last executing test programs: 19m13.703517818s ago: executing program 0 (id=3806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0x6, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x5, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0xffff, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0x7, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0xffffffff, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 19m13.466712777s ago: executing program 0 (id=3808): syz_ublk_setup_io_uring(0xd, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0x97b2, 0x1000, 0x2, 0x2b6}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x80002) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, 0x0, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x180) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a45322, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) write$binfmt_misc(r8, &(0x7f0000000740), 0xff67) sendfile(r7, r8, &(0x7f0000000040), 0xffff) 19m10.394063974s ago: executing program 0 (id=3820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000580)='io.pressure\x00', 0x2, 0x0) read(r5, &(0x7f0000000140)=""/247, 0xf7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x34, r3, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x40, 0x7, 0x22, "239e9a77e436f288ba0275f9c295621fd42dfca15187b435fd8614ef46f1cf58e492"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$uac3(r8, 0x0, 0x0) bind$packet(r7, &(0x7f0000000440)={0x11, 0x300, r6, 0x0}, 0x14) write(r7, &(0x7f0000000480)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r9 = io_uring_setup(0x5412, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m8.205217164s ago: executing program 0 (id=3827): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket(0x8000000010, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000008f1100000300160022bf000001"], 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x42403) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0xfd}], 0x1}}], 0x1, 0x0) 19m7.947563374s ago: executing program 0 (id=3829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000580)='io.pressure\x00', 0x2, 0x0) read(r5, &(0x7f0000000140)=""/247, 0xf7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x34, r3, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x40, 0x7, 0x22, "239e9a77e436f288ba0275f9c295621fd42dfca15187b435fd8614ef46f1cf58e492"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$uac3(r8, 0x0, 0x0) bind$packet(r7, &(0x7f0000000440)={0x11, 0x300, r6, 0x0}, 0x14) write(r7, &(0x7f0000000480)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r9 = io_uring_setup(0x5412, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m6.581646069s ago: executing program 0 (id=3836): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[{0x348, 0x10c, 0xa, "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"}], 0x348}, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x1, 0x3}, 0x18, 0x1) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x8, 0x0, 0x2000000097, 0x10, 0x0, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19m5.678775906s ago: executing program 32 (id=3836): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[{0x348, 0x10c, 0xa, "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"}], 0x348}, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x1, 0x3}, 0x18, 0x1) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x8, 0x0, 0x2000000097, 0x10, 0x0, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15m50.217501264s ago: executing program 2 (id=4721): sendmmsg$unix(0xffffffffffffffff, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x10}}], 0x10, 0x20000000}}], 0x1, 0x4018080) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 15m50.136242113s ago: executing program 2 (id=4722): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f00000001c0)="d5", 0xfffffedf) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0x1, 0x9, 0x5, 0x1, 0x32, 'fG\x00', 0x7f, 0x2}) 15m49.864885603s ago: executing program 2 (id=4724): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [], [0xfffffffffffffffc, 0x0, 0x8]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161e42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r1}, 0x68) 15m49.693356751s ago: executing program 2 (id=4725): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000200)='\x00', 0x89901) move_mount(r1, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0x0) 15m49.498878665s ago: executing program 2 (id=4726): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82040) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='exe'], 0x2a) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/122) 15m49.151802144s ago: executing program 2 (id=4729): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/19, 0x13}], 0x1}, 0xf1a2}, {{0x0, 0x0, 0x0}, 0x10001}], 0x2, 0x0, 0x0) 15m48.535689947s ago: executing program 33 (id=4729): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/19, 0x13}], 0x1}, 0xf1a2}, {{0x0, 0x0, 0x0}, 0x10001}], 0x2, 0x0, 0x0) 5m16.943236388s ago: executing program 6 (id=7337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x9}, 0x0, 0x5, 0xff, {0x8, 0x7}, 0x6, 0x6eef}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000500)={0x0, 0x2, {0x0, 0x0, 0x3}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5be1, 0x8, {{0x5, 0x4, 0x1, 0x2e, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x640100ff}}}}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) process_vm_readv(r6, &(0x7f0000002c40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2, &(0x7f0000002d80)=[{&(0x7f0000002c80)=""/242, 0xf2}], 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5800000010003b0c00000000ffdbdf2542080000", @ANYRES32=0x0, @ANYBLOB="0010000000000000380012800b00010065727370616e0000280002800400120005001600020000000600030081000000050013000100000006000e00000000"], 0x58}}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = syz_io_uring_setup(0x744e, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) 5m14.943547297s ago: executing program 6 (id=7340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000005c0)="d4c44034", 0x4}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) r12 = dup(r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 5m9.128530144s ago: executing program 6 (id=7345): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000005c0)="d4c44034", 0x4}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) dup(r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5m6.492836619s ago: executing program 6 (id=7347): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000005c0)="d4c44034", 0x4}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) dup(r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5m4.631002176s ago: executing program 6 (id=7349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000580)='io.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000140)=""/247, 0xf7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x34, r3, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x40, 0x7, 0x22, "239e9a77e436f288ba0275f9c295621fd42dfca15187b435fd8614ef46f1cf58e492"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$uac3(r9, 0x0, 0x0) bind$packet(r8, &(0x7f0000000440)={0x11, 0x300, r7, 0x0}, 0x14) write(r8, &(0x7f0000000480)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r10 = io_uring_setup(0x5412, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m59.525628478s ago: executing program 6 (id=7355): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3ff}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0xa4}}, 0x4000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d4}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {}, {}, 0x4, 0x6e6bbf}, 0xfffffffe}}, 0x128}}, 0x20004040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000020100000001000000000000000000000500010007000000090002007352d14e49c0a12e70835e199d7e797a310000007000050010000a0000000500040f018047520133338bbcd89e8a6781e9d4f4a3105aae99f0a00000000095f7cc10939208d100000000000023e8f91788459449ad5bb3889ae7993f68881a5cd1e05ee8b61ffb97632df5bfe6e72140a2fb3474b71c10e1c409b8b7ae7f2b6811b88768e4d53dec1eaa27f98aa9a5030d6fbf1db136b5f426ed9f69e01fd686fcb4f8c3ee3230f7dbd8e483d3dfd9322b6fdcba1384a0772bf626faa21417669834fc3376519540dcc80a3fe3a50c000074c4076a10979ee14b32eb7f6be3b9808c9a233100902ff574c7eb1071709c1c7676a47b416d29fa25044599153078e3a5b0bd8607b6267df410d108a9654aafb267ae663f210e"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 4m44.027946226s ago: executing program 34 (id=7355): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3ff}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0xa4}}, 0x4000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d4}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {}, {}, 0x4, 0x6e6bbf}, 0xfffffffe}}, 0x128}}, 0x20004040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000020100000001000000000000000000000500010007000000090002007352d14e49c0a12e70835e199d7e797a310000007000050010000a0000000500040f018047520133338bbcd89e8a6781e9d4f4a3105aae99f0a00000000095f7cc10939208d100000000000023e8f91788459449ad5bb3889ae7993f68881a5cd1e05ee8b61ffb97632df5bfe6e72140a2fb3474b71c10e1c409b8b7ae7f2b6811b88768e4d53dec1eaa27f98aa9a5030d6fbf1db136b5f426ed9f69e01fd686fcb4f8c3ee3230f7dbd8e483d3dfd9322b6fdcba1384a0772bf626faa21417669834fc3376519540dcc80a3fe3a50c000074c4076a10979ee14b32eb7f6be3b9808c9a233100902ff574c7eb1071709c1c7676a47b416d29fa25044599153078e3a5b0bd8607b6267df410d108a9654aafb267ae663f210e"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23.49425704s ago: executing program 3 (id=7754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) writev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f00000005c0)="d4c44034", 0x4}], 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r3, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r8 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) r11 = dup(r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 19.045314344s ago: executing program 3 (id=7758): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}], 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) r12 = dup(r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 18.671176629s ago: executing program 4 (id=7761): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x200480c0}, 0x80) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x9, 0x58, 0xb8, 0x10, 0x1410, 0x7004, 0x6a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xe8, 0x5d, 0x2, 0x42, 0x10, 0xab, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f00000000c0)=0x80000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r4, 0x0, 0x0) write(r3, &(0x7f00000000c0)='48M', 0x3) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000180)) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003001e030500e1000c0400070080000300", 0x33a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x94) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000100)) r5 = socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x421, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x904}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x3c}}, 0x24000840) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) 17.106498881s ago: executing program 3 (id=7764): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) madvise(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x16) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x2, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x84, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x7, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)=ANY=[@ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1613fe073caa732c00"], 0x1, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000043c0)={0x50, 0x0, r7, {0x7, 0x2b, 0x6, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000023c0)="7183c1654c792752d2252c111505954b0b2d4062f31328bea54f310d5dcf627fa7f8f45e484f7bbd0c20f5de909f0c29f7418403b0a343182340147475653be9aec286f773355d274454a71a5eb1afafccb166cd4b995af5b23ea89439fd58f9d4b07fac9ffde1c16f9ec644e02386c4c879fb7495d65b6cd2bda928253538ab5c7061572b7be5483b6fa86968358b4b537fa0b95fc63d8631b1084611daee62ad3bcd2cb9f53a59416985d77f219e29f289a45fbb1ae3ebb4e046d6a9633ec25ea3156f36effa0491e125047e7948e3f889f713abc9474f577d84e8cafe011ee3eec12b43270d728146e2ff22d74bdb0694e93b7f977fa1952ab5b9a69cde45ec4d22047e785794c827c42173a26930b088520677246ac55b5bac5574325eb6aa71b5f67e151efab73f7582588be5eede94b20c257eec7cffb6d6c898f2a525ab0fe9fd0a1fa480137eae2905a932e175ffbba70f1dc7cde443abcfdc2e1fc12b1bf444e65b802eb4859b62a06ff813611a6ea1d8d35bde0348c02af3b8c70fe172d899ff191850604b2786e06cedc28de58093cb585b49a5c1d4c8669e8a59f95ff3bb4287a56d19de4c65d18ae9335cf1cfedc47e6741fdc6a6ca45290cda457a87162fd6868d80e26bbad4657db5214f98e89240c27b071bba6dfc206308a078593c7b7b1d20d64291b7dae4ed3303c5d90d0df3e1be68c47f99baa2cacab4f87878e4a497fe5bd4f9f0bd4e7253dda9a951d1906a6da9e4def5e6fb8df7dcc085957c59b0b725deb104dfa0e38f5d3f4bb6e55d0af541348cfe50f17fcbded2419d939196a349ff139a1545765379442078676ef2287d9a07eeb2758ca36536640820366f99f31155c1d571792bef6c7ee7570f1a267ee692f93203efa00b5678b6f1549068fff92651c9ffe1be516575883c42313c9175bf9dec1c559c8414dcf3c928809f9d4cdc3279164d570b5f2c3f549d7c57acc17286622983bde3db9e6eeaa53fd6dfc30b87edcceed4543eef1ced8a43584a2a0b90ef0c11d92682a7c3647888fdebaf8522a3886cb6874032b803b9024fd2df89a291c8479b6fd1f29202484d2227ee9cfebb58cbbc5459583392c78f4cdea2aaa353fc10d0f6f219e041cb95fc4fcfe95d6e2fdf8680d4d4315ec4a90735aac77c02e0bec67e1f6b8edef2cf8c3b2334aed69bcd855fc70ec13412322bcdfeb9ba36f48b62a19c489ff0be02bb5042bb7b911ba53c2cb73cdc2c8afbcaf4a067c9f33427249ca462fcfc760ad265f468ea8417f1cd35be629d35ddd0901ed6c1be436f248dce3a6280a8e0c245bb409fc4461efdca9b3fbbeb1090f665e2491cb86198d87973ffa4129bd5cc31dd472313f55b3ce5d7517d76414684431ea0eefe3fb4dbcf462cd8ee3605daa4a372b0ecfcddcf9fbea616721cbfc12dbfbf77ebc02de165157bfc7540a8271c2d1f445a2c7afba38c3ebeb61169894ae9ceb8e228c7331137db6f870a19550f2f495c7f08d0b131208fdbab2003479d18093ce57ed13780fed91050ac7be47f4ac661a160f014c18b572c7982c0b03851babdee50a066827ed740f265cc118effc7ef7608a947680c4bee1a305b2cac9f2f37a2771f1382fdb24cb936dc4220a9a6a44669d7c48564e85b475a076c4b06f1f2b8dc04e2d0a0775bf52fcb811a903270d704bac39ed1eeb3caee9b0940e0c22f513ad3c262000047db217f2aea76370af22adbc3c8e6f1e6fc22b5fb4b176f405517e5fc483c50076ecbd2af833c45f1b7fe21722d35bbb5153068426c1a630f9d08517953b39b9adf9b9c5f5f7a9bf2f0020e84edc541bb5112bd00d3dda0a5a784b038de7f2bada95b5040690ef556a5ae169b874f26f85c114e71a0393bda4c8c1aaad8b4c7523f24a901324c9d2cdf6deb88bfc03092130aafcbb75ed469f269a78b83937dea2fc1d0e3d826edb978471c5cbadbd60bd3b9f418ef30aa6a437319793d5b252b30e6c6587b7c888da6d257a59356d2e3aa7ddfe477cb7122a727289d42a5d0773a3a2a93a76e3ba0c854a98a4297ae388f0861f64f1949eda7cb8f1d643b1a8ea488f1565a829c3dc06ddf10ef193ddc74661d4a1e8ade01fe2652ff606d48eee3732c88603f8059c56d08b231069eee3c4c9b62ce59fd03352723ae4068983c5ef5f3aefdacb92756bc051c15936f86ab70910141a897545489da87f8ec6a545626dfeedd1a01b39b03c0961030fca2eef0e0935f0afcf495598ae5e1b428152e62ecf21512ea27d7295bb9697eca3a6fffe5d7c1f1c389ec0d4f509d3bbda5d3bc31cbf8d6a32f966d654b18c25134fb994b1acca6ded0e13f7a2d94964b5e16ec0e0448398c297314254a9acd36d14c342d637084b96e0b770ad7a46d67238f26625e2f3e2c1283983bea299ad149fafaea62e4622c29f168ba2b091ad8a19e5c19f0f51608c0f55012f829af2934bf00b59ef689b93fb5e080620da166f61251a83ef4c52f246bd5ead76449c99048eadf778e52313935ca50d953a962941d07cdb5f201cad408efeac1802f1b622bf9ff338ec0dc0b61297e681c15db4ba82b9a7c7879b2897e2f4da36de9d366770c222a064d5b56ca800009d260376a6dc19f63d0a5fbb4f2b7ccb71b9d693d4596a4580d7822872f29a3af6d0419aad50b5e44515ce4b48bfb923c16dff60eb890bc04a8997b4bb347a643ca436ffb8f4cdab529c2fc847ef8db017dbb8ea76f645eaf3d8314d8b68ebefdff622076f5f5365fb00db199dcf6ffc998d4007a2d3ff11abd03a71f7c2b23bf7da785010acaddc388d21ca5700ec57407e025ab5a93750820a0814b330fca50534edb5a1b8658301a7f175f110c8513b9e0841074f135200965e8d74c93732c7c34c003cb727e86e6caf3fa8ddf54927001e1f29c7ffe1cce3cee719f980d4ffc9abebfeb1c5059b52afe9c78413a6e825af24fb1c675b906577bb1afd02fae10b6d7b6d9a394826987a621c3d332320f714e74b709236dbdcda930db15650d1fb3dac7333944a205c69f78433545b942dc8bc41a670da0ede8b0383e66838a2980344d35977e9a1fa94c164f73ddb673c7e65eeb70df39bf25b692dd09ddbdb6a5d0bd0a5b5773c128abeb021147277cca9c8f76dacdf75174969ea62b479d05557ad3365f0aeaf061323d8de1773c81cfdb809a55e5aa6967a3fde5eb3b590a523e3b986997bd42adcaf55f5859641d8a20288e48eac8b5d3ee23d71be3298120031437d650645e36786b6f887d9dc74e7dbbfdb6d463e912f3e462480b5dac49a2804eb56ff333d7fce4c1b29036ff26cf7ebfa0bb46e36f6ab37cf8a4480fe85004a05a046a7e367ce78699a893f7d9471fa1b81b23d59bc1dcec14ac85db72056c7c84be166e87a2b120c6d7e53d3b1505c1336cd362e1d101a2c29d62ce1e2733efb4e4861a9f712f678b09f174fce6ab5957c185e77b0017964f7caf17ab31531f8ad3afdebadaa949aac1f85b1fe31553afb464ece3b0db14a5c0b42b9574729bd41f1e543529219939685e7dfc643263f363b3836cace58433244180f1ca6bcc740a0e6c66ec22f5c0edb91599faad9ff618d541568680831e5659c73d01151dc4a89ad6666cca1ad7e57bfe819a305328f00d680555f4979348fb444c508785db795d3505b764f328bd123dd2f4fd13c3be9094b5232ff38b02e485da80ea0418d1d6c6facf7bbf020c5d2894f8c4f6d67a0ecf660dc87af9c625c7b8dc12921f3f01edc8954fbc40a61d87bd64a1eb7aa18d525df842492d16d380fbfa0022118c22fe617e4a43dc311fbcc06ed9fa656deadd965021ff973a19a84bb2c04eeeda2b0d8e9dc4ebc9818c21661fe95c42f8917d88ebb5beafb7e0ac35e7174e9851ba2a8c5cf4115a5e0391b65a8fdaa9750c07046e67881cc491dfb14999cae28e835dd083fb5962ea9809664fb5dbacaec93423f9ca2bd37da35fe5560409f76adafded418891cb45d22363cd77f0eabbf90e6c0413f56175ead17954d18f5e13e16f9a43e3d50ecfcaca20cdeadc6a85e3c5d8039d502e82c8657b0d8d67aa81003d5eab83884df0206fa5020e32eee186aab41da797a32c8e7d2ba8309b463bd84447d27d51f8978d744474dac867822814e1adf897c79e53662a3db2575a6ed5654e41baf4da6415fa4f79baa0dd5870916814fb42e72441080dc50f33fed0ec215931f3ef6b53786911afc7ce6b89d8984f5dfe26d29c6d1b59671820390b7c9695f51bc13aa84abb6bb49cfc8dfeb7aebc2d21b9ea4a44be2f90ac7934d6f3910d388dc65ca3f18c6875ff5ee81a4bd61202443bb96e40af5c8d840ecc4374ecccd8c242fbaab3bd5b57beadc8562e5280716898d6684c0f09102f378e9e4c5dc0f2e735acb8c5f312974e1c80c817fa504fbb948c9a5fe779f249b1faf95d3de797615f29ad83807fc357c3de2fa1dea6b75d70bb20d3db88b7ed167e377e7c1f2b0f185cfc598c54a3de9a3c6a1099f3dbdac4ccf9b541c5b82ecc46a02054dadc255b27507615ea028b887e3446f7bfe9f07a397ed271b31f6b61e4d4fe4f444dd501d1bbe5ad0d9f532f22f7d181cdf2eacf02fe73b86bff775c1d27c97fb5d61a62c7bd160fa9abc411628339926915f016c15cb9d7dd6a161a46d0dbe8ce79ee8f92e4b0b1a90d26fd9a336d2dabb6844086ab91ccb875039c22d3e3cd623369642416b13940da156fc38bf22ccd790eaa594a43057886e31aa1d9b08d551128c227b111d11c11149e9f17ba10ef9fa330cf779b53777067d118d92a029359b60a4967460db0ad15437c26cddbe0467cb86332a4ee5a7db0994c70fae7b0c91b2be8ab0b8fd59724f22a7499f367f0a564eaec5a6c6ec33e217d1179e063bdfca7aea8643b258a91326996cea21c3f5833e88ffaf7162760360b068136172e8ff3896c6cb3f85ed389087b782bddc2787d316d02218651e726ac74f0680f41375eaacb65f5e07fe02554b4ef68d21c0057151f1885e40efa06cc575d9da764646ad1623a12476fd22a1689b80029d686b49fc5e3809ecb67a3d455db985f9fa5ef94ff15a37b7f436e25fb6b332a61593b0091320aa059fa4e7b40218721e93a4852a305afb91482711959886dba77ca130d6b704152c88a497492a8c8497d6500d4c00303c976ce4feb63af3c04d79470798916a39a35bbe286f0139ab4a389776216f0ff45192b78ef7bc37a591961f29334bb159f05cfb29077d25ae64e25511cb0e06d04bce0bee9940cc9301e5188410d90de2e6f3c8b2bc7d3b63a7e9e81e06c0f7aba6deb3f65ade427ee759f4a145d48f46be57452c186f79756eddbd57a8afa56c464ec2390bd0de443e9050358600d2aae0f4c26c57509ca44f87828a78b3402877097793a124f1d8797df9ee8a3d4ee31b2d0b6ff15d9fd4dfed8576f8473f11ff1fa8a9ba5d6a98b496fa8ee07b780a2f3db6096ef7a210944c421f917a1dbb6656b5dd1b5d28b9c12fffca50c7ae219cf2fc942f44157e6a9075df8bd1d1a4e78c5257de2c0547ecdbdecab658dbb78cd12f123cf30126f6d3bb9862ac2577dafa57f6d781de013c24de2c1a61b68852933cd52a008188c81db89a3a5f6d726b4a36ec94b88c1f9897ff4c8b70357dd6b8df89814979f23e6299bef881b418b43b2b8b2f9a2b4fdb63602b4855b6af76a0738b05f9595f109a087f51fec1d8c8fd89fc65a7a5e87fb51c6c1d5f7681a03866935099d71a14090b4acbd9b32b53f41b5bd941825099d2b60b8a2824b2ae8a6a280bb49664b168b680b5557cd4c043cd8317740b7bfc67c09c572a6f9430717a7fe8c0de6eac2a8197353fd98008318301586574d3d0a9bd940119c86eab16c37b52f5279ef017dd05ee01ec251ecfa4552faf56b2e6c5da623db3dbbe5b61c997b587a1ff324bd52ebc009083abc3b38ec8e025a74c9a93b4ab93563b077fe21bf8e003ec94d0ba086c755d57d089a4d26da0dc3905794e9f514e6489fb1fd17017214d13e5f8953b5ccbbcdceabbb795c47509b77b856a325062bb576472639a9c5945758862e9919a585a08323e3f6b373daeeae53fc34bcb0348c225b42681698b560adad4d6e76a142fb24fac16ffe41d3ce90f3c8d2c23c9bc9a1f1cb6d7d914a52a4a81e0bcdc81c3db916280b5064e337dbeb609fc55349c3b3c157fd5f290f96a49b9bf793bfc86a5e2f2aa8640b7051cfefc60079807daba74caadda51e509c45b6334364751424f6812aa649044cda11ce9f667433ce507521a2fa5b2bf7426a06c4cd2b96cd5daddf40b83f5201066962ccab5aa240abfc161cd22767af0c9f38eaa353ec94ebc91cd5d0d692199c51c94ab0ad01a96fa5acd1dc426732f46c97b48ca6122e35c165d67af9c1c7939efc4b34b94287339ae19dde488d5ac009b271ddcde85ea9651bc793b1c6a6a71aa569f03f350e0bc9b7f03697bc8c676f8adca0dab2885b40c5ca0cb39f5aafea2ca215267af81f67b1f3598395e1f7b4b98fb85add7d260d53aa7d6720454809daabd390283214a8c04fd86be5fad5417c7256beb270d6528b611d57d9889792f6615ccc8b27e36de49960b2027c12915fa472bd15b233eae9026771be4459397016ebe5e7c03f0c9c24aa62936a98f09c37aabbcc001b55b1fad4729be3b708e70f893fd1901064c5863e444c38ecc8127c40fe573a412f154731587fb4ed173a112ab5ef727f9d35538a00280b099dce9aa990cbc3fb5ba0f224d637d26060c93dd768e4ce14ecdeff52d374e1bbb75b4e36f5c24bc2efd619896d4ae7ce89b3eebc96024c0f20643c8722b20570f52546f0b7950a8b1364041611a57f1cbf0473d1b4c0fb270c3eddcb7ec770990e738057e1e147c7cb222a4fa1d43159b00a5cb4bf8693f46e338c5342fb779dcf3774c47916c9b6378bb7024c46d3a9283db02f06f33e923194f377b60d3a3544df65d7fd0e864bdd2f5498a186d00c055a3266ae58df5324b5577ff8bc10e802587ce4b40224795634a8740f46ca4684513bfdfd058