last executing test programs: 9m38.028546671s ago: executing program 3 (id=5508): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xa, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m37.930557997s ago: executing program 3 (id=5510): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}], 0x5) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000000500000a28000000000a030000010000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000040), 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0xffff, 0xffff, @remote, 0x3}, 0x1c) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES8=r1, @ANYBLOB="010000000000000700", @ANYRES16=r1, @ANYRES8, @ANYRES16=r2, @ANYRESDEC], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x8, 0x43, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 9m36.890058365s ago: executing program 3 (id=5514): socket$inet6_sctp(0xa, 0x5, 0x84) flock(0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10820, 0x400}}, 0x20}}, 0x4084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xe4, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @remote, 0x6}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x24}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x19b713ad}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8ce8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x232}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000240)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x5, 0x3a, '0', 0x3a, 'GPL\x00', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x50]}, 0x2f) r7 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @empty, 0xd}, {0xa, 0x4e20, 0xfffffffc, @mcast1}, r8, 0x20000}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r9, r7}}, 0x18) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, &(0x7f0000003780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000000c0)={0x60, 0xffffffffffffffda, r10, {{0xffffffffffff9d56, 0x0, 0xfb4, 0x100, 0x5, 0x101, 0xff, 0xd}}}, 0x60) 9m35.996946521s ago: executing program 3 (id=5517): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000000)='./file0/../file0/../file0/../file0/file0/file0\x00') 9m35.827819567s ago: executing program 3 (id=5518): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x20) r2 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4}, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8000000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) shutdown(r1, 0x20) (async) fcntl$dupfd(r0, 0x0, r0) (async) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4}, 0x0) (async) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8000000) (async) 9m35.466150003s ago: executing program 3 (id=5519): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @private1, 0xf}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000c00"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000008001"], 0x80}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000d00000000008000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000c038000000dc5a0ed20407f2bd0690bfe106dae015ddf047a63e388c"], 0x80}}, 0x40000) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x1e0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x0, 0x1, 0x1000}}}}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x4, 0xffffffff, 0x0, 0x6, 0x7, 0x4}}, {0xc, 0x2, [0x7ff, 0x7f, 0x3, 0x3]}}, {{0x1c, 0x1, {0x5, 0x6, 0x7, 0x8, 0x2, 0x9, 0x80000, 0x7}}, {0x12, 0x2, [0x8, 0x2, 0x3, 0x1, 0x1ff, 0xf36, 0x4]}}, {{0x1c, 0x1, {0x8, 0x10, 0x4, 0x6, 0x2, 0x10000, 0x1, 0x3}}, {0xa, 0x2, [0x4, 0x3, 0x40]}}, {{0x1c, 0x1, {0x1, 0xf, 0x5, 0x200, 0x1, 0x200, 0x27e3437d, 0x3}}, {0xa, 0x2, [0x8, 0x7, 0x6]}}, {{0x9, 0x1, {0x9, 0x50, 0x1, 0x5, 0x1, 0x1, 0xfff, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x7, 0x40, 0x0, 0x0, 0x1, 0x61dd, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x33, 0x7]}}, {{0x1c, 0x1, {0x5, 0x5, 0x6, 0x0, 0x0, 0x6, 0x7fffffff, 0x6}}, {0x10, 0x2, [0x0, 0xfff0, 0xa0e7, 0xffff, 0x5, 0x319]}}, {{0x1c, 0x1, {0x30, 0x9, 0x0, 0xfffffffb, 0x1, 0xf, 0x7fffffff, 0x6}}, {0x10, 0x2, [0x3, 0xe7ff, 0x5, 0x1, 0x4, 0x4]}}, {{0x1c, 0x1, {0x6, 0xff, 0x0, 0x4e9, 0x1, 0x6, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x5, 0x7e2, 0x3, 0x0, 0xfffffcd1, 0x6, 0x2}}, {0x8, 0x2, [0x1, 0xfe]}}]}]}, 0x1e0}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x2, 0x400, 0xffffffff, {}, {}, {0x1, 0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "1423a19da0a2dd28"}}, 0x48}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 9m34.876098425s ago: executing program 32 (id=5519): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @private1, 0xf}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000c00"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000008001"], 0x80}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000d00000000008000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000c038000000dc5a0ed20407f2bd0690bfe106dae015ddf047a63e388c"], 0x80}}, 0x40000) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x1e0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x0, 0x1, 0x1000}}}}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x4, 0xffffffff, 0x0, 0x6, 0x7, 0x4}}, {0xc, 0x2, [0x7ff, 0x7f, 0x3, 0x3]}}, {{0x1c, 0x1, {0x5, 0x6, 0x7, 0x8, 0x2, 0x9, 0x80000, 0x7}}, {0x12, 0x2, [0x8, 0x2, 0x3, 0x1, 0x1ff, 0xf36, 0x4]}}, {{0x1c, 0x1, {0x8, 0x10, 0x4, 0x6, 0x2, 0x10000, 0x1, 0x3}}, {0xa, 0x2, [0x4, 0x3, 0x40]}}, {{0x1c, 0x1, {0x1, 0xf, 0x5, 0x200, 0x1, 0x200, 0x27e3437d, 0x3}}, {0xa, 0x2, [0x8, 0x7, 0x6]}}, {{0x9, 0x1, {0x9, 0x50, 0x1, 0x5, 0x1, 0x1, 0xfff, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x7, 0x40, 0x0, 0x0, 0x1, 0x61dd, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x33, 0x7]}}, {{0x1c, 0x1, {0x5, 0x5, 0x6, 0x0, 0x0, 0x6, 0x7fffffff, 0x6}}, {0x10, 0x2, [0x0, 0xfff0, 0xa0e7, 0xffff, 0x5, 0x319]}}, {{0x1c, 0x1, {0x30, 0x9, 0x0, 0xfffffffb, 0x1, 0xf, 0x7fffffff, 0x6}}, {0x10, 0x2, [0x3, 0xe7ff, 0x5, 0x1, 0x4, 0x4]}}, {{0x1c, 0x1, {0x6, 0xff, 0x0, 0x4e9, 0x1, 0x6, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x5, 0x7e2, 0x3, 0x0, 0xfffffcd1, 0x6, 0x2}}, {0x8, 0x2, [0x1, 0xfe]}}]}]}, 0x1e0}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x2, 0x400, 0xffffffff, {}, {}, {0x1, 0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "1423a19da0a2dd28"}}, 0x48}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 2m34.285146103s ago: executing program 5 (id=7022): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unshare(0x2c060000) unshare(0x22020600) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) io_uring_setup(0xfc6, &(0x7f0000000480)={0x0, 0x799a, 0x0, 0x0, 0xfffffffc}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) 2m33.243622194s ago: executing program 5 (id=7025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x1f032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0xc2, &(0x7f0000000580)={@local, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "91749c", 0x88, 0x21, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@hopopts={0x33, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x7}]}, @dstopts={0xff, 0x1, '\x00', [@pad1, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x6c}, @dstopts={0xc, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x4, 0x0, "34ca96", 0x9, "1f8e33"}}}}}}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000340)={0x166422e6, 0x3, 0xe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3) 2m31.055855732s ago: executing program 5 (id=7029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff004) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a000000000000000000000a0000010900010073797a31000000001c0004801800018008000100647570000c0002800800014000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c001480080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 2m29.306808635s ago: executing program 5 (id=7030): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x3c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async, rerun: 32) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/../file0/../file0/file1\x00', 0x80901) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x4, 0x9, 0x7fff, 0x7, 0x5176}, &(0x7f00000000c0)=0x98) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m29.086025049s ago: executing program 5 (id=7032): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty, 0x3}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0xa4, &(0x7f0000000440)={0x0, 0xce53, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(r4, &(0x7f00000001c0)='./cgroup\x00', 0x8901) move_mount(r4, 0x0, r5, 0x0, 0x46) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x8, @empty, 0x9}}}, 0xa0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x42, 0x6000, @fd=r3, 0x7, 0x0, 0x0, 0x2, 0x0, {0x0, r6}}) openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m28.758684977s ago: executing program 5 (id=7037): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x1f032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0xb2, &(0x7f0000000580)={@local, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "91749c", 0x78, 0x21, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@hopopts={0x33, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x7}]}, @dstopts={0xff}, @hopopts={0x6c}, @dstopts={0xc, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x4, 0x0, "34ca96", 0x9, "1f8e33"}}}}}}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x600, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "ed7775e65eafd28c998ed46d479658881ccacd0c245ad4d444213a00202509c5accfa410081d82ce2a4905411dee1154155efeb6111658c4224f35d6d4f57692", 0x22}, 0x48, 0xfffffffffffffffd) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3) 2m28.455863297s ago: executing program 33 (id=7037): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x1f032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0xb2, &(0x7f0000000580)={@local, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "91749c", 0x78, 0x21, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@hopopts={0x33, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x7}]}, @dstopts={0xff}, @hopopts={0x6c}, @dstopts={0xc, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x4, 0x0, "34ca96", 0x9, "1f8e33"}}}}}}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x600, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "ed7775e65eafd28c998ed46d479658881ccacd0c245ad4d444213a00202509c5accfa410081d82ce2a4905411dee1154155efeb6111658c4224f35d6d4f57692", 0x22}, 0x48, 0xfffffffffffffffd) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3) 9.103538828s ago: executing program 6 (id=7608): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1a33, 0x80002) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x8}, 0xc) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101102, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7, 0x10, 0x8, 0x2a4, {{0x7, 0x4, 0x0, 0x39, 0x1c, 0x65, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0xa2, [@loopback]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x1c) r9 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1f, &(0x7f00000001c0)=@raw=[@generic={0x37, 0x4, 0x3, 0xe, 0x6000000}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_fd={0x18, 0xad11e2b2ee5c1ce3, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000002c0)='GPL\x00', 0x101, 0xbf, &(0x7f0000000300)=""/191, 0x41100, 0x40, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0x5, 0x17973438}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r7, r8, r9, 0x1, r10, 0x1], &(0x7f0000000700)=[{0x4, 0x1, 0xc, 0x6}, {0x3, 0x2, 0x1}, {0x3, 0x5, 0x3, 0x5}, {0x826, 0x1, 0xb, 0x5}], 0x10, 0x40000}, 0x94) r11 = syz_usb_connect(0x1, 0xd28, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x31, 0x62, 0xae, 0x20, 0x4dd, 0x8005, 0x5680, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd16, 0x4, 0x7, 0x8, 0x10, 0x10, [{{0x9, 0x4, 0xc1, 0x1, 0xe, 0x2, 0xa, 0x0, 0x0, [@hid_hid={0x9, 0x21, 0x138, 0x5, 0x1, {0x22, 0x30b}}], [{{0x9, 0x5, 0x1, 0x10, 0x10, 0xe, 0x4, 0x7, [@generic={0xe5, 0x9, "6e65f9021deebf8792374cd0ee991c51f82a80d33fd0d96a8bd4d4cd564d6967bf76516e32951c918083a04dc2fd551a27e877d0afd86955f24caac0d03872772a6f0a9d8db6c995d7c6bfd1fbf8f5cb2084c597cb3e8585c5bddc6b5c0482ecb56376d520604106df057043628f87d4d6c019db83dcf931ce122774af6e975d0bd0f7902f75614746fcdbb0edb81d54c3a6d167dfe8fc1c23cfcbc5d0e1740b319e2b6e08ab318f534ad7fd1031a49c5b2b5065ae5b9dfbe36b2dbd155d2392df55635ef4282e25b99a90d9e9035eb3693def01174fad631b3c3bb17b62511e6fe322"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0xde, 0xf0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0xf}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x4, 0xfa, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf0, 0xc}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x6, 0xd, 0x0, [@generic={0x102, 0xb, "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"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x2, 0x2, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0xc, 0x6, 0x2, [@generic={0xf6, 0x6, "60f20af990e3dc577c5ce8b9fe8e6aee7ff42b70fd78514c84c12defbdefc5016980265f70e423d371c237ce2949dbd880f74cadb1eb93dea66192f0e7a7610acaeb358f091f22178513a51a1e95bb517c44da4fcba1bd3b7daa26036a3acbe31f90ab4293a19eb91102b4322c64fe7c14aa339f48aa3c22c612f2b8f600f4c2c2f5a8106d7fa52d46b8778afc47e310f54a69d64ac6b5c2be0ca82af779edb1c6d04af2c2b4e095df4268ace439f93f6e2d1e46616a66b4ce2e00961d6fdecbb7fda01ecf6de0713ef6f7a2845137b32b1e1b44bad94fd67a18ddf1f2c823105209be849344465bea668d97710e7d296cbf5dba"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0xa, 0x19, 0x20, 0x3, 0xff, 0x1, [@generic={0x4f, 0x21, "956536474f233b562c9f386709c0831083b498927f3d74db030dd8f55b23f1a4dd40a31bd66581970dbddc82abb1355497a168655970491256f4bdf97e6b61d254794f8b2f1d20168540f273e0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x2, 0xf3, 0x5, [@generic={0xbd, 0xd, "1bff143bbe6cc22b526f286b6ef7f710b371f5251a1f68f43ef50bc2af6c704fb19a6793a058367a4993de73bc5c97fe73ce41cee39d72354d46adac2f52d72c5e8fb0c2db0704ab46384593692eac15f9b2a65ccf333f6df4cd44cc71683a8960807e60d9c7e8ca2b17e0488e6927f30380c5f05887efe4665cc8f57bf5aa83dbcd506664fdfd83c0e889c77589aefffe706591c5427bde8ef53dfb04cf7dfd5bef287c6b3752fd894fa8668da742b105cf4b9dabb941d8146aa6"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}, {{0x9, 0x5, 0x6, 0x2, 0x418, 0x6, 0xfe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0xdee}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x9, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3f7, 0x3, 0xb5, 0x92, [@generic={0x1e, 0x21, "d86bbdce1f1bf119e8ea984632511b4edb0f10aad9ad77be7e4b5a95"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x2, 0x7}]}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x45, 0x2, 0x35, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x0, 0xdf, 0x67, [@generic={0xe9, 0x4, "ef7690bd2fc80414d9111cd508d1c7aa71452f7aa2690fd288db14bb5cfad91c33dadf3811a87313639a172e8a78a5b0ba818561a174ae3ba0ed5b88076b980f48bb3909b3f40fea6eb2db5c794ceb0c262ed8ea46e57d475b30f9a0a8f1c2f465c1f2ede794cbdf64df14a861f07fa71d67240d0b2b6a0cbf70784a87a667dcfe548a91b3badf4ee599018b12199d535a5e0db62e65b79b8ca4ae5c8d7183a19541e9952ba324dfb5e698ea8285810db88a84ea8b61d3e1e433d5cb2bd5afab62ad89f22a1b8ccd6f8029362e04e2314e16f863d0bbb352fe1d9508f7d41a64209673fb9866b7"}]}}]}}, {{0x9, 0x4, 0x66, 0x6, 0x8, 0x26, 0xbe, 0x4d, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0xc}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x5, 0x1, 0x40, 0x9}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0xd, "f8"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x4, 0x2, 0x2503, 0x1, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x1, 0x2, 0x32}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x6, 0x4, "4a0aa4"}]}], [{{0x9, 0x5, 0xf, 0x8, 0x10, 0xf7, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xe}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x1, 0x0, 0xa, [@generic={0x8b, 0x23, "2376be87b8718667c1c328e8b0668fbd00436c8ed9775b4f907e6b6f0e7434ddb685384ed89a66c277902bb348c7cdd5b169ea39826de073eed7043f0cd32a6eaa822857322166f2fcb8e00bc9b72cf5992c8c93e2dc2708bc499f9bbd3d25bcd201939d6c646969363a5e4a8629c3aa80b4fdf4aa1f6f01a8d26914bc3a74b3fda19207418fa03551"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0xf, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x347}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x8, 0xff, 0x4, [@generic={0xc9, 0x1, "7ad0dc31022569840e1dbcde1532276705f08f9249407f581a84834f86477a3a0a70a4fccabbfd0314872631fcdcd2465eb6fec7ade5a1d65cf4eb3ff533eb4838d485e700468198d4df338c755caac8bfba297b47cf6774f9890e6c82b819bd60cb5ac3353b79019d0b7f63fd2808fdbe1e8ada70c3d5f24d20a3d7a8b4110adddf121868c9cf483a2f5b82e3664fed518aee52af05c74fb45439ac8ccfa0942370830d8b2fa42ff675afeef00ceab52ff8380c7b17adf02212ce0f30d682a43dabe1b7681ae0"}, @generic={0x8c, 0x22, "fda29e53ea1b0dbc8db6a1678c8d7e729ccb100bc8fe2efdd7788fc9cc89733945f9802c565bb5e6b701bd071e16d8bae0bb6f3a976d186ec37bde3680f21e497982756fe5eb592639dcfed8d68f7f7d7c77da387c794e8d9f2b65bc84e1304a8808ab4ad2a37c8c7f95362508fe8eeac7f1785e5ed5f3d2a1e3c802630c8ccdd7f2930b7e7ad5a83da6"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x2, 0x4, 0xf, [@generic={0x14, 0x24, "027f590eaf0945dfd14a272bd62910f78cab"}, @generic={0xb1, 0x11, "150fe1c46c1de9bdcdc579c557ef129a7a23febbd5e302c2fa166c3cee96f95c5bec0edc7b84eec6dc37b481ac16d5ea15dfe5d0a2ce43e70ea7e11c15b3a10978d8ae55737b32f86da44725532fcaf601699e081f95c0023c0062395f737509d57d5602aca0758aefc35b60e358f606bc8efae54fb54747b69e0574ff191ea11196e7c17520ad9b8209e859774c180408887924a4f9c818b721b00b7a7af02f195dbeaab4d791e7227afa818dbab3"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x6, 0x3, 0x7b, [@generic={0x1d, 0x24, "7b7615d12264a133cca6447cfbe8c557d8ea210167b78c089fa2d2"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3df, 0xfe, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x2, 0x1ff}, @generic={0x101, 0xd, "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"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x80, 0xf6, 0x9, [@generic={0xef, 0x8, "0eda8123fadffcfc856260fe588d61e6ccfc5d32dc38a97cee4e7b5ef8fd5b40f9ffb9682dd5b46a212fe946257d077fea7c468bf481fb4733312adb384477339c6319d3948bfc4922af8127e616e5d6e993790d4ec3b0b5ae2d7a2e44b885d60e7a17069e4c1f1ab2284f3cce935071cbc64c3782a6712bfd7fce25be2f58de915f02f451235f5eae55392f9ff58a9d5af5fe50c721c749228766021f7ae7d4fada61db460585f5130c8fe014ae3bdeb34f737b001e9a18e6864a5ebe1991eff55f4e5d258a5baeac941e80a8fe04da61cf6174cef1714bb0e265b0e17e7c3ec26a69373392f0603eb9440b43"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x11, 0x8000}]}}]}}, {{0x9, 0x4, 0xb8, 0x5, 0x3, 0x6, 0xdd, 0x1c, 0x69, [@hid_hid={0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0x920}}], [{{0x9, 0x5, 0xb, 0x10, 0x400, 0x0, 0x81, 0x95, [@generic={0x84, 0x4, "654dc51affad515df36c3e38fc351e9b2945f74693b9e2e340a969000b9df4baaefa80741feeda019ac0e916860d76a9d85fd64e7494d336fbf528f32bb63bd299d601bef812c83ea88b788066a09976febd943d24a1a6d21aa44ad9a886629e8fa43f443c6f1059548f68c83093b4cf01e303bc0091f8b028d9328fc1b10abfc0b8"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x1, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfa, 0xeb}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x2, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x1}]}}]}}, {{0x9, 0x4, 0x89, 0x2, 0x1, 0xe9, 0x3, 0x3e, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x1000, 0x4}, [@selector_unit={0x9, 0x24, 0x5, 0x2, 0xc6, "ca701534"}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x4, "515fdcdee3"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x6, "b286b80c"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x100, 0x6, 0x4, 0xf6}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x3, 0x6, 0xac}]}], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0xa, 0x5, [@generic={0xda, 0x22, "4cb2a767e98798e454dd11f74e06cc2f288a2b3507fccbb279bd7c77a897106dd020eb36a4b06a4e26b1c8645b9b364c253e5e286ab9b8899cd8a45ef7c86a841b4ad76b7a153b39d4c8355a2712fbbaa370bd887eae6c2551b7b9b9d381bd48a7aaf32c828a76142e69846217ec04041cc1779e1a2676a279990c0a0491ce9a80e9486eee1bf517ae60e25b1900ecaefae906e01aabba9b3f17d05cf6802e208eb9fec8d5275cfa98a69b8f2a3018d2ba6357d5f66ceb0b667401bbecc579941c73cb7c64c167264994c7ed6caf5576d12d126bedd15b42"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x201, 0xae, 0x8, 0xfb, 0x8, 0x1}, 0xc, &(0x7f0000001580)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x0, 0x7}]}, 0x7, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x78, &(0x7f0000001600)=@string={0x78, 0x3, "3a82eeb5e1e767bedb9bc974cb81b5cb1b704834088c4b6e852325ab1ba5cfcbf9a10e71b43b871a5e28643bc8db45a3d5f51b93bdc0b435509fbb70e1c667c4d3ae4db22fddb264adb417e157e50fa4fee4134af2d366a8aab069652be76cc94080a80a877d7929df44936168235dca61956331de90"}}, {0xb0, &(0x7f0000001680)=@string={0xb0, 0x3, "d40fa5886f82e9061fca2fe1807dd6e4e42f96dad5d789369a874ef15672b25c91879ea8891bc2a83fcb8c335a98c7af6146bd7249843d6ab77e5de7c85556dfca543945db6602bd90a0adf297987af8fbddb1cebfdaae81d2cc46adc9d48d19e6dccad4d69e3ec734543899770da3bdd8f968f703ee67e5ab8bea8a625c5fbaa704fbac800ce9643eebd66eba211cc135f602784bc128e404c233affe8476f2c13e79b8abbc4163c12786553ef2"}}, {0x56, &(0x7f0000001740)=@string={0x56, 0x3, "907083e1c247a8dba0ddc5b350662530ed4199c21a7d8c2c018ee0a06bf54f25be087730292e4a83ff551b108d186dd06af4bdb303f5ac7ecf0d1d3e1424c6a49f00b0a2236892a3c52aed36b15ef30087badb16"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io(r11, &(0x7f0000001bc0)={0x18, &(0x7f0000001900)={0x20, 0xa, 0xe3, {0xe3, 0x23, "8ec76921cfda9ee1a177879f4d086c76dca82b79861d6179e15b1ce2fc8a19e034eae59eeca1c61d2b06274ed1ec76f52ceda9736756ef6d7164e6e81743c1969b464b6162219451f1db4d0214699d8caa778aca09c78a78908e333b7729659d286589ca8d5a891bad218dd1662686e9051ce82b4543a4245a4bc8b15758a142a605855344ba3b44d5dc0157c77e7e4a184ba2aa17e62d0a4db188e5dd8d91866e65b18bd3c250707e1f4ad5d34917f09de5e4f5303557eb331b68809e4cb1b318e42b6b6613f7ac568d39511fbfd8244b2ab50a1a7ba26139cfe14a6fcba94431"}}, &(0x7f0000001a00)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "4c5e1699bbdccd5db00b9fc8d4e12dbb8bcc20fd2a108b97c4a331b3220081b150ab33d2623fe1b572c7f5d9ba3c8778844f4b07a36f0b1648ec1fe630a9f2affda50d43c44040c7ebae4465c876d825ab84f13bacb0be54d57c14f71d8af3e52cd452a0fbc1beeecdf73023953cb7d5d4f0e37879f68b2f2b46cb7503bd24a28e39dad74ca585fc67cf55a7c37093e2b068e6025ad2accd29447aa6c9dac2ddbd9d2037fc967132062315724b331c1948552ab1a7d52e65bd467f6c833c22258aeae2461a7fe8ccf57731f94f3bee30220b18831bf755df327c2e88bb52b0515118212a1ee1cc5f7496b8da17db"}}, &(0x7f0000001b00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x80, 0x82, "f1ec0c79", "96b38447"}}, &(0x7f0000001b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x81, 0xd, 0x7d, 0x5, 0x5}}}, &(0x7f0000002080)={0x44, &(0x7f0000001c00)={0x0, 0xb, 0xac, "a41fae39b07fc3ac5a9728615b990dca7e1b564b20c566df4fb1058a39cd3c5e80a1b238d56f38c66a2dea011ddfad730c35a1cf5bbf9944651756b675686a17c6fef7a607eef7ee8adb861b6f95f6ba492f9fdc9bb93b46af125a00dc6f0d502cbf23c2553123193130b24b2e02062014da32c8a26961d4ae54b06a393078b4bb3ecbf167be09378d03ac9e1b79158291a94d6a1eddbac4dd95774bd02ca654811edcc9389817b300965476"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001d40)={0x20, 0x0, 0x4, {0x6}}, &(0x7f0000001d80)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001dc0)={0x40, 0x7, 0x2, 0x6552}, &(0x7f0000001e00)={0x40, 0x9, 0x1, 0x3c}, &(0x7f0000001e40)={0x40, 0xb, 0x2, "b95b"}, &(0x7f0000001e80)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001ec0)={0x40, 0x13, 0x6, @random="20198c133e94"}, &(0x7f0000001f00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, &(0x7f0000001f40)={0x40, 0x19, 0x2, "fd28"}, &(0x7f0000001f80)={0x40, 0x1a, 0x2}, &(0x7f0000001fc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000002000)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000002040)={0x40, 0x21, 0x1, 0x3}}) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000002100)={0x2a, 0xffffffff, 0x3fff}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000002140)={0x1000, 0x2, 0xbfcc, 0xd930, 0x0}, &(0x7f0000002180)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000021c0)={r13, 0xae, "0c165d869dcffdc8df03a729f9c5ff9d8b8328a14db2aa6e40eb6a11bddcc1c75c2f91e678f3c6bb078d101cbfc5a02b57bf46df32d28779014e472043df62f176de53f296e461804ca84091b78de7714a75ddfa5a126d441a322dc3a6860bc340ef7c61fae5dd15c50ad4d708f6a6d9867e0aff8a98eec671397908ae9dcece714be832db85bb6693baf3d027b3eff48a0417fdac29fc45533916129f774533c7d1950f35bed9490865febade78"}, &(0x7f0000002280)=0xb6) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f00000022c0)={"0adb33beeef2f32bd4a6d958431f3b0b55da5ae7b0392d98eaeb7a11db38", 0xfffffffd, 0x1, 0x1, 0x2, 0x1, 0x0, 0x9, 0x2, [0x898, 0x9, 0x40, 0x2, 0x2, 0xa, 0x6991b852, 0x4, 0x9, 0x1ff, 0x0, 0xfffffff9, 0xfffffffe, 0xc48f, 0x5, 0xff, 0x11, 0x5668, 0x6]}) ioctl$FIOCLEX(r2, 0x5451) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000002380)={0x1, 0x8001}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r10, 0x89f4, &(0x7f0000002440)={'sit0\x00', &(0x7f00000023c0)={@rand_addr=0x64010100, 0x0, 0x0, 0x60, 0x0, [{@private}, {@loopback}, {@remote}, {@private}, {@local}, {}]}}) ioctl$SNDCTL_MIDI_PRETIME(r9, 0xc0046d00, &(0x7f0000002480)=0x1) r14 = socket$inet6(0xa, 0x3, 0x0) sendmsg$inet(r14, &(0x7f0000002700)={&(0x7f00000024c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002500)="7ea404b6a1852ebb31beb22c3920c2c382822a2c941a1d921328191f14b31db34625adcfeddda0f70b2fa47b61b3c51623f2a3495cd65a8e4d6ba73897cba6e998376269d74151873b1b1691ee4db31b59601f56ad867b0e74b3d4a6a82007f48bac59ac2b25fb90b23b6afe3135cdc5e9eaa21505aa80afc751f266e47902a96aa8fab6ed18ee9c2dcad5400615eef8e27243781ac858d3068aa2cc6ffdcf3034b855ee12", 0xa5}, {&(0x7f00000025c0)="fcacb3aaeebe2b6e469004b7c7adb8b85879f845addadf92149b54d62bc1682a8f89316030fde39307b6a5ead5fda19fe31ab0e16122fd3f45f0b85596d0dd3af7e358a24d0f10f45507da45eaf97c56701316d94d099fdf3c651f51c959ae65c618da48e3c3c5d144f5ea387d721b3df0f097fc349f1e7ca2fa8616728f50b59ed3a36a7d3c0816aefdd8aad9c8105ee5fe23d050078d1e5a432eae9f3630413e86993f228245b8c5d015a49b6aac97422c3fc68bc064ab7fe3fb988fb821aed3aa30acf8f97c4308128c2b0f5086f33de1b1065df2ee37d5f9fe5cf1", 0xdd}], 0x2}, 0x8091) write(r14, &(0x7f0000002740)="f8973e8f1afc14594e7537b1b716677b062fc4a52cc403d82c3ccf67e313cfc8c0ad8998daefd63aadf67e6ea02c4cc28d2dfdea9c25a1805562505be416217914b7743eb1c28a397bf48220a07597f0f408ab3cc4949ab76628d0c8879b12c2", 0x60) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002b40)={&(0x7f00000027c0)="11ed357448784e67ad4ba1466bdcf98e2629e22ea4feb224f56b6b8bf85ebb5c5010bc8caf259ddc188e1f0ad8e9adfb9b207baf790269e372222576863dfd5d9eb959b7727b5f1c3f4eb7828245084f201f421623eee227c45dca86b62ac925de55f55978e64d84e72ea90f90b3ad4a35d6edca455f15adc368b6e17908af489222e15c13ba2209122a78435a324b8b1067bb4b2cc80a4fe43cf5678aa0bd568da8bc778394615a00c118eeeb15950b880c221bdfd1bf0bf32860", &(0x7f0000002880)=""/203, &(0x7f0000002980)="13963a009cb0d8b9b362c28f425a9e9d8c9f5c63e7a2d5b76a88e4ea028bc2ce4a2aa25770d20e03eb572f8e07099591c31dc0f11d70a5cba949f7bd807971976419d3be86b30a59539ad31f576269148be67b212358e17b49a078712c45231db05b425ea1e2452bac105660f6005b406ac19deed123dd21094774a1a8c6e8f27f791efc89135d3979fd6a6080ba53ceb2cf32047c1a3e59a46e084cdbf46e1638f98af9e7b3b46cba47030429450716ceedf28e1704", &(0x7f0000002a40)="b4bf821f0362e9097a584881682c5bc14160bb42180e2e9045b1ad1a474064555826e290638dc99700fb6dae0ec314b5529902f54d5499bae7820243f90dd9e3bcb17ea33744df333dcf13d94e021306b58beb40511c9297c59d98f38be7adb2b1bfb38c0556b3b0219cc1c834a768b51de650b9551968b4e07050951732079b29e64a8b1b63e306fbcf770885ecacfb6eef248284519dd43381b7d1567cca06dd32ae0f2e9c160b09541c4e6f1b6fa9468a1597cdc5797f00b72774c35b5ae3204f08228139d634ece13e636813d229b4833935437e4e1b4f41a5989cd6f354d2", 0x4, r8}, 0x38) r15 = socket$vsock_stream(0x28, 0x1, 0x0) r16 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r15, &(0x7f0000006d00)=[{{&(0x7f0000002b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x2, 0x1, 0x4, {0xa, 0x4e21, 0xc, @private0}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c00)="aa8f1360694fc8e03b83f34c642bee6d1bccfd832f2986116bcae82e939a88e33f73f4d858bafd9d1126f6", 