flush_all+0x13a/0xc40 [ 2223.666161][ C0] console_flush_all+0x725/0xc40 [ 2223.666179][ C0] ? console_flush_all+0x13a/0xc40 [ 2223.666199][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 2223.666240][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2223.666261][ C0] console_unlock+0xc4/0x270 [ 2223.666278][ C0] ? __pfx_console_unlock+0x10/0x10 [ 2223.666293][ C0] ? vprintk_emit+0x444/0x7a0 [ 2223.666310][ C0] ? vprintk_emit+0x444/0x7a0 [ 2223.666325][ C0] ? vprintk_emit+0x444/0x7a0 [ 2223.666341][ C0] vprintk_emit+0x5b7/0x7a0 [ 2223.666356][ C0] ? vprintk_emit+0x444/0x7a0 [ 2223.666372][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 2223.666389][ C0] ? __pfx___calc_delta+0x10/0x10 [ 2223.666411][ C0] ? update_load_avg+0x572/0x1880 [ 2223.666427][ C0] _printk+0xcf/0x120 [ 2223.666450][ C0] ? __pfx__printk+0x10/0x10 [ 2223.666469][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2223.666490][ C0] bt_err+0x10b/0x160 [ 2223.666506][ C0] ? rcu_is_watching+0x15/0xb0 [ 2223.666522][ C0] ? __pfx_bt_err+0x10/0x10 [ 2223.666537][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2223.666552][ C0] ? rcu_is_watching+0x15/0xb0 [ 2223.666567][ C0] ? lock_acquire+0x5f/0x360 [ 2223.666600][ C0] hci_cmd_timeout+0xff/0x1e0 [ 2223.666618][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2223.666633][ C0] process_scheduled_works+0xade/0x17b0 [ 2223.666657][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2223.666678][ C0] worker_thread+0x8a0/0xda0 [ 2223.666713][ C0] kthread+0x70e/0x8a0 [ 2223.666732][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2223.666748][ C0] ? __pfx_kthread+0x10/0x10 [ 2223.666773][ C0] ? rcu_is_watching+0x15/0xb0 [ 2223.666788][ C0] ? __pfx_kthread+0x10/0x10 [ 2223.666806][ C0] ret_from_fork+0x3f9/0x770 [ 2223.666824][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2223.666842][ C0] ? __switch_to_asm+0x39/0x70 [ 2223.666861][ C0] ? __switch_to_asm+0x33/0x70 [ 2223.666879][ C0] ? __pfx_kthread+0x10/0x10 [ 2223.666897][ C0] ret_from_fork_asm+0x1a/0x30 [ 2223.666922][ C0] [ 2223.667740][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2223.667756][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 2223.667778][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2223.667789][ T31] Call Trace: [ 2223.667797][ T31] [ 2223.667806][ T31] dump_stack_lvl+0x99/0x250 [ 2223.667829][ T31] ? __asan_memcpy+0x40/0x70 [ 2223.667850][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2223.667872][ T31] ? __pfx__printk+0x10/0x10 [ 2223.667900][ T31] vpanic+0x281/0x750 [ 2223.667921][ T31] ? __pfx_vpanic+0x10/0x10 [ 2223.667941][ T31] ? rcu_is_watching+0x15/0xb0 [ 2223.667958][ T31] ? preempt_schedule+0xae/0xc0 [ 2223.667981][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2223.668007][ T31] panic+0xb9/0xc0 [ 2223.668026][ T31] ? __pfx_panic+0x10/0x10 [ 2223.668047][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2223.668075][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2223.668098][ T31] watchdog+0xfd2/0xfe0 [ 2223.668124][ T31] ? watchdog+0x1de/0xfe0 [ 2223.668149][ T31] kthread+0x70e/0x8a0 [ 2223.668172][ T31] ? __pfx_watchdog+0x10/0x10 [ 2223.668195][ T31] ? __pfx_kthread+0x10/0x10 [ 2223.668216][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2223.668238][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2223.668261][ T31] ? __pfx_kthread+0x10/0x10 [ 2223.668283][ T31] ret_from_fork+0x3f9/0x770 [ 2223.668302][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2223.668322][ T31] ? __switch_to_asm+0x39/0x70 [ 2223.668353][ T31] ? __switch_to_asm+0x33/0x70 [ 2223.668376][ T31] ? __pfx_kthread+0x10/0x10 [ 2223.668398][ T31] ret_from_fork_asm+0x1a/0x30 [ 2223.668426][ T31] [ 2223.670592][ T31] Kernel Offset: disabled