fb3dcacae59fd81328752a4dea349073bee3f8f6deb4ab49d07dc8e12f5c07c03e18dd9f3ed50a81cfaa34b7d76a0ca136800c7dc9d8e4d031dd83d350fdc5f1c381dfe9a4d50ce7a3d672497686e36417bf42c963ea4d57b4a1e8406a8d8366e48d90ca841f11d578707745642a92bee162bf53413193c4f56393fd6f3f16104b037e540467e4399ebb474911ae4e3f6bd8de3b8d78d465a0f965aa83a9a6915e1a8680173dcfc943b0b22e72a9c1e2ff91035c73e1ae8a391433927b4f98721926e27c24ebfd9ae433305de8ae18e4f7e58fba0a71711bc2462e6f58b52f62eedfdd188d82e837d84c695128c442c7feca7cf33bf9f3e0419c2ad2c0d0ce716cd3aa50d14590a1b0cc3f7a7faaf6edbe23f3dca06328618c47eb300aa2e70eaa9d3d9ef1fedc7c62f678001d00b73afedcb904064ab9402556bba36635d6009200524723e30f9e5f3ba0fe7f0dcdd7a71e917d20ce83385832477aed639ff46a6407b6bda8adcc1445c9ac5050012779d5d203e01c1a60a6ec1189e0c311baa8b4b7f80353c2545ed25d4e967bfb55d60502909177e51a4fab5f14bfafeb2f8e29b8c358c4c6e01126ae4909dfce62c05b7c1f26ebec4ca1eeffadf7e2de92d505d4dbce9f01f5898b78a29df49041334f7723ed3f33ef66d47a7d7934bddb65bbc35c61f6f87aaca98e33ed76d99bdf91028202aac5fdc2e8f2349d213d720ed20342275ba17dbd4513771a523d59d4e58f1a85a5b2db3444a7426aeeeee000c7732b580136dbb5da4e38bfeb9b4bcc8d8277191a6bdd3cc8999e7b029eac6d4a3230f3921bb7c05aee79eeb6582da5f55ae988284fb406944f60ce5f56c91571d9871d08e1abbd727021af7de75ed8636ae66b58e28e49ed26f90858103f40477500d8ea9dda0aeb93f8f3ed64584aa53281c0e823f421d2a5ae4c5c6dbed7a5eea7759e5f88e0b1e4c5aba30402eec0f31cad961c7b91f97718d69d36b2e05116003e48b154bd192463c88a91bff59469260d5253f7592d88d7d1b404eb44a1a37b9bc168d2aaae1d9c1bc76429b443e750c5465c9964024401dd840827b6562119bfd26419be851774ee6f042d03023e8733d5e5da81f0d79eb6b2d44680c761a4067340a70e64928ff083d3d6d580818dacc91cf911e43996fdef4e7a2b99961ff9f1524429a619c262bdca9d66ea3d6e2af7726d53fb2daf4aad27c4f140463c2f28ca0080361ebf1bc53d04ed095e79ea456a7df398b27ac4968c91fc05f25ce547c55584b1fd4409bf831f1c094b7b5b922ac320b68f0a2ed9fdf6589cec5664d086832fd2d124ac0a3414cd79231f7608d6a7bb282cd2294b976e76f677a0c55b6230b16ba5c778e7c4b098b254f61c48a96840dea31526ea453a64bd8c6c79cfa6b2d9b67c1f43dd09dae0474234e370dbb87e09c2dd3c06f6e2537d0730258c267dc0125b5de1abf6c873327558059c1f15f8ae330f57bd01e922e7ddfd1645cb7f65fa93758346f40795f7fb4ee34a52a77b88e21bb4ae5f3992a8ecf3749543c9a29018270dc78b2e1b2e2ba8cabfff252d2beab6f3a03fd97f7a3c64c9dc653fa2776247f18806fcaa806adbd1e1f40e452778799dfaa54ddc5034b68b1111204831d172666fe2491f8e7d1b774125021e1e506846a85bf0595e3a4f1d6749fb1e0f307db076f793fbb376748eb4848d277f339f8402c34996a6f0402867b4842a2b49dc5000aa7fd1d1ece309a7d9ac2de864be2f891714f80dc33de0ba12b443d4c797028b428fefa73f4d449db3d8857f54b87bb18be180defec7d342f9bc6a62cf7e803019d5b34699b4d641f7b877473b31eb285ed7298942b390c6f0dc3f2d020b99e97cf77d9c0deb5f7a4d24acfed27529983238a9396387004c1d0d559914fdd328d8138d8a09a239d13ea7cbe6a1e5bb15ef31744c47db7b2ed9adba3490c925f7cd32ebadf1703abfb6f7208a0618fac5ce87c41c34614f12890262e7b768fd61d18ade5dddd17f981a331481d8cf51a4ea0de2b5ae771cd9854eb837e0c3161135c2ea96bc65368fd4ade64bbe8b1ad83bf8e441efa5ad58b504b3363e4f64b107a052e520da8592d5a82cdca61e62dc929675d43ec22adf0d5e6e1b2c6e6da2a8331e43891ec01b8d437ad2eef660f0819b1cdc0da41dcb10e3ab569400b2bfc6596aa3fe74c0a9eab4d49734f8ba17ae80dc2af75f003872b9242d0ea419bfd8f7998e8f5efc3a3f31aae23228f5df23e1a4f9f887aaf62d16db191e16423363228ffb7e5707dbf48b0718664104ca1b3b8094ca2f2e505efeca17449391a1de5273f9945d778a44d25bed43e88627e0f02ac99b17b6062f1cf1c3ff896ffedd647fbf5b17bba1c9f48b44f37c175cab7423bb515266c351bcd32cb8e686dcc2f53c0e6e69370bfeb26a92eed46345faa54d16fb8631abbf87155893a00321d4e6895f1db18791570a3c3bafdc4a0a0ee400879babfb96c32de9fe4f0c7e5525b214f2efa6134fd11b7cce737306c9a2f181589296861a069b52ab409f6d68947d4e93408c58a2583852eef6180386095cf05af416dc753e04d01e63850954877052b91e0106e9e4a09188db2e3d20c4d0f55cbc70191eee8306627934b4385f0388d4473d255edeb2863fd199c7de24e4017eb3419a01986efdd686e6811eafce821a4990612618c635f5493fbbf078f7ebb6ad2524685673ff6de8ddd1f31f5e8c38a4ea82032acc1bc4492921a227869de3465b63c8af1f9da042d6a4ff6038fe2d5d8b33957b2da3751263fc761e474183e9d98800b9a8f70b6c14dc3088e6433e873635e892e0011b619e75d1a9a8f2cdb05cd400a3c9e1e3a49d3e2b94dd31ee691b3405c9d7afc2cd90b158630877b369fc7fa89e99436d8199844c9c8d983dcdc9265ac7fce701366b77a96188bf3e38edd51db71b6e812e5ad91b365c42113579a9a21d6ae1763cd661abeb0d44818b48d0044852bbbde748d0d553e3248e6b8c8b96626955e558ea3545d37bdf8678650846328a192a3094499e278f97ffe373fb84b66cf632cf310e2f9f7bf9796949d8e3df3ce3449962ef94e802866b15a96f639a01563196eebcf5d4c44874b04fe0af19f5e529da8b5c84c4a7720c4a4e376853a62803f147a0b02af0cdb84c8beb82943544e818a405dac88240d5d16163dcd305863ae3e23cbd30a3afee464d3c650584b3f0a4d18d433629584de57bfeae052f0ee56fcbe9e99fb8889330cfde95c2acf458a9547d845d9f16d61c91086e6b093c3231f4ef8ee1d9a483b3ff64e5e1dd458ab1498d5c9ffad7dcffc08f3c17e3471e5d7864d7ff46e3edbd31006cc007692082ab2b876e00003437ae98a12fb5113f30fe0273d6e54bb724e1a68231b514a684c652d9b3221f1002d107607e95690f42441a42fb27ea8c06bff93989868b69b7d89595aff235177a7033cd8460b5ce72d693a465ed5f32db2eb84de6a073df764b171bf95d989fb1d5aecf51a035b6b3a2598178c626355dd45fcfd7418cbefa7266408ead0b0758bdb20458ca2a9e17c4948ed2b448ee0b05c9ca40d2737f18b5d55c1bbcdc54d8d84057211148fd29c673a4d9d40c9ea95934adbd92cf51bc04bb5a129de5e61e745549c3661216cc95ca8bdbaf1300afa4a1b217520498471e25786535183bc9f9e807d5e2f8a719371b36f582b89829c3d122f609d6fbab9ba3f9b531254cf8f136da347fca26c134038e9fe5c37a20a747273a6312a2c8c54a9ef16f1309704b4c6e8f28c64b120c7fc4527250580de7febe7bed26976a2b5f50af3d391005b06216946b0cb83029848092f473b0504a747c10302ead0743abf7879a6bcacf66c51ab74c85dcc9ab80ea97c8e410f4ca2be1496ada764b0d40710110b609b94959063cdd744bfff8a205cc78267451319181314c1ec3f0f7698c91592f5e876a6953cba7040a5dd5abba1064319ca4c9776a5d164b2378765b385c4bd046ece0c19853e5a6b0a95cc4e64ad056327209f6f98f085e2abad270930e1c74f462137184c7ad9cf88a73db662c15235e79065eed8c89e3ad88a68a51505dd09e042871d65204ef36b7958543b23dc4661cd796f98738d8638b3ec8612da6bbd01b3915a23076a55497b8442c6895f2d708e5212e3bc4a377849f690fbf2a4f40189d1416a1c30b841fdf035e97832af641162d221dfd9b9f636ba0e280a338bb5ee8fb9421216f6fab09b782dcc34190bc65f906dfcbf31a932c85440ca6e8e6f20c2a9a76a27a2cba65403ba8ebacccc9a282e29cb8373c24858e51f7f19fa0f484ff15f1f70a819a84abdf69f09c0a8d4fb84ff43f867a4574e1a517b8f3f3724388d90a82dd0ec5d207d40e72812e2b3cb098e9d0a491330fad438355e7bee0240e4fc3b99675ff5f51434746fa700a2bddc2573b2cb5ae6fdfe7130869fc26c95d800ec5870d63fc5b54256cec89f738d62f7921569b4b72ffa7d19823d2da72215a6f994f950945c00", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x78, 0x0, 0x6, {0x7, 0x2, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x0, 0x6e, 0x101, 0x4, 0x4, 0xbfb, 0xc000, 0x9, r8, 0x0, 0x5, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004580)='./file0\x00', &(0x7f00000045c0)) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000004640)={{}, {0x1, 0x5}, [{0x2, 0x2, r8}, {0x2, 0x3}], {0x4, 0x5}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x34, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f51, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000004680)={[0x0, 0x0, 0x10000008000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x3, 0x5, 0x400000007fff, 0x1000200004, 0x1000000004, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 16.089289339s ago: executing program 5 (id=7766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xc00e, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004819}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) write(r4, &(0x7f0000000ac0)="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", 0x19b) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close(r6) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0xa, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8137}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044}, 0x8000002) 15.562507291s ago: executing program 4 (id=7767): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x48}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x156, 0x1, 0x1, 0xd59f80, 0x9, 0x2800, 0xa, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x4, {0x5, 0xffffffff}, 0xcd, 0x7}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r0, 0xc) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r12, 0x1}, 0x14}}, 0x0) 12.611833609s ago: executing program 1 (id=7769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000580)='io.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000140)=""/247, 0xf7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x34, r3, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x40, 0x7, 0x22, "239e9a77e436f288ba0275f9c295621fd42dfca15187b435fd8614ef46f1cf58e492"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$uac3(r9, 0x0, 0x0) bind$packet(r8, &(0x7f0000000440)={0x11, 0x300, r7, 0x0}, 0x14) write(r8, &(0x7f0000000480)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r10 = io_uring_setup(0x5412, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.450049778s ago: executing program 5 (id=7770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getpid() r2 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) r3 = socket$inet(0x2, 0x1, 0x100) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r4, r3, 0x0) io_uring_setup(0x177f, &(0x7f00000002c0)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r5, 0x4, 0x6000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f0000000280)) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x5, 0x6, 0x3c443469, 0x9, 0x0, {0x8, 0x81}, 0xd0, 0x9}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) openat$udambuf(0xffffff9c, &(0x7f0000000e40), 0x2) 10.718447889s ago: executing program 4 (id=7771): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000005c0)="d4c44034", 0x4}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) r12 = dup(r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 10.652475449s ago: executing program 7 (id=7772): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x48}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x156, 0x1, 0x1, 0xd59f80, 0x9, 0x2800, 0xa, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x4, {0x5, 0xffffffff}, 0xcd, 0x7}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r0, 0xc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x2f, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 10.166415627s ago: executing program 1 (id=7773): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x200480c0}, 0x80) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x9, 0x58, 0xb8, 0x10, 0x1410, 0x7004, 0x6a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xe8, 0x5d, 0x2, 0x42, 0x10, 0xab, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f00000000c0)=0x80000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) write(r3, &(0x7f00000000c0)='48M', 0x3) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000180)) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003001e030500e1000c0400070080000300", 0x33a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x94) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000100)) r5 = socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x421, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x904}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x3c}}, 0x24000840) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) 9.479222283s ago: executing program 7 (id=7774): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x48}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x156, 0x1, 0x1, 0xd59f80, 0x9, 0x2800, 0xa, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x4, {0x5, 0xffffffff}, 0xcd, 0x7}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r0, 0xc) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r12, 0x1}, 0x14}}, 0x0) 8.685559727s ago: executing program 7 (id=7775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xc00e, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004819}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) write(r4, &(0x7f0000000ac0)="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", 0x19b) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0xa, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8137}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044}, 0x8000002) 8.513883051s ago: executing program 3 (id=7776): ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{0x81, 0x7}, {0x5, 0xff32}, 0x6}) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) 8.503690088s ago: executing program 5 (id=7777): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000005c0)="d4c44034", 0x4}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) r12 = dup(r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 8.08854322s ago: executing program 1 (id=7778): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000005c0)="d4c44034", 0x4}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) r12 = dup(r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7.063889357s ago: executing program 7 (id=7779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) r4 = socket$inet(0x2, 0x1, 0x100) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r5, r4, 0x0) io_uring_setup(0x177f, &(0x7f00000002c0)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r6, 0x4, 0x6000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r7, 0x40044581, &(0x7f0000000280)) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x5, 0x6, 0x3c443469, 0x9, 0x0, {0x8, 0x81}, 0xd0, 0x9}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) openat$udambuf(0xffffff9c, &(0x7f0000000e40), 0x2) 7.020041941s ago: executing program 5 (id=7780): ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{0x81, 0x7}, {0x5, 0xff32}, 0x6}) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) 6.845806064s ago: executing program 4 (id=7781): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f00000005c0)="d4c4", 0x2}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x3447504d, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000780)=""/82) r12 = dup(r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6.079322476s ago: executing program 3 (id=7782): r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000004c0)={0x1, 0x0, {0x3ff, 0x4, 0x3010, 0x2, 0x8, 0x8, 0x0, 0x1}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x40000001}]}}]}, 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x2}, &(0x7f00000000c0)=0x28) r8 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0xa00) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) unshare(0x28000400) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000001540)=""/4093) 4.253497795s ago: executing program 4 (id=7783): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x200480c0}, 0x80) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x9, 0x58, 0xb8, 0x10, 0x1410, 0x7004, 0x6a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xe8, 0x5d, 0x2, 0x42, 0x10, 0xab, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f00000000c0)=0x80000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r4, &(0x7f00000003c0), 0x0) write(r3, &(0x7f00000000c0)='48M', 0x3) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000180)) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003001e030500e1000c0400070080000300", 0x33a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x94) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000100)) r5 = socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x421, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x904}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x3c}}, 0x24000840) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) 4.087362818s ago: executing program 1 (id=7784): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x200480c0}, 0x80) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x9, 0x58, 0xb8, 0x10, 0x1410, 0x7004, 0x6a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xe8, 0x5d, 0x2, 0x42, 0x10, 0xab, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f00000000c0)=0x80000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r4, &(0x7f00000003c0)=[{0x0}], 0x1) write(r3, &(0x7f00000000c0)='48M', 0x3) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000180)) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003001e030500e1000c0400070080000300", 0x33a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x94) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000100)) r5 = socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x421, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x904}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x3c}}, 0x24000840) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) 2.623067592s ago: executing program 7 (id=7785): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x48}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x156, 0x1, 0x1, 0xd59f80, 0x9, 0x2800, 0xa, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x4, {0x5, 0xffffffff}, 0xcd, 0x7}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r0, 0xc) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x2f, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1.980963239s ago: executing program 3 (id=7786): ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{0x81, 0x7}, {0x5, 0xff32}, 0x6}) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) 1.854663917s ago: executing program 7 (id=7787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) madvise(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x16) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x2, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x84, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x7, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)=ANY=[@ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1613fe073caa732c00"], 0x1, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000043c0)={0x50, 0x0, r7, {0x7, 0x2b, 0x6, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000023c0)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x78, 0x0, 0x6, {0x7, 0x2, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x0, 0x6e, 0x101, 0x4, 0x4, 0xbfb, 0xc000, 0x9, r8, 0x0, 0x5, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004580)='./file0\x00', &(0x7f00000045c0)) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000004640)={{}, {0x1, 0x5}, [{0x2, 0x2, r8}, {0x2, 0x3}], {0x4, 0x5}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x34, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f51, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000004680)={[0x0, 0x0, 0x10000008000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x3, 0x5, 0x400000007fff, 0x1000200004, 0x1000000004, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.471197779s ago: executing program 1 (id=7788): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x48}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)}, 0x40) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x156, 0x1, 0x1, 0xd59f80, 0x9, 0x2800, 0xa, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x4, {0x5, 0xffffffff}, 0xcd, 0x7}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r0, 0xc) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x2f, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1.453607072s ago: executing program 5 (id=7789): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24048004) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x156, 0x1, 0x1, 0xd59f80, 0x9, 0x2800, 0xa, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x4, {0x5, 0xffffffff}, 0xcd, 0x7}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r0, 0xc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x2f, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1.124952399s ago: executing program 4 (id=7790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) getpid() r3 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) r4 = socket$inet(0x2, 0x1, 0x100) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r5, r4, 0x0) io_uring_setup(0x177f, &(0x7f00000002c0)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r6, 0x4, 0x6000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r7, 0x40044581, &(0x7f0000000280)) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x5, 0x6, 0x3c443469, 0x9, 0x0, {0x8, 0x81}, 0xd0, 0x9}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) openat$udambuf(0xffffff9c, &(0x7f0000000e40), 0x2) 1.445523ms ago: executing program 5 (id=7791): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x48}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x156, 0x1, 0x1, 0xd59f80, 0x9, 0x2800, 0xa, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x4, {0x5, 0xffffffff}, 0xcd, 0x7}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r0, 0xc) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 0s ago: executing program 1 (id=7792): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24048004) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x156, 0x1, 0x1, 0xd59f80, 0x9, 0x2800, 0xa, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x4, {0x5, 0xffffffff}, 0xcd, 0x7}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r0, 0xc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x2f, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): out_of_memory+0x10/0x10 [ 2123.238803][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 2123.238824][ T5633] try_charge_memcg+0xcdf/0x15e0 [ 2123.238850][ T5633] ? __pfx_try_charge_memcg+0x10/0x10 [ 2123.238869][ T5633] ? percpu_ref_tryget+0x15/0x180 [ 2123.238890][ T5633] ? __memcg_kmem_charge_page+0x15a/0x520 [ 2123.238906][ T5633] __memcg_kmem_charge_page+0x330/0x520 [ 2123.238918][ T5633] ? __memcg_kmem_charge_page+0x15a/0x520 [ 2123.238933][ T5633] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 2123.238949][ T5633] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2123.238965][ T5633] ? __pfx_policy_nodemask+0x10/0x10 [ 2123.238980][ T5633] ? do_raw_spin_lock+0x12b/0x2f0 [ 2123.238999][ T5633] alloc_pages_mpol+0x21e/0x390 [ 2123.239024][ T5633] alloc_pages_noprof+0xb1/0x2b0 [ 2123.239040][ T5633] pte_alloc_one+0x22/0x370 [ 2123.239056][ T5633] __pte_alloc+0x25/0x1a0 [ 2123.239071][ T5633] copy_pmd_range+0x539a/0x5c10 [ 2123.239094][ T5633] ? stack_depot_save_flags+0x33/0x7f0 [ 2123.239117][ T5633] ? __pfx_copy_pmd_range+0x10/0x10 [ 2123.239127][ T5633] ? __do_fast_syscall_32+0x27a/0x6b0 [ 2123.239145][ T5633] ? __lock_acquire+0x747/0x2de0 [ 2123.239161][ T5633] ? mas_wr_store_type+0xf80/0x1980 [ 2123.239177][ T5633] copy_page_range+0xc82/0x1290 [ 2123.239203][ T5633] ? __pfx_copy_page_range+0x10/0x10 [ 2123.239221][ T5633] ? __rb_insert_augmented+0x2ad/0x6d0 [ 2123.239233][ T5633] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 2123.239245][ T5633] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 2123.239260][ T5633] dup_mmap+0xf17/0x1dc0 [ 2123.239282][ T5633] ? __pfx_dup_mmap+0x10/0x10 [ 2123.239294][ T5633] ? do_raw_spin_lock+0x12b/0x2f0 [ 2123.239317][ T5633] ? lock_acquire+0x115/0x350 [ 2123.239340][ T5633] copy_mm+0x115/0x480 [ 2123.239356][ T5633] copy_process+0x1e79/0x4400 [ 2123.239378][ T5633] ? copy_process+0xd16/0x4400 [ 2123.239402][ T5633] ? __pfx_copy_process+0x10/0x10 [ 2123.239424][ T5633] kernel_clone+0x2d7/0x940 [ 2123.239442][ T5633] ? __pfx_kernel_clone+0x10/0x10 [ 2123.239469][ T5633] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 2123.239484][ T5633] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 2123.239504][ T5633] ? exc_page_fault+0x6a/0xc0 [ 2123.239524][ T5633] __do_fast_syscall_32+0x27a/0x6b0 [ 2123.239537][ T5633] ? do_fast_syscall_32+0x33/0x70 [ 2123.239550][ T5633] ? irqentry_exit+0x10f/0x920 [ 2123.239561][ T5633] ? trace_irq_disable+0x3b/0x140 [ 2123.239576][ T5633] do_fast_syscall_32+0x33/0x70 [ 2123.239589][ T5633] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2123.239603][ T5633] RIP: 0023:0xf7ff90ec [ 2123.239615][ T5633] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2123.239625][ T5633] RSP: 002b:00000000f75dfc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 2123.239638][ T5633] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 2123.239646][ T5633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056e8a4e8 [ 2123.239653][ T5633] RBP: 00000000f75dfcb4 R08: 0000000000000000 R09: 0000000000000000 [ 2123.239660][ T5633] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2123.239666][ T5633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2123.239683][ T5633] [ 2123.239688][ T5633] memory: usage 49152kB, limit 49152kB, failcnt 118305 [ 2123.239696][ T5633] memory+swap: usage 82628kB, limit 9007199254740988kB, failcnt 0 [ 2123.239704][ T5633] kmem: usage 7564kB, limit 9007199254740988kB, failcnt 0 [ 2123.239720][ T5633] Memory cgroup stats for /syz1: [ 2123.263557][ T5633] cache 42516480 [ 2123.263568][ T5633] rss 49152 [ 2123.263575][ T5633] rss_huge 0 [ 2123.263579][ T5633] shmem 42516480 [ 2123.263582][ T5633] mapped_file 0 [ 2123.263586][ T5633] dirty 0 [ 2123.263590][ T5633] writeback 0 [ 2123.263594][ T5633] workingset_refault_anon 2272 [ 2123.263598][ T5633] workingset_refault_file 46816 [ 2123.263602][ T5633] swap 34279424 [ 2123.263606][ T5633] swapcached 544378880 [ 2123.263610][ T5633] pgpgin 1517809 [ 2123.263614][ T5633] pgpgout 1517651 [ 2123.263618][ T5633] pgfault 822278 [ 2123.263622][ T5633] pgmajfault 2414 [ 2123.263626][ T5633] inactive_anon 12120064 [ 2123.263630][ T5633] active_anon 30466048 [ 2123.263634][ T5633] inactive_file 0 [ 2123.263638][ T5633] active_file 0 [ 2123.263642][ T5633] unevictable 0 [ 2123.263646][ T5633] hierarchical_memory_limit 50331648 [ 2123.263650][ T5633] hierarchical_memsw_limit 9223372036854771712 [ 2123.263654][ T5633] total_cache 42516480 [ 2123.263659][ T5633] total_rss 49152 [ 2123.263662][ T5633] total_rss_huge 0 [ 2123.263666][ T5633] total_shmem 42516480 [ 2123.263670][ T5633] total_mapped_file 0 [ 2123.263674][ T5633] total_dirty 0 [ 2123.263678][ T5633] total_writeback 0 [ 2123.263682][ T5633] total_workingset_refault_anon 2272 [ 2123.263687][ T5633] total_workingset_refault_file 46816 [ 2123.263691][ T5633] total_swap 34279424 [ 2123.263695][ T5633] total_swapcached 544378880 [ 2123.263699][ T5633] total_pgpgin 1518102 [ 2123.263703][ T5633] total_pgpgout 1517944 [ 2123.263707][ T5633] total_pgfault 822461 [ 2123.263711][ T5633] total_pgmajfault 2414 [ 2123.263715][ T5633] total_inactive_anon 12120064 [ 2123.263719][ T5633] total_active_anon 30466048 [ 2123.263724][ T5633] total_inactive_file 0 [ 2123.263728][ T5633] total_active_file 0 [ 2123.263732][ T5633] total_unevictable 0 [ 2123.263735][ T5633] anon_cost 0 [ 2123.263739][ T5633] file_cost 0 [ 2123.263744][ T5633] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7705,pid=32474,uid=0 [ 2123.263810][ T5633] Memory cgroup out of memory: Killed process 32474 (syz.1.7705) total-vm:104084kB, anon-rss:1152kB, file-rss:54356kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 2123.294299][T32704] syz.5.7746 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2123.294335][T32704] CPU: 0 UID: 0 PID: 32704 Comm: syz.5.7746 Tainted: G L syzkaller #0 PREEMPT(full) [ 2123.294365][T32704] Tainted: [L]=SOFTLOCKUP [ 2123.294373][T32704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2123.294385][T32704] Call Trace: [ 2123.294393][T32704] [ 2123.294403][T32704] dump_stack_lvl+0xe8/0x150 [ 2123.294436][T32704] dump_header+0xd3/0x4b0 [ 2123.294464][T32704] oom_kill_process+0x3ab/0x9e0 [ 2123.294496][T32704] out_of_memory+0x1064/0x1480 [ 2123.294522][T32704] ? try_charge_memcg+0xc32/0x15e0 [ 2123.294561][T32704] ? __pfx_out_of_memory+0x10/0x10 [ 2123.294591][T32704] ? do_raw_spin_unlock+0xf5/0x200 [ 2123.294630][T32704] try_charge_memcg+0xcdf/0x15e0 [ 2123.294676][T32704] ? __pfx_try_charge_memcg+0x10/0x10 [ 2123.294722][T32704] ? charge_memcg+0x47/0x310 [ 2123.294750][T32704] charge_memcg+0x1dd/0x310 [ 2123.294778][T32704] __mem_cgroup_charge+0x25/0x80 [ 2123.294805][T32704] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2123.294834][T32704] ? filemap_get_entry+0xcd/0x3f0 [ 2123.294871][T32704] ? __pfx_filemap_get_entry+0x10/0x10 [ 2123.294898][T32704] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2123.294931][T32704] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2123.294966][T32704] shmem_get_folio_gfp+0x5da/0x16d0 [ 2123.295012][T32704] shmem_write_begin+0x16c/0x330 [ 2123.295046][T32704] generic_perform_write+0x2d5/0x8f0 [ 2123.295079][T32704] ? __pfx_generic_perform_write+0x10/0x10 [ 2123.295098][T32704] ? down_write+0x16b/0x200 [ 2123.295122][T32704] ? generic_write_checks_count+0x41a/0x520 [ 2123.295154][T32704] ? file_update_time_flags+0x2d5/0x440 [ 2123.295181][T32704] shmem_file_write_iter+0xf8/0x120 [ 2123.295213][T32704] __kernel_write_iter+0x44a/0x8f0 [ 2123.295240][T32704] ? __pfx___kernel_write_iter+0x10/0x10 [ 2123.295258][T32704] ? get_dump_page+0x1e6/0x410 [ 2123.295292][T32704] ? __asan_memset+0x22/0x50 [ 2123.295314][T32704] ? iov_iter_bvec+0xb8/0x180 [ 2123.295346][T32704] dump_user_range+0xc19/0x12c0 [ 2123.295390][T32704] ? __pfx_dump_user_range+0x10/0x10 [ 2123.295424][T32704] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2123.295449][T32704] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2123.295474][T32704] ? elf_core_dump+0x2ccb/0x4050 [ 2123.295510][T32704] elf_core_dump+0x387b/0x4050 [ 2123.295557][T32704] ? __pfx_elf_core_dump+0x10/0x10 [ 2123.295589][T32704] ? coredump_write+0x394/0x1960 [ 2123.295617][T32704] ? irqentry_exit+0x2c0/0x920 [ 2123.295637][T32704] ? asm_exc_page_fault+0x26/0x30 [ 2123.295666][T32704] ? mas_ascend+0x2f9/0x8b0 [ 2123.295698][T32704] ? __lock_acquire+0x747/0x2de0 [ 2123.295745][T32704] ? lock_acquire+0x115/0x350 [ 2123.295783][T32704] coredump_write+0x1290/0x1960 [ 2123.295826][T32704] ? __pfx_coredump_write+0x10/0x10 [ 2123.295871][T32704] ? unshare_files+0xab/0x140 [ 2123.295902][T32704] vfs_coredump+0x3764/0x4520 [ 2123.295952][T32704] ? __pfx_vfs_coredump+0x10/0x10 [ 2123.295979][T32704] ? is_bpf_text_address+0x26/0x2b0 [ 2123.296011][T32704] ? __lock_acquire+0x747/0x2de0 [ 2123.296040][T32704] ? __lock_acquire+0x747/0x2de0 [ 2123.296076][T32704] ? lock_acquire+0x115/0x350 [ 2123.296104][T32704] ? lock_acquire+0x115/0x350 [ 2123.296135][T32704] ? is_bpf_text_address+0x26/0x2b0 [ 2123.296165][T32704] ? is_bpf_text_address+0x292/0x2b0 [ 2123.296189][T32704] ? is_bpf_text_address+0x26/0x2b0 [ 2123.296217][T32704] ? kernel_text_address+0xa5/0xe0 [ 2123.296240][T32704] ? __kernel_text_address+0xd/0x30 [ 2123.296262][T32704] ? unwind_get_return_address+0x4d/0x90 [ 2123.296285][T32704] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2123.296306][T32704] ? arch_stack_walk+0xfb/0x150 [ 2123.296341][T32704] ? stack_trace_save+0xa9/0x100 [ 2123.296361][T32704] ? __pfx_stack_trace_save+0x10/0x10 [ 2123.296383][T32704] ? stack_depot_save_flags+0x33/0x7f0 [ 2123.296409][T32704] ? __lock_acquire+0x6c0/0x2de0 [ 2123.296435][T32704] ? kasan_save_track+0x4f/0x80 [ 2123.296457][T32704] ? kasan_save_track+0x3e/0x80 [ 2123.296478][T32704] ? kasan_save_free_info+0x40/0x50 [ 2123.296495][T32704] ? __kasan_slab_free+0x5c/0x80 [ 2123.296516][T32704] ? kmem_cache_free+0x182/0x650 [ 2123.296536][T32704] ? get_signal+0x9e7/0x12c0 [ 2123.296558][T32704] ? arch_do_signal_or_restart+0xbb/0x860 [ 2123.296590][T32704] ? irqentry_exit+0x2c0/0x920 [ 2123.296608][T32704] ? asm_exc_page_fault+0x26/0x30 [ 2123.296664][T32704] ? proc_coredump_connector+0x187/0x4e0 [ 2123.296700][T32704] ? _raw_spin_unlock_irq+0x23/0x50 [ 2123.296719][T32704] get_signal+0x1094/0x12c0 [ 2123.296745][T32704] arch_do_signal_or_restart+0xbb/0x860 [ 2123.296763][T32704] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2123.296790][T32704] irqentry_exit+0x2c0/0x920 [ 2123.296802][T32704] ? trace_irq_disable+0x3b/0x140 [ 2123.296817][T32704] asm_exc_page_fault+0x26/0x30 [ 2123.296828][T32704] RIP: 0023:0x0 [ 2123.296838][T32704] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2123.296844][T32704] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2123.296855][T32704] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2123.296862][T32704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2123.296869][T32704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2123.296875][T32704] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2123.296882][T32704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2123.296899][T32704] [ 2123.347295][T32704] memory: usage 49152kB, limit 49152kB, failcnt 83573 [ 2123.347310][T32704] memory+swap: usage 49348kB, limit 9007199254740988kB, failcnt 0 [ 2123.347318][T32704] kmem: usage 4704kB, limit 9007199254740988kB, failcnt 0 [ 2123.347325][T32704] Memory cgroup stats for /syz5: [ 2123.348380][T32704] cache 45060096 [ 2123.348392][T32704] rss 450560 [ 2123.348399][T32704] rss_huge 0 [ 2123.348406][T32704] shmem 45060096 [ 2123.348413][T32704] mapped_file 8192 [ 2123.348420][T32704] dirty 0 [ 2123.348427][T32704] writeback 0 [ 2123.348434][T32704] workingset_refault_anon 348 [ 2123.348442][T32704] workingset_refault_file 25754 [ 2123.349756][T32704] swap 200704 [ 2123.349766][T32704] swapcached 329818112 [ 2123.349774][T32704] pgpgin 612793 [ 2123.349781][T32704] pgpgout 603215 [ 2123.349789][T32704] pgfault 447990 [ 2123.349795][T32704] pgmajfault 503 [ 2123.349802][T32704] inactive_anon 49152 [ 2123.349809][T32704] active_anon 45461504 [ 2123.349817][T32704] inactive_file 0 [ 2123.349824][T32704] active_file 0 [ 2123.349832][T32704] unevictable 0 [ 2123.349839][T32704] hierarchical_memory_limit 50331648 [ 2123.349848][T32704] hierarchical_memsw_limit 9223372036854771712 [ 2123.358586][T32704] total_cache 45060096 [ 2123.358596][T32704] total_rss 450560 [ 2123.358600][T32704] total_rss_huge 0 [ 2123.358604][T32704] total_shmem 45060096 [ 2123.358608][T32704] total_mapped_file 8192 [ 2123.358612][T32704] total_dirty 0 [ 2123.358616][T32704] total_writeback 0 [ 2123.358620][T32704] total_workingset_refault_anon 348 [ 2123.358625][T32704] total_workingset_refault_file 25754 [ 2123.358629][T32704] total_swap 200704 [ 2123.358633][T32704] total_swapcached 329818112 [ 2123.358637][T32704] total_pgpgin 612793 [ 2123.358641][T32704] total_pgpgout 603215 [ 2123.358645][T32704] total_pgfault 447990 [ 2123.358649][T32704] total_pgmajfault 503 [ 2123.358653][T32704] total_inactive_anon 49152 [ 2123.358657][T32704] total_active_anon 45461504 [ 2123.358661][T32704] total_inactive_file 0 [ 2123.358665][T32704] total_active_file 0 [ 2123.358669][T32704] total_unevictable 0 [ 2123.358673][T32704] anon_cost 0 [ 2123.358677][T32704] file_cost 0 [ 2123.381710][T32704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7743,pid=32689,uid=0 [ 2123.381778][T32704] Memory cgroup out of memory: Killed process 32689 (syz.5.7743) total-vm:104096kB, anon-rss:1304kB, file-rss:49032kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 2124.409585][T32704] syz.5.7746 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2124.409614][T32704] CPU: 0 UID: 0 PID: 32704 Comm: syz.5.7746 Tainted: G L syzkaller #0 PREEMPT(full) [ 2124.409629][T32704] Tainted: [L]=SOFTLOCKUP [ 2124.409633][T32704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2124.409640][T32704] Call Trace: [ 2124.409646][T32704] [ 2124.409651][T32704] dump_stack_lvl+0xe8/0x150 [ 2124.409672][T32704] dump_header+0xd3/0x4b0 [ 2124.409688][T32704] oom_kill_process+0x3ab/0x9e0 [ 2124.409707][T32704] out_of_memory+0x1064/0x1480 [ 2124.409721][T32704] ? try_charge_memcg+0xc32/0x15e0 [ 2124.409743][T32704] ? __pfx_out_of_memory+0x10/0x10 [ 2124.409756][T32704] ? do_raw_spin_unlock+0xf5/0x200 [ 2124.409778][T32704] try_charge_memcg+0xcdf/0x15e0 [ 2124.409803][T32704] ? __pfx_try_charge_memcg+0x10/0x10 [ 2124.409828][T32704] ? charge_memcg+0x47/0x310 [ 2124.409843][T32704] charge_memcg+0x1dd/0x310 [ 2124.409859][T32704] __mem_cgroup_charge+0x25/0x80 [ 2124.409873][T32704] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2124.409889][T32704] ? filemap_get_entry+0xcd/0x3f0 [ 2124.409910][T32704] ? __pfx_filemap_get_entry+0x10/0x10 [ 2124.409925][T32704] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2124.409943][T32704] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2124.409962][T32704] shmem_get_folio_gfp+0x5da/0x16d0 [ 2124.409987][T32704] shmem_write_begin+0x16c/0x330 [ 2124.410007][T32704] generic_perform_write+0x2d5/0x8f0 [ 2124.410025][T32704] ? __pfx_generic_perform_write+0x10/0x10 [ 2124.410035][T32704] ? down_write+0x16b/0x200 [ 2124.410049][T32704] ? generic_write_checks_count+0x41a/0x520 [ 2124.410066][T32704] ? file_update_time_flags+0x2d5/0x440 [ 2124.410082][T32704] shmem_file_write_iter+0xf8/0x120 [ 2124.410099][T32704] __kernel_write_iter+0x44a/0x8f0 [ 2124.410114][T32704] ? __pfx___kernel_write_iter+0x10/0x10 [ 2124.410124][T32704] ? get_dump_page+0x1e6/0x410 [ 2124.410142][T32704] ? __asan_memset+0x22/0x50 [ 2124.410154][T32704] ? iov_iter_bvec+0xb8/0x180 [ 2124.410172][T32704] dump_user_range+0xc19/0x12c0 [ 2124.410196][T32704] ? __pfx_dump_user_range+0x10/0x10 [ 2124.410215][T32704] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2124.410229][T32704] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2124.410243][T32704] ? elf_core_dump+0x2ccb/0x4050 [ 2124.410262][T32704] elf_core_dump+0x387b/0x4050 [ 2124.410288][T32704] ? __pfx_elf_core_dump+0x10/0x10 [ 2124.410303][T32704] ? coredump_write+0x394/0x1960 [ 2124.410323][T32704] ? irqentry_exit+0x2c0/0x920 [ 2124.410334][T32704] ? asm_exc_page_fault+0x26/0x30 [ 2124.410351][T32704] ? mas_ascend+0x2f9/0x8b0 [ 2124.410368][T32704] ? __lock_acquire+0x747/0x2de0 [ 2124.410394][T32704] ? lock_acquire+0x115/0x350 [ 2124.410415][T32704] coredump_write+0x1290/0x1960 [ 2124.410439][T32704] ? __pfx_coredump_write+0x10/0x10 [ 2124.410464][T32704] ? unshare_files+0xab/0x140 [ 2124.410481][T32704] vfs_coredump+0x3764/0x4520 [ 2124.410507][T32704] ? __pfx_vfs_coredump+0x10/0x10 [ 2124.410523][T32704] ? is_bpf_text_address+0x26/0x2b0 [ 2124.410540][T32704] ? __lock_acquire+0x747/0x2de0 [ 2124.410556][T32704] ? __lock_acquire+0x747/0x2de0 [ 2124.410576][T32704] ? lock_acquire+0x115/0x350 [ 2124.410591][T32704] ? lock_acquire+0x115/0x350 [ 2124.410608][T32704] ? is_bpf_text_address+0x26/0x2b0 [ 2124.410624][T32704] ? is_bpf_text_address+0x292/0x2b0 [ 2124.410637][T32704] ? is_bpf_text_address+0x26/0x2b0 [ 2124.410652][T32704] ? kernel_text_address+0xa5/0xe0 [ 2124.410665][T32704] ? __kernel_text_address+0xd/0x30 [ 2124.410677][T32704] ? unwind_get_return_address+0x4d/0x90 [ 2124.410689][T32704] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2124.410701][T32704] ? arch_stack_walk+0xfb/0x150 [ 2124.410720][T32704] ? stack_trace_save+0xa9/0x100 [ 2124.410731][T32704] ? __pfx_stack_trace_save+0x10/0x10 [ 2124.410744][T32704] ? stack_depot_save_flags+0x33/0x7f0 [ 2124.410759][T32704] ? __lock_acquire+0x6c0/0x2de0 [ 2124.410773][T32704] ? kasan_save_track+0x4f/0x80 [ 2124.410785][T32704] ? kasan_save_track+0x3e/0x80 [ 2124.410796][T32704] ? kasan_save_free_info+0x40/0x50 [ 2124.410806][T32704] ? __kasan_slab_free+0x5c/0x80 [ 2124.410819][T32704] ? kmem_cache_free+0x182/0x650 [ 2124.410831][T32704] ? get_signal+0x9e7/0x12c0 [ 2124.410843][T32704] ? arch_do_signal_or_restart+0xbb/0x860 [ 2124.410857][T32704] ? irqentry_exit+0x2c0/0x920 [ 2124.410868][T32704] ? asm_exc_page_fault+0x26/0x30 [ 2124.410900][T32704] ? proc_coredump_connector+0x187/0x4e0 [ 2124.410922][T32704] ? _raw_spin_unlock_irq+0x23/0x50 [ 2124.410935][T32704] get_signal+0x1094/0x12c0 [ 2124.410961][T32704] arch_do_signal_or_restart+0xbb/0x860 [ 2124.410978][T32704] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2124.411005][T32704] irqentry_exit+0x2c0/0x920 [ 2124.411016][T32704] ? trace_irq_disable+0x3b/0x140 [ 2124.411038][T32704] asm_exc_page_fault+0x26/0x30 [ 2124.411049][T32704] RIP: 0023:0x0 [ 2124.411059][T32704] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2124.411065][T32704] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2124.411076][T32704] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2124.411083][T32704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2124.411090][T32704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2124.411097][T32704] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2124.411103][T32704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2124.411120][T32704] [ 2124.411125][T32704] memory: usage 49152kB, limit 49152kB, failcnt 83743 [ 2124.411132][T32704] memory+swap: usage 49348kB, limit 9007199254740988kB, failcnt 0 [ 2124.411140][T32704] kmem: usage 4476kB, limit 9007199254740988kB, failcnt 0 [ 2124.411147][T32704] Memory cgroup stats for /syz5: [ 2124.411215][T32704] cache 45371392 [ 2124.411221][T32704] rss 335872 [ 2124.411225][T32704] rss_huge 0 [ 2124.411228][T32704] shmem 45371392 [ 2124.411232][T32704] mapped_file 0 [ 2124.411236][T32704] dirty 0 [ 2124.411240][T32704] writeback 0 [ 2124.411244][T32704] workingset_refault_anon 348 [ 2124.411248][T32704] workingset_refault_file 25754 [ 2124.411253][T32704] swap 200704 [ 2124.411257][T32704] swapcached 329818112 [ 2124.411261][T32704] pgpgin 612869 [ 2124.411264][T32704] pgpgout 603243 [ 2124.411268][T32704] pgfault 448000 [ 2124.411272][T32704] pgmajfault 503 [ 2124.411276][T32704] inactive_anon 49152 [ 2124.411280][T32704] active_anon 45658112 [ 2124.411284][T32704] inactive_file 0 [ 2124.411287][T32704] active_file 0 [ 2124.411291][T32704] unevictable 0 [ 2124.411295][T32704] hierarchical_memory_limit 50331648 [ 2124.411299][T32704] hierarchical_memsw_limit 9223372036854771712 [ 2124.411303][T32704] total_cache 45371392 [ 2124.411307][T32704] total_rss 335872 [ 2124.411316][T32704] total_rss_huge 0 [ 2124.411320][T32704] total_shmem 45371392 [ 2124.411324][T32704] total_mapped_file 0 [ 2124.411328][T32704] total_dirty 0 [ 2124.411331][T32704] total_writeback 0 [ 2124.411335][T32704] total_workingset_refault_anon 348 [ 2124.411339][T32704] total_workingset_refault_file 25754 [ 2124.411344][T32704] total_swap 200704 [ 2124.411348][T32704] total_swapcached 329818112 [ 2124.411352][T32704] total_pgpgin 612869 [ 2124.411356][T32704] total_pgpgout 603243 [ 2124.411360][T32704] total_pgfault 448000 [ 2124.411364][T32704] total_pgmajfault 503 [ 2124.411368][T32704] total_inactive_anon 49152 [ 2124.411372][T32704] total_active_anon 45658112 [ 2124.411376][T32704] total_inactive_file 0 [ 2124.411380][T32704] total_active_file 0 [ 2124.411385][T32704] total_unevictable 0 [ 2124.411389][T32704] anon_cost 0 [ 2124.411392][T32704] file_cost 0 [ 2124.411397][T32704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7746,pid=32704,uid=0 [ 2124.411451][T32704] Memory cgroup out of memory: Killed process 32704 (syz.5.7746) total-vm:104096kB, anon-rss:1304kB, file-rss:36360kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 2124.814178][T32608] syz.1.7730 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2124.814204][T32608] CPU: 1 UID: 0 PID: 32608 Comm: syz.1.7730 Tainted: G L syzkaller #0 PREEMPT(full) [ 2124.814219][T32608] Tainted: [L]=SOFTLOCKUP [ 2124.814223][T32608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2124.814230][T32608] Call Trace: [ 2124.814235][T32608] [ 2124.814241][T32608] dump_stack_lvl+0xe8/0x150 [ 2124.814262][T32608] dump_header+0xd3/0x4b0 [ 2124.814278][T32608] oom_kill_process+0x3ab/0x9e0 [ 2124.814297][T32608] out_of_memory+0x1064/0x1480 [ 2124.814311][T32608] ? try_charge_memcg+0xc32/0x15e0 [ 2124.814333][T32608] ? __pfx_out_of_memory+0x10/0x10 [ 2124.814347][T32608] ? do_raw_spin_unlock+0xf5/0x200 [ 2124.814368][T32608] try_charge_memcg+0xcdf/0x15e0 [ 2124.814393][T32608] ? __pfx_try_charge_memcg+0x10/0x10 [ 2124.814429][T32608] ? charge_memcg+0x47/0x310 [ 2124.814458][T32608] charge_memcg+0x1dd/0x310 [ 2124.814485][T32608] __mem_cgroup_charge+0x25/0x80 [ 