0x2b}, {&(0x7f0000002c40)="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", 0xff}], 0x2, &(0x7f0000002d80)=[@mark={{0x10, 0x1, 0x24, 0x7}}], 0x10}}, {{&(0x7f0000002dc0)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000004240)=[{&(0x7f0000002e40)="69fc728e2cce36f7209dd462aa9ca9a72ea7fdbfc9fcafd107b9342476d8add536b4ee39277fc997c19f0c6969d22ad2a627a94f57c2e1ec7cf97b5f617b4a52293571678cdca3dedeeae2b9c251f01473ed3f2b8b6270985d3972759b19f8c36ce6839ab52f2a0b44f4", 0x6a}, {&(0x7f0000002ec0)="af15e9a6df1fd66dfc07bfd7022d13925b607c9c96aa1fa40857b588f4d3f0e306cbaa623a03c74c1b768036c8b79bf1faedbaaeadd64edb3edb23f4c378ee67296e3e284e", 0x45}, {&(0x7f0000002f40)="f226", 0x2}, {&(0x7f0000002f80)="84244d728fae65a0160ed78b16d7096b1f7bf1ef23441f531747251ad1a74400b8a0ed03563599cc6c8a7335ae7ceca68607123b2f8a7ff66971a5630a75c95b1063703ebb3c51af2a268b7dcb44b9c47dd939ed5ae153b9d244af0b0a3fbbedb8000d39af0a107e6fddfa4deffc3533a7a14042d530045f3b00a4f167f82b5c28f0a8ddc6022a612546617db9edde7c10911cd07797b6f54d8a4be9f94c65ecfac47be77c541925dd57", 0xaa}, {&(0x7f0000003040)="86953dd016e5a23bd463a3fafdafc10689c692ccc3697abd49070d892f059ac57334e0b0f93c48c3cdb95cbad1a59c968742294e7001862822d25bbdcb0efe2e25d64980ca99e5efcbb95cb60b0bf75f4d28a76a53d1d0187c0781f1116d8f1b19f47525d37b74f2d7e969d5761f02fe73dd34d5a645e42ae8858b454e9d564977dda61c7fa0c674a0a3d4d581b112f03bb25dbf94260ebee509ed0507c5f24fa2be21677ecc07f7087098fbba5289a1f1fa1a1d7396df8401ecf1be15d116ed4b72c5c1e9fba5bb50837e985e9feb9164689dc27f18d6681b359bb51ed2511c0b69d705df642d0268f5ca5d", 0xec}, {&(0x7f0000003140)="ca92893409f23eda3ae0942884795882e119ea3a4ea561258eabfc16e4a654ce7df340c96246ef9277718952dc217c7859c828d3fb3596944c6471b05de1f1e787426caf3f1175879aec022ac346ad497a747224e310c1f29b9b0f1287492e7e978b5f48be1ce392a85cb23df76b3a3602a442b0acb002e7babe5c26575e0d744ff21c2188b72fdcf08f6d9488797e77b78668b024b8ac108f8d228952926914d6804095420e7a8d81224d7a23b1c08c36e4ff2a4c26bd944de633243108faece64f4c4246b4f05cb65da887a7d2456960aa5c19950e63ba24a3550338e330a3bd324c2a65aeed51db551def090b934d677e0befa4d4bb4861e8129e0d5a82ddc7e567793b751d1f6a531820f0e80406108456060d42df99bb8e99676d338563c19c06a23a5bdf10309f296cf4dff443cbb227e86ba289c5c27cd1c4538113e471842550c3a4125d9777c697f7be5faad465be7d415be2ec1f51e14fb40f30a695e0606de95ff73e46b4c1ed6aa6f51a052cc92f5fa3be1e660cffad3aa62d41bfc8360e74152ac031c1cce6565df9d2e884d2cc1bc5fff2a9a9ec28652e1515fef9b0b621253fd53362e9e0546091983aadc9c15fdbf469593a7f04852fa81fd95e8c6a7e1df7d511546824369f971506dbc57216c229e3349fc67dfdc7d444dc3edf31bfdbf38ea2a92f9b52d639791b9bd869aa057561f17f2af371ba1e848919dbca83cbe2792d6ad618a6d24cd1808507cef8087c1528dbec13da4271a5f70a9e737aa422649ba77f587d3f4973af3361c88c35019a61b31dc2cb94ca85a83450e9678478f1e0f71887e326d330efda5b2a2f27d214c68c41231e328a2a3d5e99c76f7f351cccb37a65c90d9211c07f1aaf124a8586e943cba594be75720d45f62b764e35368fef5fdccfb61f8609e89c32440aaa7724a2722ac747448014553311de904c9adeacd3af6e12778f8a711e93c7e217da714374712a82df282399f587dd426d9cc50c777670c066aac31c0f381a8005b1946d7bbf834314e60822fd4e29459f1972a1344ff77c3e8bcb45ee03e96cec821bc532812dbceb0ff95b301a772493f6833ff94ea431465568894427f1415f3060618f0820a0bf3321ccc84d83e9643272d06394e520abd25053243482dd5e4708f0abb83bade207a5fc5ec7777987ddf07ea326cd5ee23203b323f5bd23ccdadaf29626e265039a15565496a04c473d68dead320b23389aae9364a70a4f19f1aa661ae8984f7154aec722550bf15bb52613afbf8588014025342d61ce0013f8b361b4b25de29a900b2e385fd6576741efea3a6ae827f219e6d3d2756dc07d6bebbffb88bf9fb90c70ebde07f2bf205e8e3230de171f9ce554edc9552b9c60d3a9c5b9b11d9d012673fa2a834e454136726054d11d7d16fd6adbee1813293748c35fc9997d0c913d857bfb102929411fe505a687e2be5425bcc31d8ff66b8ded3002447f7d4c501fb3f5f3c245e8177185c885c5a7b7b6c50fe63ede10adcc98d2384e615cba6488102f85e40f756c01f1378bfe8f7527fea27e6508cdeddb785c1a7214e1ebe36c4cdf7da7c0a09df944b00a3cf82e3783201d254c9f1c616f1855f187757dc92fa54d07df4b2db3b4992abf9727e1c32087108fae8b0d8cbc6944d57a544f0ea974751d95e547f1f4efcce897d930138a6b67596787a96b2dce300e589c73512f777f9b42f4a3dd4a1e6624c59652b0798c8a9af05177460aa159d7c49d8c92aa2a4b193fa461d3f0c309a188673c240b0e0f2c6e8ef8bd66d8e58b1c1962fd2b529eeccda960c315f5970f38acf49c1caea40ec2f24103b2635976d10ac2e778beb24bfbd1630853f9a779b43fe3f7143cc32d0e434a99abdf01880909bc9ebfe70c346823afc63f3a078845dd9b4630ceff336f50fbf887c724b9b9ba7a85215ad298dc2d61e35eb85668164527404bf691066fe820d0fd5ad4b82addb8625850e86ba935034fd4407ce9d7a821501983c98189bda974bba544e2fa450ae8681de6d7072712ea7d3b0c6ba2d93782125d986bdbb8b121cbe786f2cafcdccb29e0bffef9b4cee6d40b7b63197cd40dffc3dc26a5920d9588b1394ebd1507a65e40aedfa6e2ac2c6c1d50195d4d9ecdb8df58ace83fb859865177bcfe6b02cd2f39476f02c6f639ac50134f73430c7be4ff25135a8e26ccafd5f020ced765010c078dab018213a092e593388df0a7a73c66880876973137b118b258965241096b0e66477b5485800c0c33d2a58620b9099ad62447915bf88a9e03a005516fd9ccabc90f5d98921bdd8d6dab9c780e9f42e477618e47bb4e1461fcd5e6639647f440e9544c57ff9155c6e09a60e2947d713e8fc77b56029c220c8edd46920daa604908ad91ff29ab66f3314271706c088be782efa4f4028b4697ad204c8ebca3cef1da3f2b7b56ab667cf1c3ebf93360eb46060b9d16163eff2afd02d8974504b24dcabc72d346c22eb270d0759fd8282e6ed05c6bb36e6996b1f2cb6eac5b48412efdee922f31ac4953390e952f7e8c389693aef6ab322307dd5f6bebe7943bf3649a6708fe6b70eb16fab6b62088df8d97a27dfd78c81d41ecbd58d51a8352d2877fc7acd86b22fabbba3bc0d2764c187b3bd5d57412eb59f1974fec07844b0ba887a4cda85570ed21ad3c4dfaee8b8870ba8c029e9c447e37043eb65e5f875ef52f7233f24f0e47bbdab015ca5bab83b76ef89796f1ab70564eeaa41c8153657e72f7ea2a1d41d62995d3bae1d83d78607d78fd8cf7b1728aaceafdecf58e625d7f5e1c05d761439c00c46673cf08995ff84a274c4b53063a341ca0a35c8bb0d4b1b041a065ea7e7b13d5aaf9e75f887bce54791c48026773956b15808840451446d7847d9eeca4a21c95a4a52f6ea5da99d8a74351fd93cf45040a72faa76df7948c63c592062f834078e8c0f494fecf8a40fa1693f3212464b7cbbdc6e71f3c774860aaa5343a92061aa574e73b322a3367076431f2737177b8a6c29fa6865fea3d9bcbadbe3c6c410b92f883684b30bce132f4740546de417c14b2fbfb92151cbb0f153f2e29116f922f5d059cede6fda60a64290127fa14700356d3c6bae9feea4d1d17fdb7a429f470c4d58aed3ba2ba894523a8e0daca9a252abaa4e9426fda108fa7d53ee03648630c8b3772dabf0ea6d754ebc33f72e628fdbbc44983b344a126dda119e7d594ff3520cdca3f9b2c06433c88f70c585a67b8a348a991295f53a2c7aef598b607db82881327c704ebcb8708e48352c369236049fd5f8019c454fdefb779859330fd3ed2e6ee740331a3790491302d8518102dc4a7e1c98bfd1340d8c1a591f5da56a3e6f556ef99e2fccf133be62c5d74c701bc29692f18c69739107b45ad800de8254fd83d190ee1e9cdefb59c9bd82cf2263376cce598c5e09d645f1b4094f89d9c91899235931933d732801ae76a45acb3afd7236daea97e768723bde136d4437aa2ec42f5bfd45e5f0870ef4ff315fbf510e13375e07062dfb610c98d16179513b54215a3cf7179acd4250c431eeca7c393ea2ca24df200f6e69ba79df087b084a83e7cb77c4bdb92d24ef768d179b18088864c3d378657248513b18ce0133b40f51ba8260926ec4a543938a283b3f3d110eb71a72620f1a3e84b81841629ddf368e35d58ca40109f50f6f2ada133d459ca82ba9f2445d20964820c44033012f88d4c23b01d05195b4240353bfc0a5adee42b099cc61d5f9abbb8dd02c2011af66f61030308bf0ae836a44b8ab18b7fe2cdbcd0d2a671a77bd41f38dc14c0ece7ba3246572592db7391868380f860b66483b1c6097df3c4d90c6c13210110b994efe10257d5b50eb068fa95349add97e321284b2c335ba00c1e44dc305a860e7f5e5b12ef561265d6e5fcee0b092aca910f4857315fde87b8dbfe377cd54e49ac5f81d02a4857572af80d96bb0ef4de844b63287ba1ca68f29089f2205c423d870b76c2eef7c1cb7acc65ee7b27053df5e5de5d180119b6932093196eebe6bf7f0983c530b6cdf8458fab8bf46b3f2798b7b266109d6b67ee406addc742a168f52795c256cc2b880f915b8f649e6ae8b54036de4c0f70a7e00937d8eb42d88de3f20cf30e8892a4677f3e0aa06be56263f4cfe11cc85cbcf99fb029debbaec951c8bb31d40449ebab0c054cbef524edb18f9cfbd25539d2b4353718785b4e039c59daa15feb7ac2d714f2997095c81175bd59111b1d6cef1f2cada715428202e6bb5e41590e1d288fc1badfb55d4dac42f52b40aab437b0c936013d8304a7c75c1ba17dea4b93b5b939f5e5a1c28102f98482ee7ed3c7cede4eb5efcc90516e80718d59e84fff2a71637fd8e53658374e683eeba25f5aa0828b96f20492bc19f338fa822c8a7bc68bb92cd6385a92a9536935251222b7c3dee136497c7b1cc3d0d73369e35c79fe393c38d3ae40f321f17b73d2fadc24500d2342e87078daabded1e95ce773fcbbfc1a41da5c9e35a99dce63b4192f79368db300c321ca49d9cb465128ab5dd9fc0def925dcb12900894d4835a5519d7524f2e194a50ef071d7bfeb24c19d76e9415f56a721483b62de8c76377687c4b147d8ff2f45b72b0be81d7c15c1adb275425c3773859a0c165cfa38c31e8cbb599fdaffa97f375493467743c82663d90ab4150b98135e3ba0b4b0de1abfbdd0f6cc1264c16e6b27b15f1da86dac334e17736d9e3ea89a927358fa8bcb98c43ef0b48b53fb0336b45d795a97b2e42b4c431867f79a2fc2f5c4d283b902ce10b1133a189f1a8ab87a43f08d439606e6a7ae1bbec78f2587059a10e33ffae0aadc46b8ec32e592ff17e7a2c673d62c9bba89f1d7211be0f75b5d090bc2f025e012a90db8f33b0c5425db4b22093936ae627bec5393ff42e60f1e1907dad62c517c5c73c78cd59a06c7b852f2997d92781a1e6e4abbd7ee8bbd8bc5db1dcff5c897f4f9e4dce55b4ed109920f5bb71fffa21b293bc9a936041d514b251b8dd24769821f4d6ed56f4086a132d8bd4603531b660a602fcb98c1863fac303700ed79f1045e1796832dd84e7566425ae4096759fe680b3bfbdacafc3f1d34beca2f7302400a3e481f92c0cac0df1eeea16c7aa6c7fcd0395f50d801887cdc0ea26e379658e6787bcfda6a3f7b968cab97a7774c0cb6d976e926a2c899dc38bc3b8333538592f70db4482aadfda129b8ce7fe0ad736ce0e9c148f8828cce36b53dfc2245c2a2ab3651650cb8fa8088b3f5c8dd9c7b54908656c0a57ecb11de846a6b621aa06a0fb83bb704b24c2b8c4e691be3e15fe04744b7b9a948e6c00a3fb91b54bd1af0926932df6c366b68e470ec37358457b69e0272af4e996ad6883a9d5a07830af66947fbb5da91aa05a0479643bfd73a5108634b8688410fee8b0e62a790c84068fbf4c4ca99335def9765089e64634253a4beb7db593b1d01ec79c16bde1891d7673a81b305c6d45c994a7067d1f8549c41b1cda9aed717cb17d1fd2e17d43692ec89b896a57b580fc0a4350637324a7df2109f1e061ae42c64a75b45886e082f1b9ae5544e6427b784a6587ed15ad6e32125a65eea9df6f83ce55192bee1620eb0ebfcf80d560be765f9995948755e2a9a3566145ad19b8e499b720679e0d693e3ab110f3ae96f5865748b410310265f218eedb2ccaec32f5b873f13f83aaa4c233cd7b6c190ebbd43e05c54c5debee221be4a2a3ab93f773bd496cc49de8210a9d90ec6c529e49cefc1714bcc737f5e8a588ae1c4f8bab1e08663f", 0x1000}, {&(0x7f0000004140)="af1edde0d425e40a40287f890dab1bf368b14d3d35078150938fd576ac136595d27208a19f6ac62cd2c5d9389b11df941cd91106095d057020978171cc7d15407920b17211e204019f0786dd550498dde96b2a8227a2ce5279846c181bf073b906204753e675c8b71368758b0c29f86d6136b0775a0408d815c664ec5db811165152b30c86729ab7d05d6de51dc3976de4248103cd50995c2e7e60857d0ffa15bd6a66a0fd053d6682839d142f9427697a00adcd1c3d7d4c5a81490f7cea498a32d6ce5d70", 0xc5}], 0x7}}, {{&(0x7f0000004280)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x3, 0x1, 0x0, {0xa, 0x4e21, 0x8001, @local, 0xfffff5e4}}}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004300)="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", 0xff}, {&(0x7f0000004400)="df468dc3e57307fce3f7d9a82935c1fdf2e6c694776e2549e9e85d9d446bed1874e71ee08c65ab9b250b5d86ee7aec9c43869fe8274b42906d836aa14b3776a03906e9b43e24c4d48b5062ad8fa0da2fe1288fbfa0322b68dafb5c7156f251bae7ed7eac0c6b3c2065810964f7f70cfbf4ab2fcfa6f95eaf13a09d2883d0eff5dae82aac2893e5231b3ae880bdb77b8cdf816faa75831eef2ad3456078f06cc62fe6ac3c777e9dc550dda15da93ac13c335acd4916c7e7a258057b6523d7e00bac09081bdb94bf299244890ea8e90a6f51b7a6e5d235d896b2405f62cdf75b268b3f7e618f92d2bcd73dccad64fdf598", 0xf0}, {&(0x7f0000004500)="b44a0a6ed6496a67a8dfcef63f3bf7bd7a9635cfd323f7b4fc896ba28f4d50cc9968e3428a9c55f4f061a2e81f4550ea5c7a6a944d68b0d206255a0d7449aa56523428e85db4fc51eada21a45ca5decaf8ece47d57333bb9d16f2329e20232ff2ac68394ca6eb0cff3ac59c544895d914210ab164e791955d93c538296351be6ebe4eb46dbb94e876245f7aaa62d8a3431433b4fcd5decb4dfb67e8147c23f9ca253f4b8f609c704d93b0fb8cff6ba1762ad5fd30c9f8035ceffe599253d5aa284e9c26e72bb4f40c5f69d8ccd013cd4f5e2eca1ec2fa1f32e7b08abc0d853c07b697c3d2d94fcc2c76983577afd", 0xee}], 0x3, &(0x7f0000004640)=[@timestamping={{0x10, 0x1, 0x25, 0x2}}, @txtime={{0x14, 0x1, 0x3d, 0x1}}], 0x24}}, {{&(0x7f0000004680)=@hci, 0x80, &(0x7f0000005840)=[{&(0x7f0000004700)="55a23377d76727b620dd523a03a5434dfa3c735adab6a520894db446b0d2c4986b311590b1662568b4072707295b4d0d834fafd6bc540a1bff12915713065ec08dde3e6d5e23303572a5e06b8e80dca228a54776f7f721e63bf39d3013092990f6e49ece7f77c14758f8296d56b72a50f209b135f5ff37d6b69a44296cf67d54fb725190866be617d575dd3193ee2ccd735c7c85ccbd51c88d00172d1fba4eacf3dbc617c844476c759379163f9af88579b795d8c7ad07fbf28cc1519f8012bb07aeef26e3d4f3c5b337bd03988078310c7bee409bb58cccca77fe", 0xdb}, {&(0x7f0000004800)="a90200e90e4fa058687c7c7f7ee40f36fb6ca2a20e1b2aad291cda5357d030d402dd36db0218ad1b720e1dd73b11960fc4bd256b691b1a306ca21c44b43346afaf4b69d6d132836cfb2f2f3137beb6028a6b7e3d66ed2763a685ca82fe832db59acb6f12e282939392d7c9640f87f06dfc4d74d7e9ac43a88e98dd5174d7abc9779a1cbfdb174a1beed5e2c55e3fbf615af52a5fc8e0581cccb537ba9a128c9b0815ac6c7345835db00adcdcf4519eb6a0d3a6309b39ee3b673702b097828d38cdf7c65f40f9ddfff90b99fd23401021ed4dd7b95e5ae237f4165f21ec3e5ac8f789c88a63ab2741c75cd52edf43e7d49cf9a7ec9a35019d237a27f92e67a9c60aad624fb63e0ef9a141ab81f57fb2c0c645a553ddc746aa206c55b88f36b406f112cf5001e127ca2e5eebda38f0f56e2fa462209e718a686bb2d41475c7de974b98b207570b0849d260d0984c60f31f036fc6d2520e601769bdf698b58e39b3f9b6f67b79e943fdde81eb2eeca39e5fafff4feafaad170153c0d718bdebf0e04851f0a84fc1146b5eaf76308c787def1772d78f19b5ceef3c7722960b0f1284f9c5263ff079467e8481bc5fc2c46ddaa88b655c432f9a8d78af1c6e330758fc772db2e49efa5d1f71d9dde21c25026adbf59d0dd538f1fee534fe362d374a39b1e4327587ddd2a37f4d0f898e42f68518e99379c058ab5f177df719574c396529976cf87c20a1e8b4f9f0052ac255d6937d0adfd582fb5fc12f41c3ae143a006db9216c6ba50c8d169500cfceced1ad8c6bca6429c98f2ec620eaac2bd87108293753514781457e2d1fea91170d4757c85814a148f2c094169cd7cf024ae79c210358d522f367c894e53d757dc4c435209c580496a4966c1ab8d542fe1c78a03ce6da5202a7c98a0f7198122953fab59e6ebd5ac469f1810e7bf32b63d3282c3a8048a8c29d22c91f6ba95955c1119cef78038d2c17dded034f04bbe2ef7a08a5189d47dfd7c32d6441142bf52474544aeb059b91e1a2ebb74e2b51bac7ef7904f8b578251f54e0d3c8fa5d76ed99a42fdb43fb56e0fa9f59b608aa9b1bddfe9bc55606bf43b55b69f459eb6bf502da39cfc708326b5c081fb6a98787b8fb22cd59dd4ad9b281f56a5b2c6504bf35274e44737fc74ddd01a475b7ed0d2997c83654f52d10510a568b9b4fcaef12ac0e01d123ed87491f68f9551819f9c0d452042ba7cae056ec62d6c21dcd4eb50baee2c756369d699d8834ea9eccac32cbb647efec59e6bd6fc4cb05930d33f38ba7459f0679c38d10353de4850dda08eb464e51761466ccb3c3e1df13408c56f22b9c01539bb722b48b8715045ee88f750b52e5f37c767015bb6fef7df05f814e2908f50298f5f6d817ed3c5ad216e605bda63a94545da54d019a2e7eb8ca37b706ebdc87ce2df30f9058f65e066c8871936a551a34759d5e7e211616ca6e09f58689002199365ad12e0b85628df2c3f27908ebb465028f8acee2fc99c5ad8923d6186a67b383cab067296992599d4ef8e70c80bafb5d99f15c4fb3ff452f04afafb1caceb585bcb021d482b5a6172977d6a56ecaa00e2931d461ea5a43dc4e9668d00e0b7c4ddcb6ad911885cce188b578670333c2dca9f6b31e34b96c9b7ddf57211254162376ec35e5b6b1bee5a5fcb5de98f04efa080b3e5428759c1a215fb49e62f3be072661c960b9ae168b74f3142ef5d7768e1fea4971c48a8123adc495a7abe98a210cdd2f7445317c0cd7228b0fe247043fbe81e888854f8425119ba42c649559be4f265b7c8e59e28bf264f1873484496b50bc2efc0150b4c87d24600b6de2474b528b61cd25d1f9bae8129b9e27470170f987356f1fb157b167183c650d874547a57b421c0e4e548d9d0328cecde28cd2d8aa842f24c6084636f327c2507c11db57394a12575d9b610d024a7507d08df93a1819152e6e209c1903b0a56d76fc0b6b32518a0a71e1fbd77164c2ad59e42fcfd12109be7d898b17b003bddb82fa0fb9ab9b29d521c796324516ac163f65672dcd77d13481a0d192b3fd86028678971a7105936c426f5cef7464df462dd315f388378b7d86fccb9622d5db852b75df2ba71e330f9136b4ee630b849405d04790d1a9340752656f977f672a165b0b924ff3becc0d92298d1157e9f5a278fb257113083b90cfe5387d1d00f3dacf3c6c20db4344005f39433d897745ffe958b8610efb504a15317a09121b90a1bf3df749117472caf1c73eb725bf77fa62e4eb95a616709bc6188b44a4ee04569c107fe268027b8e2a3290b8c95d7ddd84f1ae39d55a602922cca556948c4a97a107e8ca68239f78bc61e38f930c9c59d3798c9639144d24cf1f6a1eae8acf2960ddaedf37fb8a9c171bd884febc8478d6e0940015fa4f281b51cb45e2f7e07accc421174fa1fa86db98ca4968596c50a294a1c8eed3efedaf1ebdf3574473ebc37aafcca11a4f10496885800f89d80f48071fd5dfc553ec7c2cb49345841ed9aa284633c5b65fe6c6380b6c4d5dff1b6456149e8d48e642a9ad4becc5f64ce9618021863b73c2e9a65a592c924cf5cb505d5b566a4d08cf8283e608d231222f890a659590834082c622099c9421fdd8a6fffb783199f9c14f17d9da5b52230c53203312f123a5c97d520af0362b2388a008603c116404cc43f2b0b518d5ca6024d0443a9ba37f3222dcb5b7f233b39298120170ffd84350cf6ec9fbcbf919239f1b1e08d856239c785cbc6d467c57b1b633b55964661f51a45e51cbacc10c0089b137cd4b2851adc47c5fcd8f57feb108c5ff393165d068a677b1cefa0ec6e24daeffd41979dd61cfabf52f5719f2cccff24a81edaad8cd9ad57f3584cc645b0a57c0ca71089a75b4135ff9a9f29a5d3e115613ab97ebe08797cbbe69d3608594fb7185a321b428b1069cbf51a53c79bd7773aabec6f048e671f07b016ed220402f8902759d5c99063671491456c628ffd19b373fc58a93e736ba8803bf3859e3384eef37fda68ceadc2930c451f49c077991461a2cb374aeb6d028f02906f2c50c293c805665640587303a2c5ed4b4b9dc315236ebee94649de5c7d382d473cf905b12e472a335180e25efba43f37b088ab0c51f48f1e9b504a0605c4bd3f3c236161e5cdff5498435171b28299e91f138eb0d27ac51737969d2f45adaefa0b8f08f685dd0dd8cca8a0745da96679a5cda4539e8679dad803acaa3b9264352aa7ed2817c7846f0e872597ef209443a3c9e58d5c4c031b5c77f5841f08a6c66226029a5b5a61dc67851e03318d624031a36c45f58920f64476ffaf304c490fff46d4314c50ed73ab06bf2ff05da7d1a285f0568c8c98ad9c6bac9b7cd32307050460560ee9eac51cbf3a207e603db9cb0f7d6dc371e3f503936c8ee27103a561c2900ccbadc1659ce08e26275e5f5564f206393898825e7e7eb8f026b4f8e5ebf1f72c2d6766db4b66d397ae9d15b7a72cb088cabde33f24df1e88041de50479c3c9ca1e9c4126e3bbff4d68c7fd474fc2272278360ac393c34ea2ff0f38ac261357286b1a7df74502f21c5270d6c87b2ba608f41a121adfa9385d33ef3ba07b57be21d8f0b04160a3da8112011d8f9865fd736e89bc9eb4e3a3e063ffe09cdec746ca4fd166ef632274de899ef3b742c229a5a0b850fc43e2a1fdb41deb972b11a0addd836f4de103c9e510df6915ff13eee30bf9ddb710f30a177cc69368772e82a7771633f3eec25b373a9688f6e82a759b1f8d97f33e896b20cda47897097227c79feec46f157d5f61a936389f8cd8fd4be93aa25fccbbf83e4d047063686d922d831e5222b1d5834a35931778d305a56b188610955eb70f63d3a212a3eb2c1bb3f8a526a1ece7622acd1367a57c02e83b7ce9d39c1240ce8e50092729980255ef37de8c4b1c06d6f168ec5a8439f9388a8719f3b431136f7f447fb813b170ecc4501e5d739bb1f824016326fc3916540016580f5b91aab9e055cf4059a2f9c7e3416dde54d206555662fde90fb06d78294504f8ae75f051ba7c2898ff465bb8bf72be812d94e4570f972a978154cf653f34576e47519dae0587850493bddc3bf6aa8068dc4e469ae938010a47226cabeee38a31806be4567a4fd16cfb1ceab4d0f5716a0f884c9cacae2ff4aa3a65c81d50c0d518e6051c9fade24627d6511a499cc6be5d568bdbf89be4e622e968c42eba1bbbfe8e5e71002d589a2c8d435bb445034b2d5488e78dd4116bedb35899ef35dcaa3a354976549bc0c8c9681c0fb3d94e5f607c9076e5dcaf6e9c2b9e3b8e77ba3cfab9c4f6fda661c23676211565f1fdf54f2b14ab1e1c5a276f307209a782335d7242ba3a0c31e667a0cff2e072ac678ef31790f822a84306801bda2c40195c21722820a95465ab9a1f231795e333b30c3da1780ca42b42e1042aec64bcc994c960d6cd418afed2cb12e902f14e3ff498ceeb3c1eb01695049d09bb5faa70672f1dcfe226fee928ade91e6936fbc04a6994b2d0b2d0193398afbd46806589567dbde22a4a40ca99b71fcbeb1395a0b01ec61cbffa3d6f16f8354bc54416437a8ddf4050a348bf2f5d6d417c003b44ee0faab0e995bb96a64f825702ee7b31ecf679a6cfa9b5224ca8656fdb2039cdfa4bbfa794bb1f8ad46045a26557f8ee8b9e2c2c74deb3ea5d12c6f9bdcbbe9cd9dceed04d1f3c90cdeaa53c2b8c3dec029353f63a888eb02f0e129b4c26025ca8e53a69b4d5071f999be3a3a82e5d6c7ff39143d61f483bdf7c9e8261c9642e95a74d78ff121240b02fd4085ba22cfd27773d4110e75123e356a28507b0b4cb17086512def152ee15def4294d1317a64f503a79a51c647f56eeb796c19ea1185ebbf124254899fcc2285e5696828bf0b8e8ef95049b2ef8a232df0b75f603141a7402923939e17b621b1bef212a47fd0ef76053bab581b263baa61187bbfea6ac46cc15eb49db49c9767fc9fd5ae3b5767e7b8f0753d59cf3916c7d1bd3d3ecabec7ec6436c47d526e6e2db27f8810aa31331c4c4246901d10c46a6bcaef4bf9cd8f4a8086d6aa8d0700c2fcddc75da58c86b4d514d3c852aea77e897dfd131272ff7dcedb86c902c1cc17b252b5beef6e32a83d00970c7e862f3ffb35bf7abbbe07021cacbfbf79a6b982ccde0411e5b9061027ffcc87402f6a5f52db1941af2669251fc2ef3ab4b5297149ebf32f828994b2f5cdb233955b69ef709bfbf7f253267cb71c7c4b775d6fa91c311a7fd39c0d411dd89ae4596e14b75ec79b63f0cf69a5791a8c671e9b65dcb6022cf97ed7b5adfe3c428c44675041ed07f5a4c95dde29c727adc16c700b46171322c55c5ca16be4cea22f3f7b284e900e91b3e2f1b215c31e76d1935a35eb30d715d3a6a59cea9109436d19c36a2cdeecd994119692fe1cef1937ffa16480bfad2e26f3d7c29554b412c99f63dc17820092153e9f38944e31ce3e2d4bd417ac70311ce27a0d6b78692eab938817cacab5ef9463ab68abf3eff9455383e156957ac3a7339d80ce4f07eb6491a616545f88c8d1afb4a70ae21ac8d866ea832c1816b9d96be466cdcea7aef22a96dede33a910bebdd62f30ff453faccd5396a3715672c2f62b6864deaca03942404695c5b27304d948739d333efca6e656af9a7180976edb63a37ab3ee2cca9d89c4b557c14fde690528e29d136b23ea33a9e4121e815999cc04787b8d6ea22f58ea785f0124a7b01c6ee4bf6d6d6f52c46092b6b8ce9d4270ea025e760d01f4c14aec4a9009567ae7cfc07d2f20f98fcb", 0x1000}, {&(0x7f0000005800)="836ba984889cceaa740a3f73aa027dfb7e9899eb60982049f269af6007607bec313cea7d255829098c8b9e784412a5d4eaaffbdaaa6671a23de7801a02b5", 0x3e}], 0x3, &(0x7f0000005880)=[@timestamping={{0x10, 0x1, 0x25, 0x2}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}, @mark={{0x10, 0x1, 0x24, 0x8739}}], 0x58}}, {{&(0x7f0000005900)=@pppol2tpv3={0x18, 0x1, {0x0, r16, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x1, 0x4, 0x1, 0x3}}, 0x80, &(0x7f0000006c40)=[{&(0x7f0000005980)="c9c459bedf589b9cffc63dd551b502758bc246954489c33da329e17fc6fb0da14bf1d167feb71eaf5047007f53231a800e1573adbf48bb95f7d9e6009f0106aa7a80f844be5e8bbc5a51c7de667cbf59521cbe6cab15641deadd2c9c5a9d00ef768a882d3095cdfdbfbb6460e00c6f6534273506", 0x74}, {&(0x7f0000005a00)="f5573577b07ff01a901e43f5f58ccb7deeec21a82b8955f08a7ee41edb2f3b1c47805d1ef9ad2f427ce9bd55a07794f77ae5ab0144852f94b623e6d7305894e4a407717eb7ba98adfa4fabba9437583db568ef51db48a8eb12c43d240d97cab7aeeef3", 0x63}, {&(0x7f0000005a80)}, {&(0x7f0000005ac0)="db310c4659d5db9ed7000538cbc17746207dcbab959b725c29dca5411453290d9cd904cb01cc7d8cfb02fdbff650239b3d9b740d65ea3bb564d82c27597dce182f652d2bfc12586beb9654775ea42fb6b10aafa7972eb763effc145416f79471f2d00c9f1624276835301c274635c6b91d7f5a40b85b91cab901381d8d", 0x7d}, {&(0x7f0000005b40)="f0c1f7221026c95349b57ab56010f5c23e54f38d561232e068e3a6980ac41f8de68dc0010bdb2cf164fa65cf9af7501bb4c6f41164718aeb5c5c746d8c1b0c", 0x3f}, {&(0x7f0000005b80)="268ec6329992558152df439a7ad2863f383c703811279bdf3bccc6", 0x1b}, {&(0x7f0000005bc0)="22cc6a5fcc273e59af47e529ba37932c93e8971b2d57a2", 0x17}, {&(0x7f0000005c00)="50583bc4951c4faeba4a66c1d343398d6c557800f8002dd7", 0x18}, {&(0x7f0000005c40)="ca781985581a07ee950ac90cb94461734a89acdc4032bd2f6173aed45a4ec7b40222a43e736f8e2808834a81abf9a976e30af0997f5f3a916627e342fcb1978d31bbaddc9c494b24eed5181eb2369f26055e4eb5ad3011e7a8d0c64120520acd9a34c5d34f1017ea59aa8f7d773d3a9953f79190f6d689d38f76790136563cacd3636d7d2a3541b06db141b310bcf24475c282276863fabb25442da35a3b804ac77024ca4afa04d0a0a1ca9cad0ab26ff02de53d233bdae94b755fc51787d2a42b4f8470811eac7d448af05d0e6d68d13d35d1e3003f1bd83548a23f57d3cd11301c968f27f76419d4c7b26f88de24e6aa468f52c743daad2c4e13006d8ae985820854a057861985ba7de2be8378834ba5455dc4869c9f37834b2db0e4e99cf558ef911e5bf7ec55dd5bc35a8eef8520f2b78b938f4fb737131b4787a5b891732e91f8e4aae6bb5ea7e402154e430b6d69cf92ade2d4150c9b35f596e95dcc3a9962882b5bee446411b56d9f45ec53d74b2630c7d00f06680df5e72af184a324d4095c69bd1d3007a1a8a6df2f62524e043f4f03d1a293e5e024634b63b85420fbd8b17f3bbd79f1509637feaffa51a4712fa654e6714139975abf49f6edc20e01bae6e67540c8dbd78a6520bc3a98f86e7e983aea377fbc7207c945519bc47a041d9db589984adff8c22e30ff58dfa93d218090f5f6925c6aef7c78649942957196a2ecc635cff5bad5a72f27fc511b1f155dd6f337cab4ff8d0322f7bfe8bc5dcce13c00526382a59a6dfa1b44b6c334b29ed80384b123e809eeacf1a91dddc322d6a3e3e88a7ccc2f6bf641ef1e524771cb8550ff5fbb57a811d92205f0d6e58255eac7eac3aa166542afda4bd117c4453ec85d181ea5d8bf89c7ee0da156faef65a4365f370feb587692249bfb862ec5a2dcc9f7af962e85eaa290c6ef8309b11ceb4d1cc682bbf843158202de597f4a8e5eaf4da521c216d75750bac7ecd93603f565fe5b9be427d8368731861606924bddbdff145852518c9c77f8e66b5cdcfbc36f2be8ed6eb3bbd90243e0393d8645061883546f242666896b80a2a61962ecca8bf9c732fe348c2983160932c256d3c627a01f1a6a199abfb6f9a17c6ba385dff59fb40f3ef0eb128f5f9125f12eafe17c1b2b98ca47dac5cee955e6e0cb41c5d0689e86eb9b79768a1590c82453749ee6bd96b7cae030d8812b75a15b9c12230b6a851a3939679451a550951b4346db87662146f64415269976412a06566499c0496dfb019b1a18b7742e930d8582f4f3ee964b2b33df1c4bb60f291827a94dc28456567b309b39e69b3458539c5efec0622862b7b08e2d734e3c77bb0876ea4df4b1b6d72fb61d44a49112130afed4046c676990cb52cabb2a555a1f62fb09fbed06b600f830bcfec947ebaaabdfcd650311c811d1ff1e915664dc12ee0681c39175a4055b241583bd2514d6bfb6d33bcd335f8dbd7e821646250aeda93d4807f07cf6a5d03a57f94ff210fb03de6f16745c261607363cad54da96438fe33879c7fb245bf978da1dad929308615c37bc62c408756713dd10cdab015ec63f3ad3b5b3508c720f58d5d24794b6b972055ad61e84a73c5b5e543962ad61fd80472eeae8c6e1643e316b4f3a76dda52e681d726d5604ef470cc2d451f2b5e42966dc7e6a637b962a200c6a08579be3acfa4d2140adff8c0abd3ed6711adba88626e8830d3fc7fa606878456601bdfad1d4026b99897661f7a52be5fa8c0278ae34333c7c52c1075e7665b7b18420c23ec401aa84353beb9bc182ee4d509cc7962de92c85ccc055e7812070b0e427a14db6ce69b337bbddb275d04ba9fe4ad9b51cd29768188665f406b39d5c2b9c3986fa481b48ce48326cb150e0ba4eecf7c74d9bfe61cadad2e1387f8e8d171d8896fbbbce361f4ac183e35ac054abf5f42be7318495c23d019197f319006e58318d66dbf2d01e6a2732c652764eb2383b9868a40ee55d74924eebbde65e53dc11defd635a83b30ebb290d1ac0361b411f6bffd0bcf858f17d66d222529c764529830f2472353544ac6fab4b810b64f4ad07b865d23b79e766215c638e6c8d5d22840e8c0aca0383dd21f9dfb9706d572193911e6f669a249079ae1959780811846ca123ca87a886a023a92d75e1c9abc90f014857010066d724815cb747a1ecfbc5568f128e3d7d4f835ad05de76cec9d8b9aaa7f1f8b6772fbf71a625ebc0848aeba893901f9e3d82fb03009f87c8d974281e84fd149c779ee6b7b97cb65f9ccc42c50acc7729bdaf0728fe46aa006230a5a8d30723c7a6fd707a07fd42a6bacc867b565e32280bc84a8dd1923ed17957a945657e975efa47e2b1544864ab516abafdc0035fc64abcffc3f987ca2e3bf4958c45e7edeac869546baac543e7c9d56286294c46dc0055a779fcd53fa3d846356c5d8c3c2a85404447e9215c21d67b3618e8356e3b642c47695c53cce8ade69b2f875d0ac67c20f8c491a2f4d128689b1038bc66b8a6c9d3b836b4c2eed3beb49208e2e033fb0c12f1435cd7cad58c45c228805008d70946258ced122497322aeda9d515637ddb8fba0365fa566bd728d05430996ec5f1726dc14ee6034b77de1f6058cc300424f9567e28e183fcc5c432c6d840d34633a7159c9e8682c90f9ad58d67987c8835b11e340c8924153d9d8c341682e192de4a7524a7e1f0421c99aff1d7d6a8874c238463a44bf269e90c2af9f2632a75b55ce0bd09373417c6347ae3dcb10ce46e44e8acdb0992a79bb0526fa7ec8a02f6af0070f584932a78587acf757016f529c4e909f3bac2ccaeb3e4995f62de9da1b57bbcd454dfeb6cf577074e1cb76052e825cf41918df69dbcc0d7c29df6890cf294d7f35716c7e86596dfbe4b7e9f13ebf8e1fe19157704a10bc55c472afae5c0db02099c12ab511292f5e02ec67aeccf8f1c45b2e44cd81afb9a5a0d53458d797b510a3b6c7f94e90fd6cde2d27660d3080551d00e5a159a1ac7eae126423ec7c0a48ac3ae24fcda59b2d6deae558e59728a06ad463f2e689bfe713f6d74bde2c6fcaacb42fcded8458e3ccd0a01425ff0ab1068767b2db52d301176042b724f2423eb7d1576920791281e8edab95c7d065d6368c3f05a9b4f475b067eabfb97332f56eb6bd34d349369836f93777360b6fdc3ac4f6fa0f3aec901ad7bdf4fa7a67b48d5242a65e4296330be5d16806309c4117fa63aa65ab58a670457645016e1bd996fcd828c19f2b8b5ad565fed78ad6a1bdb10ec2a6e8ee3169a5bd4468dd8ce11a1e16bbc610e87f186cc7b4f3dba0c5e2b728dd17a0ad8542b82f2c2562bd2e92e60dad807a258a51089743e421b2e55db63d50aa521bc3d7699ac4a2919bcc840a3bd1eb792fdb81edc3255300b2d8c45a92a7acf02ea02efa5a7abb3e65f9c2b44886a1c126113d4ad48f477e62ce701272a25bf3c86179b92fb73b0214f8113b3ee594d25860c417a2914c8cd5d057f79eb4ac4ce6968f1d51e50720994d3e631c39b3028a6dfd78ea46d19cb3fa87af0a970d968a9ec650261c1f8955eefb3ee5bf950f5869faa24c7f2d40b5ac74b4f1d2690ee1bc65b341273611012fb55877c7f214e824b63e8c5a948c3bcb73c176932ee79aa954fa05cfeedf992febf059944a53e04533d8f75a92f87dc78e46e801fa10a6dfad0147e20baea8e513e16df83587148e51b8bd5eae8257d746724fe87a8ef74e69b998676d31a0e857ca35c3aa174d007bc15ad88330b07c5ddc7a86e1a7cff34e309c203303204c9aef0fa4d0db4f308d95a92772ad02c1280682ca355a66c7e671a3ac27fd8f0685370bc0325860a68fa01f3de7bb5731f9f7dd978641500773283b8e0e57d4810a39466b59477a54807476367c2fc00422a25603c373e99e64d4c4c87240675fafb77df81b6579576e66644b1b293a5c7563f1c11269106fca3c5a71726f7f6c7ecb1d124c7b90caaa114908f79ce837bbf55e217ce689998ba1fe45cec682a98130f649dd6480d1a28c723bda5ebbd4f3e1eb69ce36e3fa1df1cdf1d4faad0a1ad0ec46449043b1c57e6a4d13a7f0c0e0778bd3a38e2e85d4c8febfccc95bedd41f9a1188a51a5123cfb870f244d35e99658ddbab9949b6a53805c2b50f12cb9b74974196ca27e76015e490fcd3c90303c2cc26447e6191e8bdc1ce8a30db95a835b402455ae4b8cf7eb587cdd9e3edbdc288b6134e1c38102965c1ce8287dc3b34c8c810b61cd2f4374e8e8fc03099db9de0f35c87e8a84fdbef3174e22983b86b28f7c4ea8426e839630b47d50fd7722159d8ebe3c7f3109e1da04d2f224c97b34986936ac9d4866dcea7fd4840d6631c80ca5e32111fe7fbf6502991ea279bd82e11230754871175e8cfe182c109598cc703e067034721c9a992c5304cb713d8a1807826a0dd9d6971fb3189a721bf0ca25655254da96407a5a05f14d6a518583e7ee78cb2e5c46023924b0895ceaf4ab3c8f8224e6e4c289ea64f8c73be4ef3fad72f8bdf7d8f9c9298bb32d7a011837592513daad4e9a8f7f03ea4b9dde470ba01ae590cb24aa51b6f50e1072208f71e2e913ca84d7268e623b96dc13ab7f28633ce604e97f96a01e8f17effe5b8b6baaa70dfaa6a0391578292af0cca88ea41b1ceabb8753df90361df77a3528a3a355e512bb26b988be58b09d6dc940e7ee28c314b89569430db055ba5611b43744bcfc7e4713cfdc2fcdcfed2c94b0faa87d911d88792945e31737fea960dcaf1dbf2840ca5b95bd63e5a1048e271c1d784e3695abe72ae8614c5bcff8cc21b049ab3e988956a1af7dae46ab0f625eddc1eeed1e5f0f7baad109d3d484c929b7779bb6471253d86c2a5f159cdb217ffa594902d79f3f0fbbf6479050b60669f395cc80d1286fc6e5d8d6793683df170fecaba2395ee6f5353f60a972e64995470445e90dcdee17b4864e839accfdb41a208a6d4ab8ecc1c2ad9d8678dcc5ba044ce31cc1817f4d0fe2db7f804499a5950f7517497c70b80e82153565cb3108c5510862f303da033fec88d91ba0d4b873f3d7ab836e381ea4e13b264ecc399579634f5da4d839a7ff9f2a988e3829d500c3d5b86e4b666734c508b9d2e6ba4e8f09ee461f980d76e8390a655a96d4e78f3e8a0dc09338df2bfe185301f1f54931aaf6fc6304dcf10cc2662f4de4b2376648b2d1eb25d1cd7e99ed82cab875a416da67c21e304d8f2b1fe392f2770e76ac9889cc2b9f836b36e9186741bd70ca3c7a874f830c015b9a45129a951c2733f41b9d5eeadf02465e058bff13a89fcfd13541fdf703f5377f9f4561f6ed47df193ee2bea42c1a2419edbb0f0ce7b7e26f46b01c9221adbf4bbd12864da4b1a4f9a1cfdbdab95a7906296e9eacfa45b1ecfe2498e1f6cb0b378d860f80f3998814757bfdf3ce287464f6e196e98dc1543a66eceb7618456ead071cd2026267b8cddc9035629e57d0481e1e42887c93a530bb6ad3b304fbaf8cbcee33baaf8f48f2aa16c8f196fbed071e56f1df9fbf788ad513acc8e75cc19d74beb5c0cb42dd275a7e0bb5086e1ffebd1820856fa8f98c13452128fef5aded4c69daaf5f69605c946b855a975993624247d23c5343bd846bc0da96772540df1c9a2cf568c98e327aa11cfb6a36e9cce690d293514de78d9f4a35e84180a1c40c4c370e75f76d91b022604d067fa018797319e6c006ff46a4e539c0f804864e790357ea3e57b23ba85997abd13159a5935d634c441eb54ac62291044a704041ec9295127c0155ae8", 