2124.814507][T32608] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2124.814537][T32608] ? filemap_get_entry+0xcd/0x3f0 [ 2124.814575][T32608] ? __pfx_filemap_get_entry+0x10/0x10 [ 2124.814593][T32608] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2124.814611][T32608] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2124.814630][T32608] shmem_get_folio_gfp+0x5da/0x16d0 [ 2124.814655][T32608] shmem_write_begin+0x16c/0x330 [ 2124.814674][T32608] generic_perform_write+0x2d5/0x8f0 [ 2124.814693][T32608] ? __pfx_generic_perform_write+0x10/0x10 [ 2124.814704][T32608] ? down_write+0x16b/0x200 [ 2124.814717][T32608] ? generic_write_checks_count+0x41a/0x520 [ 2124.814735][T32608] ? file_update_time_flags+0x2d5/0x440 [ 2124.814750][T32608] shmem_file_write_iter+0xf8/0x120 [ 2124.814767][T32608] __kernel_write_iter+0x44a/0x8f0 [ 2124.814782][T32608] ? __pfx___kernel_write_iter+0x10/0x10 [ 2124.814799][T32608] ? get_dump_page+0x1e6/0x410 [ 2124.814825][T32608] ? __asan_memset+0x22/0x50 [ 2124.814838][T32608] ? iov_iter_bvec+0xb8/0x180 [ 2124.814855][T32608] dump_user_range+0xc19/0x12c0 [ 2124.814879][T32608] ? __pfx_dump_user_range+0x10/0x10 [ 2124.814898][T32608] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2124.814911][T32608] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2124.814925][T32608] ? elf_core_dump+0x2ccb/0x4050 [ 2124.814945][T32608] elf_core_dump+0x387b/0x4050 [ 2124.814974][T32608] ? __pfx_elf_core_dump+0x10/0x10 [ 2124.814989][T32608] ? coredump_write+0x394/0x1960 [ 2124.815004][T32608] ? irqentry_exit+0x2c0/0x920 [ 2124.815015][T32608] ? asm_exc_page_fault+0x26/0x30 [ 2124.815032][T32608] ? mas_ascend+0x2f9/0x8b0 [ 2124.815049][T32608] ? __lock_acquire+0x747/0x2de0 [ 2124.815076][T32608] ? lock_acquire+0x115/0x350 [ 2124.815096][T32608] coredump_write+0x1290/0x1960 [ 2124.815121][T32608] ? __pfx_coredump_write+0x10/0x10 [ 2124.815146][T32608] ? unshare_files+0xab/0x140 [ 2124.815168][T32608] vfs_coredump+0x3764/0x4520 [ 2124.815195][T32608] ? __pfx_vfs_coredump+0x10/0x10 [ 2124.815210][T32608] ? is_bpf_text_address+0x26/0x2b0 [ 2124.815228][T32608] ? __lock_acquire+0x747/0x2de0 [ 2124.815244][T32608] ? __lock_acquire+0x747/0x2de0 [ 2124.815263][T32608] ? lock_acquire+0x115/0x350 [ 2124.815279][T32608] ? lock_acquire+0x115/0x350 [ 2124.815296][T32608] ? is_bpf_text_address+0x26/0x2b0 [ 2124.815312][T32608] ? is_bpf_text_address+0x292/0x2b0 [ 2124.815326][T32608] ? is_bpf_text_address+0x26/0x2b0 [ 2124.815341][T32608] ? kernel_text_address+0xa5/0xe0 [ 2124.815354][T32608] ? __kernel_text_address+0xd/0x30 [ 2124.815366][T32608] ? unwind_get_return_address+0x4d/0x90 [ 2124.815379][T32608] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2124.815391][T32608] ? arch_stack_walk+0xfb/0x150 [ 2124.815411][T32608] ? stack_trace_save+0xa9/0x100 [ 2124.815422][T32608] ? __pfx_stack_trace_save+0x10/0x10 [ 2124.815434][T32608] ? stack_depot_save_flags+0x33/0x7f0 [ 2124.815453][T32608] ? __lock_acquire+0x6c0/0x2de0 [ 2124.815467][T32608] ? kasan_save_track+0x4f/0x80 [ 2124.815480][T32608] ? kasan_save_track+0x3e/0x80 [ 2124.815491][T32608] ? kasan_save_free_info+0x40/0x50 [ 2124.815501][T32608] ? __kasan_slab_free+0x5c/0x80 [ 2124.815513][T32608] ? kmem_cache_free+0x182/0x650 [ 2124.815525][T32608] ? get_signal+0x9e7/0x12c0 [ 2124.815538][T32608] ? arch_do_signal_or_restart+0xbb/0x860 [ 2124.815553][T32608] ? irqentry_exit+0x2c0/0x920 [ 2124.815568][T32608] ? asm_exc_page_fault+0x26/0x30 [ 2124.815601][T32608] ? proc_coredump_connector+0x187/0x4e0 [ 2124.815623][T32608] ? _raw_spin_unlock_irq+0x23/0x50 [ 2124.815636][T32608] get_signal+0x1094/0x12c0 [ 2124.815662][T32608] arch_do_signal_or_restart+0xbb/0x860 [ 2124.815679][T32608] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2124.815707][T32608] irqentry_exit+0x2c0/0x920 [ 2124.815719][T32608] ? trace_irq_disable+0x3b/0x140 [ 2124.815735][T32608] asm_exc_page_fault+0x26/0x30 [ 2124.815745][T32608] RIP: 0023:0x0 [ 2124.815755][T32608] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2124.815761][T32608] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2124.815772][T32608] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2124.815780][T32608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2124.815786][T32608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2124.815793][T32608] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2124.815799][T32608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2124.815816][T32608] [ 2124.815821][T32608] memory: usage 49152kB, limit 49152kB, failcnt 118450 [ 2124.815829][T32608] memory+swap: usage 82628kB, limit 9007199254740988kB, failcnt 0 [ 2124.815837][T32608] kmem: usage 7564kB, limit 9007199254740988kB, failcnt 0 [ 2124.815848][T32608] Memory cgroup stats for /syz1: [ 2124.815913][T32608] cache 42516480 [ 2124.815918][T32608] rss 49152 [ 2124.815921][T32608] rss_huge 0 [ 2124.815925][T32608] shmem 42516480 [ 2124.815929][T32608] mapped_file 0 [ 2124.815933][T32608] dirty 0 [ 2124.815937][T32608] writeback 0 [ 2124.815941][T32608] workingset_refault_anon 2272 [ 2124.815945][T32608] workingset_refault_file 46816 [ 2124.815952][T32608] swap 34279424 [ 2124.815956][T32608] swapcached 544378880 [ 2124.815960][T32608] pgpgin 1517809 [ 2124.815964][T32608] pgpgout 1517651 [ 2124.815967][T32608] pgfault 822278 [ 2124.815971][T32608] pgmajfault 2414 [ 2124.815975][T32608] inactive_anon 12120064 [ 2124.815979][T32608] active_anon 30466048 [ 2124.815982][T32608] inactive_file 0 [ 2124.815986][T32608] active_file 0 [ 2124.815990][T32608] unevictable 0 [ 2124.815994][T32608] hierarchical_memory_limit 50331648 [ 2124.815998][T32608] hierarchical_memsw_limit 9223372036854771712 [ 2124.816002][T32608] total_cache 42516480 [ 2124.816006][T32608] total_rss 49152 [ 2124.816010][T32608] total_rss_huge 0 [ 2124.816014][T32608] total_shmem 42516480 [ 2124.816018][T32608] total_mapped_file 0 [ 2124.816022][T32608] total_dirty 0 [ 2124.816025][T32608] total_writeback 0 [ 2124.816029][T32608] total_workingset_refault_anon 2272 [ 2124.816033][T32608] total_workingset_refault_file 46816 [ 2124.816038][T32608] total_swap 34279424 [ 2124.816042][T32608] total_swapcached 544378880 [ 2124.816046][T32608] total_pgpgin 1518102 [ 2124.816050][T32608] total_pgpgout 1517944 [ 2124.816054][T32608] total_pgfault 822461 [ 2124.816058][T32608] total_pgmajfault 2414 [ 2124.816062][T32608] total_inactive_anon 12120064 [ 2124.816066][T32608] total_active_anon 30466048 [ 2124.816070][T32608] total_inactive_file 0 [ 2124.816074][T32608] total_active_file 0 [ 2124.816078][T32608] total_unevictable 0 [ 2124.816082][T32608] anon_cost 0 [ 2124.816086][T32608] file_cost 0 [ 2124.816090][T32608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7730,pid=32608,uid=0 [ 2124.816145][T32608] Memory cgroup out of memory: Killed process 32608 (syz.1.7730) total-vm:104084kB, anon-rss:1152kB, file-rss:51976kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 2125.297241][ T34] oom_reaper: reaped process 32474 (syz.1.7705), now anon-rss:0kB, file-rss:2832kB, shmem-rss:0kB [ 2126.994010][T30931] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2127.145707][T30931] usb 5-1: Using ep0 maxpacket: 32 [ 2127.146492][T30931] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2127.147544][T30931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2127.147576][T30931] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2127.147601][T30931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2127.147618][T30931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2127.152601][T30931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.152621][T30931] usb 5-1: Product: syz [ 2127.152630][T30931] usb 5-1: Manufacturer: syz [ 2127.152638][T30931] usb 5-1: SerialNumber: syz [ 2127.249542][T30931] usb 5-1: config 0 descriptor?? [ 2127.250201][T32740] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2127.277955][T30931] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input92 [ 2128.304049][T13372] usb 5-1: USB disconnect, device number 114 [ 2128.304229][ C0] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 2129.289067][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2129.603458][ T303] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7760'. [ 2129.848440][T32767] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7759'. [ 2130.015145][T13363] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2130.183987][T13363] usb 5-1: Using ep0 maxpacket: 16 [ 2130.188524][T13363] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2130.188556][T13363] usb 5-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 2130.190675][T13363] usb 5-1: config 1 has an invalid interface number: 232 but max is 0 [ 2130.190702][T13363] usb 5-1: config 1 has no interface number 0 [ 2130.190742][T13363] usb 5-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 2130.190765][T13363] usb 5-1: config 1 interface 232 has no altsetting 0 [ 2130.263704][T13363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.263723][T13363] usb 5-1: Product: syz [ 2130.263731][T13363] usb 5-1: Manufacturer: syz [ 2130.263739][T13363] usb 5-1: SerialNumber: syz [ 2130.306467][ T308] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2130.699643][ T308] netlink: 'syz.4.7761': attribute type 3 has an invalid length. [ 2130.699659][ T308] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7761'. [ 2131.439101][T13363] hub 5-1:1.232: bad descriptor, ignoring hub [ 2131.439120][T13363] hub 5-1:1.232: probe with driver hub failed with error -5 [ 2131.439656][T13363] option 5-1:1.232: GSM modem (1-port) converter detected [ 2131.502900][T13363] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 2131.595049][T13363] usb 5-1: USB disconnect, device number 115 [ 2131.655775][T13363] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 2131.656199][T13363] option 5-1:1.232: device disconnected [ 2132.015417][ T329] fuse: Unknown parameter '0x0000000000000007' [ 2132.053406][ T329] fuse: Unknown parameter '0x0000000000000008' [ 2132.597294][ T337] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7766'. [ 2132.653318][ T325] nvme_fabrics: missing parameter 'transport=%s' [ 2132.653340][ T325] nvme_fabrics: missing parameter 'nqn=%s' [ 2132.716068][T32762] syz.1.7757 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2132.716900][T32762] CPU: 0 UID: 0 PID: 32762 Comm: syz.1.7757 Tainted: G L syzkaller #0 PREEMPT(full) [ 2132.716919][T32762] Tainted: [L]=SOFTLOCKUP [ 2132.716929][T32762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2132.716937][T32762] Call Trace: [ 2132.716942][T32762] [ 2132.716948][T32762] dump_stack_lvl+0xe8/0x150 [ 2132.716969][T32762] dump_header+0xd3/0x4b0 [ 2132.716985][T32762] oom_kill_process+0x3ab/0x9e0 [ 2132.717006][T32762] out_of_memory+0x1064/0x1480 [ 2132.717019][T32762] ? try_charge_memcg+0xc32/0x15e0 [ 2132.717039][T32762] ? preempt_schedule_common+0x7f/0xd0 [ 2132.717053][T32762] ? __pfx_out_of_memory+0x10/0x10 [ 2132.717073][T32762] try_charge_memcg+0xcdf/0x15e0 [ 2132.717101][T32762] ? __pfx_try_charge_memcg+0x10/0x10 [ 2132.717141][T32762] ? charge_memcg+0x47/0x310 [ 2132.717158][T32762] charge_memcg+0x1dd/0x310 [ 2132.717173][T32762] __mem_cgroup_charge+0x25/0x80 [ 2132.717188][T32762] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2132.717205][T32762] ? filemap_get_entry+0xcd/0x3f0 [ 2132.717226][T32762] ? __pfx_filemap_get_entry+0x10/0x10 [ 2132.717241][T32762] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2132.717259][T32762] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2132.717278][T32762] shmem_get_folio_gfp+0x5da/0x16d0 [ 2132.717303][T32762] shmem_write_begin+0x16c/0x330 [ 2132.717323][T32762] generic_perform_write+0x2d5/0x8f0 [ 2132.717341][T32762] ? __pfx_generic_perform_write+0x10/0x10 [ 2132.717352][T32762] ? down_write+0x16b/0x200 [ 2132.717364][T32762] ? generic_write_checks_count+0x41a/0x520 [ 2132.717383][T32762] ? file_update_time_flags+0x2d5/0x440 [ 2132.717398][T32762] shmem_file_write_iter+0xf8/0x120 [ 2132.717416][T32762] __kernel_write_iter+0x44a/0x8f0 [ 2132.717433][T32762] ? __pfx___kernel_write_iter+0x10/0x10 [ 2132.717444][T32762] ? get_dump_page+0x1e6/0x410 [ 2132.717463][T32762] ? __asan_memset+0x22/0x50 [ 2132.717476][T32762] ? iov_iter_bvec+0xb8/0x180 [ 2132.717494][T32762] dump_user_range+0xc19/0x12c0 [ 2132.717518][T32762] ? __pfx_dump_user_range+0x10/0x10 [ 2132.717537][T32762] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2132.717551][T32762] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2132.717565][T32762] ? elf_core_dump+0x2ccb/0x4050 [ 2132.717585][T32762] elf_core_dump+0x387b/0x4050 [ 2132.717611][T32762] ? __pfx_elf_core_dump+0x10/0x10 [ 2132.717634][T32762] ? mas_ascend+0x2f9/0x8b0 [ 2132.717651][T32762] ? __lock_acquire+0x747/0x2de0 [ 2132.717679][T32762] ? lock_acquire+0x115/0x350 [ 2132.717699][T32762] coredump_write+0x1290/0x1960 [ 2132.717723][T32762] ? __pfx_coredump_write+0x10/0x10 [ 2132.717748][T32762] ? unshare_files+0xab/0x140 [ 2132.717766][T32762] vfs_coredump+0x3764/0x4520 [ 2132.717792][T32762] ? __pfx_vfs_coredump+0x10/0x10 [ 2132.717808][T32762] ? is_bpf_text_address+0x26/0x2b0 [ 2132.717826][T32762] ? __lock_acquire+0x747/0x2de0 [ 2132.717842][T32762] ? __lock_acquire+0x747/0x2de0 [ 2132.717862][T32762] ? lock_acquire+0x115/0x350 [ 2132.717877][T32762] ? lock_acquire+0x115/0x350 [ 2132.717899][T32762] ? is_bpf_text_address+0x26/0x2b0 [ 2132.717932][T32762] ? is_bpf_text_address+0x292/0x2b0 [ 2132.717946][T32762] ? is_bpf_text_address+0x26/0x2b0 [ 2132.717962][T32762] ? kernel_text_address+0xa5/0xe0 [ 2132.717975][T32762] ? __kernel_text_address+0xd/0x30 [ 2132.717987][T32762] ? unwind_get_return_address+0x4d/0x90 [ 2132.718001][T32762] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2132.718013][T32762] ? arch_stack_walk+0xfb/0x150 [ 2132.718033][T32762] ? stack_trace_save+0xa9/0x100 [ 2132.718044][T32762] ? __pfx_stack_trace_save+0x10/0x10 [ 2132.718056][T32762] ? stack_depot_save_flags+0x33/0x7f0 [ 2132.718071][T32762] ? __lock_acquire+0x6c0/0x2de0 [ 2132.718085][T32762] ? kasan_save_track+0x4f/0x80 [ 2132.718098][T32762] ? kasan_save_track+0x3e/0x80 [ 2132.718109][T32762] ? kasan_save_free_info+0x40/0x50 [ 2132.718119][T32762] ? __kasan_slab_free+0x5c/0x80 [ 2132.718132][T32762] ? kmem_cache_free+0x182/0x650 [ 2132.718144][T32762] ? get_signal+0x9e7/0x12c0 [ 2132.718157][T32762] ? arch_do_signal_or_restart+0xbb/0x860 [ 2132.718171][T32762] ? irqentry_exit+0x2c0/0x920 [ 2132.718182][T32762] ? asm_exc_page_fault+0x26/0x30 [ 2132.718215][T32762] ? proc_coredump_connector+0x187/0x4e0 [ 2132.718237][T32762] ? _raw_spin_unlock_irq+0x23/0x50 [ 2132.718251][T32762] get_signal+0x1094/0x12c0 [ 2132.718276][T32762] arch_do_signal_or_restart+0xbb/0x860 [ 2132.718294][T32762] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2132.718321][T32762] irqentry_exit+0x2c0/0x920 [ 2132.718332][T32762] ? trace_irq_disable+0x3b/0x140 [ 2132.718348][T32762] asm_exc_page_fault+0x26/0x30 [ 2132.718359][T32762] RIP: 0023:0x0 [ 2132.718368][T32762] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2132.718375][T32762] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2132.718386][T32762] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2132.718394][T32762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2132.718400][T32762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2132.718407][T32762] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2132.718414][T32762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2132.718433][T32762] [ 2132.863368][T32762] memory: usage 49152kB, limit 49152kB, failcnt 118827 [ 2132.863389][T32762] memory+swap: usage 51756kB, limit 9007199254740988kB, failcnt 0 [ 2132.863403][T32762] kmem: usage 7856kB, limit 9007199254740988kB, failcnt 0 [ 2132.863415][T32762] Memory cgroup stats for /syz1: [ 2132.867998][T32762] cache 41811968 [ 2132.868008][T32762] rss 454656 [ 2132.868012][T32762] rss_huge 0 [ 2132.868016][T32762] shmem 41811968 [ 2132.868020][T32762] mapped_file 8192 [ 2132.868024][T32762] dirty 0 [ 2132.868027][T32762] writeback 0 [ 2132.868031][T32762] workingset_refault_anon 2276 [ 2132.868038][T32762] workingset_refault_file 46816 [ 2132.869022][T32762] swap 2666496 [ 2132.869033][T32762] swapcached 546500608 [ 2132.869040][T32762] pgpgin 1528536 [ 2132.869047][T32762] pgpgout 1528451 [ 2132.869055][T32762] pgfault 823622 [ 2132.869062][T32762] pgmajfault 2416 [ 2132.869069][T32762] inactive_anon 40906752 [ 2132.869077][T32762] active_anon 1380352 [ 2132.869084][T32762] inactive_file 0 [ 2132.869091][T32762] active_file 0 [ 2132.869096][T32762] unevictable 0 [ 2132.869103][T32762] hierarchical_memory_limit 50331648 [ 2132.869110][T32762] hierarchical_memsw_limit 9223372036854771712 [ 2132.869981][T32762] total_cache 41811968 [ 2132.869990][T32762] total_rss 454656 [ 2132.869998][T32762] total_rss_huge 0 [ 2132.870005][T32762] total_shmem 41811968 [ 2132.870013][T32762] total_mapped_file 8192 [ 2132.870021][T32762] total_dirty 0 [ 2132.870027][T32762] total_writeback 0 [ 2132.870035][T32762] total_workingset_refault_anon 2276 [ 2132.870043][T32762] total_workingset_refault_file 46816 [ 2132.870052][T32762] total_swap 2666496 [ 2132.870059][T32762] total_swapcached 546500608 [ 2132.870067][T32762] total_pgpgin 1528829 [ 2132.876632][T32762] total_pgpgout 1528744 [ 2132.876645][T32762] total_pgfault 823805 [ 2132.876653][T32762] total_pgmajfault 2416 [ 2132.876660][T32762] total_inactive_anon 40906752 [ 2132.876669][T32762] total_active_anon 1380352 [ 2132.876677][T32762] total_inactive_file 0 [ 2132.876684][T32762] total_active_file 0 [ 2132.876692][T32762] total_unevictable 0 [ 2132.876700][T32762] anon_cost 0 [ 2132.876707][T32762] file_cost 0 [ 2132.876715][T32762] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7751,pid=32742,uid=0 [ 2132.881687][T32762] Memory cgroup out of memory: Killed process 32742 (syz.1.7751) total-vm:104084kB, anon-rss:1176kB, file-rss:47432kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 2133.735724][T32762] syz.1.7757 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2133.735753][T32762] CPU: 0 UID: 0 PID: 32762 Comm: syz.1.7757 Tainted: G L syzkaller #0 PREEMPT(full) [ 2133.735768][T32762] Tainted: [L]=SOFTLOCKUP [ 2133.735773][T32762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2133.735780][T32762] Call Trace: [ 2133.735786][T32762] [ 2133.735791][T32762] dump_stack_lvl+0xe8/0x150 [ 2133.735812][T32762] dump_header+0xd3/0x4b0 [ 2133.735831][T32762] oom_kill_process+0x3ab/0x9e0 [ 2133.735850][T32762] out_of_memory+0x1064/0x1480 [ 2133.735864][T32762] ? try_charge_memcg+0xc32/0x15e0 [ 2133.735886][T32762] ? __pfx_out_of_memory+0x10/0x10 [ 2133.735899][T32762] ? do_raw_spin_unlock+0xf5/0x200 [ 2133.735920][T32762] try_charge_memcg+0xcdf/0x15e0 [ 2133.735945][T32762] ? __pfx_try_charge_memcg+0x10/0x10 [ 2133.735970][T32762] ? charge_memcg+0x47/0x310 [ 2133.735986][T32762] charge_memcg+0x1dd/0x310 [ 2133.736001][T32762] __mem_cgroup_charge+0x25/0x80 [ 2133.736016][T32762] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2133.736037][T32762] ? filemap_get_entry+0xcd/0x3f0 [ 2133.736069][T32762] ? __pfx_filemap_get_entry+0x10/0x10 [ 2133.736084][T32762] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2133.736102][T32762] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2133.736121][T32762] shmem_get_folio_gfp+0x5da/0x16d0 [ 2133.736146][T32762] shmem_write_begin+0x16c/0x330 [ 2133.736165][T32762] generic_perform_write+0x2d5/0x8f0 [ 2133.736184][T32762] ? __pfx_generic_perform_write+0x10/0x10 [ 2133.736194][T32762] ? down_write+0x16b/0x200 [ 2133.736213][T32762] ? generic_write_checks_count+0x41a/0x520 [ 2133.736232][T32762] ? file_update_time_flags+0x2d5/0x440 [ 2133.736247][T32762] shmem_file_write_iter+0xf8/0x120 [ 2133.736265][T32762] __kernel_write_iter+0x44a/0x8f0 [ 2133.736280][T32762] ? __pfx___kernel_write_iter+0x10/0x10 [ 2133.736290][T32762] ? get_dump_page+0x1e6/0x410 [ 2133.736309][T32762] ? __asan_memset+0x22/0x50 [ 2133.736322][T32762] ? iov_iter_bvec+0xb8/0x180 [ 2133.736340][T32762] dump_user_range+0xc19/0x12c0 [ 2133.736364][T32762] ? __pfx_dump_user_range+0x10/0x10 [ 2133.736383][T32762] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2133.736396][T32762] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2133.736411][T32762] ? elf_core_dump+0x2ccb/0x4050 [ 2133.736430][T32762] elf_core_dump+0x387b/0x4050 [ 2133.736456][T32762] ? __pfx_elf_core_dump+0x10/0x10 [ 2133.736479][T32762] ? mas_ascend+0x2f9/0x8b0 [ 2133.736497][T32762] ? __lock_acquire+0x747/0x2de0 [ 2133.736523][T32762] ? lock_acquire+0x115/0x350 [ 2133.736544][T32762] coredump_write+0x1290/0x1960 [ 2133.736567][T32762] ? __pfx_coredump_write+0x10/0x10 [ 2133.736593][T32762] ? unshare_files+0xab/0x140 [ 2133.736610][T32762] vfs_coredump+0x3764/0x4520 [ 2133.736636][T32762] ? __pfx_vfs_coredump+0x10/0x10 [ 2133.736651][T32762] ? is_bpf_text_address+0x26/0x2b0 [ 2133.736669][T32762] ? __lock_acquire+0x747/0x2de0 [ 2133.736685][T32762] ? __lock_acquire+0x747/0x2de0 [ 2133.736705][T32762] ? lock_acquire+0x115/0x350 [ 2133.736723][T32762] ? lock_acquire+0x115/0x350 [ 2133.736739][T32762] ? is_bpf_text_address+0x26/0x2b0 [ 2133.736756][T32762] ? is_bpf_text_address+0x292/0x2b0 [ 2133.736769][T32762] ? is_bpf_text_address+0x26/0x2b0 [ 2133.736784][T32762] ? kernel_text_address+0xa5/0xe0 [ 2133.736797][T32762] ? __kernel_text_address+0xd/0x30 [ 2133.736809][T32762] ? unwind_get_return_address+0x4d/0x90 [ 2133.736822][T32762] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2133.736834][T32762] ? arch_stack_walk+0xfb/0x150 [ 2133.736854][T32762] ? stack_trace_save+0xa9/0x100 [ 2133.736865][T32762] ? __pfx_stack_trace_save+0x10/0x10 [ 2133.736886][T32762] ? stack_depot_save_flags+0x33/0x7f0 [ 2133.736911][T32762] ? __lock_acquire+0x6c0/0x2de0 [ 2133.736934][T32762] ? kasan_save_track+0x4f/0x80 [ 2133.736953][T32762] ? kasan_save_track+0x3e/0x80 [ 2133.736973][T32762] ? kasan_save_free_info+0x40/0x50 [ 2133.736989][T32762] ? __kasan_slab_free+0x5c/0x80 [ 2133.737011][T32762] ? kmem_cache_free+0x182/0x650 [ 2133.737029][T32762] ? get_signal+0x9e7/0x12c0 [ 2133.737042][T32762] ? arch_do_signal_or_restart+0xbb/0x860 [ 2133.737057][T32762] ? irqentry_exit+0x2c0/0x920 [ 2133.737068][T32762] ? asm_exc_page_fault+0x26/0x30 [ 2133.737110][T32762] ? proc_coredump_connector+0x187/0x4e0 [ 2133.737142][T32762] ? _raw_spin_unlock_irq+0x23/0x50 [ 2133.737155][T32762] get_signal+0x1094/0x12c0 [ 2133.737181][T32762] arch_do_signal_or_restart+0xbb/0x860 [ 2133.737199][T32762] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2133.737232][T32762] irqentry_exit+0x2c0/0x920 [ 2133.737243][T32762] ? trace_irq_disable+0x3b/0x140 [ 2133.737259][T32762] asm_exc_page_fault+0x26/0x30 [ 2133.737270][T32762] RIP: 0023:0x0 [ 2133.737280][T32762] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2133.737287][T32762] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2133.737298][T32762] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2133.737305][T32762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2133.737312][T32762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2133.737318][T32762] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2133.737325][T32762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2133.737342][T32762] [ 2133.775719][T32762] memory: usage 49152kB, limit 49152kB, failcnt 118917 [ 2133.775735][T32762] memory+swap: usage 51756kB, limit 9007199254740988kB, failcnt 0 [ 2133.775743][T32762] kmem: usage 7856kB, limit 9007199254740988kB, failcnt 0 [ 2133.775750][T32762] Memory cgroup stats for /syz1: [ 2133.778176][T32762] cache 41811968 [ 2133.778189][T32762] rss 454656 [ 2133.778196][T32762] rss_huge 0 [ 2133.778209][T32762] shmem 41811968 [ 2133.778216][T32762] mapped_file 8192 [ 2133.778224][T32762] dirty 0 [ 2133.778231][T32762] writeback 0 [ 2133.778238][T32762] workingset_refault_anon 2276 [ 2133.778246][T32762] workingset_refault_file 46816 [ 2133.778254][T32762] swap 2666496 [ 2133.778261][T32762] swapcached 546500608 [ 2133.780889][T32762] pgpgin 1528536 [ 2133.780900][T32762] pgpgout 1528451 [ 2133.780907][T32762] pgfault 823622 [ 2133.780914][T32762] pgmajfault 2416 [ 2133.780921][T32762] inactive_anon 40906752 [ 2133.780929][T32762] active_anon 1380352 [ 2133.780933][T32762] inactive_file 0 [ 2133.780937][T32762] active_file 0 [ 2133.780941][T32762] unevictable 0 [ 2133.780945][T32762] hierarchical_memory_limit 50331648 [ 2133.780950][T32762] hierarchical_memsw_limit 9223372036854771712 [ 2133.780954][T32762] total_cache 41811968 [ 2133.780958][T32762] total_rss 454656 [ 2133.780962][T32762] total_rss_huge 0 [ 2133.780966][T32762] total_shmem 41811968 [ 2133.780970][T32762] total_mapped_file 8192 [ 2133.780974][T32762] total_dirty 0 [ 2133.780977][T32762] total_writeback 0 [ 2133.780981][T32762] total_workingset_refault_anon 2276 [ 2133.780985][T32762] total_workingset_refault_file 46816 [ 2133.798322][T32762] total_swap 2666496 [ 2133.798332][T32762] total_swapcached 546500608 [ 2133.798337][T32762] total_pgpgin 1528829 [ 2133.798341][T32762] total_pgpgout 1528744 [ 2133.798344][T32762] total_pgfault 823805 [ 2133.798349][T32762] total_pgmajfault 2416 [ 2133.798352][T32762] total_inactive_anon 40906752 [ 2133.798356][T32762] total_active_anon 1380352 [ 2133.798361][T32762] total_inactive_file 0 [ 2133.798364][T32762] total_active_file 0 [ 2133.798368][T32762] total_unevictable 0 [ 2133.798372][T32762] anon_cost 0 [ 2133.798376][T32762] file_cost 0 [ 2133.798381][T32762] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7757,pid=32762,uid=0 [ 2133.802834][T32762] Memory cgroup out of memory: Killed process 32762 (syz.1.7757) total-vm:104084kB, anon-rss:1292kB, file-rss:35336kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 2134.800823][ T343] syz-executor invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0 [ 2134.800852][ T343] CPU: 1 UID: 0 PID: 343 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2134.800867][ T343] Tainted: [L]=SOFTLOCKUP [ 2134.800872][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2134.800878][ T343] Call Trace: [ 2134.800883][ T343] [ 2134.800889][ T343] dump_stack_lvl+0xe8/0x150 [ 2134.800909][ T343] dump_header+0xd3/0x4b0 [ 2134.800926][ T343] oom_kill_process+0x3ab/0x9e0 [ 2134.800946][ T343] out_of_memory+0x1064/0x1480 [ 2134.800960][ T343] ? try_charge_memcg+0xc32/0x15e0 [ 2134.800984][ T343] ? __pfx_out_of_memory+0x10/0x10 [ 2134.800998][ T343] ? do_raw_spin_unlock+0xf5/0x200 [ 2134.801019][ T343] try_charge_memcg+0xcdf/0x15e0 [ 2134.801043][ T343] ? __pfx_try_charge_memcg+0x10/0x10 [ 2134.801062][ T343] ? percpu_ref_tryget+0x15/0x180 [ 2134.801083][ T343] ? __memcg_kmem_charge_page+0x15a/0x520 [ 2134.801098][ T343] __memcg_kmem_charge_page+0x330/0x520 [ 2134.801110][ T343] ? __memcg_kmem_charge_page+0x15a/0x520 [ 2134.801125][ T343] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 2134.801141][ T343] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2134.801157][ T343] ? __pfx_policy_nodemask+0x10/0x10 [ 2134.801172][ T343] ? look_up_lock_class+0x57/0x110 [ 2134.801185][ T343] ? register_lock_class+0x31/0x2e0 [ 2134.801200][ T343] alloc_pages_mpol+0x21e/0x390 [ 2134.801219][ T343] alloc_pages_noprof+0xb1/0x2b0 [ 2134.801235][ T343] pte_alloc_one+0x22/0x370 [ 2134.801250][ T343] do_pte_missing+0x13c8/0x34b0 [ 2134.801266][ T343] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 2134.801285][ T343] handle_mm_fault+0x1a53/0x3750 [ 2134.801307][ T343] ? handle_mm_fault+0xf1/0x3750 [ 2134.801329][ T343] ? __pfx_handle_mm_fault+0x10/0x10 [ 2134.801343][ T343] ? lock_vma_under_rcu+0x45a/0x500 [ 2134.801369][ T343] do_user_addr_fault+0xa4f/0x1340 [ 2134.801386][ T343] ? trace_page_fault_user+0x84/0x1e0 [ 2134.801399][ T343] exc_page_fault+0x6a/0xc0 [ 2134.801411][ T343] asm_exc_page_fault+0x26/0x30 [ 2134.801422][ T343] RIP: 0023:0xf71749aa [ 2134.801436][ T343] Code: Unable to access opcode bytes at 0xf7174980. [ 2134.801442][ T343] RSP: 002b:00000000f750fc90 EFLAGS: 00010206 [ 2134.801453][ T343] RAX: 0000000000000000 RBX: 0000000001200011 RCX: 0000000000000000 [ 2134.801460][ T343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000584534e8 [ 2134.801467][ T343] RBP: 00000000f750fcb4 R08: 0000000000000000 R09: 0000000000000000 [ 2134.801474][ T343] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2134.801480][ T343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2134.801496][ T343] [ 2134.936692][ T343] memory: usage 49152kB, limit 49152kB, failcnt 94738 [ 2134.936705][ T343] memory+swap: usage 62168kB, limit 9007199254740988kB, failcnt 0 [ 2134.936713][ T343] kmem: usage 6476kB, limit 9007199254740988kB, failcnt 0 [ 2134.936720][ T343] Memory cgroup stats for /syz4: [ 2134.936800][ T343] cache 43630592 [ 2134.936805][ T343] rss 57344 [ 2134.936809][ T343] rss_huge 0 [ 2134.936813][ T343] shmem 43626496 [ 2134.936816][ T343] mapped_file 0 [ 2134.936820][ T343] dirty 0 [ 2134.936824][ T343] writeback 0 [ 2134.936828][ T343] workingset_refault_anon 4361 [ 2134.936832][ T343] workingset_refault_file 47451 [ 2134.936836][ T343] swap 13328384 [ 2134.936839][ T343] swapcached 392155136 [ 2134.936843][ T343] pgpgin 1215625 [ 2134.936847][ T343] pgpgout 1215190 [ 2134.936851][ T343] pgfault 721348 [ 2134.936855][ T343] pgmajfault 1482 [ 2134.936858][ T343] inactive_anon 10600448 [ 2134.936862][ T343] active_anon 33095680 [ 2134.936866][ T343] inactive_file 0 [ 2134.936870][ T343] active_file 4096 [ 2134.936874][ T343] unevictable 0 [ 2134.936878][ T343] hierarchical_memory_limit 50331648 [ 2134.936882][ T343] hierarchical_memsw_limit 9223372036854771712 [ 2134.936887][ T343] total_cache 43630592 [ 2134.936891][ T343] total_rss 57344 [ 2134.936895][ T343] total_rss_huge 0 [ 2134.936898][ T343] total_shmem 43626496 [ 2134.936902][ T343] total_mapped_file 0 [ 2134.936906][ T343] total_dirty 0 [ 2134.936910][ T343] total_writeback 0 [ 2134.936914][ T343] total_workingset_refault_anon 4361 [ 2134.936918][ T343] total_workingset_refault_file 48362 [ 2134.936923][ T343] total_swap 13328384 [ 2134.936927][ T343] total_swapcached 392159232 [ 2134.936931][ T343] total_pgpgin 1216574 [ 2134.936935][ T343] total_pgpgout 1216139 [ 2134.936939][ T343] total_pgfault 721441 [ 2134.936943][ T343] total_pgmajfault 1482 [ 2134.936947][ T343] total_inactive_anon 10600448 [ 2134.936951][ T343] total_active_anon 33095680 [ 2134.936955][ T343] total_inactive_file 0 [ 2134.936959][ T343] total_active_file 4096 [ 2134.936963][ T343] total_unevictable 0 [ 2134.936966][ T343] anon_cost 0 [ 2134.936970][ T343] file_cost 0 [ 2134.936975][ T343] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7736,pid=32645,uid=0 [ 2134.937033][ T343] Memory cgroup out of memory: Killed process 32645 (syz.4.7736) total-vm:104096kB, anon-rss:1148kB, file-rss:53840kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 2135.727903][ T343] syz.4.7767 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2135.727929][ T343] CPU: 1 UID: 0 PID: 343 Comm: syz.4.7767 Tainted: G L syzkaller #0 PREEMPT(full) [ 2135.727945][ T343] Tainted: [L]=SOFTLOCKUP [ 2135.727949][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2135.727956][ T343] Call Trace: [ 2135.727962][ T343] [ 2135.727967][ T343] dump_stack_lvl+0xe8/0x150 [ 2135.727987][ T343] dump_header+0xd3/0x4b0 [ 2135.728003][ T343] oom_kill_process+0x3ab/0x9e0 [ 2135.728022][ T343] out_of_memory+0x1064/0x1480 [ 2135.728036][ T343] ? try_charge_memcg+0xc32/0x15e0 [ 2135.728057][ T343] ? __pfx_out_of_memory+0x10/0x10 [ 2135.728073][ T343] ? do_raw_spin_unlock+0xf5/0x200 [ 2135.728095][ T343] try_charge_memcg+0xcdf/0x15e0 [ 2135.728120][ T343] ? __pfx_try_charge_memcg+0x10/0x10 [ 2135.728137][ T343] ? percpu_ref_tryget+0x15/0x180 [ 2135.728158][ T343] ? __obj_cgroup_charge+0x36/0x2c0 [ 2135.728173][ T343] __obj_cgroup_charge+0x1fd/0x2c0 [ 2135.728186][ T343] ? __obj_cgroup_charge+0x36/0x2c0 [ 2135.728200][ T343] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 2135.728222][ T343] ? vm_area_dup+0x28/0x760 [ 2135.728237][ T343] kmem_cache_alloc_noprof+0x367/0x600 [ 2135.728249][ T343] ? vm_area_dup+0x28/0x760 [ 2135.728260][ T343] ? kmem_cache_alloc_noprof+0x156/0x600 [ 2135.728271][ T343] ? vm_area_dup+0x28/0x760 [ 2135.728286][ T343] vm_area_dup+0x28/0x760 [ 2135.728296][ T343] ? __split_vma+0x1b7/0xa60 [ 2135.728311][ T343] __split_vma+0x1d7/0xa60 [ 2135.728329][ T343] ? __pfx___split_vma+0x10/0x10 [ 2135.728353][ T343] vma_modify+0x14d0/0x1bc0 [ 2135.728376][ T343] vma_modify_flags+0x2a4/0x3c0 [ 2135.728392][ T343] ? __pfx_vma_modify_flags+0x10/0x10 [ 2135.728414][ T343] ? rcu_is_watching+0x16/0xb0 [ 2135.728428][ T343] ? percpu_counter_add_batch+0xec/0x1d0 [ 2135.728446][ T343] ? __vm_enough_memory+0x11a/0x380 [ 2135.728463][ T343] mprotect_fixup+0x51a/0xad0 [ 2135.728479][ T343] ? __pfx_mprotect_fixup+0x10/0x10 [ 2135.728492][ T343] ? mas_next_slot+0xc91/0xd70 [ 2135.728518][ T343] do_mprotect_pkey+0x8e7/0xd10 [ 2135.728539][ T343] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 2135.728551][ T343] ? vm_mmap_pgoff+0x31c/0x4e0 [ 2135.728577][ T343] ? vm_mmap_pgoff+0x35a/0x4e0 [ 2135.728595][ T343] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 2135.728611][ T343] ? exc_page_fault+0x6a/0xc0 [ 2135.728628][ T343] __ia32_sys_mprotect+0x7f/0x90 [ 2135.728641][ T343] __do_fast_syscall_32+0x27a/0x6b0 [ 2135.728656][ T343] ? do_fast_syscall_32+0x33/0x70 [ 2135.728669][ T343] ? irqentry_exit+0x10f/0x920 [ 2135.728680][ T343] ? trace_irq_disable+0x3b/0x140 [ 2135.728694][ T343] do_fast_syscall_32+0x33/0x70 [ 2135.728707][ T343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2135.728721][ T343] RIP: 0023:0xf7f240ec [ 2135.728732][ T343] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2135.728742][ T343] RSP: 002b:00000000f750f9b8 EFLAGS: 00000206 ORIG_RAX: 000000000000007d [ 2135.728755][ T343] RAX: ffffffffffffffda RBX: 00000000f53b7000 RCX: 0000000000020000 [ 2135.728763][ T343] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000021000 [ 2135.728770][ T343] RBP: 00000000f53d6b40 R08: 0000000000000000 R09: 0000000000000000 [ 2135.728777][ T343] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2135.728783][ T343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2135.728800][ T343] [ 2135.874256][ T343] memory: usage 49152kB, limit 49152kB, failcnt 94823 [ 2135.874276][ T343] memory+swap: usage 62712kB, limit 9007199254740988kB, failcnt 0 [ 2135.874291][ T343] kmem: usage 6500kB, limit 9007199254740988kB, failcnt 0 [ 2135.874304][ T343] Memory cgroup stats for /syz4: [ 2135.874437][ T343] cache 43597824 [ 2135.874447][ T343] rss 65536 [ 2135.874453][ T343] rss_huge 0 [ 2135.874461][ T343] shmem 43597824 [ 2135.874468][ T343] mapped_file 0 [ 2135.874475][ T343] dirty 0 [ 2135.874482][ T343] writeback 0 [ 2135.874489][ T343] workingset_refault_anon 4361 [ 2135.874497][ T343] workingset_refault_file 47451 [ 2135.874505][ T343] swap 13885440 [ 2135.874512][ T343] swapcached 392736768 [ 2135.874520][ T343] pgpgin 1215762 [ 2135.874527][ T343] pgpgout 1215333 [ 2135.874534][ T343] pgfault 721381 [ 2135.874541][ T343] pgmajfault 1482 [ 2135.874548][ T343] inactive_anon 33591296 [ 2135.874554][ T343] active_anon 10084352 [ 2135.874562][ T343] inactive_file 0 [ 2135.874569][ T343] active_file 0 [ 2135.874576][ T343] unevictable 0 [ 2135.874584][ T343] hierarchical_memory_limit 50331648 [ 2135.874592][ T343] hierarchical_memsw_limit 9223372036854771712 [ 2135.874601][ T343] total_cache 43597824 [ 2135.874608][ T343] total_rss 65536 [ 2135.874615][ T343] total_rss_huge 0 [ 2135.874623][ T343] total_shmem 43597824 [ 2135.874630][ T343] total_mapped_file 0 [ 2135.874637][ T343] total_dirty 0 [ 2135.874644][ T343] total_writeback 0 [ 2135.874652][ T343] total_workingset_refault_anon 4361 [ 2135.874660][ T343] total_workingset_refault_file 48362 [ 2135.874668][ T343] total_swap 13885440 [ 2135.874675][ T343] total_swapcached 392740864 [ 2135.874682][ T343] total_pgpgin 1216711 [ 2135.874690][ T343] total_pgpgout 1216282 [ 2135.874697][ T343] total_pgfault 721474 [ 2135.874705][ T343] total_pgmajfault 1482 [ 2135.874712][ T343] total_inactive_anon 33591296 [ 2135.874721][ T343] total_active_anon 10084352 [ 2135.874728][ T343] total_inactive_file 0 [ 2135.874736][ T343] total_active_file 0 [ 2135.874743][ T343] total_unevictable 0 [ 2135.874751][ T343] anon_cost 0 [ 2135.874757][ T343] file_cost 0 [ 2135.874765][ T343] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7748,pid=32714,uid=0 [ 2135.874857][ T343] Memory cgroup out of memory: Killed process 32714 (syz.4.7748) total-vm:104096kB, anon-rss:1148kB, file-rss:36360kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 2136.428293][ T352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.428567][ T352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.691576][ T354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7767'. [ 2136.769681][ T354] netlink: 'syz.4.7767': attribute type 10 has an invalid length. [ 2136.937627][ T359] tap0: tun_chr_ioctl cmd 1074025677 [ 2136.937718][ T359] tap0: linktype set to 774 [ 2137.059406][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2137.224292][T13372] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2137.404006][T13372] usb 6-1: Using ep0 maxpacket: 32 [ 2137.407568][T13372] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2137.413731][T13372] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2137.413755][T13372] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2137.413769][T13372] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2137.413782][T13372] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2137.500445][T13372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2137.500476][T13372] usb 6-1: Product: syz [ 2137.500492][T13372] usb 6-1: Manufacturer: syz [ 2137.500508][T13372] usb 6-1: SerialNumber: syz [ 2137.579058][T13372] usb 6-1: config 0 descriptor?? [ 2137.590039][ T359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2137.635335][T13372] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input93 [ 2137.731044][ T367] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7772'. [ 2137.756590][ T367] netlink: 'syz.7.7772': attribute type 10 has an invalid length. [ 2137.943852][ T367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2138.070376][ T367] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 2138.346095][ T373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2138.364326][ T373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2138.399701][T30931] usb 6-1: USB disconnect, device number 99 [ 2138.399838][ C0] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 2138.459402][ T373] netlink: 'syz.1.7773': attribute type 3 has an invalid length. [ 2138.459416][ T373] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7773'. [ 2138.746311][ T364] nvme_fabrics: missing parameter 'transport=%s' [ 2138.746329][ T364] nvme_fabrics: missing parameter 'nqn=%s' [ 2138.784124][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7774'. [ 2138.897866][ T381] netlink: 'syz.7.7774': attribute type 10 has an invalid length. [ 2139.655018][ T386] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7775'. [ 2140.596146][ T388] nvme_fabrics: missing parameter 'transport=%s' [ 2140.596166][ T388] nvme_fabrics: missing parameter 'nqn=%s' [ 2141.126684][ T398] nvme_fabrics: missing parameter 'transport=%s' [ 2141.126698][ T398] nvme_fabrics: missing parameter 'nqn=%s' [ 2141.319768][ T410] tap0: tun_chr_ioctl cmd 1074025677 [ 2141.319860][ T410] tap0: linktype set to 774 [ 2142.506270][ T418] nvme_fabrics: missing parameter 'transport=%s' [ 2142.506918][ T418] nvme_fabrics: missing parameter 'nqn=%s' [ 2142.842424][T32654] syz.3.7737 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2142.843246][T32654] CPU: 0 UID: 0 PID: 32654 Comm: syz.3.7737 Tainted: G L syzkaller #0 PREEMPT(full) [ 2142.843263][T32654] Tainted: [L]=SOFTLOCKUP [ 2142.843267][T32654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2142.843274][T32654] Call Trace: [ 2142.843279][T32654] [ 2142.843284][T32654] dump_stack_lvl+0xe8/0x150 [ 2142.843306][T32654] dump_header+0xd3/0x4b0 [ 2142.843322][T32654] oom_kill_process+0x3ab/0x9e0 [ 2142.843344][T32654] out_of_memory+0x1064/0x1480 [ 2142.843358][T32654] ? try_charge_memcg+0xc32/0x15e0 [ 2142.843380][T32654] ? __pfx_out_of_memory+0x10/0x10 [ 2142.843394][T32654] ? do_raw_spin_unlock+0xf5/0x200 [ 2142.843415][T32654] try_charge_memcg+0xcdf/0x15e0 [ 2142.843439][T32654] ? __pfx_try_charge_memcg+0x10/0x10 [ 2142.843465][T32654] ? charge_memcg+0x47/0x310 [ 2142.843481][T32654] charge_memcg+0x1dd/0x310 [ 2142.843496][T32654] __mem_cgroup_charge+0x25/0x80 [ 2142.843510][T32654] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2142.843527][T32654] ? filemap_get_entry+0xcd/0x3f0 [ 2142.843547][T32654] ? __pfx_filemap_get_entry+0x10/0x10 [ 2142.843562][T32654] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2142.843580][T32654] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2142.843605][T32654] shmem_get_folio_gfp+0x5da/0x16d0 [ 2142.843630][T32654] shmem_write_begin+0x16c/0x330 [ 2142.843650][T32654] generic_perform_write+0x2d5/0x8f0 [ 2142.843668][T32654] ? __pfx_generic_perform_write+0x10/0x10 [ 2142.843680][T32654] ? __mark_inode_dirty+0x4e7/0x13b0 [ 2142.843695][T32654] ? mnt_put_write_access_file+0xc3/0x100 [ 2142.843709][T32654] ? file_update_time_flags+0x3ab/0x440 [ 2142.843725][T32654] shmem_file_write_iter+0xf8/0x120 [ 2142.843742][T32654] __kernel_write_iter+0x44a/0x8f0 [ 2142.843758][T32654] ? __pfx___kernel_write_iter+0x10/0x10 [ 2142.843768][T32654] ? get_dump_page+0x1e6/0x410 [ 2142.843787][T32654] ? __asan_memset+0x22/0x50 [ 2142.843799][T32654] ? iov_iter_bvec+0xb8/0x180 [ 2142.843816][T32654] dump_user_range+0xc19/0x12c0 [ 2142.843841][T32654] ? __pfx_dump_user_range+0x10/0x10 [ 2142.843859][T32654] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2142.843878][T32654] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2142.843900][T32654] ? elf_core_dump+0x2ccb/0x4050 [ 2142.843930][T32654] elf_core_dump+0x387b/0x4050 [ 2142.843971][T32654] ? __pfx_elf_core_dump+0x10/0x10 [ 2142.843986][T32654] ? coredump_write+0x394/0x1960 [ 2142.844001][T32654] ? irqentry_exit+0x2c0/0x920 [ 2142.844012][T32654] ? asm_exc_page_fault+0x26/0x30 [ 2142.844029][T32654] ? mas_ascend+0x2f9/0x8b0 [ 2142.844046][T32654] ? __lock_acquire+0x747/0x2de0 [ 2142.844072][T32654] ? lock_acquire+0x115/0x350 [ 2142.844093][T32654] coredump_write+0x1290/0x1960 [ 2142.844119][T32654] ? __pfx_coredump_write+0x10/0x10 [ 2142.844144][T32654] ? unshare_files+0xab/0x140 [ 2142.844162][T32654] vfs_coredump+0x3764/0x4520 [ 2142.844188][T32654] ? __pfx_vfs_coredump+0x10/0x10 [ 2142.844204][T32654] ? is_bpf_text_address+0x26/0x2b0 [ 2142.844222][T32654] ? __lock_acquire+0x747/0x2de0 [ 2142.844237][T32654] ? __lock_acquire+0x747/0x2de0 [ 2142.844257][T32654] ? lock_acquire+0x115/0x350 [ 2142.844273][T32654] ? lock_acquire+0x115/0x350 [ 2142.844290][T32654] ? is_bpf_text_address+0x26/0x2b0 [ 2142.844306][T32654] ? is_bpf_text_address+0x292/0x2b0 [ 2142.844319][T32654] ? is_bpf_text_address+0x26/0x2b0 [ 2142.844334][T32654] ? kernel_text_address+0xa5/0xe0 [ 2142.844348][T32654] ? __kernel_text_address+0xd/0x30 [ 2142.844360][T32654] ? unwind_get_return_address+0x4d/0x90 [ 2142.844373][T32654] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2142.844385][T32654] ? arch_stack_walk+0xfb/0x150 [ 2142.844404][T32654] ? stack_trace_save+0xa9/0x100 [ 2142.844415][T32654] ? __pfx_stack_trace_save+0x10/0x10 [ 2142.844428][T32654] ? stack_depot_save_flags+0x33/0x7f0 [ 2142.844442][T32654] ? __lock_acquire+0x6c0/0x2de0 [ 2142.844456][T32654] ? kasan_save_track+0x4f/0x80 [ 2142.844469][T32654] ? kasan_save_track+0x3e/0x80 [ 2142.844480][T32654] ? kasan_save_free_info+0x40/0x50 [ 2142.844490][T32654] ? __kasan_slab_free+0x5c/0x80 [ 2142.844502][T32654] ? kmem_cache_free+0x182/0x650 [ 2142.844514][T32654] ? get_signal+0x9e7/0x12c0 [ 2142.844528][T32654] ? arch_do_signal_or_restart+0xbb/0x860 [ 2142.844542][T32654] ? irqentry_exit+0x2c0/0x920 [ 2142.844553][T32654] ? asm_exc_page_fault+0x26/0x30 [ 2142.844586][T32654] ? proc_coredump_connector+0x187/0x4e0 [ 2142.844614][T32654] ? _raw_spin_unlock_irq+0x23/0x50 [ 2142.844627][T32654] get_signal+0x1094/0x12c0 [ 2142.844653][T32654] arch_do_signal_or_restart+0xbb/0x860 [ 2142.844670][T32654] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2142.844698][T32654] irqentry_exit+0x2c0/0x920 [ 2142.844709][T32654] ? trace_irq_disable+0x3b/0x140 [ 2142.844725][T32654] asm_exc_page_fault+0x26/0x30 [ 2142.844735][T32654] RIP: 0023:0x0 [ 2142.844745][T32654] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2142.844752][T32654] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2142.844762][T32654] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2142.844770][T32654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2142.844776][T32654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2142.844783][T32654] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2142.844789][T32654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2142.844805][T32654] [ 2143.025466][T32654] memory: usage 49152kB, limit 49152kB, failcnt 130035 [ 2143.025488][T32654] memory+swap: usage 172064kB, limit 9007199254740988kB, failcnt 0 [ 2143.026051][T32654] kmem: usage 18692kB, limit 9007199254740988kB, failcnt 0 [ 2143.026066][T32654] Memory cgroup stats for /syz3: [ 2143.027894][T32654] cache 31027200 [ 2143.027903][T32654] rss 57344 [ 2143.027907][T32654] rss_huge 0 [ 2143.027911][T32654] shmem 31023104 [ 2143.027915][T32654] mapped_file 2826240 [ 2143.027919][T32654] dirty 0 [ 2143.027922][T32654] writeback 0 [ 2143.027926][T32654] workingset_refault_anon 5070 [ 2143.027930][T32654] workingset_refault_file 46071 [ 2143.027934][T32654] swap 125861888 [ 2143.027938][T32654] swapcached 700121088 [ 2143.027942][T32654] pgpgin 1216566 [ 2143.027946][T32654] pgpgout 1222246 [ 2143.028740][T32654] pgfault 735583 [ 2143.028752][T32654] pgmajfault 4146 [ 2143.028759][T32654] inactive_anon 15863808 [ 2143.028768][T32654] active_anon 15323136 [ 2143.028775][T32654] inactive_file 0 [ 2143.028782][T32654] active_file 4096 [ 2143.028789][T32654] unevictable 0 [ 2143.028796][T32654] hierarchical_memory_limit 50331648 [ 2143.028804][T32654] hierarchical_memsw_limit 9223372036854771712 [ 2143.028812][T32654] total_cache 31027200 [ 2143.028819][T32654] total_rss 57344 [ 2143.028826][T32654] total_rss_huge 0 [ 2143.031854][T32654] total_shmem 31023104 [ 2143.031864][T32654] total_mapped_file 2826240 [ 2143.031872][T32654] total_dirty 0 [ 2143.031880][T32654] total_writeback 0 [ 2143.031887][T32654] total_workingset_refault_anon 5072 [ 2143.031895][T32654] total_workingset_refault_file 47207 [ 2143.031903][T32654] total_swap 125861888 [ 2143.031911][T32654] total_swapcached 700153856 [ 2143.031919][T32654] total_pgpgin 1217763 [ 2143.031926][T32654] total_pgpgout 1223443 [ 2143.031933][T32654] total_pgfault 735696 [ 2143.031941][T32654] total_pgmajfault 4150 [ 2143.051614][T32654] total_inactive_anon 15863808 [ 2143.051624][T32654] total_active_anon 15323136 [ 2143.051629][T32654] total_inactive_file 0 [ 2143.051633][T32654] total_active_file 4096 [ 2143.051637][T32654] total_unevictable 0 [ 2143.051641][T32654] anon_cost 0 [ 2143.051645][T32654] file_cost 0 [ 2143.051649][T32654] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7737,pid=32654,uid=0 [ 2143.051725][T32654] Memory cgroup out of memory: Killed process 32654 (syz.3.7737) total-vm:104084kB, anon-rss:1144kB, file-rss:53768kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 2143.934934][T32563] syz.3.7722 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2143.934960][T32563] CPU: 0 UID: 0 PID: 32563 Comm: syz.3.7722 Tainted: G L syzkaller #0 PREEMPT(full) [ 2143.934976][T32563] Tainted: [L]=SOFTLOCKUP [ 2143.934980][T32563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2143.934987][T32563] Call Trace: [ 2143.934992][T32563] [ 2143.934998][T32563] dump_stack_lvl+0xe8/0x150 [ 2143.935018][T32563] dump_header+0xd3/0x4b0 [ 2143.935037][T32563] oom_kill_process+0x3ab/0x9e0 [ 2143.935056][T32563] out_of_memory+0x1064/0x1480 [ 2143.935070][T32563] ? try_charge_memcg+0xc32/0x15e0 [ 2143.935091][T32563] ? __pfx_out_of_memory+0x10/0x10 [ 2143.935105][T32563] ? do_raw_spin_unlock+0xf5/0x200 [ 2143.935127][T32563] try_charge_memcg+0xcdf/0x15e0 [ 2143.935152][T32563] ? __pfx_try_charge_memcg+0x10/0x10 [ 2143.935166][T32563] ? lock_acquire+0x115/0x350 [ 2143.935188][T32563] ? charge_memcg+0x47/0x310 [ 2143.935204][T32563] charge_memcg+0x1dd/0x310 [ 2143.935220][T32563] __mem_cgroup_charge+0x25/0x80 [ 2143.935234][T32563] filemap_add_folio+0x140/0x4e0 [ 2143.935253][T32563] __filemap_get_folio_mpol+0x4ff/0x1000 [ 2143.935274][T32563] filemap_fault+0xa84/0x13b0 [ 2143.935295][T32563] ? __pfx_filemap_fault+0x10/0x10 [ 2143.935310][T32563] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2143.935323][T32563] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 2143.935343][T32563] __do_fault+0x138/0x2a0 [ 2143.935356][T32563] ? do_pte_missing+0x140c/0x34b0 [ 2143.935368][T32563] do_pte_missing+0x2215/0x34b0 [ 2143.935387][T32563] ? handle_mm_fault+0xf1/0x3750 [ 2143.935405][T32563] handle_mm_fault+0x1a53/0x3750 [ 2143.935453][T32563] ? handle_mm_fault+0xf1/0x3750 [ 2143.935475][T32563] ? __pfx_handle_mm_fault+0x10/0x10 [ 2143.935492][T32563] ? follow_page_pte+0x73b/0xf10 [ 2143.935513][T32563] ? __pfx_follow_page_pte+0x10/0x10 [ 2143.935536][T32563] __get_user_pages+0x1675/0x2750 [ 2143.935569][T32563] get_dump_page+0x1b5/0x410 [ 2143.935586][T32563] ? __pfx_get_dump_page+0x10/0x10 [ 2143.935600][T32563] ? dump_user_range+0x1c5/0x12c0 [ 2143.935615][T32563] ? down_read_killable+0x1bb/0x3b0 [ 2143.935630][T32563] ? iov_iter_bvec+0xb8/0x180 [ 2143.935647][T32563] dump_user_range+0x20a/0x12c0 [ 2143.935670][T32563] ? __pfx_dump_user_range+0x10/0x10 [ 2143.935689][T32563] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2143.935704][T32563] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2143.935718][T32563] ? elf_core_dump+0x2ccb/0x4050 [ 2143.935738][T32563] elf_core_dump+0x387b/0x4050 [ 2143.935764][T32563] ? __pfx_elf_core_dump+0x10/0x10 [ 2143.935790][T32563] ? mas_ascend+0x2f9/0x8b0 [ 2143.935822][T32563] ? __lock_acquire+0x747/0x2de0 [ 2143.935874][T32563] ? lock_acquire+0x115/0x350 [ 2143.935896][T32563] coredump_write+0x1290/0x1960 [ 2143.935925][T32563] ? __pfx_coredump_write+0x10/0x10 [ 2143.935950][T32563] ? unshare_files+0xab/0x140 [ 2143.935969][T32563] vfs_coredump+0x3764/0x4520 [ 2143.935996][T32563] ? __pfx_vfs_coredump+0x10/0x10 [ 2143.936012][T32563] ? is_bpf_text_address+0x26/0x2b0 [ 2143.936030][T32563] ? __lock_acquire+0x747/0x2de0 [ 2143.936046][T32563] ? __lock_acquire+0x747/0x2de0 [ 2143.936066][T32563] ? lock_acquire+0x115/0x350 [ 2143.936082][T32563] ? lock_acquire+0x115/0x350 [ 2143.936099][T32563] ? is_bpf_text_address+0x26/0x2b0 [ 2143.936116][T32563] ? is_bpf_text_address+0x292/0x2b0 [ 2143.936129][T32563] ? is_bpf_text_address+0x26/0x2b0 [ 2143.936145][T32563] ? kernel_text_address+0xa5/0xe0 [ 2143.936159][T32563] ? __kernel_text_address+0xd/0x30 [ 2143.936174][T32563] ? unwind_get_return_address+0x4d/0x90 [ 2143.936197][T32563] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2143.936219][T32563] ? arch_stack_walk+0xfb/0x150 [ 2143.936241][T32563] ? stack_trace_save+0xa9/0x100 [ 2143.936252][T32563] ? __pfx_stack_trace_save+0x10/0x10 [ 2143.936264][T32563] ? stack_depot_save_flags+0x33/0x7f0 [ 2143.936279][T32563] ? __lock_acquire+0x6c0/0x2de0 [ 2143.936293][T32563] ? kasan_save_track+0x4f/0x80 [ 2143.936305][T32563] ? kasan_save_track+0x3e/0x80 [ 2143.936317][T32563] ? kasan_save_free_info+0x40/0x50 [ 2143.936327][T32563] ? __kasan_slab_free+0x5c/0x80 [ 2143.936339][T32563] ? kmem_cache_free+0x182/0x650 [ 2143.936351][T32563] ? get_signal+0x9e7/0x12c0 [ 2143.936364][T32563] ? arch_do_signal_or_restart+0xbb/0x860 [ 2143.936379][T32563] ? irqentry_exit+0x2c0/0x920 [ 2143.936390][T32563] ? asm_exc_page_fault+0x26/0x30 [ 2143.936429][T32563] ? proc_coredump_connector+0x187/0x4e0 [ 2143.936452][T32563] ? _raw_spin_unlock_irq+0x23/0x50 [ 2143.936465][T32563] get_signal+0x1094/0x12c0 [ 2143.936491][T32563] arch_do_signal_or_restart+0xbb/0x860 [ 2143.936509][T32563] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2143.936537][T32563] irqentry_exit+0x2c0/0x920 [ 2143.936549][T32563] ? trace_irq_disable+0x3b/0x140 [ 2143.936565][T32563] asm_exc_page_fault+0x26/0x30 [ 2143.936575][T32563] RIP: 0023:0x0 [ 2143.936586][T32563] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2143.936592][T32563] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2143.936603][T32563] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2143.936611][T32563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2143.936617][T32563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2143.936623][T32563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2143.936630][T32563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2143.936647][T32563] [ 2144.100371][T32563] memory: usage 49152kB, limit 49152kB, failcnt 130134 [ 2144.100391][T32563] memory+swap: usage 172064kB, limit 9007199254740988kB, failcnt 0 [ 2144.100404][T32563] kmem: usage 18684kB, limit 9007199254740988kB, failcnt 0 [ 2144.100418][T32563] Memory cgroup stats for /syz3: [ 2144.127658][T32563] cache 31023104 [ 2144.127677][T32563] rss 69632 [ 2144.127684][T32563] rss_huge 0 [ 2144.127691][T32563] shmem 31023104 [ 2144.127698][T32563] mapped_file 2826240 [ 2144.127706][T32563] dirty 0 [ 2144.127713][T32563] writeback 0 [ 2144.127720][T32563] workingset_refault_anon 5070 [ 2144.127728][T32563] workingset_refault_file 46071 [ 2144.127736][T32563] swap 125861888 [ 2144.127743][T32563] swapcached 700121088 [ 2144.127750][T32563] pgpgin 1216569 [ 2144.140631][T32563] pgpgout 1222247 [ 2144.140641][T32563] pgfault 735595 [ 2144.140646][T32563] pgmajfault 4146 [ 2144.140650][T32563] inactive_anon 15642624 [ 2144.140654][T32563] active_anon 15556608 [ 2144.140658][T32563] inactive_file 0 [ 2144.140662][T32563] active_file 0 [ 2144.140666][T32563] unevictable 0 [ 2144.140670][T32563] hierarchical_memory_limit 50331648 [ 2144.140674][T32563] hierarchical_memsw_limit 9223372036854771712 [ 2144.140679][T32563] total_cache 31023104 [ 2144.140683][T32563] total_rss 69632 [ 2144.140687][T32563] total_rss_huge 0 [ 2144.140690][T32563] total_shmem 31023104 [ 2144.140694][T32563] total_mapped_file 2826240 [ 2144.140698][T32563] total_dirty 0 [ 2144.140702][T32563] total_writeback 0 [ 2144.140706][T32563] total_workingset_refault_anon 5072 [ 2144.140710][T32563] total_workingset_refault_file 47207 [ 2144.140715][T32563] total_swap 125861888 [ 2144.140718][T32563] total_swapcached 700153856 [ 2144.140725][T32563] total_pgpgin 1217766 [ 2144.147566][T32563] total_pgpgout 1223444 [ 2144.147580][T32563] total_pgfault 735708 [ 2144.147588][T32563] total_pgmajfault 4150 [ 2144.147595][T32563] total_inactive_anon 15642624 [ 2144.147603][T32563] total_active_anon 15556608 [ 2144.147611][T32563] total_inactive_file 0 [ 2144.147618][T32563] total_active_file 0 [ 2144.147625][T32563] total_unevictable 0 [ 2144.147633][T32563] anon_cost 0 [ 2144.147640][T32563] file_cost 0 [ 2144.147649][T32563] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7722,pid=32563,uid=0 [ 2144.156078][T32563] Memory cgroup out of memory: Killed process 32563 (syz.3.7722) total-vm:104084kB, anon-rss:1144kB, file-rss:53768kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 2144.349986][T30931] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2144.658608][T30931] usb 5-1: Using ep0 maxpacket: 16 [ 2144.783360][T30931] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2144.783393][T30931] usb 5-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 2144.802082][T30931] usb 5-1: config 1 has an invalid interface number: 232 but max is 0 [ 2144.802100][T30931] usb 5-1: config 1 has no interface number 0 [ 2144.802125][T30931] usb 5-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 2144.802148][T30931] usb 5-1: config 1 interface 232 has no altsetting 0 [ 2144.860353][ T430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2144.863218][T30931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.863236][T30931] usb 5-1: Product: syz [ 2144.863244][T30931] usb 5-1: Manufacturer: syz [ 2144.863252][T30931] usb 5-1: SerialNumber: syz [ 2144.921889][ T430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2145.034159][ T428] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2145.053637][ T430] netlink: 'syz.1.7784': attribute type 3 has an invalid length. [ 2145.053653][ T430] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7784'. [ 2145.309120][ T428] netlink: 'syz.4.7783': attribute type 3 has an invalid length. [ 2145.309139][ T428] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7783'. [ 2145.700332][ T438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7785'. [ 2145.818563][ T439] netlink: 'syz.7.7785': attribute type 10 has an invalid length. [ 2146.043387][T30931] hub 5-1:1.232: bad descriptor, ignoring hub [ 2146.043417][T30931] hub 5-1:1.232: probe with driver hub failed with error -5 [ 2146.155864][T30931] option 5-1:1.232: GSM modem (1-port) converter detected [ 2146.207322][T30931] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 2146.298637][T30931] usb 5-1: USB disconnect, device number 116 [ 2146.399682][T30931] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 2146.400098][T30931] option 5-1:1.232: device disconnected [ 2146.747211][ T448] fuse: Unknown parameter '0x0000000000000007' [ 2146.781086][ T448] fuse: Unknown parameter '0x0000000000000008' [ 2146.902469][ T454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7788'. [ 2146.931450][ T455] netlink: 'syz.5.7789': attribute type 10 has an invalid length. [ 2147.334419][T12756] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2147.485729][T12756] usb 5-1: Using ep0 maxpacket: 32 [ 2147.486307][T12756] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2147.487376][T12756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2147.487396][T12756] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2147.487409][T12756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2147.487423][T12756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2147.532394][T12756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.532412][T12756] usb 5-1: Product: syz [ 2147.532420][T12756] usb 5-1: Manufacturer: syz [ 2147.532429][T12756] usb 5-1: SerialNumber: syz [ 2147.611552][T12756] usb 5-1: config 0 descriptor?? [ 2147.620076][ T458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2147.665577][T12756] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input94 [ 2147.785753][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 2147.873357][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 2148.222289][ T463] netlink: 'syz.1.7792': attribute type 10 has an invalid length. [ 2148.243745][ T464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7791'. [ 2148.300631][ T464] netlink: 'syz.5.7791': attribute type 10 has an invalid length. [ 2148.317571][T30931] usb 5-1: USB disconnect, device number 117 [ 2148.317678][ C0] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 2149.355493][ T479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7793'. [ 2149.584912][ T482] tap0: tun_chr_ioctl cmd 1074025677 [ 2149.585001][ T482] tap0: linktype set to 774 [ 2149.878496][T30932] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2150.059970][T30932] usb 5-1: Using ep0 maxpacket: 32 [ 2150.061546][T30932] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2150.087485][T30932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2150.087507][T30932] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2150.087521][T30932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2150.087534][T30932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2150.093712][T30932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.093729][T30932] usb 5-1: Product: syz [ 2150.093744][T30932] usb 5-1: Manufacturer: syz [ 2150.093752][T30932] usb 5-1: SerialNumber: syz [ 2150.175733][T30932] usb 5-1: config 0 descriptor?? [ 2150.182107][ T477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2150.236073][T30932] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input95 [ 2150.293987][T12756] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2150.360079][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 2150.454880][T12756] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2150.456089][T12756] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2150.456117][T12756] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2150.456134][T12756] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2150.458355][T12756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.458379][T12756] usb 4-1: Product: syz [ 2150.458395][T12756] usb 4-1: Manufacturer: syz [ 2150.458411][T12756] usb 4-1: SerialNumber: syz [ 2150.511098][T12756] usb 4-1: config 0 descriptor?? [ 2150.542845][ T487] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2150.542964][ T487] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2150.585018][T12756] usb 4-1: ucan: probing device on interface #0 [ 2151.077354][T30932] usb 5-1: USB disconnect, device number 118 [ 2151.077430][ C0] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 2151.077480][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 2151.243833][T12756] ucan 4-1:0.0 can0: registered device [ 2151.383146][ T489] nvme_fabrics: missing parameter 'transport=%s' [ 2151.383166][ T489] nvme_fabrics: missing parameter 'nqn=%s' [ 2151.579304][T12756] ucan 4-1:0.0 can0: firmware string: unknown [ 2151.646409][T12756] usb 4-1: USB disconnect, device number 108 [ 2152.080771][ T500] nvme_fabrics: missing parameter 'transport=%s' [ 2152.081181][ T500] nvme_fabrics: missing parameter 'nqn=%s' [ 2152.303815][ T514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7800'. [ 2155.975746][ T421] syz.4.7781 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2155.976184][ T421] CPU: 0 UID: 0 PID: 421 Comm: syz.4.7781 Tainted: G L syzkaller #0 PREEMPT(full) [ 2155.976200][ T421] Tainted: [L]=SOFTLOCKUP [ 2155.976205][ T421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2155.976212][ T421] Call Trace: [ 2155.976217][ T421] [ 2155.976223][ T421] dump_stack_lvl+0xe8/0x150 [ 2155.976244][ T421] dump_header+0xd3/0x4b0 [ 2155.976261][ T421] oom_kill_process+0x3ab/0x9e0 [ 2155.976283][ T421] out_of_memory+0x1064/0x1480 [ 2155.976298][ T421] ? try_charge_memcg+0xc32/0x15e0 [ 2155.976320][ T421] ? __pfx_out_of_memory+0x10/0x10 [ 2155.976333][ T421] ? do_raw_spin_unlock+0xf5/0x200 [ 2155.976355][ T421] try_charge_memcg+0xcdf/0x15e0 [ 2155.976380][ T421] ? __pfx_try_charge_memcg+0x10/0x10 [ 2155.976408][ T421] ? charge_memcg+0x47/0x310 [ 2155.976424][ T421] charge_memcg+0x1dd/0x310 [ 2155.976439][ T421] __mem_cgroup_charge+0x25/0x80 [ 2155.976453][ T421] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2155.976470][ T421] ? filemap_get_entry+0xcd/0x3f0 [ 2155.976491][ T421] ? __pfx_filemap_get_entry+0x10/0x10 [ 2155.976506][ T421] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2155.976525][ T421] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2155.976544][ T421] shmem_get_folio_gfp+0x5da/0x16d0 [ 2155.976568][ T421] shmem_write_begin+0x16c/0x330 [ 2155.976588][ T421] generic_perform_write+0x2d5/0x8f0 [ 2155.976606][ T421] ? __pfx_generic_perform_write+0x10/0x10 [ 2155.976617][ T421] ? down_write+0x16b/0x200 [ 2155.976630][ T421] ? generic_write_checks_count+0x41a/0x520 [ 2155.976649][ T421] ? file_update_time_flags+0x2d5/0x440 [ 2155.976665][ T421] shmem_file_write_iter+0xf8/0x120 [ 2155.976682][ T421] __kernel_write_iter+0x44a/0x8f0 [ 2155.976697][ T421] ? __pfx___kernel_write_iter+0x10/0x10 [ 2155.976708][ T421] ? get_dump_page+0x1e6/0x410 [ 2155.976727][ T421] ? __asan_memset+0x22/0x50 [ 2155.976739][ T421] ? iov_iter_bvec+0xb8/0x180 [ 2155.976757][ T421] dump_user_range+0xc19/0x12c0 [ 2155.976781][ T421] ? __pfx_dump_user_range+0x10/0x10 [ 2155.976800][ T421] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2155.976814][ T421] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2155.976828][ T421] ? elf_core_dump+0x2ccb/0x4050 [ 2155.976848][ T421] elf_core_dump+0x387b/0x4050 [ 2155.976874][ T421] ? __pfx_elf_core_dump+0x10/0x10 [ 2155.976902][ T421] ? coredump_write+0x394/0x1960 [ 2155.976930][ T421] ? irqentry_exit+0x2c0/0x920 [ 2155.976949][ T421] ? asm_exc_page_fault+0x26/0x30 [ 2155.976966][ T421] ? mas_ascend+0x2f9/0x8b0 [ 2155.976984][ T421] ? __lock_acquire+0x747/0x2de0 [ 2155.977010][ T421] ? lock_acquire+0x115/0x350 [ 2155.977031][ T421] coredump_write+0x1290/0x1960 [ 2155.977055][ T421] ? __pfx_coredump_write+0x10/0x10 [ 2155.977081][ T421] ? unshare_files+0xab/0x140 [ 2155.977099][ T421] vfs_coredump+0x3764/0x4520 [ 2155.977125][ T421] ? __pfx_vfs_coredump+0x10/0x10 [ 2155.977141][ T421] ? is_bpf_text_address+0x26/0x2b0 [ 2155.977159][ T421] ? __lock_acquire+0x747/0x2de0 [ 2155.977175][ T421] ? __lock_acquire+0x747/0x2de0 [ 2155.977188][ T421] ? __lock_acquire+0x747/0x2de0 [ 2155.977206][ T421] ? __lock_acquire+0x747/0x2de0 [ 2155.977224][ T421] ? lock_acquire+0x115/0x350 [ 2155.977241][ T421] ? ktime_get+0x45/0x220 [ 2155.977254][ T421] ? ktime_get+0x45/0x220 [ 2155.977265][ T421] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 2155.977278][ T421] ? ktime_get+0x1f5/0x220 [ 2155.977290][ T421] ? lapic_next_event+0x11/0x20 [ 2155.977302][ T421] ? clockevents_program_event+0x491/0x630 [ 2155.977320][ T421] ? __pfx_clockevents_program_event+0x10/0x10 [ 2155.977334][ T421] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 2155.977362][ T421] ? rcu_is_watching+0x16/0xb0 [ 2155.977377][ T421] ? trace_sched_exit_tp+0x3a/0x130 [ 2155.977394][ T421] ? __schedule+0x17f1/0x58f0 [ 2155.977426][ T421] ? proc_coredump_connector+0x187/0x4e0 [ 2155.977445][ T421] ? preempt_schedule_thunk+0x16/0x40 [ 2155.977463][ T421] get_signal+0x1094/0x12c0 [ 2155.977489][ T421] arch_do_signal_or_restart+0xbb/0x860 [ 2155.977506][ T421] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2155.977534][ T421] irqentry_exit+0x2c0/0x920 [ 2155.977545][ T421] ? trace_irq_disable+0x3b/0x140 [ 2155.977561][ T421] asm_exc_page_fault+0x26/0x30 [ 2155.977571][ T421] RIP: 0023:0x0 [ 2155.977581][ T421] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2155.977588][ T421] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2155.977599][ T421] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2155.977607][ T421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2155.977613][ T421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2155.977619][ T421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2155.977626][ T421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2155.977643][ T421] [ 2156.144013][ T421] memory: usage 49152kB, limit 49152kB, failcnt 97700 [ 2156.144033][ T421] memory+swap: usage 54176kB, limit 9007199254740988kB, failcnt 0 [ 2156.144047][ T421] kmem: usage 6100kB, limit 9007199254740988kB, failcnt 0 [ 2156.144060][ T421] Memory cgroup stats for /syz4: [ 2156.222885][ T421] cache 44027904 [ 2156.222900][ T421] rss 45056 [ 2156.222908][ T421] rss_huge 0 [ 2156.222915][ T421] shmem 44027904 [ 2156.222921][ T421] mapped_file 0 [ 2156.222929][ T421] dirty 0 [ 2156.222935][ T421] writeback 0 [ 2156.222942][ T421] workingset_refault_anon 4400 [ 2156.222950][ T421] workingset_refault_file 50331 [ 2156.222957][ T421] swap 5144576 [ 2156.222965][ T421] swapcached 398286848 [ 2156.280884][ T421] pgpgin 1233621 [ 2156.280893][ T421] pgpgout 1233092 [ 2156.280897][ T421] pgfault 723493 [ 2156.280902][ T421] pgmajfault 1527 [ 2156.280906][ T421] inactive_anon 39362560 [ 2156.280910][ T421] active_anon 4722688 [ 2156.280914][ T421] inactive_file 0 [ 2156.280918][ T421] active_file 0 [ 2156.280922][ T421] unevictable 0 [ 2156.280926][ T421] hierarchical_memory_limit 50331648 [ 2156.280930][ T421] hierarchical_memsw_limit 9223372036854771712 [ 2156.280935][ T421] total_cache 44027904 [ 2156.280939][ T421] total_rss 45056 [ 2156.280943][ T421] total_rss_huge 0 [ 2156.280947][ T421] total_shmem 44027904 [ 2156.280954][ T421] total_mapped_file 0 [ 2156.280958][ T421] total_dirty 0 [ 2156.280962][ T421] total_writeback 0 [ 2156.280966][ T421] total_workingset_refault_anon 4400 [ 2156.304138][ T421] total_workingset_refault_file 51242 [ 2156.304153][ T421] total_swap 5144576 [ 2156.304160][ T421] total_swapcached 398290944 [ 2156.304168][ T421] total_pgpgin 1234570 [ 2156.304176][ T421] total_pgpgout 1234041 [ 2156.304184][ T421] total_pgfault 723586 [ 2156.304192][ T421] total_pgmajfault 1527 [ 2156.304200][ T421] total_inactive_anon 39362560 [ 2156.304208][ T421] total_active_anon 4722688 [ 2156.304216][ T421] total_inactive_file 0 [ 2156.304223][ T421] total_active_file 0 [ 2156.336568][ T421] total_unevictable 0 [ 2156.336583][ T421] anon_cost 0 [ 2156.336591][ T421] file_cost 0 [ 2156.336599][ T421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7781,pid=421,uid=0 [ 2156.380229][ T421] Memory cgroup out of memory: Killed process 421 (syz.4.7781) total-vm:104096kB, anon-rss:1184kB, file-rss:54884kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 2156.750249][ T520] syz.5.7801 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2156.750276][ T520] CPU: 0 UID: 0 PID: 520 Comm: syz.5.7801 Tainted: G L syzkaller #0 PREEMPT(full) [ 2156.750291][ T520] Tainted: [L]=SOFTLOCKUP [ 2156.750296][ T520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2156.750302][ T520] Call Trace: [ 2156.750308][ T520] [ 2156.750313][ T520] dump_stack_lvl+0xe8/0x150 [ 2156.750334][ T520] dump_header+0xd3/0x4b0 [ 2156.750350][ T520] oom_kill_process+0x3ab/0x9e0 [ 2156.750369][ T520] out_of_memory+0x1064/0x1480 [ 2156.750383][ T520] ? try_charge_memcg+0xc32/0x15e0 [ 2156.750404][ T520] ? __pfx_out_of_memory+0x10/0x10 [ 2156.750417][ T520] ? do_raw_spin_unlock+0xf5/0x200 [ 2156.750440][ T520] try_charge_memcg+0xcdf/0x15e0 [ 2156.750464][ T520] ? __pfx_try_charge_memcg+0x10/0x10 [ 2156.750495][ T520] ? charge_memcg+0x47/0x310 [ 2156.750511][ T520] charge_memcg+0x1dd/0x310 [ 2156.750527][ T520] __mem_cgroup_charge+0x25/0x80 [ 2156.750541][ T520] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2156.750557][ T520] ? filemap_get_entry+0xcd/0x3f0 [ 2156.750578][ T520] ? __pfx_filemap_get_entry+0x10/0x10 [ 2156.750593][ T520] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2156.750612][ T520] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2156.750631][ T520] shmem_get_folio_gfp+0x5da/0x16d0 [ 2156.750655][ T520] shmem_write_begin+0x16c/0x330 [ 2156.750674][ T520] generic_perform_write+0x2d5/0x8f0 [ 2156.750693][ T520] ? __pfx_generic_perform_write+0x10/0x10 [ 2156.750703][ T520] ? down_write+0x16b/0x200 [ 2156.750716][ T520] ? generic_write_checks_count+0x41a/0x520 [ 2156.750734][ T520] ? file_update_time_flags+0x2d5/0x440 [ 2156.750750][ T520] shmem_file_write_iter+0xf8/0x120 [ 2156.750767][ T520] __kernel_write_iter+0x44a/0x8f0 [ 2156.750782][ T520] ? __pfx___kernel_write_iter+0x10/0x10 [ 2156.750793][ T520] ? get_dump_page+0x1e6/0x410 [ 2156.750811][ T520] ? __asan_memset+0x22/0x50 [ 2156.750823][ T520] ? iov_iter_bvec+0xb8/0x180 [ 2156.750841][ T520] dump_user_range+0xc19/0x12c0 [ 2156.750865][ T520] ? __pfx_dump_user_range+0x10/0x10 [ 2156.750883][ T520] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2156.750897][ T520] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2156.750912][ T520] ? elf_core_dump+0x2ccb/0x4050 [ 2156.750932][ T520] elf_core_dump+0x387b/0x4050 [ 2156.750958][ T520] ? __pfx_elf_core_dump+0x10/0x10 [ 2156.750972][ T520] ? coredump_write+0x394/0x1960 [ 2156.750987][ T520] ? irqentry_exit+0x2c0/0x920 [ 2156.750998][ T520] ? asm_exc_page_fault+0x26/0x30 [ 2156.751014][ T520] ? mas_ascend+0x2f9/0x8b0 [ 2156.751032][ T520] ? __lock_acquire+0x747/0x2de0 [ 2156.751058][ T520] ? lock_acquire+0x115/0x350 [ 2156.751079][ T520] coredump_write+0x1290/0x1960 [ 2156.751102][ T520] ? __pfx_coredump_write+0x10/0x10 [ 2156.751127][ T520] ? unshare_files+0xab/0x140 [ 2156.751145][ T520] vfs_coredump+0x3764/0x4520 [ 2156.751171][ T520] ? __pfx_vfs_coredump+0x10/0x10 [ 2156.751186][ T520] ? is_bpf_text_address+0x26/0x2b0 [ 2156.751205][ T520] ? __lock_acquire+0x747/0x2de0 [ 2156.751220][ T520] ? __lock_acquire+0x747/0x2de0 [ 2156.751234][ T520] ? __lock_acquire+0x747/0x2de0 [ 2156.751251][ T520] ? __lock_acquire+0x747/0x2de0 [ 2156.751269][ T520] ? lock_acquire+0x115/0x350 [ 2156.751286][ T520] ? ktime_get+0x45/0x220 [ 2156.751299][ T520] ? ktime_get+0x45/0x220 [ 2156.751309][ T520] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 2156.751322][ T520] ? ktime_get+0x1f5/0x220 [ 2156.751334][ T520] ? lapic_next_event+0x11/0x20 [ 2156.751346][ T520] ? clockevents_program_event+0x491/0x630 [ 2156.751363][ T520] ? __pfx_clockevents_program_event+0x10/0x10 [ 2156.751377][ T520] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 2156.751401][ T520] ? finish_task_switch+0x40e/0xc60 [ 2156.751415][ T520] ? lockdep_hardirqs_on+0x7b/0x110 [ 2156.751428][ T520] ? rcu_is_watching+0x16/0xb0 [ 2156.751442][ T520] ? trace_sched_exit_tp+0x3a/0x130 [ 2156.751456][ T520] ? __schedule+0x17f1/0x58f0 [ 2156.751492][ T520] ? proc_coredump_connector+0x187/0x4e0 [ 2156.751512][ T520] ? preempt_schedule_thunk+0x16/0x40 [ 2156.751528][ T520] get_signal+0x1094/0x12c0 [ 2156.751554][ T520] arch_do_signal_or_restart+0xbb/0x860 [ 2156.751572][ T520] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2156.751599][ T520] irqentry_exit+0x2c0/0x920 [ 2156.751611][ T520] ? trace_irq_disable+0x3b/0x140 [ 2156.751627][ T520] asm_exc_page_fault+0x26/0x30 [ 2156.751638][ T520] RIP: 0023:0x0 [ 2156.751647][ T520] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2156.751653][ T520] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2156.751664][ T520] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2156.751671][ T520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2156.751678][ T520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2156.751685][ T520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2156.751692][ T520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2156.751708][ T520] [ 2156.751713][ T520] memory: usage 49152kB, limit 49152kB, failcnt 93544 [ 2156.751721][ T520] memory+swap: usage 83144kB, limit 9007199254740988kB, failcnt 0 [ 2156.751729][ T520] kmem: usage 4816kB, limit 9007199254740988kB, failcnt 0 [ 2156.751736][ T520] Memory cgroup stats for /syz5: [ 2156.751809][ T520] cache 45395968 [ 2156.751814][ T520] rss 0 [ 2156.751818][ T520] rss_huge 0 [ 2156.751822][ T520] shmem 45395968 [ 2156.751826][ T520] mapped_file 0 [ 2156.751830][ T520] dirty 0 [ 2156.751833][ T520] writeback 0 [ 2156.751837][ T520] workingset_refault_anon 354 [ 2156.751842][ T520] workingset_refault_file 28950 [ 2156.751846][ T520] swap 34807808 [ 2156.751850][ T520] swapcached 364433408 [ 2156.751854][ T520] pgpgin 638111 [ 2156.751858][ T520] pgpgout 628560 [ 2156.751862][ T520] pgfault 455959 [ 2156.751866][ T520] pgmajfault 523 [ 2156.751870][ T520] inactive_anon 16379904 [ 2156.751874][ T520] active_anon 29020160 [ 2156.751878][ T520] inactive_file 0 [ 2156.751882][ T520] active_file 0 [ 2156.751886][ T520] unevictable 0 [ 2156.751890][ T520] hierarchical_memory_limit 50331648 [ 2156.751894][ T520] hierarchical_memsw_limit 9223372036854771712 [ 2156.751899][ T520] total_cache 45395968 [ 2156.751903][ T520] total_rss 0 [ 2156.751907][ T520] total_rss_huge 0 [ 2156.751911][ T520] total_shmem 45395968 [ 2156.751915][ T520] total_mapped_file 0 [ 2156.751919][ T520] total_dirty 0 [ 2156.751922][ T520] total_writeback 0 [ 2156.751926][ T520] total_workingset_refault_anon 354 [ 2156.751930][ T520] total_workingset_refault_file 28950 [ 2156.751935][ T520] total_swap 34807808 [ 2156.751939][ T520] total_swapcached 364433408 [ 2156.751943][ T520] total_pgpgin 638111 [ 2156.751946][ T520] total_pgpgout 628560 [ 2156.751950][ T520] total_pgfault 455959 [ 2156.751954][ T520] total_pgmajfault 523 [ 2156.751958][ T520] total_inactive_anon 16379904 [ 2156.751962][ T520] total_active_anon 29020160 [ 2156.751966][ T520] total_inactive_file 0 [ 2156.751970][ T520] total_active_file 0 [ 2156.751974][ T520] total_unevictable 0 [ 2156.751978][ T520] anon_cost 0 [ 2156.751982][ T520] file_cost 0 [ 2156.751986][ T520] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7777,pid=391,uid=0 [ 2156.752041][ T520] Memory cgroup out of memory: Killed process 391 (syz.5.7777) total-vm:104096kB, anon-rss:1144kB, file-rss:53640kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 2156.854347][ T522] syz.1.7802 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2156.854382][ T522] CPU: 0 UID: 0 PID: 522 Comm: syz.1.7802 Tainted: G L syzkaller #0 PREEMPT(full) [ 2156.854409][ T522] Tainted: [L]=SOFTLOCKUP [ 2156.854417][ T522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2156.854429][ T522] Call Trace: [ 2156.854437][ T522] [ 2156.854446][ T522] dump_stack_lvl+0xe8/0x150 [ 2156.854478][ T522] dump_header+0xd3/0x4b0 [ 2156.854507][ T522] oom_kill_process+0x3ab/0x9e0 [ 2156.854539][ T522] out_of_memory+0x1064/0x1480 [ 2156.854564][ T522] ? try_charge_memcg+0xc32/0x15e0 [ 2156.854603][ T522] ? __pfx_out_of_memory+0x10/0x10 [ 2156.854627][ T522] ? do_raw_spin_unlock+0xf5/0x200 [ 2156.854665][ T522] try_charge_memcg+0xcdf/0x15e0 [ 2156.854710][ T522] ? __pfx_try_charge_memcg+0x10/0x10 [ 2156.854755][ T522] ? charge_memcg+0x47/0x310 [ 2156.854784][ T522] charge_memcg+0x1dd/0x310 [ 2156.854812][ T522] __mem_cgroup_charge+0x25/0x80 [ 2156.854843][ T522] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2156.854871][ T522] ? filemap_get_entry+0xcd/0x3f0 [ 2156.854908][ T522] ? __pfx_filemap_get_entry+0x10/0x10 [ 2156.854935][ T522] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2156.854967][ T522] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2156.855002][ T522] shmem_get_folio_gfp+0x5da/0x16d0 [ 2156.855047][ T522] shmem_write_begin+0x16c/0x330 [ 2156.855081][ T522] generic_perform_write+0x2d5/0x8f0 [ 2156.855115][ T522] ? __pfx_generic_perform_write+0x10/0x10 [ 2156.855133][ T522] ? down_write+0x16b/0x200 [ 2156.855157][ T522] ? generic_write_checks_count+0x41a/0x520 [ 2156.855188][ T522] ? file_update_time_flags+0x2d5/0x440 [ 2156.855215][ T522] shmem_file_write_iter+0xf8/0x120 [ 2156.855247][ T522] __kernel_write_iter+0x44a/0x8f0 [ 2156.855274][ T522] ? __pfx___kernel_write_iter+0x10/0x10 [ 2156.855293][ T522] ? get_dump_page+0x1e6/0x410 [ 2156.855326][ T522] ? __asan_memset+0x22/0x50 [ 2156.855348][ T522] ? iov_iter_bvec+0xb8/0x180 [ 2156.855378][ T522] dump_user_range+0xc19/0x12c0 [ 2156.855420][ T522] ? __pfx_dump_user_range+0x10/0x10 [ 2156.855455][ T522] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2156.855479][ T522] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2156.855505][ T522] ? elf_core_dump+0x2ccb/0x4050 [ 2156.855540][ T522] elf_core_dump+0x387b/0x4050 [ 2156.855587][ T522] ? __pfx_elf_core_dump+0x10/0x10 [ 2156.855628][ T522] ? mas_ascend+0x2f9/0x8b0 [ 2156.855660][ T522] ? __lock_acquire+0x747/0x2de0 [ 2156.855707][ T522] ? lock_acquire+0x115/0x350 [ 2156.855745][ T522] coredump_write+0x1290/0x1960 [ 2156.855788][ T522] ? __pfx_coredump_write+0x10/0x10 [ 2156.855857][ T522] ? unshare_files+0xab/0x140 [ 2156.855888][ T522] vfs_coredump+0x3764/0x4520 [ 2156.855937][ T522] ? __pfx_vfs_coredump+0x10/0x10 [ 2156.855965][ T522] ? is_bpf_text_address+0x26/0x2b0 [ 2156.855997][ T522] ? __lock_acquire+0x747/0x2de0 [ 2156.856025][ T522] ? __lock_acquire+0x747/0x2de0 [ 2156.856063][ T522] ? lock_acquire+0x115/0x350 [ 2156.856090][ T522] ? lock_acquire+0x115/0x350 [ 2156.856121][ T522] ? is_bpf_text_address+0x26/0x2b0 [ 2156.856151][ T522] ? is_bpf_text_address+0x292/0x2b0 [ 2156.856176][ T522] ? is_bpf_text_address+0x26/0x2b0 [ 2156.856204][ T522] ? kernel_text_address+0xa5/0xe0 [ 2156.856227][ T522] ? __kernel_text_address+0xd/0x30 [ 2156.856249][ T522] ? unwind_get_return_address+0x4d/0x90 [ 2156.856272][ T522] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2156.856293][ T522] ? arch_stack_walk+0xfb/0x150 [ 2156.856328][ T522] ? stack_trace_save+0xa9/0x100 [ 2156.856348][ T522] ? __pfx_stack_trace_save+0x10/0x10 [ 2156.856370][ T522] ? stack_depot_save_flags+0x33/0x7f0 [ 2156.856396][ T522] ? __lock_acquire+0x6c0/0x2de0 [ 2156.856421][ T522] ? kasan_save_track+0x4f/0x80 [ 2156.856443][ T522] ? kasan_save_track+0x3e/0x80 [ 2156.856465][ T522] ? kasan_save_free_info+0x40/0x50 [ 2156.856483][ T522] ? __kasan_slab_free+0x5c/0x80 [ 2156.856504][ T522] ? kmem_cache_free+0x182/0x650 [ 2156.856525][ T522] ? get_signal+0x9e7/0x12c0 [ 2156.856547][ T522] ? arch_do_signal_or_restart+0xbb/0x860 [ 2156.856573][ T522] ? irqentry_exit+0x2c0/0x920 [ 2156.856594][ T522] ? asm_exc_page_fault+0x26/0x30 [ 2156.856653][ T522] ? proc_coredump_connector+0x187/0x4e0 [ 2156.856691][ T522] ? _raw_spin_unlock_irq+0x23/0x50 [ 2156.856714][ T522] get_signal+0x1094/0x12c0 [ 2156.856761][ T522] arch_do_signal_or_restart+0xbb/0x860 [ 2156.856792][ T522] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2156.856841][ T522] irqentry_exit+0x2c0/0x920 [ 2156.856860][ T522] ? trace_irq_disable+0x3b/0x140 [ 2156.856886][ T522] asm_exc_page_fault+0x26/0x30 [ 2156.856905][ T522] RIP: 0023:0x0 [ 2156.856919][ T522] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2156.856929][ T522] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2156.856940][ T522] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2156.856947][ T522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2156.856954][ T522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2156.856960][ T522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2156.856966][ T522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2156.856983][ T522] [ 2156.856988][ T522] memory: usage 49152kB, limit 49152kB, failcnt 121713 [ 2156.856996][ T522] memory+swap: usage 62224kB, limit 9007199254740988kB, failcnt 0 [ 2156.857003][ T522] kmem: usage 7380kB, limit 9007199254740988kB, failcnt 0 [ 2156.857010][ T522] Memory cgroup stats for /syz1: [ 2156.857085][ T522] cache 42684416 [ 2156.857090][ T522] rss 65536 [ 2156.857094][ T522] rss_huge 0 [ 2156.857098][ T522] shmem 42684416 [ 2156.857102][ T522] mapped_file 0 [ 2156.857105][ T522] dirty 0 [ 2156.857109][ T522] writeback 0 [ 2156.857113][ T522] workingset_refault_anon 2276 [ 2156.857117][ T522] workingset_refault_file 46816 [ 2156.857121][ T522] swap 13385728 [ 2156.857125][ T522] swapcached 558501888 [ 2156.857129][ T522] pgpgin 1545503 [ 2156.857133][ T522] pgpgout 1545299 [ 2156.857137][ T522] pgfault 827489 [ 2156.857141][ T522] pgmajfault 2418 [ 2156.857144][ T522] inactive_anon 30613504 [ 2156.857148][ T522] active_anon 12156928 [ 2156.857152][ T522] inactive_file 0 [ 2156.857156][ T522] active_file 0 [ 2156.857160][ T522] unevictable 0 [ 2156.857164][ T522] hierarchical_memory_limit 50331648 [ 2156.857168][ T522] hierarchical_memsw_limit 9223372036854771712 [ 2156.857172][ T522] total_cache 42684416 [ 2156.857176][ T522] total_rss 65536 [ 2156.857180][ T522] total_rss_huge 0 [ 2156.857184][ T522] total_shmem 42684416 [ 2156.857188][ T522] total_mapped_file 0 [ 2156.857191][ T522] total_dirty 0 [ 2156.857195][ T522] total_writeback 0 [ 2156.857199][ T522] total_workingset_refault_anon 2276 [ 2156.857203][ T522] total_workingset_refault_file 46816 [ 2156.857207][ T522] total_swap 13385728 [ 2156.857211][ T522] total_swapcached 558501888 [ 2156.857215][ T522] total_pgpgin 1545796 [ 2156.857219][ T522] total_pgpgout 1545592 [ 2156.857223][ T522] total_pgfault 827672 [ 2156.857227][ T522] total_pgmajfault 2418 [ 2156.857231][ T522] total_inactive_anon 30613504 [ 2156.857235][ T522] total_active_anon 12156928 [ 2156.857239][ T522] total_inactive_file 0 [ 2156.857243][ T522] total_active_file 0 [ 2156.857247][ T522] total_unevictable 0 [ 2156.857251][ T522] anon_cost 0 [ 2156.857254][ T522] file_cost 0 [ 2156.857259][ T522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7799,pid=503,uid=0 [ 2156.857314][ T522] Memory cgroup out of memory: Killed process 503 (syz.1.7799) total-vm:104084kB, anon-rss:1184kB, file-rss:50440kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 2157.977291][ T492] syz.5.7798 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2157.977315][ T492] CPU: 1 UID: 0 PID: 492 Comm: syz.5.7798 Tainted: G L syzkaller #0 PREEMPT(full) [ 2157.977330][ T492] Tainted: [L]=SOFTLOCKUP [ 2157.977335][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2157.977342][ T492] Call Trace: [ 2157.977347][ T492] [ 2157.977355][ T492] dump_stack_lvl+0xe8/0x150 [ 2157.977376][ T492] dump_header+0xd3/0x4b0 [ 2157.977392][ T492] oom_kill_process+0x3ab/0x9e0 [ 2157.977412][ T492] out_of_memory+0x1064/0x1480 [ 2157.977426][ T492] ? try_charge_memcg+0xc32/0x15e0 [ 2157.977448][ T492] ? __pfx_out_of_memory+0x10/0x10 [ 2157.977461][ T492] ? do_raw_spin_unlock+0xf5/0x200 [ 2157.977482][ T492] try_charge_memcg+0xcdf/0x15e0 [ 2157.977507][ T492] ? __pfx_try_charge_memcg+0x10/0x10 [ 2157.977532][ T492] ? charge_memcg+0x47/0x310 [ 2157.977548][ T492] charge_memcg+0x1dd/0x310 [ 2157.977563][ T492] __mem_cgroup_charge+0x25/0x80 [ 2157.977577][ T492] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2157.977594][ T492] ? filemap_get_entry+0xcd/0x3f0 [ 2157.977615][ T492] ? __pfx_filemap_get_entry+0x10/0x10 [ 2157.977630][ T492] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2157.977674][ T492] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2157.977694][ T492] shmem_get_folio_gfp+0x5da/0x16d0 [ 2157.977718][ T492] shmem_write_begin+0x16c/0x330 [ 2157.977737][ T492] generic_perform_write+0x2d5/0x8f0 [ 2157.977756][ T492] ? __pfx_generic_perform_write+0x10/0x10 [ 2157.977766][ T492] ? down_write+0x16b/0x200 [ 2157.977780][ T492] ? generic_write_checks_count+0x41a/0x520 [ 2157.977797][ T492] ? file_update_time_flags+0x2d5/0x440 [ 2157.977813][ T492] shmem_file_write_iter+0xf8/0x120 [ 2157.977831][ T492] __kernel_write_iter+0x44a/0x8f0 [ 2157.977845][ T492] ? __pfx___kernel_write_iter+0x10/0x10 [ 2157.977856][ T492] ? get_dump_page+0x1e6/0x410 [ 2157.977875][ T492] ? __asan_memset+0x22/0x50 [ 2157.977887][ T492] ? iov_iter_bvec+0xb8/0x180 [ 2157.977904][ T492] dump_user_range+0xc19/0x12c0 [ 2157.977929][ T492] ? __pfx_dump_user_range+0x10/0x10 [ 2157.977947][ T492] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2157.977961][ T492] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2157.977975][ T492] ? elf_core_dump+0x2ccb/0x4050 [ 2157.977995][ T492] elf_core_dump+0x387b/0x4050 [ 2157.978022][ T492] ? __pfx_elf_core_dump+0x10/0x10 [ 2157.978037][ T492] ? coredump_write+0x394/0x1960 [ 2157.978052][ T492] ? irqentry_exit+0x2c0/0x920 [ 2157.978063][ T492] ? asm_exc_page_fault+0x26/0x30 [ 2157.978079][ T492] ? mas_ascend+0x2f9/0x8b0 [ 2157.978097][ T492] ? __lock_acquire+0x747/0x2de0 [ 2157.978124][ T492] ? lock_acquire+0x115/0x350 [ 2157.978148][ T492] coredump_write+0x1290/0x1960 [ 2157.978172][ T492] ? __pfx_coredump_write+0x10/0x10 [ 2157.978206][ T492] ? unshare_files+0xab/0x140 [ 2157.978233][ T492] vfs_coredump+0x3764/0x4520 [ 2157.978279][ T492] ? __pfx_vfs_coredump+0x10/0x10 [ 2157.978297][ T492] ? is_bpf_text_address+0x26/0x2b0 [ 2157.978315][ T492] ? __lock_acquire+0x747/0x2de0 [ 2157.978331][ T492] ? __lock_acquire+0x747/0x2de0 [ 2157.978351][ T492] ? lock_acquire+0x115/0x350 [ 2157.978367][ T492] ? lock_acquire+0x115/0x350 [ 2157.978383][ T492] ? is_bpf_text_address+0x26/0x2b0 [ 2157.978400][ T492] ? is_bpf_text_address+0x292/0x2b0 [ 2157.978413][ T492] ? is_bpf_text_address+0x26/0x2b0 [ 2157.978428][ T492] ? kernel_text_address+0xa5/0xe0 [ 2157.978441][ T492] ? __kernel_text_address+0xd/0x30 [ 2157.978453][ T492] ? unwind_get_return_address+0x4d/0x90 [ 2157.978466][ T492] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2157.978478][ T492] ? arch_stack_walk+0xfb/0x150 [ 2157.978498][ T492] ? stack_trace_save+0xa9/0x100 [ 2157.978509][ T492] ? __pfx_stack_trace_save+0x10/0x10 [ 2157.978521][ T492] ? stack_depot_save_flags+0x33/0x7f0 [ 2157.978535][ T492] ? __lock_acquire+0x6c0/0x2de0 [ 2157.978549][ T492] ? kasan_save_track+0x4f/0x80 [ 2157.978562][ T492] ? kasan_save_track+0x3e/0x80 [ 2157.978573][ T492] ? kasan_save_free_info+0x40/0x50 [ 2157.978583][ T492] ? __kasan_slab_free+0x5c/0x80 [ 2157.978595][ T492] ? kmem_cache_free+0x182/0x650 [ 2157.978607][ T492] ? get_signal+0x9e7/0x12c0 [ 2157.978620][ T492] ? arch_do_signal_or_restart+0xbb/0x860 [ 2157.978635][ T492] ? irqentry_exit+0x2c0/0x920 [ 2157.978652][ T492] ? asm_exc_page_fault+0x26/0x30 [ 2157.978685][ T492] ? proc_coredump_connector+0x187/0x4e0 [ 2157.978707][ T492] ? _raw_spin_unlock_irq+0x23/0x50 [ 2157.978720][ T492] get_signal+0x1094/0x12c0 [ 2157.978745][ T492] arch_do_signal_or_restart+0xbb/0x860 [ 2157.978763][ T492] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2157.978790][ T492] irqentry_exit+0x2c0/0x920 [ 2157.978802][ T492] ? trace_irq_disable+0x3b/0x140 [ 2157.978818][ T492] asm_exc_page_fault+0x26/0x30 [ 2157.978829][ T492] RIP: 0023:0x0 [ 2157.978839][ T492] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2157.978845][ T492] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2157.978856][ T492] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2157.978864][ T492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2157.978870][ T492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2157.978877][ T492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2157.978883][ T492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2157.978900][ T492] [ 2158.244329][ T492] memory: usage 49152kB, limit 49152kB, failcnt 93654 [ 2158.244361][ T492] memory+swap: usage 83144kB, limit 9007199254740988kB, failcnt 0 [ 2158.244376][ T492] kmem: usage 4816kB, limit 9007199254740988kB, failcnt 0 [ 2158.244389][ T492] Memory cgroup stats for /syz5: [ 2158.302199][ T492] cache 45395968 [ 2158.302210][ T492] rss 0 [ 2158.302214][ T492] rss_huge 0 [ 2158.302218][ T492] shmem 45395968 [ 2158.341307][ T492] mapped_file 0 [ 2158.341317][ T492] dirty 0 [ 2158.341321][ T492] writeback 0 [ 2158.341325][ T492] workingset_refault_anon 354 [ 2158.341329][ T492] workingset_refault_file 28950 [ 2158.341334][ T492] swap 34807808 [ 2158.341337][ T492] swapcached 364433408 [ 2158.341342][ T492] pgpgin 638111 [ 2158.341345][ T492] pgpgout 628560 [ 2158.341349][ T492] pgfault 455960 [ 2158.341353][ T492] pgmajfault 523 [ 2158.341357][ T492] inactive_anon 16379904 [ 2158.341361][ T492] active_anon 29020160 [ 2158.341365][ T492] inactive_file 0 [ 2158.341369][ T492] active_file 0 [ 2158.341372][ T492] unevictable 0 [ 2158.341376][ T492] hierarchical_memory_limit 50331648 [ 2158.341381][ T492] hierarchical_memsw_limit 9223372036854771712 [ 2158.341385][ T492] total_cache 45395968 [ 2158.341389][ T492] total_rss 0 [ 2158.341393][ T492] total_rss_huge 0 [ 2158.364153][ T492] total_shmem 45395968 [ 2158.364176][ T492] total_mapped_file 0 [ 2158.364184][ T492] total_dirty 0 [ 2158.364192][ T492] total_writeback 0 [ 2158.364199][ T492] total_workingset_refault_anon 354 [ 2158.364208][ T492] total_workingset_refault_file 28950 [ 2158.364217][ T492] total_swap 34807808 [ 2158.364225][ T492] total_swapcached 364433408 [ 2158.364232][ T492] total_pgpgin 638111 [ 2158.364240][ T492] total_pgpgout 628560 [ 2158.376438][ T492] total_pgfault 455960 [ 2158.376449][ T492] total_pgmajfault 523 [ 2158.376457][ T492] total_inactive_anon 16379904 [ 2158.376466][ T492] total_active_anon 29020160 [ 2158.376474][ T492] total_inactive_file 0 [ 2158.376481][ T492] total_active_file 0 [ 2158.376489][ T492] total_unevictable 0 [ 2158.376499][ T492] anon_cost 0 [ 2158.408063][ T34] oom_reaper: reaped process 421 (syz.4.7781), now anon-rss:0kB, file-rss:5632kB, shmem-rss:0kB [ 2158.412752][ T492] file_cost 0 [ 2158.412761][ T492] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7798,pid=492,uid=0 [ 2158.412826][ T492] Memory cgroup out of memory: Killed process 492 (syz.5.7798) total-vm:104096kB, anon-rss:1144kB, file-rss:43464kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 2159.127286][ T34] oom_reaper: reaped process 391 (syz.5.7777), now anon-rss:0kB, file-rss:34016kB, shmem-rss:0kB [ 2159.156868][ T34] oom_reaper: reaped process 503 (syz.1.7799), now anon-rss:0kB, file-rss:50432kB, shmem-rss:0kB [ 2160.274428][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.274492][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.805468][ T520] syz.5.7801 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2162.805496][ T520] CPU: 1 UID: 0 PID: 520 Comm: syz.5.7801 Tainted: G L syzkaller #0 PREEMPT(full) [ 2162.805523][ T520] Tainted: [L]=SOFTLOCKUP [ 2162.805530][ T520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2162.805537][ T520] Call Trace: [ 2162.805542][ T520] [ 2162.805548][ T520] dump_stack_lvl+0xe8/0x150 [ 2162.805568][ T520] dump_header+0xd3/0x4b0 [ 2162.805585][ T520] oom_kill_process+0x3ab/0x9e0 [ 2162.805605][ T520] out_of_memory+0x1064/0x1480 [ 2162.805621][ T520] ? try_charge_memcg+0xc32/0x15e0 [ 2162.805643][ T520] ? __pfx_out_of_memory+0x10/0x10 [ 2162.805657][ T520] ? do_raw_spin_unlock+0xf5/0x200 [ 2162.805679][ T520] try_charge_memcg+0xcdf/0x15e0 [ 2162.805704][ T520] ? __pfx_try_charge_memcg+0x10/0x10 [ 2162.805729][ T520] ? charge_memcg+0x47/0x310 [ 2162.805745][ T520] charge_memcg+0x1dd/0x310 [ 2162.805760][ T520] __mem_cgroup_charge+0x25/0x80 [ 2162.805775][ T520] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 2162.805791][ T520] ? filemap_get_entry+0xcd/0x3f0 [ 2162.805812][ T520] ? __pfx_filemap_get_entry+0x10/0x10 [ 2162.805828][ T520] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2162.805846][ T520] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 2162.805865][ T520] shmem_get_folio_gfp+0x5da/0x16d0 [ 2162.805890][ T520] shmem_write_begin+0x16c/0x330 [ 2162.805909][ T520] generic_perform_write+0x2d5/0x8f0 [ 2162.805928][ T520] ? __pfx_generic_perform_write+0x10/0x10 [ 2162.805938][ T520] ? down_write+0x16b/0x200 [ 2162.805953][ T520] ? generic_write_checks_count+0x41a/0x520 [ 2162.805984][ T520] ? file_update_time_flags+0x2d5/0x440 [ 2162.806000][ T520] shmem_file_write_iter+0xf8/0x120 [ 2162.806018][ T520] __kernel_write_iter+0x44a/0x8f0 [ 2162.806034][ T520] ? __pfx___kernel_write_iter+0x10/0x10 [ 2162.806044][ T520] ? get_dump_page+0x1e6/0x410 [ 2162.806063][ T520] ? __asan_memset+0x22/0x50 [ 2162.806075][ T520] ? iov_iter_bvec+0xb8/0x180 [ 2162.806093][ T520] dump_user_range+0xc19/0x12c0 [ 2162.806124][ T520] ? __pfx_dump_user_range+0x10/0x10 [ 2162.806143][ T520] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 2162.806157][ T520] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 2162.806171][ T520] ? elf_core_dump+0x2ccb/0x4050 [ 2162.806190][ T520] elf_core_dump+0x387b/0x4050 [ 2162.806216][ T520] ? __pfx_elf_core_dump+0x10/0x10 [ 2162.806231][ T520] ? coredump_write+0x394/0x1960 [ 2162.806246][ T520] ? irqentry_exit+0x2c0/0x920 [ 2162.806257][ T520] ? asm_exc_page_fault+0x26/0x30 [ 2162.806274][ T520] ? mas_ascend+0x2f9/0x8b0 [ 2162.806291][ T520] ? __lock_acquire+0x747/0x2de0 [ 2162.806318][ T520] ? lock_acquire+0x115/0x350 [ 2162.806339][ T520] coredump_write+0x1290/0x1960 [ 2162.806362][ T520] ? __pfx_coredump_write+0x10/0x10 [ 2162.806387][ T520] ? unshare_files+0xab/0x140 [ 2162.806405][ T520] vfs_coredump+0x3764/0x4520 [ 2162.806431][ T520] ? __pfx_vfs_coredump+0x10/0x10 [ 2162.806447][ T520] ? is_bpf_text_address+0x26/0x2b0 [ 2162.806465][ T520] ? __lock_acquire+0x747/0x2de0 [ 2162.806481][ T520] ? __lock_acquire+0x747/0x2de0 [ 2162.806494][ T520] ? __lock_acquire+0x747/0x2de0 [ 2162.806512][ T520] ? __lock_acquire+0x747/0x2de0 [ 2162.806530][ T520] ? lock_acquire+0x115/0x350 [ 2162.806546][ T520] ? ktime_get+0x45/0x220 [ 2162.806559][ T520] ? ktime_get+0x45/0x220 [ 2162.806570][ T520] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 2162.806583][ T520] ? ktime_get+0x1f5/0x220 [ 2162.806595][ T520] ? lapic_next_event+0x11/0x20 [ 2162.806607][ T520] ? clockevents_program_event+0x491/0x630 [ 2162.806624][ T520] ? __pfx_clockevents_program_event+0x10/0x10 [ 2162.806638][ T520] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 2162.806662][ T520] ? finish_task_switch+0x40e/0xc60 [ 2162.806676][ T520] ? lockdep_hardirqs_on+0x7b/0x110 [ 2162.806689][ T520] ? rcu_is_watching+0x16/0xb0 [ 2162.806703][ T520] ? trace_sched_exit_tp+0x3a/0x130 [ 2162.806717][ T520] ? __schedule+0x17f1/0x58f0 [ 2162.806750][ T520] ? proc_coredump_connector+0x187/0x4e0 [ 2162.806769][ T520] ? preempt_schedule_thunk+0x16/0x40 [ 2162.806786][ T520] get_signal+0x1094/0x12c0 [ 2162.806811][ T520] arch_do_signal_or_restart+0xbb/0x860 [ 2162.806829][ T520] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2162.806856][ T520] irqentry_exit+0x2c0/0x920 [ 2162.806867][ T520] ? trace_irq_disable+0x3b/0x140 [ 2162.806883][ T520] asm_exc_page_fault+0x26/0x30 [ 2162.806894][ T520] RIP: 0023:0x0 [ 2162.806904][ T520] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2162.806910][ T520] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 2162.806920][ T520] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000000 [ 2162.806928][ T520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2162.806934][ T520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2162.806941][ T520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2162.806948][ T520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2162.806965][ T520] [ 2162.806969][ T520] memory: usage 49152kB, limit 49152kB, failcnt 101245 [ 2162.806977][ T520] memory+swap: usage 72044kB, limit 9007199254740988kB, failcnt 0 [ 2162.806985][ T520] kmem: usage 4376kB, limit 9007199254740988kB, failcnt 0 [ 2162.806991][ T520] Memory cgroup stats for /syz5: [ 2162.807065][ T520] cache 45805568 [ 2162.807070][ T520] rss 40960 [ 2162.807074][ T520] rss_huge 0 [ 2162.807078][ T520] shmem 45805568 [ 2162.807082][ T520] mapped_file 0 [ 2162.807086][ T520] dirty 0 [ 2162.807090][ T520] writeback 0 [ 2162.807094][ T520] workingset_refault_anon 365 [ 2162.807098][ T520] workingset_refault_file 31478 [ 2162.807102][ T520] swap 23441408 [ 2162.807111][ T520] swapcached 384745472 [ 2162.807115][ T520] pgpgin 654289 [ 2162.807118][ T520] pgpgout 644628 [ 2162.807123][ T520] pgfault 456504 [ 2162.807127][ T520] pgmajfault 536 [ 2162.807130][ T520] inactive_anon 25329664 [ 2162.807134][ T520] active_anon 20520960 [ 2162.807139][ T520] inactive_file 0 [ 2162.807143][ T520] active_file 0 [ 2162.807147][ T520] unevictable 0 [ 2162.807150][ T520] hierarchical_memory_limit 50331648 [ 2162.807155][ T520] hierarchical_memsw_limit 9223372036854771712 [ 2162.807160][ T520] total_cache 45805568 [ 2162.807164][ T520] total_rss 40960 [ 2162.807168][ T520] total_rss_huge 0 [ 2162.807172][ T520] total_shmem 45805568 [ 2162.807176][ T520] total_mapped_file 0 [ 2162.807180][ T520] total_dirty 0 [ 2162.807184][ T520] total_writeback 0 [ 2162.807188][ T520] total_workingset_refault_anon 365 [ 2162.807192][ T520] total_workingset_refault_file 31478 [ 2162.807196][ T520] total_swap 23441408 [ 2162.807200][ T520] total_swapcached 384745472 [ 2162.807204][ T520] total_pgpgin 654289 [ 2162.807209][ T520] total_pgpgout 644628 [ 2162.807213][ T520] total_pgfault 456504 [ 2162.807217][ T520] total_pgmajfault 536 [ 2162.807221][ T520] total_inactive_anon 25329664 [ 2162.807225][ T520] total_active_anon 20520960 [ 2162.807229][ T520] total_inactive_file 0 [ 2162.807233][ T520] total_active_file 0 [ 2162.807237][ T520] total_unevictable 0 [ 2162.807241][ T520] anon_cost 0 [ 2162.807245][ T520] file_cost 0 [ 2162.807249][ T520] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7801,pid=520,uid=0 [ 2162.807305][ T520] Memory cgroup out of memory: Killed process 520 (syz.5.7801) total-vm:104096kB, anon-rss:1180kB, file-rss:56864kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 2221.685182][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.685242][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.125290][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.125351][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2302.325007][ T33] INFO: task kworker/0:7:13361 blocked for more than 143 seconds. [ 2302.325037][ T33] Tainted: G L syzkaller #0 [ 2302.325048][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2302.325057][ T33] task:kworker/0:7 state:D stack:22792 pid:13361 tgid:13361 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2302.325110][ T33] Workqueue: usb_hub_wq hub_event [ 2302.325142][ T33] Call Trace: [ 2302.325150][ T33] [ 2302.325164][ T33] __schedule+0x17db/0x58f0 [ 2302.325215][ T33] ? __pfx___schedule+0x10/0x10 [ 2302.325246][ T33] ? schedule+0x90/0x2b0 [ 2302.325270][ T33] schedule+0x164/0x2b0 [ 2302.325304][ T33] usb_kill_urb+0x1cf/0x2f0 [ 2302.325330][ T33] ? __pfx_usb_kill_urb+0x10/0x10 [ 2302.325352][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2302.325389][ T33] usb_start_wait_urb+0x22a/0x5b0 [ 2302.325419][ T33] ? rcu_is_watching+0x16/0xb0 [ 2302.325443][ T33] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2302.325487][ T33] usb_control_msg+0x234/0x3e0 [ 2302.325518][ T33] hub_port_init+0x1266/0x28c0 [ 2302.325564][ T33] hub_event+0x24e8/0x4d30 [ 2302.325591][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 2302.325666][ T33] ? __pfx_hub_event+0x10/0x10 [ 2302.325699][ T33] ? rcu_is_watching+0x16/0xb0 [ 2302.325724][ T33] ? process_scheduled_works+0x97a/0x1630 [ 2302.325752][ T33] process_scheduled_works+0xc3d/0x1630 [ 2302.325801][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 2302.325832][ T33] ? assign_work+0x3cf/0x5d0 [ 2302.325861][ T33] worker_thread+0xa47/0xfb0 [ 2302.325918][ T33] kthread+0x38b/0x480 [ 2302.325939][ T33] ? __pfx_worker_thread+0x10/0x10 [ 2302.325965][ T33] ? __pfx_kthread+0x10/0x10 [ 2302.325988][ T33] ret_from_fork+0x514/0xb70 [ 2302.326012][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 2302.326031][ T33] ? load_gs_index+0x97/0xc0 [ 2302.326058][ T33] ? __switch_to+0xc89/0x1420 [ 2302.326089][ T33] ? __pfx_kthread+0x10/0x10 [ 2302.326112][ T33] ret_from_fork_asm+0x1a/0x30 [ 2302.326150][ T33] [ 2302.326221][ T33] [ 2302.326221][ T33] Showing all locks held in the system: [ 2302.326234][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 2302.326250][ T33] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2302.326641][ T33] locks held by getty/5376: 2, on CPU#1: [ 2302.326657][ T33] #0: ffff8880364610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2302.326711][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2302.326775][ T33] locks held by kworker/0:7/13361: 5, on CPU#0: [ 2302.326788][ T33] #0: ffff888021ac9940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2302.326837][ T33] #1: ffffc900035efc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2302.326893][ T33] #2: ffff88802d3391d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2302.326949][ T33] #3: ffff88802d33d568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 2302.327005][ T33] #4: ffff88802d22f560 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 2302.327067][ T33] locks held by kworker/u8:5/30452: 2, last CPU#1: [ 2302.327083][ T33] #0: ffff88802a28a940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2302.327137][ T33] #1: ffffc9000f187c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2302.327204][ T33] [ 2302.327210][ T33] ============================================= [ 2302.327210][ T33] [ 2302.327224][ T33] NMI backtrace for cpu 0 [ 2302.327239][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2302.327265][ T33] Tainted: [L]=SOFTLOCKUP [ 2302.327273][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2302.327293][ T33] Call Trace: [ 2302.327301][ T33] [ 2302.327310][ T33] dump_stack_lvl+0xe8/0x150 [ 2302.327340][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 2302.327369][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2302.327404][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 2302.327436][ T33] sys_info+0x135/0x170 [ 2302.327462][ T33] watchdog+0xfd7/0x1030 [ 2302.327491][ T33] ? watchdog+0x1c7/0x1030 [ 2302.327520][ T33] kthread+0x38b/0x480 [ 2302.327541][ T33] ? __pfx_watchdog+0x10/0x10 [ 2302.327561][ T33] ? __pfx_kthread+0x10/0x10 [ 2302.327583][ T33] ret_from_fork+0x514/0xb70 [ 2302.327610][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 2302.327631][ T33] ? __switch_to+0xc89/0x1420 [ 2302.327661][ T33] ? __pfx_kthread+0x10/0x10 [ 2302.327683][ T33] ret_from_fork_asm+0x1a/0x30 [ 2302.327722][ T33] [ 2302.327729][ T33] Sending NMI from CPU 0 to CPUs 1: [ 2302.327835][ C1] NMI backtrace for cpu 1 [ 2302.327851][ C1] CPU: 1 UID: 0 PID: 30452 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 2302.327876][ C1] Tainted: [L]=SOFTLOCKUP [ 2302.327883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2302.327895][ C1] Workqueue: bat_events batadv_dat_purge [ 2302.327921][ C1] RIP: 0010:__lock_acquire+0x5bb/0x2de0 [ 2302.327943][ C1] Code: 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c5 00 00 00 49 83 ff 31 0f 83 84 00 00 00 48 8b 03 25 ff 1f 00 00 48 0f a3 05 65 55 f8 13 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 d0 c4 3c 95 eb 32 83 3d 2c e5 [ 2302.327960][ C1] RSP: 0018:ffffc9000f187878 EFLAGS: 00000007 [ 2302.327975][ C1] RAX: 0000000000000782 RBX: ffff88807f086990 RCX: 00000000ffffffff [ 2302.327989][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 6000000000000000 [ 2302.328002][ C1] RBP: ffff88807f0869c0 R08: ffffffff8bb102b0 R09: 0000000000000000 [ 2302.328018][ C1] R10: dffffc0000000000 R11: fffffbfff22f4e70 R12: ffffffffffffff05 [ 2302.328032][ C1] R13: 0000000000000000 R14: ffff88807f085dc0 R15: 0000000000000000 [ 2302.328045][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 2302.328060][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2302.328073][ C1] CR2: 000055929315b168 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 2302.328090][ C1] Call Trace: [ 2302.328098][ C1] [ 2302.328106][ C1] ? register_lock_class+0x31/0x2e0 [ 2302.328127][ C1] ? __lock_acquire+0x747/0x2de0 [ 2302.328151][ C1] lock_acquire+0x115/0x350 [ 2302.328169][ C1] ? batadv_dat_purge+0xf0/0x3c0 [ 2302.328194][ C1] ? batadv_dat_purge+0x2d7/0x3c0 [ 2302.328226][ C1] ? batadv_dat_purge+0xf0/0x3c0 [ 2302.328248][ C1] _raw_spin_lock_bh+0x36/0x50 [ 2302.328265][ C1] ? batadv_dat_purge+0xf0/0x3c0 [ 2302.328336][ C1] batadv_dat_purge+0xf0/0x3c0 [ 2302.328388][ C1] ? process_scheduled_works+0x97a/0x1630 [ 2302.328413][ C1] process_scheduled_works+0xc3d/0x1630 [ 2302.328448][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2302.328473][ C1] ? assign_work+0x3cf/0x5d0 [ 2302.328497][ C1] worker_thread+0xa47/0xfb0 [ 2302.328525][ C1] ? __kthread_parkme+0x71/0x1f0 [ 2302.328553][ C1] kthread+0x38b/0x480 [ 2302.328570][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2302.328593][ C1] ? __pfx_kthread+0x10/0x10 [ 2302.328610][ C1] ret_from_fork+0x514/0xb70 [ 2302.328629][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2302.328646][ C1] ? __switch_to+0xc89/0x1420 [ 2302.328670][ C1] ? __pfx_kthread+0x10/0x10 [ 2302.328688][ C1] ret_from_fork_asm+0x1a/0x30 [ 2302.328710][ C1] [ 2302.328795][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 2303.042399][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2303.053064][ T33] Tainted: [L]=SOFTLOCKUP [ 2303.057381][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2303.067428][ T33] Call Trace: [ 2303.070696][ T33] [ 2303.073667][ T33] vpanic+0x56d/0xa60 [ 2303.077661][ T33] ? __pfx___schedule+0x10/0x10 [ 2303.082503][ T33] ? __pfx_vpanic+0x10/0x10 [ 2303.087004][ T33] panic+0xc5/0xd0 [ 2303.090719][ T33] ? __pfx_panic+0x10/0x10 [ 2303.095119][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 2303.100558][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 2303.105912][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 2303.112062][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 2303.118214][ T33] watchdog+0x1030/0x1030 [ 2303.122555][ T33] ? watchdog+0x1c7/0x1030 [ 2303.126965][ T33] kthread+0x38b/0x480 [ 2303.131022][ T33] ? __pfx_watchdog+0x10/0x10 [ 2303.135689][ T33] ? __pfx_kthread+0x10/0x10 [ 2303.140288][ T33] ret_from_fork+0x514/0xb70 [ 2303.144877][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 2303.149970][ T33] ? __switch_to+0xc89/0x1420 [ 2303.154641][ T33] ? __pfx_kthread+0x10/0x10 [ 2303.159215][ T33] ret_from_fork_asm+0x1a/0x30 [ 2303.163970][ T33] [ 2303.167135][ T33] Kernel Offset: disabled [ 2303.171449][ T33] Rebooting in 86400 seconds..