0x1000}], 0x9, &(0x7f0000006cc0)=[@mark={{0x10, 0x1, 0x24, 0x7fff}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}], 0x20}}], 0x5, 0x0) 8.37007404s ago: executing program 2 (id=7612): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x19a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr, 0x10001}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)=""/130, 0x82}, {&(0x7f0000000100)=""/120, 0x78}], 0x2}, 0xa1}], 0x1, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 7.344890253s ago: executing program 2 (id=7613): syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0x8}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) fstat64(r3, &(0x7f00000000c0)) (async) fstat64(r3, &(0x7f00000000c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd00011100"], 0xfdef) (async) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd00011100"], 0xfdef) 7.206063412s ago: executing program 2 (id=7614): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x30, 0x1ff}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)="d7", 0x1, 0x10000, &(0x7f0000000000)={0xa, 0x0, 0x4, @private1, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000100)=0x4) syz_clone(0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x4, 0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r3, @ANYRESHEX], 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r4, &(0x7f0000005a40)=""/21, 0x15) openat$dir(0xffffff9c, 0x0, 0x140, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x24}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfffffffffffffdb4, 0x1, 'i'}, @NFTA_DATA_VALUE={0x0, 0x1, "0c2541e0ae7d738230c19c721be8df83a83a88d2090aaa7b2b5b0b0618a2646eef02efafdac55804cc64729e53c4f32e44d7f0cca0424c644cfb17764dc901e863d827b699a0f0f11cfc98dd245dbcc0738063c72985b3569531c835e7363ca7733c07dc701c5fda4c7806a30ac00318e1178badf412045c"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x0, 0x1, "1fe0c813e7cc3f8926da97fdb104e7c077e8a5e591a7cea91b6fa918a698279234b113655641407e6ab556ce99bd62235c59eff78ef7a446816ce4617a7b6d1c4997f75ccae0969dde55f568c5221d2161db44b69f65ede0de162a381bb262313af25033ad5f5a56f0716467d82cde510573f874171c03671f61060cdb9f47b8a3b97cd3bfb34e5beba8afa7308a0c0628c8d43c688f5451e98b60467a1bd6de0c0a22500e1ef63f68bcf46efbd9db0a3a02c05d4d4ce19ea06982cfeb334ed635aa2a76b45da1048153e6380438d0cff1136963f578486d1570c880887d9e08d74a52cd791610c6618564"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}]}], {0x14}}, 0x94}}, 0x20008004) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x50}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x9, &(0x7f00000000c0)=0xfff, 0x4) 6.597850643s ago: executing program 4 (id=7618): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x41}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) setpriority(0x0, r2, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000300)="7c8bfbf2decf3c43a58475ea1744643d90d145e719471e9fd14c58dbb262fae5e83c07a0f68b2302b934123bafac432a79c6b7d2153a14802f04e39adb164decaf9178f2c3ad12fc8ef6c29c431168d218e160366a77b05743eef567393653b7d59df7444f8771bdbeed5fac7156a9280e48c3efe86aeaa88632db0533cfe70acec7d40563d821cbc4a2fa504bda0fbc09faf341fb89fa904b86fccd57aa540b55db5462f14e7ac762d50dae269ce2f3903a70b79a13ddf562a2c3050b708c4aa0de604b97d50e9dd63565b57258b441b760", 0x95) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 6.032867198s ago: executing program 4 (id=7619): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x800005f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x23, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x2, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x13, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x1, 0x0, 0x10000001, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x10001, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x7fffffff, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x4, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x400000000, 0x0, 0xa, 0x1000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0x2}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) (async) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000000)) 5.992755883s ago: executing program 6 (id=7620): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000300)=@generic={0x6, "4daf0affb98e7327eedb03a8914278fca19b8e12265acf2570da305a7e68e32d365f0dbb407506a4b77103b81d49cf5b3887dc96a7bf499768000b13572e7c9477fbcdc1e8001782f7f0a0f12ad2f1e709030ea73e3e0428a44b3e696c41069c3d3863026cb16c20a2137c18985dfe3d70154d36d6f49c6a64293a15befe"}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)="5bf94363da0cc46bd34e53e4ade81c364c7c76ef90ec66151b6aa730b5785254140181480157f1259c5d29011eb5ce94ea3c821a9f5a261036492b4b58f1f4cf3457fdee90fbdf412a226e178a19c16c9eeb15aa910b51a7029e5c3f47a2ac40657edc4264d727c51d73808e62bf65a41fdea15fc4ccbe19022913745b15398cc0832d5994e6d70f6d5f", 0x8a}, {&(0x7f0000000440)="dc5adc0ac0010887304e7bd6427b0664187fe7da11a53e3e95e3fc2d71a8c2abd0f630d51bcb3b54e37aab8a7077dc0ddf4b9db970223df0ec4e4767053393381f1ac3304e46d9da57b708ce438df18b", 0x50}, {&(0x7f0000000540)="dbf340fcfd1eadf60ac4b1bb4a56aaeb48dacb69512a9c3df20722cc68bf5bcf13a7aa0164f2b5a5af5dedbdb0288685ded1d69f6fd8cdcfc3b4371a9f3e3e5456490354514d34a9f52451485ef69bbcbc0f791e2d913d6ef5f1", 0x5a}, {&(0x7f0000000680)="f55359bfd33db3d94029e1b9b4c0ebd08ae6d2768b7fab8e495975b31c5bd8c613", 0xfffffdf8}, {&(0x7f00000006c0)="b79f25aa021e10cae63919f6c0ad99a682ca51cc9242e1e444ef8bbf4b521dcca42d418f2734c192403daaa9e0060e20cc091e9913a3b47f67cb5bfb30cf38ece882e44c451146a51afb12f35b32618fbd3a89e1a4921421daa47a8b97bdd4720f79efec2e844af547b855ea5d0d7a8317f5e6bea33fbf234830afe1e7291a7cbfc26ec7b65b5f9911bc899227f6588035c2656cd84f077473a8dff2aa63662bbee07021c32e555a3bd77e04ef9bf177d2f0416965fec8fcdeda8135abf6476edfe859975f79e9f517a31e23", 0xcc}, {&(0x7f00000007c0)}, {&(0x7f00000008c0)="2bf99c8b9e16372bee86975a9e286d7c99c1410d560753efa85136428a2fb46fa717037b3f9fb8cab4c7ab1442cbbaee59b852b42cc4060109c1e34a2f4c42a730121117397b7116ee924914c29b", 0x4e}, {&(0x7f0000000a40)="a9bdb7df3e0d460d418de03c5a4fbecd9bb5386b0abe8c959b9eb03b661eba9a1a7855cdd7ee7f5574bd9c6e24019214f09eec13e5015a43b4a09c97df6bff9f610969af88a168073af03cddb3136e3dbbab48867408bc136b23e9cefeb1708acd95b3ac1e3559808b3bc433da7ec74a9e163232a2141820a1120ed06a267401fb50d57c781d3553afe8da3981f6f935539b6eb8c5d217e55e4f8c55629910e02eb7ac65ce2f7212a04f6f2696b4b8c3b04e67472c83092e856afd29d8d3924c4aa6929662c8f275443182a2", 0xcc}, {&(0x7f0000000b40)="cec45d7e005e2a1f5768ad065531dab6d39acca82b9d8d757bdd4e31f313a2595d31b01dfadefb20a148ff38a1785097f87d47ba0c5eccba75e42d05d0d21546f75de72cadd0a9ef670294e69f109702980ec597f21fcba95c1f827026c6e6ca48e473ee08ea33c64669578e6925c3273d160eaeb6f91e1a500362394219a9bdcb31a3ea4df4772c27528c0d0881e154fe64f06ddac6b1b365f472320a9b08d0099e70493314ea9055b15b74b01b5c62138faf5dd74c9d270c7cd3739d8da4af55a68d64f6561d98c0eb6dbc4c49fae6e664d7e664007d", 0xd7}], 0x9}, 0x48084) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000840)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) fsopen(&(0x7f0000000500)='debugfs\x00', 0x1) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0xfffffffffffffffe, 0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c0601131000bad775aa1b71ca", 0xe, r6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1000002, &(0x7f0000000c40)=ANY=[@ANYBLOB="66643df891f2b2d93c35a82446049e7d27211b20389895a409770eaa26d3959fd2fcfbf1bdaa9913128296e5cc37c77c919409e5d14389bb410c3ecb2e3e4fae07396b3e3400bf51419d441e16547f3f1a9b890437aaea80700834c53be0b5", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) splice(r7, 0x0, r4, 0x0, 0x401, 0x0) sendmmsg$alg(r3, &(0x7f0000006f40)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="a062f19862b22a28315b8a829a77a7ef770e53c99d5b0059c472b0efb22d45cfeb89c26dd13cc8748779458860109a19f5fb0b87c7984e0f1fb43157e7a9edcc07fcf336930924680aca0148", 0x4c}, {&(0x7f00000002c0)="87d4173cfa63ea", 0x7}], 0x2, &(0x7f00000004c0)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x3}], 0x20, 0x4000000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000200)=""/83, 0x53}], 0x2, 0x0, 0xfe9a}, 0x2000) syz_usb_disconnect(r0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000a00)="da", 0x1}], 0x1, 0xfffffffe, 0x617f) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d0001000000000904c50003ff0107000905050208000286030905870200040b7f14000000000000000000"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000020605000000000000000000000000030500010006000000050005000200000005000400000000000900020073797a300000f13f7ebcdd6ff96c49eadff3000015000300686173683a69702c706f6c742c6e657400000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 5.399617126s ago: executing program 0 (id=7623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x2000, &(0x7f00000044c0)={&(0x7f0000000400)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 5.335529442s ago: executing program 4 (id=7624): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b02, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) r5 = getpid() fcntl$lock(0xffffffffffffffff, 0x7, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0) syz_pidfd_open(r5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100", @ANYRES64], 0x24}}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x8, r6, 'id0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1005, &(0x7f00000005c0)=""/4101, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = socket(0x2b, 0x80801, 0x1) bind$tipc(r7, 0x0, 0x0) syz_usb_connect(0x0, 0x52, &(0x7f0000000080)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 5.29807382s ago: executing program 0 (id=7626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000010401010000000000000000070000050500010001000000080005400000000608000440000004010800032400000004"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12000008"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x21, 0x3, 0x5, 0x101, 0x1000, 0x9, 0xe12, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x4, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x40000004, 0x5, 0x79b, 0x2, 0x6, 0x0, 0x4, 0x8, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x256, 0x81, 0xb, 0x5, 0x20006, 0x2, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x22, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x8, 0x4, 0x401, 0x66cd, 0x72, 0x6, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8, 0x0, 0x4}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(r6, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000012b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {0x0}], 0x2}}], 0x1, 0x60, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000b0008000100010000000f6a02d5b1ed4c2b472ed789c8e16fb93900944afee4e9d1ebe61a73338763c48514ddd87ca22aef3a27b825ca64838018e95043918cb58855cfe6fa90501c98361290a7ae06f87eb9fb2900eba0dc71daa100624d31d74d7444ba5d974fdc4fabb2da2b698b63615289fa2934243816b4e079debcbac135ae8ca0afc2d561d203082bfcd2424b91e3e69a9679830f8b5743786bf6c07fbeae45a353d1308c998d22c81c098adc916e7165e99428d86e5962886bf2e8059e743fd79f5e9bf9cec09b3261f900448a24"], 0x24}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000040)=0x2, 0x4) 4.933139471s ago: executing program 0 (id=7627): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x40015b0b, 0x0) syz_usb_disconnect(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 4.114830934s ago: executing program 2 (id=7629): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1001000, 0x800, 0x3, 0x1}, 0x1c) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000100)=0x8) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x4b63, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000240)={'\x00', 0x8, 0xcc, 0x4, 0x6, 0x6, 0xffffffffffffffff}) tkill(r8, 0x20) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r9, 0x5450) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b80904000300000008001b000000000023532bd980974d7f45c106d7501ce83efffab02b3c361f4881c4e88acdf802e081c1fe46fb0a0015276fdda0ce31672d183d1c6e871567128371ef52cbb82ad77c45f598e824d977f16f72aed8d1fdfad50193cf2380e8da717c4df0554ad4d423b524ca5962c42040d3f7435103cf58acfbe4cd2c8511785a5bbae8"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r10, 0xffffffffffffffff, 0x0) 4.021407941s ago: executing program 1 (id=7630): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v2={0x2000000, [{0x2, 0xeec}, {0xe8000000, 0xffff8000}]}, 0x14, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x109881, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d07, 0x0, 0x8001}]}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) 2.810156428s ago: executing program 6 (id=7631): socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) close(r6) 2.699216889s ago: executing program 1 (id=7632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x1a, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r1, &(0x7f0000001380)={0xa, 0x4e22, 0x2, @loopback, 0x401}, 0x1c) sendmsg$inet6(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="9c0000002900000037000000871000000000000001070000000000000004010304019395040109004547674b237c3f992dd22a4c87fb1343a8c0f169cf35538bfdba76ea6a3a1a500000a1836740a443c9626d674b719da6140e110a9c61a0204df8365ba7062501006038b2b0477385f985d0d806a2b27f3642185b3d5a23680000ffff64010101c910fe8000000000000004010204012b744be90175ebb96fc4b021a4ef9aa6a7088d74063fa5789a8f2e13bc0a7b380d06813ce4299c38991211f1b7095bf7f1c573d4f2a6bc688d3a0f430a1379b0dc7c0b487e4e0ecbd887e90b00"/239], 0x9c}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c00)=@newtfilter={0x5d4, 0x2c, 0xd27, 0x70bd08, 0x8000, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x5a4, 0x2, [@TCA_BASIC_ACT={0xb0, 0x3, [@m_skbmod={0xac, 0x14, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x500}]}, {0x62, 0x6, "0b8063ac7670fdb2fbbcaf4b8e382781b9ecfd19e5401e06f557d17353f27b8f7614f06106445d1568cf8efe3edd3ca20ef4bdaa927af7a19d5636c9c1e991f0a6da221478dda971391c0d7aef907a677cfdc0727a8664c6797bb89244fe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x63126d6175cfce26, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x4c8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x3}, "17bdd1d1"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3b, 0x3, 0x8}, {0x1000000, 0x2, 0x3, 0xe}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x101, 0x3, 0x98d2}, {0xfffffff8, 0x1, 0x94, 0xe2b}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x3}, {0x2, 0x2, 0x5}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x400, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="00000076b83a1befe7f6", @TCF_META_TYPE_VAR="8f", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="9db4c2f133", @TCF_META_TYPE_VAR="a9c194", @TCF_META_TYPE_VAR="32cfc4e4c29574118f81", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf62, 0x81}, {0xfffa, 0x1, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x5b}, {0xfff, 0x1000, 0xc3dd, 0x4, 0x4, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x400, 0x1, 0x4}, {0x9, 0xb, 0x8, 0x6, 0x2, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0x54, 0x2, 0x0, 0x0, {{0x3d, 0x0, 0x8001}, "fd114c0b1acc5156d589ff40361c207effa1e467b9586ab8c9b81ddd2515e94292ee8872ce4211d7f6594eb758defd4432f485962a79c264715dcc455d85ac8bd62d418c668a77c1"}}]}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xfff, 0x2, 0x2a}, {0x6, 0x1, 0x0, "ef"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x5}, {{0x0, 0x1, 0x0, 0x1}, {0x4}}}}, @TCF_EM_META={0x98, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="63c04411c9", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="d0308229fc7db1"]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="a2ff84d0", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="f696f55d", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x0, 0x1}, {0x7, 0xf, 0x1}}}, @TCA_EM_META_RVALUE={0x33, 0x3, [@TCF_META_TYPE_VAR="9a4ec8f269e0afe2239d", @TCF_META_TYPE_VAR="636a9b1e", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="a16b6450114e", @TCF_META_TYPE_VAR="d20d5441", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="58b1e3", @TCF_META_TYPE_INT=0x1000000]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4, 0x1}, {0x6, 0x35}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="79850b93266a", @TCF_META_TYPE_VAR="77e2c009", @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x13a}, {0x5, 0x7, 0xdfc, 0x4, 0xb, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x2, 0x9}, {0x3, 0x9, 0x0, "f4a5f67c7174f051e6"}}}, @TCF_EM_META={0x9c, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="c7ff", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="e681"]}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_VAR="8fd708a6b4", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="58d07375", @TCF_META_TYPE_VAR="d72af76a48e69a1887", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="368fdcbb958315e8", @TCF_META_TYPE_VAR="9d8b02834428cc952985"]}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="cfe9", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="5f25ca", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR='`o', @TCF_META_TYPE_VAR="128a1c6b678ea1d9"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c22b40f804e5e3", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x33a9, 0x9, 0xb}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xb2, 0x8, 0x80}, {0xffffffffffffffff, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5273}}, @TCA_EMATCH_TREE_LIST={0x1d4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd4, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x8}, "130fbf21278ba734a3b0ea21696f8ea3d757ba3a894768a18a19ca154d50648237fa093828b558d5f734bde50c268c8c87b2956e126d9e6ad8f89900f065301263e43ed1600723343fd4a1ce53e24d1f8deaad4316a122dfae3b4c9fc364592178c5c19b3cca6465b641d4e0e7357f6ab1fd03fc6021fc11ca26df9d5769109125c23229b93bee4cfd8fbb5aeca67e427396d7cddf289fd9b459a44c47d74a166e045021cba25462f6bc0d9e6a0a7e57f432bc6bc005c80ba6b9e74e6dba8cacda07949410a70d"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x101, 0x3, 0x5}, {0x5, 0xffffffff, 0xffffffff, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x7}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xb4, 0x1, 0x0, 0x0, {{0x4, 0x0, 0xbe4}, "2044b3086b5d144499841176637d8ae865630716a7972fb32d2563f3641935ede96f65c986388cc800497b9986d705f2dcd60f8dc7c57a0ea5a494dbe4718308d10f557e921b9fb657ccf32ce2c8df4d88dd683e276d5c986c760ce1b491c3a7466dd1e61562abe70dbcf19795b00b88f49a21001d52d0fbf8f603ae53df1630e5cca5dfed78f5ec8aeaa6a7857bd659ba0e049496909a413a8e511eb5387a7d51480cab781fa5b3"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0xfffc}, {0x5, 0x8, 0x3, 0x0, 0xf, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xffe0}}, @TCA_BASIC_POLICE={0x20, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff86}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb}]}]}}]}, 0x5d4}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 2.290177494s ago: executing program 4 (id=7633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="08000800070303000200140000000202005d110f846429864fd168cd48a8f352411dd59da00749aeabf7"], 0x2a) 1.762508347s ago: executing program 0 (id=7634): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async, rerun: 32) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) (rerun: 32) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f0000000240)) (async) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x1, 0x82) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000380)=""/4091, 0xff3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20051084}, 0x40) 1.483812247s ago: executing program 6 (id=7635): modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = syz_open_dev$cec(&(0x7f0000000180), 0xffffffffffffffff, 0xcccc0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd2, 0xe, 0x9}) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x4008550d) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff8e, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6afeffff02060500000000000000000007000000140007800000028000000140e000000208001240000080010500010006000000050005000700000005000400000000000900020073797a0b67ee6fd9ec79e9310000000013000300686173683a6e65742c696661636500004b9c846c66ae63a2ffd91ee81dd64290726c8c3217c4211125e6b32eca2dd5b36c03fbf5f2731fbb76473cb1"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) socket(0x2a, 0x3, 0x4) (async) gettid() (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xfffffffc}, 0x1c) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x700, 0x7c7, 0x3, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x89, 0x4, 0x0, @broadcast, @local, {[@rr={0x7, 0x1f, 0x23, [@dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local, @private=0xa010102, @empty]}, @timestamp_prespec={0x44, 0x3c, 0x47, 0x3, 0x2, [{@loopback, 0x7}, {@remote, 0x6863}, {@dev={0xac, 0x14, 0x14, 0x27}}, {@loopback, 0x7}, {@empty, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfdf}, {@multicast2, 0x100}]}, @rr={0x7, 0x1b, 0x24, [@empty, @rand_addr=0x64010102, @private=0xa010102, @local, @private=0xa010101, @empty]}, @end, @rr={0x7, 0xb, 0x9f, [@broadcast, @local]}, @noop, @cipso={0x86, 0x22, 0x2, [{0xe5d0495bfe7bb8bb, 0x12, "393e2d8d5f70d161808c989d4d23a77b"}, {0x1, 0xa, "21c7382abfb63916"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010102, @empty}}}}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="a1"}) (rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00'}) 1.241491824s ago: executing program 0 (id=7636): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x80, 0x2, 0xfe, 0xfffff028}, {0x80000006}]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000680)={&(0x7f0000000180)=@in6, 0x80, &(0x7f0000000640)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f0000000580)=""/143, 0x8f}], 0x4, &(0x7f0000001740)=""/205, 0xcd}, 0x20) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000380)={0x0, "836d11f8a2f7337496bff2b4d43d090000000000c22e174c88dede83ee00", 0x2, 0x20, 0x7fffffff, 0x636, 0x10, 0x3, 0x0, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) capset(0x0, &(0x7f0000000280)={0xfffffffc, 0x1, 0x4007, 0x81, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffcc3, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x10005, 0x1, 0xf27, 0x401, 0x7, 0x81, 0x8}, &(0x7f0000000200)={0x5, 0x0, 0x49a, 0x6, 0x8, 0x45a, 0xffffffff, 0x10000}, &(0x7f0000000240)={0x0, 0x1000, 0x744, 0x7, 0x9, 0x7ff, 0x0, 0xa}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xe78]}, 0x8}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, &(0x7f0000000040), 0x1) socket$netlink(0x10, 0x3, 0x9) 1.236838521s ago: executing program 1 (id=7637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x50, 0x2, 0x6, 0x20, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1.030607254s ago: executing program 6 (id=7638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELSETELEM={0x760, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x74c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}]}, {0x72c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x728, 0xb, 0x0, 0x1, [{0x724, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x714, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x710, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "758fe36d82e13982683370be4d1596442855dd78badf648f19ceccb5c3b2924c9279b174af0727cf0501b3d75fb9cc00a0948f732d1e6bdc97783495c3dfaa55ee354083b8b4207fc878947e6f8afab7e619f3675ee5b42fd711249895f7a9163e401e8a39f7924ab80186155e17a671fef8f1c317a2d839ab073262f9629acdfd8eff20f4cc485b3c0f4af122d448ec45cf7962783d0c7e1eefa7bfc439db6fed7005b1ea83eb5b53fc400eba1ebcc16448ef226c07c41f5d5667a7930e6e2dc1ac8741f841510118b58593c5bba3dc1fc161a929a19437470541e220dd37999d"}, @NFTA_DATA_VALUE={0x5d, 0x1, "850c01e48bd19fadd1e03d8a971a40466ad213e40619d9fdd07d0754304adf63a22d0099a4d283efba26adf24bb4820800a2d90fc25c1d505cee96ea9870f7f17a9f9d1ac205dba76cb7316a607c24b3d6880ed7200a9d6a6f"}, @NFTA_DATA_VALUE={0x5a5, 0x1, "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"}]}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x788}, 0x1, 0x0, 0x0, 0x4000811}, 0x41) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x20003}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000002cc0)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x6, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000001, 0xff, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0x80000000, 0x2, 0x5, 0x24c, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x3, 0x925, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0x1, 0xde1d, 0x7, 0x2, 0xfffffffffffffffc, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x1, 0x2, 0x7, 0x8, 0xfffffffffffffb60, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x4, 0x1, 0x3d, 0x6, 0x20, 0x8000000000000000, 0x5, 0xca7, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x10, 0x80, 0x75, 0x1, 0x2, 0x2, 0x8, 0x9, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7687, 0x1ff, 0x7, 0xe648, 0x2, 0x6, 0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x7, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x3, 0x7, 0x9, 0xca, 0x8, 0x7, 0xc144, 0x2, 0xfffffffffffff36f, 0x4]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)}}], 0x2, 0x4000014) recvmmsg(r6, &(0x7f0000007900), 0x847, 0x10162, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000280)=0x84) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xcfa}) 1.011761244s ago: executing program 2 (id=7639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (fail_nth: 6) 985.555153ms ago: executing program 1 (id=7640): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', 0x0}, 0x30) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000100)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x47, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x2e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x40, 0x4, 0x1, 0x0, r2, 0x10001, '\x00', r3, r2, 0x3, 0x0, 0x3, 0x5}, 0x50) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r2) sendfile(r1, r6, &(0x7f0000000500)=0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000001d80)={&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x3, @broadcast, 'ip6gretap0\x00'}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000005c0)="161f3fae98e1e298fbb22c2a0de7f306d77daa853c7eb0736174669e55c3a105c65b0b2a", 0x24}, {&(0x7f0000000600)="0db3633efe12fdd8304394e16db5461938136d04a227054ad3c29ebd139b5da24a73b20d1fa8fe0a988112b10c0feb0ab9fcd8c88422b2faeb277cd3229002cb74e8fa68fd3a542e16f27a5d64df425b12a9ce02e209cda81ccb4a800c5cb72f310205731322a681032ed42ec70dbe8349328d7fff78e821d51c07b5451a84e591ce30f2dbfba950a508af60c4324beaf054c436", 0x94}, {&(0x7f00000006c0)="6ceb0d16b37806780d443c066088a36bdbbc72212e36b5fdf9ad070fd327840fc8b6145983122504b4bd3721cebf4dc6872de992cd28e655", 0x38}, {&(0x7f0000000700)="9511b2d9dcb1c13b47eb8d4856db731de44e41343d83135557b7ee33594447acf40f675a6da10a44fb89c6daf8a1c6ae6acb1bf49cf10d27b1221db1a6b75fc703354df8f5b2160276276138dc74627f997a", 0x52}, {&(0x7f0000000780)="79d0e2c7a48db5fc320b00786dbead4336dfeee1de1227baf7fefa363f77aaaefd2f0a786c33eefef25da866368d043775cb0c16a8e97c7d9ff339a7946de3cb281c71cf82bf783b8005d6a2ec2d67920f2d4f7025aec449efebfda697c22ac543", 0x61}, {&(0x7f0000000800)="ccf1e6fe143c67a53ee00f13bff378441524ef5e67b687455b49340a2ea8338bc1b4641dc7dea66f77c27614209ed84f39b3656de7ab8161e7592dbbfb378920d349bec5ab8159edef05fe1fa02b1453b114d69737af4256c71857cefce61850928389490b5c08abd635155ac57052c77ade5cc618107b8101e33501e920473734", 0x81}, {&(0x7f00000008c0)="39dea55b9446c5ff81d767778a726395b5768c7de3e163b9f4d3e909a2ed3e16b588fa2b7bb5ee508690ef22763c6f97942ebe2ca27ba6a1490e5d99661b90d72e587261d5943b4cb3c48a16a3821d820ca5c0e664498adc68b85fed835e3096b6b3603d49bb732d9febba2ee21d1d1a86f4b8e4c1942c712a9140017d359ace02ecc3c52bb97525b06ae4d6a45df3b173fc37d0a379353e29b26dd5a9f4674a70108589286416dc27faf2b3971e6c944ec9e319829969f8174f7206164672e9b71939016160424f91173f3e66edcea4567ab14cc9ebae4ec5a9da75", 0xdc}], 0x7, &(0x7f0000000a00)=[{0xc8, 0x10a, 0x0, "0afcccc998fb978e4863683379a0f017379181fe30db5574201f4fa985f2feb7fd7acb4a5a3cd0997000741ae20d4c2c6b69349f71c74fec080b9e30bcbd147a2f1bd496ea43198ad36d496caff37264dbe7a710a995b4df4123cd94fde947ac8d09e7604113329ddcc33e7dc9312c59db75ad335428d4e2d3a9f6345c3f3df36b2e864ebc3ba5f8354cdb367e1dedfd81b25ebc981a5026866d25a26fd8625119731f13a4f092cdfc23033dd6677255bbe3510a925be60f1b"}, {0x24, 0x10e, 0x1, "bf2572073ea9b719f70b303ef998c974730f5aed9924"}, {0xe8, 0x29, 0xce, "8f61d4b4c0d0c48c2585b794990b304cebe2e0be20f02cd9fe6e423eeeef9a0642c7760fd1cfc296f17e6bed95be802db6c27534b7da2baa8ec18fef87ca34649dc300f68107a9d741ed36401e4d150920e851f35eef791802ad7741bf1a497509fefe2f5ed3b6878bbafb9280ad5720344f76937e447f820ab8e2b6a362856c70aec45bc325b1cafed268f3c53e1f7c1d4d104337578442c8b303c152001f96eade4a6e518cd797153311dc74d0748cd3f02df361c89125cfa37deda3299a2b30ae7ee4b310a149102270afb3da3aa47c1fea3f5ef89878221b"}, {0xdc, 0x115, 0x8, "02c7b7e884196369234c74efbc28ba9fe701d46a38cf2ab3c7ac92912ae0e152092c64735c560a66683dce50a9914e987aec8a39b1d6f09c6b3d6824fe5edf178fc46a61172820af1497e40151b3d7fc98f934d87319795ea12ddcedc1048c584e3a7394a3a61002f69d11a64d54dd3af8e267eb26d205757f853ae3ad7763033f27da2866c75752b7d6ffa835918a73a8c0ba064b45c4f75f494653b7c297d9fcb2bd1f7221f07338a29260c2e4cfe3ab6caba3c9b6d0e2be10985c4cb7bd11b75239918ef51e6cf6f171e7e5d6e6"}, {0xc0, 0x1, 0x4, "0bbbb8a65ec49b3dce778497337e6594b4d230df0ff0a1b2480d8a90bcb07a96131b4ed61afcad7edbc2c9a47cf6ac8d04dafcfbf73b35c63723f726788491ef7109af94b45e077a1d7ff1583651dd128344ace151664e77ac9b3dd5ae707e867be2bee2768e719bb7c2f2ac0691d3ee75cfc40a0d7a4285ed6c1c0c205ee8c6d3bd5708905d8e15900464176cb142d2143d36da5b28f82895259f0dc90dd09aac78a10822099e0abc6f8d71de679e81b0"}, {0x100c, 0x10b, 0x40, "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"}], 0x137c}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002040)={r5, 0xffffffffffffffff}, 0x4) r9 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000002080), 0x103000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x11, 0x19, &(0x7f0000001dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001ec0)='GPL\x00', 0xfffffff6, 0xa2, &(0x7f0000001f00)=""/162, 0x41000, 0x25, '\x00', 0x0, @fallback=0x4, r2, 0x8, &(0x7f0000001fc0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002000)={0x5, 0x2, 0x5, 0x3}, 0x10, r4, 0xffffffffffffffff, 0x1, &(0x7f00000020c0)=[r5, r8, r2, r5, r9], &(0x7f0000002100)=[{0x3, 0x3, 0x8, 0x1}], 0x10, 0x1}, 0x94) close_range(r1, r6, 0x2) r10 = syz_open_dev$media(&(0x7f0000002200), 0xd, 0x200000) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f0000002880)={0x0, 0x1, 0x0, &(0x7f0000002240)=[{}], 0xa, 0x0, &(0x7f00000022c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000002740)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}], 0x2, 0x0, &(0x7f0000002800)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, &(0x7f00000029c0)={0x80000000, &(0x7f0000002900)=[{0x80000000}], &(0x7f0000002940)}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, &(0x7f0000002ac0)={0x80000000, &(0x7f0000002a00), &(0x7f0000002a40)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r10, 0xc0347c03, &(0x7f0000002b00)={{0x80000000, r11, 0x2, [0x7, 0x1]}, {r12, r13, 0x0, [0x4]}, 0x2, [0x0, 0x1000]}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000002b80), r9) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f0000002c80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x44, r14, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x40000) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NL80211_CMD_START_NAN(r9, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x30}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_open_dev$vim2m(&(0x7f0000002e00), 0x7, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c09425, &(0x7f0000002e40)={"5d88c890eea21ffe3f13fc6479d211da", 0x0, 0x0, {0x80, 0x7}, {0x7622, 0x7f}, 0x81, [0x8000000000000000, 0x6, 0x1000, 0x3, 0x8001, 0x6, 0xe8c, 0x0, 0x2, 0xffff, 0x9, 0x8000, 0x6aaf02cc, 0x2b, 0x9, 0x3]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000002f80)={{r9}, r15, 0x1c, @inherit={0x78, &(0x7f0000002f00)={0x0, 0x6, 0x4653, 0xed, {0x1c, 0x7, 0x76a, 0x2, 0x3ff}, [0x5, 0xd47, 0x5, 0xfde6, 0xfffffffffffffff9, 0xe1]}}, @subvolid=0x6000000}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000003f80)={0x7f, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000003fc0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000004000)={0x0, 0x1, r9}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r9, 0xc01064c4, &(0x7f0000004080)={&(0x7f0000004040)=[r16, r17], 0x2}) 363.877043ms ago: executing program 2 (id=7641): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = io_uring_setup(0xfc6, &(0x7f0000000480)={0x0, 0x799a, 0x0, 0x0, 0xfffffffc}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 359.097984ms ago: executing program 4 (id=7642): r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_test', 0x341a82, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x3, 0x8}, 0x20) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, r1, &(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x1, {0x0, r2}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000085cfb8478c663cf9f8280adbf0af076e41813219903e1826e5c783c3a2be89753aef032949fb324da72c289859c3d8d7d3ff25846f2f0a454c55d2cf24ab9048492ac8466249e96a7e8c39c2d93f38edb12eb39f2be44e015457cc19279cd9e7c0fe032568bf40de439e377b51d3163409d9daac566384c2f34a69400f8f57a9306d69d16475cf26eca4faa0abcc0070a66d1c8556a5a55c678306b3c9e6edf2f7da10c45724a6f5a482a99bed1e26b5c249ba63f3ca5289c571b22e52d2b577693b560f0e7f8d8917b4d9bcea8c923c1f393fe834e736277a3bbdb2776c9f6a5262872b599c258aa4bb47", @ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf2501000000080005000600000024000380060007004e230000080003000300000006000400310300000800010002000000080004006df90000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000100) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}}, 0x40050) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\x01\x00\x00\x00\x00\x00\x00\x00\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 344.361547ms ago: executing program 1 (id=7643): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xb8c2d82d34091dbf, 0x0) 247.691754ms ago: executing program 4 (id=7644): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x40015b0b, 0x0) syz_usb_disconnect(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 128.010744ms ago: executing program 6 (id=7645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00ac13822b79fbe6222787160fdc00", @ANYRES16=r1, @ANYBLOB="030300000000000000001100000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005fdfc50821048f00deba0000000109022600010000000009040100020202ff"], 0x0) 123.364704ms ago: executing program 1 (id=7646): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x1068) (async) socket$inet6(0xa, 0x2, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x19, 0x1}, &(0x7f0000044000)) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000880)=0x7, 0x4) (async) r4 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x4, 0x12b, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) ioctl$I2C_FUNCS(r5, 0x705, &(0x7f0000000200)=0x3f9) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000402505a8a4412001020b010902"], 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r7) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 0 (id=7647): socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r7 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): failed (rc=-5) [ 1840.767833][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1840.831926][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.015988][ T1809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7179'. [ 1841.016713][ T1809] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7179'. [ 1841.427895][ T1811] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7178'. [ 1841.581839][T27707] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1841.685101][ T5929] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1841.749640][T27707] usb 5-1: Using ep0 maxpacket: 8 [ 1841.760649][T27707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.760682][T27707] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1841.760724][T27707] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1841.760749][T27707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.762989][T27707] usb 5-1: config 0 descriptor?? [ 1841.800993][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1842.130960][ T5929] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1842.131037][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1842.133663][ T5929] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1842.133691][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1842.133735][ T5929] usb 3-1: SerialNumber: syz [ 1842.250661][T27707] usbhid 5-1:0.0: can't add hid device: -71 [ 1842.250794][T27707] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1842.266868][T27707] usb 5-1: USB disconnect, device number 77 [ 1842.432037][ T30] audit: type=1326 audit(1768330064.228:38877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1828 comm="syz.1.7184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1842.432090][ T30] audit: type=1326 audit(1768330064.228:38878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1828 comm="syz.1.7184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1842.432130][ T30] audit: type=1326 audit(1768330064.228:38879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1828 comm="syz.1.7184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1842.432166][ T30] audit: type=1326 audit(1768330064.228:38880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1828 comm="syz.1.7184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1842.432203][ T30] audit: type=1326 audit(1768330064.228:38881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1828 comm="syz.1.7184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1842.432343][ T30] audit: type=1326 audit(1768330064.228:38882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1828 comm="syz.1.7184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1842.432384][ T30] audit: type=1326 audit(1768330064.238:38883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1828 comm="syz.1.7184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1842.432424][ T30] audit: type=1326 audit(1768330064.238:38884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1828 comm="syz.1.7184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1842.432465][ T30] audit: type=1326 audit(1768330064.238:38885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1828 comm="syz.1.7184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1842.432504][ T30] audit: type=1326 audit(1768330064.238:38886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1828 comm="syz.1.7184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1842.866904][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.386750][ T1839] loop6: detected capacity change from 0 to 63 [ 1843.387466][ T1839] ldm_validate_partition_table(): Disk read failed. [ 1843.387558][ T1839] Dev loop6: unable to read RDB block 0 [ 1843.387719][ T1839] loop6: unable to read partition table [ 1843.387940][ T1839] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1843.874437][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.882593][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.101829][T27560] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1844.253622][T27560] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1844.262446][T27560] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1844.274749][T27560] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1844.283887][T27560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.293766][T27560] usb 2-1: Product: syz [ 1844.298961][T27560] usb 2-1: Manufacturer: syz [ 1844.303663][T27560] usb 2-1: SerialNumber: syz [ 1844.311499][T27560] usb 2-1: config 0 descriptor?? [ 1844.919963][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.931613][ T1847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.932042][ T1847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.005339][T27560] mos7840 2-1:0.0: required endpoints missing [ 1845.024105][T27560] usb 2-1: USB disconnect, device number 64 [ 1845.117494][ T5929] usb 3-1: 0:2 : does not exist [ 1845.135985][ T5929] usb 3-1: unit 5: unexpected type 0x0e [ 1845.159483][ T5929] usb 3-1: USB disconnect, device number 58 [ 1845.867527][ T1868] syzkaller1: entered promiscuous mode [ 1845.873292][ T1868] syzkaller1: entered allmulticast mode [ 1845.970647][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.978807][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.987230][T27362] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1846.201814][T27362] usb 2-1: Using ep0 maxpacket: 16 [ 1846.312613][T27362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1846.322546][T27362] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1846.332704][T27362] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1846.437402][T27362] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1846.447339][T27362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.455793][T27362] usb 2-1: Product: syz [ 1846.461979][T27362] usb 2-1: Manufacturer: syz [ 1846.472330][T27362] usb 2-1: SerialNumber: syz [ 1846.514136][T27362] usb 2-1: config 0 descriptor?? [ 1846.520526][ T1866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1846.576568][T27362] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 1846.598082][T27362] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 1846.629322][T27362] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 1846.643517][T27362] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 1846.677032][T27362] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 1846.914419][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.926269][T27362] usb 2-1: USB disconnect, device number 65 [ 1846.948508][T27362] mcba_usb 2-1:0.0 can0: device disconnected [ 1846.997944][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.040536][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.132486][ T1893] wlan0: mtu greater than device maximum [ 1848.159282][ T1893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.470894][ T1900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7205'. [ 1848.500808][ T1900] netlink: 'syz.4.7205': attribute type 7 has an invalid length. [ 1848.541621][ T1900] netlink: 'syz.4.7205': attribute type 8 has an invalid length. [ 1848.571148][ T1900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7205'. [ 1848.683699][ T1910] bridge1: entered promiscuous mode [ 1848.689069][ T1910] bridge1: entered allmulticast mode [ 1848.710351][ T1910] kAFS: unable to lookup cell 'ÿ' [ 1848.729260][ T1910] kAFS: unable to lookup cell 'Þ({FúA' [ 1849.097702][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.161906][ T5928] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1849.237874][ T1910] loop6: detected capacity change from 0 to 63 [ 1849.244479][ T1910] buffer_io_error: 36 callbacks suppressed [ 1849.244488][ T1910] Buffer I/O error on dev loop6, logical block 0, async page read [ 1849.258939][ T1910] Buffer I/O error on dev loop6, logical block 0, async page read [ 1849.268165][ T1910] Buffer I/O error on dev loop6, logical block 0, async page read [ 1849.278732][ T1910] Buffer I/O error on dev loop6, logical block 0, async page read [ 1849.294390][ T1910] Buffer I/O error on dev loop6, logical block 0, async page read [ 1849.345627][ T1916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7209'. [ 1849.355282][ T1910] Buffer I/O error on dev loop6, logical block 0, async page read [ 1849.363650][ T1916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7209'. [ 1849.378477][ T5928] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 1849.418147][ T1910] Buffer I/O error on dev loop6, logical block 0, async page read [ 1849.426488][ T1910] Buffer I/O error on dev loop6, logical block 0, async page read [ 1849.460013][ T1918] ip6gre1: entered allmulticast mode [ 1849.482224][ T1910] ldm_validate_partition_table(): Disk read failed. [ 1849.489078][ T1910] Buffer I/O error on dev loop6, logical block 0, async page read [ 1849.557385][ T5928] usb 3-1: string descriptor 0 read error: -71 [ 1849.575338][ T5928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1849.591739][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1849.643537][ T1910] Buffer I/O error on dev loop6, logical block 0, async page read [ 1849.705951][ T1910] loop6: unable to read partition table [ 1849.706193][ T1910] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1849.748821][ T5928] usb 3-1: can't set config #1, error -71 [ 1849.754067][ T5928] usb 3-1: USB disconnect, device number 59 [ 1849.967204][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.984998][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1849.985012][ T30] audit: type=1326 audit(1768330071.808:38891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1929 comm="syz.1.7213" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0 [ 1850.032639][T20267] Bluetooth: hci3: command 0x0406 tx timeout [ 1850.118433][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.160337][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.356768][ T1953] bond4: option all_slaves_active: invalid value (8) [ 1851.368625][ T1953] bond4 (unregistering): Released all slaves [ 1851.927473][ T1976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7226'. [ 1852.150428][ T30] audit: type=1326 audit(1768330073.968:38892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.4.7227" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 1852.205043][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.896801][ T1985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7229'. [ 1852.958523][ T1988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7229'. [ 1852.995373][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.003523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.011636][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.016671][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.021397][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.026058][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.192225][ T1994] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7231'. [ 1853.252998][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.931800][ T980] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1854.081780][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 1854.088451][ T980] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.098952][ T980] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1854.110987][ T980] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1854.126006][ T980] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1854.152915][ T980] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1854.163183][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.171888][ T980] usb 2-1: Product: syz [ 1854.176616][ T980] usb 2-1: Manufacturer: syz [ 1854.181602][ T980] usb 2-1: SerialNumber: syz [ 1854.218906][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1854.244895][ T980] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input105 [ 1854.280289][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.441816][ T980] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1854.452026][ T980] (id 0x00) [ 1854.522714][ T980] rc_core: IR keymap rc-imon-pad not found [ 1854.530499][ T980] Registered IR keymap rc-empty [ 1854.538464][ T980] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1854.550439][ T980] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1854.642791][ T980] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1854.655086][ T980] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input106 [ 1854.669475][ T980] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:66> initialized [ 1854.742553][T27362] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1854.923600][T27362] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 1854.931929][T27362] usb 3-1: config 0 has no interface number 0 [ 1854.940208][T27362] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 1854.949701][T27362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.957829][T27362] usb 3-1: Product: syz [ 1854.962625][T27362] usb 3-1: Manufacturer: syz [ 1854.967267][T27362] usb 3-1: SerialNumber: syz [ 1854.973718][T27362] usb 3-1: config 0 descriptor?? [ 1854.982403][T27362] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1854.993288][T27362] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 1855.194730][ T980] usb 3-1: USB disconnect, device number 60 [ 1855.244605][ T2029] imon:send_packet: packet tx failed (-71) [ 1855.244913][T27707] usb 2-1: USB disconnect, device number 66 [ 1855.261942][ T2029] imon:vfd_write: send packet #1 failed [ 1855.315204][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.846344][ T30] audit: type=1326 audit(1768330077.658:38893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2033 comm="syz.2.7243" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x0 [ 1856.031934][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1856.261929][ T2045] kAFS: unable to lookup cell '' [ 1856.454480][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1857.350549][ T2046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1857.387682][ T2059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7247'. [ 1857.441865][ T2059] netlink: 'syz.2.7247': attribute type 7 has an invalid length. [ 1857.532166][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1857.556794][ T2059] netlink: 'syz.2.7247': attribute type 8 has an invalid length. [ 1858.026817][ T2059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7247'. [ 1858.115721][T31701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.197881][ T2068] tipc: Enabling of bearer rejected, failed to enable media [ 1858.337364][ T2059] team0: entered promiscuous mode [ 1858.381779][ T2059] team_slave_0: entered promiscuous mode [ 1858.601543][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.968589][ T2059] team_slave_1: entered promiscuous mode [ 1859.122642][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.376084][ T2059] bond0: entered promiscuous mode [ 1859.381139][ T2059] bond_slave_0: entered promiscuous mode [ 1859.465077][ T2059] bond_slave_1: entered promiscuous mode [ 1859.515138][ T2059] gretap0: entered promiscuous mode [ 1859.521105][ T2059] debugfs: 'hsr1' already exists in 'hsr' [ 1859.522008][ T2082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1859.631932][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.699850][ T2059] Cannot create hsr debugfs directory [ 1859.714439][ T2059] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1860.121800][ T980] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1860.198576][ T30] audit: type=1326 audit(1768330082.018:38894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2098 comm="syz.2.7258" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x0 [ 1860.321926][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 1860.346554][ T980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1860.460740][ T980] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1860.479652][ T980] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1860.497284][ T980] usb 2-1: Product: syz [ 1860.506321][ T980] usb 2-1: Manufacturer: syz [ 1860.515224][ T980] usb 2-1: SerialNumber: syz [ 1860.588652][ T980] usb 2-1: config 0 descriptor?? [ 1860.606223][ T2093] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1860.616241][ T980] hub 2-1:0.0: bad descriptor, ignoring hub [ 1860.623191][ T980] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1860.672276][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.716858][ T2105] bond4 (unregistering): Released all slaves [ 1860.952815][ T5929] usb 2-1: USB disconnect, device number 67 [ 1861.436332][ T5929] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1861.481137][ T2111] FAULT_INJECTION: forcing a failure. [ 1861.481137][ T2111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.497892][ T2111] CPU: 1 UID: 0 PID: 2111 Comm: syz.4.7261 Tainted: G L syzkaller #0 PREEMPT(full) [ 1861.497922][ T2111] Tainted: [L]=SOFTLOCKUP [ 1861.497928][ T2111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1861.497941][ T2111] Call Trace: [ 1861.497949][ T2111] [ 1861.497957][ T2111] dump_stack_lvl+0xe8/0x150 [ 1861.497987][ T2111] should_fail_ex+0x414/0x560 [ 1861.498021][ T2111] _copy_from_user+0x2d/0xb0 [ 1861.498046][ T2111] get_compat_msghdr+0xad/0x4a0 [ 1861.498077][ T2111] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1861.498105][ T2111] ? rcu_is_watching+0x15/0xb0 [ 1861.498128][ T2111] ? ___sys_recvmsg+0x1c4/0x510 [ 1861.498158][ T2111] ___sys_recvmsg+0x17f/0x510 [ 1861.498181][ T2111] ? _parse_integer_limit+0x1ae/0x1f0 [ 1861.498215][ T2111] ? __pfx____sys_recvmsg+0x10/0x10 [ 1861.498238][ T2111] ? kstrtoull+0x12f/0x1d0 [ 1861.498269][ T2111] ? __fget_files+0x2a/0x420 [ 1861.498320][ T2111] do_recvmmsg+0x36a/0x770 [ 1861.498353][ T2111] ? __pfx_do_recvmmsg+0x10/0x10 [ 1861.498378][ T2111] ? ksys_write+0x1cb/0x250 [ 1861.498414][ T2111] ? __fget_files+0x3a0/0x420 [ 1861.498441][ T2111] __sys_recvmmsg+0x19d/0x280 [ 1861.498466][ T2111] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1861.498491][ T2111] ? __pfx_ksys_write+0x10/0x10 [ 1861.498513][ T2111] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1861.498544][ T2111] __do_fast_syscall_32+0x1dc/0x570 [ 1861.498567][ T2111] ? lockdep_hardirqs_on+0x7b/0x110 [ 1861.498586][ T2111] ? do_fast_syscall_32+0x34/0x80 [ 1861.498608][ T2111] ? irqentry_exit+0x10f/0x670 [ 1861.498631][ T2111] do_fast_syscall_32+0x34/0x80 [ 1861.498652][ T2111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1861.498685][ T2111] RIP: 0023:0xf709d539 [ 1861.498701][ T2111] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1861.498717][ T2111] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1861.498737][ T2111] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1861.498751][ T2111] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1861.498763][ T2111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1861.498774][ T2111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1861.498786][ T2111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1861.498813][ T2111] [ 1861.819342][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1861.891841][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 1861.899015][ T5929] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1861.914428][ T5929] usb 2-1: string descriptor 0 read error: -22 [ 1861.920718][ T5929] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1861.930126][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1861.941485][ T5929] usb 2-1: config 0 descriptor?? [ 1861.947419][ T2093] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1861.970986][ T5929] hub 2-1:0.0: bad descriptor, ignoring hub [ 1861.977336][ T5929] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1862.188221][ T2122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7265'. [ 1862.282072][ T5928] usb 2-1: USB disconnect, device number 68 [ 1862.441777][ T5929] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1862.554545][ T2138] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7266'. [ 1862.595117][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1862.606158][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1862.619228][ T5929] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1862.629574][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.641565][ T5929] usb 3-1: config 0 descriptor?? [ 1862.827209][ T2149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.851428][ T2149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.954570][ T2152] binder: 2150:2152 ioctl c00c620f 800001c0 returned -22 [ 1863.061797][ T980] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1863.073220][ T5929] maltron 0003:058F:9410.0054: item fetching failed at offset 0/7 [ 1863.081652][ T5929] maltron 0003:058F:9410.0054: probe with driver maltron failed with error -22 [ 1863.211836][ T5928] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1863.252064][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1863.270400][T31701] usb 3-1: USB disconnect, device number 61 [ 1863.343064][ T5928] usb 2-1: device descriptor read/64, error -71 [ 1863.581797][ T5928] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1863.711828][ T5928] usb 2-1: device descriptor read/64, error -71 [ 1863.711828][ T980] usb 5-1: device descriptor read/64, error -71 [ 1863.832887][ T5928] usb usb2-port1: attempt power cycle [ 1863.876549][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1863.961951][ T980] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1864.114131][ T980] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 1864.122426][ T980] usb 5-1: config 0 has no interface number 0 [ 1864.130223][ T980] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1864.139330][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.147484][ T980] usb 5-1: Product: syz [ 1864.151644][ T980] usb 5-1: Manufacturer: syz [ 1864.156297][ T980] usb 5-1: SerialNumber: syz [ 1864.162116][T31701] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1864.164190][ T980] usb 5-1: config 0 descriptor?? [ 1864.176928][ T980] peak_usb 5-1:0.246: probe with driver peak_usb failed with error 246 [ 1864.191891][ T5928] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1864.215201][ T5928] usb 2-1: device descriptor read/8, error -71 [ 1864.301857][T31701] usb 3-1: device descriptor read/64, error -71 [ 1864.397858][ T2161] input: syz0 as /devices/virtual/input/input107 [ 1864.461842][ T5928] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1864.483055][ T5928] usb 2-1: device descriptor read/8, error -71 [ 1864.483141][ T980] usb 5-1: USB disconnect, device number 79 [ 1864.541832][T31701] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1864.592027][ T5928] usb usb2-port1: unable to enumerate USB device [ 1864.671814][T31701] usb 3-1: device descriptor read/64, error -71 [ 1864.783369][T31701] usb usb3-port1: attempt power cycle [ 1864.915667][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1865.133187][T31701] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1865.178364][T31701] usb 3-1: device descriptor read/8, error -71 [ 1865.531920][T31701] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1865.552518][T31701] usb 3-1: device descriptor read/8, error -71 [ 1865.663565][T31701] usb usb3-port1: unable to enumerate USB device [ 1865.954344][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1866.272259][T31701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1866.431964][ T1848] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1866.582695][ T1848] usb 2-1: Using ep0 maxpacket: 32 [ 1866.592908][ T1848] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1866.631882][ T1848] usb 2-1: config 0 has no interface number 0 [ 1866.642435][ T1848] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1866.651517][ T1848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.660305][ T1848] usb 2-1: Product: syz [ 1866.669849][ T1848] usb 2-1: Manufacturer: syz [ 1866.676879][ T1848] usb 2-1: SerialNumber: syz [ 1866.772475][ T1848] usb 2-1: config 0 descriptor?? [ 1866.784029][ T1848] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1866.854267][ T2197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1866.996328][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.296694][ T1848] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1867.311072][ T1848] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1867.708708][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1867.712762][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.717682][ T1848] usb 2-1: USB disconnect, device number 73 [ 1867.743867][ T1848] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1867.774776][ T1848] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1867.790802][ T1848] quatech2 2-1:0.51: device disconnected [ 1868.034818][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1868.043019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1868.051260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1868.142007][ T30] audit: type=1326 audit(1768330089.958:38895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2200 comm="syz.2.7284" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x0 [ 1868.357843][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1868.571532][ T2218] netlink: 'syz.1.7287': attribute type 2 has an invalid length. [ 1868.593754][ T2218] : entered promiscuous mode [ 1868.604196][ T2218] netlink: 'syz.1.7287': attribute type 29 has an invalid length. [ 1868.612137][ T2218] netlink: 'syz.1.7287': attribute type 3 has an invalid length. [ 1868.619875][ T2218] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7287'. [ 1869.042917][ T2211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1869.879857][T27707] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1870.060412][T27707] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1870.093345][T27707] usb 5-1: config 0 has no interface number 0 [ 1870.099465][T27707] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1870.148433][T27707] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1870.168327][T27707] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1870.183158][T27707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.250692][T27707] usb 5-1: config 0 descriptor?? [ 1870.381812][ T980] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1870.532067][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 1870.542913][ T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1870.557624][ T980] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1870.568722][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1870.575509][ T980] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1870.584678][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.625193][ T2246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7292'. [ 1870.637085][ T980] usb 2-1: config 0 descriptor?? [ 1870.651657][ T2246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7292'. [ 1871.168210][T27560] net_ratelimit: 3 callbacks suppressed [ 1871.168224][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.230055][ T2240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.240305][ T2240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.399916][ T980] kye 0003:0458:0138.0055: unknown main item tag 0x0 [ 1871.412862][ T980] kye 0003:0458:0138.0055: unknown main item tag 0x0 [ 1871.434615][ T980] kye 0003:0458:0138.0055: unknown main item tag 0x0 [ 1871.456727][ T980] kye 0003:0458:0138.0055: unknown main item tag 0x0 [ 1871.488183][ T980] kye 0003:0458:0138.0055: unknown main item tag 0x0 [ 1871.494970][ T980] kye 0003:0458:0138.0055: unknown main item tag 0x0 [ 1871.501834][ T980] kye 0003:0458:0138.0055: unknown main item tag 0x0 [ 1871.508514][ T980] kye 0003:0458:0138.0055: unknown main item tag 0x0 [ 1871.528836][ T980] kye 0003:0458:0138.0055: unknown main item tag 0x0 [ 1871.542533][ T980] kye 0003:0458:0138.0055: unknown main item tag 0x0 [ 1871.568197][ T980] kye 0003:0458:0138.0055: unexpected long global item [ 1871.577876][ T980] kye 0003:0458:0138.0055: parse failed [ 1871.623078][ T980] kye 0003:0458:0138.0055: probe with driver kye failed with error -22 [ 1871.661308][ T980] usb 2-1: USB disconnect, device number 74 [ 1871.808371][ T30] audit: type=1326 audit(1768330093.628:38896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2249 comm="syz.6.7296" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 1871.859966][ T2252] loop6: detected capacity change from 0 to 63 [ 1871.868220][T28932] buffer_io_error: 7 callbacks suppressed [ 1871.868234][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1871.884446][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1871.893636][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1871.904041][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1871.913333][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1871.928162][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1871.939412][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1871.950020][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1871.958144][T28932] ldm_validate_partition_table(): Disk read failed. [ 1871.965270][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1871.998447][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1872.009122][T28932] Dev loop6: unable to read RDB block 0 [ 1872.017302][T28932] loop6: unable to read partition table [ 1872.026464][ T2252] ldm_validate_partition_table(): Disk read failed. [ 1872.033241][ T2252] Dev loop6: unable to read RDB block 0 [ 1872.039043][ T2252] loop6: unable to read partition table [ 1872.045146][ T2252] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1872.207603][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.378918][T31701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.037624][T31701] usb 5-1: USB disconnect, device number 80 [ 1873.246724][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1874.275017][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1874.330208][ T2284] delete_channel: no stack [ 1875.218395][ T30] audit: type=1326 audit(1768330097.038:38897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2311 comm="syz.0.7312" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1875.291838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.301902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.340375][ T980] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1875.419989][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.429281][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.445914][ T30] audit: type=1326 audit(1768330097.108:38898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2299 comm="syz.2.7306" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x0 [ 1875.521759][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 1875.653135][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1875.687334][ T980] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 1875.708768][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.728925][ T980] usb 2-1: Product: syz [ 1875.753114][ T980] usb 2-1: Manufacturer: syz [ 1875.764042][ T980] usb 2-1: SerialNumber: syz [ 1875.798951][ T980] usb 2-1: config 0 descriptor?? [ 1876.596029][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1877.373875][ T2336] loop6: detected capacity change from 0 to 63 [ 1877.380398][ T2336] buffer_io_error: 29 callbacks suppressed [ 1877.380415][ T2336] Buffer I/O error on dev loop6, logical block 0, async page read [ 1877.400258][ T2336] Buffer I/O error on dev loop6, logical block 0, async page read [ 1877.408453][ T2336] Buffer I/O error on dev loop6, logical block 0, async page read [ 1877.416522][ T2336] Buffer I/O error on dev loop6, logical block 0, async page read [ 1877.425291][ T2336] Buffer I/O error on dev loop6, logical block 0, async page read [ 1877.433393][ T2336] Buffer I/O error on dev loop6, logical block 0, async page read [ 1877.441317][ T2336] Buffer I/O error on dev loop6, logical block 0, async page read [ 1877.449752][ T2336] Buffer I/O error on dev loop6, logical block 0, async page read [ 1877.489072][ T2336] ldm_validate_partition_table(): Disk read failed. [ 1877.506640][ T2336] Buffer I/O error on dev loop6, logical block 0, async page read [ 1877.535085][ T2336] Buffer I/O error on dev loop6, logical block 0, async page read [ 1877.570002][ T2336] Dev loop6: unable to read RDB block 0 [ 1877.590815][ T2336] loop6: unable to read partition table [ 1877.621216][ T2336] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1877.636545][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1877.668570][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1877.679214][ T5200] Dev loop6: unable to read RDB block 0 [ 1877.688205][ T5200] loop6: unable to read partition table [ 1877.959159][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.127512][ T980] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1878.146008][ T980] gspca_sunplus: reg_w_riv err -71 [ 1878.151320][ T980] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1878.195596][ T980] usb 2-1: USB disconnect, device number 75 [ 1878.277180][ T5928] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1878.437343][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.553119][ T5928] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1878.583108][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.625013][ T5928] usb 3-1: config 0 descriptor?? [ 1878.679484][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.687761][ T5928] usb 3-1: selecting invalid altsetting 3 [ 1878.700959][ T5928] comedi comedi5: could not set alternate setting 3 in high speed [ 1878.786532][ T5928] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1878.857346][ T5928] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1878.888415][ T5928] usb 3-1: USB disconnect, device number 66 [ 1879.018407][ T2371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7329'. [ 1879.029808][ T2371] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7329'. [ 1879.737893][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.926067][ T2380] loop6: detected capacity change from 0 to 63 [ 1879.937162][T28932] ldm_validate_partition_table(): Disk read failed. [ 1879.952529][T28932] Dev loop6: unable to read RDB block 0 [ 1879.979344][T28932] loop6: unable to read partition table [ 1880.013019][ T2380] ldm_validate_partition_table(): Disk read failed. [ 1880.024341][ T2380] Dev loop6: unable to read RDB block 0 [ 1880.030500][ T2380] loop6: unable to read partition table [ 1880.040379][ T2380] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1880.204415][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1880.213999][ T5200] Dev loop6: unable to read RDB block 0 [ 1880.251524][ T5200] loop6: unable to read partition table [ 1880.492359][ T2393] netlink: 'syz.1.7334': attribute type 4 has an invalid length. [ 1880.566754][ T30] audit: type=1326 audit(1768330102.378:38899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2381 comm="syz.0.7333" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1880.757112][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.389547][ T30] audit: type=1326 audit(1768330103.178:38900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2395 comm="syz.4.7336" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 1881.541900][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.798727][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.832005][ T2401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1882.837137][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.623418][ T2448] loop6: detected capacity change from 0 to 63 [ 1883.631547][ T2448] buffer_io_error: 89 callbacks suppressed [ 1883.631576][ T2448] Buffer I/O error on dev loop6, logical block 0, async page read [ 1883.646592][ T2448] Buffer I/O error on dev loop6, logical block 0, async page read [ 1883.655150][ T2448] Buffer I/O error on dev loop6, logical block 0, async page read [ 1883.664387][ T2448] Buffer I/O error on dev loop6, logical block 0, async page read [ 1883.674343][ T2448] Buffer I/O error on dev loop6, logical block 0, async page read [ 1883.695594][ T2448] Buffer I/O error on dev loop6, logical block 0, async page read [ 1883.708928][ T2448] loop6: unable to read partition table [ 1883.717036][ T2448] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1883.781107][ T5200] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1883.791803][ T980] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1883.797211][ T5200] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1883.809573][ T5200] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1883.818097][ T5200] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 1883.853566][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1883.860833][ T5200] Dev loop6: unable to read RDB block 0 [ 1883.866642][ T5200] loop6: unable to read partition table [ 1883.883359][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.952417][ T980] usb 5-1: device descriptor read/64, error -71 [ 1884.291931][ T980] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1884.534337][ T980] usb 5-1: device descriptor read/64, error -71 [ 1884.592877][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1884.662069][ T980] usb usb5-port1: attempt power cycle [ 1884.925551][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.141764][ T980] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1885.252528][ T980] usb 5-1: device descriptor read/8, error -71 [ 1885.513363][ T2475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7352'. [ 1885.532225][ T980] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1885.572421][ T980] usb 5-1: device descriptor read/8, error -71 [ 1885.590540][ T2473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.599772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.629893][ T30] audit: type=1326 audit(1768330107.448:38901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2468 comm="syz.2.7351" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x0 [ 1885.682126][ T980] usb usb5-port1: unable to enumerate USB device [ 1885.983546][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1886.301487][ T2489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1886.791839][ T980] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1886.951782][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 1886.959297][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.970903][ T980] usb 2-1: config 0 has no interfaces? [ 1886.976467][ T980] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1886.986126][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.001084][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.044747][ T980] usb 2-1: config 0 descriptor?? [ 1887.080789][ T2515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7368'. [ 1887.281777][ T2491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.290376][ T2491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.477597][ T5928] usb 2-1: USB disconnect, device number 76 [ 1887.557647][T31701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.631940][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.837019][ T2532] loop6: detected capacity change from 0 to 63 [ 1887.845037][ T2532] ldm_validate_partition_table(): Disk read failed. [ 1887.853569][ T2532] Dev loop6: unable to read RDB block 0 [ 1887.860638][ T2532] loop6: unable to read partition table [ 1887.900878][ T2532] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1887.956313][ T2533] FAULT_INJECTION: forcing a failure. [ 1887.956313][ T2533] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1888.013967][ T2533] CPU: 0 UID: 0 PID: 2533 Comm: syz.6.7362 Tainted: G L syzkaller #0 PREEMPT(full) [ 1888.013998][ T2533] Tainted: [L]=SOFTLOCKUP [ 1888.014006][ T2533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1888.014018][ T2533] Call Trace: [ 1888.014027][ T2533] [ 1888.014036][ T2533] dump_stack_lvl+0xe8/0x150 [ 1888.014065][ T2533] should_fail_ex+0x414/0x560 [ 1888.014100][ T2533] prepare_alloc_pages+0x22b/0x650 [ 1888.014130][ T2533] __alloc_frozen_pages_noprof+0x123/0x370 [ 1888.014156][ T2533] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1888.014194][ T2533] alloc_pages_mpol+0x232/0x4a0 [ 1888.014223][ T2533] alloc_pages_noprof+0xa9/0x190 [ 1888.014248][ T2533] folio_alloc_noprof+0x1e/0x30 [ 1888.014272][ T2533] filemap_alloc_folio_noprof+0x107/0x470 [ 1888.014301][ T2533] ? __pfx_filemap_get_entry+0x10/0x10 [ 1888.014323][ T2533] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1888.014350][ T2533] ? reacquire_held_locks+0x104/0x190 [ 1888.014373][ T2533] ? __mark_inode_dirty+0x6a8/0x1330 [ 1888.014418][ T2533] __filemap_get_folio_mpol+0x3fc/0xb00 [ 1888.014446][ T2533] iomap_write_begin+0x6ef/0x1370 [ 1888.014494][ T2533] iomap_file_buffered_write+0x45f/0x9c0 [ 1888.014533][ T2533] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1888.014582][ T2533] ? down_read+0x274/0x2e0 [ 1888.014605][ T2533] ? blkdev_write_iter+0x4f7/0x710 [ 1888.014635][ T2533] blkdev_write_iter+0x524/0x710 [ 1888.014672][ T2533] do_iter_readv_writev+0x623/0x8c0 [ 1888.014698][ T2533] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1888.014718][ T2533] ? common_file_perm+0x1b5/0x220 [ 1888.014747][ T2533] ? bpf_lsm_file_permission+0x9/0x20 [ 1888.014768][ T2533] ? security_file_permission+0x75/0x290 [ 1888.014790][ T2533] ? rw_verify_area+0x255/0x4d0 [ 1888.014822][ T2533] vfs_writev+0x31a/0x960 [ 1888.014855][ T2533] ? __pfx_vfs_writev+0x10/0x10 [ 1888.014891][ T2533] ? __fget_files+0x2a/0x420 [ 1888.014919][ T2533] ? __fget_files+0x3a0/0x420 [ 1888.014942][ T2533] ? __fget_files+0x2a/0x420 [ 1888.014974][ T2533] do_writev+0x14d/0x2d0 [ 1888.015000][ T2533] ? __pfx_do_writev+0x10/0x10 [ 1888.015034][ T2533] __do_fast_syscall_32+0x1dc/0x570 [ 1888.015057][ T2533] ? lockdep_hardirqs_on+0x7b/0x110 [ 1888.015076][ T2533] ? do_fast_syscall_32+0x34/0x80 [ 1888.015099][ T2533] ? irqentry_exit+0x10f/0x670 [ 1888.015121][ T2533] do_fast_syscall_32+0x34/0x80 [ 1888.015144][ T2533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1888.015167][ T2533] RIP: 0023:0xf702d539 [ 1888.015185][ T2533] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1888.015203][ T2533] RSP: 002b:00000000f53fc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1888.015224][ T2533] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 1888.015239][ T2533] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1888.015252][ T2533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1888.015263][ T2533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1888.015275][ T2533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1888.015304][ T2533] [ 1888.421930][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1888.708140][ T2535] loop5: detected capacity change from 0 to 4095 [ 1889.022431][ T2545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1889.041070][ T2545] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1889.232948][ T2550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7366'. [ 1889.306106][ T2550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7366'. [ 1889.472840][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1890.681932][T31701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1890.720754][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1890.913517][ T2584] loop6: detected capacity change from 0 to 63 [ 1890.920230][ T2584] buffer_io_error: 49 callbacks suppressed [ 1890.920244][ T2584] Buffer I/O error on dev loop6, logical block 0, async page read [ 1890.944337][ T2584] Buffer I/O error on dev loop6, logical block 0, async page read [ 1890.952900][ T2584] Buffer I/O error on dev loop6, logical block 0, async page read [ 1890.960921][ T2584] Buffer I/O error on dev loop6, logical block 0, async page read [ 1890.971805][ T2584] Buffer I/O error on dev loop6, logical block 0, async page read [ 1890.979698][ T2584] Buffer I/O error on dev loop6, logical block 0, async page read [ 1891.011240][ T2584] Buffer I/O error on dev loop6, logical block 0, async page read [ 1891.040563][ T2584] Buffer I/O error on dev loop6, logical block 0, async page read [ 1891.075455][ T2584] Buffer I/O error on dev loop6, logical block 1, async page read [ 1891.103739][ T2584] loop6: unable to read partition table [ 1891.137021][ T2584] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1891.170600][ T5200] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1891.190209][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1891.213661][ T5200] Dev loop6: unable to read RDB block 0 [ 1891.225553][ T5200] loop6: unable to read partition table [ 1891.372696][ T2598] qrtr: Invalid version 0 [ 1891.520115][ T2607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7382'. [ 1891.533222][ T2607] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7382'. [ 1891.781761][ T30] audit: type=1326 audit(1768330113.568:38902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2608 comm="syz.1.7383" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0 [ 1891.812356][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.232939][ T2618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.242066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.832369][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.722485][T31701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.846232][ T2655] loop6: detected capacity change from 0 to 63 [ 1893.866996][ T2655] ldm_validate_partition_table(): Disk read failed. [ 1893.876362][ T2655] Dev loop6: unable to read RDB block 0 [ 1893.972269][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.986507][ T2655] loop6: unable to read partition table [ 1894.004459][ T2655] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1894.206807][ T30] audit: type=1326 audit(1768330116.028:38903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.4.7393" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 1894.245916][ T2660] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1894.966919][ T30] audit: type=1326 audit(1768330116.688:38904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2665 comm="syz.0.7397" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1895.018710][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1895.947073][ T2695] binder: BINDER_SET_CONTEXT_MGR already set [ 1895.959776][ T2695] binder: 2693:2695 ioctl 4018620d 80000100 returned -16 [ 1895.974627][ T2703] binder_alloc: binder_alloc_mmap_handler: 2693 80ffe000-81000000 already mapped failed -16 [ 1896.033794][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1896.049277][ T2695] binder_alloc: 2693: binder_alloc_buf, no vma [ 1896.234441][ T2706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7401'. [ 1896.766554][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1896.853723][ T30] audit: type=1326 audit(1768330118.658:38905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2727 comm="syz.4.7409" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 1897.042398][T27560] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1897.074940][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1897.182916][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1897.219822][ T2742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7411'. [ 1897.266751][T27560] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1897.275131][T27560] usb 2-1: config 0 has no interface number 0 [ 1897.281238][T27560] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1897.327891][T27560] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1897.354473][T27560] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1897.368107][T27560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.506843][T27560] usb 2-1: config 0 descriptor?? [ 1897.857479][ T2747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7407'. [ 1898.112401][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1898.174965][ T2751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7407'. [ 1898.607387][ T2753] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7414'. [ 1898.627271][ T2753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7414'. [ 1899.097247][ T30] audit: type=1326 audit(1768330120.868:38906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2757 comm="syz.4.7415" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 1899.153552][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.792046][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1900.121954][ T2786] loop6: detected capacity change from 0 to 63 [ 1900.183422][ T2788] FAULT_INJECTION: forcing a failure. [ 1900.183422][ T2788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1900.197434][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1900.229967][ T2788] CPU: 1 UID: 0 PID: 2788 Comm: syz.0.7422 Tainted: G L syzkaller #0 PREEMPT(full) [ 1900.229996][ T2788] Tainted: [L]=SOFTLOCKUP [ 1900.230003][ T2788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1900.230015][ T2788] Call Trace: [ 1900.230023][ T2788] [ 1900.230030][ T2788] dump_stack_lvl+0xe8/0x150 [ 1900.230057][ T2788] should_fail_ex+0x414/0x560 [ 1900.230087][ T2788] copy_folio_from_iter_atomic+0x30b/0x1910 [ 1900.230110][ T2788] ? __pfx___block_write_begin_int+0x10/0x10 [ 1900.230144][ T2788] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1900.230177][ T2788] iomap_file_buffered_write+0x4f0/0x9c0 [ 1900.230211][ T2788] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1900.230260][ T2788] ? down_read+0x274/0x2e0 [ 1900.230279][ T2788] ? blkdev_write_iter+0x4f7/0x710 [ 1900.230306][ T2788] blkdev_write_iter+0x524/0x710 [ 1900.230338][ T2788] do_iter_readv_writev+0x623/0x8c0 [ 1900.230361][ T2788] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1900.230377][ T2788] ? common_file_perm+0x1b5/0x220 [ 1900.230403][ T2788] ? bpf_lsm_file_permission+0x9/0x20 [ 1900.230420][ T2788] ? security_file_permission+0x75/0x290 [ 1900.230439][ T2788] ? rw_verify_area+0x255/0x4d0 [ 1900.230467][ T2788] vfs_writev+0x31a/0x960 [ 1900.230495][ T2788] ? __pfx_vfs_writev+0x10/0x10 [ 1900.230527][ T2788] ? __fget_files+0x2a/0x420 [ 1900.230551][ T2788] ? __fget_files+0x3a0/0x420 [ 1900.230570][ T2788] ? __fget_files+0x2a/0x420 [ 1900.230598][ T2788] do_writev+0x14d/0x2d0 [ 1900.230620][ T2788] ? __pfx_do_writev+0x10/0x10 [ 1900.230649][ T2788] __do_fast_syscall_32+0x1dc/0x570 [ 1900.230668][ T2788] ? lockdep_hardirqs_on+0x7b/0x110 [ 1900.230686][ T2788] ? do_fast_syscall_32+0x34/0x80 [ 1900.230704][ T2788] ? irqentry_exit+0x10f/0x670 [ 1900.230725][ T2788] do_fast_syscall_32+0x34/0x80 [ 1900.230745][ T2788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1900.230765][ T2788] RIP: 0023:0xf7fb2539 [ 1900.230780][ T2788] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1900.230795][ T2788] RSP: 002b:00000000f548555c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1900.230814][ T2788] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 1900.230827][ T2788] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1900.230837][ T2788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1900.230848][ T2788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1900.230859][ T2788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1900.230883][ T2788] [ 1900.235567][ T2786] buffer_io_error: 45 callbacks suppressed [ 1900.235582][ T2786] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1900.514349][ T2786] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1900.553264][ T2786] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1900.561856][ T2786] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 1900.581450][ T2786] Buffer I/O error on dev loop6, logical block 0, async page read [ 1900.592127][ T2786] Buffer I/O error on dev loop6, logical block 0, async page read [ 1900.603835][ T2786] Buffer I/O error on dev loop6, logical block 0, async page read [ 1900.645765][ T2786] Buffer I/O error on dev loop6, logical block 0, async page read [ 1900.654913][ T2786] Buffer I/O error on dev loop6, logical block 0, async page read [ 1900.664800][ T2786] Buffer I/O error on dev loop6, logical block 0, async page read [ 1900.674103][ T2786] ldm_validate_partition_table(): Disk read failed. [ 1900.681245][ T2786] Dev loop6: unable to read RDB block 0 [ 1900.687429][ T2786] loop6: unable to read partition table [ 1900.693782][ T2786] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1900.728697][ T980] usb 2-1: USB disconnect, device number 77 [ 1901.232119][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1901.282853][ T2802] loop6: detected capacity change from 0 to 63 [ 1901.302961][ T2802] ldm_validate_partition_table(): Disk read failed. [ 1901.351966][ T2802] Dev loop6: unable to read RDB block 0 [ 1901.357791][ T2802] loop6: unable to read partition table [ 1901.375255][ T2805] FAULT_INJECTION: forcing a failure. [ 1901.375255][ T2805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.383391][ T2802] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1901.408308][ T2805] CPU: 0 UID: 0 PID: 2805 Comm: syz.0.7435 Tainted: G L syzkaller #0 PREEMPT(full) [ 1901.408336][ T2805] Tainted: [L]=SOFTLOCKUP [ 1901.408344][ T2805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1901.408357][ T2805] Call Trace: [ 1901.408366][ T2805] [ 1901.408375][ T2805] dump_stack_lvl+0xe8/0x150 [ 1901.408404][ T2805] should_fail_ex+0x414/0x560 [ 1901.408440][ T2805] copy_folio_from_iter_atomic+0x30b/0x1910 [ 1901.408467][ T2805] ? __pfx___block_write_begin_int+0x10/0x10 [ 1901.408504][ T2805] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1901.408542][ T2805] iomap_file_buffered_write+0x4f0/0x9c0 [ 1901.408582][ T2805] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1901.408632][ T2805] ? down_read+0x274/0x2e0 [ 1901.408653][ T2805] ? blkdev_write_iter+0x4f7/0x710 [ 1901.408682][ T2805] blkdev_write_iter+0x524/0x710 [ 1901.408720][ T2805] do_iter_readv_writev+0x623/0x8c0 [ 1901.408747][ T2805] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1901.408766][ T2805] ? common_file_perm+0x1b5/0x220 [ 1901.408796][ T2805] ? bpf_lsm_file_permission+0x9/0x20 [ 1901.408816][ T2805] ? security_file_permission+0x75/0x290 [ 1901.408838][ T2805] ? rw_verify_area+0x255/0x4d0 [ 1901.408879][ T2805] vfs_writev+0x31a/0x960 [ 1901.408911][ T2805] ? __pfx_vfs_writev+0x10/0x10 [ 1901.408949][ T2805] ? __fget_files+0x2a/0x420 [ 1901.408978][ T2805] ? __fget_files+0x3a0/0x420 [ 1901.409000][ T2805] ? __fget_files+0x2a/0x420 [ 1901.409032][ T2805] do_writev+0x14d/0x2d0 [ 1901.409059][ T2805] ? __pfx_do_writev+0x10/0x10 [ 1901.409093][ T2805] __do_fast_syscall_32+0x1dc/0x570 [ 1901.409115][ T2805] ? lockdep_hardirqs_on+0x7b/0x110 [ 1901.409134][ T2805] ? do_fast_syscall_32+0x34/0x80 [ 1901.409156][ T2805] ? irqentry_exit+0x10f/0x670 [ 1901.409180][ T2805] do_fast_syscall_32+0x34/0x80 [ 1901.409202][ T2805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1901.409226][ T2805] RIP: 0023:0xf7fb2539 [ 1901.409242][ T2805] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1901.409259][ T2805] RSP: 002b:00000000f548555c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1901.409280][ T2805] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 1901.409295][ T2805] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1901.409307][ T2805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1901.409319][ T2805] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1901.409331][ T2805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1901.409359][ T2805] [ 1902.024213][ T2818] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7425'. [ 1902.359620][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.387894][ T2824] FAULT_INJECTION: forcing a failure. [ 1902.387894][ T2824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1902.409491][ T2824] CPU: 0 UID: 0 PID: 2824 Comm: syz.1.7429 Tainted: G L syzkaller #0 PREEMPT(full) [ 1902.409509][ T2824] Tainted: [L]=SOFTLOCKUP [ 1902.409513][ T2824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1902.409520][ T2824] Call Trace: [ 1902.409525][ T2824] [ 1902.409530][ T2824] dump_stack_lvl+0xe8/0x150 [ 1902.409548][ T2824] should_fail_ex+0x414/0x560 [ 1902.409566][ T2824] _copy_from_user+0x2d/0xb0 [ 1902.409580][ T2824] do_mq_notify+0x1b8/0xd00 [ 1902.409593][ T2824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1902.409606][ T2824] ? __pfx_do_mq_notify+0x10/0x10 [ 1902.409619][ T2824] ? get_compat_sigevent+0x17a/0x230 [ 1902.409631][ T2824] __ia32_compat_sys_mq_notify+0x137/0x180 [ 1902.409641][ T2824] ? __pfx___ia32_compat_sys_mq_notify+0x10/0x10 [ 1902.409650][ T2824] ? ksys_write+0x22a/0x250 [ 1902.409668][ T2824] __do_fast_syscall_32+0x1dc/0x570 [ 1902.409680][ T2824] ? lockdep_hardirqs_on+0x7b/0x110 [ 1902.409690][ T2824] ? do_fast_syscall_32+0x34/0x80 [ 1902.409701][ T2824] ? irqentry_exit+0x10f/0x670 [ 1902.409713][ T2824] do_fast_syscall_32+0x34/0x80 [ 1902.409724][ T2824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1902.409737][ T2824] RIP: 0023:0xf704d539 [ 1902.409747][ T2824] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1902.409757][ T2824] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000119 [ 1902.409770][ T2824] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000080000000 [ 1902.409778][ T2824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1902.409784][ T2824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1902.409790][ T2824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1902.409796][ T2824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1902.409810][ T2824] [ 1902.790895][ T2826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.799284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.843368][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1903.134748][ T2839] bond4: entered promiscuous mode [ 1903.143579][ T2839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7432'. [ 1903.482015][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1903.571984][ T30] audit: type=1326 audit(1768330125.358:38907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2834 comm="syz.0.7433" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1903.809055][ T2857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1905.104792][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1905.872237][T31701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1906.054408][ T2907] FAULT_INJECTION: forcing a failure. [ 1906.054408][ T2907] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.137230][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1906.177639][ T2907] CPU: 1 UID: 0 PID: 2907 Comm: syz.4.7449 Tainted: G L syzkaller #0 PREEMPT(full) [ 1906.177676][ T2907] Tainted: [L]=SOFTLOCKUP [ 1906.177683][ T2907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1906.177694][ T2907] Call Trace: [ 1906.177702][ T2907] [ 1906.177711][ T2907] dump_stack_lvl+0xe8/0x150 [ 1906.177738][ T2907] should_fail_ex+0x414/0x560 [ 1906.177774][ T2907] should_failslab+0xa8/0x100 [ 1906.177799][ T2907] kmem_cache_alloc_noprof+0x88/0x710 [ 1906.177828][ T2907] ? ptlock_alloc+0x20/0x70 [ 1906.177860][ T2907] ptlock_alloc+0x20/0x70 [ 1906.177886][ T2907] pte_alloc_one+0x7a/0x370 [ 1906.177906][ T2907] ? do_pte_missing+0xd0f/0x3330 [ 1906.177929][ T2907] do_pte_missing+0x1162/0x3330 [ 1906.177969][ T2907] handle_mm_fault+0x1b26/0x32b0 [ 1906.178009][ T2907] ? handle_mm_fault+0xdb/0x32b0 [ 1906.178042][ T2907] ? __pfx_handle_mm_fault+0x10/0x10 [ 1906.178082][ T2907] ? __lock_acquire+0x6b6/0x2cf0 [ 1906.178106][ T2907] ? lock_mm_and_find_vma+0x9c/0x300 [ 1906.178125][ T2907] do_user_addr_fault+0x764/0x1380 [ 1906.178158][ T2907] exc_page_fault+0x71/0xd0 [ 1906.178180][ T2907] asm_exc_page_fault+0x26/0x30 [ 1906.178198][ T2907] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1906.178222][ T2907] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1906.178239][ T2907] RSP: 0018:ffffc9000bc7fcd8 EFLAGS: 00050216 [ 1906.178257][ T2907] RAX: 00007ffffffff001 RBX: 0000000000000020 RCX: 0000000000000020 [ 1906.178271][ T2907] RDX: 0000000000000001 RSI: 000000000c230000 RDI: ffff8880372d9040 [ 1906.178286][ T2907] RBP: ffffc9000bc7fdd0 R08: ffff8880372d905f R09: 1ffff11006e5b20b [ 1906.178301][ T2907] R10: dffffc0000000000 R11: ffffed1006e5b20c R12: dffffc0000000000 [ 1906.178315][ T2907] R13: 1ffff9200178ffbc R14: ffff8880372d9040 R15: 000000000c230000 [ 1906.178346][ T2907] _copy_from_user+0x7a/0xb0 [ 1906.178372][ T2907] do_mq_notify+0x1b8/0xd00 [ 1906.178398][ T2907] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1906.178420][ T2907] ? __pfx_do_mq_notify+0x10/0x10 [ 1906.178445][ T2907] ? get_compat_sigevent+0x17a/0x230 [ 1906.178468][ T2907] __ia32_compat_sys_mq_notify+0x137/0x180 [ 1906.178489][ T2907] ? __pfx___ia32_compat_sys_mq_notify+0x10/0x10 [ 1906.178508][ T2907] ? ksys_write+0x22a/0x250 [ 1906.178543][ T2907] __do_fast_syscall_32+0x1dc/0x570 [ 1906.178566][ T2907] ? lockdep_hardirqs_on+0x7b/0x110 [ 1906.178585][ T2907] ? do_fast_syscall_32+0x34/0x80 [ 1906.178607][ T2907] ? irqentry_exit+0x10f/0x670 [ 1906.178632][ T2907] do_fast_syscall_32+0x34/0x80 [ 1906.178655][ T2907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1906.178685][ T2907] RIP: 0023:0xf709d539 [ 1906.178701][ T2907] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1906.178717][ T2907] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000119 [ 1906.178736][ T2907] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000080000000 [ 1906.178751][ T2907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1906.178763][ T2907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1906.178775][ T2907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1906.178787][ T2907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1906.178816][ T2907] [ 1906.752613][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1906.820797][ T30] audit: type=1326 audit(1768330128.638:38908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2913 comm="syz.1.7451" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0 [ 1907.287356][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1907.574559][ T2927] ptrace attach of "./syz-executor exec"[1149] was attempted by "./syz-executor exec"[2927] [ 1908.093824][ T2938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7454'. [ 1908.108265][ T2938] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7454'. [ 1908.350128][ T2941] tipc: Enabled bearer , priority 0 [ 1908.359498][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1908.369108][ T2941] syzkaller0: entered promiscuous mode [ 1908.374933][ T2941] syzkaller0: entered allmulticast mode [ 1908.394943][ T2940] tipc: Resetting bearer [ 1908.530779][ T2940] tipc: Disabling bearer [ 1908.911899][T31701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.395081][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1910.478843][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1911.547742][ T30] audit: type=1326 audit(1768330133.358:38909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2976 comm="syz.4.7464" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 1911.575216][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1911.997818][ T2568] schedule_timeout: wrong timeout value ffffffffffffffe3 [ 1911.999882][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1912.012856][ T2568] CPU: 1 UID: 0 PID: 2568 Comm: vivid-003-sdr-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1912.012886][ T2568] Tainted: [L]=SOFTLOCKUP [ 1912.012894][ T2568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1912.012906][ T2568] Call Trace: [ 1912.012922][ T2568] [ 1912.012930][ T2568] dump_stack_lvl+0xe8/0x150 [ 1912.012956][ T2568] schedule_timeout+0x1e1/0x270 [ 1912.012984][ T2568] ? __pfx_schedule_timeout+0x10/0x10 [ 1912.013016][ T2568] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1912.013035][ T2568] ? prepare_to_wait_event+0x437/0x480 [ 1912.013070][ T2568] vivid_thread_sdr_cap+0xa62/0xf80 [ 1912.013117][ T2568] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 1912.013153][ T2568] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1912.013178][ T2568] ? __kthread_parkme+0x7b/0x200 [ 1912.013199][ T2568] ? __kthread_parkme+0x1a1/0x200 [ 1912.013226][ T2568] kthread+0x711/0x8a0 [ 1912.013252][ T2568] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 1912.013279][ T2568] ? __pfx_kthread+0x10/0x10 [ 1912.013306][ T2568] ? _raw_spin_unlock_irq+0x23/0x50 [ 1912.013322][ T2568] ? __pfx_kthread+0x10/0x10 [ 1912.013347][ T2568] ret_from_fork+0x510/0xa50 [ 1912.013368][ T2568] ? __pfx_ret_from_fork+0x10/0x10 [ 1912.013384][ T2568] ? __switch_to+0xc9e/0x1480 [ 1912.013413][ T2568] ? __pfx_kthread+0x10/0x10 [ 1912.013438][ T2568] ret_from_fork_asm+0x1a/0x30 [ 1912.013477][ T2568] [ 1912.289435][ T2989] loop6: detected capacity change from 0 to 63 [ 1912.302261][T28932] buffer_io_error: 43 callbacks suppressed [ 1912.302272][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1912.316171][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1912.324674][T28932] Buffer I/O error on dev loop6, logical block 0, async page read [ 1912.342949][ T2990] FAULT_INJECTION: forcing a failure. [ 1912.342949][ T2990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1912.356455][T28932] loop6: unable to read partition table [ 1912.376379][ T2990] CPU: 0 UID: 0 PID: 2990 Comm: syz.0.7466 Tainted: G L syzkaller #0 PREEMPT(full) [ 1912.376405][ T2990] Tainted: [L]=SOFTLOCKUP [ 1912.376409][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1912.376416][ T2990] Call Trace: [ 1912.376421][ T2990] [ 1912.376426][ T2990] dump_stack_lvl+0xe8/0x150 [ 1912.376445][ T2990] should_fail_ex+0x414/0x560 [ 1912.376464][ T2990] copy_folio_from_iter_atomic+0x30b/0x1910 [ 1912.376482][ T2990] ? __pfx___block_write_begin_int+0x10/0x10 [ 1912.376502][ T2990] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1912.376522][ T2990] iomap_file_buffered_write+0x4f0/0x9c0 [ 1912.376543][ T2990] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1912.376569][ T2990] ? down_read+0x274/0x2e0 [ 1912.376581][ T2990] ? blkdev_write_iter+0x4f7/0x710 [ 1912.376598][ T2990] blkdev_write_iter+0x524/0x710 [ 1912.376617][ T2990] do_iter_readv_writev+0x623/0x8c0 [ 1912.376632][ T2990] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1912.376642][ T2990] ? common_file_perm+0x1b5/0x220 [ 1912.376657][ T2990] ? bpf_lsm_file_permission+0x9/0x20 [ 1912.376668][ T2990] ? security_file_permission+0x75/0x290 [ 1912.376680][ T2990] ? rw_verify_area+0x255/0x4d0 [ 1912.376697][ T2990] vfs_writev+0x31a/0x960 [ 1912.376714][ T2990] ? __pfx_vfs_writev+0x10/0x10 [ 1912.376733][ T2990] ? __fget_files+0x2a/0x420 [ 1912.376748][ T2990] ? __fget_files+0x3a0/0x420 [ 1912.376760][ T2990] ? __fget_files+0x2a/0x420 [ 1912.376776][ T2990] do_writev+0x14d/0x2d0 [ 1912.376790][ T2990] ? __pfx_do_writev+0x10/0x10 [ 1912.376810][ T2990] __do_fast_syscall_32+0x1dc/0x570 [ 1912.376823][ T2990] ? lockdep_hardirqs_on+0x7b/0x110 [ 1912.376833][ T2990] ? do_fast_syscall_32+0x34/0x80 [ 1912.376844][ T2990] ? irqentry_exit+0x10f/0x670 [ 1912.376856][ T2990] do_fast_syscall_32+0x34/0x80 [ 1912.376868][ T2990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1912.376881][ T2990] RIP: 0023:0xf7fb2539 [ 1912.376891][ T2990] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1912.376901][ T2990] RSP: 002b:00000000f548555c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1912.376913][ T2990] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 1912.376921][ T2990] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1912.376926][ T2990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1912.376932][ T2990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1912.376939][ T2990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1912.376953][ T2990] [ 1912.377037][ T2989] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1912.461765][ T1848] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1912.656885][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1912.665505][ T2989] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1912.713594][ T2989] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1912.747434][ T2989] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 1912.785382][ T2989] Buffer I/O error on dev loop6, logical block 0, async page read [ 1912.821807][ T2989] Buffer I/O error on dev loop6, logical block 0, async page read [ 1912.851140][ T2989] Buffer I/O error on dev loop6, logical block 0, async page read [ 1912.861806][ T1848] usb 2-1: Using ep0 maxpacket: 16 [ 1912.867068][ T2989] ldm_validate_partition_table(): Disk read failed. [ 1912.883667][ T1848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.894000][ T1848] usb 2-1: config 0 has no interfaces? [ 1912.899564][ T1848] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1912.910555][ T1848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.918827][ T2989] Dev loop6: unable to read RDB block 0 [ 1912.929730][ T1848] usb 2-1: config 0 descriptor?? [ 1912.946788][ T2989] loop6: unable to read partition table [ 1912.965826][ T2989] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1913.269188][ T2979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7465'. [ 1913.397622][ T2979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7465'. [ 1913.714689][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1913.726015][ T3526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1913.734866][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1913.744583][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1914.436156][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.444781][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.091958][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1915.158497][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.177298][ T5928] usb 2-1: USB disconnect, device number 78 [ 1916.214702][T27560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.362189][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.877661][ T3032] : entered promiscuous mode [ 1916.921765][T27560] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1916.959772][ T3037] loop6: detected capacity change from 0 to 63 [ 1916.976927][T28932] ldm_validate_partition_table(): Disk read failed. [ 1916.993017][T28932] Dev loop6: unable to read RDB block 0 [ 1916.999134][T28932] loop6: unable to read partition table [ 1917.019149][ T3040] FAULT_INJECTION: forcing a failure. [ 1917.019149][ T3040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1917.037782][ T3036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.049921][ T3040] CPU: 1 UID: 0 PID: 3040 Comm: syz.6.7481 Tainted: G L syzkaller #0 PREEMPT(full) [ 1917.049951][ T3040] Tainted: [L]=SOFTLOCKUP [ 1917.049958][ T3040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1917.049970][ T3040] Call Trace: [ 1917.049978][ T3040] [ 1917.049987][ T3040] dump_stack_lvl+0xe8/0x150 [ 1917.050019][ T3040] should_fail_ex+0x414/0x560 [ 1917.050055][ T3040] prepare_alloc_pages+0x22b/0x650 [ 1917.050084][ T3040] __alloc_frozen_pages_noprof+0x123/0x370 [ 1917.050111][ T3040] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1917.050150][ T3040] alloc_pages_mpol+0x232/0x4a0 [ 1917.050179][ T3040] alloc_pages_noprof+0xa9/0x190 [ 1917.050204][ T3040] folio_alloc_noprof+0x1e/0x30 [ 1917.050227][ T3040] filemap_alloc_folio_noprof+0x107/0x470 [ 1917.050256][ T3040] ? __pfx_filemap_get_entry+0x10/0x10 [ 1917.050277][ T3040] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1917.050307][ T3040] ? __xa_set_mark+0x6f/0xa0 [ 1917.050337][ T3040] __filemap_get_folio_mpol+0x3fc/0xb00 [ 1917.050366][ T3040] iomap_write_begin+0x6ef/0x1370 [ 1917.050417][ T3040] iomap_file_buffered_write+0x45f/0x9c0 [ 1917.050456][ T3040] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1917.050507][ T3040] ? down_read+0x274/0x2e0 [ 1917.050528][ T3040] ? blkdev_write_iter+0x4f7/0x710 [ 1917.050560][ T3040] blkdev_write_iter+0x524/0x710 [ 1917.050597][ T3040] do_iter_readv_writev+0x623/0x8c0 [ 1917.050624][ T3040] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1917.050643][ T3040] ? common_file_perm+0x1b5/0x220 [ 1917.050672][ T3040] ? bpf_lsm_file_permission+0x9/0x20 [ 1917.050692][ T3040] ? security_file_permission+0x75/0x290 [ 1917.050714][ T3040] ? rw_verify_area+0x255/0x4d0 [ 1917.050747][ T3040] vfs_writev+0x31a/0x960 [ 1917.050779][ T3040] ? __pfx_vfs_writev+0x10/0x10 [ 1917.050816][ T3040] ? __fget_files+0x2a/0x420 [ 1917.050844][ T3040] ? __fget_files+0x3a0/0x420 [ 1917.050867][ T3040] ? __fget_files+0x2a/0x420 [ 1917.050898][ T3040] do_writev+0x14d/0x2d0 [ 1917.050924][ T3040] ? __pfx_do_writev+0x10/0x10 [ 1917.050948][ T3040] ? rcu_is_watching+0x15/0xb0 [ 1917.050981][ T3040] __do_fast_syscall_32+0x1dc/0x570 [ 1917.051003][ T3040] ? lockdep_hardirqs_on+0x7b/0x110 [ 1917.051023][ T3040] ? do_fast_syscall_32+0x34/0x80 [ 1917.051044][ T3040] ? irqentry_exit+0x10f/0x670 [ 1917.051068][ T3040] do_fast_syscall_32+0x34/0x80 [ 1917.051091][ T3040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1917.051114][ T3040] RIP: 0023:0xf702d539 [ 1917.051130][ T3040] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1917.051147][ T3040] RSP: 002b:00000000f53fc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1917.051167][ T3040] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 1917.051181][ T3040] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1917.051193][ T3040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1917.051205][ T3040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1917.051218][ T3040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1917.051246][ T3040] [ 1917.367799][ T3037] buffer_io_error: 38 callbacks suppressed [ 1917.367816][ T3037] Buffer I/O error on dev loop6, logical block 0, async page read [ 1917.369170][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.373786][ T3037] Buffer I/O error on dev loop6, logical block 0, async page read [ 1917.399180][ T3036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.408507][ T3036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.417618][T27560] usb 5-1: Using ep0 maxpacket: 32 [ 1917.424417][ T3036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.432769][ T3036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.442530][T27560] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1917.451730][T27560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.462767][T27560] usb 5-1: config 0 descriptor?? [ 1917.491382][ T3037] Buffer I/O error on dev loop6, logical block 0, async page read [ 1917.523536][ T3037] Buffer I/O error on dev loop6, logical block 0, async page read [ 1917.531388][ T3037] Buffer I/O error on dev loop6, logical block 0, async page read [ 1917.574797][ T3037] Buffer I/O error on dev loop6, logical block 0, async page read [ 1917.584637][ T3037] Buffer I/O error on dev loop6, logical block 0, async page read [ 1917.629901][ T3037] Buffer I/O error on dev loop6, logical block 0, async page read [ 1917.640008][ T3037] ldm_validate_partition_table(): Disk read failed. [ 1917.650133][ T3037] Buffer I/O error on dev loop6, logical block 0, async page read [ 1917.671426][T27560] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1917.683202][T27560] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1917.692630][T27560] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1917.715523][ T3037] Buffer I/O error on dev loop6, logical block 0, async page read [ 1917.742908][ T3037] Dev loop6: unable to read RDB block 0 [ 1917.754177][ T3037] loop6: unable to read partition table [ 1917.781336][ T3037] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1917.824396][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1917.831069][ T5200] Dev loop6: unable to read RDB block 0 [ 1917.845602][ T5200] loop6: unable to read partition table [ 1918.155275][ T3056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1919.465488][ T3073] input: syz0 as /devices/virtual/input/input109 [ 1919.723040][ T3080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.777638][ T3080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.921899][ T5929] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1920.109374][ T5929] usb 2-1: device descriptor read/64, error -71 [ 1920.437971][ T5929] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1920.544454][T17723] net_ratelimit: 4 callbacks suppressed [ 1920.544471][T17723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1920.567582][T32416] Bluetooth: hci3: unexpected event for opcode 0x0028 [ 1920.611751][ T5929] usb 2-1: device descriptor read/64, error -71 [ 1920.618142][T32416] Bluetooth: hci3: unexpected event for opcode 0x0028 [ 1920.756113][ T5929] usb usb2-port1: attempt power cycle [ 1921.084091][ T3099] loop6: detected capacity change from 0 to 63 [ 1921.094027][T28932] ldm_validate_partition_table(): Disk read failed. [ 1921.108470][T28932] Dev loop6: unable to read RDB block 0 [ 1921.118415][T28932] loop6: unable to read partition table [ 1921.131865][ T3099] ldm_validate_partition_table(): Disk read failed. [ 1921.137421][ T3100] FAULT_INJECTION: forcing a failure. [ 1921.137421][ T3100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1921.177140][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1921.212521][ T3100] CPU: 0 UID: 0 PID: 3100 Comm: syz.2.7498 Tainted: G L syzkaller #0 PREEMPT(full) [ 1921.212551][ T3100] Tainted: [L]=SOFTLOCKUP [ 1921.212559][ T3100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1921.212572][ T3100] Call Trace: [ 1921.212580][ T3100] [ 1921.212589][ T3100] dump_stack_lvl+0xe8/0x150 [ 1921.212619][ T3100] should_fail_ex+0x414/0x560 [ 1921.212656][ T3100] copy_folio_from_iter_atomic+0x30b/0x1910 [ 1921.212684][ T3100] ? __pfx___block_write_begin_int+0x10/0x10 [ 1921.212721][ T3100] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1921.212760][ T3100] iomap_file_buffered_write+0x4f0/0x9c0 [ 1921.212801][ T3100] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1921.212850][ T3100] ? down_read+0x274/0x2e0 [ 1921.212872][ T3100] ? blkdev_write_iter+0x4f7/0x710 [ 1921.212903][ T3100] blkdev_write_iter+0x524/0x710 [ 1921.212942][ T3100] do_iter_readv_writev+0x623/0x8c0 [ 1921.212976][ T3100] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1921.212995][ T3100] ? common_file_perm+0x1b5/0x220 [ 1921.213025][ T3100] ? bpf_lsm_file_permission+0x9/0x20 [ 1921.213046][ T3100] ? security_file_permission+0x75/0x290 [ 1921.213068][ T3100] ? rw_verify_area+0x255/0x4d0 [ 1921.213102][ T3100] vfs_writev+0x31a/0x960 [ 1921.213138][ T3100] ? __pfx_vfs_writev+0x10/0x10 [ 1921.213177][ T3100] ? __fget_files+0x2a/0x420 [ 1921.213205][ T3100] ? __fget_files+0x3a0/0x420 [ 1921.213228][ T3100] ? __fget_files+0x2a/0x420 [ 1921.213260][ T3100] do_writev+0x14d/0x2d0 [ 1921.213287][ T3100] ? __pfx_do_writev+0x10/0x10 [ 1921.213322][ T3100] __do_fast_syscall_32+0x1dc/0x570 [ 1921.213346][ T3100] ? lockdep_hardirqs_on+0x7b/0x110 [ 1921.213366][ T3100] ? do_fast_syscall_32+0x34/0x80 [ 1921.213387][ T3100] ? irqentry_exit+0x10f/0x670 [ 1921.213411][ T3100] do_fast_syscall_32+0x34/0x80 [ 1921.213434][ T3100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1921.213458][ T3100] RIP: 0023:0xf7f67539 [ 1921.213474][ T3100] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1921.213491][ T3100] RSP: 002b:00000000f543555c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1921.213512][ T3100] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 1921.213527][ T3100] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1921.213539][ T3100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1921.213551][ T3100] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1921.213563][ T3100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1921.213589][ T3100] [ 1921.325685][ T5929] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1921.338588][ T3099] loop6: unable to read partition table [ 1921.382312][ T5929] usb 2-1: device descriptor read/8, error -71 [ 1921.431578][ T3099] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1921.556905][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1921.614285][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1921.621030][ T5200] Dev loop6: unable to read RDB block 0 [ 1921.631226][ T5200] loop6: unable to read partition table [ 1921.713575][ T5929] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1921.752655][ T5929] usb 2-1: device descriptor read/8, error -71 [ 1921.864931][ T5929] usb usb2-port1: unable to enumerate USB device [ 1922.596639][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.145529][ T30] audit: type=1326 audit(1768330144.788:38910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3140 comm="syz.1.7511" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0 [ 1923.638633][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1924.192072][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1924.367933][ T30] audit: type=1326 audit(1768330146.188:38911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3158 comm="syz.1.7516" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0 [ 1924.368462][ T3161] loop6: detected capacity change from 0 to 63 [ 1924.396835][ T3161] buffer_io_error: 77 callbacks suppressed [ 1924.396849][ T3161] Buffer I/O error on dev loop6, logical block 0, async page read [ 1924.411456][ T3161] Buffer I/O error on dev loop6, logical block 0, async page read [ 1924.419972][ T3161] Buffer I/O error on dev loop6, logical block 0, async page read [ 1924.431400][ T3161] Buffer I/O error on dev loop6, logical block 0, async page read [ 1924.439967][ T3162] FAULT_INJECTION: forcing a failure. [ 1924.439967][ T3162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1924.440334][ T3161] loop6: unable to read partition table [ 1924.453411][ T3162] CPU: 1 UID: 0 PID: 3162 Comm: syz.2.7515 Tainted: G L syzkaller #0 PREEMPT(full) [ 1924.453439][ T3162] Tainted: [L]=SOFTLOCKUP [ 1924.453447][ T3162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1924.453460][ T3162] Call Trace: [ 1924.453469][ T3162] [ 1924.453477][ T3162] dump_stack_lvl+0xe8/0x150 [ 1924.453506][ T3162] should_fail_ex+0x414/0x560 [ 1924.453541][ T3162] prepare_alloc_pages+0x22b/0x650 [ 1924.453570][ T3162] __alloc_frozen_pages_noprof+0x123/0x370 [ 1924.453596][ T3162] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1924.453634][ T3162] alloc_pages_mpol+0x232/0x4a0 [ 1924.453668][ T3162] alloc_pages_noprof+0xa9/0x190 [ 1924.453693][ T3162] folio_alloc_noprof+0x1e/0x30 [ 1924.453715][ T3162] filemap_alloc_folio_noprof+0x107/0x470 [ 1924.453744][ T3162] ? __pfx_filemap_get_entry+0x10/0x10 [ 1924.453764][ T3162] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1924.453793][ T3162] ? __xa_set_mark+0x6f/0xa0 [ 1924.453824][ T3162] __filemap_get_folio_mpol+0x3fc/0xb00 [ 1924.453851][ T3162] iomap_write_begin+0x6ef/0x1370 [ 1924.453895][ T3162] iomap_file_buffered_write+0x45f/0x9c0 [ 1924.453933][ T3162] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1924.453982][ T3162] ? down_read+0x274/0x2e0 [ 1924.454004][ T3162] ? blkdev_write_iter+0x4f7/0x710 [ 1924.454035][ T3162] blkdev_write_iter+0x524/0x710 [ 1924.454072][ T3162] do_iter_readv_writev+0x623/0x8c0 [ 1924.454098][ T3162] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1924.454116][ T3162] ? common_file_perm+0x1b5/0x220 [ 1924.454145][ T3162] ? bpf_lsm_file_permission+0x9/0x20 [ 1924.454165][ T3162] ? security_file_permission+0x75/0x290 [ 1924.454185][ T3162] ? rw_verify_area+0x255/0x4d0 [ 1924.454217][ T3162] vfs_writev+0x31a/0x960 [ 1924.454249][ T3162] ? __pfx_vfs_writev+0x10/0x10 [ 1924.454285][ T3162] ? __fget_files+0x2a/0x420 [ 1924.454312][ T3162] ? __fget_files+0x3a0/0x420 [ 1924.454335][ T3162] ? __fget_files+0x2a/0x420 [ 1924.454366][ T3162] do_writev+0x14d/0x2d0 [ 1924.454390][ T3162] ? __pfx_do_writev+0x10/0x10 [ 1924.454424][ T3162] __do_fast_syscall_32+0x1dc/0x570 [ 1924.454445][ T3162] ? lockdep_hardirqs_on+0x7b/0x110 [ 1924.454464][ T3162] ? do_fast_syscall_32+0x34/0x80 [ 1924.454485][ T3162] ? irqentry_exit+0x10f/0x670 [ 1924.454509][ T3162] do_fast_syscall_32+0x34/0x80 [ 1924.454532][ T3162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1924.454555][ T3162] RIP: 0023:0xf7f67539 [ 1924.454571][ T3162] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1924.454588][ T3162] RSP: 002b:00000000f543555c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1924.454608][ T3162] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 1924.454622][ T3162] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1924.454633][ T3162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1924.454650][ T3162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1924.454661][ T3162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1924.454689][ T3162] [ 1924.772441][ T3161] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1924.794484][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1924.819105][T28932] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1924.832273][T28932] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1924.842947][T28932] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1924.854733][T28932] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 1924.867469][T28932] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 1924.879723][T28932] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 1925.872040][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.952319][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.188713][ T3195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.197357][ T3195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.205910][ T3195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.546109][ T3202] loop6: detected capacity change from 0 to 63 [ 1926.553829][T28932] ldm_validate_partition_table(): Disk read failed. [ 1926.560455][T28932] Dev loop6: unable to read RDB block 0 [ 1926.569105][T28932] loop6: unable to read partition table [ 1926.589374][ T3202] ldm_validate_partition_table(): Disk read failed. [ 1926.599647][ T3202] Dev loop6: unable to read RDB block 0 [ 1926.607807][ T3202] loop6: unable to read partition table [ 1926.609224][ T3203] FAULT_INJECTION: forcing a failure. [ 1926.609224][ T3203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1926.627465][ T5888] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1926.638805][ T3203] CPU: 0 UID: 0 PID: 3203 Comm: syz.1.7527 Tainted: G L syzkaller #0 PREEMPT(full) [ 1926.638833][ T3203] Tainted: [L]=SOFTLOCKUP [ 1926.638841][ T3203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1926.638853][ T3203] Call Trace: [ 1926.638865][ T3203] [ 1926.638874][ T3203] dump_stack_lvl+0xe8/0x150 [ 1926.638902][ T3203] should_fail_ex+0x414/0x560 [ 1926.638935][ T3203] _copy_to_user+0x31/0xb0 [ 1926.638960][ T3203] simple_read_from_buffer+0xe1/0x170 [ 1926.638986][ T3203] proc_fail_nth_read+0x1b3/0x220 [ 1926.639008][ T3203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1926.639028][ T3203] ? rw_verify_area+0x2a6/0x4d0 [ 1926.639053][ T3203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1926.639072][ T3203] vfs_read+0x200/0xa30 [ 1926.639087][ T3203] ? fdget_pos+0x247/0x320 [ 1926.639110][ T3203] ? __pfx___mutex_lock+0x10/0x10 [ 1926.639130][ T3203] ? __pfx_vfs_read+0x10/0x10 [ 1926.639147][ T3203] ? __fget_files+0x2a/0x420 [ 1926.639170][ T3203] ? __fget_files+0x3a0/0x420 [ 1926.639190][ T3203] ? __fget_files+0x2a/0x420 [ 1926.639217][ T3203] ksys_read+0x145/0x250 [ 1926.639235][ T3203] ? __pfx_ksys_read+0x10/0x10 [ 1926.639259][ T3203] __do_fast_syscall_32+0x1dc/0x570 [ 1926.639278][ T3203] ? lockdep_hardirqs_on+0x7b/0x110 [ 1926.639295][ T3203] ? do_fast_syscall_32+0x34/0x80 [ 1926.639313][ T3203] ? irqentry_exit+0x10f/0x670 [ 1926.639334][ T3203] do_fast_syscall_32+0x34/0x80 [ 1926.639353][ T3203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1926.639374][ T3203] RIP: 0023:0xf704d539 [ 1926.639388][ T3203] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1926.639403][ T3203] RSP: 002b:00000000f541c590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1926.639421][ T3203] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f541c620 [ 1926.639434][ T3203] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 1926.639445][ T3203] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1926.639455][ T3203] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1926.639465][ T3203] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1926.639489][ T3203] [ 1926.642399][ T3202] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1926.924280][T32091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1927.232048][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1927.359651][ T30] audit: type=1326 audit(1768330149.178:38912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3211 comm="syz.1.7530" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0 [ 1927.383553][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1927.395458][ T5888] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1927.408748][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.418482][ T5888] usb 3-1: config 0 descriptor?? [ 1927.435810][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 1927.690835][ T3194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1927.699118][ T3194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1927.708432][ T3194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1928.064494][ T3215] vlan2: entered allmulticast mode [ 1928.069742][ T3215] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1928.226740][ T30] audit: type=1326 audit(1768330150.048:38913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3217 comm="syz.1.7532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1928.249368][ T30] audit: type=1326 audit(1768330150.048:38914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3217 comm="syz.1.7532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1928.274460][ T30] audit: type=1326 audit(1768330150.068:38915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3217 comm="syz.1.7532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1928.298913][ T30] audit: type=1326 audit(1768330150.068:38916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3217 comm="syz.1.7532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1928.322922][ T30] audit: type=1326 audit(1768330150.068:38917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3217 comm="syz.1.7532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1928.345420][ T30] audit: type=1326 audit(1768330150.098:38918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3217 comm="syz.1.7532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1928.369793][ T30] audit: type=1326 audit(1768330150.098:38919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3217 comm="syz.1.7532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1928.392573][ T30] audit: type=1326 audit(1768330150.098:38920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3217 comm="syz.1.7532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1928.420497][ T30] audit: type=1326 audit(1768330150.098:38921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3217 comm="syz.1.7532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1928.444474][ T30] audit: type=1326 audit(1768330150.098:38922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3217 comm="syz.1.7532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1928.661805][ T5928] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 1928.752219][ T3224] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7533'. [ 1928.825024][ T5928] usb 2-1: config 0 has an invalid interface number: 245 but max is 0 [ 1928.835024][ T5928] usb 2-1: config 0 has no interface number 0 [ 1928.846697][ T5928] usb 2-1: New USB device found, idVendor=699b, idProduct=9cbd, bcdDevice=76.2a [ 1928.864409][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.885720][ T5928] usb 2-1: config 0 descriptor?? [ 1929.244603][ T5888] pwc: send_video_command error -71 [ 1929.249898][ T5888] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1929.257683][ T5888] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1929.271601][ T5888] usb 3-1: USB disconnect, device number 67 [ 1929.485466][ T3229] fuse: Bad value for 'fd' [ 1929.630809][ T5928] usb 2-1: string descriptor 0 read error: -71 [ 1929.667841][ T5928] usb-storage 2-1:0.245: USB Mass Storage device detected [ 1929.833947][ T5928] usb 2-1: USB disconnect, device number 83 [ 1930.264690][ T3258] netlink: 'syz.1.7542': attribute type 2 has an invalid length. [ 1930.293944][ T3258] @„;: entered promiscuous mode [ 1931.285356][ T980] net_ratelimit: 95 callbacks suppressed [ 1931.285370][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1931.518627][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.645698][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.872420][T20267] Bluetooth: hci0: command 0x0406 tx timeout [ 1932.037813][ T3307] mac80211_hwsim hwsim89 ..ãc¤±: renamed from wlan1 (while UP) [ 1932.115310][ T3308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7553'. [ 1932.355753][T17723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1932.572048][T17723] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 1932.711761][T17723] usb 3-1: device descriptor read/64, error -71 [ 1932.852251][ T5929] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1932.961779][T17723] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 1933.011793][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 1933.018081][ T5929] usb 2-1: config 7 has an invalid interface number: 140 but max is 0 [ 1933.026310][ T5929] usb 2-1: config 7 has no interface number 0 [ 1933.032577][ T5929] usb 2-1: config 7 interface 140 has no altsetting 0 [ 1933.041180][ T5929] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=a1.aa [ 1933.050269][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.058293][ T5929] usb 2-1: Product: syz [ 1933.062715][ T5929] usb 2-1: Manufacturer: syz [ 1933.067291][ T5929] usb 2-1: SerialNumber: syz [ 1933.091907][T17723] usb 3-1: device descriptor read/64, error -71 [ 1933.203128][T17723] usb usb3-port1: attempt power cycle [ 1933.312006][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1933.405168][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1933.551852][T17723] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 1933.572310][T17723] usb 3-1: device descriptor read/8, error -71 [ 1933.807558][ T5929] ldusb 2-1:7.140: Interrupt in endpoint not found [ 1933.826489][T17723] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 1933.851846][ T5929] usb 2-1: USB disconnect, device number 84 [ 1933.873848][T17723] usb 3-1: device descriptor read/8, error -71 [ 1933.992035][T17723] usb usb3-port1: unable to enumerate USB device [ 1934.016698][ T3325] program syz.1.7559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1934.435726][T17723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1934.545730][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1934.545748][ T30] audit: type=1326 audit(1768330156.368:38970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3326 comm="syz.4.7560" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 1935.519390][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1935.563170][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1935.871483][ T1848] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1935.896306][ T30] audit: type=1326 audit(1768330157.628:38971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3343 comm="syz.4.7565" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 1936.243795][ T1848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1936.269550][ T1848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.290964][ T1848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1936.314607][ T1848] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1936.362144][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1936.502047][ T1848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.585326][ T30] audit: type=1326 audit(1768330158.338:38972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3354 comm="syz.0.7566" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1936.619817][T32091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1936.629198][ T1848] usb 2-1: config 0 descriptor?? [ 1937.127792][ T3362] syzkaller0: entered promiscuous mode [ 1937.133421][ T3362] syzkaller0: entered allmulticast mode [ 1937.640551][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.826690][ T3377] loop8: detected capacity change from 0 to 7 [ 1937.843854][T28932] Dev loop8: unable to read RDB block 7 [ 1937.851900][T28932] loop8: unable to read partition table [ 1937.860259][T28932] loop8: partition table beyond EOD, truncated [ 1937.874234][ T3377] Dev loop8: unable to read RDB block 7 [ 1937.885498][ T3377] loop8: unable to read partition table [ 1937.897160][ T3377] loop8: partition table beyond EOD, truncated [ 1937.911331][ T3377] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1937.942986][T28932] Dev loop8: unable to read RDB block 7 [ 1937.958714][T28932] loop8: unable to read partition table [ 1938.006039][T28932] loop8: partition table beyond EOD, truncated [ 1938.029160][ T1848] usbhid 2-1:0.0: can't add hid device: -71 [ 1938.029935][ T3379] Dev loop8: unable to read RDB block 7 [ 1938.050418][ T1848] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1938.073936][ T1848] usb 2-1: USB disconnect, device number 85 [ 1938.133117][ T3379] loop8: unable to read partition table [ 1938.139134][ T3379] loop8: partition table beyond EOD, truncated [ 1938.162001][ T3379] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1938.483628][ T3392] program syz.2.7574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1938.722205][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.767748][ T3403] mac80211_hwsim hwsim84 wlan0: entered promiscuous mode [ 1938.780910][ T3403] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1939.392298][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1939.977918][T32091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1940.212192][ T3433] netlink: 'syz.6.7584': attribute type 3 has an invalid length. [ 1940.561758][T32091] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1940.711738][T32091] usb 2-1: Using ep0 maxpacket: 8 [ 1940.718989][T32091] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1940.727599][T32091] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1940.737852][T32091] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1940.748020][T32091] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1940.759944][T32091] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1940.773632][T32091] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1940.807287][T32091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.001780][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1941.052907][T32091] usb 2-1: GET_CAPABILITIES returned 0 [ 1941.062147][T32091] usbtmc 2-1:16.0: can't read capabilities [ 1941.116315][ T3446] program syz.2.7587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1941.299648][T27362] usb 2-1: USB disconnect, device number 86 [ 1941.578137][ T3452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7590'. [ 1941.589310][ T3453] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7588'. [ 1942.039151][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1942.462087][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.076373][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1944.131100][T27707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.026568][ T3517] netlink: 'syz.4.7606': attribute type 22 has an invalid length. [ 1945.040831][ T3517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7606'. [ 1945.059060][ T3517] bond0: option ad_select: unable to set because the bond device is up [ 1945.076486][ T30] audit: type=1326 audit(1768330166.898:38973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3505 comm="syz.6.7604" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 1945.154454][T17723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.175344][T29798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.481749][T27362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1946.049544][ T3531] FAULT_INJECTION: forcing a failure. [ 1946.049544][ T3531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1946.063700][ T3531] CPU: 0 UID: 0 PID: 3531 Comm: syz.2.7610 Tainted: G L syzkaller #0 PREEMPT(full) [ 1946.063731][ T3531] Tainted: [L]=SOFTLOCKUP [ 1946.063738][ T3531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1946.063749][ T3531] Call Trace: [ 1946.063757][ T3531] [ 1946.063765][ T3531] dump_stack_lvl+0xe8/0x150 [ 1946.063792][ T3531] should_fail_ex+0x414/0x560 [ 1946.063825][ T3531] _copy_from_iter+0x1cd/0x1630 [ 1946.063858][ T3531] ? __pfx__copy_from_iter+0x10/0x10 [ 1946.063880][ T3531] ? __build_skb_around+0x22d/0x3c0 [ 1946.063910][ T3531] ? __alloc_skb+0x198/0x3a0 [ 1946.063930][ T3531] ? netlink_sendmsg+0x642/0xb30 [ 1946.063956][ T3531] ? skb_put+0x11b/0x210 [ 1946.063982][ T3531] netlink_sendmsg+0x6b2/0xb30 [ 1946.064016][ T3531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1946.064045][ T3531] ? __import_iovec+0x5d4/0x7f0 [ 1946.064067][ T3531] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1946.064094][ T3531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1946.064113][ T3531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1946.064139][ T3531] __sock_sendmsg+0x21c/0x270 [ 1946.064169][ T3531] ____sys_sendmsg+0x505/0x820 [ 1946.064198][ T3531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1946.064227][ T3531] ? kstrtouint+0x6e/0xe0 [ 1946.064262][ T3531] ___sys_sendmsg+0x21f/0x2a0 [ 1946.064288][ T3531] ? __pfx____sys_sendmsg+0x10/0x10 [ 1946.064311][ T3531] ? get_pid_task+0x20/0x1f0 [ 1946.064335][ T3531] ? get_pid_task+0x20/0x1f0 [ 1946.064357][ T3531] ? get_pid_task+0x20/0x1f0 [ 1946.064405][ T3531] ? __fget_files+0x2a/0x420 [ 1946.064429][ T3531] ? __fget_files+0x3a0/0x420 [ 1946.064461][ T3531] __sys_sendmsg+0x164/0x220 [ 1946.064487][ T3531] ? __pfx___sys_sendmsg+0x10/0x10 [ 1946.064518][ T3531] ? __pfx_ksys_write+0x10/0x10 [ 1946.064548][ T3531] __do_fast_syscall_32+0x1dc/0x570 [ 1946.064572][ T3531] ? lockdep_hardirqs_on+0x7b/0x110 [ 1946.064591][ T3531] ? do_fast_syscall_32+0x34/0x80 [ 1946.064613][ T3531] ? irqentry_exit+0x10f/0x670 [ 1946.064637][ T3531] do_fast_syscall_32+0x34/0x80 [ 1946.064659][ T3531] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1946.064682][ T3531] RIP: 0023:0xf7f67539 [ 1946.064698][ T3531] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1946.064716][ T3531] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1946.064737][ T3531] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1946.064751][ T3531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1946.064763][ T3531] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1946.064775][ T3531] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1946.064788][ T3531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1946.064814][ T3531] [ 1946.405460][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1946.611762][T27362] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 1946.763622][T27362] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1946.771976][T27362] usb 2-1: config 0 has no interface number 0 [ 1946.778592][T27362] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1946.790379][T27362] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1946.801871][T27362] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1946.810976][T27362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.826268][T27362] usb 2-1: config 0 descriptor?? [ 1946.832599][ T3532] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1946.848998][T27362] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1947.062923][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1947.077403][T27362] usb 2-1: USB disconnect, device number 87 [ 1947.484854][T17723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1947.889517][T32091] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1948.129405][T32091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.142023][T32091] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1948.272281][ T30] audit: type=1326 audit(1768330169.988:38974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3550 comm="syz.1.7616" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0 [ 1948.523768][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1948.531874][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1948.560713][T32091] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1948.690590][T32091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.709250][T32091] usb 3-1: Product: syz [ 1948.719590][T32091] usb 3-1: Manufacturer: syz [ 1948.729465][T32091] usb 3-1: SerialNumber: syz [ 1948.796885][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7617'. [ 1949.489024][ T3582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7626'. [ 1949.498813][ T3582] bridge_slave_1: left allmulticast mode [ 1949.504746][ T3582] bridge_slave_1: left promiscuous mode [ 1949.510485][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.526599][ T3582] bridge_slave_0: left allmulticast mode [ 1949.555944][ T3582] bridge_slave_0: left promiscuous mode [ 1949.559210][T17723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1949.574674][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.899598][ T30] audit: type=1326 audit(1768330171.718:38975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3588 comm="syz.1.7628" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0 [ 1950.548238][T32091] usb 3-1: 0:2 : does not exist [ 1950.561477][T32091] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1950.598098][ T1848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.613302][T32091] usb 3-1: USB disconnect, device number 72 [ 1950.648400][T28932] udevd[28932]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1950.919433][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7630'. [ 1951.979176][ T3604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7631'. [ 1952.067616][ T3598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.075414][ T3598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.827298][ T3598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1953.048004][ T3598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1953.206204][ T3613] syz_tun: entered allmulticast mode [ 1953.214002][ T3613] syz_tun: left allmulticast mode [ 1953.229585][ T3619] syzkaller1: entered promiscuous mode [ 1953.235807][ T3619] syzkaller1: entered allmulticast mode [ 1953.355444][T16346] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.452341][T20925] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.461568][T20925] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.798720][ T3641] netlink: 'syz.0.7636': attribute type 10 has an invalid length. [ 1953.825310][ T3642] FAULT_INJECTION: forcing a failure. [ 1953.825310][ T3642] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.839073][T20925] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.855148][ T3642] CPU: 0 UID: 0 PID: 3642 Comm: syz.2.7639 Tainted: G L syzkaller #0 PREEMPT(full) [ 1953.855176][ T3642] Tainted: [L]=SOFTLOCKUP [ 1953.855184][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1953.855196][ T3642] Call Trace: [ 1953.855204][ T3642] [ 1953.855213][ T3642] dump_stack_lvl+0xe8/0x150 [ 1953.855241][ T3642] should_fail_ex+0x414/0x560 [ 1953.855277][ T3642] should_failslab+0xa8/0x100 [ 1953.855299][ T3642] __kmalloc_cache_noprof+0x84/0x700 [ 1953.855319][ T3642] ? hash_ipportnet_create+0x2fe/0x1040 [ 1953.855347][ T3642] hash_ipportnet_create+0x2fe/0x1040 [ 1953.855375][ T3642] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 1953.855389][ T3642] ip_set_create+0xa9a/0x19c0 [ 1953.855402][ T3642] ? ip_set_create+0x49f/0x19c0 [ 1953.855419][ T3642] ? __pfx_ip_set_create+0x10/0x10 [ 1953.855447][ T3642] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1953.855459][ T3642] ? __lock_acquire+0x6b6/0x2cf0 [ 1953.855469][ T3642] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1953.855490][ T3642] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1953.855513][ T3642] ? __lock_acquire+0x6b6/0x2cf0 [ 1953.855532][ T3642] netlink_rcv_skb+0x208/0x470 [ 1953.855546][ T3642] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1953.855559][ T3642] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1953.855578][ T3642] ? bpf_lsm_capable+0x9/0x20 [ 1953.855590][ T3642] ? security_capable+0x7e/0x2e0 [ 1953.855605][ T3642] nfnetlink_rcv+0x282/0x2590 [ 1953.855618][ T3642] ? is_bpf_text_address+0x26/0x2b0 [ 1953.855636][ T3642] ? __kernel_text_address+0xd/0x40 [ 1953.855651][ T3642] ? unwind_get_return_address+0x4d/0x90 [ 1953.855663][ T3642] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1953.855678][ T3642] ? arch_stack_walk+0xfc/0x150 [ 1953.855694][ T3642] ? __lock_acquire+0x6b6/0x2cf0 [ 1953.855705][ T3642] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1953.855718][ T3642] ? stack_depot_save_flags+0x33/0x810 [ 1953.855729][ T3642] ? __lock_acquire+0x6b6/0x2cf0 [ 1953.855743][ T3642] ? __lock_acquire+0x6b6/0x2cf0 [ 1953.855758][ T3642] ? __netlink_lookup+0xbd/0x8a0 [ 1953.855777][ T3642] ? netlink_deliver_tap+0x2e/0x1b0 [ 1953.855790][ T3642] ? netlink_deliver_tap+0x2e/0x1b0 [ 1953.855806][ T3642] ? netlink_deliver_tap+0x2e/0x1b0 [ 1953.855823][ T3642] netlink_unicast+0x82f/0x9e0 [ 1953.855839][ T3642] ? __pfx_netlink_unicast+0x10/0x10 [ 1953.855852][ T3642] ? __alloc_skb+0x198/0x3a0 [ 1953.855865][ T3642] ? netlink_sendmsg+0x642/0xb30 [ 1953.855877][ T3642] ? skb_put+0x11b/0x210 [ 1953.855889][ T3642] netlink_sendmsg+0x805/0xb30 [ 1953.855907][ T3642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1953.855921][ T3642] ? __import_iovec+0x5d4/0x7f0 [ 1953.855933][ T3642] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1953.855947][ T3642] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1953.855957][ T3642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1953.855970][ T3642] __sock_sendmsg+0x21c/0x270 [ 1953.855987][ T3642] ____sys_sendmsg+0x505/0x820 [ 1953.856002][ T3642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1953.856017][ T3642] ? kstrtouint+0x6e/0xe0 [ 1953.856036][ T3642] ___sys_sendmsg+0x21f/0x2a0 [ 1953.856049][ T3642] ? __pfx____sys_sendmsg+0x10/0x10 [ 1953.856061][ T3642] ? get_pid_task+0x20/0x1f0 [ 1953.856073][ T3642] ? get_pid_task+0x20/0x1f0 [ 1953.856084][ T3642] ? get_pid_task+0x20/0x1f0 [ 1953.856117][ T3642] ? __fget_files+0x2a/0x420 [ 1953.856130][ T3642] ? __fget_files+0x3a0/0x420 [ 1953.856147][ T3642] __sys_sendmsg+0x164/0x220 [ 1953.856161][ T3642] ? __pfx___sys_sendmsg+0x10/0x10 [ 1953.856177][ T3642] ? __pfx_ksys_write+0x10/0x10 [ 1953.856193][ T3642] __do_fast_syscall_32+0x1dc/0x570 [ 1953.856205][ T3642] ? lockdep_hardirqs_on+0x7b/0x110 [ 1953.856215][ T3642] ? do_fast_syscall_32+0x34/0x80 [ 1953.856227][ T3642] ? irqentry_exit+0x10f/0x670 [ 1953.856239][ T3642] do_fast_syscall_32+0x34/0x80 [ 1953.856251][ T3642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1953.856263][ T3642] RIP: 0023:0xf7f67539 [ 1953.856273][ T3642] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1953.856283][ T3642] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1953.856295][ T3642] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1953.856303][ T3642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1953.856310][ T3642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1953.856316][ T3642] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1953.856322][ T3642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1953.856337][ T3642] [ 1954.785564][ T3660] [ 1954.787932][ T3660] ===================================================== [ 1954.794874][ T3660] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1954.802336][ T3660] syzkaller #0 Tainted: G L [ 1954.808299][ T3660] ----------------------------------------------------- [ 1954.815214][ T3660] syz.1.7646/3660 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1954.822831][ T3660] ffff88804f983be8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1954.831532][ T3660] [ 1954.831532][ T3660] and this task is already holding: [ 1954.838880][ T3660] ffff888098cf3028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1954.848616][ T3660] which would create a new lock dependency: [ 1954.854487][ T3660] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1954.862574][ T3660] [ 1954.862574][ T3660] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1954.872004][ T3660] (&dev->event_lock#2){..-.}-{3:3} [ 1954.872034][ T3660] [ 1954.872034][ T3660] ... which became SOFTIRQ-irq-safe at: [ 1954.884902][ T3660] lock_acquire+0x107/0x340 [ 1954.889480][ T3660] _raw_spin_lock_irqsave+0x40/0x60 [ 1954.894774][ T3660] input_inject_event+0xa5/0x340 [ 1954.899795][ T3660] kd_sound_helper+0x19f/0x210 [ 1954.904639][ T3660] input_handler_for_each_handle+0x101/0x1c0 [ 1954.910690][ T3660] call_timer_fn+0x16e/0x590 [ 1954.915355][ T3660] __run_timer_base+0x61a/0x860 [ 1954.920277][ T3660] run_timer_softirq+0xb7/0x180 [ 1954.925198][ T3660] handle_softirqs+0x22b/0x7c0 [ 1954.930034][ T3660] do_softirq+0x76/0xd0 [ 1954.934263][ T3660] __local_bh_enable_ip+0xf8/0x130 [ 1954.939446][ T3660] dev_deactivate_many+0x720/0xd40 [ 1954.944639][ T3660] __dev_close_many+0x152/0x6b0 [ 1954.949562][ T3660] netif_close_many+0x225/0x410 [ 1954.954482][ T3660] unregister_netdevice_many_notify+0xb50/0x2340 [ 1954.960891][ T3660] unregister_netdevice_queue+0x317/0x350 [ 1954.966686][ T3660] __tun_detach+0x6d9/0x15d0 [ 1954.971359][ T3660] tun_chr_close+0x10a/0x1c0 [ 1954.976025][ T3660] __fput+0x44c/0xa70 [ 1954.980085][ T3660] task_work_run+0x1d4/0x260 [ 1954.984752][ T3660] exit_to_user_mode_loop+0xef/0x4e0 [ 1954.990113][ T3660] __do_fast_syscall_32+0x398/0x570 [ 1954.995389][ T3660] do_fast_syscall_32+0x34/0x80 [ 1955.000317][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1955.006720][ T3660] [ 1955.006720][ T3660] to a SOFTIRQ-irq-unsafe lock: [ 1955.013722][ T3660] (tasklist_lock){.+.+}-{3:3} [ 1955.013747][ T3660] [ 1955.013747][ T3660] ... which became SOFTIRQ-irq-unsafe at: [ 1955.026438][ T3660] ... [ 1955.026445][ T3660] lock_acquire+0x107/0x340 [ 1955.033579][ T3660] _raw_read_lock+0x36/0x50 [ 1955.038153][ T3660] __do_wait+0xde/0x740 [ 1955.042388][ T3660] do_wait+0x1e8/0x4f0 [ 1955.046537][ T3660] kernel_wait+0xab/0x170 [ 1955.050944][ T3660] call_usermodehelper_exec_work+0xbe/0x230 [ 1955.056915][ T3660] process_scheduled_works+0xad1/0x1770 [ 1955.062532][ T3660] worker_thread+0x8a0/0xda0 [ 1955.067193][ T3660] kthread+0x711/0x8a0 [ 1955.071336][ T3660] ret_from_fork+0x510/0xa50 [ 1955.075995][ T3660] ret_from_fork_asm+0x1a/0x30 [ 1955.080837][ T3660] [ 1955.080837][ T3660] other info that might help us debug this: [ 1955.080837][ T3660] [ 1955.091045][ T3660] Chain exists of: [ 1955.091045][ T3660] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1955.091045][ T3660] [ 1955.104601][ T3660] Possible interrupt unsafe locking scenario: [ 1955.104601][ T3660] [ 1955.112906][ T3660] CPU0 CPU1 [ 1955.118254][ T3660] ---- ---- [ 1955.123601][ T3660] lock(tasklist_lock); [ 1955.127831][ T3660] local_irq_disable(); [ 1955.134567][ T3660] lock(&dev->event_lock#2); [ 1955.141755][ T3660] lock(&client->buffer_lock); [ 1955.149114][ T3660] [ 1955.152549][ T3660] lock(&dev->event_lock#2); [ 1955.157393][ T3660] [ 1955.157393][ T3660] *** DEADLOCK *** [ 1955.157393][ T3660] [ 1955.165517][ T3660] 7 locks held by syz.1.7646/3660: [ 1955.170610][ T3660] #0: ffff88823be78918 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1955.179740][ T3660] #1: ffff88801c35b230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1955.189835][ T3660] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1955.199489][ T3660] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1955.209051][ T3660] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1955.218180][ T3660] #5: ffff888098cf3028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1955.228349][ T3660] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1955.237396][ T3660] [ 1955.237396][ T3660] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1955.247780][ T3660] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1955.253429][ T3660] IN-SOFTIRQ-W at: [ 1955.257479][ T3660] lock_acquire+0x107/0x340 [ 1955.263790][ T3660] _raw_spin_lock_irqsave+0x40/0x60 [ 1955.270804][ T3660] input_inject_event+0xa5/0x340 [ 1955.277556][ T3660] kd_sound_helper+0x19f/0x210 [ 1955.284138][ T3660] input_handler_for_each_handle+0x101/0x1c0 [ 1955.292034][ T3660] call_timer_fn+0x16e/0x590 [ 1955.298437][ T3660] __run_timer_base+0x61a/0x860 [ 1955.305098][ T3660] run_timer_softirq+0xb7/0x180 [ 1955.311761][ T3660] handle_softirqs+0x22b/0x7c0 [ 1955.318337][ T3660] do_softirq+0x76/0xd0 [ 1955.324300][ T3660] __local_bh_enable_ip+0xf8/0x130 [ 1955.331219][ T3660] dev_deactivate_many+0x720/0xd40 [ 1955.338147][ T3660] __dev_close_many+0x152/0x6b0 [ 1955.344810][ T3660] netif_close_many+0x225/0x410 [ 1955.351468][ T3660] unregister_netdevice_many_notify+0xb50/0x2340 [ 1955.359611][ T3660] unregister_netdevice_queue+0x317/0x350 [ 1955.367231][ T3660] __tun_detach+0x6d9/0x15d0 [ 1955.373637][ T3660] tun_chr_close+0x10a/0x1c0 [ 1955.380038][ T3660] __fput+0x44c/0xa70 [ 1955.385837][ T3660] task_work_run+0x1d4/0x260 [ 1955.392245][ T3660] exit_to_user_mode_loop+0xef/0x4e0 [ 1955.399350][ T3660] __do_fast_syscall_32+0x398/0x570 [ 1955.406366][ T3660] do_fast_syscall_32+0x34/0x80 [ 1955.413037][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1955.421177][ T3660] INITIAL USE at: [ 1955.425147][ T3660] lock_acquire+0x107/0x340 [ 1955.431370][ T3660] _raw_spin_lock_irqsave+0x40/0x60 [ 1955.438297][ T3660] input_inject_event+0xa5/0x340 [ 1955.444964][ T3660] kbd_led_trigger_activate+0xbc/0x100 [ 1955.452150][ T3660] led_trigger_set+0x52d/0x950 [ 1955.458648][ T3660] led_trigger_set_default+0x260/0x2a0 [ 1955.465841][ T3660] led_classdev_register_ext+0x73d/0x960 [ 1955.473199][ T3660] input_leds_connect+0x517/0x790 [ 1955.479959][ T3660] input_register_device+0xd00/0x1170 [ 1955.487066][ T3660] atkbd_connect+0x73b/0xa50 [ 1955.493382][ T3660] serio_driver_probe+0x82/0xd0 [ 1955.499957][ T3660] really_probe+0x26d/0xad0 [ 1955.506198][ T3660] __driver_probe_device+0x18c/0x320 [ 1955.513210][ T3660] driver_probe_device+0x4f/0x240 [ 1955.519963][ T3660] __driver_attach+0x349/0x650 [ 1955.526459][ T3660] bus_for_each_dev+0x233/0x2b0 [ 1955.533039][ T3660] serio_handle_event+0x1f9/0x8d0 [ 1955.539791][ T3660] process_scheduled_works+0xad1/0x1770 [ 1955.547062][ T3660] worker_thread+0x8a0/0xda0 [ 1955.553378][ T3660] kthread+0x711/0x8a0 [ 1955.559175][ T3660] ret_from_fork+0x510/0xa50 [ 1955.565488][ T3660] ret_from_fork_asm+0x1a/0x30 [ 1955.571984][ T3660] } [ 1955.574553][ T3660] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 1955.583654][ T3660] -> (&client->buffer_lock){....}-{3:3} { [ 1955.589377][ T3660] INITIAL USE at: [ 1955.593256][ T3660] lock_acquire+0x107/0x340 [ 1955.599311][ T3660] _raw_spin_lock_irqsave+0x40/0x60 [ 1955.606068][ T3660] evdev_ioctl_handler+0x1095/0x1f10 [ 1955.612911][ T3660] __ia32_compat_sys_ioctl+0x543/0x840 [ 1955.619919][ T3660] __do_fast_syscall_32+0x1dc/0x570 [ 1955.626669][ T3660] do_fast_syscall_32+0x34/0x80 [ 1955.633070][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1955.640950][ T3660] } [ 1955.643434][ T3660] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 1955.651576][ T3660] ... acquired at: [ 1955.655362][ T3660] _raw_spin_lock+0x2e/0x40 [ 1955.660031][ T3660] evdev_pass_values+0xb9/0xbd0 [ 1955.665041][ T3660] evdev_events+0x1e6/0x340 [ 1955.669703][ T3660] input_pass_values+0x288/0x890 [ 1955.674827][ T3660] input_event_dispose+0x330/0x6b0 [ 1955.680104][ T3660] input_inject_event+0x1dd/0x340 [ 1955.685292][ T3660] evdev_write+0x2fc/0x480 [ 1955.689869][ T3660] vfs_write+0x27e/0xb30 [ 1955.694272][ T3660] ksys_write+0x145/0x250 [ 1955.698762][ T3660] __do_fast_syscall_32+0x1dc/0x570 [ 1955.704123][ T3660] do_fast_syscall_32+0x34/0x80 [ 1955.709135][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1955.715630][ T3660] [ 1955.717939][ T3660] [ 1955.717939][ T3660] the dependencies between the lock to be acquired [ 1955.717949][ T3660] and SOFTIRQ-irq-unsafe lock: [ 1955.731498][ T3660] -> (tasklist_lock){.+.+}-{3:3} { [ 1955.736806][ T3660] HARDIRQ-ON-R at: [ 1955.740948][ T3660] lock_acquire+0x107/0x340 [ 1955.747439][ T3660] _raw_read_lock+0x36/0x50 [ 1955.753925][ T3660] __do_wait+0xde/0x740 [ 1955.760074][ T3660] do_wait+0x1e8/0x4f0 [ 1955.766130][ T3660] kernel_wait+0xab/0x170 [ 1955.772456][ T3660] call_usermodehelper_exec_work+0xbe/0x230 [ 1955.780333][ T3660] process_scheduled_works+0xad1/0x1770 [ 1955.787862][ T3660] worker_thread+0x8a0/0xda0 [ 1955.794437][ T3660] kthread+0x711/0x8a0 [ 1955.800490][ T3660] ret_from_fork+0x510/0xa50 [ 1955.807071][ T3660] ret_from_fork_asm+0x1a/0x30 [ 1955.813826][ T3660] SOFTIRQ-ON-R at: [ 1955.817973][ T3660] lock_acquire+0x107/0x340 [ 1955.824460][ T3660] _raw_read_lock+0x36/0x50 [ 1955.830947][ T3660] __do_wait+0xde/0x740 [ 1955.837098][ T3660] do_wait+0x1e8/0x4f0 [ 1955.843154][ T3660] kernel_wait+0xab/0x170 [ 1955.849470][ T3660] call_usermodehelper_exec_work+0xbe/0x230 [ 1955.857345][ T3660] process_scheduled_works+0xad1/0x1770 [ 1955.864875][ T3660] worker_thread+0x8a0/0xda0 [ 1955.871446][ T3660] kthread+0x711/0x8a0 [ 1955.877500][ T3660] ret_from_fork+0x510/0xa50 [ 1955.884072][ T3660] ret_from_fork_asm+0x1a/0x30 [ 1955.890822][ T3660] INITIAL USE at: [ 1955.894874][ T3660] lock_acquire+0x107/0x340 [ 1955.901271][ T3660] _raw_write_lock_irq+0x3d/0x50 [ 1955.908104][ T3660] copy_process+0x2185/0x3950 [ 1955.914677][ T3660] kernel_clone+0x21e/0x820 [ 1955.921080][ T3660] user_mode_thread+0xdd/0x140 [ 1955.927743][ T3660] rest_init+0x23/0x300 [ 1955.933798][ T3660] start_kernel+0x381/0x3d0 [ 1955.940197][ T3660] x86_64_start_reservations+0x24/0x30 [ 1955.947555][ T3660] x86_64_start_kernel+0x143/0x1c0 [ 1955.954566][ T3660] common_startup_64+0x13e/0x147 [ 1955.961405][ T3660] INITIAL READ USE at: [ 1955.965892][ T3660] lock_acquire+0x107/0x340 [ 1955.972724][ T3660] _raw_read_lock+0x36/0x50 [ 1955.979555][ T3660] __do_wait+0xde/0x740 [ 1955.986045][ T3660] do_wait+0x1e8/0x4f0 [ 1955.992446][ T3660] kernel_wait+0xab/0x170 [ 1955.999109][ T3660] call_usermodehelper_exec_work+0xbe/0x230 [ 1956.007331][ T3660] process_scheduled_works+0xad1/0x1770 [ 1956.015205][ T3660] worker_thread+0x8a0/0xda0 [ 1956.022126][ T3660] kthread+0x711/0x8a0 [ 1956.028529][ T3660] ret_from_fork+0x510/0xa50 [ 1956.035448][ T3660] ret_from_fork_asm+0x1a/0x30 [ 1956.042546][ T3660] } [ 1956.045202][ T3660] ... key at: [] tasklist_lock+0x18/0x40 [ 1956.053079][ T3660] ... acquired at: [ 1956.057038][ T3660] _raw_read_lock+0x36/0x50 [ 1956.061701][ T3660] send_sigurg+0x12b/0x420 [ 1956.066287][ T3660] sk_send_sigurg+0x6c/0x2e0 [ 1956.071050][ T3660] queue_oob+0x420/0x4f0 [ 1956.075451][ T3660] unix_stream_sendmsg+0xc32/0xde0 [ 1956.080722][ T3660] __sock_sendmsg+0x21c/0x270 [ 1956.085564][ T3660] ____sys_sendmsg+0x52d/0x820 [ 1956.090488][ T3660] ___sys_sendmsg+0x21f/0x2a0 [ 1956.095328][ T3660] __sys_sendmmsg+0x28e/0x430 [ 1956.100165][ T3660] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1956.105881][ T3660] __do_fast_syscall_32+0x1dc/0x570 [ 1956.111244][ T3660] do_fast_syscall_32+0x34/0x80 [ 1956.116255][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.122746][ T3660] [ 1956.125058][ T3660] -> (&f_owner->lock){....}-{3:3} { [ 1956.130346][ T3660] INITIAL USE at: [ 1956.134312][ T3660] lock_acquire+0x107/0x340 [ 1956.140542][ T3660] _raw_write_lock_irq+0x3d/0x50 [ 1956.147201][ T3660] __f_setown+0x67/0x370 [ 1956.153174][ T3660] tty_fasync+0x2dc/0x350 [ 1956.159230][ T3660] do_fcntl+0x11d2/0x1a50 [ 1956.165286][ T3660] do_compat_fcntl64+0x477/0x720 [ 1956.171952][ T3660] __do_fast_syscall_32+0x1dc/0x570 [ 1956.178873][ T3660] do_fast_syscall_32+0x34/0x80 [ 1956.185447][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.193499][ T3660] INITIAL READ USE at: [ 1956.197900][ T3660] lock_acquire+0x107/0x340 [ 1956.204565][ T3660] _raw_read_lock_irqsave+0x48/0x60 [ 1956.211924][ T3660] send_sigio+0x38/0x370 [ 1956.218328][ T3660] kill_fasync+0x24d/0x4d0 [ 1956.224918][ T3660] lease_break_callback+0x26/0x30 [ 1956.232104][ T3660] __break_lease+0x6e3/0x1490 [ 1956.238937][ T3660] do_dentry_open+0x73a/0x1420 [ 1956.245860][ T3660] vfs_open+0x3b/0x340 [ 1956.252089][ T3660] dentry_open+0x61/0xa0 [ 1956.258490][ T3660] do_mq_open+0x638/0x780 [ 1956.264973][ T3660] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 1956.272762][ T3660] __do_fast_syscall_32+0x1dc/0x570 [ 1956.280128][ T3660] do_fast_syscall_32+0x34/0x80 [ 1956.287136][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.295635][ T3660] } [ 1956.298205][ T3660] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1956.307127][ T3660] ... acquired at: [ 1956.310999][ T3660] _raw_read_lock_irqsave+0x48/0x60 [ 1956.316356][ T3660] send_sigio+0x38/0x370 [ 1956.320762][ T3660] kill_fasync+0x24d/0x4d0 [ 1956.325345][ T3660] lease_break_callback+0x26/0x30 [ 1956.330537][ T3660] __break_lease+0x6e3/0x1490 [ 1956.335376][ T3660] do_dentry_open+0x73a/0x1420 [ 1956.340305][ T3660] vfs_open+0x3b/0x340 [ 1956.344538][ T3660] dentry_open+0x61/0xa0 [ 1956.348944][ T3660] do_mq_open+0x638/0x780 [ 1956.353433][ T3660] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 1956.359223][ T3660] __do_fast_syscall_32+0x1dc/0x570 [ 1956.364580][ T3660] do_fast_syscall_32+0x34/0x80 [ 1956.369591][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.376080][ T3660] [ 1956.378388][ T3660] -> (&new->fa_lock){....}-{3:3} { [ 1956.383502][ T3660] INITIAL USE at: [ 1956.387381][ T3660] lock_acquire+0x107/0x340 [ 1956.393442][ T3660] _raw_write_lock_irq+0x3d/0x50 [ 1956.399930][ T3660] fasync_remove_entry+0xf1/0x1c0 [ 1956.406508][ T3660] tty_fasync+0x13c/0x350 [ 1956.412388][ T3660] __fput+0x8a2/0xa70 [ 1956.417922][ T3660] task_work_run+0x1d4/0x260 [ 1956.424068][ T3660] exit_to_user_mode_loop+0xef/0x4e0 [ 1956.430914][ T3660] __do_fast_syscall_32+0x398/0x570 [ 1956.437663][ T3660] do_fast_syscall_32+0x34/0x80 [ 1956.444064][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.451942][ T3660] INITIAL READ USE at: [ 1956.456256][ T3660] lock_acquire+0x107/0x340 [ 1956.462744][ T3660] _raw_read_lock_irqsave+0x48/0x60 [ 1956.469922][ T3660] kill_fasync+0x199/0x4d0 [ 1956.476328][ T3660] sock_wake_async+0x137/0x160 [ 1956.483074][ T3660] sctp_data_ready+0x3c1/0x530 [ 1956.489819][ T3660] sctp_ulpq_tail_event+0x809/0xb70 [ 1956.497005][ T3660] do_ulpq_tail_event+0x109/0x160 [ 1956.504015][ T3660] sctp_datamsg_put+0x3ec/0x540 [ 1956.510852][ T3660] sctp_chunk_free+0x4a/0x60 [ 1956.517432][ T3660] __sctp_outq_teardown+0x7ab/0x9a0 [ 1956.524618][ T3660] sctp_association_free+0x240/0x7f0 [ 1956.531894][ T3660] sctp_do_sm+0x3efe/0x5c40 [ 1956.538396][ T3660] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 1956.545668][ T3660] inet_shutdown+0x271/0x390 [ 1956.552250][ T3660] __ia32_sys_shutdown+0x13f/0x1a0 [ 1956.559350][ T3660] __do_fast_syscall_32+0x1dc/0x570 [ 1956.566533][ T3660] do_fast_syscall_32+0x34/0x80 [ 1956.573369][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.581682][ T3660] } [ 1956.584164][ T3660] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1956.592823][ T3660] ... acquired at: [ 1956.596611][ T3660] _raw_read_lock_irqsave+0x48/0x60 [ 1956.601970][ T3660] kill_fasync+0x199/0x4d0 [ 1956.606555][ T3660] evdev_pass_values+0x627/0xbd0 [ 1956.611653][ T3660] evdev_events+0x1e6/0x340 [ 1956.616316][ T3660] input_pass_values+0x288/0x890 [ 1956.621408][ T3660] input_event_dispose+0x330/0x6b0 [ 1956.626686][ T3660] input_inject_event+0x1dd/0x340 [ 1956.631882][ T3660] evdev_write+0x2fc/0x480 [ 1956.636470][ T3660] vfs_write+0x27e/0xb30 [ 1956.640870][ T3660] ksys_write+0x145/0x250 [ 1956.645362][ T3660] __do_fast_syscall_32+0x1dc/0x570 [ 1956.650722][ T3660] do_fast_syscall_32+0x34/0x80 [ 1956.655732][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.662221][ T3660] [ 1956.664528][ T3660] [ 1956.664528][ T3660] stack backtrace: [ 1956.670402][ T3660] CPU: 0 UID: 0 PID: 3660 Comm: syz.1.7646 Tainted: G L syzkaller #0 PREEMPT(full) [ 1956.670425][ T3660] Tainted: [L]=SOFTLOCKUP [ 1956.670432][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1956.670443][ T3660] Call Trace: [ 1956.670450][ T3660] [ 1956.670457][ T3660] dump_stack_lvl+0xe8/0x150 [ 1956.670478][ T3660] __lock_acquire+0x2a95/0x2cf0 [ 1956.670503][ T3660] ? kill_fasync+0x199/0x4d0 [ 1956.670525][ T3660] lock_acquire+0x107/0x340 [ 1956.670540][ T3660] ? kill_fasync+0x199/0x4d0 [ 1956.670565][ T3660] ? do_raw_spin_lock+0x121/0x290 [ 1956.670586][ T3660] ? evdev_pass_values+0xb9/0xbd0 [ 1956.670605][ T3660] _raw_read_lock_irqsave+0x48/0x60 [ 1956.670621][ T3660] ? kill_fasync+0x199/0x4d0 [ 1956.670644][ T3660] kill_fasync+0x199/0x4d0 [ 1956.670667][ T3660] ? kill_fasync+0x53/0x4d0 [ 1956.670691][ T3660] evdev_pass_values+0x627/0xbd0 [ 1956.670714][ T3660] ? evdev_pass_values+0x641/0xbd0 [ 1956.670733][ T3660] evdev_events+0x1e6/0x340 [ 1956.670749][ T3660] ? evdev_events+0x79/0x340 [ 1956.670765][ T3660] ? input_pass_values+0x8d/0x890 [ 1956.670781][ T3660] input_pass_values+0x288/0x890 [ 1956.670798][ T3660] ? input_handle_event+0x70c/0xf30 [ 1956.670821][ T3660] input_event_dispose+0x330/0x6b0 [ 1956.670845][ T3660] input_inject_event+0x1dd/0x340 [ 1956.670868][ T3660] ? input_inject_event+0xb6/0x340 [ 1956.670894][ T3660] evdev_write+0x2fc/0x480 [ 1956.670913][ T3660] ? __pfx_evdev_write+0x10/0x10 [ 1956.670931][ T3660] ? bpf_lsm_file_permission+0x9/0x20 [ 1956.670949][ T3660] ? security_file_permission+0x75/0x290 [ 1956.670966][ T3660] ? rw_verify_area+0x255/0x4d0 [ 1956.670991][ T3660] ? __pfx_evdev_write+0x10/0x10 [ 1956.671008][ T3660] vfs_write+0x27e/0xb30 [ 1956.671026][ T3660] ? __pfx_vfs_write+0x10/0x10 [ 1956.671041][ T3660] ? __fget_files+0x2a/0x420 [ 1956.671062][ T3660] ? __fget_files+0x2a/0x420 [ 1956.671081][ T3660] ? __fget_files+0x3a0/0x420 [ 1956.671100][ T3660] ? __fget_files+0x2a/0x420 [ 1956.671123][ T3660] ksys_write+0x145/0x250 [ 1956.671139][ T3660] ? __pfx_ksys_write+0x10/0x10 [ 1956.671157][ T3660] __do_fast_syscall_32+0x1dc/0x570 [ 1956.671176][ T3660] ? lockdep_hardirqs_on+0x7b/0x110 [ 1956.671193][ T3660] ? do_fast_syscall_32+0x34/0x80 [ 1956.671211][ T3660] ? irqentry_exit+0x10f/0x670 [ 1956.671228][ T3660] do_fast_syscall_32+0x34/0x80 [ 1956.671247][ T3660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.671267][ T3660] RIP: 0023:0xf704d539 [ 1956.671281][ T3660] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1956.671297][ T3660] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1956.671314][ T3660] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 1956.671326][ T3660] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 1956.671337][ T3660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1956.671348][ T3660] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1956.671358][ T3660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1956.671374][ T3660] [ 1957.124323][ T3665] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.